{
  "resultsPerPage" : 17031,
  "startIndex" : 0,
  "totalResults" : 17031,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2026-05-07T03:00:01.2551958",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2026-0544",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-01T09:15:51.113",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en itsourcecode School Management System 1.0. Esto afecta una parte desconocida del archivo /student/index.php. La manipulación del argumento ID resulta en inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/31",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.728909",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21428",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-01T18:15:41.057",
      "lastModified" : "2026-01-06T18:20:44.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_headers`` function does not check for CR & LF characters in user supplied headers, allowing untrusted header value to escape header lines.\nThis vulnerability allows attackers to add extra headers, modify request body unexpectedly & trigger an SSRF attack. When combined with a server that supports http1.1 pipelining (springboot, python twisted etc), this can be used for server side request forgery (SSRF). Version 0.30.0 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "cpp-httplib es una biblioteca HTTP/HTTPS multiplataforma de un solo archivo de cabecera C++11. Antes de la versión 0.30.0, la función 'write_headers' no verifica la presencia de caracteres CR y LF en las cabeceras proporcionadas por el usuario, lo que permite que un valor de cabecera no confiable escape las líneas de cabecera. Esta vulnerabilidad permite a los atacantes añadir cabeceras adicionales, modificar el cuerpo de la solicitud de forma inesperada y desencadenar un ataque SSRF. Cuando se combina con un servidor que soporta el pipelining de http1.1 (springboot, python twisted, etc.), esto puede utilizarse para la falsificación de solicitudes del lado del servidor (SSRF). La versión 0.30.0 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yhirose:cpp-httplib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.30.0",
            "matchCriteriaId" : "884C94CD-B632-4081-9141-BB0FBFE2516E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yhirose/cpp-httplib/commit/98048a033a532ff22320ce1d11789f8d5710dfcd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/releases/tag/v0.30.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-wpc6-j37r-jcx7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21436",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-01T18:15:41.203",
      "lastModified" : "2026-03-04T21:33:14.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given by `--destdir`, but on a different location on the host. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected."
      }, {
        "lang" : "es",
        "value" : "eopkg es un gestor de paquetes de Solus implementado en python3. En versiones anteriores a la 4.4.0, un paquete malicioso podría escapar del directorio establecido por `--destdir`. Esto requiere la instalación de un paquete de una fuente maliciosa o comprometida. Los archivos en dichos paquetes no se instalarían en la ruta especificada por `--destdir`, sino en una ubicación diferente en el host. El problema ha sido solucionado en la v4.4.0. Los usuarios que solo instalan paquetes de los repositorios de Solus no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsol:eopkg:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "1E0EA986-0572-494D-A971-C2071C7E153A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getsolus/eopkg/commit/e7694323ed64e08b5b4b108fff273c64125cd39d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getsolus/eopkg/pull/201",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/getsolus/eopkg/releases/tag/v4.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/getsolus/eopkg/security/advisories/GHSA-786v-47cq-qm6m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21437",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-01T18:15:41.347",
      "lastModified" : "2026-03-04T21:31:50.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by `lseopkg` and related tools. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected."
      }, {
        "lang" : "es",
        "value" : "eopkg es un gestor de paquetes de Solus implementado en python3. En versiones anteriores a la 4.4.0, un paquete malicioso podría incluir archivos que no son rastreados por 'eopkg'. Esto requiere la instalación de un paquete de una fuente maliciosa o comprometida. Los archivos en dichos paquetes no serían mostrados por 'lseopkg' y herramientas relacionadas. El problema ha sido solucionado en la v4.4.0. Los usuarios que solo instalan paquetes de los repositorios de Solus no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-353"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsol:eopkg:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "1E0EA986-0572-494D-A971-C2071C7E153A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getsolus/eopkg/commit/e7694323ed64e08b5b4b108fff273c64125cd39d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getsolus/eopkg/pull/201",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/getsolus/eopkg/releases/tag/v4.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/getsolus/eopkg/security/advisories/GHSA-hjp7-qwrj-6cc6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0546",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T09:15:42.917",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:content_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CCDB18-7E64-4F10-9D59-7781D4806075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gtxy114514/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.728924",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0547",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T10:15:41.510",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en PHPGurukul Online Course Registration hasta la versión 3.1. Este problema afecta a algún procesamiento desconocido del archivo /admin/edit-student-profile.php del componente Página de Registro de Estudiantes. La manipulación del argumento photo resulta en carga sin restricciones. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:online_course_registration:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "C1AC601F-C851-49CE-B60E-B8A662293ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rsecroot/Online-Course-Registration/blob/main/Cross%20Site%20Scripting.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339355",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339355",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.728988",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0565",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T14:15:52.880",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el Sistema de Gestión de Contenidos 1.0 de code-projects. Este problema afecta a un procesamiento desconocido del archivo /admin/delete.PHP. La ejecución de la manipulación del argumento del puede llevar a una inyección SQL. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:content_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CCDB18-7E64-4F10-9D59-7781D4806075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/12",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0566",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T17:16:25.263",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/edit_posts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en el Sistema de Gestión de Contenidos 1.0 de code-projects. Afectada es una función desconocida del archivo /admin/edit_posts.php. La manipulación del argumento image conduce a una carga sin restricciones. El ataque es posible de ser llevado a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:content_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CCDB18-7E64-4F10-9D59-7781D4806075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729228",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0567",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T18:15:54.747",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en code-projects Content Management System 1.0. El elemento afectado es una función desconocida del archivo /pages.php. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser realizado desde remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:content_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02CCDB18-7E64-4F10-9D59-7781D4806075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729229",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0568",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T18:15:54.943",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en code-projects Online Music Site 1.0. El elemento afectado es una función desconocida del archivo /Frontend/ViewSongs.PHP. Esta manipulación del argumento ID causa inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/15",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339380",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339380",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729251",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21429",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T18:15:55.110",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Emlog es un sistema de creación de sitios web de código abierto. En la versión 2.5.23, el administrador puede establecer controles que impiden a los usuarios editar o eliminar sus artículos después de publicarlos. En el momento de la publicación, no se conocen versiones parcheadas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:2.5.23:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "CBBD3D75-C2B3-4727-9B9E-6408956E4ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-jw5v-2g53-rx8w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0569",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T19:15:47.260",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en code-projects Online Music Site 1.0. Esto afecta una función desconocida del archivo /Frontend/AlbumByCategory.php. Tal manipulación del argumento ID lleva a inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729252",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/16",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0570",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T19:15:47.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulation of the argument fname results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en code-projects Online Music Site 1.0. Esto afecta una función desconocida del archivo /Frontend/Feedback.PHP. Realizar la manipulación del argumento fname resulta en inyección SQL. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Limingqian123/CVE/issues/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729253",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21430",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T19:15:47.697",
      "lastModified" : "2026-01-16T19:07:18.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery (CSRF). This can lead to a user being forced to post an article with arbitrary, attacker-controlled content. This, when combined with stored cross-site scripting, leads to account takeover. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Emlog es un sistema de creación de sitios web de código abierto. En la versión 2.5.23, la funcionalidad de creación de artículos es vulnerable a falsificación de petición en sitios cruzados (CSRF). Esto puede llevar a que un usuario sea forzado a publicar un artículo con contenido arbitrario, controlado por el atacante. Esto, cuando se combina con cross-site scripting almacenado, lleva a la toma de control de la cuenta. A partir del momento de la publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:2.5.23:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "CBBD3D75-C2B3-4727-9B9E-6408956E4ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-2g2w-vmg7-pq4q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21431",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T19:15:47.857",
      "lastModified" : "2026-01-16T17:13:01.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while publishing an article. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Emlog es un sistema de creación de sitios web de código abierto. La versión 2.5.23 tiene una vulnerabilidad de cross-site scripting almacenado en la función 'Resource media library' al publicar un artículo. Al momento de la publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:2.5.23:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "CBBD3D75-C2B3-4727-9B9E-6408956E4ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-9vc2-crhr-248x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21432",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T19:15:48.020",
      "lastModified" : "2026-01-16T17:13:09.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Emlog es un sistema de creación de sitios web de código abierto. La versión 2.5.23 tiene una vulnerabilidad de cross-site scripting almacenado que puede llevar a la toma de control de cuentas, incluyendo la toma de control de cuentas de administrador. A la fecha de publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:2.5.23:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "CBBD3D75-C2B3-4727-9B9E-6408956E4ADB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-4rxf-mjqx-c464",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21433",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T19:15:48.187",
      "lastModified" : "2026-01-16T18:11:24.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-of-Band (OOB) requests / SSRF via uploaded SVG files. An attacker can upload a crafted SVG to http[:]//emblog/admin/media[.]php which contains external resource references. When the server processes/renders the SVG (thumbnailing, preview, or sanitization), it issues an HTTP request to the attacker-controlled host. Impact: server-side SSRF/OOB leading to internal network probing and potential metadata/credential exposure. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Emlog es un sistema de construcción de sitios web de código abierto. Las versiones hasta la 2.5.19 inclusive son vulnerables a solicitudes fuera de banda (OOB) del lado del servidor / SSRF a través de archivos SVG subidos. Un atacante puede subir un SVG manipulado a http[:]//emblog/admin/media[.]php que contiene referencias a recursos externos. Cuando el servidor procesa/renderiza el SVG (generación de miniaturas, vista previa o sanitización), emite una solicitud HTTP al host controlado por el atacante. Impacto: SSRF/OOB del lado del servidor que conduce a sondeo de red interna y posible exposición de metadatos/credenciales. En el momento de la publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "2.5.19",
            "matchCriteriaId" : "72E4E5DE-A4A2-4326-B8EE-71690D75F7AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-6rwr-c8hc-mjj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21440",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T19:15:48.607",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This impacts @adonisjs/bodyparser through version 10.1.1 and 11.x prerelease versions prior to 11.0.0-next.6. This issue has been patched in @adonisjs/bodyparser versions 10.1.2 and 11.0.0-next.6."
      }, {
        "lang" : "es",
        "value" : "AdonisJS es un web framework con prioridad en TypeScript. Una vulnerabilidad de salto de ruta en el manejo de archivos multipart de AdonisJS puede permitir a un atacante remoto escribir archivos arbitrarios en ubicaciones arbitrarias en el sistema de archivos del servidor. Esto afecta a @adonisjs/bodyparser hasta la versión 10.1.1 y a las versiones preliminares 11.x anteriores a la 11.0.0-next.6. Este problema ha sido parcheado en las versiones 10.1.2 y 11.0.0-next.6 de @adonisjs/bodyparser."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/adonisjs/bodyparser/commit/143a16f35602be8561215611582211dec280cae6",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/adonisjs/bodyparser/commit/6795c0e3fa824ae275bbd992aae60609e96f0f03",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/adonisjs/bodyparser/releases/tag/v10.1.2",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/adonisjs/bodyparser/releases/tag/v11.0.0-next.6",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/adonisjs/core/security/advisories/GHSA-gvq6-hvvp-h34h",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21444",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T19:15:48.763",
      "lastModified" : "2026-02-25T15:18:34.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "libtpms, una biblioteca que proporciona emulación de software de un Módulo de Plataforma Confiable, tiene un fallo en las versiones 0.10.0 y 0.10.1. La integración comúnmente utilizada de libtpms con OpenSSL 3.x contenía una vulnerabilidad relacionada con el IV (vector de inicialización) devuelto cuando se utilizaban ciertos cifrados simétricos. En lugar de devolver el último IV, devolvía el IV inicial al llamador, debilitando así los pasos subsiguientes de cifrado y descifrado. La mayor amenaza de esta vulnerabilidad es para la confidencialidad de los datos. La versión 0.10.2 corrige el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        }, {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.10.2",
            "matchCriteriaId" : "E714F6E7-EE9D-46ED-B5CF-52EDC67277A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/stefanberger/libtpms/issues/541",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0571",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-02T20:16:17.697",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\\src\\main\\java\\com\\yeqifu\\sys\\common\\AppFileUtils.java. The manipulation of the argument path results in path traversal. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en yeqifu warehouse hasta aaf29962ba407d22d991781de28796ee7b4670e4. Afectada por este problema es la función createResponseEntity del archivo warehouse\\src\\main\\java\\com\\yeqifu\\sys\\common\\AppFileUtils.java. La manipulación del argumento path resulta en salto de ruta. El ataque puede ser lanzado remotamente. El exploit ha sido publicado y puede ser usado para ataques. Este producto opera bajo un modelo de lanzamiento continuo, asegurando la entrega continua. Consecuentemente, no hay detalles de versión ni para las versiones afectadas ni para las actualizadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/5i1encee/Vul/blob/main/Arbitrary%20File%20Read%20Vulnerability%20in%20Project%20yeqifu%20warehouse.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/5i1encee/Vul/blob/main/Arbitrary%20File%20Read%20Vulnerability%20in%20Project%20yeqifu%20warehouse.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/5i1encee/Vul/blob/main/Arbitrary%20File%20Read%20Vulnerability%20in%20Project%20yeqifu%20warehouse.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21445",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T20:16:17.880",
      "lastModified" : "2026-01-16T18:32:17.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versión 1.7.0.dev45, múltiples puntos finales críticos de la API en Langflow carecen de controles de autenticación. El problema permite a cualquier usuario no autenticado acceder a datos sensibles de conversaciones de usuarios, historiales de transacciones y realizar operaciones destructivas, incluida la eliminación de mensajes. Esto afecta a los puntos finales que manejan datos personales y operaciones del sistema que deberían requerir una autorización adecuada. La versión 1.7.0.dev45 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "E2F27CA9-B577-49BB-B10F-3DB9B4DB934E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langflow-ai/langflow/commit/3fed9fe1b5658f2c8656dbd73508e113a96e486a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langflow-ai/langflow/security/advisories/GHSA-c5cp-vx83-jhqx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21446",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T20:16:18.020",
      "lastModified" : "2026-01-08T21:25:06.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain active even after initial installation is complete. The underlying API endpoints (`/install/api/*`) are directly accessible and exploitable without any authentication. An attacker can bypass the Ib installer entirely by calling the API endpoints directly. This allows any unauthenticated attacker to create admin accounts, modify application configurations, and potentially overwrite existing data. Version 2.3.10 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Bagisto es una plataforma de comercio electrónico laravel de código abierto. En versiones de la rama 2.3 anteriores a la 2.3.10, las rutas de la API permanecen activas incluso después de que la instalación inicial se haya completado. Los endpoints de la API subyacentes ('/install/api/*') son directamente accesibles y explotables sin ninguna autenticación. Un atacante puede omitir el instalador de Ib por completo llamando directamente a los endpoints de la API. Esto permite a cualquier atacante no autenticado crear cuentas de administrador, modificar configuraciones de la aplicación y potencialmente sobrescribir datos existentes. La versión 2.3.10 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkul:bagisto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "284410C8-A6CA-4BA3-A484-8E4B8EE3DC4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bagisto/bagisto/commit/380c045e48490da740cd505fb192cc45e1809bed",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bagisto/bagisto/security/advisories/GHSA-6h7w-v2xr-mqvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21447",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:15:58.773",
      "lastModified" : "2026-01-08T21:24:08.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bagisto is an open source laravel eCommerce platform. Prior to version 2.3.10, an Insecure Direct Object Reference vulnerability in the customer order reorder function allows any authenticated customer to add items from another customer's order to their own shopping cart by manipulating the order ID parameter. This exposes sensitive purchase information and enables potential fraud. Version 2.3.10 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Bagisto es una plataforma de eCommerce laravel de código abierto. Antes de la versión 2.3.10, una vulnerabilidad de Referencia Directa a Objeto Insegura en la función de reordenar pedidos del cliente permite a cualquier cliente autenticado añadir artículos del pedido de otro cliente a su propio carrito de compras manipulando el parámetro de ID de pedido. Esto expone información de compra sensible y posibilita un fraude potencial. La versión 2.3.10 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkul:bagisto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "E9A19FD0-5100-48D6-BBB3-5A4CA1D90593"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bagisto/bagisto/commit/b2b1cf62577245d03a68532478cffbe321df74d3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bagisto/bagisto/security/advisories/GHSA-x5rw-qvvp-5cgm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21448",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:15:59.053",
      "lastModified" : "2026-01-08T21:22:34.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection. When a normal customer orders any product, in the `add address` step they can inject a value to run in admin view. The issue can lead to remote code execution. Version 2.3.10 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Bagisto es una plataforma de comercio electrónico laravel de código abierto. Las versiones anteriores a la 2.3.10 son vulnerables a la inyección de plantillas del lado del servidor. Cuando un cliente normal pide cualquier producto, en el paso 'añadir dirección' pueden inyectar un valor para ejecutar en la vista de administrador. El problema puede llevar a la ejecución remota de código. La versión 2.3.10 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkul:bagisto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "E9A19FD0-5100-48D6-BBB3-5A4CA1D90593"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bagisto/bagisto/security/advisories/GHSA-5j4h-4f72-qpm6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21449",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:16:02.647",
      "lastModified" : "2026-01-08T21:21:59.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via first name and last name from a low-privilege user. Version 2.3.10 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Bagisto es una plataforma de comercio electrónico Laravel de código abierto. Las versiones anteriores a la 2.3.10 son vulnerables a la inyección de plantillas del lado del servidor a través del nombre y apellido de un usuario con bajos privilegios. La versión 2.3.10 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkul:bagisto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "E9A19FD0-5100-48D6-BBB3-5A4CA1D90593"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bagisto/bagisto/security/advisories/GHSA-mqhg-v22x-pqj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21450",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:16:02.797",
      "lastModified" : "2026-01-08T21:20:38.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can lead to remote code execution or another exploitation. Version 2.3.10 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Bagisto es una plataforma de comercio electrónico laravel de código abierto. Las versiones anteriores a la 2.3.10 son vulnerables a la inyección de plantillas del lado del servidor a través del parámetro type, lo que puede conducir a la ejecución remota de código o a otra explotación. La versión 2.3.10 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkul:bagisto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "E9A19FD0-5100-48D6-BBB3-5A4CA1D90593"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bagisto/bagisto/security/advisories/GHSA-9hvg-qw5q-wqwp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21451",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:16:02.930",
      "lastModified" : "2026-01-08T21:20:06.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bagisto is an open source laravel eCommerce platform. A stored Cross-Site Scripting (XSS) vulnerability exists in Bagisto prior to version 2.3.10 within the CMS page editor. Although the platform normally attempts to sanitize `<script>` tags, the filtering can be bypassed by manipulating the raw HTTP POST request before submission. As a result, arbitrary JavaScript can be stored in the CMS content and executed whenever the page is viewed or edited. This exposes administrators to a high-severity risk, including complete account takeover, backend hijacking, and malicious script execution. Version 2.3.10 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Bagisto es una plataforma de comercio electrónico laravel de código abierto. Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en Bagisto en versiones anteriores a la 2.3.10 dentro del editor de páginas del CMS. Aunque la plataforma normalmente intenta sanear las etiquetas '"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkul:bagisto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "E9A19FD0-5100-48D6-BBB3-5A4CA1D90593"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bagisto/bagisto/security/advisories/GHSA-2mwc-h2mg-v6p8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21452",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:16:03.067",
      "lastModified" : "2026-02-05T19:21:02.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java parses extension headers lazily, it later trusts the declared EXT payload length when materializing the extension data. When ExtensionValue.getData() is invoked, the library attempts to allocate a byte array of the declared length without enforcing any upper bound. A malicious .msgpack file of only a few bytes can therefore trigger unbounded heap allocation, resulting in JVM heap exhaustion, process termination, or service unavailability. This vulnerability is triggered during model loading / deserialization, making it a model format vulnerability suitable for remote exploitation. The vulnerability enables a remote denial-of-service attack against applications that deserialize untrusted .msgpack model files using MessagePack for Java. A specially crafted but syntactically valid .msgpack file containing an EXT32 object with an attacker-controlled, excessively large payload length can trigger unbounded memory allocation during deserialization. When the model file is loaded, the library trusts the declared length metadata and attempts to allocate a byte array of that size, leading to rapid heap exhaustion, excessive garbage collection, or immediate JVM termination with an OutOfMemoryError. The attack requires no malformed bytes, user interaction, or elevated privileges and can be exploited remotely in real-world environments such as model registries, inference services, CI/CD pipelines, and cloud-based model hosting platforms that accept or fetch .msgpack artifacts. Because the malicious file is extremely small yet valid, it can bypass basic validation and scanning mechanisms, resulting in complete service unavailability and potential cascading failures in production systems. Version 0.9.11 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "MessagePack para Java es una implementación de serializador para Java. Una vulnerabilidad de denegación de servicio existe en versiones anteriores a la 0.9.11 al deserializar archivos .msgpack que contienen objetos EXT32 con longitudes de carga útil controladas por el atacante. Aunque MessagePack-Java analiza los encabezados de extensión de forma perezosa, luego confía en la longitud de carga útil EXT declarada al materializar los datos de la extensión. Cuando se invoca ExtensionValue.getData(), la biblioteca intenta asignar una matriz de bytes de la longitud declarada sin imponer ningún límite superior. Un archivo .msgpack malicioso de solo unos pocos bytes puede, por lo tanto, desencadenar una asignación de pila ilimitada, lo que resulta en el agotamiento de la pila de la JVM, la terminación del proceso o la indisponibilidad del servicio. Esta vulnerabilidad se desencadena durante la carga / deserialización del modelo, lo que la convierte en una vulnerabilidad de formato de modelo adecuada para la explotación remota. La vulnerabilidad permite un ataque remoto de denegación de servicio contra aplicaciones que deserializan archivos de modelo .msgpack no confiables utilizando MessagePack para Java. Un archivo .msgpack especialmente diseñado pero sintácticamente válido que contiene un objeto EXT32 con una longitud de carga útil excesivamente grande y controlada por el atacante puede desencadenar una asignación de memoria ilimitada durante la deserialización. Cuando se carga el archivo del modelo, la biblioteca confía en los metadatos de longitud declarada e intenta asignar una matriz de bytes de ese tamaño, lo que lleva a un rápido agotamiento de la pila, una recolección de basura excesiva o la terminación inmediata de la JVM con un OutOfMemoryError. El ataque no requiere bytes malformados, interacción del usuario o privilegios elevados y puede explotarse de forma remota en entornos del mundo real como registros de modelos, servicios de inferencia, pipelines de CI/CD y plataformas de alojamiento de modelos basadas en la nube que aceptan o recuperan artefactos .msgpack. Debido a que el archivo malicioso es extremadamente pequeño pero válido, puede eludir los mecanismos básicos de validación y escaneo, lo que resulta en una indisponibilidad completa del servicio y posibles fallas en cascada en los sistemas de producción. La versión 0.9.11 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msgpack:messagepack:0.9.10:*:*:*:*:java:*:*",
            "matchCriteriaId" : "F2E0553D-FF80-4F6B-935E-8C97E16894DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/msgpack/msgpack-java/commit/daa2ea6b2f11f500e22c70a22f689f7a9debdeae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/msgpack/msgpack-java/releases/tag/v0.9.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/msgpack/msgpack-java/security/advisories/GHSA-cw39-r4h6-8j3x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-02T21:16:03.217",
      "lastModified" : "2026-02-25T15:20:58.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to version 6.0.0, lower-privileged user with campaign management permissions can inject malicious JavaScript into campaigns or templates. When a higher-privileged user (Super Admin) views or previews this content, the XSS executes in their browser context, allowing the attacker to perform privileged actions such as creating backdoor admin accounts. The attack can be weaponized via the public archive feature, where victims simply need to visit a link - no preview click required. Version 6.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "listmonk es un gestor de boletines y listas de correo autónomo y autoalojado. Antes de la versión 6.0.0, un usuario con privilegios inferiores y permisos de gestión de campañas puede inyectar JavaScript malicioso en campañas o plantillas. Cuando un usuario con privilegios superiores (Super Admin) ve o previsualiza este contenido, el XSS se ejecuta en el contexto de su navegador, permitiendo al atacante realizar acciones privilegiadas como crear cuentas de administrador con puerta trasera. El ataque puede ser instrumentalizado a través de la función de archivo público, donde las víctimas simplemente necesitan visitar un enlace - no se requiere hacer clic en la previsualización. La versión 6.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nadh:listmonk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "41CE03AA-115A-4370-B761-5684D5882B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/knadh/listmonk/security/advisories/GHSA-jmr4-p576-v565",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-03T02:15:41.553",
      "lastModified" : "2026-02-23T17:54:38.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling username enumeration. Commit e287fab56089cf8fcea9ba579a3ecdeca0daa313 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "AnythingLLM es una aplicación que convierte fragmentos de contenido en contexto que cualquier LLM puede usar como referencias al chatear. Antes del commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, el endpoint de recuperación de contraseña devuelve diferentes mensajes de error dependiendo de si un nombre de usuario existe, lo que permite la enumeración de nombres de usuario. El commit e287fab56089cf8fcea9ba579a3ecdeca0daa313 soluciona este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        }, {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.0",
            "matchCriteriaId" : "8DEA04F2-1EE6-4943-B989-76CB56A33BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mintplex-Labs/anything-llm/commit/e287fab56089cf8fcea9ba579a3ecdeca0daa313",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-47vr-w3vm-69ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21644",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:50.813",
      "lastModified" : "2026-01-03T04:15:50.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21645",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.333",
      "lastModified" : "2026-01-03T04:15:51.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21646",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.407",
      "lastModified" : "2026-01-03T04:15:51.407",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21647",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.467",
      "lastModified" : "2026-01-03T04:15:51.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21648",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.520",
      "lastModified" : "2026-01-03T04:15:51.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21649",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.580",
      "lastModified" : "2026-01-03T04:15:51.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21650",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.643",
      "lastModified" : "2026-01-03T04:15:51.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21651",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.700",
      "lastModified" : "2026-01-03T04:15:51.700",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21652",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-03T04:15:51.760",
      "lastModified" : "2026-01-03T04:15:51.760",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0574",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-04T02:15:41.690",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\UserController.java of the component Request Handler. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Esto afecta a la función saveUserRole del archivo warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\UserController.java del componente Request Handler. Esta manipulación causa una autorización impropia. El ataque es posible llevarlo a cabo remotamente. El exploit se ha puesto a disposición del público y podría usarse para ataques. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden especificarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/5i1encee/Vul/blob/main/Vertical_privilege_escalation_Vulnerability_in_Project_yeqifu_warehouse.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/5i1encee/Vul/blob/main/Vertical_privilege_escalation_Vulnerability_in_Project_yeqifu_warehouse.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339458",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339458",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729374",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0575",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-04T06:15:50.890",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en code-projects Online Product Reservation System 1.0. Esto afecta una función desconocida del archivo /handgunner-administrator/adminlogin.php del componente Administrator Login. Dicha manipulación del argumento emailadd/pass conduce a inyección SQL. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_admin_login.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_admin_login.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339459",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339459",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731011",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0576",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-04T09:15:40.473",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en code-projects Online Product Reservation System 1.0. Afecta a una función desconocida del archivo /handgunner-administrator/prod.php del componente Parameter Handler. La manipulación del argumento cat/price/name/model/serial resulta en inyección SQL. Es posible iniciar el ataque de forma remota. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_add_prod.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_add_prod.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339460",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339460",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731012",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0577",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-04T10:15:41.177",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en code-projects Online Product Reservation System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /handgunner-administrator/prod.PHP. La ejecución de manipulación puede llevar a una carga sin restricciones. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/file_upload_prod.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/file_upload_prod.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339461",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339461",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731015",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0578",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-04T12:15:42.460",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_admin_delete.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_admin_delete.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339462",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339462",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731075",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0579",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-04T13:15:42.427",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prod_id/name/price/model/serial results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Online Product Reservation System 1.0. Esto afecta una parte desconocida del archivo /handgunner-administrator/edit.php del componente POST Parameter Handler. La manipulación del argumento prod_id/name/price/model/serial resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_admin_edit.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_admin_edit.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339463",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339463",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731091",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0580",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T08:15:58.213",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester API Key Manager App 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente Import Key Handler. Realizar una manipulación resulta en cross-site scripting. El ataque puede ser iniciado remotamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remyandrade:api_key_manager_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBC611C9-12BC-44C8-AE6B-BB96CF825EF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.339472",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339472",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731146",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731290",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0581",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T09:15:54.867",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Tenda AC1206 15.03.06.23. Afectada por este problema es la función formBehaviorManager del archivo /goform/BehaviorManager del componente httpd. La ejecución de una manipulación del argumento modulename/option/data/switch puede conducir a una inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787A50A1-EDBC-44EB-8CF2-11C4FC63719D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac1206:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29D5013D-520A-461A-95FF-43B2BE160F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ccc-iotsec/cve-/blob/Tenda/Tenda%20AC1206%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339473",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339473",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731193",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0582",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T09:15:55.087",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en itsourcecode Society Management System 1.0. Esto afecta una parte desconocida del archivo /admin/edit_activity_query.PHP. La manipulación del argumento Title lleva a inyección SQL. El ataque puede ser iniciado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaotsai/tttt/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339474",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339474",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731207",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0583",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T10:15:58.270",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en code-projects Online Product Reservation System 1.0. Esta vulnerabilidad afecta código desconocido del archivo app/user/login.php del componente User Login. La manipulación del argumento emailadd resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido publicado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_login.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_login.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731093",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0584",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T10:15:58.467",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left_cart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el Sistema de Reserva de Productos en Línea 1.0 de code-projects. Este problema afecta a un procesamiento desconocido del archivo app/products/left_cart.php. Esta manipulación del argumento ID causa inyección SQL. Es posible la explotación remota del ataque. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_left_cart.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_left_cart.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731095",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0585",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T10:15:58.653",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /order_view.php of the component GET Parameter Handler. Such manipulation of the argument transaction_id leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_order_view.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_order_view.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339477",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339477",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731096",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0586",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T11:17:42.730",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/xss_prod.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/xss_prod.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339478",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339478",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731098",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0587",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T11:17:42.947",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file rock_page_gong.php of the component Cover Image Handler. The manipulation of the argument fengmian results in cross site scripting. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockoa:rockoa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "FD001E79-3EDC-41CA-A35B-4F7E3C7D888B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.339493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.725384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.725384",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0588",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T12:15:45.737",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functionality of the file rockfun.php of the component API. This manipulation of the argument callback causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockoa:rockoa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "FD001E79-3EDC-41CA-A35B-4F7E3C7D888B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.339494",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339494",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.725397",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.725397",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0589",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T13:15:55.457",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the component Administration Backend. The manipulation results in improper authentication. The attack may be performed from remote. The exploit has been made public and could be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/auth_bypass_admin_panel.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/auth_bypass_admin_panel.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339499",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339499",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731127",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0590",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T13:15:55.643",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339500",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339500",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731128",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0591",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T14:15:54.507",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/update.php of the component Cart Update Handler. Such manipulation of the argument id/qty leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_update.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_update.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339501",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339501",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0592",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T14:15:54.700",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /handgunner-administrator/register_code.php of the component User Registration Handler. Performing a manipulation of the argument fname/lname/address/city/province/country/zip/tel_no/email/username results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_product_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DD85F8-8BAC-44C5-99EC-F57924CE08AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_register_code.php.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_register_code.php.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339502",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339502",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0597",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T15:15:45.580",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:supplier_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "836654A6-0614-4B2F-A556-E005AF4C7DE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dhy-spec/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339506",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339506",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731433",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.campcodes.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21633",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-05T17:15:47.133",
      "lastModified" : "2026-01-30T01:23:38.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nAffected Products:\r\n\r\nUniFi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nMitigation:\r\n\r\nUpdate your UniFi Protect Application to Version 6.2.72 or later."
      }, {
        "lang" : "es",
        "value" : "Un actor malicioso con acceso a la red adyacente podría obtener acceso no autorizado a una cámara UniFi Protect explotando una vulnerabilidad del protocolo de descubrimiento en la aplicación UniFi Protect (versión 6.1.79 y anteriores).\n\nProductos afectados:\nAplicación UniFi Protect (versión 6.1.79 y anteriores).\n\nMitigación:\nActualice su aplicación UniFi Protect a la versión 6.2.72 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:unifi_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.72",
            "matchCriteriaId" : "F58979E4-F426-4E50-BF77-7A94200D0357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21634",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-05T17:15:47.243",
      "lastModified" : "2026-01-30T01:23:13.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart.\r\n\r\n\r\nAffected Products:\r\nUniFi Protect Application (Version 6.1.79 and earlier). \r\n \r\nMitigation:\r\nUpdate your UniFi Protect Application to Version 6.2.72 or later."
      }, {
        "lang" : "es",
        "value" : "Un actor malicioso con acceso a la red adyacente podría desbordar el protocolo de descubrimiento de la aplicación UniFi Protect (versión 6.1.79 y anteriores), provocando su reinicio.\n\nProductos Afectados:\nAplicación UniFi Protect (versión 6.1.79 y anteriores).\n\nMitigación:\nActualice su aplicación UniFi Protect a la versión 6.2.72 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:unifi_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.72",
            "matchCriteriaId" : "F58979E4-F426-4E50-BF77-7A94200D0357"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21635",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-05T17:15:47.350",
      "lastModified" : "2026-01-30T01:22:13.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted via Ethernet."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inadecuado podría permitir a un actor malicioso dentro del alcance de Wi-Fi de la EV Station Lite (v1.5.2 y anteriores) utilizar la función WiFi AutoLink en un dispositivo que solo fue adoptado a través de Ethernet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:unifi_connect_ev_station_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.1",
            "matchCriteriaId" : "D5EBEF9D-3DC1-47DB-A23B-F63D3B5F378B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:unifi_connect_ev_station_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD1ED22-51D2-485D-BF58-D9183AF27857"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-059/0c0b7f7a-68b7-41b9-987e-554f4b40e0e6",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0605",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T21:16:14.360",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Such manipulation of the argument username/password leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A52.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A52.md#vulnerability-details-and-poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339549",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339549",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731695",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732595",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A52.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A52.md#vulnerability-details-and-poc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0621",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-05T21:16:14.533",
      "lastModified" : "2026-01-30T01:16:59.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression used during URI matching contains nested quantifiers that can trigger catastrophic backtracking on specially crafted inputs, resulting in excessive CPU consumption. An attacker can exploit this by supplying a malicious URI that causes the Node.js process to become unresponsive, leading to a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:mcp_typescript_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.25.1",
            "matchCriteriaId" : "202F86B2-BC6C-4F68-9579-84F6F266CF78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modelcontextprotocol/typescript-sdk/issues/965",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/mcp-typescript-sdk-uritemplate-exploded-array-pattern-redos",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modelcontextprotocol/typescript-sdk/issues/965",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0625",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-05T22:15:54.483",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "disclosure@vulncheck.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, an attacker can modify the device’s DNS settings without valid credentials, enabling DNS hijacking (“DNSChanger”) attacks that redirect user traffic to attacker-controlled infrastructure. In 2019, D-Link reported that this behavior was leveraged by the \"GhostDNS\" malware ecosystem targeting consumer and carrier routers. All impacted products were subsequently designated end-of-life/end-of-service, and no longer receive security updates. Exploitation evidence was observed by the Shadowserver Foundation on 2025-11-27 (UTC)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "ATTACKED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10068",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10118",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10488",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/dlink-dsl-command-injection-via-dns-configuration-endpoint",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0606",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-05T23:15:41.180",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A51.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A51.md#vulnerability-details-and-poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731696",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A51.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A51.md#vulnerability-details-and-poc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0607",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-06T00:15:48.850",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A53.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A53.md#vulnerability-details-and-poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731697",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738707",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A53.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Online%20Music%20Site/SQL%E6%B3%A8%E5%85%A53.md#vulnerability-details-and-poc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21439",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T00:15:49.027",
      "lastModified" : "2026-01-12T18:18:59.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and below, an attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the badkeys command-line tool. This impacts scanning DKIM keys (both --dkim and --dkim-dns), SSH keys (--ssh-lines mode), and filenames in various modes. This issue is fixed in version 0.0.16."
      }, {
        "lang" : "es",
        "value" : "badkeys es una herramienta y biblioteca para verificar claves públicas criptográficas en busca de vulnerabilidades conocidas. En las versiones 0.0.15 e inferiores, un atacante podría inyectar contenido con caracteres de control ASCII como tabulaciones verticales, secuencias de escape ANSI, etc., que pueden generar una salida engañosa de la herramienta de línea de comandos badkeys. Esto afecta el escaneo de claves DKIM (tanto --dkim como --dkim-dns), claves SSH (modo --ssh-lines), y nombres de archivo en varios modos. Este problema está solucionado en la versión 0.0.16."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:badkeys:badkeys:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.0.16",
            "matchCriteriaId" : "AA459E08-D598-4832-942C-FF493A471141"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/badkeys/badkeys/commit/635a2f3b1b50a895d8b09ec8629efc06189f349a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/badkeys/badkeys/commit/de631f69f040974bb5fb442cdab9a1d904c64087",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/badkeys/badkeys/issues/40",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/badkeys/badkeys/security/advisories/GHSA-wjpc-4f29-83h3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/badkeys/badkeys/issues/40",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21507",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T01:16:01.917",
      "lastModified" : "2026-01-12T21:04:26.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1 e inferiores tienen un bucle infinito en la función CalcProfileID de IccProfile.cpp. Este problema está corregido en la versión 2.3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/3f3ce789d0d2b608c194ed172fa38943519dc198",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/244",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-hgp5-r8m9-8qpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21673",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T02:15:45.343",
      "lastModified" : "2026-01-12T21:03:33.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in  CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in version 2.3.1.1."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1 e inferiores tienen desbordamientos y subdesbordamientos en CIccXmlArrayType::ParseTextCountNum(). Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. Este problema está solucionado en la versión 2.3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        }, {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/32740802ee14418bd14c429d7e2f142d92cd5c4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/243",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-g66g-f82c-vgm6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21674",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T02:15:45.503",
      "lastModified" : "2026-01-12T21:02:37.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1 e inferiores contienen una vulnerabilidad de fuga de memoria en su Ruta de Análisis XML MPE (iccFromXml). Este problema está corregido en la versión 2.3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/d7028d8f558bb681efe2b85f02eb4ca374502cbb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/241",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xww6-v3vg-4qc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/241",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21675",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T02:15:45.643",
      "lastModified" : "2026-01-12T21:00:31.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1 e inferiores contienen una vulnerabilidad de uso después de liberación en la función CIccXform::Create(), donde elimina la sugerencia. Este problema está solucionado en la versión 2.3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/510baf58fa48e00ebbb5dd577f0db4af8876bb31",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/182",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wcwx-794g-g78f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/182",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0604",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-06T04:15:53.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dir_path' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary directories on the server, which can contain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/fastdup/tags/2.7/includes/Endpoint/TemplateApi.php#L219",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/fastdup/trunk/includes/Endpoint/TemplateApi.php#L219",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3432226%40fastdup&new=3432226%40fastdup&sfp_email=&sfph_mail=#file3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac97c729-4c75-429b-bbf2-27ca322be1cf?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T04:15:53.790",
      "lastModified" : "2026-01-14T18:45:37.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores son propensas a tener Comportamiento Indefinido (UB) y errores de falta de memoria. Este problema está solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        }, {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/c136aac51d25cbb4d9db63f071edad4f088843df",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/340",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-chp2-4gv5-2432",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/340",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T04:15:53.960",
      "lastModified" : "2026-01-12T20:59:22.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write vulnerabilities in its CIccSparseMatrix::CIccSparseMatrix function. This issue is fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores contienen vulnerabilidades de Uso después de liberación, desbordamiento de búfer basado en montículo, desbordamiento de entero o ajuste, y escritura fuera de límites en su función CIccSparseMatrix::CIccSparseMatrix. Este problema está corregido en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/1ab7363f38a20089934d3410c88f714eea392bf5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-mg98-j5q2-674w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T04:15:54.103",
      "lastModified" : "2026-01-12T20:57:20.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-of-range Pointer Offset and have Improper Input Validation in its CIccProfile::LoadTag function. This issue is fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores presentan una lectura fuera de límites, uso de desplazamiento de puntero fuera de rango y validación de entrada inadecuada en su función CIccProfile::LoadTag. Este problema está corregido en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/1516e2cafc253bb06fd3700d589a4ed0f09f7bd6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/340",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xq7x-9524-f7cp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21676",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T04:15:54.250",
      "lastModified" : "2026-01-12T20:55:47.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2.3.1.1."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1 e inferiores tienen un desbordamiento de búfer basado en montículo en su función CIccMBB::Validate, que verifica la validez de los datos de las etiquetas. Este problema se corrige en la versión 2.3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/e4c38a67d06073b38d58580b0cfc78ca61005f84",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/215",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-j5vv-p2hv-c392",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21677",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T04:15:54.397",
      "lastModified" : "2026-01-12T20:40:01.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1 e inferiores tienen Comportamiento Indefinido en su función CIccCLUT::Init, que inicializa y establece el tamaño de una CLUT. Este problema está corregido en la versión 2.3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/201125fbda22c8e4ea95800a6b427093fa4b8a22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/181",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-95w5-jvqf-3994",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/181",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21744",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.540",
      "lastModified" : "2026-01-06T04:15:54.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21745",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.620",
      "lastModified" : "2026-01-06T04:15:54.620",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21746",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.677",
      "lastModified" : "2026-01-06T04:15:54.677",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21747",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.737",
      "lastModified" : "2026-01-06T04:15:54.737",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21748",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.800",
      "lastModified" : "2026-01-06T04:15:54.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21749",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.853",
      "lastModified" : "2026-01-06T04:15:54.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21750",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-06T04:15:54.913",
      "lastModified" : "2026-01-06T04:15:54.913",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21411",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-06T07:15:43.870",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de omisión de autenticación en las versiones de la serie OpenBlocks anteriores a FW5.0.8, lo que podría permitir a un atacante omitir la autenticación de administrador y cambiar la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU97172240/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.plathome.co.jp/support/software/fw5/dx1-v5-0-8/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T14:15:48.420",
      "lastModified" : "2026-01-14T18:45:51.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination through its CIccTagText::Read function. This issue is fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores son vulnerables a lectura fuera de límites, desbordamiento de búfer basado en montículo y terminación nula incorrecta a través de su función CIccTagText::Read. Este problema se corrige en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/9daaccceb231c43db8cab312ee5bbe9d2aa6b153",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4j2g-rvv4-86vg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T14:15:48.590",
      "lastModified" : "2026-01-14T18:46:33.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have Out-of-bounds Read and Integer Underflow (Wrap or Wraparound) vulnerabilities in its CIccCalculatorFunc::SequenceNeedTempReset function. This issue is fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores tienen vulnerabilidades de lectura fuera de límites y desbordamiento negativo de enteros (ajuste o envoltura) en su función CIccCalculatorFunc::SequenceNeedTempReset. Este problema se ha corregido en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/cfabfe52c9c7eb0481b62c8aad56580bb11efdad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-ph89-6q5h-wfw5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T15:15:44.983",
      "lastModified" : "2026-01-14T18:46:59.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas para trabajar con perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores son vulnerables a una confusión de tipos en su clase CIccSingleSampledeCurveXml durante la serialización de curvas XML. Este problema está solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-188"
        }, {
          "lang" : "en",
          "value" : "CWE-703"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/7ff76d1471077172f9659de8d9536443eac7c48f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/358",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-p85g-f9q7-jmjx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0640",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-06T16:15:57.293",
      "lastModified" : "2026-01-15T19:17:30.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac23_firmware:16.03.07.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70D64A9-3FF1-4777-ACB5-0D66D5B9448F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B730D9E-D9B0-480B-9941-7C48C56BBE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow/Tenda%20AC23_Buffer_Overflow.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow/Tenda%20AC23_Buffer_Overflow.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339683",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339683",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0641",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-06T19:16:07.573",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:wa300_firmware:5.2cu.7112_b20190227:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F137FA6-A9D2-4C23-9B05-F63C5A111CDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:wa300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6EA54A-C245-41A8-9FF1-2455D3CCA85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JackWesleyy/CVE/blob/main/WA300/TOTOLINK_WA300_RCE.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JackWesleyy/CVE/blob/main/WA300/TOTOLINK_WA300_RCE.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339684",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339684",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732234",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T19:16:08.177",
      "lastModified" : "2026-01-12T18:28:28.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It results in heap buffer overflow in `CIccTagLut16::Validate()`. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Una vulnerabilidad presente en versiones anteriores a la 2.3.1.2 afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. Resulta en un desbordamiento de búfer de pila en 'CIccTagLut16::Validate()'. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/7c2cb719a9de1c00844e457e070d657314383ee3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/e91fe722ac54ce497d410153e7405090e0565d7b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/397",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-9q9c-699q-xr2q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T19:16:08.907",
      "lastModified" : "2026-01-12T18:29:22.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It results in unicode buffer overflow in `CIccTagTextDescription`. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Una vulnerabilidad presente en versiones anteriores a la 2.3.1.2 afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. Resulta en un desbordamiento de búfer Unicode en 'CIccTagTextDescription'. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/7c2cb719a9de1c00844e457e070d657314383ee3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/e91fe722ac54ce497d410153e7405090e0565d7b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/396",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4pv4-4x2x-6j88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T19:16:09.077",
      "lastModified" : "2026-01-12T18:29:53.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It results in heap buffer overflow in `CIccTagLut8::Validate()`. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Una vulnerabilidad presente en versiones anteriores a la 2.3.1.2 afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. Resulta en desbordamiento de búfer de montón en 'CIccTagLut8::Validate()'. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/7c2cb719a9de1c00844e457e070d657314383ee3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/e91fe722ac54ce497d410153e7405090e0565d7b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/398",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-hjxv-xr7w-84fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-06T21:15:43.863",
      "lastModified" : "2026-01-12T18:30:54.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de llamada a miembro de puntero NULL. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/b200a629ada310137d6ae5c53fc9e6d91a4b0dae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/e72361d215351cbac0002466c4f936e94d6a99e7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/394",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/401",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xpq3-v3jj-mgvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/394",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0628",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-07T12:17:07.093",
      "lastModified" : "2026-01-12T16:48:33.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "143.0.7499.192",
            "matchCriteriaId" : "D3CA58B4-E298-4CAF-91FC-6570689DC687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/463155954",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0642",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-07T12:17:07.193",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:house_rental_and_property_listing_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B12B9A-7696-42F8-9D49-6182D542787C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pick-program/CVE/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339685",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339685",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732369",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736161",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Pick-program/CVE/issues/4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0643",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-07T12:17:07.370",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the file /app/register.php?action=reg of the component Signup. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:house_rental_and_property_listing_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B12B9A-7696-42F8-9D49-6182D542787C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1uzpk/cve/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339686",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339686",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732563",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1uzpk/cve/issues/4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0649",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-07T12:17:07.547",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in invoiceninja up to 5.12.38. The affected element is the function copy of the file /app/Jobs/Util/Import.php of the component Migration Import. The manipulation of the argument company_logo leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://note-hxlab.wetolink.com/share/fWqEpn5fX4rH",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.339720",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.339720",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.721323",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0650",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T12:17:07.727",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials. Unauthorized access may allow modification of feature flags and export of sensitive data."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "references" : [ {
        "url" : "https://dreyand.rs/code%20review/golang/2026/01/03/0day-speedrun-openflagr-less-1118-authentication-bypass",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/openflagr/flagr/releases/tag/1.1.19",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/openflagr-authentication-bypass-via-prefix-whitelist-path-normalization",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0656",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-07T12:17:07.867",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'check_ipaymu_response' function. This is due to the plugin not validating webhook request authenticity through signature verification or origin checks. This makes it possible for unauthenticated attackers to mark WooCommerce orders as paid by sending crafted POST requests to the webhook endpoint without any payment occurring, as well as enumerate order IDs and obtain valid order keys via GET requests, exposing customer order PII including names, addresses, and purchased products."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ipaymu-for-woocommerce/tags/2.0.2/gateway.php?marks=316-336,370-380#L316",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3429657%40ipaymu-for-woocommerce&new=3429657%40ipaymu-for-woocommerce",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7e639aed-ec67-4212-9051-1f7465bbfde2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20893",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-07T12:17:08.023",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If this vulnerability is exploited, an attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/or modify the registry value."
      }, {
        "lang" : "es",
        "value" : "Un problema de error de validación de origen existe en Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 y versiones anteriores. Si esta vulnerabilidad es explotada, un atacante que puede iniciar sesión en el sistema Windows donde el producto afectado está instalado podría ejecutar código arbitrario con privilegios de SYSTEM y/o modificar el valor del registro."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN24626628/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.fmworld.net/biz/common/info/202601acc/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22156",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.167",
      "lastModified" : "2026-01-07T12:17:08.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22157",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.247",
      "lastModified" : "2026-01-07T12:17:08.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22158",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.307",
      "lastModified" : "2026-01-07T12:17:08.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22159",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.367",
      "lastModified" : "2026-01-07T12:17:08.367",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22160",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.430",
      "lastModified" : "2026-01-07T12:17:08.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22161",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.480",
      "lastModified" : "2026-01-07T12:17:08.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22162",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-07T12:17:08.537",
      "lastModified" : "2026-01-07T12:17:08.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22540",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T15:15:46.703",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly."
      }, {
        "lang" : "es",
        "value" : "El envío masivo de solicitudes ARP causa una denegación de servicio en una placa del cargador que permite el control de las interfaces del VE. Dado que la placa debe estar funcionando correctamente para que el cargador también funcione correctamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22541",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T16:15:51.593",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly."
      }, {
        "lang" : "es",
        "value" : "El envío masivo de solicitudes ICMP causa una denegación de servicio en una de las placas del EVCharger que permite controlar las interfaces del VE. Dado que la placa debe funcionar correctamente para que el cargador también funcione correctamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22542",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T16:15:51.740",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service."
      }, {
        "lang" : "es",
        "value" : "Un atacante con acceso a la red interna del sistema puede causar una denegación de servicio en el sistema al realizar dos conexiones concurrentes a través del servicio Telnet."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0618",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-01-07T17:16:02.127",
      "lastModified" : "2026-01-30T01:41:53.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ironmansoftware:powershell_universal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.6",
            "matchCriteriaId" : "2FF914AA-9D44-43A2-9C86-6E0AC4D125D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ironmansoftware:powershell_universal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.6.13",
            "matchCriteriaId" : "764743E5-62D2-4ACD-B0C2-5D75CBBDF17C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0001/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20026",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-07T17:16:02.663",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple&nbsp;Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer use-after-free read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to unexpectedly restart the Snort 3 Detection Engine, which could cause a denial of service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20027",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-07T17:16:02.877",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20029",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-07T17:16:03.067",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the licensing features of&nbsp;Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information.&nbsp;\r\n\r\nThis vulnerability is due to improper parsing of XML that is processed by the web-based management interface of Cisco ISE and Cisco ISE-PIC. An attacker could exploit this vulnerability by uploading a malicious file to the application. A successful exploit could allow the attacker to read arbitrary files from the underlying operating system that could include sensitive data that should otherwise be inaccessible even to administrators. To exploit this vulnerability, the attacker must have valid administrative credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-jWSbSDKt",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22535",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T17:16:03.580",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications protocol, write on the server topics of the board that controls the MQTT communications"
      }, {
        "lang" : "es",
        "value" : "Un atacante con la capacidad de interactuar a través de la red y con credenciales de acceso, podría, gracias al protocolo de comunicaciones MQTT no seguro (sin cifrar), escribir en los temas del servidor de la placa que controla las comunicaciones MQTT."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1366"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22536",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T17:16:03.777",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions"
      }, {
        "lang" : "es",
        "value" : "La ausencia de control de permisos para el usuario XXX permite que la configuración actual en el archivo sudoers escale privilegios sin restricciones."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22537",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T17:16:03.917",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker."
      }, {
        "lang" : "es",
        "value" : "La falta de endurecimiento del sistema permite al usuario utilizado para gestionar y mantener el cargador consultar diferentes archivos que contienen credenciales en texto claro o información valiosa para un atacante."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22543",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T17:16:04.057",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials"
      }, {
        "lang" : "es",
        "value" : "Las credenciales necesarias para acceder al servidor web del dispositivo se envían en base64 dentro de los encabezados HTTP. Dado que base64 no se considera un cifrado fuerte, un atacante podría interceptar la solicitud web que maneja el inicio de sesión y obtener las credenciales."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-261"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-261"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22544",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T17:16:04.207",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with a network connection could detect credentials in clear text."
      }, {
        "lang" : "es",
        "value" : "Un atacante con una conexión de red podría detectar credenciales en texto claro."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0668",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-07T18:15:52.873",
      "lastModified" : "2026-02-24T18:32:21.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikisphere:visualdata:-:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "AAD8093D-9F46-4862-A655-14560FD2297E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.45.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE14F82E-8C8A-43F0-9A96-D3767A62DFC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I4ff2737c9f0ba805267d1fc8296e7cff61241ee3",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I893a9fca694a2613e29e149dea2d76d7f06063e5",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Ie08d9a8ceb2c9a22a635cfc27964353f14072dbf",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Ifbf9c2ade621226e14fe852f3217293772bf8bb8",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T387008",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0669",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-07T18:15:53.003",
      "lastModified" : "2026-02-23T18:45:28.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.This issue affects MediaWiki - CSS extension: 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:css_project:css:-:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "931FD1A4-7FD7-41E3-85E2-6B99F5E3BAB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "243E4420-7054-4190-8270-76E09207FC9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.43.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "65A0A018-AEB0-491D-94C4-C14B7D8A45E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.44.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB02399E-7A9A-4F8C-8031-F4D4DCD82C76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/Ia15bf3f2e5a341868568492a736ac3dbf706c22e",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T401526",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21495",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:53.127",
      "lastModified" : "2026-01-09T21:56:36.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to division by zero in the TIFF Image Reader. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles ICC de gestión de color. Antes de la versión 2.3.1.2, iccDEV es vulnerable a una división por cero en el lector de imágenes TIFF. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/10c34179a0332a869c2b46e305a9cd23a6311dfe",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xhrm-79rg-5784",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21496",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:53.300",
      "lastModified" : "2026-01-09T21:56:48.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a una desreferencia de puntero nulo a través del analizador de firmas. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/0e51ceb427925b7e22f0465547df7506d35cda1c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/b5ad23aceece3789bdf1c47bae1ecf9d7bfcd26d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/381",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/405",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wj8m-6w77-r4rw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21497",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:53.483",
      "lastModified" : "2026-01-09T21:59:42.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via an unknown tag parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a una desreferencia de puntero NULL mediante un analizador de etiquetas desconocido. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/9419cac7f084197941994b8b9d17def204008385",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/374",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/403",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-7gv7-cmrv-4j85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21498",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:53.640",
      "lastModified" : "2026-01-09T21:59:54.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a la desreferencia de puntero NULL a través del analizador de calculadora XML. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/75f124f40ba45491211cb4b67f0e05b7c7d59553",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/bdfa31940726aaabb0a6f19194d9062ba0598959",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/375",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/404",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-6822-qvxq-m736",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21499",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:53.810",
      "lastModified" : "2026-01-09T21:59:59.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a la desreferencia de puntero NULL mediante el analizador XML. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/blob/8e71f0a701abcbd554725ba7b70258203e682a61/IccXML/IccLibXML/IccProfileXml.cpp#L477",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/00c03013e11b35ddbd7caae4368d1add185849d9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/af299895bbcbecca6f67d6dc3d8e1dc92f1fc3fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/372",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/412",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-c3pv-2cpf-7v2p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21500",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:53.950",
      "lastModified" : "2026-01-09T22:00:11.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a un desbordamiento de pila en la expansión de macros de la calculadora XML. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        }, {
          "lang" : "en",
          "value" : "CWE-1119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/cce5f9b68a6c067b7ef898ccd5b000770745fb14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/f295826a6f15add90490030f23b2ddd8593bff5b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/384",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/406",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4h4j-mm9w-2cp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21501",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:54.100",
      "lastModified" : "2026-01-09T21:33:44.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the calculator parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a desbordamiento de pila en el analizador de la calculadora. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/blob/8e71f0a701abcbd554725ba7b70258203e682a61/IccProfLib/IccMpeCalc.cpp#L4588",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/798be59011649a26a529600cc3cd56437634d3d0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/f3056ed99935d479091470127ad16f8be1912bb7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/365",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/413",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-x7hw-h22p-2x4w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21502",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:54.247",
      "lastModified" : "2026-01-09T21:33:58.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML tag parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a la desreferencia de puntero nulo a través del analizador de etiquetas XML. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/d04c236775e89a029f93efcc242fdb1fbc245a1c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/d9e42a1fb2606e25e498eb94f34f6da89f522e35",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/368",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/407",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-67r8-q3mh-42j6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21503",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:54.390",
      "lastModified" : "2026-01-09T21:34:09.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to a null pointer passed to memcpy() in CIccTagSparseMatrixArray. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV presenta un comportamiento indefinido debido a un puntero nulo pasado a memcpy() en CIccTagSparseMatrixArray. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-131"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-628"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/55259a6395c4f6124b5d0e38469c77412926bd3d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/367",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/417",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-h554-qrfh-53gx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21504",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:54.537",
      "lastModified" : "2026-01-09T21:34:19.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap buffer overflow in the ToneMap parser. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a desbordamiento de búfer de montón en el analizador ToneMap. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/blob/798be59011649a26a529600cc3cd56437634d3d0/IccProfLib/IccMpeBasic.cpp#L4557",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/14fe3785e6b1f9992375b2a24617a0d7f6a70f95",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/23a38f83f2a5874a1c4427df59ec342af3277cad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/366",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/415",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-rqp9-r53c-3m9h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21505",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:54.700",
      "lastModified" : "2026-01-12T16:35:08.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to an invalid enum value. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles ICC de gestión de color. Antes de la versión 2.3.1.2, iccDEV presenta un comportamiento indefinido debido a un valor de enumeración no válido. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/3bbe2088b2796cf0aa4f7fa19f7ccd9ad1c7aba5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/b1bb72fc3e9442ee1355aabae7314bb7d3fc9d41",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/361",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/419",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-j577-8285-qrf9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/361",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21506",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:54.850",
      "lastModified" : "2026-01-13T21:00:53.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to Null pointer dereference in CIccProfileXml::ParseBasic(), leading to denial of service. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a una desreferenciación de puntero nulo en CIccProfileXml::ParseBasic(), lo que lleva a denegación de servicio. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/f2ea32372ad3ebbd29147940229cb9c5548fe033",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/371",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/418",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-wfm7-m548-x4vp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21678",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:55.000",
      "lastModified" : "2026-01-13T21:00:35.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow vulnerability in IccTagXml(). This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a una vulnerabilidad de desbordamiento de búfer de pila (heap-buffer-overflow) en IccTagXml(). Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/c6c0f1cf45b48db94266132ccda5280a1a33569d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/55",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/219",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-9rp2-4c6g-hppf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21679",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:55.143",
      "lastModified" : "2026-01-09T21:34:28.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText(). This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, iccDEV es vulnerable a un desbordamiento de búfer de montón en CIccLocalizedUnicode::GetText(). Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/2eb25ab95f0db7664ec3850390b6f89e302e7039",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/328",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/329",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-h4wg-473g-p5wc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21680",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T18:15:55.290",
      "lastModified" : "2026-01-09T21:34:54.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a NULL pointer dereference vulnerability. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de desreferencia de puntero NULL. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/322",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/325",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-mgp7-w4w3-mhx4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22539",
      "sourceIdentifier" : "50b5080a-775f-442e-83b5-926b5ca517b6",
      "published" : "2026-01-07T18:15:55.537",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via OCPP v1.6."
      }, {
        "lang" : "es",
        "value" : "Como la interacción del servicio se realiza sin autenticación, un atacante con cierto conocimiento del protocolo podría obtener información sobre el cargador a través de OCPP v1.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en",
        "source" : "50b5080a-775f-442e-83b5-926b5ca517b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0670",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-07T19:15:56.203",
      "lastModified" : "2026-02-23T18:40:17.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikisource:proofread_page:1.39:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "F0DC7E84-26A6-4225-AB94-EE6124C11CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikisource:proofread_page:1.43:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "637AC797-C33D-4328-A8CD-C1E67F68457F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikisource:proofread_page:1.44:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "C05208D8-F063-424A-933A-37D5357A68C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikisource:proofread_page:1.45:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "7FA36D49-EE20-4805-85FE-820E37BC473E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I7c028db5ed81843aacd596b0ee4dc2980f5b6e3c",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T409423",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21854",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T19:15:57.267",
      "lastModified" : "2026-02-03T16:21:11.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, an authentication bypass vulnerability in the login endpoint allows any unauthenticated user to gain full admin access to the Tarkov Data Manager admin panel by exploiting a JavaScript prototype property access vulnerability, combined with loose equality type coercion. A series of fix commits on 02 January 2025 fixed this and other vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El Tarkov Data Manager es una herramienta para gestionar los datos de los ítems de Tarkov. Antes del 02 de enero de 2025, una vulnerabilidad de omisión de autenticación en el endpoint de inicio de sesión permite a cualquier usuario no autenticado obtener acceso de administrador completo al panel de administración del Tarkov Data Manager explotando una vulnerabilidad de acceso a propiedades de prototipo de JavaScript, combinada con la coerción de tipo de igualdad flexible. Una serie de commits de corrección el 02 de enero de 2025 solucionó esta y otras vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        }, {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarkov:tarkov_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-01-02",
            "matchCriteriaId" : "1BED0E5B-BD43-4202-930F-9931EC05570C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/the-hideout/tarkov-data-manager/commit/f188f0abf766cefe3f1b7b4fc6fe9dad3736174a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/the-hideout/tarkov-data-manager/security/advisories/GHSA-r8w6-9xwg-6h73",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21855",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T19:15:57.970",
      "lastModified" : "2026-02-03T16:20:50.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting (XSS) vulnerability in the toast notification system allows any attacker to execute arbitrary JavaScript in the context of a victim's browser session by crafting a malicious URL. A series of fix commits on 02 January 2025 fixed this and other vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "El Tarkov Data Manager es una herramienta para gestionar los datos de ítems de Tarkov. Antes del 02 de enero de 2025, una vulnerabilidad de Cross Site Scripting (XSS) reflejado en el sistema de notificaciones 'toast' permite a cualquier atacante ejecutar JavaScript arbitrario en el contexto de la sesión del navegador de una víctima al crear una URL maliciosa. Una serie de 'commits' de corrección el 02 de enero de 2025 corrigió esta y otras vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarkov:tarkov_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-01-02",
            "matchCriteriaId" : "1BED0E5B-BD43-4202-930F-9931EC05570C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/the-hideout/tarkov-data-manager/security/advisories/GHSA-9c23-rrg9-jc89",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21856",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T19:15:58.147",
      "lastModified" : "2026-02-03T16:19:36.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time based blind SQL injection vulnerability in the webhook edit and scanner api endpoints that allow an authenticated attacker to execute arbitrary SQL queries against the MySQL database. Commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8 contains a patch."
      }, {
        "lang" : "es",
        "value" : "El Tarkov Data Manager es una herramienta para gestionar los datos de ítems de Tarkov. Antes del commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, existía una vulnerabilidad de inyección SQL ciega basada en tiempo en los endpoints de la API de edición de webhook y escáner que permitía a un atacante autenticado ejecutar consultas SQL arbitrarias contra la base de datos MySQL. El commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tarkov:tarkov_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-01-02",
            "matchCriteriaId" : "3B0D9912-7D05-4040-9D9D-FC07BBF07FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/the-hideout/tarkov-data-manager/commit/9bdb3a75a98a7047b6d70144eb1da1655d6992a8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/the-hideout/tarkov-data-manager/security/advisories/GHSA-4gcx-ghwc-rc78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21681",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T21:16:01.227",
      "lastModified" : "2026-01-14T18:47:10.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Undefined Behavior runtime error. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen un error de tiempo de ejecución de Comportamiento Indefinido (Undefined Behavior). Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/269",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-v4qq-v3c3-x62x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21682",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T21:16:01.380",
      "lastModified" : "2026-01-14T18:47:43.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow in `CIccXmlArrayType::ParseText()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen un desbordamiento de búfer de montón (heap-buffer-overflow) en 'CIccXmlArrayType::ParseText()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/178",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/229",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-jq9m-54gr-c56c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22184",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:01.563",
      "lastModified" : "2026-03-18T16:26:31.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "disclosure@vulncheck.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer."
      }, {
        "lang" : "es",
        "value" : "Las versiones de zlib hasta la 1.3.1.2 inclusive incluyen un desbordamiento de búfer global en la utilidad untgz ubicada en contrib/untgz. La vulnerabilidad se limita a la utilidad de demostración independiente y no afecta a la biblioteca de compresión central de zlib. El fallo ocurre cuando un usuario ejecuta el comando untgz con un nombre de archivo excesivamente largo suministrado a través de la línea de comandos, lo que lleva a una escritura fuera de límites en un búfer global de tamaño fijo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1.2",
            "matchCriteriaId" : "5B9F9582-7F4A-4376-BE97-6AB4038AEBB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/madler/zlib",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/zlib-untgz-global-buffer-overflow-in-tgzfname",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zlib.net/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/madler/zlib/issues/1142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22185",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:01.733",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause an out-of-bounds read of one byte before the allocated heap buffer. This can cause mdb_load to crash, leading to a limited denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenLDAP Lightning Memory-Mapped Database (LMDB) hasta la 0.9.14 inclusive, anteriores al commit 8e1fda8, contienen un desbordamiento negativo de búfer de pila en la función readline() de mdb_load. Al procesar una entrada malformada que contiene un byte NUL incrustado, un cálculo de desplazamiento sin signo puede sufrir un desbordamiento negativo y causar una lectura fuera de límites de un byte antes del búfer de pila asignado. Esto puede causar que mdb_load falle, lo que lleva a una condición de denegación de servicio limitada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.openldap.org/show_bug.cgi?id=10421",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/5",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/8",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.openldap.org/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/openldap-lmdb-mdb-load-heap-buffer-underflow-in-readline",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22186",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:02.433",
      "lastModified" : "2026-03-18T17:16:06.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF). The parser uses an insecurely configured DocumentBuilderFactory when processing Leica XML-based metadata files, allowing external entity expansion and external DTD loading. A crafted metadata file can trigger outbound network requests (SSRF), access local system resources where readable, or cause a denial of service during XML parsing."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Bio-Formats hasta la 8.3.0 inclusive contienen una vulnerabilidad de entidad externa XML (XXE) en el componente de análisis de metadatos de Leica Microsystems (p. ej., XLEF). El analizador utiliza una DocumentBuilderFactory configurada de forma insegura al procesar archivos de metadatos de Leica basados en XML, lo que permite la expansión de entidades externas y la carga de DTD externas. Un archivo de metadatos manipulado puede desencadenar solicitudes de red salientes (SSRF), acceder a recursos del sistema local donde sean legibles o causar una denegación de servicio durante el análisis XML."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmicroscopy:bio-formats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.0",
            "matchCriteriaId" : "779C4146-854C-430E-BA48-A8AD79A97ADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.openmicroscopy.org/bio-formats/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ome/bioformats/security/advisories/GHSA-x9vc-qh97-8gjp",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/6",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/bio-formats-xxe-in-leica-xlef-metadata-parser",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22187",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:02.600",
      "lastModified" : "2026-02-26T23:36:40.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity checks, or trust enforcement. An attacker who can supply a crafted .bfmemo file alongside an image can trigger deserialization of untrusted data, which may result in denial of service, logic manipulation, or potentially remote code execution in environments where suitable gadget chains are present on the classpath."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Bio-Formats hasta la 8.3.0 inclusive realizan una deserialización Java insegura de archivos de caché de memorización (.bfmemo) controlados por el atacante durante el procesamiento de imágenes. La clase loci.formats.Memoizer carga y deserializa automáticamente archivos memo asociados con imágenes sin validación, comprobaciones de integridad o aplicación de confianza. Un atacante que pueda proporcionar un archivo .bfmemo manipulado junto con una imagen puede desencadenar la deserialización de datos no confiables, lo que puede resultar en denegación de servicio, manipulación lógica o, potencialmente, ejecución remota de código en entornos donde existan cadenas de gadgets adecuadas en el classpath."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmicroscopy:bio-formats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.0",
            "matchCriteriaId" : "779C4146-854C-430E-BA48-A8AD79A97ADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.openmicroscopy.org/bio-formats/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/bio-formats-memoizer-unsafe-deserialization-via-bfmemo-cache-files",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22188",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:02.747",
      "lastModified" : "2026-01-12T18:00:28.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda3D versions up to and including 1.10.16 deploy-stub contains a denial of service vulnerability due to unbounded stack allocation. The deploy-stub executable allocates argv_copy and argv_copy2 using alloca() based directly on the attacker-controlled argc value without validation. Supplying a large number of command-line arguments can exhaust stack space and propagate uninitialized stack memory into Python interpreter initialization, resulting in a reliable crash and undefined behavior."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Panda3D hasta la 1.10.16 inclusive deploy-stub contienen una vulnerabilidad de denegación de servicio debido a una asignación de pila ilimitada. El ejecutable deploy-stub asigna argv_copy y argv_copy2 utilizando alloca() basándose directamente en el valor argc controlado por el atacante sin validación. Suministrar un gran número de argumentos de línea de comandos puede agotar el espacio de la pila y propagar memoria de pila no inicializada a la inicialización del intérprete de Python, lo que resulta en un fallo fiable y comportamiento indefinido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-457"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmu:panda3d:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.16",
            "matchCriteriaId" : "EBD14B18-5255-4C59-93D4-597FB077C187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panda3d/panda3d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/9",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.panda3d.org/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/panda3d-deploy-stub-stack-exhaustion-via-unbounded-alloca",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22189",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:03.067",
      "lastModified" : "2026-01-12T17:59:18.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda3D versions up to and including 1.10.16 egg-mkfont contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker-controlled input. When constructing glyph filenames, egg-mkfont formats a user-supplied glyph pattern (-gp) into a fixed-size stack buffer without length validation. Supplying an excessively long glyph pattern string can overflow the stack buffer, resulting in memory corruption and a deterministic crash. Depending on build configuration and execution environment, the overflow may also be exploitable for arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Panda3D hasta la 1.10.16 inclusive, egg-mkfont contiene una vulnerabilidad de desbordamiento de búfer basado en pila debido al uso de una llamada sprintf() sin límites con entrada controlada por el atacante. Al construir nombres de archivo de glifos, egg-mkfont formatea un patrón de glifo proporcionado por el usuario (-gp) en un búfer de pila de tamaño fijo sin validación de longitud. Suministrar una cadena de patrón de glifo excesivamente larga puede desbordar el búfer de pila, lo que resulta en corrupción de memoria y un fallo determinista. Dependiendo de la configuración de compilación y el entorno de ejecución, el desbordamiento también puede ser explotable para ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmu:panda3d:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.16",
            "matchCriteriaId" : "EBD14B18-5255-4C59-93D4-597FB077C187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panda3d/panda3d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/10",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.panda3d.org/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/panda3d-egg-mkfont-stack-buffer-overflow",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22190",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-07T21:16:03.390",
      "lastModified" : "2026-01-12T17:53:57.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panda3D versions up to and including 1.10.16 egg-mkfont contains an uncontrolled format string vulnerability. The -gp (glyph pattern) command-line option is used directly as the format string for sprintf() with only a single argument supplied. If an attacker provides additional format specifiers, egg-mkfont may read unintended stack values and write the formatted output into generated .egg and .png files, resulting in disclosure of stack-resident memory and pointer values."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Panda3D hasta la 1.10.16 inclusive egg-mkfont contienen una vulnerabilidad de cadena de formato incontrolada. La opción de línea de comandos -gp (patrón de glifo) se utiliza directamente como la cadena de formato para sprintf() con un único argumento proporcionado. Si un atacante proporciona especificadores de formato adicionales, egg-mkfont puede leer valores de pila no intencionados y escribir la salida formateada en archivos .egg y .png generados, lo que resulta en la divulgación de memoria residente en la pila y valores de puntero."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmu:panda3d:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.16",
            "matchCriteriaId" : "EBD14B18-5255-4C59-93D4-597FB077C187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panda3d/panda3d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/11",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.panda3d.org/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/panda3d-egg-mkfont-format-string-information-disclosure",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21441",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:44.040",
      "lastModified" : "2026-01-23T09:15:47.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source."
      }, {
        "lang" : "es",
        "value" : "urllib3 es una biblioteca cliente HTTP para Python. La API de streaming de urllib3 está diseñada para el manejo eficiente de grandes respuestas HTTP leyendo el contenido en fragmentos, en lugar de cargar el cuerpo completo de la respuesta en la memoria de una sola vez. urllib3 puede realizar decodificación o descompresión basándose en el encabezado HTTP 'Content-Encoding' (por ejemplo, 'gzip', 'deflate', 'br' o 'zstd'). Al usar la API de streaming, la biblioteca descomprime solo los bytes necesarios, permitiendo el consumo parcial del contenido. A partir de la versión 1.22 y antes de la versión 2.6.3, para las respuestas de redirección HTTP, la biblioteca leería el cuerpo completo de la respuesta para vaciar la conexión y descomprimir el contenido innecesariamente. Esta descompresión ocurría incluso antes de que se llamara a cualquier método de lectura, y los límites de lectura configurados no restringían la cantidad de datos descomprimidos. Como resultado, no había ninguna salvaguarda contra las bombas de descompresión. Un servidor malicioso podría explotar esto para desencadenar un consumo excesivo de recursos en el cliente. Las aplicaciones y bibliotecas se ven afectadas cuando transmiten contenido de fuentes no confiables al establecer 'preload_content=False' cuando no deshabilitan las redirecciones. Los usuarios deberían actualizar al menos a urllib3 v2.6.3, en la cual la biblioteca no decodifica el contenido de las respuestas de redirección cuando 'preload_content=False'. Si la actualización no es posible de inmediato, deshabilite las redirecciones estableciendo 'redirect=False' para las solicitudes a fuentes no confiables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:urllib3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.22",
            "versionEndExcluding" : "2.6.3",
            "matchCriteriaId" : "845B6572-3E64-421E-9A0C-F94E5ED7A95B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21683",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:44.327",
      "lastModified" : "2026-01-12T18:02:27.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `icStatusCMM::CIccEvalCompare::EvaluateProfile()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'icStatusCMM::CIccEvalCompare::EvaluateProfile()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/183",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/228",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-f2wp-j3fr-938w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21684",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:44.480",
      "lastModified" : "2026-01-12T18:05:19.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagSpectralViewingConditions()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen Comportamiento Indefinido en 'CIccTagSpectralViewingConditions()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/216",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/225",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-fg9m-j9x8-8279",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21685",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:44.627",
      "lastModified" : "2026-01-12T18:08:58.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagLut16::Read()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen Comportamiento Indefinido en 'CIccTagLut16::Read()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/213",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/223",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-c3xr-6687-5c8p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21686",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:44.780",
      "lastModified" : "2026-01-12T18:12:09.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagLutAtoB::Validate()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen Comportamiento Indefinido en 'CIccTagLutAtoB::Validate()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/214",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/222",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-792q-cqq9-mq4x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21687",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:44.937",
      "lastModified" : "2026-01-12T18:14:19.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in `CIccTagCurve::CIccTagCurve()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen comportamiento indefinido en 'CIccTagCurve::CIccTagCurve()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.1",
            "matchCriteriaId" : "0E50DFFC-9185-4969-85A7-6D3976699720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/180",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/221",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-prmm-g479-4fv7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21688",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.087",
      "lastModified" : "2026-01-12T18:15:23.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `SIccCalcOp::ArgsPushed()` at `IccProfLib/IccMpeCalc.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'SIccCalcOp::ArgsPushed()' en 'IccProfLib/IccMpeCalc.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/379",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/422",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-3r2x-j7v3-pg6f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21689",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.233",
      "lastModified" : "2026-01-12T18:25:40.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccProfileXml::ParseBasic()` at `IccXML/IccLibXML/IccProfileXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'CIccProfileXml::ParseBasic()' en 'IccXML/IccLibXML/IccProfileXml.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-232"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        }, {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/382",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/423",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-5rqc-w93q-589m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21690",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.383",
      "lastModified" : "2026-01-12T18:26:22.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccTagXmlTagData::ToXml()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'CIccTagXmlTagData::ToXml()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-457"
        }, {
          "lang" : "en",
          "value" : "CWE-475"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/393",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/426",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-2f26-vh48-38g6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21691",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.527",
      "lastModified" : "2026-01-12T18:26:52.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccTag:IsTypeCompressed()`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'CIccTag:IsTypeCompressed()'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-140"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-697"
        }, {
          "lang" : "en",
          "value" : "CWE-1025"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/392",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/426",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-c9q5-x498-jv92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21692",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.677",
      "lastModified" : "2026-01-12T18:27:18.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `ToXmlCurve()` at `IccXML/IccLibXML/IccMpeXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'ToXmlCurve()' en 'IccXML/IccLibXML/IccMpeXml.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No hay soluciones alternativas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-588"
        }, {
          "lang" : "en",
          "value" : "CWE-704"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/388",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/432",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-7662-mf46-wr88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21693",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.830",
      "lastModified" : "2026-01-12T18:29:02.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccSegmentedCurveXml::ToXml()` at `IccXML/IccLibXML/IccMpeXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de confusión de tipos en 'CIccSegmentedCurveXml::ToXml()' en 'IccXML/IccLibXML/IccMpeXml.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        }, {
          "lang" : "en",
          "value" : "CWE-754"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/389",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/432",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-v3q7-7hw6-6jq8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22046",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:45.977",
      "lastModified" : "2026-01-14T18:44:13.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `CIccProfileXml::ParseBasic()` at `IccXML/IccLibXML/IccProfileXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de desbordamiento de búfer de pila (heap-buffer-overflow) en 'CIccProfileXml::ParseBasic()' en 'IccXML/IccLibXML/IccProfileXml.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-130"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/448",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/451",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-7v4q-mhr2-hj7r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/448",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/451",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22047",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T22:15:46.127",
      "lastModified" : "2026-01-14T18:45:16.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `SIccCalcOp::Describe()` at `IccProfLib/IccMpeCalc.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de desbordamiento de búfer de pila (heap-buffer-overflow) en 'SIccCalcOp::Describe()' en 'IccProfLib/IccMpeCalc.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-130"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/454",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/459",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-22q7-8347-79m5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/454",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21697",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T23:15:50.533",
      "lastModified" : "2026-03-09T13:57:52.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global `defaultClient` is mutated during request execution without synchronization, directly modifying the shared `http.Client`'s `Transport`, `Timeout`, and `CheckRedirect` properties. Impacted applications include that that use axios4go with concurrent requests (multiple goroutines, `GetAsync`, `PostAsync`, etc.), those where different requests use different proxy configurations, and those that handle sensitive data (authentication credentials, tokens, API keys). Version 0.6.4 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "axios4go es una biblioteca cliente HTTP de Go. Antes de la versión 0.6.4, existe una vulnerabilidad de condición de carrera en la configuración compartida del cliente HTTP. El `defaultClient` global se muta durante la ejecución de la solicitud sin sincronización, modificando directamente las propiedades `Transport`, `Timeout` y `CheckRedirect` del `http.Client` compartido. Las aplicaciones afectadas incluyen aquellas que usan axios4go con solicitudes concurrentes (múltiples goroutines, `GetAsync`, `PostAsync`, etc.), aquellas donde diferentes solicitudes usan diferentes configuraciones de proxy, y aquellas que manejan datos sensibles (credenciales de autenticación, tokens, claves API). La versión 0.6.4 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rezmoss:axios4go:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.6.4",
            "matchCriteriaId" : "53BFBFF7-32A9-4C6A-B563-6CABA5301DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rezmoss/axios4go/commit/b651604c64e66a115ab90cdab358b0181d74a842",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rezmoss/axios4go/releases/tag/v0.6.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rezmoss/axios4go/security/advisories/GHSA-cmj9-27wj-7x47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21851",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T23:15:50.677",
      "lastModified" : "2026-02-02T15:13:47.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal (Zip Slip) vulnerability exists in MONAI's `_download_from_ngc_private()` function. The function uses `zipfile.ZipFile.extractall()` without path validation, while other similar download functions in the same codebase properly use the existing `safe_extract_member()` function. Commit 4014c8475626f20f158921ae0cf98ed259ae4d59 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "MONAI (Medical Open Network for AI) es un kit de herramientas de IA para imágenes médicas. En versiones hasta la 1.5.1 inclusive, una vulnerabilidad de Salto de Ruta (Zip Slip) existe en la función _download_from_ngc_private() de MONAI. La función utiliza zipfile.ZipFile.extractall() sin validación de ruta, mientras que otras funciones de descarga similares en la misma base de código utilizan correctamente la función safe_extract_member() existente. El commit 4014c8475626f20f158921ae0cf98ed259ae4d59 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:project-monai:monai:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "A887CB32-431C-4AFD-8C59-B2262427288D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Project-MONAI/MONAI/commit/4014c8475626f20f158921ae0cf98ed259ae4d59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-9rg3-9pvr-6p27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      }, {
        "url" : "https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-9rg3-9pvr-6p27",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21857",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-07T23:15:50.830",
      "lastModified" : "2026-01-20T18:49:29.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webroot via path traversal in the Backup addon's file export functionality. The Backup addon does not validate the `EXPDIR` POST parameter against the UI-generated allowlist of permitted directories. An attacker can supply relative paths containing `../` sequences (or even absolute paths inside the document root) to include any readable file in the generated `.tar.gz` archive. Version 5.20.2 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "REDAXO es un sistema de gestión de contenido basado en PHP. Antes de la versión 5.20.2, los usuarios autenticados con permisos de copia de seguridad pueden leer archivos arbitrarios dentro del directorio raíz web (webroot) mediante salto de ruta en la funcionalidad de exportación de archivos del complemento Backup. El complemento Backup no valida el parámetro POST 'EXPDIR' contra la lista blanca de directorios permitidos generada por la interfaz de usuario. Un atacante puede proporcionar rutas relativas que contengan secuencias '../' (o incluso rutas absolutas dentro del directorio raíz del documento) para incluir cualquier archivo legible en el archivo '.tar.gz' generado. La versión 5.20.2 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redaxo:redaxo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.20.2",
            "matchCriteriaId" : "5BB9DA06-A124-4435-A4F0-D14EC2F291B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redaxo/redaxo/releases/tag/5.20.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redaxo/redaxo/security/advisories/GHSA-824x-88xg-cwrv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redaxo/redaxo/security/advisories/GHSA-824x-88xg-cwrv",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21694",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T00:15:59.680",
      "lastModified" : "2026-01-12T18:44:36.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50."
      }, {
        "lang" : "es",
        "value" : "Titra es un software de seguimiento de tiempo de proyectos de código abierto. Las versiones 0.99.49 e inferiores tienen un Control de Acceso Inadecuado, permitiendo a los usuarios ver y editar las entradas de tiempo de otros usuarios en proyectos privados a los que no se les ha concedido acceso. Este problema se ha solucionado en la versión 0.99.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kromit:titra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.99.50",
            "matchCriteriaId" : "271EC7B1-5D87-473E-A67A-C9DCE59DA114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kromitgmbh/titra/commit/29e6b88eca005107729e45a6f1731cf0fa5f8938",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kromitgmbh/titra/security/advisories/GHSA-mr2r-wjf8-cj3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kromitgmbh/titra/security/advisories/GHSA-mr2r-wjf8-cj3c",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21695",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T00:15:59.833",
      "lastModified" : "2026-01-12T18:40:56.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Titra is open source project time tracking software. In versions 0.99.49 and below, an API has a Mass Assignment vulnerability which allows authenticated users to inject arbitrary fields into time entries, bypassing business logic controls via the customfields parameter. The affected endpoint uses the JavaScript spread operator (...customfields) to merge user-controlled input directly into the database document. While customfields is validated as an Object type, there is no validation of which keys are permitted inside that object. This allows attackers to overwrite protected fields such as userId, hours, and state. The issue is fixed in version 0.99.50."
      }, {
        "lang" : "es",
        "value" : "Titra es un software de seguimiento de tiempo de proyectos de código abierto. En las versiones 0.99.49 e inferiores, una API tiene una vulnerabilidad de Asignación Masiva que permite a los usuarios autenticados inyectar campos arbitrarios en las entradas de tiempo, eludiendo los controles de lógica de negocio a través del parámetro customfields. El endpoint afectado utiliza el operador de propagación de JavaScript (...customfields) para fusionar la entrada controlada por el usuario directamente en el documento de la base de datos. Aunque customfields se valida como un tipo de Objeto, no hay validación de qué claves están permitidas dentro de ese objeto. Esto permite a los atacantes sobrescribir campos protegidos como userId, hours y state. El problema está solucionado en la versión 0.99.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kromit:titra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.99.50",
            "matchCriteriaId" : "271EC7B1-5D87-473E-A67A-C9DCE59DA114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kromitgmbh/titra/commit/29e6b88eca005107729e45a6f1731cf0fa5f8938",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kromitgmbh/titra/security/advisories/GHSA-gc65-vr47-jppq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kromitgmbh/titra/security/advisories/GHSA-gc65-vr47-jppq",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21858",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T00:15:59.990",
      "lastModified" : "2026-01-16T19:31:34.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Las versiones a partir de la 1.65.0 y anteriores a la 1.121.0 permiten a un atacante acceder a archivos en el servidor subyacente mediante la ejecución de ciertos flujos de trabajo basados en formularios. Un flujo de trabajo vulnerable podría conceder acceso a un atacante remoto no autenticado, lo que resultaría en la exposición de información sensible almacenada en el sistema y podría permitir un mayor compromiso dependiendo de la configuración de despliegue y el uso del flujo de trabajo. Este problema está solucionado en la versión 1.121.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.65.0",
            "versionEndExcluding" : "1.121.0",
            "matchCriteriaId" : "A90AFDBB-31A3-41C0-8E53-8D10D9FB47C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21859",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T00:16:00.150",
      "lastModified" : "2026-02-02T19:16:52.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailpit is an email testing tool and API for developers. Versions 1.28.0 and below have a Server-Side Request Forgery (SSRF) vulnerability in the /proxy endpoint, allowing attackers to make requests to internal network resources. The /proxy endpoint validates http:// and https:// schemes, but it does not block internal IP addresses, enabling attackers to access internal services and APIs. This vulnerability is limited to HTTP GET requests with minimal headers. The issue is fixed in version 1.28.1."
      }, {
        "lang" : "es",
        "value" : "Mailpit es una herramienta de prueba de correo electrónico y una API para desarrolladores. Las versiones 1.28.0 e inferiores tienen una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en el endpoint /proxy, permitiendo a los atacantes realizar peticiones a recursos de la red interna. El endpoint /proxy valida los esquemas http:// y https://, pero no bloquea las direcciones IP internas, lo que permite a los atacantes acceder a servicios y API internas. Esta vulnerabilidad está limitada a peticiones HTTP GET con encabezados mínimos. El problema está solucionado en la versión 1.28.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axllent:mailpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "AEB660CD-DB82-43AE-A1A8-7A4724C1967F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axllent/mailpit/commit/3b9b470c093b3d20b7d751722c1c24f3eed2e19d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-8v65-47jx-7mfr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-8v65-47jx-7mfr",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21869",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T00:16:00.297",
      "lastModified" : "2026-02-02T19:12:36.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input in the llama.cpp server's completion endpoints without validation to ensure it's non-negative. When a negative value is supplied and the context fills up, llama_memory_seq_rm/add receives a reversed range and negative offset, causing out-of-bounds memory writes in the token evaluation loop. This deterministic memory corruption can crash the process or enable remote code execution (RCE). There is no fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "llama.cpp es una inferencia de varios modelos LLM en C/C++. En los commits 55d4206c8 y anteriores, el parámetro n_discard se analiza directamente de la entrada JSON en los puntos finales de completado del servidor de llama.cpp sin validación para asegurar que no sea negativo. Cuando se suministra un valor negativo y el contexto se llena, llama_memory_seq_rm/add recibe un rango invertido y un desplazamiento negativo, causando escrituras de memoria fuera de límites en el bucle de evaluación de tokens. Esta corrupción de memoria determinista puede bloquear el proceso o permitir la ejecución remota de código (RCE). No hay una solución en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ggml:llama.cpp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A466917-A76C-4F63-B744-EC07FFB90CAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-8947-pfff-2f3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-8947-pfff-2f3c",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21875",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T00:16:00.457",
      "lastModified" : "2026-01-27T19:05:52.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to perform Blind SQL Injection through the add comment section within a channel. When adding a comment within a channel, there is a POST request to the /actions/ajax.php endpoint. The obj_id parameter within the POST request to /actions/ajax.php is then used within the user_exists function of the upload/includes/classes/user.class. php file as the $id parameter. It is then used within the count function of the upload/includes/classes/db.class. php file. The $id parameter is concatenated into the query without validation or sanitization, and a user-supplied input like 1' or 1=1-- - can be used to trigger the injection. This issue does not have a fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "ClipBucket v5 es una plataforma de código abierto para compartir vídeos. Las versiones 5.5.2-#187 y anteriores permiten a un atacante realizar una inyección SQL ciega a través de la sección de comentarios de un canal. Al añadir un comentario en un canal, se envía una solicitud POST al punto final /actions/ajax.php. El parámetro obj_id de la solicitud POST a /actions/ajax.php se utiliza posteriormente en la función user_exists del archivo upload/includes/classes/user.class.php como parámetro $id. A continuación, se utiliza en la función count del archivo upload/includes/classes/db.class.php. El parámetro $id se concatena en la consulta sin validación ni sanitización, y una entrada proporcionada por el usuario como 1' o 1=1-- puede utilizarse para desencadenar la inyección. Esta vulnerabilidad no tiene solución en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3",
            "versionEndExcluding" : "5.5.2-191",
            "matchCriteriaId" : "9F870E38-684D-4CB6-9A2C-E8CA278B45E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-crpv-fmc4-j392",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-crpv-fmc4-j392",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21868",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T01:15:55.483",
      "lastModified" : "2026-01-20T18:47:56.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flag Forge is a Capture The Flag (CTF) platform. Versions 2.3.2 and below have a Regular Expression Denial of Service (ReDoS) vulnerability in the user profile API endpoint (/api/user/[username]). The application constructs a regular expression dynamically using unescaped user input (the username parameter). An attacker can exploit this by sending a specially crafted username containing regex meta-characters (e.g., deeply nested groups or quantifiers), causing the MongoDB regex engine to consume excessive CPU resources. This can lead to Denial of Service for other users. The issue is fixed in version 2.3.3. To workaround this issue, implement a Web Application Firewall (WAF) rule to block requests containing regex meta-characters in the URL path."
      }, {
        "lang" : "es",
        "value" : "Flag Forge es una plataforma de Capture The Flag (CTF). Las versiones 2.3.2 e inferiores tienen una vulnerabilidad de denegación de servicio por expresión regular (ReDoS) en el endpoint de la API de perfil de usuario (/api/user/[username]). La aplicación construye una expresión regular dinámicamente utilizando entrada de usuario sin escapar (el parámetro username). Un atacante puede explotar esto enviando un nombre de usuario especialmente diseñado que contenga metacaracteres de regex (p. ej., grupos anidados profundamente o cuantificadores), lo que provoca que el motor de regex de MongoDB consuma recursos excesivos de CPU. Esto puede llevar a la denegación de servicio para otros usuarios. El problema está solucionado en la versión 2.3.3. Como solución alternativa a este problema, implemente una regla de cortafuegos de aplicaciones web (WAF) para bloquear las solicitudes que contengan metacaracteres de regex en la ruta URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flagforge:flagforge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "FF98A9BF-17BE-4FBF-9D72-725005A165C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-949h-9824-xmcx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21877",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T01:15:55.697",
      "lastModified" : "2026-01-20T15:08:24.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version 1.121.3. Administrators can reduce exposure by disabling the Git node and limiting access for untrusted users, but upgrading to the latest version is recommended."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. En las versiones 0.121.2 e inferiores, un atacante autenticado podría ejecutar código malicioso utilizando el servicio n8n. Esto podría resultar en un compromiso total y puede impactar tanto las instancias autoalojadas como las de n8n Cloud. Este problema está solucionado en la versión 1.121.3. Los administradores pueden reducir la exposición deshabilitando el nodo Git y limitando el acceso a usuarios no confiables, pero se recomienda actualizar a la última versión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.123.0",
            "versionEndExcluding" : "1.121.3",
            "matchCriteriaId" : "ECD7E4E7-DB69-4A3C-B8AE-655D0081624D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/f4b009d00d1f4ba9359b8e8f1c071e3d910a55f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-v364-rw7m-3263",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22035",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T01:15:55.847",
      "lastModified" : "2026-01-27T19:11:58.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format() to insert user-controlled filenames directly into shell commands without sanitization, allowing attackers to execute arbitrary commands by crafting malicious filenames containing shell metacharacters. This issue is fixed in version 1.3.311."
      }, {
        "lang" : "es",
        "value" : "Greenshot es una utilidad de captura de pantalla de código abierto para Windows. Las versiones 1.3.310 e inferiores son vulnerables a la inyección de comandos del sistema operativo a través del procesamiento de nombres de archivo no saneados. El método FormatArguments en ExternalCommandDestination.cs:269 utiliza string.Format() para insertar nombres de archivo controlados por el usuario directamente en comandos de shell sin saneamiento, lo que permite a los atacantes ejecutar comandos arbitrarios al crear nombres de archivo maliciosos que contienen metacaracteres de shell. Este problema está corregido en la versión 1.3.311."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getgreenshot:greenshot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.311",
            "matchCriteriaId" : "964FCC5B-97DF-4775-B17B-8E1FB673B863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/greenshot/greenshot/commit/5dedd5c9f0a9896fa0af1d4980d875a48bf432cb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/greenshot/greenshot/releases/tag/v1.3.311",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/greenshot/greenshot/security/advisories/GHSA-7hvw-q8q5-gpmj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/greenshot/greenshot/security/advisories/GHSA-7hvw-q8q5-gpmj",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21879",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T02:15:53.490",
      "lastModified" : "2026-01-20T18:15:10.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Open Redirect attack that allows malicious actors to redirect authenticated users to attacker-controlled websites. By crafting URLs such as //evil.com, attackers can bypass the filter_var($url, FILTER_VALIDATE_URL) validation check. This vulnerability could be exploited to conduct phishing attacks, steal user credentials, or distribute malware. The issue is fixed in version 1.2.49."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos centrado en la metodología Kanban. Las versiones 1.2.48 e inferiores son vulnerables a un ataque de redirección abierta que permite a actores maliciosos redirigir a usuarios autenticados a sitios web controlados por el atacante. Al elaborar URLs como //evil.com, los atacantes pueden eludir la comprobación de validación filter_var($url, FILTER_VALIDATE_URL). Esta vulnerabilidad podría ser explotada para llevar a cabo ataques de phishing, robar credenciales de usuario o distribuir malware. El problema está solucionado en la versión 1.2.49."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.49",
            "matchCriteriaId" : "AFA1D972-E76A-4A20-95F5-68D9915D3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/93bcae03301a6d34185a8dba977417e6b3de519f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-mhv9-7m9w-7hcq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-mhv9-7m9w-7hcq",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21880",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T02:15:53.650",
      "lastModified" : "2026-01-20T18:38:16.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below have an LDAP Injection vulnerability in the LDAP authentication mechanism. User-supplied input is directly substituted into LDAP search filters without proper sanitization, allowing attackers to enumerate all LDAP users, discover sensitive user attributes, and perform targeted attacks against specific accounts. This issue is fixed in version 1.2.49."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos enfocado en la metodología Kanban. Las versiones 1.2.48 e inferiores tienen una vulnerabilidad de inyección LDAP en el mecanismo de autenticación LDAP. La entrada proporcionada por el usuario se sustituye directamente en los filtros de búsqueda LDAP sin una sanitización adecuada, permitiendo a los atacantes enumerar todos los usuarios LDAP, descubrir atributos de usuario sensibles y realizar ataques dirigidos contra cuentas específicas. Este problema se corrige en la versión 1.2.49."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.49",
            "matchCriteriaId" : "AFA1D972-E76A-4A20-95F5-68D9915D3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/dd374079f7c2d1dab74c1680960e684ff8668586",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-v66r-m28r-wmq7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-v66r-m28r-wmq7",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21881",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T02:15:53.803",
      "lastModified" : "2026-01-20T15:57:22.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a critical authentication bypass when REVERSE_PROXY_AUTH is enabled. The application blindly trusts HTTP headers for user authentication without verifying the request originated from a trusted reverse proxy. An attacker can impersonate any user, including administrators, by simply sending a spoofed HTTP header. This issue is fixed in version 1.2.49."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos centrado en la metodología Kanban. Las versiones 1.2.48 e inferiores son vulnerables a una omisión de autenticación crítica cuando REVERSE_PROXY_AUTH está habilitado. La aplicación confía ciegamente en los encabezados HTTP para la autenticación de usuarios sin verificar que la solicitud se originó desde un proxy inverso de confianza. Un atacante puede suplantar a cualquier usuario, incluidos los administradores, simplemente enviando un encabezado HTTP falsificado. Este problema se solucionó en la versión 1.2.49."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.49",
            "matchCriteriaId" : "AFA1D972-E76A-4A20-95F5-68D9915D3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/7af6143e2ad25b5c15549cca8af4341c7ac4e2fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-wwpf-3j4p-739w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-wwpf-3j4p-739w",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21883",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T02:15:53.950",
      "lastModified" : "2026-03-09T14:00:25.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bokeh is an interactive visualization library written in Python. In versions 3.8.1 and below, if a server is configured with an allowlist (e.g., dashboard.corp), an attacker can register a domain like dashboard.corp.attacker.com (or use a subdomain if applicable) and lure a victim to visit it. The malicious site can then initiate a WebSocket connection to the vulnerable Bokeh server. Since the Origin header (e.g., http://dashboard.corp.attacker.com/) matches the allowlist according to the flawed logic, the connection is accepted. Once connected, the attacker can interact with the Bokeh server on behalf of the victim, potentially accessing sensitive data, or modifying visualizations. This issue is fixed in version 3.8.2."
      }, {
        "lang" : "es",
        "value" : "Bokeh es una biblioteca de visualización interactiva escrita en Python. En las versiones 3.8.1 e inferiores, si un servidor está configurado con una lista de permitidos (por ejemplo, dashboard.corp), un atacante puede registrar un dominio como dashboard.corp.attacker.com (o usar un subdominio si corresponde) y atraer a una víctima para que lo visite. El sitio malicioso puede entonces iniciar una conexión WebSocket al servidor Bokeh vulnerable. Dado que el encabezado Origin (por ejemplo, HTTP://dashboard.corp.attacker.com/) coincide con la lista de permitidos según la lógica defectuosa, la conexión es aceptada. Una vez conectado, el atacante puede interactuar con el servidor Bokeh en nombre de la víctima, potencialmente accediendo a datos sensibles o modificando visualizaciones. Este problema está solucionado en la versión 3.8.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1385"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bokeh:bokeh:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "9F5AC308-2F7D-4567-894B-E7417523D04B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bokeh/bokeh/security/advisories/GHSA-793v-589g-574v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://aydinnyunus.github.io/2026/01/24/bokeh-websocket-hijacking-cve-2026-21883/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0707",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-08T04:15:56.520",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the \"Bearer\" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-551"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0707",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427768",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21427",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-08T04:15:56.690",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result,  arbitrary code may be executed with the privileges of the running installer."
      }, {
        "lang" : "es",
        "value" : "Los instaladores para múltiples productos proporcionados por PIONEER CORPORATION contienen un problema con la ruta de búsqueda de DLL, lo que puede llevar a la carga insegura de Bibliotecas de Enlace Dinámico. Como resultado, código arbitrario puede ser ejecutado con los privilegios del instalador en ejecución."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.pioneer/ja/support/software/stellanova/dac_driver/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN17956874/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22577",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-08T04:15:56.880",
      "lastModified" : "2026-01-08T04:15:56.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22578",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-08T04:15:56.963",
      "lastModified" : "2026-01-08T04:15:56.963",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22579",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-08T04:15:57.023",
      "lastModified" : "2026-01-08T04:15:57.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22580",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-08T04:15:57.080",
      "lastModified" : "2026-01-08T04:15:57.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22581",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-08T04:15:57.143",
      "lastModified" : "2026-01-08T04:15:57.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0697",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T05:16:02.963",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/edit_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20admin.php%20sql%20injection1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732998",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0698",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T06:15:49.530",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/edit_students.php. Such manipulation of the argument admin_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20students_details.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339975",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339975",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732999",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0699",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T07:15:49.460",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20activity.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339976",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339976",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733000",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0700",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T07:15:49.733",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/check_admin.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20check_admin.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733001",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0701",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T08:15:45.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/add_admin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20add_admin.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.339978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.339978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733002",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733490",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0674",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T10:15:54.910",
      "lastModified" : "2026-04-23T15:36:26.790",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress forms-for-campaign-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Campaign Monitor for WordPress: from n/a through <= 2.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/forms-for-campaign-monitor/vulnerability/wordpress-campaign-monitor-for-wordpress-plugin-2-9-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0675",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T10:15:55.043",
      "lastModified" : "2026-01-09T11:15:50.553",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0676",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T10:15:55.170",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zorka: from n/a through <= 1.5.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/zorka/vulnerability/wordpress-zorka-theme-1-5-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21871",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T10:15:55.300",
      "lastModified" : "2026-01-15T17:40:09.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. From versions 2.13.0 to 3.4.1, there is a XSS risk in NiceGUI when developers pass attacker-controlled strings into ui.navigate.history.push() or ui.navigate.history.replace(). These helpers are documented as History API wrappers for updating the browser URL without page reload. However, if the URL argument is embedded into generated JavaScript without proper escaping, a crafted payload can break out of the intended string context and execute arbitrary JavaScript in the victim’s browser. Applications that do not pass untrusted input into ui.navigate.history.push/replace are not affected. This issue has been patched in version 3.5.0."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de interfaz de usuario (UI) basado en Python. Desde las versiones 2.13.0 hasta la 3.4.1, existe un riesgo de XSS en NiceGUI cuando los desarrolladores pasan cadenas controladas por el atacante a ui.navigate.history.push() o ui.navigate.history.replace(). Estas funciones auxiliares están documentadas como envoltorios de la API de History para actualizar la URL del navegador sin recargar la página. Sin embargo, si el argumento de la URL se incrusta en JavaScript generado sin el escape adecuado, una carga útil diseñada puede salir del contexto de cadena previsto y ejecutar JavaScript arbitrario en el navegador de la víctima. Las aplicaciones que no pasan entradas no confiables a ui.navigate.history.push/replace no se ven afectadas. Este problema ha sido parcheado en la versión 3.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.13.0",
            "versionEndExcluding" : "3.5.0",
            "matchCriteriaId" : "09329AA3-8C5E-402E-97FB-3BE65F4F0DF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/releases/tag/v3.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-7grm-h62g-5m97",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21872",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T10:15:55.470",
      "lastModified" : "2026-01-15T17:41:02.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the click event listener used by ui.sub_pages, combined with attacker-controlled link rendering on the page, causes XSS when the user actively clicks on the link. This issue has been patched in version 3.5.0."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de interfaz de usuario (UI) basado en Python. Desde las versiones 2.22.0 hasta la 3.4.1, una implementación insegura en el oyente de eventos de clic utilizado por ui.sub_pages, combinada con la renderización de enlaces controlada por el atacante en la página, causa XSS cuando el usuario hace clic activamente en el enlace. Este problema ha sido parcheado en la versión 3.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "3.5.0",
            "matchCriteriaId" : "37903F79-6269-4F0A-939A-36F3E3CC41B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/releases/tag/v3.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-m7j5-rq9j-6jj9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21873",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T10:15:55.617",
      "lastModified" : "2026-01-15T17:45:57.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the pushstate event listener used by ui.sub_pages allows an attacker to manipulate the fragment identifier of the URL, which they can do despite being cross-site, using an iframe. This issue has been patched in version 3.5.0."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de UI basado en Python. Desde las versiones 2.22.0 hasta la 3.4.1, una implementación insegura en el oyente de eventos pushstate utilizado por ui.sub_pages permite a un atacante manipular el identificador de fragmento de la URL, lo cual pueden hacer a pesar de ser de sitio cruzado, usando un iframe. Este problema ha sido parcheado en la versión 3.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "3.5.0",
            "matchCriteriaId" : "37903F79-6269-4F0A-939A-36F3E3CC41B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/releases/tag/v3.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-mhpg-c27v-6mxr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21874",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T10:15:55.820",
      "lastModified" : "2026-01-15T17:50:01.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation when Redis hits its connection limit. NiceGUI continues accepting new connections - errors are logged but the app stays up with broken storage functionality. This issue has been patched in version 3.5.0."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de interfaz de usuario (UI) basado en Python. Desde las versiones v2.10.0 hasta la 3.4.1, un atacante no autenticado puede agotar las conexiones de Redis abriendo y cerrando repetidamente pestañas del navegador en cualquier aplicación NiceGUI que utilice almacenamiento respaldado por Redis. Las conexiones nunca se liberan, lo que lleva a una degradación del servicio cuando Redis alcanza su límite de conexiones. NiceGUI sigue aceptando nuevas conexiones; se registran errores, pero la aplicación permanece activa con una funcionalidad de almacenamiento rota. Este problema ha sido parcheado en la versión 3.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "3.5.0",
            "matchCriteriaId" : "1FBD1A44-26D5-44F9-9D65-6654C756FB59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/commit/6c52eb2c90c4b67387c025b29646b4bc1578eb83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/releases/tag/v3.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-mp55-g7pj-rvm2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-mp55-g7pj-rvm2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21894",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T10:15:55.970",
      "lastModified" : "2026-01-20T15:09:07.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. In versions from 0.150.0 to before 2.2.2, an authentication bypass vulnerability in the Stripe Trigger node allows unauthenticated parties to trigger workflows by sending forged Stripe webhook events. The Stripe Trigger creates and stores a Stripe webhook signing secret when registering the webhook endpoint, but incoming webhook requests were not verified against this secret. As a result, any HTTP client that knows the webhook URL could send a POST request containing a matching event type, causing the workflow to execute as if a legitimate Stripe event had been received. This issue affects n8n users who have active workflows using the Stripe Trigger node. An attacker could potentially fake payment or subscription events and influence downstream workflow behavior. The practical risk is reduced by the fact that the webhook URL contains a high-entropy UUID; however, authenticated n8n users with access to the workflow can view this webhook ID. This issue has been patched in version 2.2.2. A temporary workaround for this issue involves users deactivating affected workflows or restricting access to workflows containing Stripe Trigger nodes to trusted users only."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. En versiones desde la 0.150.0 hasta antes de la 2.2.2, una vulnerabilidad de omisión de autenticación en el nodo Stripe Trigger permite a partes no autenticadas activar flujos de trabajo enviando eventos webhook de Stripe falsificados. El Stripe Trigger crea y almacena un secreto de firma de webhook de Stripe al registrar el punto final del webhook, pero las solicitudes de webhook entrantes no se verificaban contra este secreto. Como resultado, cualquier cliente HTTP que conoce la URL del webhook podría enviar una solicitud POST que contenga un tipo de evento coincidente, haciendo que el flujo de trabajo se ejecute como si se hubiera recibido un evento de Stripe legítimo. Este problema afecta a los usuarios de n8n que tienen flujos de trabajo activos usando el nodo Stripe Trigger. Un atacante podría potencialmente falsificar eventos de pago o suscripción e influir en el comportamiento del flujo de trabajo posterior. El riesgo práctico se reduce por el hecho de que la URL del webhook contiene un UUID de alta entropía; sin embargo, los usuarios autenticados de n8n con acceso al flujo de trabajo pueden ver este ID de webhook. Este problema ha sido parcheado en la versión 2.2.2. Una solución alternativa temporal para este problema implica que los usuarios desactiven los flujos de trabajo afectados o restrinjan el acceso a los flujos de trabajo que contienen nodos Stripe Trigger solo a usuarios de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.150.0",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "7E294540-A745-4668-9F5B-157B29DB92CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/a61a5991093c41863506888336e808ac1eff8d59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/pull/22764",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-jf52-3f2h-h9j5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22242",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T10:15:56.127",
      "lastModified" : "2026-01-12T16:42:51.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreShop is a Pimcore enhanced eCommerce solution. Prior to version 4.1.8, a blind SQL injection vulnerability exists in the application that allows an authenticated administrator-level user to extract database contents using boolean-based or time-based techniques. The database account used by the application is read-only and non-DBA, limiting impact to confidential data disclosure only. No data modification or service disruption is possible. This issue has been patched in version 4.1.8."
      }, {
        "lang" : "es",
        "value" : "CoreShop es una solución de comercio electrónico mejorada con Pimcore. Antes de la versión 4.1.8, existe una vulnerabilidad de inyección SQL ciega en la aplicación que permite a un usuario autenticado con nivel de administrador extraer el contenido de la base de datos utilizando técnicas basadas en booleanos o en tiempo. La cuenta de la base de datos utilizada por la aplicación es de solo lectura y no es DBA, limitando el impacto solo a la divulgación de datos confidenciales. No es posible la modificación de datos ni la interrupción del servicio. Este problema ha sido parcheado en la versión 4.1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-564"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coreshop:coreshop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.8",
            "matchCriteriaId" : "6D2A63DE-1084-454E-934C-6F3A9BF401DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coreshop/CoreShop/commit/59e84fec59d113952b6d28a9b30c6317f9e6e5dd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coreshop/CoreShop/security/advisories/GHSA-ch7p-mpv4-4vg4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/coreshop/CoreShop/security/advisories/GHSA-ch7p-mpv4-4vg4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0719",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-08T13:15:43.283",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:1948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2007",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2402",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2514",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0719",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427906",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/477",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21876",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T14:15:57.087",
      "lastModified" : "2026-04-09T16:16:26.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the first rule in a chain iterates over a collection (like `MULTIPART_PART_HEADERS`), the capture variables (`TX:0`, `TX:1`) get overwritten with each iteration. Only the last captured value is available to the chained rule, which means malicious charsets in earlier parts can be missed if a later part has a legitimate charset. Versions 4.22.0 and 3.3.8 patch the issue."
      }, {
        "lang" : "es",
        "value" : "El conjunto de reglas base de OWASP (CRS) es un conjunto de reglas genéricas de detección de ataques para usar con firewalls de aplicaciones web compatibles. Antes de las versiones 4.22.0 y 3.3.8, la regla actual 922110 tiene un error al procesar solicitudes multipart con múltiples partes. Cuando la primera regla en una cadena itera sobre una colección (como 'MULTIPART_PART_HEADERS'), las variables de captura ('TX:0', 'TX:1') se sobrescriben con cada iteración. Solo el último valor capturado está disponible para la regla encadenada, lo que significa que los conjuntos de caracteres maliciosos en partes anteriores pueden pasarse por alto si una parte posterior tiene un conjunto de caracteres legítimo. Las versiones 4.22.0 y 3.3.8 parchean el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-794"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:owasp_modsecurity_core_rule_set:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "85E31C8A-3287-4CD7-A3C8-29FB164CB229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:owasp_modsecurity_core_rule_set:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.22.0",
            "matchCriteriaId" : "1FCBECBB-D90D-4883-81FF-F5F43C7A926C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coreruleset/coreruleset/commit/80d80473abf71bd49bf6d3c1ab221e3c74e4eb83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coreruleset/coreruleset/commit/9917985de09a6cf38b3261faf9105e909d67a7d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coreruleset/coreruleset/releases/tag/v3.3.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/coreruleset/coreruleset/releases/tag/v4.22.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/coreruleset/coreruleset/security/advisories/GHSA-36fv-25j3-r2c5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/daytriftnewgen/CVE-2026-21876",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21885",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T14:15:57.257",
      "lastModified" : "2026-01-12T16:55:42.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Miniflux 2 is an open source feed reader. Prior to version 2.2.16, Miniflux's media proxy endpoint (`GET /proxy/{encodedDigest}/{encodedURL}`) can be abused to perform Server-Side Request Forgery (SSRF). An authenticated user can cause Miniflux to generate a signed proxy URL for attacker-chosen media URLs embedded in feed entry content, including internal addresses (e.g., localhost, private RFC1918 ranges, or link-local metadata endpoints). Requesting the resulting `/proxy/...` URL makes Miniflux fetch and return the internal response. Version 2.2.16 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Miniflux 2 es un lector de feeds de código abierto. Antes de la versión 2.2.16, el endpoint de proxy de medios de Miniflux ('GET /proxy/{encodedDigest}/{encodedURL}') puede ser abusado para realizar Falsificación de Petición del Lado del Servidor (SSRF). Un usuario autenticado puede hacer que Miniflux genere una URL de proxy firmada para URLs de medios elegidas por el atacante incrustadas en el contenido de la entrada del feed, incluyendo direcciones internas (p. ej., localhost, rangos privados RFC1918 o endpoints de metadatos de enlace local). Solicitar la URL resultante '/proxy/...' hace que Miniflux obtenga y devuelva la respuesta interna. La versión 2.2.16 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniflux_project:miniflux:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.16",
            "matchCriteriaId" : "145FED28-3379-45DD-B388-01F5ADF6A766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miniflux/v2/security/advisories/GHSA-xwh2-742g-w3wp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/miniflux/v2/security/advisories/GHSA-xwh2-742g-w3wp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21891",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T14:15:57.403",
      "lastModified" : "2026-01-12T17:13:00.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions up to and including 1.5.0, the application checks the validity of the username but appears to skip, misinterpret, or incorrectly validate the password when the provided username matches a known system service account. The application's login function fails to properly handle the password validation result for these users, effectively granting authenticated access to anyone who knows one of these common usernames and provides any password. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "ZimaOS es un fork de CasaOS, un sistema operativo para dispositivos Zima y sistemas x86-64 con UEFI. En versiones hasta la 1.5.0 inclusive, la aplicación verifica la validez del nombre de usuario, pero parece omitir, malinterpretar o validar incorrectamente la contraseña cuando el nombre de usuario proporcionado coincide con una cuenta de servicio de sistema conocida. La función de inicio de sesión de la aplicación no maneja correctamente el resultado de la validación de la contraseña para estos usuarios, otorgando efectivamente acceso autenticado a cualquiera que conozca uno de estos nombres de usuario comunes y proporcione cualquier contraseña. A la fecha de publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zimaspace:zimaos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F96E7421-2784-4C1C-9785-E4E26C728760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-xj93-qw9p-jxq4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-xj93-qw9p-jxq4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21892",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T14:15:57.553",
      "lastModified" : "2026-01-20T18:28:39.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of versions prior to 2026.01.05. The application constructs SQL queries using unsafe string formatting (Python % operator) with user-supplied input (workflow_id) directly from URL routes. This allows an unauthenticated attacker with access to the visualization dashboard to inject arbitrary SQL commands, potentially leading to data exfiltration or denial of service against the monitoring database. Version 2026.01.05 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Parsl es una biblioteca de scripting paralelo de Python. Una vulnerabilidad de inyección SQL existe en el componente parsl-visualize de versiones anteriores a 2026.01.05. La aplicación construye consultas SQL utilizando formato de cadena inseguro (operador % de Python) con entrada proporcionada por el usuario (workflow_id) directamente desde rutas URL. Esto permite a un atacante no autenticado con acceso al panel de visualización inyectar comandos SQL arbitrarios, lo que podría llevar a la exfiltración de datos o a la denegación de servicio contra la base de datos de monitoreo. La versión 2026.01.05 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uchicago:parsl:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2026.01.05",
            "matchCriteriaId" : "834A40DA-5C88-414B-9EFE-BC593FC7C4D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Parsl/parsl/commit/013a928461e70f38a33258bd525a351ed828e974",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Parsl/parsl/security/advisories/GHSA-f2mf-q878-gh58",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Parsl/parsl/security/advisories/GHSA-f2mf-q878-gh58",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21895",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T14:15:57.720",
      "lastModified" : "2026-03-12T19:27:31.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is `1`. Version 0.9.10 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "La caja 'rsa' es una implementación RSA escrita en Rust. Antes de la versión 0.9.10, al crear una clave privada RSA a partir de sus componentes, la construcción entra en pánico en lugar de devolver un error cuando uno de los números primos es '1'. La versión 0.9.10 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:rsa:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.9.10",
            "matchCriteriaId" : "491081DD-0767-47F2-B946-541C68473B90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RustCrypto/RSA/commit/2926c91bef7cb14a7ccd42220a698cf4b1b692f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/RSA/security/advisories/GHSA-9c48-w39g-hm26",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22028",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:44.853",
      "lastModified" : "2026-01-12T18:58:38.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON. A regression introduced in Preact 10.26.5 caused this protection to be softened. In applications where values from JSON payloads are assumed to be strings and passed unmodified to Preact as children, a specially-crafted JSON payload could be constructed that would be incorrectly treated as a valid VNode. When this chain of failures occurs it can result in HTML injection, which can allow arbitrary script execution if not mitigated by CSP or other means. Applications using affected Preact versions are vulnerable if they meet all of the following conditions: first, pass unmodified, unsanitized values from user-modifiable data sources (APIs, databases, local storage, etc.) directly into the render tree; second assume these values are strings but the data source could return actual JavaScript objects instead of JSON strings; and third, the data source either fails to perform type sanitization AND blindly stores/returns raw objects interchangeably with strings, OR is compromised (e.g., poisoned local storage, filesystem, or database). Versions 10.26.10, 10.27.3, and 10.28.2 patch the issue. The patch versions restore the previous strict equality checks that prevent JSON-parsed objects from being treated as valid VNodes. Other mitigations are available for those who cannot immediately upgrade. Validate input types, cast or validate network data, sanitize external data, and use Content Security Policy (CSP)."
      }, {
        "lang" : "es",
        "value" : "Preact, un framework ligero de desarrollo web, protección de serialización JSON para evitar que los elementos del DOM Virtual se construyan a partir de JSON arbitrario. Una regresión introducida en Preact 10.26.5 hizo que esta protección se suavizara. En aplicaciones donde se asume que los valores de las cargas útiles JSON son cadenas y se pasan sin modificar a Preact como hijos, se podría construir una carga útil JSON especialmente diseñada que sería tratada incorrectamente como un VNode válido. Cuando esta cadena de fallos ocurre, puede resultar en inyección HTML, lo que puede permitir la ejecución arbitraria de scripts si no se mitiga mediante CSP u otros medios. Las aplicaciones que utilizan versiones afectadas de Preact son vulnerables si cumplen todas las siguientes condiciones: primero, pasan valores sin modificar y sin sanear de fuentes de datos modificables por el usuario (APIs, bases de datos, almacenamiento local, etc.) directamente al árbol de renderizado; segundo, asumen que estos valores son cadenas pero la fuente de datos podría devolver objetos JavaScript reales en lugar de cadenas JSON; y tercero, la fuente de datos o bien no realiza la sanitización de tipos Y almacena/devuelve ciegamente objetos sin procesar indistintamente con cadenas, O está comprometida (p. ej., almacenamiento local, sistema de archivos o base de datos envenenados). Las versiones 10.26.10, 10.27.3 y 10.28.2 aplican un parche al problema. Las versiones del parche restauran las comprobaciones de igualdad estricta anteriores que evitan que los objetos analizados por JSON sean tratados como VNodes válidos. Otras mitigaciones están disponibles para aquellos que no pueden actualizar de inmediato. Validar tipos de entrada, convertir o validar datos de red, sanear datos externos y usar la Política de Seguridad de Contenido (CSP)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:preactjs:preact:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.26.5",
            "versionEndExcluding" : "10.26.10",
            "matchCriteriaId" : "1DDBA9E9-C9AF-4A0C-A2B7-E2EA43E9DF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:preactjs:preact:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.27.0",
            "versionEndExcluding" : "10.27.3",
            "matchCriteriaId" : "0E2DB796-AF49-4BCD-9D92-FDF44B81BA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:preactjs:preact:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.28.0",
            "versionEndExcluding" : "10.28.2",
            "matchCriteriaId" : "FD739420-5F94-401E-8D6E-048B9EE0AAC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/preactjs/preact/security/advisories/GHSA-36hm-qxxp-pg3m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      }, {
        "url" : "https://github.com/preactjs/preact/security/advisories/GHSA-36hm-qxxp-pg3m",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22032",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:45.000",
      "lastModified" : "2026-01-20T18:15:40.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.14.0, an open redirect vulnerability exists in the Directus SAML authentication callback endpoint. During SAML authentication, the `RelayState` parameter is intended to preserve the user's original destination. However, while the login initiation flow validates redirect targets against allowed domains, this validation is not applied to the callback endpoint. This allows an attacker to craft a malicious authentication request that redirects users to an arbitrary external URL upon completion. The vulnerability is present in both the success and error handling paths of the callback. This vulnerability can be exploited without authentication. Version 11.14.0 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Directus es un API en tiempo real y un panel de control de aplicaciones para gestionar contenido de base de datos SQL. Antes de la versión 11.14.0, existe una vulnerabilidad de redirección abierta en el endpoint de callback de autenticación SAML de Directus. Durante la autenticación SAML, el parámetro 'RelayState' está destinado a preservar el destino original del usuario. Sin embargo, mientras que el flujo de inicio de sesión valida los objetivos de redirección contra dominios permitidos, esta validación no se aplica al endpoint de callback. Esto permite a un atacante crear una solicitud de autenticación maliciosa que redirige a los usuarios a una URL externa arbitraria al finalizar. La vulnerabilidad está presente tanto en las rutas de manejo de éxito como de error del callback. Esta vulnerabilidad puede ser explotada sin autenticación. La versión 11.14.0 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "11.14.0",
            "matchCriteriaId" : "DB17C72D-7DA6-4F3F-9642-454A8C3F77DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/directus/directus/commit/dad9576ea9362905cc4de8028d3877caff36dc23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-3573-4c68-g8cc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22034",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:45.150",
      "lastModified" : "2026-03-09T14:04:29.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream validation scripts based on Vulcan Logic Disassembler (VLD) while the VLD extension is not available to the CLI SAPI, all files from multipart POST requests are evaluated as PHP code. The issue was fixed in version 0.13.0."
      }, {
        "lang" : "es",
        "value" : "Snuffleupagus es un módulo que eleva el coste de los ataques contra sitios web eliminando clases de errores y proporcionando un sistema de parcheo virtual. En despliegues de Snuffleupagus anteriores a la versión 0.13.0 con la característica de validación de subida no predeterminada habilitada y configurada para usar uno de los scripts de validación ascendentes basados en Vulcan Logic Disassembler (VLD) mientras la extensión VLD no está disponible para la SAPI CLI, todos los archivos de las solicitudes POST multipart se evalúan como código PHP. El problema se solucionó en la versión 0.13.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-636"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jvoisin:snuffleupagus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.0",
            "matchCriteriaId" : "27E48E9D-66B6-409E-8510-A8770570D1A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jvoisin/snuffleupagus/blob/9278dc77bab2a219e770a1b31dd6797bc9070e37/src/sp_upload_validation.c#L92-L100",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jvoisin/snuffleupagus/blob/v0.12.0/scripts/upload_validation.php",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jvoisin/snuffleupagus/blob/v0.12.0/scripts/upload_validation.py",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jvoisin/snuffleupagus/commit/9278dc77bab2a219e770a1b31dd6797bc9070e37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jvoisin/snuffleupagus/security/advisories/GHSA-c4ch-xw5p-2mvc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/php/php-src/blob/e4098da58a9eaee759d728d98a27d809cde37671/ext/standard/dl.c#L165-L166",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/php/php-src/blob/e4098da58a9eaee759d728d98a27d809cde37671/main/rfc1867.c#L1269-L1274",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://snuffleupagus.readthedocs.io/config.html#upload-validation",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22041",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:45.300",
      "lastModified" : "2026-01-12T19:07:50.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Logging Redactor es una biblioteca de Python diseñada para redactar datos sensibles en registros basándose en patrones de expresiones regulares y/o claves de diccionario. Antes de la versión 0.0.6, los tipos no-cadena se convierten en tipos cadena, lo que provoca errores de tipo en las conversiones %d. El problema ha sido parcheado en la versión 0.0.6. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:armurox:logging_redactor:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.0.6",
            "matchCriteriaId" : "A05F3F62-BA45-476E-9E5B-DB7E99A5C19F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/armurox/loggingredactor/issues/7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/armurox/loggingredactor/releases/tag/0.0.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/armurox/loggingredactor/security/advisories/GHSA-rvjx-cfjh-5mc9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/armurox/loggingredactor/issues/7",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22042",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:45.443",
      "lastModified" : "2026-01-15T21:11:34.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API validates permissions using `ExportIAMAction` instead of `ImportIAMAction`, allowing a principal with export-only IAM permissions to perform import operations. Since importing IAM data performs privileged write actions (creating/updating users, groups, policies, and service accounts), this can lead to unauthorized IAM modification and privilege escalation. Version 1.0.0-alpha.79 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. Antes de la versión 1.0.0-alpha.79, la API de administración 'ImportIam' valida los permisos usando 'ExportIAMAction' en lugar de 'ImportIAMAction', permitiendo que una entidad con permisos IAM solo de exportación realice operaciones de importación. Dado que la importación de datos IAM realiza acciones de escritura privilegiadas (creación/actualización de usuarios, grupos, políticas y cuentas de servicio), esto puede llevar a una modificación no autorizada de IAM y escalada de privilegios. La versión 1.0.0-alpha.79 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha1:*:*:*:rust:*:*",
            "matchCriteriaId" : "454A2F3A-76CF-4F2D-97FE-AEDEBE8FF1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha10:*:*:*:rust:*:*",
            "matchCriteriaId" : "32B2D146-7920-4C6D-B42F-1BDDF5193394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha11:*:*:*:rust:*:*",
            "matchCriteriaId" : "B25BC365-35BA-438A-B5B1-3FA696767821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha12:*:*:*:rust:*:*",
            "matchCriteriaId" : "B69213F1-7D94-4185-9309-FF3140733550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD2476D6-257C-4A96-BED4-D8B002402242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*",
            "matchCriteriaId" : "774EC64C-73ED-4D6B-893B-30A066DA934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B567F4F-131F-4D4B-8C0C-9212F22F2BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*",
            "matchCriteriaId" : "711F7641-A2B2-410B-B05D-6656F9A1798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB79AC62-2B79-441C-BC09-4C834C32EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*",
            "matchCriteriaId" : "62DE84EE-9F3B-460A-AC13-D2B8CCBC5B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*",
            "matchCriteriaId" : "DEF70599-6550-49D2-9800-FE3249A66568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha2:*:*:*:rust:*:*",
            "matchCriteriaId" : "550786BD-A6A4-454B-BDAB-67AE64DABCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDFE93A5-B6D7-482A-A891-4D8844604C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*",
            "matchCriteriaId" : "79AC4F00-B006-46C2-863F-2946BB02B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*",
            "matchCriteriaId" : "E313A243-ED56-498D-988F-E088693EBB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*",
            "matchCriteriaId" : "D3A60CB7-1F01-4A60-8555-C225AC89B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*",
            "matchCriteriaId" : "1C98618D-CF5D-406B-8AA5-34B412F3D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*",
            "matchCriteriaId" : "98373960-FEDB-4933-92D5-2A597045DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*",
            "matchCriteriaId" : "83E0E1A5-3C07-45FF-80FD-0DB375E1575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*",
            "matchCriteriaId" : "C2D66076-4005-4F58-A8E2-69062053D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*",
            "matchCriteriaId" : "1D8CB0F5-299F-4BB0-B264-F5642DD991C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*",
            "matchCriteriaId" : "96E20418-FE0C-4202-8771-FFF8EBB1B62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha3:*:*:*:rust:*:*",
            "matchCriteriaId" : "C16A625B-3FC4-48EB-9107-6E7585080D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*",
            "matchCriteriaId" : "810A17F9-AEEA-4396-B437-120789BBE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*",
            "matchCriteriaId" : "7B1FECD4-E993-417D-AEA7-F8E97DC6A5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*",
            "matchCriteriaId" : "3839F299-E0E7-4994-A8AC-B67A534C9847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*",
            "matchCriteriaId" : "46CAEA4E-5DFD-4668-ABF0-DC53EB04EE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*",
            "matchCriteriaId" : "591075AB-81EF-4D42-A2A0-FA28BC6B78CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*",
            "matchCriteriaId" : "FD46ED07-6DCC-4BF8-A4E8-78B2FF6DCE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*",
            "matchCriteriaId" : "6DF15533-D6E1-49B0-B30A-6FEECC7AE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*",
            "matchCriteriaId" : "EC68F03A-D299-4BFB-A99E-4B08E4E0848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*",
            "matchCriteriaId" : "0DD60024-CAB2-4DA6-A9CA-503D2631E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*",
            "matchCriteriaId" : "32470ED0-7873-41A3-B2D5-7CD444ED0A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha4:*:*:*:rust:*:*",
            "matchCriteriaId" : "A88E9293-4B7C-4C52-9943-47197DB55D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*",
            "matchCriteriaId" : "E2EFC74D-40E7-426C-9F7B-3B654F2B940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*",
            "matchCriteriaId" : "EAAF504E-51A5-492B-887E-BB67788B899C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*",
            "matchCriteriaId" : "35C83244-D2C7-4D70-9C0B-D0590B00C608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*",
            "matchCriteriaId" : "429E4ECD-997A-4D3B-9DE2-60835AE14473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*",
            "matchCriteriaId" : "5DDDBAA5-D207-498C-A6F0-79F07806C511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*",
            "matchCriteriaId" : "81758B85-6D2B-4914-96EC-E4CCDE2F9A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*",
            "matchCriteriaId" : "D439B484-E32D-4A6A-84EE-9307A028F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDA137F7-DC8A-44F4-8061-F502AC8DD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*",
            "matchCriteriaId" : "AE3EF7B3-E8C0-4844-9165-3A26EB426615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB40D926-AE20-46A7-9B6E-ED1BADB9A08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha5:*:*:*:rust:*:*",
            "matchCriteriaId" : "7F5E8DE5-ABB0-4884-B473-07FA596A8707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*",
            "matchCriteriaId" : "3A43A950-59A6-4343-815A-953C11DC3F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B36190-C30B-45BC-9738-BE0B3321025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*",
            "matchCriteriaId" : "86A2967C-E2C6-4C73-9BDE-CCECACDB2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*",
            "matchCriteriaId" : "5E10A654-E265-4469-8099-ABBB1F5D8BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*",
            "matchCriteriaId" : "762591A8-A0A2-45D2-B15F-1E85DFC5CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*",
            "matchCriteriaId" : "53DE196C-1914-40AE-854D-4988073D57C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha6:*:*:*:rust:*:*",
            "matchCriteriaId" : "2B55C391-0232-4F06-A9D8-3663FA564E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha7:*:*:*:rust:*:*",
            "matchCriteriaId" : "54AB158B-F536-4627-8C6B-65AEE112FDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*",
            "matchCriteriaId" : "96461CC0-012C-40D7-B1CB-FF9A6B7EB644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha8:*:*:*:rust:*:*",
            "matchCriteriaId" : "F800AEB3-3AD7-42D8-BC3A-23703851435B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha9:*:*:*:rust:*:*",
            "matchCriteriaId" : "5821FADC-CF73-4639-911A-F3302D239B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-vcwh-pff9-64cc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-vcwh-pff9-64cc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22043",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:45.583",
      "lastModified" : "2026-01-15T21:13:08.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 through 1.0.0-alpha.78, a flawed `deny_only` short-circuit in RustFS IAM allows a restricted service account or STS credential to self-issue an unrestricted service account, inheriting the parent’s full privileges. This enables privilege escalation and bypass of session/inline policy restrictions. Version 1.0.0-alpha.79 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. En las versiones 1.0.0-alpha.13 a 1.0.0-alpha.78, un cortocircuito defectuoso de 'deny_only' en el IAM de RustFS permite que una cuenta de servicio restringida o una credencial STS autoemita una cuenta de servicio sin restricciones, heredando los privilegios completos del padre. Esto permite la escalada de privilegios y la elusión de las restricciones de políticas de sesión/en línea. La versión 1.0.0-alpha.79 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD2476D6-257C-4A96-BED4-D8B002402242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*",
            "matchCriteriaId" : "774EC64C-73ED-4D6B-893B-30A066DA934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B567F4F-131F-4D4B-8C0C-9212F22F2BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*",
            "matchCriteriaId" : "711F7641-A2B2-410B-B05D-6656F9A1798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB79AC62-2B79-441C-BC09-4C834C32EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*",
            "matchCriteriaId" : "62DE84EE-9F3B-460A-AC13-D2B8CCBC5B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*",
            "matchCriteriaId" : "DEF70599-6550-49D2-9800-FE3249A66568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDFE93A5-B6D7-482A-A891-4D8844604C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*",
            "matchCriteriaId" : "79AC4F00-B006-46C2-863F-2946BB02B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*",
            "matchCriteriaId" : "E313A243-ED56-498D-988F-E088693EBB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*",
            "matchCriteriaId" : "D3A60CB7-1F01-4A60-8555-C225AC89B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*",
            "matchCriteriaId" : "1C98618D-CF5D-406B-8AA5-34B412F3D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*",
            "matchCriteriaId" : "98373960-FEDB-4933-92D5-2A597045DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*",
            "matchCriteriaId" : "83E0E1A5-3C07-45FF-80FD-0DB375E1575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*",
            "matchCriteriaId" : "C2D66076-4005-4F58-A8E2-69062053D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*",
            "matchCriteriaId" : "1D8CB0F5-299F-4BB0-B264-F5642DD991C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*",
            "matchCriteriaId" : "96E20418-FE0C-4202-8771-FFF8EBB1B62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*",
            "matchCriteriaId" : "810A17F9-AEEA-4396-B437-120789BBE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*",
            "matchCriteriaId" : "7B1FECD4-E993-417D-AEA7-F8E97DC6A5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*",
            "matchCriteriaId" : "3839F299-E0E7-4994-A8AC-B67A534C9847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*",
            "matchCriteriaId" : "46CAEA4E-5DFD-4668-ABF0-DC53EB04EE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*",
            "matchCriteriaId" : "591075AB-81EF-4D42-A2A0-FA28BC6B78CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*",
            "matchCriteriaId" : "FD46ED07-6DCC-4BF8-A4E8-78B2FF6DCE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*",
            "matchCriteriaId" : "6DF15533-D6E1-49B0-B30A-6FEECC7AE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*",
            "matchCriteriaId" : "EC68F03A-D299-4BFB-A99E-4B08E4E0848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*",
            "matchCriteriaId" : "0DD60024-CAB2-4DA6-A9CA-503D2631E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*",
            "matchCriteriaId" : "32470ED0-7873-41A3-B2D5-7CD444ED0A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*",
            "matchCriteriaId" : "E2EFC74D-40E7-426C-9F7B-3B654F2B940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*",
            "matchCriteriaId" : "EAAF504E-51A5-492B-887E-BB67788B899C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*",
            "matchCriteriaId" : "35C83244-D2C7-4D70-9C0B-D0590B00C608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*",
            "matchCriteriaId" : "429E4ECD-997A-4D3B-9DE2-60835AE14473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*",
            "matchCriteriaId" : "5DDDBAA5-D207-498C-A6F0-79F07806C511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*",
            "matchCriteriaId" : "81758B85-6D2B-4914-96EC-E4CCDE2F9A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*",
            "matchCriteriaId" : "D439B484-E32D-4A6A-84EE-9307A028F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDA137F7-DC8A-44F4-8061-F502AC8DD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*",
            "matchCriteriaId" : "AE3EF7B3-E8C0-4844-9165-3A26EB426615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB40D926-AE20-46A7-9B6E-ED1BADB9A08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*",
            "matchCriteriaId" : "3A43A950-59A6-4343-815A-953C11DC3F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B36190-C30B-45BC-9738-BE0B3321025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*",
            "matchCriteriaId" : "86A2967C-E2C6-4C73-9BDE-CCECACDB2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*",
            "matchCriteriaId" : "5E10A654-E265-4469-8099-ABBB1F5D8BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*",
            "matchCriteriaId" : "762591A8-A0A2-45D2-B15F-1E85DFC5CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*",
            "matchCriteriaId" : "53DE196C-1914-40AE-854D-4988073D57C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*",
            "matchCriteriaId" : "96461CC0-012C-40D7-B1CB-FF9A6B7EB644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-xgr5-qc6w-vcg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-xgr5-qc6w-vcg9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22241",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T15:15:45.720",
      "lastModified" : "2026-01-23T19:15:54.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an arbitrary file upload vulnerability in the theme import functionality enables an attacker with administrative privileges to upload arbitrary files on the server's file system. The main cause of the issue is that no validation or sanitization of the file's present inside the zip archive. This leads to remote code execution on the web server. Version 4.2 patches the issue."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de carga de archivos arbitrarios en la funcionalidad de importación de temas permite a un atacante con privilegios administrativos cargar archivos arbitrarios en el sistema de archivos del servidor. La causa principal del problema es que no hay validación ni saneamiento de los archivos presentes dentro del archivo zip. Esto lleva a la ejecución remota de código en el servidor web. La versión 4.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openeclass:openeclass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "85D1FE2D-D5FA-4B0D-B577-1F6A08EC6832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/commit/3f9d267b79812a4dd708bb1302339e6a5abe67d9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-gq72-7mwg-424r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-rf6j-xgqp-wjxg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-gq72-7mwg-424r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twelvesec.com/2026/01/16/rce-via-arbitrary-file-upload-at-open-eclass/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-rf6j-xgqp-wjxg",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22244",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T16:16:02.647",
      "lastModified" : "2026-01-15T21:14:29.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch."
      }, {
        "lang" : "es",
        "value" : "OpenMetadata es una plataforma unificada de metadatos. Las versiones anteriores a la 1.11.4 son vulnerables a la ejecución remota de código a través de Inyección de Plantillas del Lado del Servidor (SSTI) en plantillas de correo electrónico de FreeMarker. Un atacante debe tener privilegios administrativos para explotar la vulnerabilidad. La versión 1.11.4 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.4",
            "matchCriteriaId" : "733E3727-E14A-4E3E-B2EE-538425CEFEB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-metadata/OpenMetadata/commit/bffe7c45807763f9b682021d4211c478d2a08bb3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-5f29-2333-h9c7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-5f29-2333-h9c7",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22245",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T16:16:02.803",
      "lastModified" : "2026-01-15T20:36:42.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. By nature, Mastodon performs a lot of outbound requests to user-provided domains. Mastodon, however, has some protection mechanism to disallow requests to local IP addresses (unless specified in `ALLOWED_PRIVATE_ADDRESSES`) to avoid the \"confused deputy\" problem. The list of disallowed IP address ranges was lacking some IP address ranges that can be used to reach local IP addresses. An attacker can use an IP address in the affected ranges to make Mastodon perform HTTP requests against loopback or local network hosts, potentially allowing access to otherwise private resources and services. This is fixed in Mastodon v4.5.4, v4.4.11, v4.3.17 and v4.2.29."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito, de código abierto, basado en ActivityPub. Por naturaleza, Mastodon realiza muchas solicitudes salientes a dominios proporcionados por el usuario. Mastodon, sin embargo, tiene algún mecanismo de protección para denegar solicitudes a direcciones IP locales (a menos que se especifique en 'ALLOWED_PRIVATE_ADDRESSES') para evitar el problema del 'diputado confundido'. La lista de rangos de direcciones IP no permitidas carecía de algunos rangos de direcciones IP que pueden usarse para alcanzar direcciones IP locales. Un atacante puede usar una dirección IP en los rangos afectados para hacer que Mastodon realice solicitudes HTTP contra hosts de bucle invertido o de red local, lo que podría permitir el acceso a recursos y servicios que de otro modo serían privados. Esto está corregido en Mastodon v4.5.4, v4.4.11, v4.3.17 y v4.2.29."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.29",
            "matchCriteriaId" : "9DC30BD1-D8D8-4CA4-AC41-1AA95AADDBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.17",
            "matchCriteriaId" : "DEAC34A7-EB88-4E46-B5D6-F4EBB88CE049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.11",
            "matchCriteriaId" : "DD92863A-CB76-45AA-BF4D-9870B24E8109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "3E8FBAF5-C7BC-4980-9780-50BA935D126B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/commit/0f4e8a6240b5af1f2c3f34d2793d8610c6ef2aca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/commit/17022907866710a72a1b1fc0a5ce9538bad1b4c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/commit/71ae4cf2cf5138ccdda64b1b1d665849b688686d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-xfrj-c749-jxxq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22246",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T16:16:02.957",
      "lastModified" : "2026-01-22T13:52:28.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships for a particular event fails to check the owner of the list before returning the lost relationships. Any registered local user can access the list of lost followers and followed users caused by any severance event, and go through all severance events this way. The leaked information does not include the name of the account which has lost follows and followers. This has been fixed in Mastodon v4.3.17, v4.4.11 and v4.5.4."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito, de código abierto, basado en ActivityPub. Mastodon 4.3 añadió notificaciones de relaciones cortadas, permitiendo a los usuarios finales inspeccionar las relaciones que perdieron como resultado de una acción de moderación. El código que permite a los usuarios descargar listas de relaciones cortadas para un evento particular no verifica al propietario de la lista antes de devolver las relaciones perdidas. Cualquier usuario local registrado puede acceder a la lista de seguidores perdidos y usuarios seguidos causada por cualquier evento de corte, y revisar todos los eventos de corte de esta manera. La información filtrada no incluye el nombre de la cuenta que ha perdido seguimientos y seguidores. Esto ha sido corregido en Mastodon v4.3.17, v4.4.11 y v4.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.17",
            "matchCriteriaId" : "6B2706E5-A6D0-4790-A3E6-5DE023465AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.11",
            "matchCriteriaId" : "DD92863A-CB76-45AA-BF4D-9870B24E8109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "3E8FBAF5-C7BC-4980-9780-50BA935D126B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/commit/68e30985ca7afdb89af1b2e9dc962e1993dc8076",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/commit/b2bcd34486fd6681cc0f30028086ef0f47282adf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/commit/c1fb6893c5175d74c074f6f786d504c8bc610d57",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-ww85-x9cp-5v24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22255",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T16:16:03.110",
      "lastModified" : "2026-01-14T18:48:22.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in `CIccCLUT::Init()` at `IccProfLib/IccTagLut.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del International Color Consortium (ICC). Las versiones anteriores a la 2.3.1.2 tienen una vulnerabilidad de desbordamiento de búfer de pila en 'CIccCLUT::Init()' en 'IccProfLib/IccTagLut.cpp'. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La versión 2.3.1.2 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-130"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/466",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/469",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-qv2w-mq3g-73gv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0671",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-08T17:15:50.240",
      "lastModified" : "2026-01-15T21:50:54.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E177CDD3-DB91-4A7B-9C1E-1CE45AC857BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360E8939-87FB-40A8-A07E-E3F5CC4A2AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBA4166-5A79-4636-8122-71A6DB43FE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:mediawiki-extensions-uploadwizard:1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393B61C5-BB08-4269-840B-C68BFE5F5219"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I16de2211594ea9a686868ad7789f9879bf981fa1",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T407157",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21638",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-08T17:15:50.357",
      "lastModified" : "2026-01-14T21:06:07.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.\r\n\r\n\r\nAffected Products:\r\nUBB-XG (Version 1.2.2 and earlier) \r\nUDB-Pro/UDB-Pro-Sector  (Version 1.4.1 and earlier) \r\nUBB  (Version 3.1.5 and earlier) \r\n \r\nMitigation:\r\nUpdate your UBB-XG to Version 1.2.3 or later.\r\nUpdate your UDB-Pro/UDB-Pro-Sector  to Version 1.4.2 or later.\r\nUpdate your UBB to Version 3.1.7 or later."
      }, {
        "lang" : "es",
        "value" : "Un actor malicioso dentro del alcance Wi-Fi del producto afectado podría aprovechar una vulnerabilidad en el Protocolo Inalámbrico airMAX para lograr una ejecución remota de código (RCE) dentro del producto afectado.\n\nProductos Afectados:\nUBB-XG (Versión 1.2.2 y anteriores)\nUDB-Pro/UDB-Pro-Sector (Versión 1.4.1 y anteriores)\nUBB (Versión 3.1.5 y anteriores)\n\nMitigación:\nActualice su UBB-XG a la Versión 1.2.3 o posterior.\nActualice su UDB-Pro/UDB-Pro-Sector a la Versión 1.4.2 o posterior.\nActualice su UBB a la Versión 3.1.7 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:ubb-xg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "D3F0A7CB-D400-4398-B59D-62849049956B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:ubb-xg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840F091-FA53-4F41-9DDE-F00C0C377EC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:udb-pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "691CC9AC-2146-4758-A112-63FD94997A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:udb-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B87A97E-15F6-4524-BDE4-670C0E2FC8FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:udb-pro-sector_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "770CD4B8-8548-4797-9FCB-C10400E44EA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:udb-pro-sector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050664F-2D0A-42D9-AF9A-DCC35E77991C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:ubb_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "52AAAA01-7576-46BD-AC80-09EA5B3D6263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:ubb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6480788-66E3-496A-B1D8-4A190E5D2222"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-060-060/cde18da7-2bc4-41bb-a9cc-48a4a4c479c1",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21639",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-08T17:15:50.483",
      "lastModified" : "2026-01-14T21:06:35.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.\r\n\r\n \r\n\r\nAffected Products:\r\n\r\nairMAX AC (Version 8.7.20 and earlier)\r\nairMAX M (Version 6.3.22 and earlier)\r\nairFiber AF60-XG (Version 1.2.2 and earlier)\r\nairFiber AF60 (Version 2.6.7 and earlier)\r\n\r\n \r\n\r\nMitigation:\r\n\r\nUpdate your airMAX AC to Version 8.7.21 or later.\r\nUpdate your airMAX M to Version 6.3.24 or later.\r\nUpdate your airFiber AF60-XG to Version 1.2.3 or later.\r\nUpdate your airFiber AF60 to Version 2.6.8 or later."
      }, {
        "lang" : "es",
        "value" : "Un actor malicioso dentro del alcance Wi-Fi del producto afectado podría aprovechar una vulnerabilidad en el Protocolo Inalámbrico airMAX para lograr una ejecución remota de código (RCE) dentro del producto afectado.\n\nProductos Afectados:\nairMAX AC (Versión 8.7.20 y anteriores)\nairMAX M (Versión 6.3.22 y anteriores)\nairFiber AF60-XG (Versión 1.2.2 y anteriores)\nairFiber AF60 (Versión 2.6.7 y anteriores)\n\nMitigación:\nActualice su airMAX AC a la Versión 8.7.21 o posterior.\nActualice su airMAX M a la Versión 6.3.24 o posterior.\nActualice su airFiber AF60-XG a la Versión 1.2.3 o posterior.\nActualice su airFiber AF60 a la Versión 2.6.8 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:airmax_ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.21",
            "matchCriteriaId" : "E6CAE32F-15CF-472D-9CB2-2B863A9FF429"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:airmax_ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7522076-32AA-4C46-A383-55496EB8E403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:airmax_m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.24",
            "matchCriteriaId" : "23228893-D868-4C84-82A8-3AAA30193F95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:airmax_m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22401E7D-9BB7-4015-A28B-1C134C429E56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:airfiber_af60-xg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "C7197F20-55D0-4EF4-9C97-60A56E888427"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:airfiber_af60-xg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE317510-2899-438A-9C95-83A6C7FA1B2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:airfiber_af60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.8",
            "matchCriteriaId" : "F1C29843-49DD-4B68-89C6-14E3CFB70E62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:airfiber_af60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F52A22-F069-426B-8664-E94E41E3863E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-061-061/1e4fe5f8-29c7-4a7d-a518-01b1537983ba",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22486",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:50.777",
      "lastModified" : "2026-04-28T19:36:41.000",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Re Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Re Gallery: from n/a through 1.18.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en el Plugin Hakob Re Gallery &amp; Responsive Photo Gallery permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta al Plugin Re Gallery &amp; Responsive Photo Gallery: desde n/a hasta 1.17.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/wordpress/plugin/regallery/vulnerability/wordpress-re-gallery-responsive-photo-gallery-plugin-plugin-1-17-17-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22487",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:50.923",
      "lastModified" : "2026-04-23T15:36:34.253",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in baqend Speed Kit baqend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Speed Kit: from n/a through <= 2.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en baqend Speed Kit permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Speed Kit: desde n/a hasta 2.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/baqend/vulnerability/wordpress-speed-kit-plugin-2-0-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22488",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.070",
      "lastModified" : "2026-04-23T15:36:34.363",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Welcome for Beaver Builder: from n/a through <= 1.0.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Falta de Autorización en IdeaBox Creations Dashboard Welcome for Beaver Builder permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Dashboard Welcome for Beaver Builder: desde n/a hasta 1.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/dashboard-welcome-for-beaver-builder/vulnerability/wordpress-dashboard-welcome-for-beaver-builder-plugin-1-0-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22489",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.220",
      "lastModified" : "2026-04-23T15:36:34.477",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Wptexture Image Slider Slideshow image-slider-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider Slideshow: from n/a through <= 1.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Wptexture Image Slider Slideshow permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Image Slider Slideshow: desde n/a hasta 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/image-slider-slideshow/vulnerability/wordpress-image-slider-slideshow-plugin-1-8-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22490",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.370",
      "lastModified" : "2026-04-23T15:36:34.587",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in niklaslindemann Bulk Landing Page Creator for WordPress LPagery lpagery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Landing Page Creator for WordPress LPagery: from n/a through <= 2.4.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en niklaslindemann Bulk Landing Page Creator para WordPress LPagery permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Bulk Landing Page Creator para WordPress LPagery: desde n/d hasta 2.4.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/lpagery/vulnerability/wordpress-bulk-landing-page-creator-for-wordpress-lpagery-plugin-2-4-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22492",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.520",
      "lastModified" : "2026-04-23T15:36:34.830",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Nawawi Jamili Docket Cache docket-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Docket Cache: from n/a through <= 24.07.04."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Nawawi Jamili Docket Cache permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Docket Cache: desde n/a hasta 24.07.04."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/docket-cache/vulnerability/wordpress-docket-cache-plugin-24-07-04-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22517",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.663",
      "lastModified" : "2026-04-23T15:36:37.740",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Passionate Brains GA4WP: Google Analytics para WordPress permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a GA4WP: Google Analytics para WordPress: desde n/a hasta 2.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ga-for-wp/vulnerability/wordpress-ga4wp-google-analytics-for-wordpress-plugin-2-10-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22518",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.810",
      "lastModified" : "2026-04-23T15:36:37.860",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows DOM-Based XSS.This issue affects X Addons for Elementor: from n/a through <= 1.0.23."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('Cross-site Scripting') vulnerabilidad en pencilwp X Addons for Elementor permite XSS basado en DOM. Este problema afecta a X Addons for Elementor: desde n/a hasta 1.0.23."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/x-addons-elementor/vulnerability/wordpress-x-addons-for-elementor-plugin-1-0-23-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22519",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:51.960",
      "lastModified" : "2026-04-23T15:36:37.970",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev MediaPress mediapress allows Stored XSS.This issue affects MediaPress: from n/a through <= 1.6.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en BuddyDev MediaPress permite XSS Almacenado. Este problema afecta a MediaPress: desde n/d hasta 1.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mediapress/vulnerability/wordpress-mediapress-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22521",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:52.100",
      "lastModified" : "2026-04-23T15:36:38.200",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in G5Theme Handmade Framework handmade-framework allows PHP Local File Inclusion.This issue affects Handmade Framework: from n/a through <= 3.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') en G5Theme Handmade Framework permite la inclusión local de ficheros PHP. Este problema afecta a Handmade Framework: desde n/a hasta 3.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/handmade-framework/vulnerability/wordpress-handmade-framework-plugin-3-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22522",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-08T17:15:52.240",
      "lastModified" : "2026-04-23T15:36:38.310",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Munir Kamal Block Slider block-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Block Slider: from n/a through <= 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Munir Kamal Block Slider permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Block Slider: desde n/a hasta 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/block-slider/vulnerability/wordpress-block-slider-plugin-2-2-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21896",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T18:15:59.593",
      "lastModified" : "2026-02-02T19:02:51.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kirby is an open-source content management system. From versions 5.0.0 to 5.2.1, Kirby is missing permission checks in the content changes API. This vulnerability affects all Kirby sites where user permissions are configured to prevent specific role(s) from performing write actions, specifically by disabling the update permission with the intent to prevent modifications to site content. This vulnerability does not affect those who have not altered the deviated from default user permissions. This issue has been patched in version 5.2.2."
      }, {
        "lang" : "es",
        "value" : "Kirby es un sistema de gestión de contenido de código abierto. Desde las versiones 5.0.0 hasta la 5.2.1, Kirby carece de comprobaciones de permisos en la API de cambios de contenido. Esta vulnerabilidad afecta a todos los sitios de Kirby donde los permisos de usuario están configurados para evitar que rol(es) específico(s) realicen acciones de escritura, específicamente deshabilitando el permiso de actualización con la intención de prevenir modificaciones al contenido del sitio. Esta vulnerabilidad no afecta a aquellos que no han alterado los permisos de usuario predeterminados. Este problema ha sido parcheado en la versión 5.2.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkirby:kirby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.2",
            "matchCriteriaId" : "E9AE695A-D212-4B4E-B595-71C44FE6EE2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getkirby/kirby/commit/f5ce1347b427b819bf193acf11fd0da232f7af47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getkirby/kirby/releases/tag/5.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/getkirby/kirby/security/advisories/GHSA-4j78-4xrm-cr2f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22230",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:15:59.750",
      "lastModified" : "2026-01-26T21:03:00.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. Fixed in eCASE Platform 11.14.1.0."
      }, {
        "lang" : "es",
        "value" : "OPEXUS eCASE Audit permite a un atacante autenticado modificar JavaScript del lado del cliente o elaborar solicitudes HTTP para acceder a funciones o botones que han sido deshabilitados o bloqueados por un administrador. Corregido en eCASE Platform 11.14.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opexustech:ecase_audit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.14.1.0",
            "matchCriteriaId" : "1F954E97-A5E0-43E1-98D3-8F1AEA592F8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opexustech.com/docs/eCase/11.14.X/eCASE_Release_Notes_11.14.1.0.pdf",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-01.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22230",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22231",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:15:59.910",
      "lastModified" : "2026-02-05T19:23:56.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0."
      }, {
        "lang" : "es",
        "value" : "OPEXUS eCASE Audit permite a un atacante autenticado guardar JavaScript como un comentario dentro de la funcionalidad Document Check Out. El JavaScript se ejecuta cada vez que otro usuario ve el Action History Log. Corregido en OPEXUS eCASE Platform 11.14.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opexustech:ecase_audit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndExcluding" : "11.14.1.0",
            "matchCriteriaId" : "F2B018BC-4C7E-4788-8AD4-67F0EB588B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opexustech.com/docs/eCase/11.14.X/eCASE_Release_Notes_11.14.1.0.pdf",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-01.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22231",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22232",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:16:00.063",
      "lastModified" : "2026-02-05T19:24:46.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the \"A or SIC Number\" field within the Project Setup functionality. The JavaScript is executed whenever another user views the project. Fixed in OPEXUS eCASE Audit 11.14.2.0."
      }, {
        "lang" : "es",
        "value" : "OPEXUS eCASE Audit permite a un atacante autenticado guardar JavaScript en el campo 'A or SIC Number' dentro de la funcionalidad de Configuración de Proyecto. El JavaScript se ejecuta cada vez que otro usuario ve el proyecto. Corregido en OPEXUS eCASE Audit 11.14.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opexustech:ecase_audit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndExcluding" : "11.14.2.0",
            "matchCriteriaId" : "5A4D2029-9D59-4E65-B116-7405E4D37F4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opexustech.com/docs/oig/audit/eCase_Audit_Release_Notes_11.14.2.0.pdf",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-01.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22232",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22233",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:16:00.220",
      "lastModified" : "2026-02-05T19:23:24.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the \"Estimated Staff Hours\" field. The JavaScript is executed whenever another user visits the Project Cost tab. Fixed in OPEXUS eCASE Audit 11.14.2.0."
      }, {
        "lang" : "es",
        "value" : "OPEXUS eCASE Audit permite a un atacante autenticado guardar JavaScript como un comentario en el campo 'Horas de personal estimadas'. El JavaScript se ejecuta cada vez que otro usuario visita la pestaña 'Costo del proyecto'. Corregido en OPEXUS eCASE Audit 11.14.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opexustech:ecase_audit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndExcluding" : "11.14.2.0",
            "matchCriteriaId" : "5A4D2029-9D59-4E65-B116-7405E4D37F4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opexustech.com/docs/oig/audit/eCase_Audit_Release_Notes_11.14.2.0.pdf",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-01.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22233",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22234",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:16:00.380",
      "lastModified" : "2026-02-18T14:05:09.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files."
      }, {
        "lang" : "es",
        "value" : "OPEXUS eCasePortal anterior a la versión 9.0.45.0 permite a un atacante no autenticado navegar al endpoint 'Attachments.aspx', iterar a través de valores predecibles de 'formid', y descargar o eliminar todos los archivos subidos por el usuario, o subir nuevos archivos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opexustech:ecase_portal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.45.0",
            "matchCriteriaId" : "925D4EE5-4C8E-43F6-9F2E-5DC1CB429F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-02.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22234",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22235",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:16:00.523",
      "lastModified" : "2026-02-18T14:06:17.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files."
      }, {
        "lang" : "es",
        "value" : "OPEXUS eComplaint antes de la versión 9.0.45.0 permite a un atacante visitar el endpoint 'DocumentOpen.aspx', iterar a través de valores predecibles de 'chargeNumber', y descargar cualquier archivo subido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opexustech:ecase_ecomplaint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.45.0",
            "matchCriteriaId" : "41F14451-171F-4167-83A5-24C5DD735121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-02.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22235",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22587",
      "sourceIdentifier" : "9119a7d8-5eab-497f-8521-727c672e3725",
      "published" : "2026-01-08T18:16:00.807",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS."
      }, {
        "lang" : "es",
        "value" : "Ideagen DevonWay contiene una vulnerabilidad de cross-site scripting almacenado. Un atacante remoto y autenticado podría crear una carga útil en la página 'Informes' que se ejecuta cuando otro usuario ve el informe. Corregido en 2.62.4 y 2.62 LTS."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-03.json",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725"
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22587",
        "source" : "9119a7d8-5eab-497f-8521-727c672e3725"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21860",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T19:15:59.000",
      "lastModified" : "2026-02-02T17:15:30.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safe_join function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. Windows still accepts them with any file extension, such as CON.txt, or trailing spaces such as CON. This issue has been patched in version 3.1.5."
      }, {
        "lang" : "es",
        "value" : "Werkzeug es una completa biblioteca de aplicaciones web WSGI. Antes de la versión 3.1.5, la función safe_join de Werkzeug permite segmentos de ruta con nombres de dispositivos de Windows que tienen extensiones de archivo o espacios finales. En Windows, existen nombres de dispositivos especiales como CON, AUX, etc. que están implícitamente presentes y son legibles en cada directorio. Windows aún los acepta con cualquier extensión de archivo, como CON.txt, o espacios finales como CON. Este problema ha sido parcheado en la versión 3.1.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-67"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.5",
            "matchCriteriaId" : "B45012A0-44EF-4DE3-9D85-C02212BD7F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pallets/werkzeug/commit/7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/security/advisories/GHSA-87hc-h4r5-73f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22253",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T19:15:59.950",
      "lastModified" : "2026-02-02T17:09:22.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soft Serve is a self-hostable Git server for the command line. Prior to version 0.11.2, an authorization bypass in the LFS lock deletion endpoint allows any authenticated user with repository write access to delete locks owned by other users by setting the force flag. The vulnerable code path processes force deletions before retrieving user context, bypassing ownership validation entirely. This issue has been patched in version 0.11.2."
      }, {
        "lang" : "es",
        "value" : "Soft Serve es un servidor Git autoalojable para la línea de comandos. Antes de la versión 0.11.2, una omisión de autorización en el endpoint de eliminación de bloqueos LFS permite a cualquier usuario autenticado con acceso de escritura al repositorio eliminar bloqueos propiedad de otros usuarios al establecer la bandera de forzado. La ruta de código vulnerable procesa las eliminaciones forzadas antes de recuperar el contexto del usuario, omitiendo completamente la validación de propiedad. Este problema ha sido parcheado en la versión 0.11.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charm:soft_serve:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.11.2",
            "matchCriteriaId" : "4E11AA52-59BD-42E8-AF0F-EF9490942F6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/charmbracelet/soft-serve/commit/000ab5164f0be68cf1ea6b6e7227f11c0e388a42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-6jm8-x3g6-r33j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22256",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T19:16:00.107",
      "lastModified" : "2026-03-05T17:43:05.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generate an file view of a folder which include a render of the current path, in which its inserted in the HTML without proper sanitation, this leads to reflected XSS using the fact that request path is decoded and normalized in the matching stage but not is inserted raw in the html view (current.path), the only constraint here is for the root path (eg. /files in the PoC example) to have a sub directory (e.g common ones styles/scripts/etc…) so that the matching return the list HTML page instead of the Not Found page. This issue has been patched in version 0.88.1."
      }, {
        "lang" : "es",
        "value" : "Salvo es un framework de backend web de Rust. Antes de la versión 0.88.1, la función list_html generaba una vista de archivo de una carpeta que incluía una renderización de la ruta actual, en la que se inserta en el HTML sin una sanitización adecuada, esto lleva a XSS reflejado utilizando el hecho de que la ruta de la solicitud se decodifica y normaliza en la etapa de coincidencia pero no se inserta en bruto en la vista HTML (current.path), la única restricción aquí es que la ruta raíz (por ejemplo, /files en el ejemplo de PoC) tenga un subdirectorio (por ejemplo, los comunes styles/scripts/etc…) para que la coincidencia devuelva la página HTML de lista en lugar de la página Not Found. Este problema ha sido parcheado en la versión 0.88.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salvo:salvo:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.88.1",
            "matchCriteriaId" : "E869772F-499D-4D50-8718-6D68B3AC6543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/salvo-rs/salvo/blob/16efeba312a274739606ce76366d921768628654/crates/serve-static/src/dir.rs#L593",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/salvo-rs/salvo/security/advisories/GHSA-rjf8-2wcw-f6mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22257",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T19:16:00.277",
      "lastModified" : "2026-03-05T17:42:52.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1."
      }, {
        "lang" : "es",
        "value" : "Salvo es un framework de backend web en Rust. Antes de la versión 0.88.1, la función list_html genera una vista de archivos de una carpeta sin sanear los nombres de los archivos o carpetas, lo que puede potencialmente llevar a XSS en casos donde un sitio web permite el acceso a archivos públicos usando esta característica y cualquiera puede subir un archivo. Este problema ha sido parcheado en la versión 0.88.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salvo:salvo:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.88.1",
            "matchCriteriaId" : "E869772F-499D-4D50-8718-6D68B3AC6543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/salvo-rs/salvo/blob/16efeba312a274739606ce76366d921768628654/crates/serve-static/src/dir.rs#L581",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/salvo-rs/salvo/security/advisories/GHSA-54m3-5fxr-2f3j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0747",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-01-08T20:15:44.927",
      "lastModified" : "2026-01-22T18:14:40.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen sharing."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "2025.3.24.0",
            "versionEndExcluding" : "2025.3.29.0",
            "matchCriteriaId" : "7F4399A3-8778-4568-80C0-39E152DBBB9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0002/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory", "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0728",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T21:15:44.053",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/delete_admin.php. Such manipulation of the argument admin_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en code-projects Intern Membership Management System 1.0. Este problema afecta a un procesamiento desconocido del archivo /intern/admin/delete_admin.php. Dicha manipulación del argumento admin_id conduce a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20delete_admin.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340125",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340125",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733003",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22588",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-08T21:15:44.560",
      "lastModified" : "2026-02-02T16:14:33.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5, an Authenticated Insecure Direct Object Reference (IDOR) vulnerability was identified that allows an authenticated user to retrieve other users’ address information by modifying an existing order. By editing an order they legitimately own and manipulating address identifiers in the request, the backend server accepts and processes references to addresses belonging to other users, subsequently associating those addresses with the attacker’s order and returning them in the response. This issue has been patched in versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5."
      }, {
        "lang" : "es",
        "value" : "Spree es una solución de comercio electrónico de código abierto construida con Ruby on Rails. Antes de las versiones 4.10.2, 5.0.7, 5.1.9 y 5.2.5, se identificó una vulnerabilidad de Referencia Directa Insegura a Objeto Autenticada (IDOR) que permite a un usuario autenticado recuperar la información de dirección de otros usuarios modificando un pedido existente. Al editar un pedido que poseen legítimamente y manipular los identificadores de dirección en la solicitud, el servidor de backend acepta y procesa referencias a direcciones que pertenecen a otros usuarios, asociando posteriormente esas direcciones con el pedido del atacante y devolviéndolas en la respuesta. Este problema ha sido parcheado en las versiones 4.10.2, 5.0.7, 5.1.9 y 5.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10.2",
            "matchCriteriaId" : "B265915C-3AA8-4B6C-9794-DA08F6359D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.7",
            "matchCriteriaId" : "C6C152A8-FCA5-4420-A138-E09B27970EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.9",
            "matchCriteriaId" : "54EEC933-938E-404B-A87B-3771931D5E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "1C6D055D-A9A8-46E1-A16C-FE17B66E800B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spree/spree/commit/02acabdce2c5f14fd687335b068d901a957a7e72",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/17e78a91b736b49dbea8d1bb1223c284383ee5f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/b409c0fd327e7ce37f63238894670d07079eefe8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/d3f961c442e0015661535cbd6eb22475f76d2dc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/security/advisories/GHSA-g268-72p7-9j6j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0729",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T22:16:02.560",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en code-projects Intern Membership Management System 1.0. Afectada es una función desconocida del archivo /intern/admin/add_activity.php. Realizar una manipulación del argumento Title resulta en inyección SQL. La explotación remota del ataque es posible. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20add_activity.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340126",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340126",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733004",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0730",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T22:16:02.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UPDATE_STAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profile_pic can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en PHPGurukul Staff Leave Management System 1.0. El elemento afectado es la función ADD_STAFF/UPDATE_STAFF del archivo /staffleave/slms/slms/adminviews.py del componente SVG File Handler. La ejecución de una manipulación del argumento profile_pic puede llevar a cross site scripting. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:staff_leave_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EF8EC9D-B51F-40C6-BD8B-8FC31D9C605E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rsecroot/Staff-Leave-Management-System/blob/main/Cross%20Site%20Scripting.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340127",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340127",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733160",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0731",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-08T23:15:44.117",
      "lastModified" : "2026-01-29T19:18:06.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in TOTOLINK WA1200 5.9c.2914. The impacted element is an unknown function of the file cstecgi.cgi of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en TOTOLINK WA1200 5.9c.2914. El elemento impactado es una función desconocida del archivo cstecgi.cgi del componente Manejador de Solicitudes HTTP. La manipulación lleva a desreferencia de puntero nulo. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:totolink:wa1200-poe:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD5CF52-848B-49C5-8902-DCB046A4DE8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:wa1200-poe_firmware:5.9c.2914:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58AAE121-EA55-4271-8A00-9671687C1502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:wa1200-poe:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD5CF52-848B-49C5-8902-DCB046A4DE8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JackWesleyy/CVE/blob/main/WA1200/TOTOLINK%20WA1200%20NULL%20Pointer%20Dereference%20Vulnerability.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JackWesleyy/CVE/blob/main/WA1200/TOTOLINK%20WA1200%20NULL%20Pointer%20Dereference%20Vulnerability.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340128",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340128",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733249",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0732",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-09T00:15:45.313",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DI-8200G 17.12.20A1. Esto afecta una función desconocida del archivo /upgrade_filter.asp. La manipulación del argumento path resulta en inyección de comandos. El ataque puede realizarse de forma remota. El exploit se ha hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:di-8200g_firmware:17.12.20a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "759CBE57-D426-4F76-BE51-BBB1276538A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:di-8200g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F711B9-4D2E-4FE3-B1DB-68E3F15BCC26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0733",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-09T00:15:45.497",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/admin/manage-students.php. This manipulation of the argument id/cid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en el Sistema de Registro de Cursos en Línea PHPGurukul hasta 3.1. Esto afecta una función desconocida del archivo /onlinecourse/admin/manage-students.PHP. Esta manipulación del argumento id/cid causa inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:online_course_registration_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "F04EF455-CD58-45B8-A85D-B9A76A121924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://note-hxlab.wetolink.com/share/Tma34bofeB2L",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://note-hxlab.wetolink.com/share/cU33RBoPPAF0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22710",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-09T00:15:45.693",
      "lastModified" : "2026-02-12T17:50:39.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Extension: 1.45, 1.44, 1.43, 1.39."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') vulnerabilidad en la extensión Mediawiki - Wikibase de The Wikimedia Foundation permite cross-site scripting (XSS). Este problema afecta a la extensión Mediawiki - Wikibase: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:wikibase:1.39:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "21EB82EB-C22D-4A16-B3A1-CB6F0F2D2661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:wikibase:1.43:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "302E2D70-A49A-4619-90AF-0F25F21116FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:wikibase:1.44:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "8E22B8DD-FA07-4B38-8583-A6979DE2A904"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:wikibase:1.45:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "2D5635D0-2A42-4145-BA77-1C0D26D37FBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I39d0074b2ad022b6efe6ab3dd8c8ec0f86c6c466",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T409737",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T409737",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22712",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-09T00:15:45.837",
      "lastModified" : "2026-02-12T17:50:28.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input Data Manipulation.This issue affects Mediawiki - ApprovedRevs Extension: 1.45, 1.44, 1.43, 1.39."
      }, {
        "lang" : "es",
        "value" : "Codificación o escape incorrectos de la salida debido al reemplazo de palabra mágica en la vulnerabilidad ParserAfterTidy en la Extensión ApprovedRevs de Mediawiki de la Fundación Wikimedia permite la manipulación de datos de entrada. Este problema afecta a la Extensión ApprovedRevs de Mediawiki: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikiworks:approved_revs:1.39:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "0680AAB5-C5C7-42A3-9CB3-D99E0126955B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikiworks:approved_revs:1.43:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "293B8B8B-6988-4E0A-AC72-B49D7C98C050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikiworks:approved_revs:1.44:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "30B9A0EC-4B7F-4B53-B073-B18291ECB4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikiworks:approved_revs:1.45:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "73ADBE38-7AFF-4A77-8294-5786ABC4C852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/Iee1bf1cbc8a519899e7f9dde508856bd4e5a5d2a",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T412068",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T412068",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22713",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-09T00:15:46.000",
      "lastModified" : "2026-02-12T17:47:31.803",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - GrowthExperiments Extension: 1.45, 1.44, 1.43, 1.39."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web (XSS o 'Cross-site Scripting') vulnerabilidad en la extensión Mediawiki - GrowthExperiments de The Wikimedia Foundation permite cross-site scripting (XSS). Este problema afecta a la extensión Mediawiki - GrowthExperiments: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:growth:growthexperiments:1.39:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "66BD4F16-FA95-444A-8495-DEB13C4DCF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:growth:growthexperiments:1.43:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "8468C7E1-F985-4A5F-9B2A-B9ECCF265B4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:growth:growthexperiments:1.44:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "59F1D5EB-FBF9-448F-9DCA-1DBCDF2B49E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:growth:growthexperiments:1.45:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "AF4450BF-5689-4334-ABA3-974C55F89CA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/Iff01940a163ed87ec52f3a64ba6b2dbfa2759df3",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T411144",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T411144",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22714",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-09T00:15:46.130",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Monaco Skin allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Monaco Skin: 1.45, 1.44, 1.43, 1.39."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') vulnerabilidad en The Wikimedia Foundation Mediawiki - Monaco Skin permite Cross-Site Scripting (XSS). Este problema afecta a Mediawiki - Monaco Skin: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I00b2e369fa189803380ca7409022a11b670d2500",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"
      }, {
        "url" : "https://phabricator.wikimedia.org/T411126",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22630",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.460",
      "lastModified" : "2026-01-09T04:15:44.460",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22631",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.603",
      "lastModified" : "2026-01-09T04:15:44.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22632",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.667",
      "lastModified" : "2026-01-09T04:15:44.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22633",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.723",
      "lastModified" : "2026-01-09T04:15:44.723",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22634",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.783",
      "lastModified" : "2026-01-09T04:15:44.783",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22635",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.847",
      "lastModified" : "2026-01-09T04:15:44.847",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22636",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-09T04:15:44.910",
      "lastModified" : "2026-01-09T04:15:44.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0563",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-09T07:16:02.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpgsv_map' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Google Street View (con tour virtual 360°) y Google Maps + SEO Local para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'wpgsv_map' en todas las versiones hasta la 1.1.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3432185/wp-google-street-view/trunk/includes/shortcode.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2bc8a3fb-176e-4bf0-b96e-6ccb9688254b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20968",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.107",
      "lastModified" : "2026-01-15T19:25:07.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en DualDAR antes de SMR Ene-2026 Release 1 permite a atacantes locales privilegiados ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20969",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.267",
      "lastModified" : "2026-01-15T19:41:02.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en SecSettings anterior a SMR Ene-2026 Versión 1 permite a un atacante local acceder a un archivo con privilegios de sistema. Se requiere interacción del usuario para activar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20970",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.400",
      "lastModified" : "2026-01-15T19:33:43.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en SLocation anterior a SMR Ene-2026 Versión 1 permite a atacantes locales ejecutar las API privilegiadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20971",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.547",
      "lastModified" : "2026-01-15T19:33:54.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el controlador PROCA anterior a la versión 1 de SMR de enero de 2026 permite a atacantes locales ejecutar potencialmente código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20972",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.690",
      "lastModified" : "2026-01-15T19:40:59.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB."
      }, {
        "lang" : "es",
        "value" : "Exportación indebida de componentes de aplicaciones Android en UwbTest anterior a SMR Ene-2026 Versión 1 permite a atacantes locales habilitar UWB."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20973",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.817",
      "lastModified" : "2026-02-02T18:16:50.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en libimagecodec.quram.so anterior a SMR Ene-2026 Versión 1 permite a un atacante remoto acceder a memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20974",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:03.960",
      "lastModified" : "2026-02-02T18:17:46.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en datos relacionados con restricciones de red anterior a la versión 1 de SMR de enero de 2026 permite a atacantes físicos eludir el re-bloqueo de operador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20975",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:04.093",
      "lastModified" : "2026-01-15T19:43:07.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de permisos insuficientes en Samsung Cloud anterior a la versión 5.6.11 permite a atacantes locales acceder a archivos específicos en una ruta arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.11",
            "matchCriteriaId" : "37FE0DBD-C8D5-42D8-A981-65BB68CBDE03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20976",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-01-09T07:16:04.263",
      "lastModified" : "2026-01-15T19:43:57.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada indebida en Galaxy Store anterior a la versión 4.6.02 permite a un atacante local ejecutar script arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.02.0",
            "matchCriteriaId" : "78296F2B-472E-4071-998A-C387B773560C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21409",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-09T08:15:58.297",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's registration information and/or OIDC (OpenID Connect) tokens may be retrieved."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de autorización impropia en RICOH Streamline NX 3.5.1 a 24R3. Si se realiza un ataque man-in-the-middle en la comunicación entre el producto afectado y su usuario, y el producto procesa alguna solicitud manipulada, la información de registro del usuario y/o los tokens OIDC (OpenID Connect) pueden ser recuperados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN12770174/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000011",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0627",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-09T09:15:47.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.1.10. This is due to insufficient sanitization of SVG file content that only removes `<script>` tags while allowing other XSS vectors such as event handlers (onload, onerror, onmouseover), foreignObject elements, and SVG animation attributes. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts via malicious SVG file uploads that will execute whenever a user views the uploaded file."
      }, {
        "lang" : "es",
        "value" : "El plugin AMP for WP para WordPress es vulnerable a cross-site scripting almacenado a través de cargas de archivos SVG en todas las versiones hasta la 1.1.10, inclusive. Esto se debe a una sanitización insuficiente del contenido de los archivos SVG que solo elimina las etiquetas `"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/accelerated-mobile-pages/tags/1.1.10/templates/features.php#L10373",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/accelerated-mobile-pages/trunk/templates/features.php#L10373",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3434946/accelerated-mobile-pages/trunk/templates/features.php?old=3426181&old_path=accelerated-mobile-pages%2Ftrunk%2Ftemplates%2Ffeatures.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4ed23318-3b47-4336-a3aa-6b09f3911926?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22079",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2026-01-09T11:15:50.617",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitted in plaintext.\n\nSuccessful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad existe en los routers inalámbricos Tenda (Router Inalámbrico de 300Mbps F3 y Router de Fácil Configuración N300) debido a la transmisión en texto plano de las credenciales de inicio de sesión durante el inicio de sesión inicial o la configuración posterior al restablecimiento de fábrica a través de la interfaz administrativa basada en web. Un atacante en la misma red podría explotar esta vulnerabilidad interceptando el tráfico de red y capturando las credenciales transmitidas en texto plano.\n\nLa explotación exitosa de esta vulnerabilidad podría permitir al atacante obtener información sensible y conseguir acceso no autorizado al dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004",
        "source" : "vdisclose@cert-in.org.in"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22080",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2026-01-09T11:15:51.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the transmission of credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the Base64-encoded credentials.\n\nSuccessful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad existe en los routers inalámbricos Tenda (Router Inalámbrico de 300Mbps F3 y Router de Fácil Configuración N300) debido a la transmisión de credenciales codificadas usando codificación Base64 reversible a través de la interfaz administrativa basada en web. Un atacante en la misma red podría explotar esta vulnerabilidad interceptando el tráfico de red y capturando las credenciales codificadas en Base64.\n\nLa explotación exitosa de esta vulnerabilidad podría permitir al atacante obtener información sensible y conseguir acceso no autorizado al dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004",
        "source" : "vdisclose@cert-in.org.in"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22081",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2026-01-09T12:15:54.260",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulnerability by capturing session cookies transmitted over an insecure HTTP connection.\n\nSuccessful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unau-thorized access to the targeted device."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad existe en routers inalámbricos Tenda (Router Inalámbrico de 300Mbps F3 y Router de Fácil Configuración N300) debido a la ausencia de la bandera HTTPOnly para las cookies de sesión asociadas con la interfaz administrativa basada en web. Un atacante remoto podría explotar esta vulnerabilidad al capturar cookies de sesión transmitidas a través de una conexión HTTP insegura.\n\nLa explotación exitosa de esta vulnerabilidad podría permitir al atacante obtener información sensible y obtener acceso no autorizado al dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004",
        "source" : "vdisclose@cert-in.org.in"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22082",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2026-01-09T12:15:54.403",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the use of login credentials as the session ID through its web-based administrative interface. A remote attacker could exploit this vulnerability by intercepting network traffic and capturing the session ID during insecure transmission.\n  \nSuccessful exploitation of this vulnerability could allow the attacker to hijack an authenticated session and compromise sensitive configuration information on the targeted device."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad existe en los routers inalámbricos Tenda (Router Inalámbrico de 300Mbps F3 y Router de Configuración Sencilla N300) debido al uso de credenciales de inicio de sesión como el ID de sesión a través de su interfaz administrativa basada en web. Un atacante remoto podría explotar esta vulnerabilidad interceptando el tráfico de red y capturando el ID de sesión durante una transmisión insegura.\n\nLa explotación exitosa de esta vulnerabilidad podría permitir al atacante secuestrar una sesión autenticada y comprometer información de configuración sensible en el dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004",
        "source" : "vdisclose@cert-in.org.in"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0803",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-09T16:16:07.840",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the file /enroll.php. The manipulation of the argument studentregno/Pincode/session/department/level/course/sem results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en el Sistema de Registro de Cursos en Línea PHPGurukul hasta la versión 3.1. Esto afecta una parte desconocida del archivo /enroll.php. La manipulación del argumento studentregno/Pincode/sesión/department/level/course/sem resulta en inyección SQL. El ataque puede ser lanzado de forma remota. El exploit ha sido hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:online_course_registration_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "F04EF455-CD58-45B8-A85D-B9A76A121924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://note-hxlab.wetolink.com/share/qX132pk8Wofk",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340255",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340255",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733344",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0817",
      "sourceIdentifier" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
      "published" : "2026-01-09T16:16:08.030",
      "lastModified" : "2026-02-10T20:20:51.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en la extensión CampaignEvents de Wikimedia Foundation MediaWiki permite el abuso de privilegios. Este problema afecta a la extensión CampaignEvents de MediaWiki: 1.45, 1.44, 1.43, 1.39."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:campaignevents:1.39:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "0B6BEF5F-A467-4230-A440-87D592FD7744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:campaignevents:1.43:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "2537B774-AB5F-478B-83B3-692B54EEC11F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:campaignevents:1.44:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "1B99FC40-65D2-4940-AEF2-7FC9C8E5706D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:campaignevents:1.45:*:*:*:*:mediawiki:*:*",
            "matchCriteriaId" : "6EBE5683-3C99-4FF6-BA80-F016F23B1CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I7ed0049691258c8bd2555e599b9b88490fbe3358",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T410560",
        "source" : "c4f26cc8-17ff-4c99-b5e2-38fc1793eacc",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22194",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-09T17:15:54.750",
      "lastModified" : "2026-01-14T19:22:40.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This can be exploited to create privileged accounts by targeting the administrative user creation endpoint."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GestSup hasta la 3.2.60 inclusive contienen una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) donde la aplicación no verifica la autenticidad de las peticiones del cliente. Un atacante puede inducir a un usuario autenticado a enviar peticiones manipuladas que realizan acciones con los privilegios de la víctima. Esto puede ser explotado para crear cuentas privilegiadas al atacar el punto final de creación de usuarios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gestsup:gestsup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.56",
            "matchCriteriaId" : "42882370-536F-4C20-B766-1729C16A0021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gestsup.fr/index.php?page=changelog",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gestsup-csrf-allows-privileged-actions",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22195",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-09T17:15:54.903",
      "lastModified" : "2026-01-14T19:37:21.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality. User-controlled search input is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries. Successful exploitation can result in unauthorized access to or modification of database contents depending on database privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GestSup anteriores a la 3.2.60 contienen una vulnerabilidad de inyección SQL en la funcionalidad de la barra de búsqueda. La entrada de búsqueda controlada por el usuario se incorpora en las consultas SQL sin neutralización suficiente, permitiendo a un atacante autenticado manipular las consultas de la base de datos. La explotación exitosa puede resultar en acceso no autorizado o modificación de los contenidos de la base de datos, dependiendo de los privilegios de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gestsup:gestsup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.56",
            "matchCriteriaId" : "42882370-536F-4C20-B766-1729C16A0021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gestsup.fr/index.php?page=changelog",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gestsup-sqli-in-search-bar",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22196",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-09T17:15:55.037",
      "lastModified" : "2026-01-14T19:37:37.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries. Successful exploitation can result in unauthorized access to or modification of database contents depending on database privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GestSup anteriores a la 3.2.60 contienen una vulnerabilidad de inyección SQL en la funcionalidad de creación de tickets. La entrada controlada por el usuario proporcionada durante la creación de tickets se incorpora en las consultas SQL sin la neutralización suficiente, lo que permite a un atacante autenticado manipular las consultas de la base de datos. La explotación exitosa puede resultar en acceso no autorizado o modificación de los contenidos de la base de datos dependiendo de los privilegios de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gestsup:gestsup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.56",
            "matchCriteriaId" : "42882370-536F-4C20-B766-1729C16A0021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gestsup.fr/index.php?page=changelog",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gestsup-sqli-in-ticket-creation",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22197",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-09T17:15:55.170",
      "lastModified" : "2026-01-14T19:43:05.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality. Multiple request parameters used to filter, search, or sort assets are incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries. Successful exploitation can result in unauthorized access to or modification of database contents depending on database privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GestSup anteriores a la 3.2.60 contienen múltiples vulnerabilidades de inyección SQL en la funcionalidad de lista de activos. Múltiples parámetros de solicitud utilizados para filtrar, buscar o clasificar activos se incorporan en consultas SQL sin una neutralización suficiente, lo que permite a un atacante autenticado manipular las consultas de la base de datos. La explotación exitosa puede resultar en acceso no autorizado o modificación de los contenidos de la base de datos, dependiendo de los privilegios de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gestsup:gestsup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.56",
            "matchCriteriaId" : "42882370-536F-4C20-B766-1729C16A0021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gestsup.fr/index.php?page=changelog",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gestsup-multiple-sqli-in-asset-list",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22198",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-09T17:15:55.310",
      "lastModified" : "2026-01-14T19:43:12.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability in the API error logging functionality. By sending an API request with a crafted X-API-KEY header value (for example, to /api/v1/ticket.php), an unauthenticated attacker can cause attacker-controlled HTML/JavaScript to be written to log entries. When an administrator later views the affected logs in the web interface, the injected content is rendered without proper output encoding, resulting in arbitrary script execution in the administrator’s browser session."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GestSup anteriores a la 3.2.60 contienen una vulnerabilidad de cross-site scripting (XSS) almacenado de preautenticación en la funcionalidad de registro de errores de la API. Al enviar una solicitud de API con un valor de encabezado X-API-KEY manipulado (por ejemplo, a /api/v1/ticket.php), un atacante no autenticado puede hacer que HTML/JavaScript controlado por el atacante se escriba en las entradas de registro. Cuando un administrador ve posteriormente los registros afectados en la interfaz web, el contenido inyectado se renderiza sin una codificación de salida adecuada, lo que resulta en la ejecución arbitraria de scripts en la sesión del navegador del administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gestsup:gestsup:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.56",
            "matchCriteriaId" : "42882370-536F-4C20-B766-1729C16A0021"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gestsup.fr/index.php?page=changelog",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gestsup-stored-xss-in-api-error-logs",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0830",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-01-09T21:16:14.127",
      "lastModified" : "2026-04-28T17:41:17.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces.\n\nTo mitigate, users should update to the latest version."
      }, {
        "lang" : "es",
        "value" : "El procesamiento de nombres de carpetas de espacio de trabajo especialmente diseñados podría permitir la inyección de comandos arbitraria en el asistente de solicitudes de fusión de Kiro GitLab en Kiro IDE antes de la versión 0.6.18 al abrir espacios de trabajo maliciosamente diseñados.\n\nPara mitigar, los usuarios deberían actualizar a la última versión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:kiro_ide:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.18",
            "matchCriteriaId" : "80D05466-68B7-463E-9356-249E5A6124EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-001-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kiro.dev/changelog/spec-correctness-and-cli/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22584",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2026-01-09T22:16:01.160",
      "lastModified" : "2026-01-22T21:48:05.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado de la generación de código ('Inyección de código') en Salesforce Uni2TS en MacOS, Windows, Linux permite aprovechar código ejecutable en archivos no ejecutables. Este problema afecta a Uni2TS: hasta la versión 1.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@salesforce.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:uni2ts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "48458AB8-6EF1-4ADE-942E-EECA42E8FD65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/s/articleView?id=005239354&type=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21897",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:17.053",
      "lastModified" : "2026-01-15T21:48:26.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_Config_Add_Gvcid_Managed_Parameters function only checks whether gvcid_counter > GVCID_MAN_PARAM_SIZE. As a result, it allows up to the 251st entry, which causes a write past the end of the array, overwriting gvcid_counter located immediately after gvcid_managed_parameters_array[250]. This leads to an out-of-bounds write, and the overwritten gvcid_counter may become an arbitrary value, potentially affecting the parameter lookup/registration logic that relies on it. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial ejecutando el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, la función Crypto_Config_Add_Gvcid_Managed_Parameters solo verifica si gvcid_counter &gt; GVCID_MAN_PARAM_SIZE. Como resultado, permite hasta la entrada 251, lo que provoca una escritura más allá del final del array, sobrescribiendo gvcid_counter ubicado inmediatamente después de gvcid_managed_parameters_array[250]. Esto conduce a una escritura fuera de límites, y el gvcid_counter sobrescrito puede convertirse en un valor arbitrario, afectando potencialmente la lógica de búsqueda/registro de parámetros que depende de él. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-9x7j-gx23-7m5r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21898",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:17.957",
      "lastModified" : "2026-01-15T21:48:49.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_AOS_ProcessSecurity function reads memory without valid bounds checking when parsing AOS frame hashes. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, la función Crypto_AOS_ProcessSecurity lee memoria sin una comprobación de límites válida al analizar los hashes de tramas AOS. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-7ch6-2pmg-m853",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-7ch6-2pmg-m853",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21899",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.113",
      "lastModified" : "2026-01-15T21:45:24.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, in base64urlDecode, padding-stripping dereferences input[inputLen - 1] before checking that inputLen > 0 or that input != NULL. For inputLen == 0, this becomes an OOB read at input[-1], potentially crashing the process. If input == NULL and inputLen == 0, it dereferences NULL - 1. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, en base64urlDecode, la eliminación de relleno desreferencia input[inputLen - 1] antes de verificar que inputLen &gt; 0 o que input != NULL. Para inputLen == 0, esto se convierte en una lectura fuera de límites (OOB read) en input[-1], lo que podría bloquear el proceso. Si input == NULL e inputLen == 0, desreferencia NULL - 1. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-wc29-5hw7-mpj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21900",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.263",
      "lastModified" : "2026-01-16T16:46:47.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, an out-of-bounds heap read vulnerability in cryptography_encrypt() occurs when parsing JSON metadata from KMC server responses. The flawed strtok iteration pattern uses ptr + strlen(ptr) + 1 which reads one byte past allocated buffer boundaries when processing short or malformed metadata strings. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, una vulnerabilidad de lectura de pila fuera de límites en cryptography_encrypt() ocurre al analizar metadatos JSON de las respuestas del servidor KMC. El patrón de iteración defectuoso de strtok utiliza ptr + strlen(ptr) + 1, que lee un byte más allá de los límites del búfer asignado al procesar cadenas de metadatos cortas o malformadas. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/commit/2372efd3da1ccb226b4297222e25f41ecc84821d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-4g6v-36fv-qcvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-4g6v-36fv-qcvw",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22023",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.410",
      "lastModified" : "2026-01-16T16:45:11.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, there is an out-of-bounds heap read vulnerability in cryptography_aead_encrypt(). This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, existe una vulnerabilidad de lectura de heap fuera de límites en cryptography_aead_encrypt(). Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/commit/2372efd3da1ccb226b4297222e25f41ecc84821d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-8w3h-q8jm-3chq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-8w3h-q8jm-3chq",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22024",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.553",
      "lastModified" : "2026-01-16T16:44:36.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the cryptography_encrypt() function allocates multiple buffers for HTTP requests and JSON parsing that are never freed on any code path. Each call leaks approximately 400 bytes of memory. Sustained traffic can gradually exhaust available memory. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, la función cryptography_encrypt() asigna múltiples búferes para solicitudes HTTP y análisis JSON que nunca se liberan en ninguna ruta de código. Cada llamada filtra aproximadamente 400 bytes de memoria. El tráfico sostenido puede agotar gradualmente la memoria disponible. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/commit/2372efd3da1ccb226b4297222e25f41ecc84821d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-r3wg-g8xv-gxvf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-r3wg-g8xv-gxvf",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22025",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.703",
      "lastModified" : "2026-01-16T16:39:52.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, when the KMC server returns a non-200 HTTP status code, cryptography_encrypt() and cryptography_decrypt() return immediately without freeing previously allocated buffers. Each failed request leaks approximately 467 bytes. Repeated failures (from a malicious server or network issues) can gradually exhaust memory. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución exclusivamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo Central (cFS) y una estación terrestre. Antes de la versión 1.4.3, cuando el servidor KMC devuelve un código de estado HTTP que no es 200, cryptography_encrypt() y cryptography_decrypt() retornan inmediatamente sin liberar los búferes previamente asignados. Cada solicitud fallida fuga aproximadamente 467 bytes. Fallos repetidos (de un servidor malicioso o problemas de red) pueden agotar gradualmente la memoria. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/commit/2372efd3da1ccb226b4297222e25f41ecc84821d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-h74x-vwwr-mm5g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-h74x-vwwr-mm5g",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22026",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.843",
      "lastModified" : "2026-01-16T16:43:52.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the libcurl write_callback function in the KMC crypto service client allows unbounded memory growth by reallocating response buffers without any size limit or overflow check. A malicious KMC server can return arbitrarily large HTTP responses, forcing the client to allocate excessive memory until the process is terminated by the OS. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, la función write_callback de libcurl en el cliente del servicio criptográfico KMC permite un crecimiento ilimitado de la memoria al reasignar búferes de respuesta sin ningún límite de tamaño o verificación de desbordamiento. Un servidor KMC malicioso puede devolver respuestas HTTP arbitrariamente grandes, forzando al cliente a asignar memoria excesiva hasta que el proceso sea terminado por el SO. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/commit/2372efd3da1ccb226b4297222e25f41ecc84821d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-w9cm-q69w-34x7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-w9cm-q69w-34x7",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22027",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:18.990",
      "lastModified" : "2026-01-15T21:45:02.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the convert_hexstring_to_byte_array() function in the MariaDB SA interface writes decoded bytes into a caller-provided buffer without any capacity check. When importing SA fields from the database (e.g., IV, ARSN, ABM), a malformed or oversized hex string in the database can overflow the destination buffer, corrupting adjacent heap memory. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, la función convert_hexstring_to_byte_array() en la interfaz SA de MariaDB escribe bytes decodificados en un búfer proporcionado por el llamador sin ninguna verificación de capacidad. Al importar campos SA de la base de datos (por ejemplo, IV, ARSN, ABM), una cadena hexadecimal malformada o sobredimensionada en la base de datos puede desbordar el búfer de destino, corrompiendo la memoria heap adyacente. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/commit/2372efd3da1ccb226b4297222e25f41ecc84821d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-3m35-m689-h29x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-3m35-m689-h29x",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22697",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T01:16:19.160",
      "lastModified" : "2026-01-16T16:42:26.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is vulnerable to a heap buffer overflow when decoding Base64-encoded ciphertext/cleartext fields returned by the KMC service. The decode destination buffer is sized using an expected output length (len_data_out), but the Base64 decoder writes output based on the actual Base64 input length and does not enforce any destination size limit. An oversized Base64 string in the KMC JSON response can cause out-of-bounds writes on the heap, resulting in process crash and potentially code execution under certain conditions. This issue has been patched in version 1.4.3."
      }, {
        "lang" : "es",
        "value" : "CryptoLib proporciona una solución únicamente de software utilizando el Protocolo de Seguridad de Enlace de Datos Espaciales CCSDS - Procedimientos Extendidos (SDLS-EP) para asegurar las comunicaciones entre una nave espacial que ejecuta el Sistema de Vuelo central (cFS) y una estación terrestre. Antes de la versión 1.4.3, la integración del servicio criptográfico KMC de CryptoLib es vulnerable a un desbordamiento de búfer de pila al decodificar campos de texto cifrado/texto claro codificados en Base64 devueltos por el servicio KMC. El búfer de destino de decodificación se dimensiona utilizando una longitud de salida esperada (len_data_out), pero el decodificador Base64 escribe la salida basándose en la longitud real de la entrada Base64 y no impone ningún límite de tamaño de destino. Una cadena Base64 sobredimensionada en la respuesta JSON del KMC puede causar escrituras fuera de límites en la pila, lo que resulta en un fallo del proceso y potencialmente la ejecución de código bajo ciertas condiciones. Este problema ha sido parcheado en la versión 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "AE1BE91E-2901-42AF-BC66-762CFA7A2582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nasa/CryptoLib/releases/tag/v1.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-qjx3-83jh-2jc4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/nasa/CryptoLib/security/advisories/GHSA-qjx3-83jh-2jc4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22600",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:48.743",
      "lastModified" : "2026-01-14T22:25:56.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. A Local File Read (LFR) vulnerability exists in the work package PDF export functionality of OpenProject prior to version 16.6.4. By uploading a specially crafted SVG file (disguised as a PNG) as a work package attachment, an attacker can exploit the backend image processing engine (ImageMagick). When the work package is exported to PDF, the backend attempts to resize the image, triggering the ImageMagick text: coder. This allows an attacker to read arbitrary local files that the application user has permissions to access (e.g., /etc/passwd, all project configuration files, private project data, etc.). The attack requires permissions to upload attachments to a container that can be exported to PDF, such as a work package. The issue has been patched in version 16.6.4. Those who are unable to upgrade may apply the patch manually."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Una vulnerabilidad de lectura de archivos locales (LFR) existe en la funcionalidad de exportación a PDF de paquetes de trabajo de OpenProject anterior a la versión 16.6.4. Al cargar un archivo SVG especialmente diseñado (disfrazado como PNG) como adjunto de un paquete de trabajo, un atacante puede explotar el motor de procesamiento de imágenes de backend (ImageMagick). Cuando el paquete de trabajo se exporta a PDF, el backend intenta redimensionar la imagen, lo que activa el ImageMagick text: coder. Esto permite a un atacante leer archivos locales arbitrarios a los que el usuario de la aplicación tiene permisos de acceso (por ejemplo, /etc /passwd, todos los archivos de configuración del proyecto, datos privados del proyecto, etc.). El ataque requiere permisos para cargar adjuntos a un contenedor que pueda exportarse a PDF, como un paquete de trabajo. El problema ha sido parcheado en la versión 16.6.4. Aquellos que no puedan actualizar pueden aplicar el parche manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.4",
            "matchCriteriaId" : "6F91D546-F062-436F-B174-02FCE95C2376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-m8f2-cwpq-vvhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22601",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:48.913",
      "lastModified" : "2026-01-14T22:26:03.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a registered administrator can execute arbitrary command by configuring sendmail binary path and sending a test email. This issue has been patched in version 16.6.2."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto basado en la web. Para OpenProject versión 16.6.1 y anteriores, un administrador registrado puede ejecutar comandos arbitrarios configurando la ruta del binario de sendmail y enviando un correo electrónico de prueba. Este problema ha sido parcheado en la versión 16.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.2",
            "matchCriteriaId" : "BF8C07E6-1B04-4E9E-A12C-8CB0A17A95D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-9vrv-7h26-c7jc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22602",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.057",
      "lastModified" : "2026-01-14T22:26:18.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, a low‑privileged logged-in user can view the full names of other users. Since user IDs are assigned sequentially and predictably (e.g., 1 to 1000), an attacker can extract a complete list of all users’ full names by iterating through these URLs. The same behavior can also be reproduced via the OpenProject API, allowing automated retrieval of full names through the API as well. This issue has been patched in version 16.6.2. Those who are unable to upgrade may apply the patch manually."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Antes de la versión 16.6.2, un usuario con pocos privilegios y con sesión iniciada puede ver los nombres completos de otros usuarios. Dado que los ID de usuario se asignan de forma secuencial y predecible (por ejemplo, del 1 al 1000), un atacante puede extraer una lista completa de los nombres completos de todos los usuarios al iterar a través de estas URL. El mismo comportamiento también puede reproducirse a través de la API de OpenProject, permitiendo la recuperación automatizada de nombres completos también a través de la API. Este problema ha sido parcheado en la versión 16.6.2. Aquellos que no puedan actualizar pueden aplicar el parche manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.2",
            "matchCriteriaId" : "BF8C07E6-1B04-4E9E-A12C-8CB0A17A95D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/commit/fb39a779f521d9b08f1e0c9e8aff2b6d4643ea37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opf/openproject/pull/21281",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-7fvx-9h6h-g82j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22603",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.200",
      "lastModified" : "2026-01-14T22:27:03.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, OpenProject’s unauthenticated password-change endpoint (/account/change_password) was not protected by the same brute-force safeguards that apply to the normal login form. In affected versions, an attacker who can guess or enumerate user IDs can send unlimited password-change requests for a given account without triggering lockout or other rate-limiting controls. This allows automated password-guessing (e.g., with wordlists of common passwords) against valid accounts. Successful guessing results in full account compromise for the targeted user and, depending on that user’s role, can lead to further privilege escalation inside the application. This issue has been patched in version 16.6.2. Those who are unable to upgrade may apply the patch manually."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Antes de la versión 16.6.2, el endpoint de cambio de contraseña no autenticado de OpenProject (/account/change_password) no estaba protegido por las mismas salvaguardas contra fuerza bruta que se aplican al formulario de inicio de sesión normal. En las versiones afectadas, un atacante que puede adivinar o enumerar IDs de usuario puede enviar solicitudes ilimitadas de cambio de contraseña para una cuenta determinada sin activar el bloqueo de cuenta u otros controles de limitación de velocidad. Esto permite la adivinación automatizada de contraseñas (por ejemplo, con listas de palabras de contraseñas comunes) contra cuentas válidas. La adivinación exitosa resulta en el compromiso total de la cuenta para el usuario objetivo y, dependiendo del rol de ese usuario, puede conducir a una mayor escalada de privilegios dentro de la aplicación. Este problema ha sido parcheado en la versión 16.6.2. Aquellos que no puedan actualizar pueden aplicar el parche manualmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.2",
            "matchCriteriaId" : "BF8C07E6-1B04-4E9E-A12C-8CB0A17A95D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/commit/2b394b9ba5af1e5d96a64d7d452d4d44598a4c7f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opf/openproject/pull/21272",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-93x5-prx9-x239",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22604",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.343",
      "lastModified" : "2026-01-14T22:27:23.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. For OpenProject versions from 11.2.1 to before 16.6.2, when sending a POST request to the /account/change_password endpoint with an arbitrary User ID as the password_change_user_id parameter, the resulting error page would show the username for the requested user. Since this endpoint is intended to be called without being authenticated, this allows to enumerate the user names of all accounts registered in an OpenProject instance. This issue has been patched in version 16.6.2."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en web. Para las versiones de OpenProject desde la 11.2.1 hasta antes de la 16.6.2, al enviar una solicitud POST al endpoint /account/change_password con un ID de usuario arbitrario como parámetro password_change_user_id, la página de error resultante mostraría el nombre de usuario del usuario solicitado. Dado que este endpoint está diseñado para ser llamado sin autenticación, esto permite enumerar los nombres de usuario de todas las cuentas registradas en una instancia de OpenProject. Este problema ha sido parcheado en la versión 16.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.1",
            "versionEndExcluding" : "16.6.2",
            "matchCriteriaId" : "2307C060-CCE8-426E-B5C5-BD80528E4335"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/commit/2cff5e98649e32a197a62659a23dd4b864b7855b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opf/openproject/pull/3451",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-q7qp-p3vw-j2fh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22605",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.487",
      "lastModified" : "2026-01-14T22:27:55.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allowed users with the View Meetings permission on any project, to access meeting details of meetings that belonged to projects, the user does not have access to. This issue has been patched in version 16.6.3."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Las versiones de OpenProject anteriores a la versión 16.6.3 permitían a los usuarios con el permiso 'Ver reuniones' en cualquier proyecto, acceder a los detalles de reuniones que pertenecían a proyectos a los que el usuario no tenía acceso. Este problema ha sido parcheado en la versión 16.6.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.3",
            "matchCriteriaId" : "B2267B9E-E4A8-4C9D-9BEF-BE744BAEDF0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-fq4m-pxvm-8x2j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22606",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.637",
      "lastModified" : "2026-01-16T18:59:35.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python’s runpy module as unsafe. Because of this, a malicious pickle that uses runpy.run_path() or runpy.run_module() is classified as SUSPICIOUS instead of OVERTLY_MALICIOUS. If a user relies on Fickling’s output to decide whether a pickle is safe to deserialize, this misclassification can lead them to execute attacker-controlled code on their system. This affects any workflow or product that uses Fickling as a security gate for pickle deserialization. This issue has been patched in version 0.1.7."
      }, {
        "lang" : "es",
        "value" : "Fickling es un descompilador de pickling de Python y analizador estático. Las versiones de Fickling hasta la 0.1.6 inclusive no tratan el módulo runpy de Python como inseguro. Debido a esto, un pickle malicioso que utiliza runpy.run_path() o runpy.run_module() se clasifica como SOSPECHOSO en lugar de MANIFIESTAMENTE_MALICIOSO. Si un usuario confía en la salida de Fickling para decidir si un pickle es seguro para deserializar, esta clasificación errónea puede llevarlos a ejecutar código controlado por el atacante en su sistema. Esto afecta a cualquier flujo de trabajo o producto que utilice Fickling como una puerta de seguridad para la deserialización de pickles. Este problema ha sido parcheado en la versión 0.1.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.1.7",
            "matchCriteriaId" : "0D11EA35-A440-4468-BC69-709AA3A18DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trailofbits/fickling/commit/9a2b3f89bd0598b528d62c10a64c1986fcb09f66",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/releases/tag/v0.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-wfq2-52f7-7qvj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-wfq2-52f7-7qvj",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22607",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.780",
      "lastModified" : "2026-01-16T18:58:22.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python's cProfile module as unsafe. Because of this, a malicious pickle that uses cProfile.run() is classified as SUSPICIOUS instead of OVERTLY_MALICIOUS. If a user relies on Fickling's output to decide whether a pickle is safe to deserialize, this misclassification can lead them to execute attacker-controlled code on their system. This affects any workflow or product that uses Fickling as a security gate for pickle deserialization. This issue has been patched in version 0.1.7."
      }, {
        "lang" : "es",
        "value" : "Fickling es un descompilador de pickling de Python y analizador estático. Las versiones de Fickling hasta la 0.1.6 inclusive no tratan el módulo cProfile de Python como inseguro. Debido a esto, un pickle malicioso que utiliza cProfile.run() se clasifica como SOSPECHOSO en lugar de MANIFIESTAMENTE_MALICIOSO. Si un usuario confía en la salida de Fickling para decidir si un pickle es seguro para la deserialización, esta clasificación errónea puede llevarlos a ejecutar código controlado por el atacante en su sistema. Esto afecta a cualquier flujo de trabajo o producto que utilice Fickling como una puerta de seguridad para la deserialización de pickles. Este problema ha sido parcheado en la versión 0.1.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.7",
            "matchCriteriaId" : "5E86A331-3CDE-4B67-AE0E-690AF652E670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trailofbits/fickling/commit/dc8ae12966edee27a78fe05c5745171a2b138d43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/releases/tag/v0.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-p523-jq9w-64x9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-p523-jq9w-64x9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22608",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:49.917",
      "lastModified" : "2026-01-16T18:57:26.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren't explicitly blocked. Even other existing pickle scanning tools (like picklescan) do not block pydoc.locate. Chaining these two together can achieve RCE while the scanner still reports the file as LIKELY_SAFE. This issue has been patched in version 0.1.7."
      }, {
        "lang" : "es",
        "value" : "Fickling es un descompilador de pickling de Python y analizador estático. Antes de la versión 0.1.7, ambos módulos ctypes y pydoc no están bloqueados explícitamente. Incluso otras herramientas de escaneo de pickle existentes (como picklescan) no bloquean pydoc.locate. Encadenar estos dos puede lograr RCE mientras el escáner sigue reportando el archivo como LIKELY_SAFE. Este problema ha sido parcheado en la versión 0.1.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.7",
            "matchCriteriaId" : "5E86A331-3CDE-4B67-AE0E-690AF652E670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trailofbits/fickling/commit/b793563e60a5e039c5837b09d7f4f6b92e6040d1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/releases/tag/v0.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-5hvc-6wx8-mvv4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-5hvc-6wx8-mvv4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22609",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:50.050",
      "lastModified" : "2026-01-16T18:52:26.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Fickling's static analyzer fails to flag several high-risk Python modules that can be used for arbitrary code execution. Malicious pickles importing these modules will not be detected as unsafe, allowing attackers to bypass Fickling's primary static safety checks. This issue has been patched in version 0.1.7."
      }, {
        "lang" : "es",
        "value" : "Fickling es un descompilador de pickling de Python y analizador estático. Antes de la versión 0.1.7, el método unsafe_imports() en el analizador estático de Fickling no logra marcar varios módulos de Python de alto riesgo que pueden ser utilizados para la ejecución de código arbitrario. Pickles maliciosos que importan estos módulos no serán detectados como inseguros, permitiendo a los atacantes eludir las comprobaciones de seguridad estáticas primarias de Fickling. Este problema ha sido parcheado en la versión 0.1.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.1.7",
            "matchCriteriaId" : "0D11EA35-A440-4468-BC69-709AA3A18DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trailofbits/fickling/commit/29d5545e74b07766892c1f0461b801afccee4f91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/commit/9a2b3f89bd0598b528d62c10a64c1986fcb09f66",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/commit/b793563e60a5e039c5837b09d7f4f6b92e6040d1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/commit/eb299b453342f1931c787bcb3bc33f3a03a173f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/releases/tag/v0.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-q5qq-mvfm-j35x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-q5qq-mvfm-j35x",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22612",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T02:15:50.187",
      "lastModified" : "2026-01-16T18:56:30.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to \"builtins\" blindness. This issue has been patched in version 0.1.7."
      }, {
        "lang" : "es",
        "value" : "Fickling es un descompilador de pickling de Python y analizador estático. Antes de la versión 0.1.7, Fickling es vulnerable a la elusión de detección debido a la ceguera a 'builtins'. Este problema ha sido parcheado en la versión 0.1.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.1.7",
            "matchCriteriaId" : "0D11EA35-A440-4468-BC69-709AA3A18DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/releases/tag/v0.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21884",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:48.673",
      "lastModified" : "2026-01-30T18:19:22.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "React Router is a router for React. In @remix-run/react version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, a XSS vulnerability exists in in React Router's <ScrollRestoration> API in Framework Mode when using the getKey/storageKey props during Server-Side Rendering which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the keys. There is no impact if server-side rendering in Framework Mode is disabled, or if Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>) is being used. This issue has been patched in @remix-run/react version 2.17.3 and react-router version 7.12.0."
      }, {
        "lang" : "es",
        "value" : "React Router es un router para React. En la versión de @remix-run/react anterior a la 2.17.3 y react-router de la 7.0.0 a la 7.11.0, existe una vulnerabilidad de XSS en la API  de React Router en Modo Framework al usar las props getKey/storageKey durante la Renderización del Lado del Servidor, lo que podría permitir la ejecución arbitraria de JavaScript durante SSR si se utiliza contenido no confiable para generar las claves. No hay impacto si la renderización del lado del servidor en Modo Framework está deshabilitada, o si se está utilizando el Modo Declarativo () o el Modo de Datos (createBrowserRouter/). Este problema ha sido parcheado en la versión 2.17.3 de @remix-run/react y la versión 7.12.0 de react-router."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopify:react-router:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.11.0",
            "matchCriteriaId" : "6928DE33-6137-4682-8610-1A6646F1B2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopify:remix-run\\/react:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.17.3",
            "matchCriteriaId" : "CD7006C4-2033-446C-A472-DAD51EB06396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/remix-run/react-router/security/advisories/GHSA-8v8x-cx79-35w7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22029",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:48.870",
      "lastModified" : "2026-02-10T19:36:31.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "React Router is a router for React. In @remix-run/router version prior to 1.23.2. and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (<BrowserRouter>) is being used. This issue has been patched in @remix-run/router version 1.23.2 and react-router version 7.12.0."
      }, {
        "lang" : "es",
        "value" : "React Router es un router para React. En las versiones de @remix-run/router anteriores a la 1.23.2 y de react-router de la 7.0.0 a la 7.11.0, las redirecciones de navegación abierta de SPA de React Router (y Remix v1/v2) que se originan en cargadores o acciones en el Modo Framework, Modo Datos, o los modos RSC inestables pueden resultar en URLs inseguras que causan la ejecución no intencionada de javascript en el cliente. Esto es solo un problema si se están creando rutas de redirección a partir de contenido no confiable o a través de una redirección abierta. No hay impacto si se está utilizando el Modo Declarativo (). Este problema ha sido parcheado en la versión 1.23.2 de @remix-run/router y la versión 7.12.0 de react-router."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopify:remix-run\\/react:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.23.2",
            "matchCriteriaId" : "EFF13A05-C167-4C47-8D8E-A1821F69C0B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopify:react-router:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.11.0",
            "matchCriteriaId" : "6928DE33-6137-4682-8610-1A6646F1B2A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22030",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:49.067",
      "lastModified" : "2026-02-05T20:51:29.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router (or Remix v2) is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when using React Server Actions in the new unstable RSC modes. There is no impact if Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>) is being used. This issue has been patched in @remix-run/server-runtime version 2.17.3 and react-router version 7.12.0."
      }, {
        "lang" : "es",
        "value" : "React Router es un router para React. En la versión de @remix-run/server-runtime anterior a la 2.17.3. y react-router 7.0.0 hasta la 7.11.0, React Router (o Remix v2) es vulnerable a ataques CSRF en solicitudes POST de documentos a rutas de interfaz de usuario cuando se utilizan manejadores de acciones de ruta del lado del servidor en Modo Framework, o cuando se utilizan Acciones de Servidor de React en los nuevos modos RSC inestables. No hay impacto si se utiliza el Modo Declarativo () o el Modo de Datos (createBrowserRouter/). Este problema ha sido parcheado en la versión 2.17.3 de @remix-run/server-runtime y la versión 7.12.0 de react-router."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopify:react-router:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.11.0",
            "matchCriteriaId" : "6928DE33-6137-4682-8610-1A6646F1B2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopify:remix-run\\/react:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.17.3",
            "matchCriteriaId" : "CD7006C4-2033-446C-A472-DAD51EB06396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/remix-run/react-router/security/advisories/GHSA-h5cw-625j-3rxh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22594",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:50.400",
      "lastModified" : "2026-01-15T18:12:10.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's 2FA mechanism allows staff users to skip email 2FA. This issue has been patched in versions 5.130.6 and 6.11.0."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. En las versiones 5.105.0 a 5.130.5 y 6.0.0 a 6.10.3, una vulnerabilidad en el mecanismo de 2FA de Ghost permite a los usuarios del personal omitir el 2FA por correo electrónico. Este problema ha sido parcheado en las versiones 5.130.6 y 6.11.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.105.0",
            "versionEndExcluding" : "5.130.6",
            "matchCriteriaId" : "D77531A4-EAE2-4A4E-96C6-B711107B6AC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.11.0",
            "matchCriteriaId" : "9EC484AC-A1F0-4C13-BFAB-9DA57116957D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/b59f707f670e6f175b669977724ccf16c718430b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/commit/fc7bc2fb0888513498154ec5cb4b21eccb88de07",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-5fp7-g646-ccf4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22595",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:50.553",
      "lastModified" : "2026-01-15T18:34:49.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. In versions 5.121.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's handling of Staff Token authentication allowed certain endpoints to be accessed that were only intended to be accessible via Staff Session authentication. External systems that have been authenticated via Staff Tokens for Admin/Owner-role users would have had access to these endpoints. This issue has been patched in versions 5.130.6 and 6.11.0."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. En las versiones 5.121.0 a 5.130.5 y 6.0.0 a 6.10.3, una vulnerabilidad en el manejo de Ghost de la autenticación de token de personal permitió que ciertos puntos finales fueran accedidos que solo estaban destinados a ser accesibles a través de la autenticación de sesión de personal. Sistemas externos que han sido autenticados a través de tokens de personal para usuarios con rol de Administrador/Propietario habrían tenido acceso a estos puntos finales. Este problema ha sido parcheado en las versiones 5.130.6 y 6.11.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.121.0",
            "versionEndExcluding" : "5.130.6",
            "matchCriteriaId" : "ECA8ED19-2E79-4689-ACDD-C5A3F60BC162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.11.0",
            "matchCriteriaId" : "9EC484AC-A1F0-4C13-BFAB-9DA57116957D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/9513d2a35c21067127ce8192443d8919ddcefcc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/commit/c3017f81a5387b253a7b8c1ba1959d430ee536a3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-9xg7-mwmp-xmjx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22596",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:50.703",
      "lastModified" : "2026-01-15T18:35:34.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. This issue has been patched in versions 5.130.6 and 6.11.0."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. En las versiones 5.90.0 a 5.130.5 y 6.0.0 a 6.10.3, una vulnerabilidad en el endpoint /ghost/api/admin/members/events de Ghost permite a los usuarios con credenciales de autenticación para la API de administración ejecutar SQL arbitrario. Este problema ha sido parcheado en las versiones 5.130.6 y 6.11.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.90.0",
            "versionEndExcluding" : "5.130.6",
            "matchCriteriaId" : "2D327CA9-FD73-4ABD-96CF-093B90712BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.11.0",
            "matchCriteriaId" : "9EC484AC-A1F0-4C13-BFAB-9DA57116957D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/cda236e455a7a30e828b6cba3c430e5796ded955",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/commit/f2165f968bcdaae0e35590b38fa280ab03239391",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-gjrp-xgmh-x9qq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22597",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T03:15:50.860",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. In versions 5.38.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost’s media inliner mechanism allows staff users in possession of a valid authentication token for the Ghost Admin API to exfiltrate data from internal systems via SSRF. This issue has been patched in versions 5.130.6 and 6.11.0."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. En las versiones 5.38.0 a 5.130.5 y 6.0.0 a 6.10.3, una vulnerabilidad en el mecanismo de incrustación de medios de Ghost permite a los usuarios del personal en posesión de un token de autenticación válido para la API de administración de Ghost exfiltrar datos de sistemas internos a través de SSRF. Este problema ha sido parcheado en las versiones 5.130.6 y 6.11.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.38.0",
            "versionEndExcluding" : "5.130.6",
            "matchCriteriaId" : "54BE11DA-FEBF-4266-A8A2-2EFFC9E964F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.11.0",
            "matchCriteriaId" : "9EC484AC-A1F0-4C13-BFAB-9DA57116957D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/15d49131ff4aac3aca8642501c793f01f2bfcbb9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/commit/93add549ccf079d8e28bdb724fbb71a76942ff51",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-vmc4-9828-r48r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22589",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T04:16:01.343",
      "lastModified" : "2026-01-22T13:45:29.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5, an Unauthenticated Insecure Direct Object Reference (IDOR) vulnerability was identified that allows an unauthenticated attacker to access guest address information without supplying valid credentials or session cookies. This issue has been patched in versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5."
      }, {
        "lang" : "es",
        "value" : "Spree es una solución de comercio electrónico de código abierto construida con Ruby on Rails. Antes de las versiones 4.10.2, 5.0.7, 5.1.9 y 5.2.5, se identificó una vulnerabilidad de Referencia Directa a Objeto Insegura No Autenticada (IDOR) que permite a un atacante no autenticado acceder a información de dirección de invitado sin proporcionar credenciales válidas o cookies de sesión. Este problema ha sido parcheado en las versiones 4.10.2, 5.0.7, 5.1.9 y 5.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10.2",
            "matchCriteriaId" : "B265915C-3AA8-4B6C-9794-DA08F6359D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.7",
            "matchCriteriaId" : "C6C152A8-FCA5-4420-A138-E09B27970EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.9",
            "matchCriteriaId" : "54EEC933-938E-404B-A87B-3771931D5E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "1C6D055D-A9A8-46E1-A16C-FE17B66E800B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spree/spree/commit/16067def6de8e0742d55313e83b0fbab6d2fd795",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/4c2bd62326fba0d846fd9e4bad2c62433829b3ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/d051925778f24436b62fa8e4a6b842c72ca80a67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/e1cff4605eb15472904602aebaf8f2d04852d6ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/security/advisories/GHSA-3ghg-3787-w2xr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/spree/spree/security/advisories/GHSA-3ghg-3787-w2xr",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22610",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T04:16:01.517",
      "lastModified" : "2026-02-23T18:23:55.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS) vulnerability has been identified in the Angular Template Compiler. The vulnerability exists because Angular’s internal sanitization schema fails to recognize the href and xlink:href attributes of SVG <script> elements as a Resource URL context. This issue has been patched in versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0."
      }, {
        "lang" : "es",
        "value" : "Angular es una plataforma de desarrollo para construir aplicaciones web móviles y de escritorio usando TypeScript/JavaScript y otros lenguajes. Antes de las versiones 19.2.18, 20.3.16, 21.0.7 y 21.1.0-rc.0, una vulnerabilidad de cross-site scripting (XSS) ha sido identificada en el Compilador de Plantillas de Angular. La vulnerabilidad existe porque el esquema de saneamiento interno de Angular no reconoce los atributos href y xlink:href de los elementos SVG "
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "18.2.14",
            "matchCriteriaId" : "B0857B9D-DDD4-42CC-B026-AF3B4081BD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.2.18",
            "matchCriteriaId" : "2A2B3B64-F5DE-4BC8-9008-4B4806233444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.3.16",
            "matchCriteriaId" : "ADFC80EA-C757-4936-9F51-1157F276607A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.0.7",
            "matchCriteriaId" : "13247BE7-FE79-4BE6-B3D3-D2A52463A44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.1.0:next0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "92792D0C-2057-4433-A3FA-17AB195D8262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.1.0:next1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "145F7287-BCAF-4546-BE0B-FDCDEBE742DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.1.0:next2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "52AADB8A-BCAC-4256-B229-4896E33AB0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.1.0:next3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "91F13178-61B4-4A0F-AF9D-F1A87A0C6D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.1.0:next4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A61420F-F0D6-4FB1-8600-BD3DD46E2283"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/angular/angular/commit/91dc91bae4a1bbefc58bef6ef739d0e02ab44d56",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/angular/angular/pull/66318",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/angular/angular/security/advisories/GHSA-jrmj-c5cx-3cw6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22687",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T04:16:01.670",
      "lastModified" : "2026-03-06T15:16:09.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, after WeKnora enables the Agent service, it allows users to call the database query tool. Due to insufficient backend validation, an attacker can use prompt‑based bypass techniques to evade query restrictions and obtain sensitive information from the target server and database. This issue has been patched in version 0.2.5."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.2.5, después de que WeKnora habilita el servicio de Agente, permite a los usuarios llamar a la herramienta de consulta de la base de datos. Debido a una validación de backend insuficiente, un atacante puede usar técnicas de bypass basadas en prompts para evadir las restricciones de consulta y obtener información sensible del servidor y la base de datos objetivo. Este problema ha sido parcheado en la versión 0.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5",
            "matchCriteriaId" : "286261BD-8F02-4CF6-815C-EFC31708684D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/commit/da55707022c252dd2c20f8e18145b2d899ee06a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-pcwc-3fw3-8cqv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-pcwc-3fw3-8cqv",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22688",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T04:16:01.837",
      "lastModified" : "2026-01-22T14:39:17.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.2.5, existe una vulnerabilidad de inyección de comandos que permite a los usuarios autenticados inyectar stdio_config.command/args en la configuración de stdio de MCP, lo que provoca que el servidor ejecute subprocesos utilizando estos valores inyectados. Este problema ha sido parcheado en la versión 0.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.5",
            "matchCriteriaId" : "286261BD-8F02-4CF6-815C-EFC31708684D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/commit/f7900a5e9a18c99d25cec9589ead9e4e59ce04bb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-78h3-63c4-5fqc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-78h3-63c4-5fqc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22690",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T05:16:01.847",
      "lastModified" : "2026-01-22T15:35:23.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with large /Size values. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for actually invalid files. This can be achieved by omitting the /Root entry in the trailer, while using a rather large /Size value. Only the non-strict reading mode is affected. This issue has been patched in version 6.6.0."
      }, {
        "lang" : "es",
        "value" : "pypdf es una biblioteca PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.6.0, pypdf tiene posibles tiempos de ejecución largos para objetos /Root faltantes con valores /Size grandes. Un atacante que utiliza esta vulnerabilidad puede crear un PDF que conduce a posibles tiempos de ejecución largos para archivos realmente inválidos. Esto se puede lograr omitiendo la entrada /Root en el tráiler, mientras se utiliza un valor /Size bastante grande. Solo el modo de lectura no estricto se ve afectado. Este problema ha sido parcheado en la versión 6.6.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "9ADBA6D3-BBC5-422A-A65F-87D6BE1A7BC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/294165726b646bb7799be1cc787f593f2fdbcf45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3594",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.6.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-4xc4-762w-m6cg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22691",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T05:16:08.680",
      "lastModified" : "2026-01-22T15:01:05.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-reference table, PDF files with lots of whitespace characters become problematic. Only the non-strict reading mode is affected. Only the non-strict reading mode is affected. This issue has been patched in version 6.6.0."
      }, {
        "lang" : "es",
        "value" : "pypdf es una biblioteca PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.6.0, pypdf presenta posibles tiempos de ejecución prolongados para 'startxref' malformados. Un atacante que utiliza esta vulnerabilidad puede crear un PDF que provoca posibles tiempos de ejecución prolongados para entradas 'startxref' no válidas. Al reconstruir la tabla de referencias cruzadas, los archivos PDF con muchos caracteres de espacio en blanco se vuelven problemáticos. Solo el modo de lectura no estricto se ve afectado. Solo el modo de lectura no estricto se ve afectado. Este problema ha sido parcheado en la versión 6.6.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "9ADBA6D3-BBC5-422A-A65F-87D6BE1A7BC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/294165726b646bb7799be1cc787f593f2fdbcf45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3594",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.6.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-4f6g-68pf-7vhv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22611",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:51.270",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. This issue has been patched in version 4.0.3.3."
      }, {
        "lang" : "es",
        "value" : "El SDK de AWS para .NET funciona con Amazon Web Services para ayudar a construir soluciones escalables con Amazon S3, Amazon DynamoDB, Amazon Glacier y más. Desde las versiones 4.0.0 hasta antes de la 4.0.3.3, las aplicaciones del cliente podrían configurarse para enrutar incorrectamente las llamadas a la API de AWS a hosts inexistentes o que no son de AWS. Esta notificación está relacionada con el uso de valores específicos para el campo de entrada de región al llamar a los servicios de AWS. Un actor con acceso al entorno en el que se utiliza el SDK podría establecer el campo de entrada de región en un valor no válido. Este problema ha sido parcheado en la versión 4.0.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aws/aws-sdk-net/security/advisories/GHSA-9cvc-h2w8-phrp",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22685",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:51.743",
      "lastModified" : "2026-03-12T19:20:51.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DevToys is a desktop app for developers. In versions from 2.0.0.0 to before 2.0.9.0, a path traversal vulnerability exists in the DevToys extension installation mechanism. When processing extension packages (NUPKG archives), DevToys does not sufficiently validate file paths contained within the archive. A malicious extension package could include crafted file entries such as ../../…/target-file, causing the extraction process to write files outside the intended extensions directory. This flaw enables an attacker to overwrite arbitrary files on the user’s system with the privileges of the DevToys process. Depending on the environment, this may lead to code execution, configuration tampering, or corruption of application or system files. This issue has been patched in version 2.0.9.0."
      }, {
        "lang" : "es",
        "value" : "DevToys es una aplicación de escritorio para desarrolladores. En versiones desde la 2.0.0.0 hasta antes de la 2.0.9.0, existe una vulnerabilidad de salto de ruta en el mecanismo de instalación de extensiones de DevToys. Al procesar paquetes de extensiones (archivos NUPKG), DevToys no valida suficientemente las rutas de archivo contenidas dentro del archivo. Un paquete de extensión malicioso podría incluir entradas de archivo manipuladas como ../../…/target-file, haciendo que el proceso de extracción escriba archivos fuera del directorio de extensiones previsto. Esta falla permite a un atacante sobrescribir archivos arbitrarios en el sistema del usuario con los privilegios del proceso de DevToys. Dependiendo del entorno, esto puede llevar a la ejecución de código, la manipulación de la configuración o la corrupción de archivos de aplicación o del sistema. Este problema ha sido parcheado en la versión 2.0.9.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devtoys:devtoys:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.1.0",
            "versionEndExcluding" : "2.0.9.0",
            "matchCriteriaId" : "1E05DD68-AE09-4AC6-9496-27EE7C537F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DevToys-app/DevToys/commit/02fb7d46d9c663a4ee6ed968baa6a8810405047f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DevToys-app/DevToys/pull/1643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/DevToys-app/DevToys/security/advisories/GHSA-ggxr-h6fm-p2qh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22689",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:51.900",
      "lastModified" : "2026-02-18T17:45:58.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailpit is an email testing tool and API for developers. Prior to version 1.28.2, the Mailpit WebSocket server is configured to accept connections from any origin. This lack of Origin header validation introduces a Cross-Site WebSocket Hijacking (CSWSH) vulnerability. An attacker can host a malicious website that, when visited by a developer running Mailpit locally, establishes a WebSocket connection to the victim's Mailpit instance (default ws://localhost:8025). This allows the attacker to intercept sensitive data such as email contents, headers, and server statistics in real-time. This issue has been patched in version 1.28.2."
      }, {
        "lang" : "es",
        "value" : "Mailpit es una herramienta de prueba de correo electrónico y API para desarrolladores. Antes de la versión 1.28.2, el servidor WebSocket de Mailpit está configurado para aceptar conexiones desde cualquier origen. Esta falta de validación del encabezado Origin introduce una vulnerabilidad de Cross-Site WebSocket Hijacking (CSWSH). Un atacante puede alojar un sitio web malicioso que, cuando es visitado por un desarrollador que ejecuta Mailpit localmente, establece una conexión WebSocket con la instancia de Mailpit de la víctima (por defecto ws://localhost:8025). Esto permite al atacante interceptar datos sensibles como el contenido de los correos electrónicos, los encabezados y las estadísticas del servidor en tiempo real. Este problema ha sido parcheado en la versión 1.28.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1385"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axllent:mailpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.2",
            "matchCriteriaId" : "D35BCA11-BA2A-4A42-9488-7A39F44D3AF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axllent/mailpit/commit/6f1f4f34c98989fd873261018fb73830b30aec3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-524m-q5m7-79mm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22693",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:52.063",
      "lastModified" : "2026-02-18T17:49:22.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0."
      }, {
        "lang" : "es",
        "value" : "HarfBuzz es un motor de conformación de texto. Antes de la versión 12.3.0, existe una vulnerabilidad de desreferencia de puntero nulo en la función SubtableUnicodesCache::create ubicada en src/hb-ot-cmap-table.hh. La función no verifica si hb_malloc devuelve NULL antes de usar 'placement new' para construir un objeto en la dirección de puntero devuelta. Cuando hb_malloc falla al asignar memoria (lo que puede ocurrir en condiciones de poca memoria o al usar asignadores personalizados que simulan fallos de asignación), devuelve NULL. El código entonces intenta llamar al constructor en este puntero nulo usando la sintaxis de 'placement new', lo que resulta en un comportamiento indefinido y un Fallo de Segmentación. Este problema ha sido parcheado en la versión 12.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:harfbuzz_project:harfbuzz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.3.0",
            "matchCriteriaId" : "394555F9-FE83-460B-B30E-11AFE2B9C748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22698",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:52.220",
      "lastModified" : "2026-03-12T19:13:14.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc.0, a  critical vulnerability exists in the SM2 Public Key Encryption (PKE) implementation where the ephemeral nonce k is generated with severely reduced entropy. A unit mismatch error causes the nonce generation function to request only 32 bits of randomness instead of the expected 256 bits. This reduces the security of the encryption from a 128-bit level to a trivial 16-bit level, allowing a practical attack to recover the nonce k and decrypt any ciphertext given only the public key and ciphertext. This issue has been patched via commit e4f7778."
      }, {
        "lang" : "es",
        "value" : "RustCrypto: Curvas Elípticas es soporte de Criptografía de Curva Elíptica (ECC) de propósito general, incluyendo tipos y rasgos para representar varias formas de curvas elípticas, escalares, puntos y claves públicas/secretas compuestas de ellos. En las versiones 0.14.0-pre.0 y 0.14.0-rc.0, existe una vulnerabilidad crítica en la implementación de Cifrado de Clave Pública (PKE) SM2 donde el nonce efímero k se genera con una entropía severamente reducida. Un error de desajuste de unidades hace que la función de generación de nonce solicite solo 32 bits de aleatoriedad en lugar de los 256 bits esperados. Esto reduce la seguridad del cifrado de un nivel de 128 bits a un nivel trivial de 16 bits, permitiendo un ataque práctico para recuperar el nonce k y descifrar cualquier texto cifrado dado solo la clave pública y el texto cifrado. Este problema ha sido parcheado a través del commit e4f7778."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:sm2_elliptic_curve:0.14.0:pre0:*:*:*:rust:*:*",
            "matchCriteriaId" : "5F5BCFE9-1585-4A90-857F-7F9E1B9C9ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:sm2_elliptic_curve:0.14.0:rc0:*:*:*:rust:*:*",
            "matchCriteriaId" : "B584C50F-8ED4-45F4-8799-7CCFE8D4DF66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crates.io/crates/sm2/0.14.0-pre.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crates.io/crates/sm2/0.14.0-rc.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/commit/4781762f23ff22ab34763410f648128055c93731",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/commit/e4f77788130d065d760e57fb109370827110a525",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/pull/1600",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-w3g8-fp6j-wvqw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22699",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:52.377",
      "lastModified" : "2026-01-22T14:53:30.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc.0, a denial-of-service vulnerability exists in the SM2 PKE decryption path where an invalid elliptic-curve point (C1) is decoded and the resulting value is unwrapped without checking. Specifically, AffinePoint::from_encoded_point(&encoded_c1) may return a None/CtOption::None when the supplied coordinates are syntactically valid but do not lie on the SM2 curve. The calling code previously used .unwrap(), causing a panic when presented with such input. This issue has been patched via commit 085b7be."
      }, {
        "lang" : "es",
        "value" : "RustCrypto: Curvas Elípticas es soporte de Criptografía de Curva Elíptica (ECC) de propósito general, incluyendo tipos y rasgos para representar varias formas de curvas elípticas, escalares, puntos y claves públicas/secretas compuestas de ellos. En las versiones 0.14.0-pre.0 y 0.14.0-rc.0, existe una vulnerabilidad de denegación de servicio en la ruta de descifrado SM2 PKE donde un punto de curva elíptica (C1) inválido es decodificado y el valor resultante es desempaquetado sin verificación. Específicamente, AffinePoint::from_encoded_point(&amp;encoded_c1) puede devolver un None/CtOption::None cuando las coordenadas proporcionadas son sintácticamente válidas pero no se encuentran en la curva SM2. El código llamador usaba previamente .unwrap(), causando un pánico cuando se le presentaba dicha entrada. Este problema ha sido parcheado a través del commit 085b7be."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:sm2_elliptic_curve:0.14.0:pre0:*:*:*:rust:*:*",
            "matchCriteriaId" : "5F5BCFE9-1585-4A90-857F-7F9E1B9C9ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:sm2_elliptic_curve:0.14.0:rc0:*:*:*:rust:*:*",
            "matchCriteriaId" : "B584C50F-8ED4-45F4-8799-7CCFE8D4DF66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RustCrypto/elliptic-curves/commit/085b7bee647029bd189e1375203418205006bcab",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/pull/1602",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-78p6-6878-8mj6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-78p6-6878-8mj6",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22700",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:52.517",
      "lastModified" : "2026-01-22T14:53:48.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof. In versions 0.14.0-pre.0 and 0.14.0-rc.0, a denial-of-service vulnerability exists in the SM2 public-key encryption (PKE) implementation: the decrypt() path performs unchecked slice::split_at operations on input buffers derived from untrusted ciphertext. An attacker can submit short/undersized ciphertext or carefully-crafted DER-encoded structures to trigger bounds-check panics (Rust unwinding) which crash the calling thread or process. This issue has been patched via commit e60e991."
      }, {
        "lang" : "es",
        "value" : "RustCrypto: Curvas Elípticas es soporte de Criptografía de Curva Elíptica (ECC) de propósito general, incluyendo tipos y rasgos para representar varias formas de curvas elípticas, escalares, puntos y claves públicas/secretas compuestas de ellos. En las versiones 0.14.0-pre.0 y 0.14.0-rc.0, existe una vulnerabilidad de denegación de servicio en la implementación de cifrado (PKE) de clave pública SM2: la ruta decrypt() realiza operaciones slice::split_at sin verificar en búferes de entrada derivados de texto cifrado no confiable. Un atacante puede enviar texto cifrado corto/subdimensionado o estructuras codificadas en DER cuidadosamente elaboradas para activar pánicos de verificación de límites (desenrolle de Rust) que bloquean el hilo o proceso que realiza la llamada. Este problema ha sido parcheado mediante el commit e60e991."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:sm2_elliptic_curve:0.14.0:pre0:*:*:*:rust:*:*",
            "matchCriteriaId" : "5F5BCFE9-1585-4A90-857F-7F9E1B9C9ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:sm2_elliptic_curve:0.14.0:rc0:*:*:*:rust:*:*",
            "matchCriteriaId" : "B584C50F-8ED4-45F4-8799-7CCFE8D4DF66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RustCrypto/elliptic-curves/commit/e60e99167a9a2b187ebe80c994c5204b0fdaf4ab",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/pull/1603",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-j9xq-69pf-pcm8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-j9xq-69pf-pcm8",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22701",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T06:15:52.673",
      "lastModified" : "2026-03-05T13:50:02.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition between the permission validation and file creation to cause lock operations to fail or behave unexpectedly. The vulnerability occurs in the _acquire() method between raise_on_not_writable_file() (permission check) and os.open() (file creation). During this race window, an attacker can create a symlink at the lock file path, potentially causing the lock to operate on an unintended target file or leading to denial of service. This issue has been patched in version 3.20.3."
      }, {
        "lang" : "es",
        "value" : "filelock es un bloqueo de archivos independiente de la plataforma para Python. Antes de la versión 3.20.3, existe una vulnerabilidad de condición de carrera TOCTOU en la implementación SoftFileLock del paquete filelock. Un atacante con acceso al sistema de archivos local y permiso para crear enlaces simbólicos puede explotar una condición de carrera entre la validación de permisos y la creación de archivos para hacer que las operaciones de bloqueo fallen o se comporten de manera inesperada. La vulnerabilidad ocurre en el método _acquire() entre raise_on_not_writable_file() ('verificación de permisos') y os.open() ('creación de archivos'). Durante esta ventana de carrera, un atacante puede crear un enlace simbólico en la ruta del archivo de bloqueo, lo que podría hacer que el bloqueo opere en un archivo de destino no deseado o que conduzca a una denegación de servicio. Este problema ha sido parcheado en la versión 3.20.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tox-dev:filelock:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "3.20.3",
            "matchCriteriaId" : "C256B12F-691F-41C6-AFFF-DA6AF024AB6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tox-dev/filelock/commit/255ed068bc85d1ef406e50a135e1459170dd1bf0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tox-dev/filelock/security/advisories/GHSA-qmgc-5h2g-mvrw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22702",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T07:16:02.857",
      "lastModified" : "2026-02-18T17:43:08.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's app_data and lock file operations to attacker-controlled locations. This issue has been patched in version 20.36.1."
      }, {
        "lang" : "es",
        "value" : "virtualenv es una herramienta para crear entornos virtuales de Python aislados. Antes de la versión 20.36.1, las vulnerabilidades TOCTOU (Time-of-Check-Time-of-Use) en virtualenv permiten a atacantes locales realizar ataques basados en enlaces simbólicos en operaciones de creación de directorios. Un atacante con acceso local puede explotar una condición de carrera entre las comprobaciones de existencia de directorios y su creación para redirigir las operaciones de los archivos app_data y de bloqueo de virtualenv a ubicaciones controladas por el atacante. Este problema ha sido parcheado en la versión 20.36.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:virtualenv:virtualenv:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.36.1",
            "matchCriteriaId" : "1339346E-BA67-4C3F-8792-7F1829C91FA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pypa/virtualenv/pull/3013",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22703",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T07:16:03.030",
      "lastModified" : "2026-02-05T20:59:07.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor entry, Cosign verifies the Rekor entry signature, and also compares the artifact's digest, the user's public key from either a Fulcio certificate or provided by the user, and the artifact signature to the Rekor entry contents. Without these comparisons, Cosign would accept any response from Rekor as valid. A malicious actor that has compromised a user's identity or signing key could construct a valid Cosign bundle by including any arbitrary Rekor entry, thus preventing the user from being able to audit the signing event. This issue has been patched in versions 2.6.2 and 3.0.4."
      }, {
        "lang" : "es",
        "value" : "Cosign proporciona firma de código y transparencia para contenedores y binarios. Antes de las versiones 2.6.2 y 3.0.4, un paquete de Cosign podía ser manipulado para verificar con éxito un artefacto incluso si la entrada de Rekor incrustada no hacía referencia al *digest* del artefacto, a la firma o a la clave pública. Al verificar una entrada de Rekor, Cosign verifica la firma de la entrada de Rekor y también compara el *digest* del artefacto, la clave pública del usuario (ya sea de un certificado de Fulcio o proporcionada por el usuario) y la firma del artefacto con el contenido de la entrada de Rekor. Sin estas comparaciones, Cosign aceptaría cualquier respuesta de Rekor como válida. Un actor malicioso que haya comprometido la identidad o la clave de firma de un usuario podría construir un paquete de Cosign válido incluyendo cualquier entrada de Rekor arbitraria, impidiendo así al usuario auditar el evento de firma. Este problema ha sido parcheado en las versiones 2.6.2 y 3.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigstore:cosign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2",
            "matchCriteriaId" : "7ABA7B55-66EA-4E85-9F5E-1C392C4FCB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigstore:cosign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.4",
            "matchCriteriaId" : "35768783-8EF1-41DB-8DD1-6870B46B647C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/cosign/commit/6832fba4928c1ad69400235bbc41212de5006176",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sigstore/cosign/pull/4623",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/sigstore/cosign/security/advisories/GHSA-whqx-f9j3-ch6m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22704",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T07:16:03.200",
      "lastModified" : "2026-02-05T20:59:55.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been patched in version 25.0.0."
      }, {
        "lang" : "es",
        "value" : "HAX CMS ayuda a gestionar el universo de micrositios con backends de PHP o NodeJs. En las versiones 11.0.6 hasta antes de la 25.0.0, HAX CMS es vulnerable a XSS almacenado, lo que podría llevar a la toma de control de cuentas. Este problema ha sido parcheado en la versión 25.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psu:haxcms-nodejs:11.0.6:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EF62173E-0BA7-4937-BBCF-162BA9F775FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/haxtheweb/haxcms-nodejs/commit/317a8ae29f88be389f7cfeffaef416957122d97e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/haxtheweb/haxcms-nodejs/releases/tag/v25.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/haxtheweb/issues/security/advisories/GHSA-3fm2-xfq7-7778",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22705",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T07:16:03.363",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryptography. Prior to version 0.1.0-rc.2, a timing side-channel was discovered in the Decompose algorithm which is used during ML-DSA signing to generate hints for the signature. This issue has been patched in version 0.1.0-rc.2."
      }, {
        "lang" : "es",
        "value" : "RustCrypto: Signatures ofrece soporte para firmas digitales, que proporcionan autenticación de datos utilizando criptografía de clave pública. Antes de la versión 0.1.0-rc.2, se descubrió un canal lateral de temporización en el algoritmo Decompose que se utiliza durante la firma ML-DSA para generar pistas para la firma. Este problema ha sido parcheado en la versión 0.1.0-rc.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1240"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RustCrypto/signatures/commit/035d9eef98486ecd00a8bf418c7817eb14dd6558",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/pull/1144",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/security/advisories/GHSA-hcp2-x6j4-29j7",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22773",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T07:16:03.527",
      "lastModified" : "2026-01-27T21:03:47.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vLLM is an inference and serving engine for large language models (LLMs). In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimension mismatch that results in an unhandled runtime error, leading to complete server termination. This issue has been patched in version 0.12.0."
      }, {
        "lang" : "es",
        "value" : "vLLM es un motor de inferencia y servicio para modelos de lenguaje grandes (LLMs). En versiones desde la 0.6.4 hasta antes de la 0.12.0, los usuarios pueden colapsar el motor vLLM que sirve modelos multimodales que utilizan la implementación del modelo de visión Idefics3 enviando una imagen de 1x1 píxel especialmente diseñada. Esto causa un desajuste de dimensión de tensor que resulta en un error de tiempo de ejecución no manejado, lo que lleva a la terminación completa del servidor. Este problema ha sido parcheado en la versión 0.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.6.4",
            "versionEndExcluding" : "0.12.0",
            "matchCriteriaId" : "824D7904-D175-4B2E-A661-EBCA035697DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vllm-project/vllm/security/advisories/GHSA-grg2-63fw-f2qr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22777",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-10T07:16:03.680",
      "lastModified" : "2026-02-05T21:02:05.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in versions 3.39.2 and 4.0.5."
      }, {
        "lang" : "es",
        "value" : "ComfyUI-Manager es una extensión diseñada para mejorar la usabilidad de ComfyUI. Antes de las versiones 3.39.2 y 4.0.5, un atacante puede inyectar caracteres especiales en los parámetros de consulta HTTP para añadir valores de configuración arbitrarios al archivo config.ini. Esto puede llevar a la manipulación de la configuración de seguridad o a la modificación del comportamiento de la aplicación. Este problema ha sido parcheado en las versiones 3.39.2 y 4.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comfy:comfyui-manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.39.2",
            "matchCriteriaId" : "A013F11E-DEAA-4DA0-97EE-667AEDE64317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comfy:comfyui-manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.3",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "739DC981-BB57-45A4-A8CB-1CF26CA53EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Comfy-Org/ComfyUI-Manager/commit/f4fa394e0f03b013f1068c96cff168ad10bd0410",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-562r-8445-54r2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0831",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-10T10:15:50.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Templately plugin for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 3.4.8. This is due to inadequate input validation in the `save_template_to_file()` function where user-controlled parameters like `session_id`, `content_id`, and `ai_page_ids` are used to construct file paths without proper sanitization. This makes it possible for unauthenticated attackers to write arbitrary `.ai.json` files to locations within the uploads directory."
      }, {
        "lang" : "es",
        "value" : "El plugin Templately para WordPress es vulnerable a la escritura arbitraria de archivos en todas las versiones hasta la 3.4.8, inclusive. Esto se debe a una validación de entrada inadecuada en la función 'save_template_to_file()' donde parámetros controlados por el usuario como 'session_id', 'content_id' y 'ai_page_ids' se utilizan para construir rutas de archivo sin una sanitización adecuada. Esto hace posible que atacantes no autenticados escriban archivos '.ai.json' arbitrarios en ubicaciones dentro del directorio de cargas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/templately/tags/3.4.5/includes/API/AIContent.php#L38",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/templately/tags/3.4.5/includes/Core/Importer/Utils/AIUtils.php#L414",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3426051/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/778242f4-5dfa-4d72-a032-8b5521c5b8ce?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0821",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-10T13:15:49.040",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function js_typed_array_constructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called c5d80831e51e48a83eab16ea867be87f091783c5. A patch should be applied to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en quickjs-ng quickjs hasta 0.11.0. Esta vulnerabilidad afecta a la función js_typed_array_constructor del archivo quickjs.c. La ejecución de una manipulación puede llevar a un desbordamiento de búfer basado en montículo. El ataque puede lanzarse remotamente. El exploit ha sido divulgado públicamente y puede utilizarse. Este parche se llama c5d80831e51e48a83eab16ea867be87f091783c5. Debe aplicarse un parche para remediar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickjs-ng:quickjs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.0",
            "matchCriteriaId" : "99E7BDDC-5F85-4D2D-A0FE-87E837B594D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quickjs-ng/quickjs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/commit/c5d80831e51e48a83eab16ea867be87f091783c5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1296#issue-3780003395",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/pull/1299",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340355",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340355",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731780",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0822",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-10T14:15:50.087",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function js_typed_array_sort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The identifier of the patch is 53eefbcd695165a3bd8c584813b472cb4a69fbf5. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en quickjs-ng quickjs hasta la versión 0.11.0. Este problema afecta a la función js_typed_array_sort del archivo quickjs.c. La manipulación conduce a un desbordamiento de búfer basado en montículo. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser utilizado. El identificador del parche es 53eefbcd695165a3bd8c584813b472cb4a69fbf5. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickjs-ng:quickjs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.0",
            "matchCriteriaId" : "99E7BDDC-5F85-4D2D-A0FE-87E837B594D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quickjs-ng/quickjs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/commit/53eefbcd695165a3bd8c584813b472cb4a69fbf5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1297#issue-3780006202",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/pull/1298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340356",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340356",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731783",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0824",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-10T15:15:50.137",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in questdb ui up to 1.11.9. Impacted is an unknown function of the component Web Console. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.1.10 is recommended to address this issue. The patch is identified as b42fd9f18476d844ae181a10a249e003dafb823d. You should upgrade the affected component. The vendor confirmed early that the fix \"is going to be released as a part of QuestDB 9.3.0\" as well."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en questdb ui hasta 1.11.9. Afectada es una función desconocida del componente Consola Web. La manipulación resulta en cross site scripting. El ataque puede ser ejecutado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques. Se recomienda actualizar a la versión 1.1.10 para abordar este problema. El parche se identifica como b42fd9f18476d844ae181a10a249e003dafb823d. Debería actualizar el componente afectado. El proveedor confirmó tempranamente que la corrección 'será lanzada como parte de QuestDB 9.3.0' también."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20QuestDB%20database.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/questdb/questdb/releases/tag/9.3.0",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/questdb/ui/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/questdb/ui/commit/b42fd9f18476d844ae181a10a249e003dafb823d",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/questdb/ui/pull/518",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/questdb/ui/pull/519#issue-3790862030",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.340357",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.340357",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.733253",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0836",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T05:15:47.947",
      "lastModified" : "2026-01-13T22:04:12.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formConfigFastDirectionW. This manipulation of the argument ssid causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en UTT ?? 520W 1.7.7-180627. El elemento afectado es la función strcpy del archivo /goform/formConfigFastDirectionW. Esta manipulación del argumento ssid causa desbordamiento de búfer. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Lena-lyy/cve/blob/main/1223/26.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340436",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340436",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0837",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T05:15:58.893",
      "lastModified" : "2026-01-13T22:03:26.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formFireWall. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en UTT ?? 520W 1.7.7-180627. Esto afecta la función strcpy del archivo /goform/formFireWall. Dicha manipulación del argumento GroupName conduce a un desbordamiento de búfer. El ataque puede ser ejecutado de forma remota. El exploit está disponible públicamente y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Lena-lyy/cve/blob/main/1223/27.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340437",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340437",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0838",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T06:15:57.300",
      "lastModified" : "2026-01-13T22:02:34.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/ConfigWirelessBase. Performing a manipulation of the argument ssid results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en UTT ?? 520W 1.7.7-180627. Esto afecta a la función strcpy del archivo /goform/ConfigWirelessBase. Realizar una manipulación del argumento ssid resulta en desbordamiento de búfer. El ataque es posible llevarlo a cabo remotamente. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Lena-lyy/cve/blob/main/1223/28.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340438",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340438",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0839",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T06:15:57.567",
      "lastModified" : "2026-01-13T21:57:24.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecurity. Executing a manipulation of the argument wepkey1 can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UTT ?? 520W 1.7.7-180627. Afecta a la función strcpy del archivo /goform/APSecurity. La ejecución de una manipulación del argumento wepkey1 puede conducir a un desbordamiento de búfer. El ataque puede realizarse de forma remota. El exploit se ha hecho público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GUOTINGTING2297/cve/blob/main/1234/29.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340439",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340439",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729028",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0840",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T07:15:49.680",
      "lastModified" : "2026-01-13T21:56:28.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerability is the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en UTT ?? 520W 1.7.7-180627. Afectada por esta vulnerabilidad es la función strcpy del archivo /goform/formConfigNoticeConfig. La manipulación del argumento timestart conduce a desbordamiento de búfer. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GUOTINGTING2297/cve/blob/main/1234/30.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340440",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340440",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729029",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0841",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T08:15:59.153",
      "lastModified" : "2026-01-13T21:55:32.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formPictureUrl. The manipulation of the argument importpictureurl results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en UTT ?? 520W 1.7.7-180627. Afectada por este problema es la función strcpy del archivo /goform/formPictureUrl. La manipulación del argumento importpictureurl resulta en desbordamiento de búfer. Es posible lanzar el ataque de forma remota. El exploit ahora es público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GUOTINGTING2297/cve/blob/main/1234/31.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340441",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340441",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729030",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0842",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T08:16:00.150",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0. This affects an unknown part of the component Bluetooth Low Energy Interface. This manipulation causes missing authentication. The attack can only be done within the local network. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Flycatcher Toys smART Sketcher hasta la versión 2.0. Esto afecta a una parte desconocida del componente Interfaz Bluetooth de Baja Energía. Esta manipulación provoca ausencia de autenticación. El ataque solo puede realizarse dentro de la red local. El exploit ha sido publicado y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/davidrxchester/smart-sketcher-upload/blob/main/smartsketch-upload.py",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.340442",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.340442",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.729134",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0843",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T09:15:50.810",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 20260103. This vulnerability affects unknown code of the file /index.php/api/product.category/index. Such manipulation of the argument latitude leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under multiple different names. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en jiujiujia/victor123/wxw850227 jjjfood y jjjshop_food hasta 20260103. Esta vulnerabilidad afecta código desconocido del archivo /index.php/api/product.category/index. Tal manipulación del argumento latitude lleva a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado. Este producto es distribuido bajo múltiples nombres diferentes. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "http://101.200.76.102:38765/qwertyuiop/qwsdfvbnm/1/vuldb/JJJshop/EnglishVers%E4%B8%89%E5%8B%BE%E7%82%B9%E9%A4%90%E7%B3%BB%E7%BB%9FPHP%E7%89%88%E5%AD%98%E5%9C%A8product.category.indexSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.pdf",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.340443",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.340443",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.731001",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0850",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-11T23:15:46.090",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/delete_activity.php. Executing a manipulation of the argument activity_id can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en code-projects Intern Membership Management System 1.0. Afectada es una función desconocida del archivo /admin/delete_activity.php. Ejecutar una manipulación del argumento activity_id puede llevar a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:intern_membership_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D4A3D1-C585-45AA-BFF9-FAEA515181FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20delete_activity.php%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340445",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340445",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733486",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0851",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-12T00:15:52.763",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en code-projects Online Music Site 1.0. El elemento afectado es una función desconocida del archivo /Administrator/PHP/AdminAddUser.php. La manipulación del argumento txtusername conduce a inyección SQL. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tuo159515/sql-injection/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340446",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340446",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.733644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0852",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-12T01:15:49.950",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en code-projects Online Music Site 1.0. El elemento afectado es una función desconocida del archivo /Administrator/PHP/AdminUpdateUser.php. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser ejecutado remotamente. El exploit ha sido publicado al público y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Learner636/CVE-smbmit/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.340447",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.340447",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734136",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0853",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-12T04:15:46.840",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information."
      }, {
        "lang" : "es",
        "value" : "Ciertos modelos de NVR desarrollados por A-Plus Video Technologies tienen una vulnerabilidad de Exposición de Datos Sensibles, permitiendo a atacantes remotos no autenticados acceder a la página de depuración y obtener información del estado del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10621-55584-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10620-527f1-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0854",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-12T06:16:11.040",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device."
      }, {
        "lang" : "es",
        "value" : "Ciertos modelos de DVR/NVR desarrollados por Merit LILIN tienen una vulnerabilidad de inyección de comandos del sistema operativo, permitiendo a atacantes remotos autenticados inyectar comandos arbitrarios del sistema operativo y ejecutarlos en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10623-4f523-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10624-6599c-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0855",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-12T07:16:19.840",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device."
      }, {
        "lang" : "es",
        "value" : "Ciertos modelos de cámaras IP desarrollados por Merit LILIN tienen una vulnerabilidad de inyección de comandos del sistema operativo, permitiendo a atacantes remotos autenticados inyectar comandos arbitrarios del sistema operativo y ejecutarlos en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10626-afbe2-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10625-fac5c-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22033",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T18:15:48.837",
      "lastModified" : "2026-01-27T20:39:07.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Label Studio is a multi-type data labeling and annotation tool. In 1.22.0 and earlier, a persistent stored cross-site scripting (XSS) vulnerability exists in the custom_hotkeys functionality of the application. An authenticated attacker (or one who can trick a user/administrator into updating their custom_hotkeys) can inject JavaScript code that executes in other users’ browsers when those users load any page using the templates/base.html template. Because the application exposes an API token endpoint (/api/current-user/token) to the browser and lacks robust CSRF protection on some API endpoints, the injected script may fetch the victim’s API token or call token reset endpoints — enabling full account takeover and unauthorized API access."
      }, {
        "lang" : "es",
        "value" : "Label Studio es una herramienta de etiquetado y anotación de datos de múltiples tipos. En 1.22.0 y versiones anteriores, existe una vulnerabilidad de cross-site scripting (XSS) persistente almacenado en la funcionalidad custom_hotkeys de la aplicación. Un atacante autenticado (o uno que pueda engañar a un usuario/administrador para que actualice sus custom_hotkeys) puede inyectar código JavaScript que se ejecuta en los navegadores de otros usuarios cuando esos usuarios cargan cualquier página utilizando la plantilla templates/base.html. Debido a que la aplicación expone un endpoint de token de API (/api/current-user/token) al navegador y carece de una protección CSRF robusta en algunos endpoints de API, el script inyectado puede obtener el token de API de la víctima o llamar a endpoints de restablecimiento de token — lo que permite la toma de control total de la cuenta y el acceso no autorizado a la API."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humansignal:label_studio:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.22.0",
            "matchCriteriaId" : "F483F4A6-2480-41F3-B530-13FF4F28EE3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HumanSignal/label-studio/commit/ea2462bf042bbf370b79445d02a205fbe547b505",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/HumanSignal/label-studio/pull/9084",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-2mq9-hm29-8qch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22050",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2026-01-12T18:15:48.983",
      "lastModified" : "2026-01-22T17:58:22.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none."
      }, {
        "lang" : "es",
        "value" : "Las versiones de ONTAP 9.16.1 anteriores a 9.16.1P9 y 9.17.1 anteriores a 9.17.1P2 con el bloqueo de instantáneas habilitado son susceptibles a una vulnerabilidad que podría permitir a un atacante remoto privilegiado establecer el tiempo de caducidad de la instantánea en ninguno."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-alert@netapp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4EEB2C-B5F1-4FC0-BDCA-FC5D479A3D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "8503543F-FF0B-40DE-8073-5981BB4C417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "03D060CA-5C40-4300-897A-D61F0CE3903E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "6487FE18-83D0-4FB4-B03B-1F40E3C683DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "642705FE-F97A-4371-B10D-682750C5C918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "EACF23BF-CDD4-45C4-A60D-F2A020E243DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECC94D1-F228-45FD-9AE3-EA29AA76CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4E5E5-9F21-42B5-9793-9107F7F0A769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.16.1:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "6B40BBA5-F1A6-459F-8445-855F522B26A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "84FA12AE-00D5-4BAC-90D1-0B2003487DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9.17.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B98EBF4C-1A89-488C-B6C7-7306DA6867E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20260112-0001",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22250",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T18:15:49.307",
      "lastModified" : "2026-01-27T20:37:11.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0."
      }, {
        "lang" : "es",
        "value" : "wlc es un cliente de línea de comandos de Weblate que utiliza la API REST de Weblate. Antes de la versión 1.17.0, la verificación SSL se omitiría para algunas URL manipuladas. Esta vulnerabilidad está corregida en la versión 1.17.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:wlc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.0",
            "matchCriteriaId" : "B01083E5-842F-4D93-8069-D4578C071C90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WeblateOrg/wlc/commit/a513864ec4daad00146e6d6e039559726e256fa3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/pull/1097",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/security/advisories/GHSA-2mmv-7rrp-g8xh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22251",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T18:15:49.457",
      "lastModified" : "2026-01-27T20:35:05.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API keys in the setting. This practice was discouraged for years, but the code was never removed. This might cause the API key to be leaked to different servers."
      }, {
        "lang" : "es",
        "value" : "wlc es un cliente de línea de comandos de Weblate que utiliza la API REST de Weblate. Antes de la versión 1.17.0, wlc admitía proporcionar claves de API sin ámbito en la configuración. Esta práctica fue desaconsejada durante años, pero el código nunca fue eliminado. Esto podría causar que la clave de API se filtre a diferentes servidores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:wlc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.0",
            "matchCriteriaId" : "B01083E5-842F-4D93-8069-D4578C071C90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WeblateOrg/wlc/commit/aafdb507a9e66574ade1f68c50c4fe75dbe80797",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/pull/1098",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/security/advisories/GHSA-9rp8-h4g8-8766",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22200",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-12T19:16:02.933",
      "lastModified" : "2026-01-27T20:27:55.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficiently sanitized before being processed by the mPDF PDF generator during export. When the attacker exports the ticket to PDF, the generated PDF can embed the contents of attacker-selected files from the server filesystem as bitmap images, allowing disclosure of sensitive local files in the context of the osTicket application user. This issue is exploitable in default configurations where guests may create tickets and access ticket status, or where self-registration is enabled."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Enhancesoft osTicket 1.18.x anteriores a la 1.18.3 y 1.17.x anteriores a la 1.17.7 contienen una vulnerabilidad de lectura arbitraria de archivos en la funcionalidad de exportación de tickets a PDF. Un atacante remoto puede enviar un ticket que contenga HTML de texto enriquecido manipulado que incluye expresiones de filtro de PHP que no se sanean suficientemente antes de ser procesadas por el generador de PDF mPDF durante la exportación. Cuando el atacante exporta el ticket a PDF, el PDF generado puede incrustar el contenido de archivos seleccionados por el atacante del sistema de archivos del servidor como imágenes de mapa de bits, permitiendo la divulgación de archivos locales sensibles en el contexto del usuario de la aplicación osTicket. Este problema es explotable en configuraciones predeterminadas donde los invitados pueden crear tickets y acceder al estado de los tickets, o donde el auto-registro está habilitado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.17",
            "versionEndExcluding" : "1.17.7",
            "matchCriteriaId" : "615BDC7F-0BBB-436F-9252-9F3AAE3FB4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.18",
            "versionEndExcluding" : "1.18.3",
            "matchCriteriaId" : "1528CBCF-BB6F-4127-A7E6-CF24FD8B0BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osTicket/osTicket/commit/c59b067",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/osTicket/osTicket/releases/tag/v1.17.7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/osTicket/osTicket/releases/tag/v1.18.3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://horizon3.ai/attack-research/attack-blogs/ticket-to-shell-exploiting-php-filters-and-cnext-in-osticket-cve-2026-22200/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/osticket-pdf-export-arbitrary-file-read",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22252",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:03.200",
      "lastModified" : "2026-01-15T22:46:28.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2."
      }, {
        "lang" : "es",
        "value" : "LibreChat es un clon de ChatGPT con características adicionales. Antes de la v0.8.2-rc2, el transporte MCP stdio de LibreChat acepta comandos arbitrarios sin validación, permitiendo a cualquier usuario autenticado ejecutar comandos de shell como root dentro del contenedor a través de una única solicitud de API. Esta vulnerabilidad está corregida en la v0.8.2-rc2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librechat:librechat:0.8.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8E26DE8F-E11A-4052-B9FE-59AD6B9AFD03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/danny-avila/LibreChat/commit/211b39f3113d4e6ecab84be0a83f4e9c9dea127f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/danny-avila/LibreChat/security/advisories/GHSA-cxhj-j78r-p88f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22771",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:03.470",
      "lastModified" : "2026-02-05T21:04:49.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2."
      }, {
        "lang" : "es",
        "value" : "Envoy Gateway es un proyecto de código abierto para gestionar Envoy Proxy como una pasarela de aplicaciones independiente o basada en Kubernetes. Antes de las versiones 1.5.7 y 1.6.2, los scripts Lua de EnvoyExtensionPolicy ejecutados por el proxy Envoy pueden ser utilizados para filtrar las credenciales del proxy. Estas credenciales pueden entonces ser utilizadas para comunicarse con el plano de control y obtener acceso a todos los secretos que son utilizados por el proxy Envoy, por ejemplo, claves privadas TLS y credenciales utilizadas para la comunicación descendente y ascendente. Esta vulnerabilidad está corregida en las versiones 1.5.7 y 1.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "E2A97BD9-F262-4D47-8C04-D4470FB7814A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "F023F702-BA4E-4DD9-B7EE-31F221F632E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22776",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:03.630",
      "lastModified" : "2026-01-15T22:43:10.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.1, a Denial of Service (DoS) vulnerability exists in cpp-httplib due to the unsafe handling of compressed HTTP request bodies (Content-Encoding: gzip, br, etc.). The library validates the payload_max_length against the compressed data size received from the network, but does not limit the size of the decompressed data stored in memory."
      }, {
        "lang" : "es",
        "value" : "cpp-httplib es una biblioteca C++11 multiplataforma, de un solo archivo y solo de cabecera HTTP/HTTPS. Antes de la versión 0.30.1, existe una vulnerabilidad de denegación de servicio (DoS) en cpp-httplib debido al manejo inseguro de cuerpos de solicitud HTTP comprimidos (Content-Encoding: gzip, br, etc.). La biblioteca valida el payload_max_length contra el tamaño de los datos comprimidos recibidos de la red, pero no limita el tamaño de los datos descomprimidos almacenados en memoria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yhirose:cpp-httplib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.30.1",
            "matchCriteriaId" : "CFD0603E-49FC-455F-AEE6-0BF4ADCC6E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yhirose/cpp-httplib/commit/2e2e47bab1ae6a853476eecbc4bf279dd1fef792",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h934-98h4-j43q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22781",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:03.787",
      "lastModified" : "2026-01-16T18:44:23.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. TinyWeb HTTP Server before version 1.98 is vulnerable to OS command injection via CGI ISINDEX-style query parameters. The query parameters are passed as command-line arguments to the CGI executable via Windows CreateProcess(). An unauthenticated remote attacker can execute arbitrary commands on the server by injecting Windows shell metacharacters into HTTP requests. This vulnerability is fixed in 1.98."
      }, {
        "lang" : "es",
        "value" : "TinyWeb es un servidor web (HTTP, HTTPS) escrito en Delphi para Win32. TinyWeb HTTP Server anterior a la versión 1.98 es vulnerable a inyección de comandos del sistema operativo a través de parámetros de consulta de estilo ISINDEX de CGI. Los parámetros de consulta se pasan como argumentos de línea de comandos al ejecutable CGI a través de Windows CreateProcess(). Un atacante remoto no autenticado puede ejecutar comandos arbitrarios en el servidor inyectando metacaracteres de shell de Windows en las solicitudes HTTP. Esta vulnerabilidad está corregida en la versión 1.98."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:tinyweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.98",
            "matchCriteriaId" : "D6A1371A-96D5-404C-983B-4BF309154A94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maximmasiutin/TinyWeb/commit/876b7e2887f4ea5be3e18bb2af7313f23a283c96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-m779-84h5-72q2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.masiutin.net/tinyweb-cve-2025-cgi-command-injection.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22783",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:03.953",
      "lastModified" : "2026-01-16T18:42:18.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the file_local_name field combined with path trust in the delete operation enables authenticated users to delete arbitrary filesystem paths. The vulnerability manifests through a three-step attack chain: authenticated users upload a file to the datastore, update the file's file_local_name field to point to an arbitrary filesystem path through mass assignment, then trigger the delete operation which removes the target file without path validation. This vulnerability is fixed in 2.4.24."
      }, {
        "lang" : "es",
        "value" : "Iris es una plataforma web colaborativa que ayuda a los respondedores de incidentes a compartir detalles técnicos durante las investigaciones. Antes de la versión 2.4.24, el sistema de gestión de archivos del almacén de datos de DFIR-IRIS tiene una vulnerabilidad donde la asignación masiva del campo file_local_name combinada con la confianza en la ruta en la operación de eliminación permite a los usuarios autenticados eliminar rutas arbitrarias del sistema de archivos. La vulnerabilidad se manifiesta a través de una cadena de ataque de tres pasos: los usuarios autenticados suben un archivo al almacén de datos, actualizan el campo file_local_name del archivo para que apunte a una ruta arbitraria del sistema de archivos mediante asignación masiva, luego activan la operación de eliminación que elimina el archivo objetivo sin validación de ruta. Esta vulnerabilidad está corregida en la versión 2.4.24."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dfir-iris:iris:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.24",
            "matchCriteriaId" : "310FB345-E2F3-475A-BC31-842B72778138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dfir-iris/iris-web/commit/57c1b80494bac187893aebc6d9df1ce6e56485b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dfir-iris/iris-web/security/advisories/GHSA-qhqj-8qw6-wp8v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22784",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:04.127",
      "lastModified" : "2026-01-16T18:39:42.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lychee is a free, open-source photo-management tool. Prior to 7.1.0, an authorization vulnerability exists in Lychee's album password unlock functionality that allows users to gain possibly unauthorized access to other users' password-protected albums. When a user unlocks a password-protected public album, the system automatically unlocks ALL other public albums that share the same password, resulting in a complete authorization bypass. This vulnerability is fixed in 7.1.0."
      }, {
        "lang" : "es",
        "value" : "Lychee es una herramienta de gestión de fotos gratuita y de código abierto. Anterior a la versión 7.1.0, existe una vulnerabilidad de autorización en la funcionalidad de desbloqueo de álbumes con contraseña de Lychee que permite a los usuarios obtener acceso posiblemente no autorizado a los álbumes protegidos con contraseña de otros usuarios. Cuando un usuario desbloquea un álbum público protegido con contraseña, el sistema desbloquea automáticamente TODOS los demás álbumes públicos que comparten la misma contraseña, lo que resulta en una omisión completa de la autorización. Esta vulnerabilidad se corrigió en la versión 7.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lycheeorg:lychee:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "521F7223-F9F1-48E5-8ECF-A5DC4188BDEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LycheeOrg/Lychee/commit/f021a29f9ab2bafa81d9f5e32ff5bc89915c7d41",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-jj56-2c54-4f25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22785",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T19:16:04.287",
      "lastModified" : "2026-02-26T20:00:15.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allows an attacker to \"break out\" of the string literal and inject arbitrary code. This vulnerability is fixed in 7.18.0."
      }, {
        "lang" : "es",
        "value" : "orval genera clientes JS con seguridad de tipos (TypeScript) a partir de cualquier especificación OpenAPI v3 o Swagger v2 válida. Antes de la versión 7.18.0, la lógica de generación del servidor MCP se basa en la manipulación de cadenas que incorpora el campo 'summary' de la especificación OpenAPI sin una validación o escape adecuados. Esto permite a un atacante 'escapar' del literal de cadena e inyectar código arbitrario. Esta vulnerabilidad está corregida en la versión 7.18.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.18.0",
            "matchCriteriaId" : "0CE41D63-5D8F-40BA-A27D-11AD851BE739"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orval-labs/orval/commit/80b5fe73b94f120a3a5561952d6d4b0f8d7e928d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/security/advisories/GHSA-mwr6-3gp8-9jmj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22772",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T21:15:59.457",
      "lastModified" : "2026-03-05T13:48:17.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.5, Fulcio's metaRegex() function uses unanchored regex, allowing attackers to bypass MetaIssuer URL validation and trigger SSRF to arbitrary internal services. Since the SSRF only can trigger GET requests, the request cannot mutate state. The response from the GET request is not returned to the caller so data exfiltration is not possible. A malicious actor could attempt to probe an internal network through Blind SSRF. This vulnerability is fixed in 1.8.5."
      }, {
        "lang" : "es",
        "value" : "Fulcio es una autoridad de certificación para emitir certificados de firma de código para una identidad de OpenID Connect (OIDC). Antes de la versión 1.8.5, la función metaRegex() de Fulcio utiliza expresiones regulares no ancladas, permitiendo a los atacantes eludir la validación de URL de MetaIssuer y desencadenar SSRF a servicios internos arbitrarios. Dado que el SSRF solo puede desencadenar solicitudes GET, la solicitud no puede mutar el estado. La respuesta de la solicitud GET no se devuelve al llamador, por lo que la exfiltración de datos no es posible. Un actor malicioso podría intentar sondear una red interna a través de SSRF ciego. Esta vulnerabilidad está corregida en la versión 1.8.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:fulcio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.5",
            "matchCriteriaId" : "6D57DF83-B994-4FA6-B628-24987601A329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/fulcio/commit/eaae2f2be56df9dea5f9b439ec81bedae4c0978d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sigstore/fulcio/security/advisories/GHSA-59jp-pj84-45mr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22786",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T22:16:08.190",
      "lastModified" : "2026-03-12T19:04:14.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpoint_continue.go file, the MakeFile function accepts a fileName parameter through the /fileUploadAndDownload/breakpointContinueFinish API endpoint and directly concatenates it with the base directory path (./fileDir/) using os.OpenFile() without any validation for directory traversal sequences (e.g., ../). An attacker with file upload privileges could exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Gin-vue-admin es un sistema de gestión de *backend* basado en Vue y Gin. Gin-vue-admin &lt;= v2.8.7 tiene una vulnerabilidad de salto de ruta en la funcionalidad de carga de reanudación de punto de interrupción. El atacante puede cargar cualquier archivo en cualquier directorio. En el archivo breakpoint_continue.go, la función MakeFile acepta un parámetro fileName a través del *endpoint* de la API /fileUploadAndDownload/breakpointContinueFinish y lo concatena directamente con la ruta del directorio base (./fileDir/) usando os.OpenFile() sin ninguna validación para secuencias de salto de directorio (por ejemplo, ../). Un atacante con privilegios de carga de archivos podría explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gin-vue-admin_project:gin-vue-admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.7",
            "matchCriteriaId" : "4F430916-9748-45E9-A918-EB00FE62E385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flipped-aurora/gin-vue-admin/commit/2242f5d6e133e96d1b359ac019bf54fa0e975dd5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-3558-j79f-vvm6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22788",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T22:16:08.343",
      "lastModified" : "2026-01-21T19:11:14.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, the WebErpMesV2 application exposes multiple sensitive API endpoints without authentication middleware. An unauthenticated remote attacker can read business-critical data including companies, quotes, orders, tasks, and whiteboards. Limited write access allows creation of company records and full manipulation of collaboration whiteboards. This vulnerability is fixed in 1.19."
      }, {
        "lang" : "es",
        "value" : "WebErpMesv2 es un sistema web de gestión de recursos y ejecución de fabricación para la industria. Antes de la 1.19, la aplicación WebErpMesV2 expone múltiples puntos finales de API sensibles sin middleware de autenticación. Un atacante remoto no autenticado puede leer datos críticos para el negocio, incluyendo empresas, cotizaciones, pedidos, tareas y pizarras. Acceso de escritura limitado permite la creación de registros de empresas y la manipulación completa de pizarras de colaboración. Esta vulnerabilidad está corregida en la 1.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wem-project:wem:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19",
            "matchCriteriaId" : "B8FFED4C-1ACD-4922-99EB-4951BD1C6B8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SMEWebify/WebErpMesv2/commit/3a7ab1c95d1d1c8f7c62c84bc87b3666ecd2fa23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/SMEWebify/WebErpMesv2/security/advisories/GHSA-pp68-5pc2-hv7w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/SMEWebify/WebErpMesv2/security/advisories/GHSA-pp68-5pc2-hv7w",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22789",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T22:16:08.490",
      "lastModified" : "2026-01-21T19:11:41.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, WebErpMesv2 contains a file upload validation bypass vulnerability in multiple controllers that allows authenticated users to upload arbitrary files, including PHP scripts, leading to Remote Code Execution (RCE). This vulnerability is identical in nature to CVE-2025-52130 but exists in different code locations that were not addressed by the original fix. This vulnerability is fixed in 1.19."
      }, {
        "lang" : "es",
        "value" : "WebErpMesv2 es un sistema web de gestión de recursos y ejecución de fabricación para la industria. Antes de la versión 1.19, WebErpMesv2 contiene una vulnerabilidad de omisión de validación de carga de archivos en múltiples controladores que permite a los usuarios autenticados cargar archivos arbitrarios, incluyendo scripts PHP, lo que lleva a la ejecución remota de código (RCE). Esta vulnerabilidad es idéntica en naturaleza a CVE-2025-52130 pero existe en diferentes ubicaciones de código que no fueron abordadas por la corrección original. Esta vulnerabilidad se corrigió en la versión 1.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-616"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wem-project:wem:1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647BD812-98EF-4CEA-8C31-C401DECD1031"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SMEWebify/WebErpMesv2/commit/c9e7f4a85aeb774a0ea4b61ad57a51b941166b69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/SMEWebify/WebErpMesv2/security/advisories/GHSA-64rv-f829-x6m4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/SMEWebify/WebErpMesv2/security/advisories/GHSA-64rv-f829-x6m4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22794",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T22:16:08.633",
      "lastModified" : "2026-01-21T19:14:17.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without validation. If an attacker controls the Origin, password reset / email verification links in emails can be generated pointing to the attacker’s domain, causing authentication tokens to be exposed and potentially leading to account takeover. This vulnerability is fixed in 1.93."
      }, {
        "lang" : "es",
        "value" : "Appsmith es una plataforma para construir paneles de administración, herramientas internas y cuadros de mando. Antes de la versión 1.93, el servidor utiliza el valor Origin de los encabezados de solicitud como la baseUrl de los enlaces de correo electrónico sin validación. Si un atacante controla el Origin, se pueden generar enlaces de restablecimiento de contraseña / verificación de correo electrónico en los correos electrónicos que apunten al dominio del atacante, causando que los tokens de autenticación queden expuestos y potencialmente llevando a la toma de control de la cuenta. Esta vulnerabilidad se corrige en la versión 1.93."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.93",
            "matchCriteriaId" : "5D0E0C12-CE13-4165-8647-F27EE6E03D0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appsmithorg/appsmith/commit/6f9ee6226bac13fb4b836940b557913fff78b633",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/appsmithorg/appsmith/security/advisories/GHSA-7hf5-mc28-xmcv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/appsmithorg/appsmith/security/advisories/GHSA-7hf5-mc28-xmcv",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22798",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T22:16:08.780",
      "lastModified" : "2026-03-08T02:03:33.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hermes is an implementation of the HERMES workflow to automatize software publication with rich metadata. From 0.8.1 to before 0.9.1, hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form. If users provide sensitive data such as API tokens (e.g., via hermes deposit -O invenio_rdm.auth_token SECRET), these are written to the log file in plain text, making them available to whoever can access the log file. This vulnerability is fixed in 0.9.1."
      }, {
        "lang" : "es",
        "value" : "hermes es una implementación del flujo de trabajo HERMES para automatizar la publicación de software con metadatos enriquecidos. Desde la versión 0.8.1 hasta antes de la 0.9.1, los subcomandos de hermes aceptan opciones arbitrarias bajo el argumento -O. Estas se han registrado en formato sin procesar. Si los usuarios proporcionan datos sensibles como tokens de API (p. ej., a través de hermes deposit -O invenio_rdm.auth_token SECRET), estos se escriben en el archivo de registro en texto plano, haciéndolos disponibles para cualquiera que pueda acceder al archivo de registro. Esta vulnerabilidad se corrige en la versión 0.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:software-metadata.pub:hermes:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "0.8.1",
            "versionEndExcluding" : "0.9.1",
            "matchCriteriaId" : "07386E38-99F7-45C8-8749-BC88CB7BE99F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/softwarepub/hermes/commit/7f64f102e916c76dc44404b77ab2a80f5a4e59b1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/softwarepub/hermes/commit/90cb86acd026e7841f2539ae7a1b284a7f263514",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/softwarepub/hermes/security/advisories/GHSA-jm5j-jfrm-hm23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22799",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T22:16:08.930",
      "lastModified" : "2026-01-21T19:13:49.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emlog is an open source website building system. emlog v2.6.1 and earlier exposes a REST API endpoint (/index.php?rest-api=upload) for media file uploads. The endpoint fails to implement proper validation of file types, extensions, and content, allowing authenticated attackers (with a valid API key or admin session cookie) to upload arbitrary files (including malicious PHP scripts) to the server. An attacker can obtain the API key either by gaining administrator access to enable the REST API setting, or via information disclosure vulnerabilities in the application. Once uploaded, the malicious PHP file can be executed to gain remote code execution (RCE) on the target server, leading to full server compromise."
      }, {
        "lang" : "es",
        "value" : "Emlog es un sistema de creación de sitios web de código abierto. emlog v2.6.1 y versiones anteriores expone un endpoint de API REST (/index.php?rest-api=upload) para la carga de archivos multimedia. El endpoint no implementa una validación adecuada de tipos de archivo, extensiones y contenido, permitiendo a atacantes autenticados (con una clave API válida o una cookie de sesión de administrador) cargar archivos arbitrarios (incluidos scripts PHP maliciosos) al servidor. Un atacante puede obtener la clave API ya sea obteniendo acceso de administrador para habilitar la configuración de la API REST, o a través de vulnerabilidades de revelación de información en la aplicación. Una vez cargado, el archivo PHP malicioso puede ser ejecutado para obtener ejecución remota de código (RCE) en el servidor objetivo, lo que lleva a un compromiso total del servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "690F5B09-FDEA-46BF-B0FB-09CA94511539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/commit/429b02fda842254b9b9b39303e9161999c180560",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-p837-mrw9-5x5j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/emlog/emlog/security/advisories/GHSA-p837-mrw9-5x5j",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22212",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-12T23:15:52.140",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy() and strcat() functions when constructing device paths during automatic device discovery. A local attacker can exploit this by creating specially crafted filenames under /dev/usb/, leading to stack memory corruption and application crashes."
      }, {
        "lang" : "es",
        "value" : "Las versiones de TinyOS hasta la 2.1.2 inclusive contienen una vulnerabilidad de desbordamiento de búfer basado en pila en la utilidad mcp2200gpio. La vulnerabilidad es causada por el uso inseguro de las funciones strcpy() y strcat() al construir rutas de dispositivos durante el descubrimiento automático de dispositivos. Un atacante local puede explotar esto creando nombres de archivo especialmente manipulados bajo /dev/usb/, lo que lleva a corrupción de memoria de pila y caídas de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tinyos/tinyos-main",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/14",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/tinyos-stack-based-buffer-overflow-in-mcp2200gpio",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22213",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-12T23:15:52.300",
      "lastModified" : "2026-01-21T17:44:38.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility. The vulnerability is caused by unsafe string concatenation in the devopen() function, which constructs a device path using unbounded user-controlled input. The utility uses strcpy() and strcat() to concatenate the fixed prefix '/dev/' with a user-supplied device name provided via the -s command-line option without bounds checking. This allows an attacker to supply an excessively long device name and overflow a fixed-size stack buffer, leading to process crashes and memory corruption."
      }, {
        "lang" : "es",
        "value" : "Las versiones de RIOT OS hasta e incluyendo 2026.01-devel-317 contienen una vulnerabilidad de desbordamiento de búfer basado en pila en la utilidad tapslip6. La vulnerabilidad es causada por una concatenación de cadenas insegura en la función devopen(), que construye una ruta de dispositivo utilizando una entrada controlada por el usuario sin límites. La utilidad utiliza strcpy() y strcat() para concatenar el prefijo fijo '/dev/' con un nombre de dispositivo proporcionado por el usuario, suministrado a través de la opción de línea de comandos -s, sin verificación de límites. Esto permite a un atacante suministrar un nombre de dispositivo excesivamente largo y desbordar un búfer de pila de tamaño fijo, lo que lleva a fallos del proceso y corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.10",
            "matchCriteriaId" : "3EE45C18-0705-45D6-9363-63017333DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2026.01:devel:*:*:*:*:*:*",
            "matchCriteriaId" : "51045419-7276-4017-8857-04DDBF865A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2026.01:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D10D5F2C-4666-4D21-AED8-BE67DF223745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/15",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.riot-os.org/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/riot-os-stack-based-buffer-overflow-in-tapslip6-utility",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22214",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-12T23:15:52.453",
      "lastModified" : "2026-01-21T17:43:51.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds checking when processing incoming serial frame data. The vulnerability occurs in the _handle_char() function, where incoming frame bytes are appended to a fixed-size stack buffer without verifying that the current write index remains within bounds. An attacker capable of sending crafted serial or TCP-framed input can cause the current write index to exceed the buffer size, resulting in a write past the end of the stack buffer. This condition leads to memory corruption and application crash."
      }, {
        "lang" : "es",
        "value" : "Las versiones de RIOT OS hasta e incluyendo 2026.01-devel-317 contienen una vulnerabilidad de desbordamiento de búfer basado en pila en la utilidad ethos debido a la falta de verificación de límites al procesar datos de trama serie entrantes. La vulnerabilidad ocurre en la función _handle_char(), donde los bytes de trama entrantes se añaden a un búfer de pila de tamaño fijo sin verificar que el índice de escritura actual permanezca dentro de los límites. Un atacante capaz de enviar entrada serie o enmarcada en TCP manipulada puede hacer que el índice de escritura actual exceda el tamaño del búfer, lo que resulta en una escritura más allá del final del búfer de pila. Esta condición lleva a corrupción de memoria y a un fallo de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.10",
            "matchCriteriaId" : "3EE45C18-0705-45D6-9363-63017333DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2026.01:devel:*:*:*:*:*:*",
            "matchCriteriaId" : "51045419-7276-4017-8857-04DDBF865A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2026.01:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D10D5F2C-4666-4D21-AED8-BE67DF223745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/16",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.riot-os.org/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/riot-os-stack-based-buffer-overflow-in-ethos-serial-frame-parser",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22695",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:52.597",
      "lastModified" : "2026-01-21T18:58:55.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54."
      }, {
        "lang" : "es",
        "value" : "LIBPNG es una biblioteca de referencia para su uso en aplicaciones que leen, crean y manipulan archivos de imagen ráster PNG (Portable Network Graphics). Desde 1.6.51 hasta 1.6.53, existe una lectura excesiva de búfer de pila en la función API simplificada de libpng png_image_finish_read al procesar PNGs entrelazados de 16 bits con formato de salida de 8 bits y un paso de fila no mínimo. Esto es una regresión introducida por la corrección para CVE-2025-65018. Esta vulnerabilidad está corregida en 1.6.54."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.51",
            "versionEndExcluding" : "1.6.54",
            "matchCriteriaId" : "6A911B80-087A-4AA8-8AC7-EC6B45CB616F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnggroup/libpng/commit/e4f7ad4ea2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnggroup/libpng/issues/778",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22800",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:52.747",
      "lastModified" : "2026-01-21T18:42:22.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery (CSRF) vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. The affected endpoint performs a destructive action but is exposed via an HTTP GET request. Although proper authorization checks are enforced and the endpoint cannot be triggered cross-site, the use of GET allows the action to be implicitly invoked through same-site content (e.g. embedded resources rendered within the application). As a result, an authenticated administrator who views crafted content within the application may unknowingly trigger the endpoint, causing all active video conferences on the server to be terminated without explicit intent or confirmation. This vulnerability is fixed in 4.10.0."
      }, {
        "lang" : "es",
        "value" : "PILOS (Plataforma para Seminarios Interactivos en Vivo en Línea) es un frontend para BigBlueButton. Antes de la versión 4.10.0, existe una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en un endpoint de API administrativo responsable de terminar todas las videoconferencias activas en un único servidor. El endpoint afectado realiza una acción destructiva pero está expuesto a través de una petición HTTP GET. Aunque se aplican comprobaciones de autorización adecuadas y el endpoint no puede ser activado de forma cruzada, el uso de GET permite que la acción sea invocada implícitamente a través de contenido del mismo sitio (por ejemplo, recursos incrustados renderizados dentro de la aplicación). Como resultado, un administrador autenticado que visualice contenido malicioso dentro de la aplicación podría activar el endpoint sin saberlo, provocando que todas las videoconferencias activas en el servidor sean terminadas sin intención explícita o confirmación. Esta vulnerabilidad está corregida en la versión 4.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thm:pilos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10.0",
            "matchCriteriaId" : "22DA1502-AFE6-4A80-B427-161C9B7726EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/THM-Health/PILOS/commit/d9ab9bb7ac0a8581c25e24cb7db2152d40be4d1b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/THM-Health/PILOS/security/advisories/GHSA-r24c-9p4j-rqw9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22801",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:52.907",
      "lastModified" : "2026-01-21T18:58:18.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54."
      }, {
        "lang" : "es",
        "value" : "LIBPNG es una biblioteca de referencia para usar en aplicaciones que leen, crean y manipulan archivos de imagen ráster PNG (Portable Network Graphics). Desde la versión 1.6.26 hasta la 1.6.53, existe un truncamiento de enteros en las funciones API de escritura simplificadas de libpng, png_write_image_16bit y png_write_image_8bit, que causa una lectura excesiva del búfer de la pila (heap buffer over-read) cuando el llamador proporciona un paso de fila negativo (para diseños de imagen de abajo hacia arriba) o un paso que excede los 65535 bytes. El error fue introducido en libpng 1.6.26 (octubre de 2016) por conversiones de tipo añadidas para silenciar advertencias del compilador en sistemas de 16 bits. Esta vulnerabilidad está corregida en la versión 1.6.54."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.26",
            "versionEndExcluding" : "1.6.54",
            "matchCriteriaId" : "4E5664F6-3EA2-4459-8380-BEB9937EFBE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22804",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:53.063",
      "lastModified" : "2026-01-16T18:37:32.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 to 1.9.0, Stored Cross-Site Scripting (XSS) vulnerability exists in the Termix File Manager component. The application fails to sanitize SVG file content before rendering it. This allows an attacker who has compromised a managed SSH server to plant a malicious file, which, when previewed by the Termix user, executes arbitrary JavaScript in the context of the application. The vulnerability is located in src/ui/desktop/apps/file-manager/components/FileViewer.tsx. This vulnerability is fixed in 1.10.0."
      }, {
        "lang" : "es",
        "value" : "Termix es una plataforma de gestión de servidores basada en web con capacidades de terminal SSH, tunelización y edición de archivos. Desde la versión 1.7.0 hasta la 1.9.0, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el componente Termix File Manager. La aplicación no logra sanear el contenido de archivos SVG antes de renderizarlo. Esto permite a un atacante que ha comprometido un servidor SSH gestionado plantar un archivo malicioso, el cual, al ser previsualizado por el usuario de Termix, ejecuta JavaScript arbitrario en el contexto de la aplicación. La vulnerabilidad se encuentra en src/ui/desktop/apps/file-manager/components/FileViewer.tsx. Esta vulnerabilidad se corrigió en la versión 1.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:termix:termix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.10.0",
            "matchCriteriaId" : "912FDA87-25B4-4E18-B7E9-FC8AA0FCF398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Termix-SSH/Termix/security/advisories/GHSA-m3cv-5hgp-hv35",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Termix-SSH/Termix/security/advisories/GHSA-m3cv-5hgp-hv35",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22805",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:53.217",
      "lastModified" : "2026-04-10T14:55:49.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulnerability is fixed in 55.13, 56.3, and 57.1."
      }, {
        "lang" : "es",
        "value" : "Metabase es una plataforma de análisis de datos de código abierto. Antes de 55.13, 56.3 y 57.1, las instancias de Metabase autoalojadas que permiten a los usuarios crear suscripciones podrían verse potencialmente afectadas si su Metabase está coubicada con otros recursos no seguros. Esta vulnerabilidad está corregida en 55.13, 56.3 y 57.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "0.55.13",
            "matchCriteriaId" : "F4A0D575-8CFF-4FFD-8139-C8AB9A2FBC08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.55.13",
            "matchCriteriaId" : "40AAAF84-1F5E-4A75-84BA-A42A95AE1930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "0.56.0",
            "versionEndExcluding" : "0.56.3",
            "matchCriteriaId" : "38B54579-0285-4B58-A30F-1ECCAA9C6F40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.56.0",
            "versionEndExcluding" : "1.56.3",
            "matchCriteriaId" : "A939F298-EE96-4017-8322-192BA080F500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:0.57.0:beta:*:*:-:*:*:*",
            "matchCriteriaId" : "6205A3AA-7DDB-4450-9340-61EACE075F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:1.57.0:beta:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F7765873-8C95-4AF8-A756-23C8AD7A1074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metabase/metabase/security/advisories/GHSA-2wgg-7r2p-cmqx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22812",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:53.370",
      "lastModified" : "2026-01-21T15:14:59.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216."
      }, {
        "lang" : "es",
        "value" : "OpenCode es un agente de codificación de IA de código abierto. Antes de la 1.0.216, OpenCode inicia automáticamente un servidor HTTP no autenticado que permite a cualquier proceso local (o a cualquier sitio web a través de CORS permisivo) ejecutar comandos de shell arbitrarios con los privilegios del usuario. Esta vulnerabilidad está corregida en la 1.0.216."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-749"
        }, {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anoma:opencode:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.0.216",
            "matchCriteriaId" : "168EE682-3321-4383-8874-2C9D8B949A2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/anomalyco/opencode/security/advisories/GHSA-vxw4-wv6m-9hhh",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22813",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-12T23:15:53.523",
      "lastModified" : "2026-01-21T15:15:35.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCode is an open source AI coding agent. The markdown renderer used for LLM responses will insert arbitrary HTML into the DOM. There is no sanitization with DOMPurify or even a CSP on the web interface to prevent JavaScript execution via HTML injection. This means controlling the LLM response for a chat session gets JavaScript execution on the http://localhost:4096 origin. This vulnerability is fixed in 1.1.10."
      }, {
        "lang" : "es",
        "value" : "OpenCode es un agente de codificación de IA de código abierto. El renderizador de markdown utilizado para las respuestas del LLM insertará HTML arbitrario en el DOM. No hay sanitización con DOMPurify ni siquiera una CSP en la interfaz web para evitar la ejecución de JavaScript a través de la inyección de HTML. Esto significa que controlar la respuesta del LLM para una sesión de chat obtiene la ejecución de JavaScript en el origen http://localhost:4096. Esta vulnerabilidad está corregida en 1.1.10."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anoma:opencode:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.1.10",
            "matchCriteriaId" : "521FFCAB-C7CA-4867-9674-B8AF2637091E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anomalyco/opencode/security/advisories/GHSA-c83v-7274-4vgp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/anomalyco/opencode/security/advisories/GHSA-c83v-7274-4vgp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0491",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:50.743",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system."
      }, {
        "lang" : "es",
        "value" : "SAP Landscape Transformation permite a un atacante con privilegios de administrador explotar una vulnerabilidad en el módulo de función expuesto a través de RFC. Este fallo permite la inyección de código ABAP/comandos del sistema operativo arbitrarios en el sistema, eludiendo las comprobaciones de autorización esenciales. Esta vulnerabilidad funciona eficazmente como una puerta trasera, creando el riesgo de compromiso total del sistema, socavando la confidencialidad, integridad y disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3697979",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0492",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:51.243",
      "lastModified" : "2026-01-27T20:18:16.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system�s confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "La base de datos SAP HANA es vulnerable a la escalada de privilegios, permitiendo a un atacante con credenciales válidas de cualquier usuario cambiar a otro usuario, potencialmente obteniendo acceso administrativo. Este exploit podría resultar en un compromiso total de la confidencialidad, integridad y disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6CA542-7071-48B6-B135-3AE9B4BB1DC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3691059",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0493",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:51.420",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on behalf of an authenticated user causing low impact on integrity of the system. This has no impact on confidentiality and availability."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la aplicación SAP Fiori Intercompany Balance Reconciliation, un atacante podría ejecutar acciones que cambian el estado utilizando un tipo de petición inapropiado, esta desviación de la semántica de petición esperada podría permitir a un atacante desencadenar acciones no intencionadas en nombre de un usuario autenticado causando bajo impacto en la integridad del sistema. Esto no tiene impacto en la confidencialidad y disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3655229",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0494",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:51.667",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas condiciones, la aplicación SAP Fiori Intercompany Balance Reconciliation permite a un atacante acceder a información que de otro modo estaría restringida. Esto tiene un bajo impacto en la confidencialidad de la aplicación; la integridad y la disponibilidad no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3655227",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0495",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:51.830",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges  to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application."
      }, {
        "lang" : "es",
        "value" : "La aplicación SAP Fiori Intercompany Balance Reconciliation permite a un atacante con altos privilegios enviar archivos cargados a correos electrónicos arbitrarios, lo que podría facilitar campañas de phishing efectivas. Esto tiene un impacto bajo en la confidencialidad, integridad y disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-15"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3565506",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0496",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:51.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges  to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application."
      }, {
        "lang" : "es",
        "value" : "La aplicación SAP Fiori Reconciliación de Saldos Intercompañía permite a un atacante con privilegios elevados subir cualquier archivo (incluyendo archivos de script) sin una validación adecuada del formato de archivo. Esto tiene un bajo impacto en la confidencialidad, integridad y disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3565506",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0497",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:52.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users to access non-sensitive information. This results in a low impact on confidentiality, with no impact on integrity or availability of the application."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de usuario web de SAP Product Designer de Páginas de Servidor de Negocio permite a usuarios autenticados no administrativos acceder a información no sensible. Esto resulta en un impacto bajo en la confidencialidad, sin impacto en la integridad o disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3677111",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0498",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:52.300",
      "lastModified" : "2026-01-22T18:44:20.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system."
      }, {
        "lang" : "es",
        "value" : "SAP S/4HANA (Nube Privada y On-Premise) permite a un atacante con privilegios de administrador explotar una vulnerabilidad en el módulo de función expuesto vía RFC. Esta falla permite la inyección de código ABAP/comandos de SO arbitrarios en el sistema, eludiendo comprobaciones de autorización esenciales. Esta vulnerabilidad funciona efectivamente como una puerta trasera, creando el riesgo de compromiso total del sistema, socavando la confidencialidad, integridad y disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE80980-12A5-40D7-8992-5C81FC82935E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82AAE66A-7112-4E83-9094-2AA571144F64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF0FD31-F4F3-470A-9CB5-DE339D7334FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A52E5AE7-D16E-4122-A39E-20A2CAB9A146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEF60F9-E053-4D22-AA65-9C1CA5130374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8606117E-F864-474F-8839-F6BAB51113E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F794CB63-BF34-42D5-9998-CD2F2B2FF25F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4_hana:109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF58A90-18F3-4358-8BCE-9FDD813F02C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3694242",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0499",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:52.467",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection, resulting in a low impact on the application's confidentiality and integrity, with no impact on availability."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Enterprise Portal permite a un atacante no autenticado inyectar scripts maliciosos en un parámetro de URL. Los scripts se reflejan en la respuesta del servidor y se ejecutan en el navegador de un usuario cuando se visita la URL manipulada, lo que lleva al robo de información de sesión, manipulación del contenido del portal o redirección del usuario, resultando en un bajo impacto en la confidencialidad e integridad de la aplicación, sin impacto en la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3687372",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0500",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:52.633",
      "lastModified" : "2026-01-22T18:47:22.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthenticated attacker could create a malicious JNLP (Java Network Launch Protocol) file accessible by a public facing URL. When a victim clicks on the URL the accessed Wily Introscope Server could execute OS commands on the victim's machine. This could completely compromising confidentiality, integrity and availability of the system."
      }, {
        "lang" : "es",
        "value" : "Debido al uso de un componente vulnerable de terceros en SAP Wily Introscope Enterprise Manager (WorkStation), un atacante no autenticado podría crear un archivo JNLP (Java Network Launch Protocol) malicioso accesible a través de una URL de acceso público. Cuando una víctima hace clic en la URL, el servidor Wily Introscope accedido podría ejecutar comandos del sistema operativo en la máquina de la víctima. Esto podría comprometer completamente la confidencialidad, integridad y disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:introscope_enterprise_manager:10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7AE9DD-2761-40DE-8E74-09AB4F93A8D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3668679",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0501",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:52.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials General Ledger), an authenticated user could execute crafted SQL queries to read, modify, and delete backend database data. This leads to a high impact on the confidentiality, integrity, and availability of the application."
      }, {
        "lang" : "es",
        "value" : "Debido a una validación de entrada insuficiente en SAP S/4HANA Private Cloud y On-Premise (Financials General Ledger), un usuario autenticado podría ejecutar consultas SQL manipuladas para leer, modificar y eliminar datos de la base de datos de backend. Esto conlleva un alto impacto en la confidencialidad, integridad y disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3687749",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0503",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:52.953",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can access, modify or delete certain change pointer information within EHS objects in the application which might further affect the subsequent systems. This vulnerability leads to a low impact on confidentiality and integrity of the application with no affect on the availability."
      }, {
        "lang" : "es",
        "value" : "Debido a una falta de verificación de autorización en SAP ERP Central Component (SAP ECC) y SAP S/4HANA (SAP EHS Management), un atacante podría extraer credenciales codificadas en texto claro y eludir la verificación de autenticación de contraseña manipulando parámetros de usuario. Tras una explotación exitosa, el atacante puede acceder, modificar o eliminar cierta información de punteros de cambio dentro de objetos EHS en la aplicación, lo que podría afectar aún más a los sistemas subsiguientes. Esta vulnerabilidad conlleva a un impacto bajo en la confidencialidad y la integridad de la aplicación, sin afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3681523",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0504",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:53.110",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification of data, resulting in low impact on confidentiality and integrity, with no impact on application availability."
      }, {
        "lang" : "es",
        "value" : "Debido a un manejo insuficiente de entrada, la interfaz REST de SAP Identity Management permite a un administrador autenticado enviar solicitudes REST maliciosas especialmente diseñadas que son procesadas por operaciones JNDI sin una neutralización de entrada adecuada. Esto puede llevar a una divulgación limitada o modificación de datos, resultando en un bajo impacto en la confidencialidad y la integridad, sin impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3657998",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0506",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:53.277",
      "lastModified" : "2026-01-22T18:48:00.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs and invoke system functionality exposed via FORMs, resulting in a high impact on integrity and availability, while confidentiality remains unaffected."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad por falta de verificación de autorización en el Servidor de Aplicaciones ABAP y la Plataforma ABAP, un atacante autenticado podría hacer un uso indebido de una función RFC para ejecutar rutinas de formulario (FORMs) en el sistema ABAP. La explotación exitosa podría permitir al atacante escribir o modificar datos accesibles a través de FORMs e invocar funcionalidad del sistema expuesta a través de FORMs, resultando en un alto impacto en la integridad y la disponibilidad, mientras que la confidencialidad no se ve afectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "6F048ED9-2DDF-4EB9-8571-73832AFABF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "C37DC475-6B9A-493C-9A6F-28CDD65D2A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "2BD9FE51-F76C-439A-A3C0-5279EC1059F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "4EB54432-0E1A-45F2-BEE1-8DC28FAADA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "8E96C58C-ED44-487B-A67E-FDAE3C29023A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "A14DF5EB-B8CE-4A47-9959-2F65A5DCEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "3E0CA53D-4335-4872-B527-30802E31B893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "419BA423-0803-4F51-8889-014A521F02CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "DA20ECDC-8807-462C-A0F0-70DF6F5A119B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "800AAC21-325C-4F16-AE5A-9F89327E5356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "BDC15DB7-A95B-475F-AAA6-60A801F65690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "55A2FECF-A32E-4188-9563-E8BA0E952261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "9CBF2E53-17F0-4BF0-9C38-749C7E611BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:758:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "5160572B-E3AB-4B96-8950-07DDAFA0E4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:816:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "32888162-53F9-4598-8C04-E4A4903AAB57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3688703",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0507",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:53.427",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system�s confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de inyección de comandos del sistema operativo en SAP Servidor de aplicaciones para ABAP y SAP NetWeaver RFCSDK, un atacante autenticado con acceso administrativo y acceso a la red adyacente podría cargar contenido especialmente diseñado al servidor. Si es procesado por la aplicación, este contenido permite la ejecución de comandos arbitrarios del sistema operativo. La explotación exitosa podría llevar a un compromiso total de la confidencialidad, integridad y disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3675151",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0510",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:53.597",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially leading to partial disclosure of sensitive information.This has low impact on confidentiality with no impact on integrity and availability of the application."
      }, {
        "lang" : "es",
        "value" : "El User Management Engine (UME) en NetWeaver Servidor de Aplicaciones para Java (NW AS Java) utiliza un algoritmo criptográfico obsoleto para cifrar datos de mapeo de usuarios. Esta debilidad podría permitir a un atacante con acceso de altos privilegios explotar la vulnerabilidad bajo condiciones específicas, lo que podría llevar a la divulgación parcial de información sensible. Esto tiene bajo impacto en la confidencialidad, sin impacto en la integridad y disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3593356",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0511",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:53.800",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted."
      }, {
        "lang" : "es",
        "value" : "La aplicación SAP Fiori Intercompany Balance Reconciliation no realiza las comprobaciones de autorización necesarias para un usuario autenticado, lo que resulta en una escalada de privilegios. Esto tiene un alto impacto en la confidencialidad e integridad de la aplicación; la disponibilidad no se ve afectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3565506",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0513",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:53.957",
      "lastModified" : "2026-01-22T18:48:53.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "Debido a una Vulnerabilidad de Redirección Abierta en SAP Supplier Relationship Management (controlador SICF en el catálogo SRM), un atacante no autenticado podría elaborar una URL maliciosa que, si es accedida por una víctima, la redirige a un sitio controlado por el atacante. Esto causa bajo impacto en la integridad de la aplicación. La confidencialidad y la disponibilidad no tienen impacto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supplier_relationship_management:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "069741F5-9DC2-442A-B48B-B0C68A3A6950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supplier_relationship_management:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2110DB-3940-47AF-B878-EB8C6B4E8522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supplier_relationship_management:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292B51A4-91A2-49C7-A31D-C70DEB620FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supplier_relationship_management:713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A86731-3213-4ACD-968E-0EA7BEA1192D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supplier_relationship_management:714:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE98FDD-55FA-4F88-AD58-7FE927129F97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3638716",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0514",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-13T02:15:54.113",
      "lastModified" : "2026-01-16T16:53:03.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious link. When an unsuspecting user clicks this link, the user may be redirected to a site controlled by the attacker. Successful exploitation could allow the attacker to access or modify information related to the webclient, impacting confidentiality and integrity, with no effect on availability."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de cross-site scripting (XSS) en SAP Business Connector, un atacante no autenticado podría crear un enlace malicioso. Cuando un usuario desprevenido hace clic en este enlace, el usuario podría ser redirigido a un sitio controlado por el atacante. La explotación exitosa podría permitir al atacante acceder o modificar información relacionada con el cliente web, lo que afectaría la confidencialidad y la integridad, sin efecto en la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_connector:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F0C742-7E03-425D-BCFC-F4683843350F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3666061",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22829",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:48.507",
      "lastModified" : "2026-01-13T04:15:48.507",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22830",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.050",
      "lastModified" : "2026-01-13T04:15:49.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22831",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.113",
      "lastModified" : "2026-01-13T04:15:49.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22832",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.173",
      "lastModified" : "2026-01-13T04:15:49.173",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22833",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.237",
      "lastModified" : "2026-01-13T04:15:49.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22834",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.303",
      "lastModified" : "2026-01-13T04:15:49.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22835",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.357",
      "lastModified" : "2026-01-13T04:15:49.357",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22836",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.423",
      "lastModified" : "2026-01-13T04:15:49.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22837",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-13T04:15:49.500",
      "lastModified" : "2026-01-13T04:15:49.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0859",
      "sourceIdentifier" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
      "published" : "2026-01-13T12:15:50.383",
      "lastModified" : "2026-01-14T18:57:50.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deserialized during the mailer:spool:send command, enabling arbitrary PHP code execution on the web server. This issue affects TYPO3 CMS versions 10.0.0-10.4.54, 11.0.0-11.5.48, 12.0.0-12.4.40, 13.0.0-13.4.22 and 14.0.0-14.0.1."
      }, {
        "lang" : "es",
        "value" : "El fallo de deserialización del spool de archivos de correo de TYPO3 permite a usuarios locales con acceso de escritura al directorio del spool crear un archivo malicioso que es deserializado durante el comando mailer:spool:send, lo que permite la ejecución arbitraria de código PHP en el servidor web. Este problema afecta a las versiones de TYPO3 CMS 10.0.0-10.4.54, 11.0.0-11.5.48, 12.0.0-12.4.40, 13.0.0-13.4.22 y 14.0.0-14.0.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.55",
            "matchCriteriaId" : "1F66D2E5-38C1-4708-BBEA-6963B2AFEA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.5.49",
            "matchCriteriaId" : "9E718BBF-B384-4223-A53D-528F77E17DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.4.41",
            "matchCriteriaId" : "D330992D-8C99-458A-A139-47407B4BBB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.4.23",
            "matchCriteriaId" : "AA2179C6-E438-4413-A717-9112618BA6CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.0.2",
            "matchCriteriaId" : "310C5FCB-6F96-4409-BB9A-E582E18E067A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/typo3/commit/3225d705080a1bde57a66689621c947da5a4782f",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/commit/722bf71c118b0a8e4f2c2494854437d846799a13",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/commit/e0f0ceee480c203fbb60b87454f5f193e541d27f",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-004",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0684",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-13T14:16:38.053",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error in the 'cpis_admin_init' function's permission check. This makes it possible for authenticated attackers, with Contributor-level access and above, to import arbitrary products via XML, if the XML file has already been uploaded to the server."
      }, {
        "lang" : "es",
        "value" : "El plugin CP Image Store with Slideshow para WordPress es vulnerable a bypass de autorización en todas las versiones hasta la 1.1.9, inclusive, debido a un error de lógica en la comprobación de permisos de la función cpis_admin_init. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, importen productos arbitrarios vía XML, si el archivo XML ya ha sido subido al servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cp-image-store/tags/1.1.9/cp-image-store.php#L826",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3434716/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/28e48604-2aaf-4e02-9b1e-cebf5f0bfcf7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0877",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.270",
      "lastModified" : "2026-04-13T15:17:15.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Elusión de mitigación en el DOM: Componente de seguridad. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 115.32, Firefox ESR &lt; 140.7, Thunderbird &lt; 147 y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.32.0",
            "matchCriteriaId" : "D7C58C67-2B8D-493D-8914-F407E35B348A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "4FF5535D-A7D8-46C6-AA5A-8EB3762A9171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1999257",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0878",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.367",
      "lastModified" : "2026-04-13T15:17:16.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox debido a condiciones de contorno incorrectas en el componente Graphics: CanvasWebGL. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2003989",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0879",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.463",
      "lastModified" : "2026-04-13T15:17:16.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox debido a condiciones de contorno incorrectas en el componente de Gráficos. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 115.32, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.32.0",
            "matchCriteriaId" : "D7C58C67-2B8D-493D-8914-F407E35B348A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "4FF5535D-A7D8-46C6-AA5A-8EB3762A9171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2004602",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0880",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.557",
      "lastModified" : "2026-04-13T15:17:16.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox debido a desbordamiento de entero en el componente de Gráficos. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 115.32, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.32.0",
            "matchCriteriaId" : "D7C58C67-2B8D-493D-8914-F407E35B348A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "4FF5535D-A7D8-46C6-AA5A-8EB3762A9171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2005014",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0881",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.657",
      "lastModified" : "2026-04-13T15:17:16.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox en el componente del Sistema de Mensajería. Esta vulnerabilidad afecta a Firefox &lt; 147 y Thunderbird &lt; 147."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2005845",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0882",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.750",
      "lastModified" : "2026-04-13T15:17:17.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente IPC. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 115.32, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.32.0",
            "matchCriteriaId" : "D7C58C67-2B8D-493D-8914-F407E35B348A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "4FF5535D-A7D8-46C6-AA5A-8EB3762A9171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1924125",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0883",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.853",
      "lastModified" : "2026-04-13T15:17:17.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Revelación de información en el componente de red. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1989340",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0884",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:38.950",
      "lastModified" : "2026-04-13T15:17:17.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente del motor JavaScript. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2003588",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0885",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.050",
      "lastModified" : "2026-04-13T15:17:17.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente JavaScript: GC. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147, y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2003607",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0886",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.140",
      "lastModified" : "2026-04-13T15:17:17.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente Gráficos. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 115.32, Firefox ESR &lt; 140.7, Thunderbird &lt; 147 y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.32.0",
            "matchCriteriaId" : "D7C58C67-2B8D-493D-8914-F407E35B348A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "4FF5535D-A7D8-46C6-AA5A-8EB3762A9171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2005658",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-02/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0887",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.240",
      "lastModified" : "2026-04-13T15:17:17.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Problema de clickjacking, revelación de información en el componente Visor de PDF. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147 y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2006500",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0888",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.340",
      "lastModified" : "2026-04-13T15:17:18.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
      }, {
        "lang" : "es",
        "value" : "Revelación de información en el componente XML. Esta vulnerabilidad afecta a Firefox &lt; 147 y Thunderbird &lt; 147."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1985996",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0889",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.437",
      "lastModified" : "2026-04-13T15:17:18.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
      }, {
        "lang" : "es",
        "value" : "Denegación de servicio en el DOM: componente Service Workers. Esta vulnerabilidad afecta a Firefox &lt; 147 y Thunderbird &lt; 147."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1999084",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0890",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.523",
      "lastModified" : "2026-04-13T15:17:18.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Problema de suplantación en el DOM: componente de Copiar y Pegar y Arrastrar y Soltar. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147 y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2005081",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0891",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.627",
      "lastModified" : "2026-04-13T15:17:18.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7."
      }, {
        "lang" : "es",
        "value" : "Errores de seguridad de memoria presentes en Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 y Thunderbird 146. Algunos de estos errores mostraron evidencia de corrupción de memoria y presumimos que con suficiente esfuerzo algunos de estos podrían haber sido explotados para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox &lt; 147, Firefox ESR &lt; 140.7, Thunderbird &lt; 147 y Thunderbird &lt; 140.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "A2FC50B3-5A36-4702-8CF6-CC732E3B148B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.0",
            "matchCriteriaId" : "BFBAB968-3244-4970-8D02-CCF9D5FB958D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1964722%2C2000981%2C2003100%2C2003278",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0892",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-13T14:16:39.723",
      "lastModified" : "2026-04-13T15:17:18.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147."
      }, {
        "lang" : "es",
        "value" : "Bugs de seguridad de memoria presentes en Firefox 146 y Thunderbird 146. Algunos de estos bugs mostraron evidencia de corrupción de memoria y presumimos que con suficiente esfuerzo algunos de estos podrían haber sido explotados para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox &lt; 147 y Thunderbird &lt; 147."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "E06AF540-011D-4249-9815-3A4609DD26D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0",
            "matchCriteriaId" : "47B67C0A-B05F-4212-9255-0446302237A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1986912%2C1996718%2C1999633%2C2001081%2C2004443",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-01/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22755",
      "sourceIdentifier" : "larry0@me.com",
      "published" : "2026-01-13T15:16:01.193",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comandos') en Vivotek. Los números de modelo de dispositivo afectados son FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330. (Módulos de firmware) permite la inyección de comandos del sistema operativo. Este problema afecta a los números de modelo de dispositivo afectados FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "larry0@me.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Amber",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "larry0@me.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.vapidlabs.com/advisory.php?v=220",
        "source" : "larry0@me.com"
      }, {
        "url" : "https://www.akamai.com/blog/security-research/command-injection-vivotek-legacy-firmware-need-to-know",
        "source" : "larry0@me.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0403",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2026-01-13T16:16:10.150",
      "lastModified" : "2026-02-20T19:38:39.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN to execute OS command \ninjections."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación de entrada insuficiente en routers NETGEAR Orbi permite a atacantes conectados a la LAN del router ejecutar inyecciones de comandos del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.0.2",
            "matchCriteriaId" : "EDAED6D8-B0E2-45A0-A817-84112A556728"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3080999-19F9-4651-80F3-A6461C27E489"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.0.2",
            "matchCriteriaId" : "04268C8F-D8F6-46A9-8006-8FEED3ABF440"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1F3088-9598-4EB5-A8A0-E0D4E529CB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "0D73C133-BD68-4532-B267-61796ECB1A07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "7E5B3B94-CC3D-4CFC-9FE2-9EF5CEBD4B1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "659D5BE0-C045-48FD-9214-B35D408AF0BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928FC2C1-4D05-495B-ACD8-1D013EB18EE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "0821D003-6E44-46DB-B3D1-2CA553483036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "79468E3C-C58C-4076-BB85-4C331BCC300C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "4D8CED97-AA9C-4655-B521-319021F1F9DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6630553-D726-4524-8BD2-3EE839DE6676"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "C22E56DA-E0B9-4A24-B818-F7919B8CDB5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314FF95E-5A0C-4A6B-B8D6-28546F2C1A12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "19048F97-E226-4287-A206-9006F7B91E21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419AF785-61C6-4911-A170-6A06D7991948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe970",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe971",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr850",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr860",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbre960",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs850",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs860",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbse960",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0404",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2026-01-13T16:16:10.343",
      "lastModified" : "2026-02-12T17:36:09.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient input validation vulnerability in NETGEAR Orbi devices' \nDHCPv6 functionality allows network adjacent attackers authenticated \nover WiFi or on LAN to execute OS command injections on the router. \nDHCPv6 is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación de entrada insuficiente en la funcionalidad DHCPv6 de los dispositivos NETGEAR Orbi permite a atacantes adyacentes a la red, autenticados a través de WiFi o en la LAN, ejecutar inyecciones de comandos del sistema operativo en el router. DHCPv6 no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "0D73C133-BD68-4532-B267-61796ECB1A07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "9C730F75-337C-44C5-9DE7-E532D7C3C8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4489CB05-A1C0-408C-8D8C-56EE98CA20E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "7E5B3B94-CC3D-4CFC-9FE2-9EF5CEBD4B1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "659D5BE0-C045-48FD-9214-B35D408AF0BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928FC2C1-4D05-495B-ACD8-1D013EB18EE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "0821D003-6E44-46DB-B3D1-2CA553483036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "A19A26FE-6D83-45F3-A852-FCD9F6E9F3D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AEA27B-8BEA-4E83-819A-FDAC1881928F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "79468E3C-C58C-4076-BB85-4C331BCC300C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "4D8CED97-AA9C-4655-B521-319021F1F9DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6630553-D726-4524-8BD2-3EE839DE6676"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "08EA0CCC-1FAD-47D3-B70E-1991AE30C12E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848E7D41-EB61-4AB3-9AED-8E35281DB464"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "C22E56DA-E0B9-4A24-B818-F7919B8CDB5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314FF95E-5A0C-4A6B-B8D6-28546F2C1A12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "E26EAB17-7904-4325-A21D-43B807F7DB56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A3F32B-B05E-42C6-969A-0F4DD5B7942E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.5",
            "matchCriteriaId" : "19048F97-E226-4287-A206-9006F7B91E21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419AF785-61C6-4911-A170-6A06D7991948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr840",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr850",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr860",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbre950",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbre960",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs840",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs850",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs860",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbse950",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbse960",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0405",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2026-01-13T16:16:10.513",
      "lastModified" : "2026-02-12T17:40:40.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability in NETGEAR Orbi devices allows \nusers connected to the local network to access the router web interface \nas an admin."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en dispositivos NETGEAR Orbi permite a los usuarios conectados a la red local acceder a la interfaz web del router como administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.14.8",
            "matchCriteriaId" : "B0A2EEFF-5049-4FEA-BDE2-05F7EC1716CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD14EFC-C6EF-485B-A594-73B8525704A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.15.14",
            "matchCriteriaId" : "B72BE7F2-BA8C-49BF-AB3C-5E5EA7272524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5666EA3D-AF24-42A0-8EE9-4BB580A6957A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.3.11",
            "matchCriteriaId" : "2A13940B-149A-4B1D-A55D-279D2D44A65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368F8D25-16A4-416B-82EC-7508218DD281"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.3.11",
            "matchCriteriaId" : "B4F7F974-8561-4B94-A2CE-8E2639FB2521"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00BA4811-2DD1-4DA6-8ECF-CFFEFCB443F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.3.11",
            "matchCriteriaId" : "8F7B120D-3A47-42F5-9E88-F221CE92ACA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA875C8-A4CC-4CC6-8681-803C6F244E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.3.11",
            "matchCriteriaId" : "00C5F601-231C-46B6-AF01-3BFBFC5EB39D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E88B09B-E822-420E-9F9C-3DF666497D51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.3.11",
            "matchCriteriaId" : "0A985F25-0BED-431D-B5F2-B9C35AB40A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B041C8-A297-478F-86A0-91769750F7B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20.7",
            "matchCriteriaId" : "A6895D66-FA20-4102-AF46-AF014AAFD774"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203F8C90-2850-4506-BADF-F420AFCEC4F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20.7",
            "matchCriteriaId" : "790CB1B0-4180-4E66-A3D3-042465DF0013"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09B4CF6-3EC0-486B-A7EB-5F3CAF972806"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20.7",
            "matchCriteriaId" : "7EA0EED6-331B-4927-B4BB-25AE4C428644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4E800D-E5F9-4FF5-A910-A684B5ABA804"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20.7",
            "matchCriteriaId" : "3DA1F136-2807-4A3F-B40A-810509EFDDF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F2349E-98C7-4BEB-8F4A-3B4502D98B07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.13.2.1",
            "matchCriteriaId" : "C3821162-B566-4B42-B210-B7F2B0E39512"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1F3088-9598-4EB5-A8A0-E0D4E529CB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.13.2.1",
            "matchCriteriaId" : "6196E396-B709-40A8-827F-A64204E0BC4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3080999-19F9-4651-80F3-A6461C27E489"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "493D48B4-0613-4AE0-A943-2BA487ED5BC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "AF602E0D-3D64-4176-8588-D333BA010254"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4489CB05-A1C0-408C-8D8C-56EE98CA20E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "40BEF73B-C160-4721-817F-D19451BED93B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "48E5CF81-241E-43DF-90EE-5C53C7116CE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928FC2C1-4D05-495B-ACD8-1D013EB18EE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "A5ED2821-64CA-40D7-B96F-2407AC6209BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "92B6DE04-A9F5-451F-9E2F-9DFBA39C10B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AEA27B-8BEA-4E83-819A-FDAC1881928F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "3D2594C9-743F-4623-A54F-48950FCFE89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "11AB7E3A-991B-4CDC-9CD9-89B319ACF618"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6630553-D726-4524-8BD2-3EE839DE6676"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "945C2CFB-DA2C-4035-9B8A-B9FAF2159163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848E7D41-EB61-4AB3-9AED-8E35281DB464"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "2167962B-04BC-4BC7-9BD1-661CE3204E48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314FF95E-5A0C-4A6B-B8D6-28546F2C1A12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "7D0191A8-64CE-41D2-9586-4C4C3A0B7333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A3F32B-B05E-42C6-969A-0F4DD5B7942E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.8.2",
            "matchCriteriaId" : "1A79A571-A5DA-4953-9AA9-84840720967E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419AF785-61C6-4911-A170-6A06D7991948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.netgear.com/support/product/cbr750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/nbr750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe370",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe371",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe372",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe373",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe374",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe770",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe771",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe772",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe773",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe970",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbe971",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr840",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr850",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbr860",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbre950",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbre960",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs750",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs840",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs850",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbs860",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbse950",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/rbse960",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0406",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2026-01-13T16:16:10.690",
      "lastModified" : "2026-02-20T19:42:29.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient input validation vulnerability in the NETGEAR XR1000v2 \nallows attackers connected to the router's LAN to execute OS command \ninjections."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación de entrada insuficiente en el NETGEAR XR1000v2 permite a atacantes conectados a la LAN del router ejecutar inyecciones de comandos del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.2.34",
            "matchCriteriaId" : "0C8DFFA6-7390-48F5-B3DD-6547B359F107"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr1000v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697B2136-87A6-4E8F-8B5E-373B02E9D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.netgear.com/support/product/xr1000v2",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0407",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2026-01-13T16:16:10.840",
      "lastModified" : "2026-02-20T19:40:59.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient authentication vulnerability in NETGEAR WiFi range \nextenders allows a network adjacent attacker with WiFi authentication or\n a physical Ethernet port connection to bypass the authentication \nprocess and access the admin panel."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autenticación insuficiente en extensores de rango WiFi NETGEAR permite a un atacante adyacente a la red con autenticación WiFi o una conexión física al puerto Ethernet eludir el proceso de autenticación y acceder al panel de administración."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex5000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "6D7590BA-50CD-414F-8ED2-458F6227F3CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F300D51-FEF5-4D49-851C-5B56F6A5087A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3110_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "CAF86049-4F34-4615-B8D5-9B06023F1AE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C254694-4C37-4C5E-BF1C-06EC09BDCA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6110_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "6185EE4D-DFB0-4460-8E90-9DF2F1093004"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04329A16-D96D-4E1D-8AC9-EA3882F1DC41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex2800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "55DC6A0A-B406-4813-ADA4-05F62A50AA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE27681D-2B5D-4816-84CD-ACDBAF1A12CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex2800",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex3110",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex5000",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex6110",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Patch", "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0408",
      "sourceIdentifier" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "published" : "2026-01-13T16:16:11.017",
      "lastModified" : "2026-02-20T19:41:22.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN authentication to access the router's IP and \nreview the contents of the dynamically generated webproc file, which \nrecords the username and password submitted to the router GUI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta en extensores de rango WiFi de NETGEAR permite a un atacante con autenticación LAN acceder a la IP del router y revisar el contenido del archivo webproc generado dinámicamente, que registra el nombre de usuario y la contraseña enviados a la GUI del router."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex2800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "55DC6A0A-B406-4813-ADA4-05F62A50AA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE27681D-2B5D-4816-84CD-ACDBAF1A12CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex3110_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "CAF86049-4F34-4615-B8D5-9B06023F1AE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex3110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C254694-4C37-4C5E-BF1C-06EC09BDCA1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex5000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "6D7590BA-50CD-414F-8ED2-458F6227F3CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F300D51-FEF5-4D49-851C-5B56F6A5087A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6110_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.82",
            "matchCriteriaId" : "6185EE4D-DFB0-4460-8E90-9DF2F1093004"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04329A16-D96D-4E1D-8AC9-EA3882F1DC41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex2800",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Product", "Patch" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex3110",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Product", "Patch" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex5000",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Product", "Patch" ]
      }, {
        "url" : "https://www.netgear.com/support/product/ex6110",
        "source" : "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "tags" : [ "Product", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0386",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:06.440",
      "lastModified" : "2026-01-14T20:01:53.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en los Servicios de implementación de Windows permite a un atacante no autorizado ejecutar código sobre una red adyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0386",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20803",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:06.630",
      "lastModified" : "2026-01-16T14:35:02.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Falta de autenticación para una función crítica en SQL Server permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "16.0.1000.6",
            "versionEndExcluding" : "16.0.1165.1",
            "matchCriteriaId" : "571B6885-6FD3-4E3F-A22A-583A0029F20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "16.0.4003.1",
            "versionEndExcluding" : "16.0.4230.2",
            "matchCriteriaId" : "B984CC39-AE9C-4F8E-B316-94EFF9462148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2025:17.0.1000.7:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E722BA1A-A8E8-486E-8D8E-6F9B7DD2B556"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20803",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20804",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:06.843",
      "lastModified" : "2026-01-14T20:03:08.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de privilegios en Windows Hello permite a un atacante no autorizado realizar manipulaciones localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "26E251FB-A333-4235-802B-2DE9357F3A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A16B7966-F89C-4292-814F-448667F6528B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20804",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20805",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:07.023",
      "lastModified" : "2026-01-14T13:44:31.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en el Administrador de ventanas de escritorio permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2026-01-13",
      "cisaActionDue" : "2026-02-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Windows Information Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "C6BE8CAC-3A47-48FC-A0FD-F0F0ADD2A9CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20805",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20808",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:07.197",
      "lastModified" : "2026-01-14T20:10:29.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente usando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Objeto de Asociación de Impresora permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20808",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20809",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:07.360",
      "lastModified" : "2026-01-14T20:11:46.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera de tipo Time-of-check time-of-use (toctou) en la memoria del kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20809",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20810",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:07.547",
      "lastModified" : "2026-01-14T20:12:30.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Liberación de memoria fuera del heap en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-590"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20810",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20811",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:07.727",
      "lastModified" : "2026-01-14T20:13:13.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Acceso a recurso usando tipo incompatible ('confusión de tipos') en Windows Win32K - ICOMP permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20811",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20812",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:07.913",
      "lastModified" : "2026-01-14T20:25:38.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network."
      }, {
        "lang" : "es",
        "value" : "La validación de entrada indebida en Windows LDAP - Protocolo Ligero de Acceso a Directorios permite a un atacante autorizado realizar manipulación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20812",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20814",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:08.107",
      "lastModified" : "2026-01-14T20:26:47.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Kernel Gráfico permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20814",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20815",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:08.273",
      "lastModified" : "2026-01-14T20:27:14.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Servicio de Gestión de Acceso a Capacidades (camsvc) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20815",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20816",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:08.437",
      "lastModified" : "2026-01-14T20:29:02.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "La condición de carrera Time-of-check time-of-use (toctou) en Windows Installer permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20816",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20817",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:08.647",
      "lastModified" : "2026-01-14T20:31:32.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de permisos o privilegios insuficientes en el Informe de errores de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20817",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20818",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:08.810",
      "lastModified" : "2026-01-14T20:32:15.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Inserción de información sensible en un archivo de registro en el kernel de Windows permite a un atacante no autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "C6BE8CAC-3A47-48FC-A0FD-F0F0ADD2A9CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20818",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20819",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:08.983",
      "lastModified" : "2026-01-14T20:33:03.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en el enclave de Seguridad Basada en Virtualización (VBS) de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20819",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20820",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:09.143",
      "lastModified" : "2026-01-14T20:34:20.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el controlador del sistema de archivos de registro común de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20820",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20821",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:09.313",
      "lastModified" : "2026-01-14T20:35:46.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en la Llamada a Procedimiento Remoto de Windows permite a un atacante no autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20821",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20822",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:09.487",
      "lastModified" : "2026-01-14T20:41:57.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el Componente Gráfico de Microsoft permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20822",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20823",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:09.650",
      "lastModified" : "2026-01-15T13:24:55.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en el Explorador de Archivos de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20823",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20824",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:09.823",
      "lastModified" : "2026-01-15T13:21:04.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally."
      }, {
        "lang" : "es",
        "value" : "Fallo del mecanismo de protección en Asistencia remota de Windows permite a un atacante no autorizado eludir una característica de seguridad localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20824",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20825",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:09.990",
      "lastModified" : "2026-01-15T13:18:07.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Windows Hyper-V permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20825",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20826",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:10.153",
      "lastModified" : "2026-01-15T13:16:27.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el subsistema de Interfaz de Usuario de Tablet Windows (TWINUI) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20826",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20827",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:10.317",
      "lastModified" : "2026-01-15T13:15:07.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en el subsistema de interfaz de usuario de Tablet Windows (TWINUI) permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20827",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20828",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:10.480",
      "lastModified" : "2026-01-15T13:08:46.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en el Compartir Conexión a Internet (ICS) de Windows permite a un atacante no autorizado divulgar información con un ataque físico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20828",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20829",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:10.657",
      "lastModified" : "2026-01-15T13:07:28.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en TPM de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20829",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20830",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:10.817",
      "lastModified" : "2026-01-15T13:06:09.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Servicio de Gestión de Acceso a Capacidades (camsvc) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "C6BE8CAC-3A47-48FC-A0FD-F0F0ADD2A9CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20830",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20831",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:10.977",
      "lastModified" : "2026-01-15T14:34:16.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera de tiempo de verificación y tiempo de uso (TOCTOU) en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20831",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20832",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:11.150",
      "lastModified" : "2026-01-15T14:38:54.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Windows Llamada a procedimiento remoto Lenguaje de definición de interfaz (IDL) Elevación de privilegios vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20832",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20833",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:11.320",
      "lastModified" : "2026-01-15T14:40:20.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "El uso de un algoritmo criptográfico roto o arriesgado en Windows Kerberos permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20833",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20834",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:11.493",
      "lastModified" : "2026-01-15T15:04:18.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack."
      }, {
        "lang" : "es",
        "value" : "Salto de ruta absoluto en Windows Shell permite a un atacante no autorizado realizar suplantación con un ataque físico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        }, {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20834",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20835",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:11.660",
      "lastModified" : "2026-01-15T15:05:28.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en el Servicio de Gestión de Acceso a Capacidades (camsvc) permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20835",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20836",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:11.830",
      "lastModified" : "2026-01-15T15:07:02.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Kernel Gráfico permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20836",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20837",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:11.993",
      "lastModified" : "2026-01-15T15:08:28.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Windows Media permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20837",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20838",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:12.153",
      "lastModified" : "2026-01-15T15:15:51.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Generación de mensaje de error que contiene información sensible en el kernel de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20838",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20839",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:12.320",
      "lastModified" : "2026-01-15T14:30:43.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en el Servicio de Caché del Lado del Cliente (CSC) de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20839",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20840",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:12.490",
      "lastModified" : "2026-01-15T14:19:14.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Windows NTFS permite a un atacante autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20840",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20842",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:12.660",
      "lastModified" : "2026-01-15T14:14:04.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows DWM allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en Windows DWM permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20842",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20843",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:12.810",
      "lastModified" : "2026-01-15T14:11:49.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en el Servicio de Enrutamiento y Acceso Remoto de Windows (RRAS) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20843",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20844",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:12.977",
      "lastModified" : "2026-01-15T14:07:56.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el servidor del Portapapeles de Windows permite a un atacante no autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20844",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20847",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:13.140",
      "lastModified" : "2026-01-15T14:05:56.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en Windows Shell permite a un atacante autorizado realizar suplantación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20847",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20848",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:13.310",
      "lastModified" : "2026-01-15T14:03:20.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servidor SMB de Windows permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "C6BE8CAC-3A47-48FC-A0FD-F0F0ADD2A9CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20848",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20849",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:13.480",
      "lastModified" : "2026-01-15T14:00:19.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Dependencia de entradas no confiables en una decisión de seguridad en Windows Kerberos permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20849",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20851",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:13.650",
      "lastModified" : "2026-01-15T13:49:12.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en el Servicio de Gestión de Acceso a Capacidades (camsvc) permite a un atacante no autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20851",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20852",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:13.827",
      "lastModified" : "2026-01-15T13:47:16.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de privilegios en Windows Hello permite a un atacante no autorizado realizar manipulaciones localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20852",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20853",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:13.990",
      "lastModified" : "2026-01-15T13:28:14.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente usando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servicio WalletService de Windows permite a un atacante no autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20853",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20854",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:14.153",
      "lastModified" : "2026-01-15T13:27:10.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el Servicio de Subsistema de Autoridad de Seguridad Local de Windows (LSASS) permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20854",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20856",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:14.313",
      "lastModified" : "2026-01-15T15:20:22.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "La validación de entrada indebida en Windows Servidor Update Service permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20857",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:14.480",
      "lastModified" : "2026-01-15T15:21:42.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en el controlador de minifiltro de archivos en la nube de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20857",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20858",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:14.647",
      "lastModified" : "2026-01-15T15:25:31.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20859",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:14.810",
      "lastModified" : "2026-01-15T15:27:06.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en controladores de modo kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20860",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:14.970",
      "lastModified" : "2026-01-15T15:29:06.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Acceso de recursos usando un tipo incompatible ('confusión de tipos') en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20861",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:15.137",
      "lastModified" : "2026-01-15T15:31:53.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20862",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:15.300",
      "lastModified" : "2026-01-15T15:33:07.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en los Servicios de administración de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20862",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20863",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:15.467",
      "lastModified" : "2026-01-15T15:34:09.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Doble liberación en Windows Win32K - ICOMP permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20864",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:15.633",
      "lastModified" : "2026-01-15T15:38:40.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el Servicio de Plataforma de Dispositivos Conectados (Cdpsvc) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20864",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20865",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:15.797",
      "lastModified" : "2026-01-15T15:40:06.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20865",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20866",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:15.967",
      "lastModified" : "2026-01-15T15:41:10.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20866",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20867",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:16.130",
      "lastModified" : "2026-01-15T15:42:24.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada (condición de carrera) en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20867",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20868",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:16.303",
      "lastModified" : "2026-02-10T15:16:05.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el Servicio de Enrutamiento y Acceso Remoto (RRAS) de Windows permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20868",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-20868-detection-script-heap-based-buffer-overflow-vulnerability-affecting-windows-rras",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-20868-mitigation-script-heap-based-buffer-overflow-vulnerability-affecting-windows-rras",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20869",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:16.480",
      "lastModified" : "2026-01-15T15:47:01.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada (condición de carrera) en el Administrador de Sesiones Locales (LSM) de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20869",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20870",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:16.650",
      "lastModified" : "2026-01-15T15:47:31.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en Windows Win32K - ICOMP permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20870",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20871",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:16.810",
      "lastModified" : "2026-01-15T15:48:21.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el Administrador de ventanas de escritorio permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20871",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20872",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:16.973",
      "lastModified" : "2026-03-27T21:17:01.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Control externo del nombre de archivo o ruta en Windows NTLM permite a un atacante no autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20872",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-20872-detection-script-spoofing-vulnerability-in-windows-ntlm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-20872-mitigation-script-spoofing-vulnerability-in-windows-ntlm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20873",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:17.147",
      "lastModified" : "2026-01-15T21:39:34.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20873",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20874",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:17.313",
      "lastModified" : "2026-01-15T21:38:30.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada (condición de carrera) en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20874",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20875",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:17.483",
      "lastModified" : "2026-01-15T21:37:12.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero nulo en el Servicio del Subsistema de la Autoridad de Seguridad Local de Windows (LSASS) permite a un atacante no autorizado denegar el servicio a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20875",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20876",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:17.650",
      "lastModified" : "2026-01-15T21:28:22.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el Enclave de Seguridad Basada en Virtualización (VBS) de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20876",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20877",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:17.813",
      "lastModified" : "2026-01-15T21:25:29.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20877",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20918",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:17.973",
      "lastModified" : "2026-01-15T21:22:36.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20918",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20919",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:18.140",
      "lastModified" : "2026-01-15T21:18:02.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servidor SMB de Windows permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20919",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20920",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:18.303",
      "lastModified" : "2026-01-15T21:16:36.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en Windows Win32K - ICOMP permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20920",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20921",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:18.463",
      "lastModified" : "2026-01-15T21:15:37.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servidor SMB de Windows permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20921",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20922",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:18.633",
      "lastModified" : "2026-01-15T21:03:37.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Windows NTFS permite a un atacante autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20922",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20923",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:18.837",
      "lastModified" : "2026-01-15T18:17:50.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20923",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20924",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:19.027",
      "lastModified" : "2026-01-16T14:37:34.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en los Servicios de administración de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20924",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20925",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:19.200",
      "lastModified" : "2026-01-16T14:39:54.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Control externo del nombre de archivo o ruta en Windows NTLM permite a un atacante no autorizado realizar suplantación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20925",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20926",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:19.423",
      "lastModified" : "2026-01-16T14:40:54.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servidor SMB de Windows permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20926",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20927",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:19.650",
      "lastModified" : "2026-01-16T14:57:23.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servidor SMB de Windows permite a un atacante autorizado denegar el servicio a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20927",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20929",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:19.827",
      "lastModified" : "2026-01-16T15:05:21.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Windows HTTP.sys permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20929",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20931",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.003",
      "lastModified" : "2026-01-16T15:06:39.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network."
      }, {
        "lang" : "es",
        "value" : "Control externo del nombre o la ruta del archivo en el Servicio de Telefonía de Windows permite a un atacante autorizado elevar privilegios sobre una red adyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "1895E186-5B2E-43CC-AF1F-B5C95419D8C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "B7CB5184-1BA1-4D71-8AE3-CF4C6B63A469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "8D675DAA-4DCE-4727-BE5F-C954BBD252C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "D249551B-1433-4E5E-A587-40F782E91E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "22082D4E-E68F-4E48-98FB-42DFDEE2E2A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20931",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20932",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.170",
      "lastModified" : "2026-01-16T15:15:18.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en el Explorador de Archivos de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20932",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20934",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.333",
      "lastModified" : "2026-01-16T15:17:38.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el servidor SMB de Windows permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20934",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20935",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.500",
      "lastModified" : "2026-01-16T15:18:31.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en el enclave de Seguridad Basada en Virtualización (VBS) de Windows permite a un atacante no autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20935",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20936",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.653",
      "lastModified" : "2026-01-16T15:22:12.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en Windows NDIS permite a un atacante autorizado divulgar información con un ataque físico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20936",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20937",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.820",
      "lastModified" : "2026-01-16T15:23:53.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en el Explorador de Archivos de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20937",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20938",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:20.980",
      "lastModified" : "2026-01-16T15:47:57.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en el enclave de Seguridad Basada en Virtualización (VBS) de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20938",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20939",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:21.140",
      "lastModified" : "2026-01-16T15:52:31.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en el Explorador de Archivos de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20939",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20940",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:21.313",
      "lastModified" : "2026-01-16T15:54:53.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el controlador de minifiltro de archivos en la nube de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20940",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20941",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:21.530",
      "lastModified" : "2026-01-16T15:55:38.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Resolución de enlace incorrecta antes del acceso al archivo (seguimiento de enlaces) en el Proceso Host para Tareas de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20941",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20943",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:21.687",
      "lastModified" : "2026-01-16T16:14:34.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Ruta de búsqueda no confiable en Microsoft Office permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "72324216-4EB3-4243-A007-FEF3133C7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_deployment_tool:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.19426.20170",
            "matchCriteriaId" : "2D4CAEAF-A5AF-46D2-9A2B-8B04CC120B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20442",
            "matchCriteriaId" : "FB9ECA81-C1E2-4B02-A45C-0E5664E3C9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20943",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20944",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:21.850",
      "lastModified" : "2026-01-16T16:15:25.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en Microsoft Office Word permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20944",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20946",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.007",
      "lastModified" : "2026-01-16T16:16:28.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en Microsoft Office Excel permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CD88F667-6773-4DB7-B6C3-9C7B769C0808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B342EF98-B414-44D0-BAFB-FCA24294EECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20946",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20947",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.167",
      "lastModified" : "2026-01-16T16:17:12.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') en Microsoft Office SharePoint permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20442",
            "matchCriteriaId" : "FB9ECA81-C1E2-4B02-A45C-0E5664E3C9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20947",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20948",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.327",
      "lastModified" : "2026-01-16T16:19:15.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en Microsoft Office Word permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E1FE9E95-4874-46EF-AC93-9E485F7A2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "38479B5D-66F9-4260-A18A-F6E3D9B6991E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20948",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20949",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.487",
      "lastModified" : "2026-01-16T16:20:58.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Microsoft Office Excel permite a un atacante no autorizado eludir una característica de seguridad localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20949",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20950",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.653",
      "lastModified" : "2026-01-14T19:50:35.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en Microsoft Office Excel permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CD88F667-6773-4DB7-B6C3-9C7B769C0808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B342EF98-B414-44D0-BAFB-FCA24294EECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.10417.20083",
            "matchCriteriaId" : "08A33F86-5F76-4BF6-8C56-678924FDB333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20950",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20951",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.833",
      "lastModified" : "2026-01-14T19:22:17.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada indebida en Microsoft Office SharePoint permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20442",
            "matchCriteriaId" : "FB9ECA81-C1E2-4B02-A45C-0E5664E3C9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20951",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20952",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:22.990",
      "lastModified" : "2026-01-14T19:55:31.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Microsoft Office allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en Microsoft Office permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "72324216-4EB3-4243-A007-FEF3133C7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20952",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20953",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:23.150",
      "lastModified" : "2026-01-14T19:56:25.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Microsoft Office allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en Microsoft Office permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "72324216-4EB3-4243-A007-FEF3133C7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20953",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20955",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:23.307",
      "lastModified" : "2026-01-14T19:49:54.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en Microsoft Office Excel permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.10417.20083",
            "matchCriteriaId" : "08A33F86-5F76-4BF6-8C56-678924FDB333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20955",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20956",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:23.467",
      "lastModified" : "2026-01-14T19:48:42.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en Microsoft Office Excel permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20956",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20957",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:23.627",
      "lastModified" : "2026-01-14T19:47:43.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Subdesbordamiento de enteros (ajuste o ajuste circular) en Microsoft Office Excel permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF177984-A906-43FA-BF60-298133FBBD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.10417.20083",
            "matchCriteriaId" : "08A33F86-5F76-4BF6-8C56-678924FDB333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20957",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20958",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:23.790",
      "lastModified" : "2026-01-14T19:21:51.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "La falsificación de petición del lado del servidor (SSRF) en Microsoft Office SharePoint permite a un atacante autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20442",
            "matchCriteriaId" : "FB9ECA81-C1E2-4B02-A45C-0E5664E3C9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20958",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20959",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:23.937",
      "lastModified" : "2026-01-14T19:19:39.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en Microsoft Office SharePoint permite a un atacante autorizado realizar suplantación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20442",
            "matchCriteriaId" : "FB9ECA81-C1E2-4B02-A45C-0E5664E3C9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20959",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20962",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:24.093",
      "lastModified" : "2026-01-14T19:34:12.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Uso de recurso no inicializado en Dynamic Root of Trust for Measurement (DRTM) permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "9738ABD2-1692-4547-B4AF-8673D3F8129C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "1BCFDBEF-B7E3-4DE8-BAAC-F648701F6947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20962",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20963",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:24.260",
      "lastModified" : "2026-04-01T16:01:22.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "La deserialización de datos no confiables en Microsoft Office SharePoint permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-03-18",
      "cisaActionDue" : "2026-03-21",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20442",
            "matchCriteriaId" : "FB9ECA81-C1E2-4B02-A45C-0E5664E3C9B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20963",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20963",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20965",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:24.417",
      "lastModified" : "2026-01-16T16:23:11.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Verificación incorrecta de firma criptográfica en Windows Admin Center permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:azure:*:*",
            "versionEndExcluding" : "0.70.0.0",
            "matchCriteriaId" : "45A440DB-3383-476C-BF0F-6B932A709C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20965",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21219",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:24.580",
      "lastModified" : "2026-02-09T20:37:59.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en objetos COM de Inbox permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_software_development_kit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.26100",
            "versionEndExcluding" : "10.0.26100.7463",
            "matchCriteriaId" : "238CF4D4-B147-493E-861A-4912190B0281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21219",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21221",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:24.723",
      "lastModified" : "2026-01-16T16:48:12.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada (condición de carrera) en el Servicio de Gestión de Acceso a Capacidades (camsvc) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21221",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21224",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:24.883",
      "lastModified" : "2026-01-14T20:39:55.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en pila en el Agente de Máquina Conectada de Azure permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_connected_machine_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60",
            "matchCriteriaId" : "9F02DC0C-4673-4D33-A287-64DCAE26FD4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21224",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21265",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T18:16:25.053",
      "lastModified" : "2026-01-14T20:23:43.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes related to Windows boot manager or Secure Boot.\nThe operating system’s certificate update protection mechanism relies on firmware components that might contain defects, which can cause certificate trust updates to fail or behave unpredictably. This leads to potential disruption of the Secure Boot trust chain and requires careful validation and deployment to restore intended security guarantees.\n\n\n\nCertificate Authority (CA)\nLocation\nPurpose\nExpiration Date\n\n\n\n\nMicrosoft Corporation KEK CA 2011\nKEK\nSigns updates to the DB and DBX\n06/24/2026\n\n\nMicrosoft Corporation UEFI CA 2011\nDB\nSigns 3rd party boot loaders, Option ROMs, etc.\n06/27/2026\n\n\nMicrosoft Windows Production PCA 2011\nDB\nSigns the Windows Boot Manager\n10/19/2026\n\n\n\nFor more information see this CVE and Windows Secure Boot certificate expiration and CA updates."
      }, {
        "lang" : "es",
        "value" : "Secure Boot de Windows almacena certificados de Microsoft en el KEK y DB de UEFI. Estos certificados originales están próximos a caducar, y los dispositivos que contienen versiones de certificados afectadas deben actualizarlos para mantener la funcionalidad de Secure Boot y evitar comprometer la seguridad al perder las correcciones de seguridad relacionadas con el gestor de arranque de Windows o Secure Boot.\nEl mecanismo de protección de actualización de certificados del sistema operativo se basa en componentes de firmware que podrían contener defectos, lo que puede hacer que las actualizaciones de confianza de los certificados fallen o se comporten de manera impredecible. Esto lleva a una posible interrupción de la cadena de confianza de Secure Boot y requiere una validación y un despliegue cuidadosos para restaurar las garantías de seguridad previstas.\n\nAutoridad de Certificación (CA)\nUbicación\nPropósito\nFecha de Vencimiento\n\nMicrosoft Corporation KEK CA 2011\nKEK\nFirma las actualizaciones de la DB y DBX\n24/06/2026\n\nMicrosoft Corporation UEFI CA 2011\nDB\nFirma cargadores de arranque de terceros, ROMs de opción, etc.\n27/06/2026\n\nMicrosoft Windows Production PCA 2011\nDB\nFirma el Gestor de Arranque de Windows\n19/10/2026\n\nPara más información, consulte este CVE y el vencimiento de los certificados de Secure Boot de Windows y las actualizaciones de CA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1329"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "9A956D23-259E-450B-8406-FEB2BBED1F39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "41D387B9-5E9D-47CB-B044-D7D10FFFB458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "DD4CBDAB-7626-4048-8474-B1BD9C1F3255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A6D4C631-2CC0-407C-9ACA-7C151006598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "9CFC3200-1FAB-4AB1-A008-F703EEF3505A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "E481E93D-D86E-4B65-93E5-200327C348C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6809",
            "matchCriteriaId" : "F720EC9F-6A33-445F-AFA1-794405737E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "85E22F96-B552-4BBA-AFA1-85C1FC55DB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "5ACD940D-CA6A-402B-B132-E5A66139C44F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6809",
            "matchCriteriaId" : "354AD10F-EEF4-461D-BDBB-245B97E3D420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "7D2B0BB9-E94A-420E-8E53-A4C1136DE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6491",
            "matchCriteriaId" : "78C4B71B-5345-4D83-A0A9-A15F783CF9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "208734FD-5175-4856-9D08-ED6CFF64AA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7623",
            "matchCriteriaId" : "846261D4-ECC2-4DCB-8F8F-F27F8C99F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "33E138A3-968B-4109-AC13-D488685F0AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7623",
            "matchCriteriaId" : "CC1FE5A1-3E6E-4606-899B-BF7BF3D3DD8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8783",
            "matchCriteriaId" : "A059E609-F8D4-4246-BDAE-0AEDED1744D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8276",
            "matchCriteriaId" : "A74970A1-CC81-4482-B465-8382B1544EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4648",
            "matchCriteriaId" : "C4AA6991-DE34-48F6-AFD3-77CEE7FBB692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2092",
            "matchCriteriaId" : "BA5947E0-C44C-4517-A307-DA79752F30A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32230",
            "matchCriteriaId" : "D44880ED-E8E9-49A8-BD56-503C63D40000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21265",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21226",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-13T19:16:23.987",
      "lastModified" : "2026-02-05T17:58:29.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Deserialización de datos no confiables en la biblioteca compartida de cliente de Azure Core para Python permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_core_shared_client_library:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.38.0",
            "matchCriteriaId" : "43DC5EFE-C77D-469D-8402-769897B0DC30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21226",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21267",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:24.213",
      "lastModified" : "2026-01-14T20:51:15.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.6 y anteriores de Dreamweaver Desktop están afectadas por una vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando del SO ('Inyección de Comandos del SO') que podría conducir a la ejecución de código arbitrario por un atacante. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso y el ámbito se modifica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.7",
            "matchCriteriaId" : "18B387B5-7F08-419A-B3EC-3CB93C7E9288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21268",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:24.383",
      "lastModified" : "2026-01-14T20:50:52.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.6 y anteriores de Dreamweaver Desktop se ven afectadas por una vulnerabilidad de validación de entrada incorrecta que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso y el alcance se modifica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.7",
            "matchCriteriaId" : "18B387B5-7F08-419A-B3EC-3CB93C7E9288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21271",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:24.543",
      "lastModified" : "2026-01-14T20:50:28.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.6 y anteriores de Dreamweaver Desktop se ven afectadas por una vulnerabilidad de validación de entrada incorrecta que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso y el alcance se modifica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.7",
            "matchCriteriaId" : "18B387B5-7F08-419A-B3EC-3CB93C7E9288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21272",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:24.703",
      "lastModified" : "2026-01-14T20:49:33.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.6 y anteriores de Dreamweaver Desktop están afectadas por una vulnerabilidad de validación de entrada incorrecta que podría conducir a una escritura arbitraria en el sistema de archivos. Un atacante podría aprovechar esta vulnerabilidad para manipular o inyectar datos maliciosos en archivos del sistema. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso y el alcance se modifica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.7",
            "matchCriteriaId" : "18B387B5-7F08-419A-B3EC-3CB93C7E9288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21274",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:24.863",
      "lastModified" : "2026-01-14T20:49:03.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.6 y anteriores de Dreamweaver Desktop se ven afectadas por una vulnerabilidad de autorización incorrecta que podría resultar en la ejecución de código arbitrario en el contexto del usuario actual. Un atacante podría aprovechar esta vulnerabilidad para eludir las medidas de seguridad y ejecutar código no autorizado. La explotación de este problema requiere interacción del usuario, en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.7",
            "matchCriteriaId" : "18B387B5-7F08-419A-B3EC-3CB93C7E9288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21275",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:25.030",
      "lastModified" : "2026-01-14T19:28:03.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de InDesign Desktop 21.0, 19.5.5 y anteriores están afectadas por una vulnerabilidad de Acceso a Puntero No Inicializado que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "7BFF153C-8825-407C-AF58-4AC567601D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.1",
            "matchCriteriaId" : "7BF7435F-7314-440A-89A8-8C3D4CCCDD63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21276",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:25.200",
      "lastModified" : "2026-01-14T19:28:06.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.0, 19.5.5 y anteriores de InDesign Desktop están afectadas por una vulnerabilidad de Acceso a Puntero No Inicializado que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "7BFF153C-8825-407C-AF58-4AC567601D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.1",
            "matchCriteriaId" : "7BF7435F-7314-440A-89A8-8C3D4CCCDD63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21277",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:25.370",
      "lastModified" : "2026-01-14T19:28:10.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de escritorio de InDesign 21.0, 19.5.5 y anteriores están afectadas por una vulnerabilidad de desbordamiento de búfer basado en montículo que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "7BFF153C-8825-407C-AF58-4AC567601D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.1",
            "matchCriteriaId" : "7BF7435F-7314-440A-89A8-8C3D4CCCDD63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21278",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:25.530",
      "lastModified" : "2026-01-14T19:28:15.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de InDesign Desktop 21.0, 19.5.5 y anteriores están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para acceder a información sensible almacenada en la memoria. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "7BFF153C-8825-407C-AF58-4AC567601D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.1",
            "matchCriteriaId" : "7BF7435F-7314-440A-89A8-8C3D4CCCDD63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21280",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:25.693",
      "lastModified" : "2026-01-14T19:28:23.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is changed."
      }, {
        "lang" : "es",
        "value" : "Las versiones 29.8.3, 30.0 y anteriores de Illustrator se ven afectadas por una vulnerabilidad de Ruta de Búsqueda No Confiable que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema requiere interacción del usuario, en el sentido de que la víctima debe abrir un archivo malicioso y el alcance se modifica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "29.0",
            "versionEndExcluding" : "29.8.4",
            "matchCriteriaId" : "51DBEB22-5A04-40DC-BF47-0A6711977FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7239093D-0266-4AFA-BA6C-94F6593E0B4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb26-03.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21281",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:25.857",
      "lastModified" : "2026-01-14T19:28:33.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 21.0, 19.5.5 y anteriores de InCopy se ven afectadas por una vulnerabilidad de desbordamiento de búfer basado en montículo que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "787164DB-0C13-412F-9E57-271AE10CB605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CF36EE-020C-4620-A213-9DAFF04E24BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb26-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21283",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:26.013",
      "lastModified" : "2026-01-14T19:28:34.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Bridge 15.1.2, 16.0 y anteriores se ven afectadas por una vulnerabilidad de desbordamiento de búfer basado en montículo que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.3",
            "matchCriteriaId" : "9C0BA424-C0E5-4691-8B1F-342C403F9EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55CB1268-875B-498A-B7B1-91D3DD31F315"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb26-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21288",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:26.173",
      "lastModified" : "2026-01-14T19:29:14.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 29.8.3, 30.0 y anteriores de Illustrator se ven afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría provocar una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para bloquear la aplicación, causando interrupción en los servicios. La explotación de este problema requiere interacción del usuario, en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "29.0",
            "versionEndExcluding" : "29.8.4",
            "matchCriteriaId" : "51DBEB22-5A04-40DC-BF47-0A6711977FBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:30.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7239093D-0266-4AFA-BA6C-94F6593E0B4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb26-03.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21304",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T19:16:26.337",
      "lastModified" : "2026-01-14T19:29:14.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de escritorio de InDesign 21.0, 19.5.5 y anteriores están afectadas por una vulnerabilidad de desbordamiento de búfer basado en montículo que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "7BFF153C-8825-407C-AF58-4AC567601D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.1",
            "matchCriteriaId" : "7BF7435F-7314-440A-89A8-8C3D4CCCDD63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22791",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T19:16:26.710",
      "lastModified" : "2026-02-03T18:47:15.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service."
      }, {
        "lang" : "es",
        "value" : "openCryptoki es una biblioteca PKCS#11 y herramientas para Linux y AIX. En 3.25.0 y 3.26.0, existe una vulnerabilidad de desbordamiento de búfer de pila en la implementación de CKM_ECDH_AES_KEY_WRAP que permite a un atacante con acceso local causar escrituras fuera de límites en el proceso anfitrión al proporcionar una clave pública EC comprimida e invocar C_WrapKey. Esto puede llevar a corrupción de pila o denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencryptoki_project:opencryptoki:3.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D816F8B-C6E1-47F2-9FE0-546949751FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencryptoki_project:opencryptoki:3.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19F0637-CBD9-4902-AFA9-A78584FAACF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencryptoki/opencryptoki/commit/785d7577e1477d12fbe235554e7e7b24f2de34b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencryptoki/opencryptoki/commit/e37e9127deeeb7bf3c3c4d852c594256c57ec3a8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-26f5-3mwq-4wm7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21287",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T20:16:09.283",
      "lastModified" : "2026-01-14T19:29:14.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Stager versiones 3.1.5 y anteriores están afectadas por una vulnerabilidad de Use After Free que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.6",
            "matchCriteriaId" : "6EEF4010-0833-4D6B-9C45-FC8F85B3496A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21305",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T20:16:09.443",
      "lastModified" : "2026-01-14T17:57:27.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Painter versiones 11.0.3 y anteriores están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1.2",
            "matchCriteriaId" : "7E85EB0F-F4D8-47B7-A523-E7A998C62141"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_painter/apsb26-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21306",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T20:16:09.607",
      "lastModified" : "2026-01-14T17:57:37.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 5.1.0 y anteriores de Substance3D - Sampler están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_sampler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.3",
            "matchCriteriaId" : "DF6DB8C7-8B88-4967-9449-BD45B0972B49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-sampler/apsb26-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21307",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T20:16:09.763",
      "lastModified" : "2026-01-14T17:57:42.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.0.3 y anteriores de Substance3D - Designer están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "A490AE76-8B57-4B39-9A8A-0327D3C8E592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-13.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21308",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T20:16:09.927",
      "lastModified" : "2026-01-14T17:57:49.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 15.0.3 y anteriores de Substance3D - Designer se ven afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "A490AE76-8B57-4B39-9A8A-0327D3C8E592"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-13.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22809",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T20:16:11.263",
      "lastModified" : "2026-01-20T16:49:02.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the issuu_id parameter. This vulnerability is fixed in 1.29.0."
      }, {
        "lang" : "es",
        "value" : "tarteaucitron.js es un banner de cookies conforme y accesible. Antes de la versión 1.29.0, se identificó una vulnerabilidad de denegación de servicio por expresión regular (ReDoS) en tarteaucitron.js en el manejo del parámetro issuu_id. Esta vulnerabilidad está corregida en la versión 1.29.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amauri:tarteaucitronjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.29.0",
            "matchCriteriaId" : "0BEC3231-9805-4074-93EB-2CCB444A1CA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AmauriC/tarteaucitron.js/commit/f0bbdac2fdf3cd24a325fc0928c0d34abf1b7b52",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AmauriC/tarteaucitron.js/security/advisories/GHSA-q5f6-qxm2-mcqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22814",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T20:16:11.427",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assignment vulnerability in AdonisJS Lucid which may allow a remote attacker who can influence data that is passed into Lucid model assignments to overwrite the internal ORM state. This may lead to logic bypasses and unauthorized record modification within a table or model. This affects @adonisjs/lucid through version 21.8.1 and 22.x pre-release versions prior to 22.0.0-next.6. This has been patched in @adonisjs/lucid versions 21.8.2 and 22.0.0-next.6."
      }, {
        "lang" : "es",
        "value" : "@adonisjs/lucid es un ORM SQL para AdonisJS construido sobre Knex. Antes de 21.8.2 y 22.0.0-next.6, existe una vulnerabilidad de Asignación Masiva en AdonisJS Lucid que puede permitir a un atacante remoto que puede influir en los datos que se pasan a las asignaciones del modelo Lucid sobrescribir el estado interno del ORM. Esto puede conducir a derivaciones de lógica y modificación no autorizada de registros dentro de una tabla o modelo. Esto afecta a @adonisjs/lucid hasta la versión 21.8.1 y las versiones pre-lanzamiento 22.x anteriores a 22.0.0-next.6. Esto ha sido parcheado en las versiones 21.8.2 y 22.0.0-next.6 de @adonisjs/lucid."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/adonisjs/lucid/security/advisories/GHSA-g5gc-h5hp-555f",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22817",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T20:16:11.570",
      "lastModified" : "2026-01-20T16:48:05.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw in Hono’s JWK/JWKS JWT verification middleware allowed the JWT header’s alg value to influence signature verification when the selected JWK did not explicitly specify an algorithm. This could enable JWT algorithm confusion and, in certain configurations, allow forged tokens to be accepted. As part of this fix, the JWT middleware now requires the alg option to be explicitly specified. This prevents algorithm confusion by ensuring that the verification algorithm is not derived from untrusted JWT header values. This vulnerability is fixed in 4.11.4."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.11.4, existe una falla en el middleware de verificación de JWT JWK/JWKS de Hono que permitía que el valor 'alg' del encabezado JWT influyera en la verificación de la firma cuando el JWK seleccionado no especificaba explícitamente un algoritmo. Esto podría habilitar la confusión de algoritmos JWT y, en ciertas configuraciones, permitir que se aceptaran tokens falsificados. Como parte de esta corrección, el middleware JWT ahora requiere que la opción 'alg' se especifique explícitamente. Esto previene la confusión de algoritmos asegurando que el algoritmo de verificación no se derive de valores de encabezado JWT no confiables. Esta vulnerabilidad está corregida en la versión 4.11.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "0D4B47C2-4F12-40CF-B9D0-51EC76A81F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/cc0aa7ae327ed84cc391d29086dec2a3e44e7a1f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-f67f-6cw9-8mq4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22818",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T20:16:11.740",
      "lastModified" : "2026-01-20T16:47:51.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw in Hono’s JWK/JWKS JWT verification middleware allowed the algorithm specified in the JWT header to influence signature verification when the selected JWK did not explicitly define an algorithm. This could enable JWT algorithm confusion and, in certain configurations, allow forged tokens to be accepted. The JWK/JWKS JWT verification middleware has been updated to require an explicit allowlist of asymmetric algorithms when verifying tokens. The middleware no longer derives the verification algorithm from untrusted JWT header values. This vulnerability is fixed in 4.11.4."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.11.4, existe una falla en el middleware de verificación JWT de JWK/JWKS de Hono que permitía que el algoritmo especificado en la cabecera JWT influyera en la verificación de la firma cuando el JWK seleccionado no definía explícitamente un algoritmo. Esto podría habilitar la confusión de algoritmos JWT y, en ciertas configuraciones, permitir que se aceptaran tokens falsificados. El middleware de verificación JWT de JWK/JWKS ha sido actualizado para requerir una lista de permitidos explícita de algoritmos asimétricos al verificar tokens. El middleware ya no deriva el algoritmo de verificación de valores de cabecera JWT no confiables. Esta vulnerabilidad está corregida en la versión 4.11.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.11.4",
            "matchCriteriaId" : "0D4B47C2-4F12-40CF-B9D0-51EC76A81F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/190f6e28e2ca85ce3d1f2f54db1310f5f3eab134",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-3vhc-576x-3qv4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0528",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-01-13T21:15:50.647",
      "lastModified" : "2026-01-22T19:57:29.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input Validation (CWE-20) exists in the Prometheus helper module that can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed metric data."
      }, {
        "lang" : "es",
        "value" : "La Validación Incorrecta de Índice de Array (CWE-129) existe en Metricbeat y puede permitir a un atacante causar una denegación de servicio a través de la Manipulación de Datos de Entrada (CAPEC-153) mediante cargas útiles malformadas y especialmente diseñadas enviadas al metricset del servidor Graphite o al metricset del servidor Zookeeper. Además, la Validación de Entrada Incorrecta (CWE-20) existe en el módulo auxiliar de Prometheus que puede permitir a un atacante causar una denegación de servicio a través de la Manipulación de Datos de Entrada (CAPEC-153) mediante datos de métricas malformados y especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.17.29",
            "matchCriteriaId" : "5DE7E670-76C6-4E95-BDD0-9322E42929BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.10",
            "matchCriteriaId" : "8707CF69-9922-490B-B64F-38F2D31E2CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.1.10",
            "matchCriteriaId" : "FC3281ED-A331-43DC-9705-80A3FA3E6C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.4",
            "matchCriteriaId" : "8BF9D6AE-B07F-4516-A684-60B02BF731A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/metricbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-01/384519",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0530",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-01-13T21:15:50.817",
      "lastModified" : "2026-01-22T19:58:42.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs."
      }, {
        "lang" : "es",
        "value" : "Asignación de recursos sin límites ni limitación (CWE-770) en Kibana Fleet puede conducir a una asignación excesiva (CAPEC-130) a través de una solicitud especialmente diseñada. Esto provoca que la aplicación realice operaciones de procesamiento redundantes que consumen continuamente recursos del sistema hasta que se produzca la degradación del servicio o la indisponibilidad completa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.17.29",
            "matchCriteriaId" : "1863989E-58AD-4481-B872-DF5AC637F854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.10",
            "matchCriteriaId" : "8707CF69-9922-490B-B64F-38F2D31E2CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.1.10",
            "matchCriteriaId" : "FC3281ED-A331-43DC-9705-80A3FA3E6C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.4",
            "matchCriteriaId" : "8BF9D6AE-B07F-4516-A684-60B02BF731A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-03/384521",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0531",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-01-13T21:15:50.990",
      "lastModified" : "2026-01-22T19:59:54.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted bulk retrieval request. This requires an attacker to have low-level privileges equivalent to the viewer role, which grants read access to agent policies. The crafted request can cause the application to perform redundant database retrieval operations that immediately consume memory until the server crashes and becomes unavailable to all users."
      }, {
        "lang" : "es",
        "value" : "Asignación de Recursos Sin Límites o Limitación (CWE-770) en Kibana Fleet puede conducir a una Asignación Excesiva (CAPEC-130) a través de una solicitud de recuperación masiva especialmente diseñada. Esto requiere que un atacante tenga privilegios de bajo nivel equivalentes al rol de visor, que otorga acceso de lectura a las políticas de agente. La solicitud diseñada puede hacer que la aplicación realice operaciones redundantes de recuperación de base de datos que consumen memoria inmediatamente hasta que el servidor se bloquea y deja de estar disponible para todos los usuarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.17.29",
            "matchCriteriaId" : "1863989E-58AD-4481-B872-DF5AC637F854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.10",
            "matchCriteriaId" : "8707CF69-9922-490B-B64F-38F2D31E2CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.1.10",
            "matchCriteriaId" : "FC3281ED-A331-43DC-9705-80A3FA3E6C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.4",
            "matchCriteriaId" : "8BF9D6AE-B07F-4516-A684-60B02BF731A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-04/384522",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0543",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-01-13T21:15:51.170",
      "lastModified" : "2026-01-22T20:04:20.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed."
      }, {
        "lang" : "es",
        "value" : "La Validación de Entrada Incorrecta (CWE-20) en el Conector de Correo Electrónico de Kibana puede permitir a un atacante causar una Asignación Excesiva (CAPEC-130) a través de un parámetro de dirección de correo electrónico especialmente diseñado. Esto requiere que un atacante tenga acceso autenticado con privilegios de nivel de vista suficientes para ejecutar acciones del conector. La aplicación intenta procesar un formato de correo electrónico especialmente diseñado, lo que resulta en una indisponibilidad completa del servicio para todos los usuarios hasta que se realice un reinicio manual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.17.29",
            "matchCriteriaId" : "8820B4BC-0DAB-4C9B-8053-90DE2C19646E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.0",
            "matchCriteriaId" : "5D2BD2D1-17FA-4143-9F5F-ACDA3DA08954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.1.10",
            "matchCriteriaId" : "FC3281ED-A331-43DC-9705-80A3FA3E6C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.4",
            "matchCriteriaId" : "8BF9D6AE-B07F-4516-A684-60B02BF731A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21298",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T21:15:53.307",
      "lastModified" : "2026-01-14T17:57:53.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Modeler versiones 1.22.4 y anteriores están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.5",
            "matchCriteriaId" : "D5A6870D-D2DE-4B8F-8680-3717CA179D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21299",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T21:15:53.470",
      "lastModified" : "2026-01-14T17:57:58.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Modeler versiones 1.22.4 y anteriores están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.5",
            "matchCriteriaId" : "D5A6870D-D2DE-4B8F-8680-3717CA179D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21300",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T21:15:53.630",
      "lastModified" : "2026-01-14T17:58:05.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Modeler versiones 1.22.4 y anteriores están afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría conducir a una denegación de servicio de la aplicación. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.5",
            "matchCriteriaId" : "D5A6870D-D2DE-4B8F-8680-3717CA179D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21301",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T21:15:53.793",
      "lastModified" : "2026-01-14T17:58:10.387",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.22.4 y anteriores de Substance3D - Modeler están afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría conducir a una denegación de servicio de la aplicación. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.5",
            "matchCriteriaId" : "D5A6870D-D2DE-4B8F-8680-3717CA179D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21302",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T21:15:53.960",
      "lastModified" : "2026-01-14T17:58:14.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Modeler versiones 1.22.4 y anteriores se ven afectadas por una vulnerabilidad de lectura fuera de límites (Out-of-bounds Read) que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.5",
            "matchCriteriaId" : "D5A6870D-D2DE-4B8F-8680-3717CA179D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21303",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-01-13T21:15:54.117",
      "lastModified" : "2026-01-14T17:58:17.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Modeler versiones 1.22.4 y anteriores están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.5",
            "matchCriteriaId" : "D5A6870D-D2DE-4B8F-8680-3717CA179D14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22861",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T21:15:54.437",
      "lastModified" : "2026-01-16T18:46:06.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp. This vulnerability affects users of the iccDEV library who process ICC color profiles. The vulnerability is fixed in 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de bibliotecas y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color del Consorcio Internacional del Color (ICC). Anterior a 2.3.1.2, existe un desbordamiento de búfer basado en montículo en SIccCalcOp::Describe() en IccProfLib/IccMpeCalc.cpp. Esta vulnerabilidad afecta a los usuarios de la biblioteca iccDEV que procesan perfiles de color ICC. La vulnerabilidad está corregida en 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-130"
        }, {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/fa9a364c01fc2e59eb2291e1f9b1c1359b7d5329",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/475",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/476",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-vr49-3vf8-7j5h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22862",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T21:15:54.613",
      "lastModified" : "2026-01-29T18:03:38.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8."
      }, {
        "lang" : "es",
        "value" : "go-ethereum (geth) es una implementación de capa de ejecución de golang del protocolo Ethereum. Un nodo vulnerable puede ser forzado a apagarse/colapsar usando un mensaje especialmente diseñado. Esta vulnerabilidad está corregida en 1.16.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.8",
            "matchCriteriaId" : "02BEA88E-40F5-4CD5-AFF7-549EF1B4CD1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethereum/go-ethereum/commit/abeb78c647e354ed922726a1d719ac7bc64a07e2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ethereum/go-ethereum/security/advisories/GHSA-mr7q-c9w9-wh4h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22868",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T21:15:54.770",
      "lastModified" : "2026-01-29T18:04:50.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8."
      }, {
        "lang" : "es",
        "value" : "go-ethereum (geth) es una implementación de capa de ejecución de golang del protocolo Ethereum. Un nodo vulnerable puede ser forzado a apagarse/colapsar usando un mensaje especialmente diseñado. Esta vulnerabilidad está corregida en 1.16.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.8",
            "matchCriteriaId" : "02BEA88E-40F5-4CD5-AFF7-549EF1B4CD1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethereum/go-ethereum/commit/abeb78c647e354ed922726a1d719ac7bc64a07e2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ethereum/go-ethereum/security/advisories/GHSA-mq3p-rrmp-79jg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22869",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T21:15:54.917",
      "lastModified" : "2026-01-29T17:52:40.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eigent is a multi-agent Workforce. A critical security vulnerability in the CI workflow (.github/workflows/ci.yml) allows arbitrary code execution from fork pull requests with repository write permissions. The vulnerable workflow uses pull_request_target trigger combined with checkout of untrusted PR code. An attacker can exploit this to steal credentials, post comments, push code, or create releases."
      }, {
        "lang" : "es",
        "value" : "Eigent es una fuerza de trabajo multiagente. Una vulnerabilidad de seguridad crítica en el flujo de trabajo de CI (.github/workflows/ci.yml) permite la ejecución de código arbitrario desde solicitudes de extracción de bifurcación con permisos de escritura en el repositorio. El flujo de trabajo vulnerable utiliza el disparador pull_request_target combinado con la extracción de código de PR no confiable. Un atacante puede explotar esto para robar credenciales, publicar comentarios, enviar código o crear lanzamientos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eigent:eigent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.78",
            "matchCriteriaId" : "5D3C2A71-EA14-4494-ADBB-33F96AA8F0FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eigent-ai/eigent/commit/bf02500bbbab0f01cd0ed8e6dc21fe5683d6bfb5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eigent-ai/eigent/pull/836",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eigent-ai/eigent/pull/837",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/eigent-ai/eigent/security/advisories/GHSA-gvh4-93cq-5xxp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22870",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T21:15:55.067",
      "lastModified" : "2026-01-21T18:47:48.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, GuardDog's safe_extract() function does not validate decompressed file sizes when extracting ZIP archives (wheels, eggs), allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data. This vulnerability is fixed in 2.7.1."
      }, {
        "lang" : "es",
        "value" : "GuardDog es una herramienta CLI para identificar paquetes PyPI maliciosos. Antes de la versión 2.7.1, la función safe_extract() de GuardDog no valida los tamaños de archivo descomprimidos al extraer archivos ZIP (wheels, eggs), permitiendo a los atacantes causar denegación de servicio mediante bombas ZIP. Un paquete malicioso puede consumir gigabytes de espacio en disco a partir de unos pocos megabytes de datos comprimidos. Esta vulnerabilidad está corregida en la versión 2.7.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:guarddog:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "872A0822-90B4-4E21-985F-788BE44CA582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DataDog/guarddog/commit/c3fb07b4838945f42497e78b7a02bcfb1e63969b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DataDog/guarddog/security/advisories/GHSA-ffj4-jq7m-9g6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22871",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T21:15:55.210",
      "lastModified" : "2026-01-21T18:46:57.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, there is a path traversal vulnerability exists in GuardDog's safe_extract() function that allows malicious PyPI packages to write arbitrary files outside the intended extraction directory, leading to Arbitrary File Overwrite and Remote Code Execution on systems running GuardDog. This vulnerability is fixed in 2.7.1."
      }, {
        "lang" : "es",
        "value" : "GuardDog es una herramienta CLI para identificar paquetes PyPI maliciosos. Antes de la versión 2.7.1, existe una vulnerabilidad de salto de ruta en la función safe_extract() de GuardDog que permite a paquetes PyPI maliciosos escribir archivos arbitrarios fuera del directorio de extracción previsto, lo que lleva a una Sobreescritura de Archivos Arbitrarios y Ejecución Remota de Código en sistemas que ejecutan GuardDog. Esta vulnerabilidad está corregida en la versión 2.7.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:guarddog:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "872A0822-90B4-4E21-985F-788BE44CA582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DataDog/guarddog/commit/9aa6a725b2c71d537d3c18d1c15621395ebb879c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DataDog/guarddog/security/advisories/GHSA-xg9w-vg3g-6m68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-13T22:16:08.093",
      "lastModified" : "2026-02-03T19:29:07.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.update(). This vulnerability is fixed in 6.0.7."
      }, {
        "lang" : "es",
        "value" : "Cal.com es software de programación de código abierto. Desde la 3.1.6 hasta antes de la 6.0.7, existe una vulnerabilidad en una devolución de llamada JWT de NextAuth personalizada que permite a los atacantes obtener acceso autenticado completo a la cuenta de cualquier usuario al proporcionar una dirección de correo electrónico objetivo a través de session.update(). Esta vulnerabilidad está corregida en la 6.0.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cal:cal.com:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.6",
            "versionEndExcluding" : "6.0.7",
            "matchCriteriaId" : "F8E43A63-8355-4FDF-ABBE-E5A47329CB33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/calcom/cal.com/security/advisories/GHSA-7hg4-x4pr-3hrg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0716",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-13T23:16:04.163",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using libsoup’s WebSocket support with this configuration may be impacted."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en el procesamiento de tramas WebSocket de libsoup al manejar mensajes entrantes. Si se utiliza una configuración no predeterminada donde el tamaño máximo de la carga útil entrante no está establecido, la biblioteca puede leer memoria fuera de los límites previstos. Esto puede causar una exposición de memoria no intencionada o un bloqueo. Las aplicaciones que utilizan el soporte WebSocket de libsoup con esta configuración pueden verse afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-805"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0716",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427896",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/476",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22686",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T00:15:49.957",
      "lastModified" : "2026-02-24T19:23:05.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js runtime. When a tool invocation fails, enclave-vm exposes a host-side Error object to sandboxed code. This Error object retains its host realm prototype chain, which can be traversed to reach the host Function constructor. An attacker can intentionally trigger a host error, then climb the prototype chain. Using the host Function constructor, arbitrary JavaScript can be compiled and executed in the host context, fully bypassing the sandbox and granting access to sensitive resources such as process.env, filesystem, and network. This breaks enclave-vm’s core security guarantee of isolating untrusted code. This vulnerability is fixed in 2.7.0."
      }, {
        "lang" : "es",
        "value" : "Enclave es un sandbox seguro de JavaScript diseñado para la ejecución segura de código de agentes de IA. Antes de la versión 2.7.0, existe una vulnerabilidad crítica de escape de sandbox en enclave-vm que permite que código JavaScript no confiable y en el sandbox ejecute código arbitrario en el entorno de ejecución de Node.js del host. Cuando falla la invocación de una herramienta, enclave-vm expone un objeto Error del lado del host al código en el sandbox. Este objeto Error conserva su cadena de prototipos del ámbito del host, la cual puede ser recorrida para alcanzar el constructor Function del host. Un atacante puede desencadenar intencionalmente un error del host y luego escalar la cadena de prototipos. Utilizando el constructor Function del host, se puede compilar y ejecutar JavaScript arbitrario en el contexto del host, eludiendo completamente el sandbox y otorgando acceso a recursos sensibles como process.env, el sistema de archivos y la red. Esto rompe la garantía de seguridad central de enclave-vm de aislar el código no confiable. Esta vulnerabilidad está corregida en la versión 2.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentfront:enclave:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "1F1DF281-9FD8-41F0-A35B-50C6F5449734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/agentfront/enclave/commit/ed8bc438b2cd6e6f0b5f2de321e5be6f0169b5a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/agentfront/enclave/security/advisories/GHSA-7qm7-455j-5p63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22718",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-01-14T05:16:34.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine."
      }, {
        "lang" : "es",
        "value" : "La extensión de VSCode para Spring CLI es vulnerable a inyección de comandos, resultando en la ejecución de comandos en la máquina del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://spring.io/security/cve-2026-22718",
        "source" : "security@vmware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0594",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T06:15:54.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'alpha' parameter in versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin List Site Contributors para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'alpha' en versiones hasta la 1.1.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/list-site-contributors/tags/1.1.8/list-site-contributors.php#L435",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/list-site-contributors/trunk/list-site-contributors.php#L435",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/026a2e0d-4d30-4133-9118-055026aa9f4a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0635",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T06:15:55.047",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resp_accordion_silder_save_images' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to modify any slider's image metadata including titles, descriptions, alt text, and links."
      }, {
        "lang" : "es",
        "value" : "El plugin Responsive Accordion Slider para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función 'resp_accordion_silder_save_images' en todas las versiones hasta la 1.2.2, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, modifiquen los metadatos de imagen de cualquier slider, incluyendo títulos, descripciones, texto alternativo y enlaces."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/responsive-accordion-slider/tags/1.2.2/includes/admin/class-ras-admin.php#L101",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/55cfb2c6-ca3f-45b7-8cd9-a5a1c3783ae0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0678",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T06:15:55.197",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flat Shipping Rate by City for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'cities' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Flat Shipping Rate by City for WooCommerce para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'cities' en todas las versiones hasta la 1.0.3, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de 'Shop Manager' o superior, añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/flat-shipping-rate-by-city-for-woocommerce/tags/1.0.3/shipping-method-class.php#L154",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/flat-shipping-rate-by-city-for-woocommerce/trunk/shipping-method-class.php#L154",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4ada476b-6978-4c38-a5d3-67266a709a3e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0680",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T06:15:55.350",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Real Post Slider Lite para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración del plugin en todas las versiones hasta la 2.4, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/real-post-slider-lite/tags/2.4/real-post-slider-lite.php#L130",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/real-post-slider-lite/trunk/real-post-slider-lite.php#L130",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/324fd823-8ec9-4187-8694-6160bad8e093?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0694",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T06:15:55.500",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SearchWiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in search results in all versions up to, and including, 1.0.0. This is due to the plugin using `esc_attr()` instead of `esc_html()` when outputting post titles in search results. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in post titles that will execute whenever a user performs a search and views the search results page."
      }, {
        "lang" : "es",
        "value" : "El plugin SearchWiz para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de los títulos de las publicaciones en los resultados de búsqueda en todas las versiones hasta la 1.0.0, inclusive. Esto se debe a que el plugin utiliza `esc_attr()` en lugar de `esc_html()` al mostrar los títulos de las publicaciones en los resultados de búsqueda. Esto permite que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en los títulos de las publicaciones que se ejecutarán cada vez que un usuario realice una búsqueda y vea la página de resultados de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/searchwiz/tags/1.0.0/public/class-sw-ajax.php#L616",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/searchwiz/trunk/public/class-sw-ajax.php#L616",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3e60a315-7f74-4d81-b6d2-ad3d40d489ef?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0717",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T06:15:55.670",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the `/wp-json/lottiefiles/v1/settings/` REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site owner's LottieFiles.com account credentials including their API access token and email address when the 'Share LottieFiles account with other WordPress users' option is enabled."
      }, {
        "lang" : "es",
        "value" : "El plugin LottieFiles – Lottie block para Gutenberg para WordPress es vulnerable a la exposición de información sensible en todas las versiones hasta la 3.0.0, inclusive, a través del endpoint de la API REST `/wp-json/lottiefiles/v1/settings/`. Esto permite a atacantes no autenticados recuperar las credenciales de la cuenta de LottieFiles.com del propietario del sitio, incluyendo su token de acceso a la API y dirección de correo electrónico, cuando la opción 'Compartir cuenta de LottieFiles con otros usuarios de WordPress' está habilitada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/lottiefiles/tags/3.0.0/src/common.php?marks=21,122#L21",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3442469/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/19b159ca-4b41-48b4-880d-9b9dc44b3463?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0734",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T07:16:15.303",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Allowed Hosts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allowed-hosts' parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Allowed Hosts para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'allowed-hosts' en todas las versiones hasta la 1.0.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-allow-hosts/tags/1.0.8/allowed-hosts.php#L170",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-allow-hosts/trunk/allowed-hosts.php#L170",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/700e9d1c-a178-4033-8607-652178860211?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0739",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T07:16:15.487",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WMF Mobile Redirector para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración del plugin en todas las versiones hasta la 1.2, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida deficiente. Esto permite a atacantes autenticados, con acceso de nivel de Administrador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wmf-mobile-redirector/tags/1.2/includes/options-page.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wmf-mobile-redirector/tags/1.2/includes/options-page.php#L62",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wmf-mobile-redirector/trunk/includes/options-page.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wmf-mobile-redirector/trunk/includes/options-page.php#L62",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/037b5c2c-510a-4fa5-b489-cb0478603be2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0741",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T07:16:15.667",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Electric Studio Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Electric Studio Download Counter para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración del plugin en todas las versiones hasta la 2.4, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de Administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/electric-studio-download-counter/tags/2.4/electric-studio-download-counter.php#L186",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/electric-studio-download-counter/tags/2.4/electric-studio-download-counter.php#L202",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/electric-studio-download-counter/trunk/electric-studio-download-counter.php#L186",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/electric-studio-download-counter/trunk/electric-studio-download-counter.php#L202",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a22bba3e-423a-4231-833b-c0be57a3bf7b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0812",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T07:16:15.843",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin_sc_date_format', 'linkedin_sc_api_key', and 'linkedin_sc_secret_key' parameters in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin LinkedIn SC para WordPress es vulnerable a cross-site scripting almacenado a través de los parámetros 'linkedin_sc_date_format', 'linkedin_sc_api_key' y 'linkedin_sc_secret_key' en todas las versiones hasta la 1.1.9, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a la página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/linkedin-sc/tags/1.1.9/linkedin-sc.php#L164",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/linkedin-sc/trunk/linkedin-sc.php#L164",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c4fd888-aeaf-4451-a151-8f884bc22f0b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0813",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-14T07:16:16.027",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'short_link_post_title' and 'short_link_page_title' parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Short Link para WordPress es vulnerable a cross-site scripting almacenado a través de los parámetros 'short_link_post_title' y 'short_link_page_title' en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a la página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/short-link/tags/1.0/short-link.php#L118",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/short-link/trunk/short-link.php#L118",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8623d2cc-dcdd-4453-9a86-669bdd44eae1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23550",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-14T09:16:02.520",
      "lastModified" : "2026-04-23T15:36:39.077",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from n/a through <= 2.5.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de asignación de privilegios incorrecta en Modular DS permite la escalada de privilegios. Este problema afecta a Modular DS: desde n/a hasta 2.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/modular-connector/vulnerability/wordpress-modular-ds-monitor-update-and-backup-multiple-websites-plugin-2-5-1-privilege-escalation-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0529",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-01-14T10:16:08.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled."
      }, {
        "lang" : "es",
        "value" : "Validación incorrecta de índice de array (CWE-129) en el analizador del protocolo MongoDB de Packetbeat puede permitir a un atacante causar desbordamientos de búfer (CAPEC-100) a través de tráfico de red especialmente diseñado. Esto requiere que un atacante envíe una carga útil malformada a una interfaz de red monitoreada donde el análisis del protocolo MongoDB está habilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520",
        "source" : "security@elastic.co"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0532",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-01-14T11:15:50.510",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts & Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads."
      }, {
        "lang" : "es",
        "value" : "Control Externo de Nombre o Ruta de Archivo (CWE-73) combinado con Falsificación de Petición del Lado del Servidor (CWE-918) puede permitir a un atacante causar la divulgación arbitraria de archivos a través de una carga útil JSON de credenciales especialmente diseñada en la configuración del conector de Google Gemini. Esto requiere que un atacante tenga acceso autenticado con privilegios suficientes para crear o modificar conectores (Alertas y Conectores: Todos). El servidor procesa una configuración sin la validación adecuada, permitiendo peticiones de red arbitrarias y lecturas de archivos arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524",
        "source" : "security@elastic.co"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22236",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-01-14T15:16:04.580",
      "lastModified" : "2026-02-02T15:49:19.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad existe en BLUVOYIX debido a una autenticación incorrecta en las API de backend de BLUVOYIX. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando solicitudes HTTP especialmente diseñadas a las API vulnerables. La explotación exitosa de esta vulnerabilidad podría permitir al atacante obtener acceso completo a los datos de los clientes y comprometer completamente la plataforma objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FDD5FA-DB87-4263-A7F2-C136D7F4155C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blusparkglobal.com/bluvoyix/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22237",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-01-14T15:16:04.780",
      "lastModified" : "2026-02-02T15:50:01.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the APIs exposed by the documentation. Successful exploitation of this vulnerability could allow the attacker to cause damage to the targeted platform by abusing internal functionality."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad existe en BLUVOYIX debido a la exposición de documentación interna sensible de la API. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando solicitudes HTTP especialmente diseñadas a las API expuestas por la documentación. La explotación exitosa de esta vulnerabilidad podría permitir al atacante causar daño a la plataforma objetivo al abusar de la funcionalidad interna."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Amber",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FDD5FA-DB87-4263-A7F2-C136D7F4155C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blusparkglobal.com/bluvoyix/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22238",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-01-14T15:16:05.090",
      "lastModified" : "2026-02-02T15:51:24.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform by logging in to the newly-created admin user."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad existe en BLUVOYIX debido a una autenticación incorrecta en las API de administración de BLUVOYIX. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando solicitudes HTTP especialmente diseñadas a la API de administración vulnerable para crear un nuevo usuario con privilegios de administrador. La explotación exitosa de esta vulnerabilidad podría permitir al atacante obtener acceso total a los datos de los clientes y comprometer completamente la plataforma objetivo iniciando sesión con el usuario administrador recién creado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:H/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "HIGH",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FDD5FA-DB87-4263-A7F2-C136D7F4155C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blusparkglobal.com/bluvoyix/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22239",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-01-14T15:16:05.260",
      "lastModified" : "2026-02-02T15:50:35.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable email sending API. Successful exploitation of this vulnerability could allow the attacker to send unsolicited emails to anyone on behalf of the company."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad existe en BLUVOYIX debido a fallos de diseño en la API de envío de correos electrónicos. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando solicitudes HTTP especialmente diseñadas a la API de envío de correos electrónicos vulnerable. La explotación exitosa de esta vulnerabilidad podría permitir al atacante enviar correos electrónicos no solicitados a cualquier persona en nombre de la empresa."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:H/U:Amber",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "HIGH",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FDD5FA-DB87-4263-A7F2-C136D7F4155C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blusparkglobal.com/bluvoyix/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22240",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-01-14T15:16:05.413",
      "lastModified" : "2026-02-02T15:50:22.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable users API to retrieve the plaintext passwords of all user users. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform by logging in using an exposed admin email address and password."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad existe en BLUVOYIX debido a una implementación inadecuada de almacenamiento de contraseñas y su posterior exposición a través de APIs no autenticadas. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando solicitudes HTTP especialmente diseñadas a la API de usuarios vulnerable para recuperar las contraseñas en texto plano de todos los usuarios de usuario. La explotación exitosa de esta vulnerabilidad podría permitir al atacante obtener acceso completo a los datos de los clientes y comprometer completamente la plataforma objetivo iniciando sesión con una dirección de correo electrónico y contraseña de administrador expuestas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-312"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blusparkglobal:bluvoyix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84FDD5FA-DB87-4263-A7F2-C136D7F4155C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blusparkglobal.com/bluvoyix/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22820",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T15:16:05.663",
      "lastModified" : "2026-01-20T14:52:10.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5."
      }, {
        "lang" : "es",
        "value" : "Outray, alternativa de código abierto a ngrok. Antes de la versión 0.1.5, una vulnerabilidad de condición de carrera TOCTOU permite a un usuario exceder el número establecido de túneles activos en su plan de suscripción. Esta vulnerabilidad está corregida en la versión 0.1.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outray:outray:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.1.5",
            "matchCriteriaId" : "DD246CCB-2E70-40B6-9BA8-ADAB45DF1296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/outray-tunnel/outray/commit/08c61495761349e7fd2965229c3faa8d7b1c1581",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/outray-tunnel/outray/security/advisories/GHSA-3pqc-836w-jgr7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22211",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-14T16:15:56.950",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted output implementation used within the ZigBee / IEEE 802.15.4 networking stack. The implementation formats output into a fixed-size global buffer and concatenates strings for %s format specifiers using strcat() without verifying remaining buffer capacity. When printfUART is invoked with a caller-controlled string longer than the available space, the unbounded sprintf/strcat sequence writes past the end of debugbuf, resulting in global memory corruption. This can cause denial of service, unintended behavior, or information disclosure via corrupted adjacent global state or UART output."
      }, {
        "lang" : "es",
        "value" : "Las versiones de TinyOS hasta la 2.1.2 inclusive contienen una vulnerabilidad de desbordamiento de búfer global en la implementación de salida formateada printfUART utilizada dentro de la pila de red ZigBee / IEEE 802.15.4. La implementación formatea la salida en un búfer global de tamaño fijo y concatena cadenas para los especificadores de formato %s usando strcat() sin verificar la capacidad restante del búfer. Cuando se invoca printfUART con una cadena controlada por el llamador más larga que el espacio disponible, la secuencia sprintf/strcat sin límites escribe más allá del final de debugbuf, lo que resulta en corrupción de memoria global. Esto puede causar denegación de servicio, comportamiento no deseado o revelación de información a través de un estado global adyacente corrupto o salida UART."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tinyos/tinyos-main",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://seclists.org/fulldisclosure/2026/Jan/14",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/tinyos-global-buffer-overflow-in-printfuart",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21889",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T17:16:07.940",
      "lastModified" : "2026-01-23T14:49:52.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2."
      }, {
        "lang" : "es",
        "value" : "Weblate es una herramienta de localización basada en web. Antes de la versión 5.15.2, las imágenes de las capturas de pantalla eran servidas directamente por el servidor HTTP sin un control de acceso adecuado. Esto podría permitir a un usuario no autenticado acceder a las capturas de pantalla después de adivinar su nombre de archivo. Esta vulnerabilidad está corregida en la versión 5.15.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.2",
            "matchCriteriaId" : "C5B49343-EE6D-4B4D-9055-A26606246105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WeblateOrg/weblate/commit/a6eb5fd0299780eca286be8ff187dc2d10feec47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/pull/17516",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/security/advisories/GHSA-3g2f-4rjg-9385",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22694",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T17:16:08.810",
      "lastModified" : "2026-03-05T13:45:38.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response for a site it was not authorized to access. The issue involved incomplete validation of calling app identity, origin, and RP ID in the Android credential provider. This issue was fixed in AliasVault Android 0.25.3."
      }, {
        "lang" : "es",
        "value" : "AliasVault es un gestor de contraseñas centrado en la privacidad con alias de correo electrónico integrado. Las versiones de AliasVault para Android de la 0.24.0 a la 0.25.2 contenían un problema en cómo se validaban las solicitudes de claves de acceso de las aplicaciones de Android. Bajo ciertas condiciones locales, una aplicación maliciosa podría intentar obtener una respuesta de clave de acceso para un sitio al que no estaba autorizada a acceder. El problema implicaba una validación incompleta de la identidad de la aplicación llamante, el origen y el ID de RP en el proveedor de credenciales de Android. Este problema se solucionó en AliasVault Android 0.25.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aliasvault:aliasvault:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.24.0",
            "versionEndExcluding" : "0.25.3",
            "matchCriteriaId" : "A4D29B44-D84E-4350-8740-E6D5430F7BF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aliasvault/aliasvault/commit/b3350473103d6138ab2b63ca130c211717eac67d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/issues/1440",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/pull/1441",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/releases/tag/0.25.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/security/advisories/GHSA-mvg4-wvjv-332q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22708",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T17:16:08.980",
      "lastModified" : "2026-02-03T18:36:39.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, certain shell built-ins can still be executed without appearing in the allowlist and without requiring user approval.\nThis allows an attacker via indirect or direct prompt injection to poison the shell environment by setting, modifying, or removing environment variables that influence trusted commands. This vulnerability is fixed in 2.3."
      }, {
        "lang" : "es",
        "value" : "Cursor es un editor de código diseñado para programar con IA. Antes de la 2.3, cuando el Agente de Cursor se ejecuta en Modo de Ejecución Automática con el modo de lista de permitidos habilitado, ciertos comandos internos de shell aún pueden ejecutarse sin aparecer en la lista de permitidos y sin requerir la aprobación del usuario. Esto permite a un atacante, mediante inyección de prompt indirecta o directa, envenenar el entorno de shell estableciendo, modificando o eliminando variables de entorno que influyen en comandos de confianza. Esta vulnerabilidad se ha corregido en la versión 2.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-15"
        }, {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3",
            "matchCriteriaId" : "B9268E99-3679-45FB-AB51-2CD1D79CBB89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cursor/cursor/security/advisories/GHSA-82wg-qcm4-fp2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22779",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T17:16:09.150",
      "lastModified" : "2026-01-22T15:39:31.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlackSheep is an asynchronous web framework to build event based web applications with Python. Prior to 2.4.6, the HTTP Client implementation in BlackSheep is vulnerable to CRLF injection. Missing headers validation makes it possible for an attacker to modify the HTTP requests (e.g. insert a new header) or even create a new HTTP request. Exploitation requires developers to pass unsanitized user input directly into headers.The server part is not affected because BlackSheep delegates to an underlying ASGI server handling of response headers. This vulnerability is fixed in 2.4.6."
      }, {
        "lang" : "es",
        "value" : "BlackSheep es un framework web asíncrono para construir aplicaciones web basadas en eventos con Python. Antes de la versión 2.4.6, la implementación del Cliente HTTP en BlackSheep es vulnerable a la inyección CRLF. La falta de validación de encabezados hace posible que un atacante modifique las solicitudes HTTP (p. ej., insertar un nuevo encabezado) o incluso cree una nueva solicitud HTTP. La explotación requiere que los desarrolladores pasen la entrada de usuario no saneada directamente a los encabezados. La parte del servidor no se ve afectada porque BlackSheep delega a un servidor ASGI subyacente el manejo de los encabezados de respuesta. Esta vulnerabilidad se corrige en la versión 2.4.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neoteroi:blacksheep:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2.4.6",
            "matchCriteriaId" : "FD85CB64-1BE0-413B-A144-357F606AD016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Neoteroi/BlackSheep/commit/bd4ecb9542b5d52442276b5a6907931b90f38d12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Neoteroi/BlackSheep/releases/tag/v2.4.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Neoteroi/BlackSheep/security/advisories/GHSA-6pw3-h7xf-x4gp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22787",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T17:16:09.290",
      "lastModified" : "2026-03-12T18:15:22.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "html2pdf.js converts any webpage or element into a printable PDF entirely client-side. Prior to 0.14.0, html2pdf.js contains a cross-site scripting (XSS) vulnerability when given a text source rather than an element. This text is not sufficiently sanitized before being attached to the DOM, allowing malicious scripts to be run on the client browser and risking the confidentiality, integrity, and availability of the page's data. This vulnerability has been fixed in html2pdf.js@0.14.0."
      }, {
        "lang" : "es",
        "value" : "html2pdf.js convierte cualquier página web o elemento en un PDF imprimible completamente del lado del cliente. Antes de 0.14.0, html2pdf.js contiene una vulnerabilidad de cross-site scripting (XSS) cuando se le proporciona una fuente de texto en lugar de un elemento. Este texto no se sanea suficientemente antes de ser adjuntado al DOM, permitiendo que se ejecuten scripts maliciosos en el navegador del cliente y poniendo en riesgo la confidencialidad, integridad y disponibilidad de los datos de la página. Esta vulnerabilidad ha sido corregida en html2pdf.js@0.14.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ekoopmans:html2pdf.js:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.14.0",
            "matchCriteriaId" : "C8E68496-D208-41FC-9032-437EE15C8395"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eKoopmans/html2pdf.js/commit/988826e336035b39a8608182d7b73c0e3cd78c7b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eKoopmans/html2pdf.js/issues/865",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/eKoopmans/html2pdf.js/pull/877",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/eKoopmans/html2pdf.js/releases/tag/v0.14.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/eKoopmans/html2pdf.js/security/advisories/GHSA-w8x4-x68c-m6fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://aydinnyunus.github.io/2026/01/17/cve-2026-22787-html2pdf-xss-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22819",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:42.330",
      "lastModified" : "2026-01-20T14:56:26.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5."
      }, {
        "lang" : "es",
        "value" : "Outray, alternativa de código abierto a ngrok. Antes de la versión 0.1.5, esta vulnerabilidad permite a un usuario, es decir, un usuario de plan gratuito, obtener más subdominios de los deseados debido a la falta de mecanismos de bloqueo de transacciones de base de datos en main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. Esta vulnerabilidad está corregida en la versión 0.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-366"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outray:outray:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.1.5",
            "matchCriteriaId" : "DD246CCB-2E70-40B6-9BA8-ADAB45DF1296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/outray-tunnel/outray/commit/73e8a09575754fb4c395438680454b2ec064d1d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/outray-tunnel/outray/security/advisories/GHSA-45hj-9x76-wp9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22851",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:42.490",
      "lastModified" : "2026-01-20T18:43:31.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl->primary (SDL_Surface) is accessed after it has been freed during RDPGFX ResetGraphics handling. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la 3.20.1, una condición de carrera entre el hilo del canal virtual dinámico RDPGFX y el hilo de renderizado SDL conduce a un uso después de liberación en el heap. Específicamente, se accede a un puntero escapado a sdl-&gt;primary (SDL_Surface) después de que ha sido liberado durante el manejo de RDPGFX ResetGraphics. Esta vulnerabilidad está corregida en la 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8g87-6pvc-wh99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:42.643",
      "lastModified" : "2026-01-20T18:40:31.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input (AUDIN) format lists. audin_process_formats reuses callback->formats_count across multiple MSG_SNDIN_FORMATS PDUs and writes past the newly allocated formats array, causing memory corruption and a crash. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Anterior a la 3.20.1, un servidor RDP malicioso puede desencadenar una escritura de desbordamiento de búfer de pila (heap-buffer-overflow) en el cliente FreeRDP al procesar listas de formatos de Entrada de Audio (AUDIN). audin_process_formats reutiliza callback-&gt;formats_count a través de múltiples PDUs MSG_SNDIN_FORMATS y escribe más allá del array de formatos recién asignado, causando corrupción de memoria y un fallo. Esta vulnerabilidad está corregida en la versión 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9chc-g79v-4qq4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22853",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:42.790",
      "lastModified" : "2026-01-20T18:39:31.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Anterior a la 3.20.1, el lector de arrays NDR de RDPEAR no realiza comprobación de límites en el recuento de elementos en la transmisión y puede escribir más allá del búfer de pila asignado a partir de las sugerencias, causando un desbordamiento de búfer de pila en ndr_read_uint8Array. Esta vulnerabilidad está corregida en la 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47v9-p4gp-w5ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22854",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:42.933",
      "lastModified" : "2026-01-20T18:38:29.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap memory. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.20.1, ocurre un desbordamiento de búfer de pila en la lectura de unidad cuando se utiliza una longitud de lectura controlada por el servidor para leer datos de archivo en un búfer de flujo de salida IRP sin un límite superior estricto, permitiendo que una lectura de tamaño excesivo sobrescriba la memoria de la pila. Esta vulnerabilidad está corregida en la versión 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47vj-g3c3-3rmf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22855",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:43.080",
      "lastModified" : "2026-01-20T18:36:35.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la 3.20.1, ocurre una lectura fuera de límites de la pila en la ruta SetAttrib de la tarjeta inteligente cuando cbAttrLen no coincide con la longitud real del búfer NDR. Esta vulnerabilidad está corregida en la 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rwp3-g84r-6mx9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22856",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:43.230",
      "lastModified" : "2026-01-20T18:35:44.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial->IrpThreads while another reads it. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.20.1, una condición de carrera en el seguimiento de hilos IRP del canal serie permite un uso de memoria después de liberación (use-after-free) en el heap cuando un hilo elimina una entrada de serial-&gt;IrpThreads mientras otro la lee. Esta vulnerabilidad está corregida en la versión 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w842-c386-fxhv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22857",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:43.373",
      "lastModified" : "2026-01-20T18:34:43.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by irp->Complete() and then accessed again on the error path. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de 3.20.1, se produce un uso después de liberación en el heap en irp_thread_func porque el IRP es liberado por irp-&gt;Complete() y luego se accede a él de nuevo en la ruta de error. Esta vulnerabilidad se corrige en 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4gxq-jhq6-4cr8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22858",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:43.520",
      "lastModified" : "2026-01-20T18:33:32.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.20.1, se observó un desbordamiento de búfer global en la ruta de decodificación Base64 de FreeRDP. La causa raíz parece ser la signatura de `char` definida por la implementación: en compilaciones Arm/AArch64, `char` simple se trata como sin signo, por lo que la guarda `c &lt;= 0` puede optimizarse en una simple verificación `c != 0`. Como resultado, los bytes no ASCII (por ejemplo, 0x80-0xFF) pueden eludir la restricción de rango prevista y usarse como un índice en una tabla de búsqueda global, causando acceso fuera de límites. Esta vulnerabilidad se corrigió en la versión 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmqf-m84q-x896",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22859",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T18:16:43.657",
      "lastModified" : "2026-01-20T18:31:47.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.20.1, el cliente URBDRC no realiza comprobación de límites en los valores MSUSB_INTERFACE_DESCRIPTOR proporcionados por el servidor y los utiliza como índices en libusb_udev_complete_msconfig_setup, causando una lectura fuera de límites. Esta vulnerabilidad está corregida en la versión 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.1",
            "matchCriteriaId" : "1C802721-4198-476F-AE9E-78457C1CE38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-56f5-76qv-2r36",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22036",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T19:16:47.833",
      "lastModified" : "2026-01-22T21:15:50.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is unbounded and the default maxHeaderSize allows a malicious server to insert thousands compression steps leading to high CPU usage and excessive memory allocation. This vulnerability is fixed in 7.18.0 and 6.23.0."
      }, {
        "lang" : "es",
        "value" : "Undici es un cliente HTTP/1.1 para Node.js. Antes de 7.18.0 y 6.23.0, el número de enlaces en la cadena de descompresión es ilimitado y el maxHeaderSize predeterminado permite a un servidor malicioso insertar miles de pasos de compresión, lo que lleva a un alto uso de CPU y una asignación excesiva de memoria. Esta vulnerabilidad está corregida en 7.18.0 y 6.23.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.23.0",
            "matchCriteriaId" : "5233A98F-D94B-41A6-9D16-4E69159ABF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.18.2",
            "matchCriteriaId" : "EF11F080-1703-43FC-86C0-BF257C4A2540"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nodejs/undici/commit/b04e3cbb569c1596f86c108e9b52c79d8475dcb3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nodejs/undici/security/advisories/GHSA-g9mf-h72j-4rw9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T19:16:47.990",
      "lastModified" : "2026-01-26T18:03:24.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long as the user knows its ID, including potentially sensitive fields such as client_id and client_secret. This vulnerability is fixed in 6.12.0."
      }, {
        "lang" : "es",
        "value" : "Rocket.Chat es una plataforma de comunicaciones de código abierto, segura y totalmente personalizable. En las versiones de Rocket.Chat hasta la 6.12.0, el endpoint de la API GET /api/v1/oauth-apps.get está expuesto a cualquier usuario autenticado, independientemente de su rol o permisos. Este endpoint devuelve una aplicación OAuth, siempre que el usuario conozca su ID, incluyendo campos potencialmente sensibles como client_id y client_secret. Esta vulnerabilidad está corregida en la 6.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.12.0",
            "matchCriteriaId" : "BDDC551C-B721-4452-91D8-D53E1316D806"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-g4wm-fg3c-g4p2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T19:16:48.130",
      "lastModified" : "2026-01-20T21:45:58.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, an incomplete SQL injection patch in the Admin Search Find API allows an authenticated attacker to perform blind SQL injection. Although CVE-2023-30848 attempted to mitigate SQL injection by removing SQL comments (--) and catching syntax errors, the fix is insufficient. Attackers can still inject SQL payloads that do not rely on comments and infer database information via blind techniques. This vulnerability affects the admin interface and can lead to database information disclosure. This vulnerability is fixed in 12.3.1 and 11.5.14."
      }, {
        "lang" : "es",
        "value" : "Pimcore es una Plataforma de Gestión de Datos y Experiencias de Código Abierto. Antes de las versiones 12.3.1 y 11.5.14, un parche incompleto de inyección SQL en la API de Búsqueda de Administrador permite a un atacante autenticado realizar una inyección SQL ciega. Aunque CVE-2023-30848 intentó mitigar la inyección SQL eliminando los comentarios SQL (--) y detectando errores de sintaxis, la solución es insuficiente. Los atacantes aún pueden inyectar cargas útiles SQL que no dependen de comentarios e inferir información de la base de datos mediante técnicas ciegas. Esta vulnerabilidad afecta a la interfaz de administración y puede conducir a la revelación de información de la base de datos. Esta vulnerabilidad está corregida en las versiones 12.3.1 y 11.5.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5.14",
            "matchCriteriaId" : "0B2CDE57-18BF-48B4-A0D7-BA3673CD3016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.3.1",
            "matchCriteriaId" : "FD4D552C-238D-49EC-8F68-19EC520EAD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-qvr7-7g55-69xj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23497",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T19:16:48.283",
      "lastModified" : "2026-01-16T18:44:56.547",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In 2.44.0 and earlier, there is a stored XSS vulnerability where a specially crafted image filename could execute malicious JavaScript when rendered on course or jobs pages."
      }, {
        "lang" : "es",
        "value" : "Frappe Learning Management System (LMS) es un sistema de aprendizaje que ayuda a los usuarios a estructurar su contenido. En la versión 2.44.0 y anteriores, existe una vulnerabilidad de XSS almacenado donde un nombre de archivo de imagen especialmente diseñado podría ejecutar JavaScript malicioso al renderizarse en las páginas de cursos o de empleos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.45.0",
            "matchCriteriaId" : "1AF5F1A6-B0CD-4FCA-A7AC-FC62A44555F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/lms/commit/e7ccf0a711d0e0ab5e6b28b7a1e4e0510b6b9543",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frappe/lms/security/advisories/GHSA-78mq-3whw-69j5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23498",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T19:16:48.430",
      "lastModified" : "2026-01-28T17:17:16.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP Closure not checked being against allow list for the map(...) override. This vulnerability is fixed in 6.7.6.1."
      }, {
        "lang" : "es",
        "value" : "Shopware es una plataforma de comercio abierta. Desde la 6.7.0.0 hasta antes de la 6.7.6.1, una regresión de CVE-2023-2017 lleva a que un Closure de PHP elaborado con array y array no se compruebe contra la lista de permitidos para la anulación de map(...). Esta vulnerabilidad está corregida en la 6.7.6.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0.0",
            "versionEndExcluding" : "6.7.6.1",
            "matchCriteriaId" : "877A9967-76FF-4B9C-AF91-0EFA65AE8A2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shopware/shopware/commit/3966b05590e29432b8485ba47b4fcd14dd0b8475",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/shopware/shopware/security/advisories/GHSA-7cw6-7h3h-v8pf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0861",
      "sourceIdentifier" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
      "published" : "2026-01-14T21:15:52.617",
      "lastModified" : "2026-02-03T18:26:25.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments."
      }, {
        "lang" : "es",
        "value" : "Pasar una alineación demasiado grande a la suite de funciones memalign (memalign, posix_memalign, aligned_alloc) en la biblioteca C de GNU versión 2.30 a 2.42 puede resultar en un desbordamiento de entero, lo que podría consecuentemente resultar en una corrupción de montón.\n\nTenga en cuenta que el atacante debe tener control sobre ambos, los argumentos de tamaño y de alineación de la función memalign para poder explotar esto. El parámetro de tamaño debe estar lo suficientemente cerca de PTRDIFF_MAX como para desbordar size_t junto con el argumento de alineación grande. Esto limita las entradas maliciosas para la alineación para memalign al rango [1&lt;&lt;62+ 1, 1&lt;&lt;63] y exactamente 1&lt;&lt;63 para posix_memalign y aligned_alloc.\n\nTípicamente, el argumento de alineación pasado a tales funciones es una cantidad restringida conocida (p. ej., tamaño de página, tamaño de bloque, tamaños de estructura) y no está controlado por el atacante, por lo cual esto podría no ser fácilmente explotable en la práctica. Un error de aplicación podría potencialmente resultar en que la alineación de entrada sea demasiado grande, p. ej., debido a un desbordamiento de búfer diferente o un desbordamiento de entero en la aplicación o sus bibliotecas dependientes, pero ese es de nuevo un patrón de uso poco común dadas las fuentes típicas de alineaciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.30",
            "versionEndIncluding" : "2.42",
            "matchCriteriaId" : "695F54F4-F00E-4777-BFA3-CA09D169D050"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=33796",
        "source" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001",
        "source" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
        "tags" : [ "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/16/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0959",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-14T21:15:52.753",
      "lastModified" : "2026-01-21T18:44:54.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "Fallo del disector del protocolo IEEE 802.11 en Wireshark 4.6.0 a 4.6.2 y 4.4.0 a 4.4.12 permite la denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.13",
            "matchCriteriaId" : "16FECE03-940B-47CD-895B-7D9485F05357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.3",
            "matchCriteriaId" : "60A9FC59-FB67-46A7-9A4B-EE8FCC8CE24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/20939",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-02.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0960",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-14T21:15:52.903",
      "lastModified" : "2026-01-21T20:07:19.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "El disector del protocolo HTTP3 con bucle infinito en Wireshark 4.6.0 a 4.6.2 permite la denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.13",
            "matchCriteriaId" : "16FECE03-940B-47CD-895B-7D9485F05357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.3",
            "matchCriteriaId" : "60A9FC59-FB67-46A7-9A4B-EE8FCC8CE24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/20944",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-04.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0961",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-14T21:15:53.063",
      "lastModified" : "2026-01-21T18:43:01.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "Caída del analizador de archivos BLF en Wireshark 4.6.0 a 4.6.2 y 4.4.0 a 4.4.12 permite denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.13",
            "matchCriteriaId" : "16FECE03-940B-47CD-895B-7D9485F05357"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.3",
            "matchCriteriaId" : "60A9FC59-FB67-46A7-9A4B-EE8FCC8CE24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/20880",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-01.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0962",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-14T21:15:53.217",
      "lastModified" : "2026-01-21T16:27:02.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "Caída del disector del protocolo SOME/IP-SD en Wireshark 4.6.0 a 4.6.2 y 4.4.0 a 4.4.12 permite denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.2",
            "versionEndExcluding" : "4.4.13",
            "matchCriteriaId" : "70105664-10D9-463F-B441-110DBA78B8AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.3",
            "matchCriteriaId" : "60A9FC59-FB67-46A7-9A4B-EE8FCC8CE24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/20945",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-03.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23512",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-14T21:15:54.013",
      "lastModified" : "2026-02-03T17:56:29.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows execution of a malicious notepad.exe placed in the application's installation directory, leading to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "SumatraPDF es un lector multiformato para Windows. En 3.5.2 y versiones anteriores, existe una vulnerabilidad de ruta de búsqueda no confiable cuando se activa la configuración de Opciones Avanzadas. La aplicación ejecuta notepad.exe sin especificar una ruta absoluta al usar la configuración de Opciones Avanzadas. En Windows, esto permite la ejecución de un notepad.exe malicioso colocado en el directorio de instalación de la aplicación, lo que lleva a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.2",
            "matchCriteriaId" : "3D48C2C6-E8BC-471E-B59A-236F038EBC0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/commit/2762e02a8cd7cb779c934a44257aac56ab7de673",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/security/advisories/GHSA-rqg5-gj63-x4mv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0601",
      "sourceIdentifier" : "103e4ec9-0a87-450b-af77-479448ddef11",
      "published" : "2026-01-14T22:15:52.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting reflejado existe en Nexus Repository 3 que permite a atacantes no autenticados ejecutar JavaScript arbitrario en el navegador de una víctima a través de una solicitud especialmente diseñada que requiere interacción del usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "103e4ec9-0a87-450b-af77-479448ddef11",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "103e4ec9-0a87-450b-af77-479448ddef11",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.sonatype.com/en/sonatype-nexus-repository-3-88-0-release-notes.html",
        "source" : "103e4ec9-0a87-450b-af77-479448ddef11"
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/articles/47934334375955",
        "source" : "103e4ec9-0a87-450b-af77-479448ddef11"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0421",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2026-01-14T23:15:56.397",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode."
      }, {
        "lang" : "es",
        "value" : "Una posible vulnerabilidad fue reportada en la BIOS de los ThinkPads L13 Gen 6, L13 Gen 6 2-en-1, L14 Gen 6 y L16 Gen 2, lo que podría resultar en que Secure Boot se desactive incluso cuando está configurado como 'On' en el menú de configuración de la BIOS. Este problema solo afecta a los sistemas donde Secure Boot está configurado en Modo Usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-210688",
        "source" : "psirt@lenovo.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0600",
      "sourceIdentifier" : "103e4ec9-0a87-450b-af77-479448ddef11",
      "published" : "2026-01-14T23:15:56.560",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Sonatype Nexus Repository 3 versiones 3.0.0 y posteriores permite a los administradores autenticados configurar repositorios proxy con URL que pueden acceder a destinos de red no deseados, incluyendo potencialmente servicios de metadatos en la nube y recursos de red internos. Una configuración de solución alternativa está disponible a partir de la versión 3.88.0, pero el producto permanece vulnerable por defecto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "103e4ec9-0a87-450b-af77-479448ddef11",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "103e4ec9-0a87-450b-af77-479448ddef11",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.sonatype.com/hc/en-us/articles/47928855816595",
        "source" : "103e4ec9-0a87-450b-af77-479448ddef11"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23574",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:57.880",
      "lastModified" : "2026-01-15T04:15:57.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23575",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:57.980",
      "lastModified" : "2026-01-15T04:15:57.980",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23576",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.037",
      "lastModified" : "2026-01-15T04:15:58.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23577",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.093",
      "lastModified" : "2026-01-15T04:15:58.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23578",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.150",
      "lastModified" : "2026-01-15T04:15:58.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23579",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.283",
      "lastModified" : "2026-01-15T04:15:58.283",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23580",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.353",
      "lastModified" : "2026-01-15T04:15:58.353",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23581",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.410",
      "lastModified" : "2026-01-15T04:15:58.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23582",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-15T04:15:58.467",
      "lastModified" : "2026-01-15T04:15:58.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0712",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:04.490",
      "lastModified" : "2026-01-22T17:16:30.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0713",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:04.707",
      "lastModified" : "2026-01-22T17:16:30.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0976",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-15T13:16:04.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments, while common reverse proxy configurations may ignore or mishandle them. A remote attacker can craft requests to mask path segments, potentially bypassing proxy-level path filtering. This could expose administrative or sensitive endpoints that operators believe are not externally reachable."
      }, {
        "lang" : "es",
        "value" : "Se encontró un defecto en Keycloak. Esta vulnerabilidad de validación de entrada incorrecta ocurre porque Keycloak acepta parámetros de matriz conformes con RFC en segmentos de ruta de URL, mientras que las configuraciones comunes de proxy inverso pueden ignorarlos o manejarlos incorrectamente. Un atacante remoto puede elaborar solicitudes para enmascarar segmentos de ruta, eludiendo potencialmente el filtrado de rutas a nivel de proxy. Esto podría exponer puntos finales administrativos o sensibles que los operadores creen que no son accesibles externamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0976",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429869",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22637",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.107",
      "lastModified" : "2026-01-22T17:16:36.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22907",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.263",
      "lastModified" : "2026-01-23T15:49:41.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede obtener acceso no autorizado al sistema de archivos del host, lo que potencialmente les permite leer y modificar datos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "B95FBF38-3829-4FC4-BBFD-137B810FAA5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22908",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.400",
      "lastModified" : "2026-01-23T15:46:56.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality."
      }, {
        "lang" : "es",
        "value" : "Subir imágenes de contenedores no validadas puede permitir a atacantes remotos obtener acceso total al sistema, comprometiendo potencialmente su integridad y confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "B95FBF38-3829-4FC4-BBFD-137B810FAA5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22909",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.537",
      "lastModified" : "2026-01-23T15:46:11.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations."
      }, {
        "lang" : "es",
        "value" : "Ciertas funciones del sistema pueden ser accedidas sin la debida autorización, permitiendo a los atacantes iniciar, detener o eliminar aplicaciones instaladas, interrumpiendo potencialmente las operaciones del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22910",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.673",
      "lastModified" : "2026-01-23T15:45:28.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represents a high risk to the integrity of the system."
      }, {
        "lang" : "es",
        "value" : "El dispositivo se despliega con contraseñas predeterminadas débiles y públicamente conocidas para ciertos niveles de usuario ocultos, aumentando el riesgo de acceso no autorizado. Esto representa un alto riesgo para la integridad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1391"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22911",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.813",
      "lastModified" : "2026-01-23T15:35:59.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device."
      }, {
        "lang" : "es",
        "value" : "Los archivos de actualización de firmware podrían exponer hashes de contraseñas para cuentas del sistema, lo que podría permitir a un atacante remoto recuperar credenciales y obtener acceso no autorizado al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22912",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:05.960",
      "lastModified" : "2026-01-23T15:33:27.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk including stealing credentials from unsuspecting users."
      }, {
        "lang" : "es",
        "value" : "Validación incorrecta de un parámetro de inicio de sesión puede permitir a los atacantes redirigir a los usuarios a sitios web maliciosos después de la autenticación. Esto puede llevar a varios riesgos, incluyendo el robo de credenciales de usuarios desprevenidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "74DEFD78-EEE6-41B4-8E38-E6C5081206D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22913",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.100",
      "lastModified" : "2026-01-23T15:30:41.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de un parámetro URL puede permitir a los atacantes ejecutar código en el navegador de un usuario después de iniciar sesión. Esto puede llevar a la extracción de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "74DEFD78-EEE6-41B4-8E38-E6C5081206D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22914",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.250",
      "lastModified" : "2026-01-23T15:27:45.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation."
      }, {
        "lang" : "es",
        "value" : "Un atacante con permisos limitados aún podría ser capaz de escribir archivos en ubicaciones específicas en el dispositivo, potencialmente llevando a la manipulación del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22915",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.387",
      "lastModified" : "2026-01-23T15:17:20.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information."
      }, {
        "lang" : "es",
        "value" : "Un atacante con privilegios bajos podría leer archivos de directorios específicos en el dispositivo, exponiendo potencialmente información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22916",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.527",
      "lastModified" : "2026-01-23T15:13:01.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration."
      }, {
        "lang" : "es",
        "value" : "Un atacante con privilegios bajos podría activar funciones críticas del sistema como el reinicio o el restablecimiento de fábrica sin las restricciones adecuadas, lo que podría llevar a la interrupción del servicio o la pérdida de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22917",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.660",
      "lastModified" : "2026-01-23T14:59:11.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de entradas en un punto final del sistema puede permitir a los atacantes sobrecargar recursos, causando una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "74DEFD78-EEE6-41B4-8E38-E6C5081206D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22918",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.790",
      "lastModified" : "2026-01-23T18:41:25.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede explotar la falta de protección contra el clickjacking engañando a los usuarios para que realicen acciones no deseadas a través de páginas web creadas con fines maliciosos, lo que lleva a la extracción de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22919",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:06.923",
      "lastModified" : "2026-01-23T18:39:18.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of sensitive data."
      }, {
        "lang" : "es",
        "value" : "Un atacante con acceso administrativo puede inyectar contenido malicioso en la página de inicio de sesión, lo que podría permitir ataques de cross-site scripting (XSS), llevando a la extracción de datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "74DEFD78-EEE6-41B4-8E38-E6C5081206D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22920",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T13:16:07.063",
      "lastModified" : "2026-01-23T18:36:58.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The device's passwords have not been adequately salted, making them vulnerable to password extraction attacks."
      }, {
        "lang" : "es",
        "value" : "Las contraseñas del dispositivo no han sido saladas adecuadamente, haciéndolas vulnerables a ataques de extracción de contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1391"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BB5012-A895-4A93-B36F-A062A9389DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A95E220-0816-4885-AB7C-D0BB6F27DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0897",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2026-01-15T14:16:26.890",
      "lastModified" : "2026-01-23T18:35:49.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape."
      }, {
        "lang" : "es",
        "value" : "Asignación de recursos sin límites ni estrangulamiento en el componente de carga de pesos HDF5 en Google Keras 3.0.0 hasta 3.13.0 en todas las plataformas permite a un atacante remoto causar una denegación de servicio (DoS) a través del agotamiento de la memoria y un fallo del intérprete de Python mediante un archivo .keras manipulado que contiene un archivo model.weights.h5 válido cuyo conjunto de datos declara una forma extremadamente grande."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keras:keras:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.13.0",
            "matchCriteriaId" : "792219ED-9845-4AD4-A4D4-0E2C3E377A11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keras-team/keras/pull/21880",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22638",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:27.330",
      "lastModified" : "2026-01-22T17:16:36.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22639",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:27.470",
      "lastModified" : "2026-01-22T17:16:36.510",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22640",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:27.607",
      "lastModified" : "2026-01-22T17:16:36.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22641",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:27.743",
      "lastModified" : "2026-01-22T17:16:36.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22642",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:27.880",
      "lastModified" : "2026-01-22T18:16:44.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22643",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:28.023",
      "lastModified" : "2026-01-22T18:16:45.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22644",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:28.163",
      "lastModified" : "2026-01-29T17:23:06.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Ciertas solicitudes pasan el token de autenticación en la URL como parámetro de consulta de cadena, haciéndolo vulnerable al robo a través de registros del servidor, registros de proxy y encabezados Referer, lo que podría permitir a un atacante secuestrar la sesión del usuario y obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sick:incoming_goods_suite:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41516E12-9EC1-4540-8782-322B665C6526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22645",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:28.290",
      "lastModified" : "2026-01-29T17:19:57.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components."
      }, {
        "lang" : "es",
        "value" : "La aplicación divulga todos los componentes utilizados, versiones e información de licencia a actores no autenticados, dando a los atacantes la oportunidad de atacar vulnerabilidades de seguridad conocidas de los componentes utilizados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sick:incoming_goods_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "E6E02E7A-B758-4262-9F62-24229C60F17A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22646",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-01-15T14:16:28.430",
      "lastModified" : "2026-01-29T16:18:21.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Ciertos mensajes de error devueltos por la aplicación exponen detalles internos del sistema que no deberían ser visibles para los usuarios finales, proporcionando a los atacantes información valiosa de reconocimiento (como rutas de archivos, errores de base de datos o versiones de software) que puede ser utilizada para mapear la estructura interna de la aplicación y descubrir otras vulnerabilidades más críticas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sick:incoming_goods_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "E6E02E7A-B758-4262-9F62-24229C60F17A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0989",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-15T15:15:52.350",
      "lastModified" : "2026-04-22T10:16:49.007",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk."
      }, {
        "lang" : "es",
        "value" : "Se identificó un fallo en el analizador RelaxNG de libxml2 relacionado con la forma en que se gestionan las inclusiones de esquemas externos. El analizador no impone un límite en la profundidad de inclusión al resolver directivas  anidadas. Esquemas especialmente elaborados o excesivamente complejos pueden causar recursión excesiva durante el análisis. Esto puede provocar el agotamiento de la pila y caídas de la aplicación, creando un riesgo de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:7519",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0989",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429933",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/998",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0990",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-15T15:15:52.503",
      "lastModified" : "2026-04-22T10:16:50.113",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en libxml2, una biblioteca de análisis XML. Esta vulnerabilidad de recursión incontrolada ocurre en la función xmlCatalogXMLResolveURI cuando un catálogo XML contiene una entrada URI delegada que se referencia a sí misma. Un atacante remoto podría explotar este problema dependiente de la configuración al proporcionar un catálogo XML especialmente diseñado, lo que lleva a una recursión infinita y al agotamiento de la pila de llamadas. Esto finalmente resulta en una falla de segmentación, causando una denegación de servicio (DoS) al bloquear las aplicaciones afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:7519",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0990",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429959",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0992",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-15T15:15:52.657",
      "lastModified" : "2026-04-22T10:16:50.273",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en la biblioteca libxml2. Esta vulnerabilidad de consumo de recursos no controlado ocurre al procesar catálogos XML que contienen elementos  repetidos que apuntan al mismo catálogo descendente. Un atacante remoto puede explotar esto al proporcionar catálogos manipulados, lo que hace que el analizador recorra redundantemente las cadenas de catálogos. Esto conduce a un consumo excesivo de CPU y degrada la disponibilidad de la aplicación, lo que resulta en una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:7519",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0992",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429975",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20047",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-15T17:16:07.160",
      "lastModified" : "2026-01-30T19:58:27.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Identity Services Engine (ISE) y Cisco ISE Passive Identity Connector (ISE-PIC) podría permitir a un atacante remoto autenticado realizar ataques de cross-site scripting (XSS) contra un usuario de la interfaz.\n\nEsta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario por parte de la interfaz de gestión basada en web de un sistema afectado. Un atacante podría explotar esta vulnerabilidad inyectando código malicioso en páginas específicas de la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2",
            "matchCriteriaId" : "8CCF107C-A742-4362-B5B6-BF8D26D85353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7932D5D5-83E1-4BEF-845A-D0783D4BB750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B818846-4A6E-4256-B344-281E8C786C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "A44858A2-922A-425A-8B38-0C47DB911A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "53484A32-757B-42F8-B655-554C34222060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "5733512D-12B5-4098-AF90-9D68217FAC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EC9EDE-3038-450B-9209-4315236F8DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "56E0F0EC-3E66-4866-89F5-89B331F3F517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "2E3E8937-2859-4A2A-91C0-05F674EF0466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B14684-EB9E-405B-85FA-B62E57CB292C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D23905E0-E525-49B1-8E5F-4EB42D186768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "74509498-38EF-4345-9583-CEF5C26CA1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-964cdxW5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20075",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-15T17:16:07.337",
      "lastModified" : "2026-01-30T19:54:36.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system.\r\n\r\nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Evolved Programmable Network Manager (EPNM) y Cisco Prime Infrastructure podría permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) almacenado contra los usuarios de la interfaz de un sistema afectado.\n\nEsta vulnerabilidad existe porque la interfaz de gestión basada en web no valida correctamente la entrada proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad insertando código malicioso en campos de datos específicos de la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar esta vulnerabilidad, un atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "00599BDB-3705-4DA2-A78B-357AEBA4C164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.4.1",
            "matchCriteriaId" : "D1E547DC-2131-4972-AB0B-25058953CC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndIncluding" : "8.1.2.1",
            "matchCriteriaId" : "D4BF275D-4A9A-4EEE-9B2F-6B2B2AA2586D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F604FB-CB3E-42FF-8C2E-B234BCCA20F8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9",
            "matchCriteriaId" : "7FE6C1B6-F6DE-45A5-908A-8ADA588DDA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndIncluding" : "3.10.6",
            "matchCriteriaId" : "86FFFE3C-B49A-4943-9B59-9D63F82095F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-stored-xss-GEkX8yWK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20076",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-15T17:16:07.517",
      "lastModified" : "2026-01-30T19:53:59.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Identity Services Engine (ISE) podría permitir a un atacante remoto y autenticado realizar un ataque de cross-site scripting (XSS) almacenado contra un usuario de la interfaz.\n\nEsta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario por parte de la interfaz de gestión basada en web de un sistema afectado. Un atacante podría explotar esta vulnerabilidad inyectando código malicioso en páginas específicas de la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "A219182D-3C7A-4DFE-B716-3F77705C3D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B818846-4A6E-4256-B344-281E8C786C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "A44858A2-922A-425A-8B38-0C47DB911A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "53484A32-757B-42F8-B655-554C34222060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "5733512D-12B5-4098-AF90-9D68217FAC27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D23905E0-E525-49B1-8E5F-4EB42D186768"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-9TDh2kx",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22265",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T17:16:07.670",
      "lastModified" : "2026-02-18T17:38:54.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to 8.2.8.2, command injection vulnerability exists in the log viewing functionality that allows authenticated users to execute arbitrary system commands. The vulnerability is in app/modules/roxywi/logs.py line 87, where the grep parameter is used twice - once sanitized and once raw. This vulnerability is fixed in 8.2.8.2."
      }, {
        "lang" : "es",
        "value" : "Roxy-WI es una interfaz web para gestionar servidores Haproxy, Nginx, Apache y Keepalived. Anteriormente a la versión 8.2.8.2, existe una vulnerabilidad de inyección de comandos en la funcionalidad de visualización de registros que permite a usuarios autenticados ejecutar comandos de sistema arbitrarios. La vulnerabilidad se encuentra en app/modules/roxywi/logs.py línea 87, donde el parámetro grep se utiliza dos veces — una vez saneado y otra sin procesar. Esta vulnerabilidad se corrigió en la versión 8.2.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.8.2",
            "matchCriteriaId" : "29779791-CB73-48F7-A0FD-94C543DA082F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/roxy-wi/roxy-wi/commit/f040d3338c4ba6f66127487361592e32e0188eee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/roxy-wi/roxy-wi/releases/tag/v8.2.8.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-mmmf-vh7m-rm47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22867",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T17:16:07.883",
      "lastModified" : "2026-03-12T17:29:40.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 3.8.0 to 4.3.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Interlinking feature. When a user creates a link to another document within the editor, the URL of that link is not validated. An attacker with document editing privileges can inject a malicious javascript: URL that executes arbitrary code when other users click on the link. This vulnerability is fixed in 4.4.0."
      }, {
        "lang" : "es",
        "value" : "LaSuite Doc es una plataforma colaborativa de toma de notas, wiki y documentación. Desde la versión 3.8.0 hasta la 4.3.0, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en la función de interconexión. Cuando un usuario crea un enlace a otro documento dentro del editor, la URL de ese enlace no es validada. Un atacante con privilegios de edición de documentos puede inyectar una URL maliciosa de javascript: que ejecuta código arbitrario cuando otros usuarios hacen clic en el enlace. Esta vulnerabilidad está corregida en la versión 4.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lasuite:docs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "4.3.0",
            "matchCriteriaId" : "256A0A8A-1C97-4FBF-B3D8-0A0B0111B22B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/suitenumerique/docs/commit/e807237dbedbc189230296b81c3aeccc1c04fa77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/suitenumerique/docs/releases/tag/v4.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/suitenumerique/docs/security/advisories/GHSA-4rwv-ghwh-9rv6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T17:16:08.293",
      "lastModified" : "2026-01-20T21:48:53.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, the http_error_log file stores the $_COOKIE and $_SERVER variables, which means sensitive information such as database passwords, cookie session data, and other details can be accessed or recovered through the Pimcore backend. This vulnerability is fixed in 12.3.1 and 11.5.14."
      }, {
        "lang" : "es",
        "value" : "Pimcore es una Plataforma de Gestión de Datos y Experiencias de Código Abierto. Antes de las versiones 12.3.1 y 11.5.14, el archivo http_error_log almacena las variables $_COOKIE y $_SERVER, lo que significa que información sensible como contraseñas de base de datos, datos de sesión de cookie y otros detalles pueden ser accedidos o recuperados a través del backend de Pimcore. Esta vulnerabilidad está corregida en las versiones 12.3.1 y 11.5.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5.14",
            "matchCriteriaId" : "0B2CDE57-18BF-48B4-A0D7-BA3673CD3016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.3.1",
            "matchCriteriaId" : "FD4D552C-238D-49EC-8F68-19EC520EAD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/002ec7d5f84973819236796e5b314703b58e8601",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/18918",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/releases/tag/v11.5.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/releases/tag/v12.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-q433-j342-rp9h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-q433-j342-rp9h",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T17:16:08.453",
      "lastModified" : "2026-01-20T21:47:25.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for reading or listing static routes. In Pimcore, static routes are custom URL patterns defined via the backend interface or the var/config/staticroutes.php file, including details like regex-based patterns, controllers, variables, and priorities. These routes are registered automatically through the PimcoreStaticRoutesBundle and integrated into the MVC routing system. Testing revealed that an authenticated backend user lacking explicit permissions was able to invoke the endpoint (e.g., GET /api/static-routes) and retrieve sensitive route configurations. This vulnerability is fixed in 12.3.1 and 11.5.14."
      }, {
        "lang" : "es",
        "value" : "Pimcore es una Plataforma de Gestión de Datos y Experiencias de Código Abierto. Antes de 12.3.1 y 11.5.14, la aplicación falla en aplicar controles de autorización adecuados del lado del servidor en el endpoint de la API responsable de leer o listar rutas estáticas. En Pimcore, las rutas estáticas son patrones de URL personalizados definidos a través de la interfaz de backend o el archivo var/config/staticroutes.php, incluyendo detalles como patrones basados en regex, controladores, variables y prioridades. Estas rutas se registran automáticamente a través del PimcoreStaticRoutesBundle e integradas en el sistema de enrutamiento MVC. Las pruebas revelaron que un usuario de backend autenticado que carecía de permisos explícitos pudo invocar el endpoint (por ejemplo, GET /api/static-routes) y recuperar configuraciones de rutas sensibles. Esta vulnerabilidad se corrige en 12.3.1 y 11.5.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5.14",
            "matchCriteriaId" : "0B2CDE57-18BF-48B4-A0D7-BA3673CD3016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.3.1",
            "matchCriteriaId" : "FD4D552C-238D-49EC-8F68-19EC520EAD57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/pull/18893",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/releases/tag/v11.5.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/releases/tag/v12.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-m3r2-724c-pwgf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-m3r2-724c-pwgf",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23495",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T17:16:08.597",
      "lastModified" : "2026-01-30T19:51:59.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Prior to 2.2.3 and 1.7.16, the API endpoint for listing Predefined Properties in the Pimcore platform lacks adequate server-side authorization checks. Predefined Properties are configurable metadata definitions (e.g., name, key, type, default value) used across documents, assets, and objects to standardize custom attributes and improve editorial workflows, as documented in Pimcore's official properties guide. Testing confirmed that an authenticated backend user without explicit permissions for property management could successfully call the endpoint and retrieve the complete list of these configurations. The vulnerability is fixed in 2.2.3 and 1.7.16."
      }, {
        "lang" : "es",
        "value" : "El Admin Classic Bundle de Pimcore proporciona una interfaz de usuario de backend para Pimcore. Antes de las versiones 2.2.3 y 1.7.16, el endpoint de la API para listar Propiedades Predefinidas en la plataforma Pimcore carece de comprobaciones de autorización adecuadas del lado del servidor. Las Propiedades Predefinidas son definiciones de metadatos configurables (por ejemplo, nombre, clave, tipo, valor predeterminado) utilizadas en documentos, activos y objetos para estandarizar atributos personalizados y mejorar los flujos de trabajo editoriales, como se documenta en la guía oficial de propiedades de Pimcore. Las pruebas confirmaron que un usuario de backend autenticado sin permisos explícitos para la gestión de propiedades podría llamar con éxito al endpoint y recuperar la lista completa de estas configuraciones. La vulnerabilidad está corregida en las versiones 2.2.3 y 1.7.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:admin_classic_bundle:*:*:*:*:*:pimcore:*:*",
            "versionEndExcluding" : "1.7.16",
            "matchCriteriaId" : "D848061A-CD4D-4B51-BE21-F28E22D61178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:admin_classic_bundle:*:*:*:*:*:pimcore:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "2DA216D2-3283-4D95-B6CC-1408A9FD4B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/admin-ui-classic-bundle/commit/98095949fbeaf11cdf4cadb2989d7454e1b88909",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/admin-ui-classic-bundle/releases/tag/v1.7.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/admin-ui-classic-bundle/releases/tag/v2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-hqrp-m84v-2m2f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23496",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T17:16:08.747",
      "lastModified" : "2026-01-30T19:49:56.363",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing \"Favourite Output Channel Configurations.\" Testing revealed that an authenticated backend user without explicitely lacking permissions for this feature was still able to successfully invoke the endpoint and modify or retrieve these configurations. This vulnerability is fixed in 5.2.2 and 6.1.1."
      }, {
        "lang" : "es",
        "value" : "El Pimcore Web2Print Tools Bundle añade herramientas para casos de uso web-to-print a Pimcore. Antes de las versiones 5.2.2 y 6.1.1, la aplicación no logra aplicar comprobaciones de autorización adecuadas del lado del servidor en el endpoint de la API responsable de gestionar las 'Favourite Output Channel Configurations'. Las pruebas revelaron que un usuario de backend autenticado sin carecer explícitamente de permisos para esta característica aún podía invocar exitosamente el endpoint y modificar o recuperar estas configuraciones. Esta vulnerabilidad está corregida en las versiones 5.2.2 y 6.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:web2print_tools:*:*:*:*:*:pimcore:*:*",
            "versionEndExcluding" : "5.2.2",
            "matchCriteriaId" : "34D6DA7C-7CAF-4A15-BFA8-53753D4F7432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:web2print_tools:*:*:*:*:*:pimcore:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.1.1",
            "matchCriteriaId" : "0E66DF65-5F40-48E0-A6FD-8D7B793ECC3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/web2print-tools/commit/7714452a04b9f9b077752784af4b8d0b05e464a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/web2print-tools/pull/108",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/pimcore/web2print-tools/releases/tag/v5.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/web2print-tools/releases/tag/v6.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-4wg4-p27p-5q2r",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0227",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2026-01-15T19:16:05.087",
      "lastModified" : "2026-02-06T17:37:28.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el software PAN-OS de Palo Alto Networks permite a un atacante no autenticado causar una denegación de servicio (DoS) al cortafuegos. Intentos repetidos de activar este problema resultan en que el cortafuegos entre en modo de mantenimiento."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.14",
            "matchCriteriaId" : "19D52DC1-4441-4C88-B209-9B86FCC2162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.7",
            "matchCriteriaId" : "243077CD-5021-4DF3-8AC7-5B14F7FD9710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.8",
            "versionEndExcluding" : "10.2.10",
            "matchCriteriaId" : "F5A3E6A6-EE04-409C-AE6F-FC1ACE4C4666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.11",
            "versionEndExcluding" : "10.2.13",
            "matchCriteriaId" : "CD4B8D09-F2B3-4C9A-A583-46DE85D9D43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.14",
            "versionEndExcluding" : "10.2.16",
            "matchCriteriaId" : "4386D092-83D6-4914-8C26-3A1EE056FEC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "459485B4-47FF-4A5F-9249-AE0445A0096A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.5",
            "versionEndExcluding" : "11.1.6",
            "matchCriteriaId" : "F35F4848-BBF3-4B43-9E5C-98E7AB437FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.7",
            "versionEndExcluding" : "11.1.10",
            "matchCriteriaId" : "0F134207-3C5B-416C-A324-7F78B6E13DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.11",
            "versionEndExcluding" : "11.1.13",
            "matchCriteriaId" : "D9CE1AA7-46F4-4740-BF21-EE6732134D57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.4",
            "matchCriteriaId" : "7E4D3A51-0A40-4B19-AAFC-A2484B1CF5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.5",
            "versionEndExcluding" : "11.2.7",
            "matchCriteriaId" : "A52983E4-71BF-46D7-8A4A-D199F7DCAA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.8",
            "versionEndExcluding" : "11.2.10",
            "matchCriteriaId" : "85010E8F-E824-4C69-9B59-58DB01789ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B41A7115-A370-49E1-B162-24803E6DD2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h10:*:*:*:*:*:*",
            "matchCriteriaId" : "9081546E-2621-4425-8DC0-78AE5B8EF482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h11:*:*:*:*:*:*",
            "matchCriteriaId" : "E984EFEA-5D8E-44AF-A9C3-33E2D4215DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h13:*:*:*:*:*:*",
            "matchCriteriaId" : "762156AA-A050-4307-B263-39D7D1E9CD93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h14:*:*:*:*:*:*",
            "matchCriteriaId" : "F02E9FE1-8CF0-4C82-ACB4-C0E67DACB187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h15:*:*:*:*:*:*",
            "matchCriteriaId" : "11E8CA97-A46C-41EB-9F2E-6544F7F4B5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h16:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E4D227-5EF6-4F68-AA3D-C8EB684FA68B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h19:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE0AF68-0B72-43AD-8B5C-A560A62ED312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "65949A49-03A7-491C-B327-127F050AC4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "E8ACB147-B4C1-4964-B538-EAA117CC6DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:*",
            "matchCriteriaId" : "6643574D-C024-440C-9392-004B7FA4498F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h8:*:*:*:*:*:*",
            "matchCriteriaId" : "7422F37D-7ABA-4BEC-8448-45A8F585D6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h9:*:*:*:*:*:*",
            "matchCriteriaId" : "9C855FDB-6224-4CE3-A76F-110D9E537BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C42D98-CF8F-456B-9D57-80BBDC2C8E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3AAD4BA-22DD-43D3-91F1-8A6F5FBBF029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4994CB-6591-4B44-A5D7-3CDF540B97DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "matchCriteriaId" : "A6AB7874-FE24-42AC-8E3A-822A70722126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "matchCriteriaId" : "34B083B9-CC1B-43CD-9A16-C018F7FA2DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "matchCriteriaId" : "0D88CC33-7E32-4E82-8A94-70759E910510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "matchCriteriaId" : "FA91A4E9-CE1E-4CB8-B717-4B0E314C0171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "matchCriteriaId" : "28994519-3519-4E94-8D8B-7C4251A82B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "776E06EC-2FDA-4664-AB43-9F6BE9B897CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE09375-A863-42FF-813F-C20679D7C45C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "matchCriteriaId" : "1311961A-0EF6-488E-B0C2-EDBD508587C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03C5ABF2-8C53-4376-8A64-6CB34E18E77C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCD8B-80DF-4004-A9D2-4EE884F089A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "matchCriteriaId" : "83C9637A-B615-4CC2-84AA-BDCFE611484C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "matchCriteriaId" : "224270A7-767D-433B-AD51-C031506747C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "matchCriteriaId" : "A532EFC6-A883-4279-8C05-9CD600B3F963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F20C02-DF90-4609-9254-B765481C83E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "872BC747-512A-4872-AC86-E7F1DC589F47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E36C87-E01D-49DC-AB73-10E5EE27F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "matchCriteriaId" : "39437442-B24D-492F-B637-2203492327FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "67F527D0-F85B-4B83-AEA5-BA636FC89210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF8F985-7E51-49E6-857A-FAAF027F5611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "matchCriteriaId" : "B437DCEA-ABA3-41CA-B320-97EC430F1122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "593AFE7A-CB37-4156-A2B8-646A317F3176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F032C2-3202-479B-8C70-277F6871A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B871A6-0636-42A0-9573-6F693D7753AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC63B8-B8D9-4EC1-85CA-2E12B38ACD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F8462A-71C0-4F81-9882-C73BC90697CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B72E68-2D01-483F-BEC5-59C49E96B976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "60CE628F-C4CB-4342-8D71-DE61A089B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "2447D2B1-A145-4036-B9F2-17648B193465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "C24353AF-DC81-49B9-9132-9EEC8E6009BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "matchCriteriaId" : "B4420489-AE0F-4A48-B2CE-C165BEBFA6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "C45D8DF1-9483-4B24-AB94-B1FF4A5F2606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BC38A9CD-CDB6-423A-BE8D-2E0E45A3B239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "41B48ECA-FD05-4EA2-B1C9-771624EAAFF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "4D65D1F0-323E-41AF-962E-1F9741748A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBB519E-9AC8-4100-B71C-E7D3276ED79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19604659-570D-4766-B8B5-8B9920E2607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DF83EAA1-49E1-4AD0-A049-F1B3065950BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3F7369-9F35-409A-9F47-45A959592DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "matchCriteriaId" : "FD701663-4C57-4115-BD59-9DFFB504E2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "matchCriteriaId" : "82816C09-6A9D-4AB2-AA55-62CC714CCA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA9F77D-BC9C-4A2C-8988-6DEE65CD9C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A3CEBF-9F8A-47F9-A302-7C395F2A8146"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "matchCriteriaId" : "A79B51D2-74E8-4BA3-AE33-829A9C1776E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "matchCriteriaId" : "E08297B1-95E9-4730-B59D-252B958C4199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB4DA9-2262-4E9E-B3A1-49D261D01295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "4852E738-990C-4DD2-8252-D4625D843A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2C59F8-2583-4510-90F8-500F8329AFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52C50A07-F4D8-4F1F-BA61-3429BB1721BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D12FF27-C186-467C-8627-1284EBC67243"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4AA997-35BC-4BC1-9EF2-644503B2D806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "matchCriteriaId" : "12EF4DDF-9773-4B02-8FF4-F94A1D49E6AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "matchCriteriaId" : "8FAE17BB-7938-41D0-8D62-46F829C647BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA5A0AD-C4FB-4210-8651-F94F2875A0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "matchCriteriaId" : "B79DB477-A907-4300-A651-16F93880B049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "matchCriteriaId" : "AF74D8FA-677F-484D-9338-A1761614FFD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FC5118-4056-4E22-A1F0-D6FFA2B88472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "63729FA6-ED2A-4593-9436-232F282A0A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "F39792EF-61B5-4874-9FD0-7544F8C5C0D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC24BCD-E508-4553-9BAC-468A1078C9A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "matchCriteriaId" : "4A06B6F4-DCAE-4115-93D4-25D0A37AAB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "91529C45-FA55-4844-A153-682F729F440D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A92886DF-C989-47AD-8F68-8F468BBC6E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "9893920B-A00E-4890-A897-EE1CF0751BA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "31CD3B15-2CE0-404A-9542-9C39B8E71027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "matchCriteriaId" : "0194DA0B-041A-4810-8BFB-2308290517B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "69E64D86-034F-4BC7-9A4E-2703D834EBC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C01AD190-F3C2-4349-A063-8C5C78B725B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F4CD1C-6862-4279-8D2D-40B4D164222F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "matchCriteriaId" : "8137F3AF-BA32-41BC-AD2E-A668FFA33892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "matchCriteriaId" : "8C977AF0-D2B0-401A-A7C5-A1C71AC3C072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C0A53F-2AFE-4B0D-AEC1-464E6001E02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "matchCriteriaId" : "D720448D-F40B-4C92-9101-A48AC36C9CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "A52B7A7A-483A-4075-B1E9-5C14B66F7FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "76949F0F-2ADC-492F-83F0-0A1B0E861F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DD83BC-4E8E-4C1D-80C7-A6209B4E70CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "matchCriteriaId" : "73888909-64C5-41BC-BAE0-BD9BDEEAF723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "E7861D82-815D-4894-9E11-1B6B1E66CDEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "matchCriteriaId" : "D269E33D-9A79-40CC-B79A-C9A398AB7AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "matchCriteriaId" : "9762E441-856F-466F-812C-798CA2EEF965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25C9D9-BC83-49AE-BEE7-EF05F8336B01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "A93C2B58-EC78-4C3D-89FF-35D9C489E39F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "D12C3EB6-842E-4378-896C-FDBB2BC75D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "86B41903-FF08-454D-B626-184CB73B122E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "396DC378-7716-40F6-88A4-99299A16CAF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5C6E3A-262C-4212-B21C-00E8079AA8CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "051673AB-50BF-4DD0-8679-F5825520241A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC15D8A-83CA-413F-BA2B-17EC2B169F6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A116B32-5798-47EC-A22D-D3E960B29C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:12.1.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2756ED8F-B253-4F1A-BF8A-CA70E1B9E711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:12.1.3:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5E1955E-90A8-40C0-BE8C-985442DCB0B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_access:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB6FBC7-DEEB-4571-BCF9-92345A4B614A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.10",
            "matchCriteriaId" : "ECC53672-829D-4995-A75A-CE8D3C38A3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.7",
            "matchCriteriaId" : "A589C841-0E91-4A4E-9A90-8000C4AAB8EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7FCD8B-80DF-4004-A9D2-4EE884F089A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "matchCriteriaId" : "83C9637A-B615-4CC2-84AA-BDCFE611484C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "matchCriteriaId" : "224270A7-767D-433B-AD51-C031506747C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "matchCriteriaId" : "A532EFC6-A883-4279-8C05-9CD600B3F963"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F20C02-DF90-4609-9254-B765481C83E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "872BC747-512A-4872-AC86-E7F1DC589F47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E36C87-E01D-49DC-AB73-10E5EE27F596"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "matchCriteriaId" : "39437442-B24D-492F-B637-2203492327FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "67F527D0-F85B-4B83-AEA5-BA636FC89210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF8F985-7E51-49E6-857A-FAAF027F5611"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "matchCriteriaId" : "B437DCEA-ABA3-41CA-B320-97EC430F1122"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "593AFE7A-CB37-4156-A2B8-646A317F3176"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F032C2-3202-479B-8C70-277F6871A4A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0A25C9D9-BC83-49AE-BEE7-EF05F8336B01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "matchCriteriaId" : "A93C2B58-EC78-4C3D-89FF-35D9C489E39F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "matchCriteriaId" : "D12C3EB6-842E-4378-896C-FDBB2BC75D10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "matchCriteriaId" : "86B41903-FF08-454D-B626-184CB73B122E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "matchCriteriaId" : "396DC378-7716-40F6-88A4-99299A16CAF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5C6E3A-262C-4212-B21C-00E8079AA8CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2026-0227",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22249",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T19:16:05.527",
      "lastModified" : "2026-01-22T15:44:51.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docmost is an open-source collaborative wiki and documentation software. From 0.21.0 to before 0.24.0, Docmost is vulnerable to Arbitrary File Write via Zip Import Feature (ZipSlip). In apps/server/src/integrations/import/utils/file.utils.ts, there are no validation on filename. This vulnerability is fixed in 0.24.0."
      }, {
        "lang" : "es",
        "value" : "Docmost es un software de wiki colaborativo y documentación de código abierto. Desde la 0.21.0 hasta antes de la 0.24.0, Docmost es vulnerable a la escritura arbitraria de archivos a través de la función de importación de Zip (ZipSlip). En apps/servidor/src/integrations/import/utils/file.utils.ts, no hay validación en el nombre de archivo. Esta vulnerabilidad está corregida en la 0.24.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmost:docmost:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.21.0",
            "versionEndExcluding" : "0.24.0",
            "matchCriteriaId" : "6B3C6E1E-C674-45AA-A3B0-6518B205D8B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/docmost/docmost/commit/c3b350d943108552e20654580005cd6f6c78ab05",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/docmost/docmost/pull/1753",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/docmost/docmost/releases/tag/v0.24.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/docmost/docmost/security/advisories/GHSA-54pm-hqxm-54wg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/docmost/docmost/security/advisories/GHSA-54pm-hqxm-54wg",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22774",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T19:16:05.813",
      "lastModified" : "2026-01-20T15:28:55.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From 5.3.0 to 5.6.1, certain inputs can cause devalue.parse to consume excessive CPU time and/or memory, potentially leading to denial of service in systems that parse input from untrusted sources. This affects applications using devalue.parse on externally-supplied data. The root cause is the typed array hydration expecting an ArrayBuffer as input, but not checking the assumption before creating the typed array. This vulnerability is fixed in 5.6.2."
      }, {
        "lang" : "es",
        "value" : "Svelte devalue es una biblioteca de JavaScript que serializa valores en cadenas cuando JSON.stringify no es suficiente para la tarea. Desde la 5.3.0 hasta la 5.6.1, ciertas entradas pueden hacer que devalue.parse consuma tiempo de CPU y/o memoria excesivos, lo que podría llevar a una denegación de servicio en sistemas que analizan entradas de fuentes no confiables. Esto afecta a las aplicaciones que usan devalue.parse en datos suministrados externamente. La causa raíz es la hidratación de arrays tipados que espera un ArrayBuffer como entrada, pero no verifica la suposición antes de crear el array tipado. Esta vulnerabilidad está corregida en la 5.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-405"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:devalue:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.6.2",
            "matchCriteriaId" : "8EF7822F-5387-4831-9C9C-54BF822F0DA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/devalue/commit/e46afa64dd2b25aa35fb905ba5d20cea63aabbf7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/devalue/releases/tag/v5.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/devalue/security/advisories/GHSA-vw5p-8cq8-m7mv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22775",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T19:16:05.963",
      "lastModified" : "2026-01-20T15:29:35.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From 5.1.0 to 5.6.1, certain inputs can cause devalue.parse to consume excessive CPU time and/or memory, potentially leading to denial of service in systems that parse input from untrusted sources. This affects applications using devalue.parse on externally-supplied data. The root cause is the ArrayBuffer hydration expecting base64 encoded strings as input, but not checking the assumption before decoding the input. This vulnerability is fixed in 5.6.2."
      }, {
        "lang" : "es",
        "value" : "Svelte devalue es una biblioteca de JavaScript que serializa valores en cadenas cuando JSON.stringify no es suficiente para la tarea. Desde la versión 5.1.0 hasta la 5.6.1, ciertas entradas pueden causar que devalue.parse consuma tiempo de CPU y/o memoria excesivos, lo que podría llevar a una denegación de servicio en sistemas que analizan entradas de fuentes no confiables. Esto afecta a las aplicaciones que utilizan devalue.parse con datos suministrados externamente. La causa raíz es la hidratación de ArrayBuffer que espera cadenas codificadas en base64 como entrada, pero no verifica la suposición antes de decodificar la entrada. Esta vulnerabilidad está corregida en la versión 5.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-405"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:devalue:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.6.2",
            "matchCriteriaId" : "E70AD508-7046-4740-A03C-8605AC4A5F12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/devalue/commit/11755849fa0634ae294a15ec0aef2f43efcad7c4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/devalue/releases/tag/v5.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/devalue/security/advisories/GHSA-g2pg-6438-jwpf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22803",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T19:16:06.120",
      "lastModified" : "2026-01-21T20:34:46.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From 2.49.0 to 2.49.4, the experimental form remote function uses a binary data format containing a representation of submitted form data. A specially-crafted payload can cause the server to allocate a large amount of memory, causing DoS via memory exhaustion. This vulnerability is fixed in 2.49.5."
      }, {
        "lang" : "es",
        "value" : "SvelteKit es un framework para desarrollar rápidamente aplicaciones web robustas y de alto rendimiento utilizando Svelte. Desde la versión 2.49.0 hasta la 2.49.4, la función remota experimental de formularios utiliza un formato de datos binarios que contiene una representación de los datos de formulario enviados. Una carga útil especialmente diseñada puede hacer que el servidor asigne una gran cantidad de memoria, causando DoS por agotamiento de memoria. Esta vulnerabilidad está corregida en la versión 2.49.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:kit:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.49.0",
            "versionEndExcluding" : "2.49.5",
            "matchCriteriaId" : "B5934633-0268-4EE3-9659-8C502C327D41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/kit/commit/8ed8155215b9a74012fecffb942ad9a793b274e5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/releases/tag/@sveltejs%2Fadapter-node@5.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/security/advisories/GHSA-j2f3-wq62-6q46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23511",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T20:16:05.167",
      "lastModified" : "2026-01-20T16:44:43.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. Prior to 4.9.1 and 3.4.6, a user enumeration vulnerability has been discovered in Zitadel's login interfaces. An unauthenticated attacker can exploit this flaw to confirm the existence of valid user accounts by iterating through usernames and userIDs. This vulnerability is fixed in 4.9.1 and 3.4.6."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidad de código abierto. Antes de 4.9.1 y 3.4.6, se ha descubierto una vulnerabilidad de enumeración de usuarios en las interfaces de inicio de sesión de Zitadel. Un atacante no autenticado puede explotar esta falla para confirmar la existencia de cuentas de usuario válidas al iterar a través de nombres de usuario y userIDs. Esta vulnerabilidad está corregida en 4.9.1 y 3.4.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.71.19",
            "matchCriteriaId" : "AFFBAC9C-9A67-4AF4-985C-31DCC2F1311D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.4.6",
            "matchCriteriaId" : "35824976-F697-4F42-8224-C8CE077BAB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.9.1",
            "matchCriteriaId" : "1B68D0EF-0AB9-4429-AA04-8FED60B814C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/commit/b85ab69e4679b0268e2b0e9b4cd04e934af10dd2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/commit/c300d4cc6a2775ab17ddfe76492f24170f8b858d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/releases/tag/v3.4.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/releases/tag/v4.9.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-pvm5-9frx-264r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23519",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T20:16:05.313",
      "lastModified" : "2026-01-23T18:59:58.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. Prior to 0.4.4, the thumbv6m-none-eabi (Cortex M0, M0+ and M1) compiler emits non-constant time assembly when using cmovnz (portable version). This vulnerability is fixed in 0.4.4."
      }, {
        "lang" : "es",
        "value" : "RustCrypto CMOV proporciona intrínsecos de CPU de movimiento condicional que están garantizados en las principales plataformas para ejecutarse en tiempo constante y no ser reescritos como bifurcaciones por el compilador. Antes de la versión 0.4.4, el compilador thumbv6m-none-eabi (Cortex M0, M0+ y M1) emite ensamblado de tiempo no constante al usar cmovnz (versión portátil). Esta vulnerabilidad está corregida en la versión 0.4.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustcrypto:cmov:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.4.4",
            "matchCriteriaId" : "A05B5CBC-9FDB-429A-889F-56928657A4D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RustCrypto/utils/commit/55977257e7c82a309d5e8abfdd380a774f0f9778",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RustCrypto/utils/security/advisories/GHSA-2gqc-6j2q-83qp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RustCrypto/utils/security/advisories/GHSA-2gqc-6j2q-83qp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23520",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T20:16:05.467",
      "lastModified" : "2026-02-05T21:37:01.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to run before or after a container update. The label value is passed directly to /bin/sh -c without sanitization or validation. Because any authenticated user (not limited to administrators) can create projects through the API, an attacker can create a project that specifies one of these lifecycle labels with a malicious command. When an administrator later triggers a container update (either manually or via scheduled update checks), Arcane reads the lifecycle label and executes its value as a shell command inside the container. This vulnerability is fixed in 1.13.0."
      }, {
        "lang" : "es",
        "value" : "Arcane proporciona gestión moderna de Docker. Antes de 1.13.0, Arcane tiene una inyección de comandos en el servicio de actualización. El servicio de actualización de Arcane soportaba etiquetas de ciclo de vida com.getarcaneapp.arcane.lifecycle.pre-update y com.getarcaneapp.arcane.lifecycle.post-update que permitían definir un comando para ejecutar antes o después de una actualización de contenedor. El valor de la etiqueta se pasa directamente a /bin/sh -c sin saneamiento ni validación. Debido a que cualquier usuario autenticado (no limitado a administradores) puede crear proyectos a través de la API, un atacante puede crear un proyecto que especifica una de estas etiquetas de ciclo de vida con un comando malicioso. Cuando un administrador más tarde activa una actualización de contenedor (ya sea manualmente o mediante comprobaciones de actualización programadas), Arcane lee la etiqueta de ciclo de vida y ejecuta su valor como un comando de shell dentro del contenedor. Esta vulnerabilidad está corregida en 1.13.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcane:arcane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.0",
            "matchCriteriaId" : "C6334A63-DF55-490B-9840-4805617B2E8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getarcaneapp/arcane/commit/5a9c2f92e11f86f8997da8c672844468f930b7e4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/getarcaneapp/arcane/pull/1468",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/getarcaneapp/arcane/releases/tag/v1.13.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-gjqq-6r35-w3r8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23527",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T20:16:05.620",
      "lastModified" : "2026-04-13T17:16:27.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3 is a minimal H(TTP) framework built for high performance and portability. Prior to 1.15.5, there is a critical HTTP Request Smuggling vulnerability. readRawBody is doing a strict case-sensitive check for the Transfer-Encoding header. It explicitly looks for \"chunked\", but per the RFC, this header should be case-insensitive. This vulnerability is fixed in 1.15.5."
      }, {
        "lang" : "es",
        "value" : "H3 es un framework H(TTP) mínimo diseñado para alto rendimiento y portabilidad. Antes de 1.15.5, existe una vulnerabilidad crítica de contrabando de solicitudes HTTP. readRawBody realiza una comprobación estricta sensible a mayúsculas y minúsculas para el encabezado Transfer-Encoding. Busca explícitamente 'chunked', pero según la RFC, este encabezado debería ser insensible a mayúsculas y minúsculas. Esta vulnerabilidad está corregida en 1.15.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:h3:h3:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.15.5",
            "matchCriteriaId" : "8AEE0C29-3BA5-4765-82CB-0CE73ACCEB77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h3js/h3/commit/618ccf4f37b8b6148bea7f36040471af45bfb097",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/h3js/h3/releases/tag/v1.15.5",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/h3js/h3/security/advisories/GHSA-mp2g-9vg9-f4cg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://simonkoeck.com/writeups/h3-transfer-encoding-request-smuggling",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23622",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T20:16:05.773",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_verify() only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from GET (or $_REQUEST), so an attacker can perform CSRF by forcing a victim's browser to issue a crafted GET request. Impact: creation of admin accounts, modification of admin email/password, and full admin account takeover."
      }, {
        "lang" : "es",
        "value" : "Easy!Appointments es un programador de citas autoalojado. En 1.5.2 y versiones anteriores, application/core/EA_Security.php::csrf_verify() solo aplica CSRF para solicitudes POST y retorna anticipadamente para métodos que no son POST. Varios puntos finales de la aplicación realizan operaciones que cambian el estado mientras aceptan parámetros de GET (o $_REQUEST), por lo que un atacante puede realizar CSRF forzando al navegador de una víctima a emitir una solicitud GET manipulada. Impacto: creación de cuentas de administrador, modificación de correo electrónico/contraseña de administrador y toma de control total de la cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easy\\!appointments:*:*:*:*:*:-:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "58620CF3-2F83-4032-B0F3-8D04ED54778F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-54v4-4685-vwrj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-54v4-4685-vwrj",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23746",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-15T20:16:05.917",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the SmartCardController service (DCG.SmartCardControllerService.exe). The service registers a TCP remoting channel with unsafe formatter/settings that permit untrusted remoting object invocation. A remote, unauthenticated attacker who can reach the remoting port can invoke exposed remoting objects to read arbitrary files from the server and coerce outbound authentication, and may achieve arbitrary file write and remote code execution via known .NET Remoting exploitation techniques. This can lead to disclosure of sensitive installation and service-account data and compromise of the affected host."
      }, {
        "lang" : "es",
        "value" : "El software Entrust Instant Financial Issuance (IFI) On Premise (anteriormente conocido como CardWizard) versiones 5.x, anteriores a la 6.10.5, y anteriores a la 6.11.1 contienen una exposición insegura de .NET Remoting en el servicio SmartCardController (DCG.SmartCardControllerService.exe). El servicio registra un canal de remoting TCP con un formateador/configuración inseguros que permiten la invocación de objetos de remoting no confiables. Un atacante remoto no autenticado que pueda alcanzar el puerto de remoting puede invocar objetos de remoting expuestos para leer archivos arbitrarios del servidor y forzar la autenticación saliente, y puede lograr la escritura arbitraria de archivos y la ejecución remota de código a través de técnicas conocidas de explotación de .NET Remoting. Esto puede llevar a la divulgación de datos sensibles de instalación y de cuentas de servicio y al compromiso del host afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://trustedcare.entrust.com/s/article/E26-001-NET-Remoting-Vulnerabilities-in-the-Smart-Card-Controller-Service-of-the-Instant-Financial-Issuance-On-Premise-Software",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.entrust.com/products/issuance-systems/instant/financial-card",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/entrust-ifi-smartcardcontroller-service-net-remoting-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-15T20:16:06.057",
      "lastModified" : "2026-02-14T18:16:10.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0203",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:05.457",
      "lastModified" : "2026-03-10T23:16:43.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, network-adjacent attacker sending a specifically malformed ICMP packet to cause an FPC to crash and restart, resulting in a Denial of Service (DoS).\n\n\n\nWhen an ICMP packet is received with a specifically malformed IP header value, the FPC receiving the packet crashes and restarts. Due to the specific type of malformed packet, adjacent upstream routers would not forward the packet, limiting the attack surface to adjacent networks.\n\nThis issue only affects ICMPv4. ICMPv6 is not vulnerable to this issue.\n\nThis issue does not affect AFT-based line cards such as the MPC10, MPC11, LC4800, LC9600, and MX304.\n\nThis issue affects Junos OS: \n\n\n\n  *  all versions before 21.2R3-S9, \n  *  from 21.4 before 21.4R3-S10, \n  *  from 22.2 before 22.2R3-S7, \n  *  from 22.3 before 22.3R3-S4, \n  *  from 22.4 before 22.4R3-S5, \n  *  from 23.2 before 23.2R2-S3, \n  *  from 23.4 before 23.4R2-S3, \n  *  from 24.2 before 24.2R1-S2, 24.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de manejo inadecuado de condiciones excepcionales en el procesamiento de paquetes de Juniper Networks Junos OS permite a un atacante no autenticado y adyacente a la red enviar un paquete ICMP específicamente malformado para causar que una FPC se bloquee y se reinicie, lo que resulta en una denegación de servicio (DoS).\n\nCuando se recibe un paquete ICMP con un valor de encabezado IP específicamente malformado, la FPC que recibe el paquete se bloquea y se reinicia. Debido al tipo específico de paquete malformado, los routers ascendentes adyacentes no reenviarían el paquete, lo que limita la superficie de ataque a las redes adyacentes.\n\nEste problema solo afecta a ICMPv4. ICMPv6 no es vulnerable a este problema.\n\nEste problema afecta a Junos OS:\n\n  *  todas las versiones anteriores a 21.2R3-S9,\n  *  desde 21.4 antes de 21.4R3-S10,\n  *  desde 22.2 antes de 22.2R3-S7,\n  *  desde 22.3 antes de 22.3R3-S4,\n  *  desde 22.4 antes de 22.4R3-S5,\n  *  desde 23.2 antes de 23.2R2-S3,\n  *  desde 23.4 antes de 23.4R2-S3,\n  *  desde 24.2 antes de 24.2R1-S2, 24.2R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:Amber",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "331C0F12-D9B9-483B-9EF0-28E48ED8346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "53938295-8999-4316-9DED-88E24D037852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "2307BF56-640F-49A8-B060-6ACB0F653A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "737DDF96-7B1D-44E2-AD0F-E2F50858B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "35E0BB39-18AE-4FAD-A528-FDFF6222DDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCAA120-20A2-43D8-87D3-716225CE233F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B196A-2AF1-4AE5-9148-A75A572807BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457616-2D91-4913-9A7D-038BBF8F1F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C470FB4E-A927-4AF3-ACB0-AD1E264218B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "44E98BC3-1D43-481A-AB09-FFA502C36AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0DA88F-6C61-4FEA-ABF3-99F7DD43DB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4FC60-140D-49EF-8011-A5888D8493B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB6507D-FFEF-44B4-B27B-0FA8B4A3B3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "06156CD6-09D3-4A05-9C5E-BC64A70640F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC0D2D2-4922-4675-8A2C-57A08D7BE334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "591AA3E6-62A2-4A1A-A04C-E808F71D8B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "786F993E-32CB-492A-A7CC-A7E4F48EA8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEA89D-BAC4-41CD-A1D1-AA5EDDEBD54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BC449CC7-B2D6-41CB-8D6C-81DE89E79520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "05E47861-3311-45E2-A722-8CD7FFDC2DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "748EAB0A-6B22-4098-8735-CC76BEAA9BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90F705F4-16E9-4B75-B246-34EDCA7EAD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB98E3F-B0A9-488F-ACFC-56B9485E7C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE9E767-4713-4EA2-8D00-1382975A4A15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "574730B0-56C8-4A03-867B-1737148ED9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "20EBC676-1B26-4A71-8326-0F892124290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4C0FBF-8813-44E5-B71A-22CBAA603E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCDE58C-80CC-4C5A-9667-8A4468D8D76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19326769-2F08-4E61-8246-CCE7AE4483F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB298B9-E0F2-4195-82D4-4EBA879C5CD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA104294",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA104294",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1002",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-01-15T21:16:05.640",
      "lastModified" : "2026-02-05T16:50:31.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.\n\n\nThe issue comes from an improper implementation of the C. rule of section 5.2.4 of RFC3986 and is fixed in Vert.x Core component (used by Vert.x Web):  https://github.com/eclipse-vertx/vert.x/pull/5895 \n\n\n\nSteps to reproduce\nGiven a file served by the static handler, craft an URI that introduces a string like bar%2F..%2F after the last / char to deny the access to the URI with an HTTP 404 response. For example https://example.com/foo/index.html can be denied with https://example.com/foo/bar%2F..%2Findex.html\n\nMitgation\nDisabling Static Handler cache fixes the issue.\n\n\n\nStaticHandler staticHandler = StaticHandler.create().setCachingEnabled(false);"
      }, {
        "lang" : "es",
        "value" : "La caché del componente de gestión de archivos estáticos de Vert.x Web puede manipularse para denegar el acceso a los archivos estáticos servidos por el gestor mediante una URI de solicitud diseñada específicamente. El problema se debe a una implementación incorrecta de la regla C. de la sección 5.2.4 del RFC 3986 y se ha corregido en el componente Vert.x Core (utilizado por Vert.x Web): https://github.com/eclipse-vertx/vert.x/pull/5895 Pasos para reproducir el problema: dado un archivo servido por el controlador estático, cree una URI que introduzca una cadena como bar%2F..%2F después del último carácter / para denegar el acceso a la URI con una respuesta HTTP 404. Por ejemplo, https://example.com/foo/index.html puede denegarse con https://example.com/foo/bar%2F..%2Findex.html. Solución: Desactivar la caché del Static Handler soluciona el problema. StaticHandler staticHandler = StaticHandler.create().setCachingEnabled(false);"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:vert.x-web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.5.23",
            "matchCriteriaId" : "B0EFC135-C1C4-4CB9-A987-BD60A9598D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:vert.x-web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.6",
            "matchCriteriaId" : "F4161FEB-35F0-4F16-8B4C-16142905AAA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse-vertx/vert.x/pull/5895",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vert-x3/vertx-web/issues/2836",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21903",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:05.807",
      "lastModified" : "2026-01-23T19:40:03.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service (DoS).\n\n\n\nSubscribing to telemetry sensors at scale causes all FPC connections to drop, resulting in an FPC crash and restart.\nThe issue was not seen when YANG packages for the specific sensors were installed. \n\n\n\nThis issue affects Junos OS: \n\n\n\n  *  all versions before 22.4R3-S7,\n  *  23.2 version before 23.2R2-S4,\n  *  23.4 versions before 23.4R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer basado en pila en el Motor de Reenvío de Paquetes (pfe) de Juniper Networks Junos OS permite a un atacante basado en red, autenticado con privilegios bajos, causar una Denegación de Servicio (DoS).\n\nLa suscripción a sensores de telemetría a escala provoca la caída de todas las conexiones FPC, lo que resulta en un fallo y reinicio de la FPC.\nEl problema no se observó cuando se instalaron los paquetes YANG para los sensores específicos.\n\nEste problema afecta a Junos OS:\n\n*   todas las versiones anteriores a 22.4R3-S7,\n*   versión 23.2 anterior a 23.2R2-S4,\n*   versiones 23.4 anteriores a 23.4R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "57F66641-003B-49D6-A9B9-AB300CFE3C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106022",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106022",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21905",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:05.990",
      "lastModified" : "2026-01-23T19:40:26.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC allows an unauthenticated network-based attacker sending specific SIP messages over TCP to crash the flow management process, leading to a Denial of Service (DoS).\n\nOn SRX Series, and MX Series with MX-SPC3 or MS-MPC service cards, receipt of multiple SIP messages causes the SIP headers to be parsed incorrectly, eventually causing a continuous loop and leading to a watchdog timer expiration, crashing the flowd process on SRX Series and MX Series with MX-SPC3, or mspmand process on MX Series with MS-MPC.\n\nThis issue only occurs over TCP. SIP messages sent over UDP cannot trigger this issue.\n\nThis issue affects Junos OS on SRX Series and MX Series with MX-SPC3 and MS-MPC:\n\n\n\n  *  all versions before 21.2R3-S10, \n  *  from 21.4 before 21.4R3-S12, \n  *  from 22.4 before 22.4R3-S8, \n  *  from 23.2 before 23.2R2-S5, \n  *  from 23.4 before 23.4R2-S6, \n  *  from 24.2 before 24.2R2-S3, \n  *  from 24.4 before 24.4R2-S1, \n  *  from 25.2 before 25.2R1-S1, 25.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Bucle con Condición de Salida Inalcanzable ('Bucle Infinito') en el gateway de capa de aplicación SIP (ALG) de Juniper Networks Junos OS en las series SRX y MX con MX-SPC3 o MS-MPC permite a un atacante no autenticado basado en red que envía mensajes SIP específicos a través de TCP bloquear el proceso de gestión de flujo, lo que lleva a una Denegación de Servicio (DoS).\n\nEn las series SRX y MX con tarjetas de servicio MX-SPC3 o MS-MPC, la recepción de múltiples mensajes SIP provoca que los encabezados SIP se analicen incorrectamente, lo que finalmente causa un bucle continuo y lleva a la expiración de un temporizador watchdog, bloqueando el proceso flowd en las series SRX y MX con MX-SPC3, o el proceso mspmand en las series MX con MS-MPC.\n\nEste problema solo ocurre a través de TCP. Los mensajes SIP enviados a través de UDP no pueden desencadenar este problema.\n\nEste problema afecta a Junos OS en las series SRX y MX con MX-SPC3 y MS-MPC:\n\n  *  todas las versiones anteriores a 21.2R3-S10,\n  *  desde 21.4 anteriores a 21.4R3-S12,\n  *  desde 22.4 anteriores a 22.4R3-S8,\n  *  desde 23.2 anteriores a 23.2R2-S5,\n  *  desde 23.4 anteriores a 23.4R2-S6,\n  *  desde 24.2 anteriores a 24.2R2-S3,\n  *  desde 24.4 anteriores a 24.4R2-S1,\n  *  desde 25.2 anteriores a 25.2R1-S1, 25.2R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Amber",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "331C0F12-D9B9-483B-9EF0-28E48ED8346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "53938295-8999-4316-9DED-88E24D037852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "2307BF56-640F-49A8-B060-6ACB0F653A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "737DDF96-7B1D-44E2-AD0F-E2F50858B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "35E0BB39-18AE-4FAD-A528-FDFF6222DDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCAA120-20A2-43D8-87D3-716225CE233F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "614A2070-A6CC-4BA7-9EEE-93AE3198A055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "521DE11A-805C-4727-AE9F-52272D515BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DD76552A-AB3E-4D5C-8FD3-399E1E24DFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B196A-2AF1-4AE5-9148-A75A572807BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457616-2D91-4913-9A7D-038BBF8F1F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C470FB4E-A927-4AF3-ACB0-AD1E264218B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "44E98BC3-1D43-481A-AB09-FFA502C36AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0DA88F-6C61-4FEA-ABF3-99F7DD43DB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4FC60-140D-49EF-8011-A5888D8493B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB6507D-FFEF-44B4-B27B-0FA8B4A3B3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "11340C63-A638-420C-85C9-1B4438C88D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "279E59FE-96DF-4E1D-A3A2-61D180F04533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF1798-F3C2-4645-96E7-1E82368B184D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7572BB-9C77-4214-9C5F-CC83C7B93E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAADBF98-38BE-40E2-AF1B-9077DCED0809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7B9DEB-7472-4010-8717-8050555C2FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F7BB7E-3A52-4C23-A4D2-50E75C912AFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7FB0CC-624D-4AB9-A7AC-BB19838C3B22"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE06B18-BFB5-4029-A05D-386CFBFBF683"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A1DCCD-208C-46D9-8E14-89592B49AB9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5942B6E-AFC7-40E4-8007-68C804BD52E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F893F-7B06-43B5-8653-A8D9794C052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462CFD52-D3E2-4F7A-98AC-C589D2420556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106004",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106004",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21906",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:06.177",
      "lastModified" : "2026-01-23T19:40:34.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker sending a specific ICMP packet through a GRE tunnel to cause the PFE to crash and restart.\n\nWhen PowerMode IPsec (PMI) and GRE performance acceleration are enabled and the device receives a specific ICMP packet, a crash occurs in the SRX PFE, resulting in traffic loss. PMI is enabled by default, and GRE performance acceleration can be enabled by running the configuration command shown below. PMI is a mode of operation that provides IPsec performance improvements using Vector Packet Processing.\n\nNote that PMI with GRE performance acceleration is only supported on specific SRX platforms.\nThis issue affects Junos OS on the SRX Series:\n\n\n\n  *  all versions before 21.4R3-S12, \n  *  from 22.4 before 22.4R3-S8, \n  *  from 23.2 before 23.2R2-S5, \n  *  from 23.4 before 23.4R2-S5, \n  *  from 24.2 before 24.2R2-S3, \n  *  from 24.4 before 24.4R2-S1, \n  *  from 25.2 before 25.2R1-S1, 25.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Manejo Inadecuado de Condiciones Excepcionales en el motor de reenvío de paquetes (PFE) de Juniper Networks Junos OS en la serie SRX permite a un atacante no autenticado basado en red que envía un paquete ICMP específico a través de un túnel GRE causar que el PFE falle y se reinicie.\n\nCuando PowerMode IPsec (PMI) y la aceleración de rendimiento GRE están habilitados y el dispositivo recibe un paquete ICMP específico, ocurre una falla en el PFE del SRX, lo que resulta en pérdida de tráfico. PMI está habilitado por defecto, y la aceleración de rendimiento GRE puede habilitarse ejecutando el comando de configuración que se muestra a continuación. PMI es un modo de operación que proporciona mejoras de rendimiento de IPsec utilizando el procesamiento de paquetes vectoriales.\n\nTenga en cuenta que PMI con aceleración de rendimiento GRE solo es compatible con plataformas SRX específicas.\nEste problema afecta a Junos OS en la serie SRX:\n\n  *  todas las versiones anteriores a 21.4R3-S12,\n  *  desde 22.4 anteriores a 22.4R3-S8,\n  *  desde 23.2 anteriores a 23.2R2-S5,\n  *  desde 23.4 anteriores a 23.4R2-S5,\n  *  desde 24.2 anteriores a 24.2R2-S3,\n  *  desde 24.4 anteriores a 24.4R2-S1,\n  *  desde 25.2 anteriores a 25.2R1-S1, 25.2R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Red",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.4",
            "matchCriteriaId" : "AA5E63CF-31E5-4391-896F-148F05DA6BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "521DE11A-805C-4727-AE9F-52272D515BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DD76552A-AB3E-4D5C-8FD3-399E1E24DFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B196A-2AF1-4AE5-9148-A75A572807BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457616-2D91-4913-9A7D-038BBF8F1F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C470FB4E-A927-4AF3-ACB0-AD1E264218B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "44E98BC3-1D43-481A-AB09-FFA502C36AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0DA88F-6C61-4FEA-ABF3-99F7DD43DB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4FC60-140D-49EF-8011-A5888D8493B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB6507D-FFEF-44B4-B27B-0FA8B4A3B3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "11340C63-A638-420C-85C9-1B4438C88D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF1798-F3C2-4645-96E7-1E82368B184D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7572BB-9C77-4214-9C5F-CC83C7B93E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAADBF98-38BE-40E2-AF1B-9077DCED0809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7B9DEB-7472-4010-8717-8050555C2FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE06B18-BFB5-4029-A05D-386CFBFBF683"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A1DCCD-208C-46D9-8E14-89592B49AB9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5942B6E-AFC7-40E4-8007-68C804BD52E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F893F-7B06-43B5-8653-A8D9794C052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462CFD52-D3E2-4F7A-98AC-C589D2420556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106005",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106005",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/junos/vpn-ipsec/topics/topic-map/security-powermode-ipsec-vpn.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21907",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:06.357",
      "lastModified" : "2026-01-23T20:02:29.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support Perfect Forward Secrecy (PFS), affecting the long-term confidentiality of encrypted communications.This issue affects all versions of Junos Space before 24.1R5."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Uso de un algoritmo criptográfico roto o arriesgado en el servidor TLS/SSL de Juniper Networks Junos Space permite el uso de cifrados de clave estática (ssl-static-key-ciphers), reduciendo la confidencialidad del tráfico en ruta comunicado a través de la conexión. Estos cifrados tampoco soportan Perfect Forward Secrecy (PFS), afectando la confidencialidad a largo plazo de las comunicaciones cifradas. Este problema afecta a todas las versiones de Junos Space anteriores a 24.1R5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:Green",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "GREEN"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.1",
            "matchCriteriaId" : "2EC090A9-634B-4AA2-916F-7548AF71FF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:24.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0566970C-0E9B-4566-9920-C7C436A4243D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:24.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AA399D-5A7D-45B8-B774-D69054DFA4D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:24.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57CC4E1A-23AA-4B4A-8690-5EEDCBEC4BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:24.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "3F39EC68-9DBB-4A30-BB44-1A26020079CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106006",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106006",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21908",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:06.537",
      "lastModified" : "2026-01-23T19:40:42.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, network-adjacent attacker flapping a port to crash the dot1xd process, leading to a Denial of Service (DoS), or potentially execute arbitrary code within the context of the process running as root.\n\nThe issue is specific to the processing of a change in authorization (CoA) when a port bounce occurs. A pointer is freed but was then referenced later in the same code path. Successful exploitation is outside the attacker's direct control due to the specific timing of the two events required to execute the vulnerable code path.\n\nThis issue affects systems with 802.1X authentication port-based network access control (PNAC) enabled.\nThis issue affects:\n\nJunos OS: \n\n\n\n  *  from 23.2R2-S1 before 23.2R2-S5, \n  *  from 23.4R2 before 23.4R2-S6, \n  *  from 24.2 before 24.2R2-S3, \n  *  from 24.4 before 24.4R2-S1, \n  *  from 25.2 before 25.2R1-S2, 25.2R2; \n\n\n\n\nJunos OS Evolved: \n\n\n\n  *  from 23.2R2-S1 before 23.2R2-S5-EVO, \n  *  from 23.4R2 before 23.4R2-S6-EVO, \n  *  from 24.2 before 24.2R2-S3-EVO, \n  *  from 24.4 before 24.4R2-S1-EVO, \n  *  from 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Use After Free fue identificada en el demonio de autenticación 802.1X (dot1xd) de Juniper Networks Junos OS y Junos OS Evolved que podría permitir a un atacante autenticado y adyacente a la red, alternando un puerto, bloquear el proceso dot1xd, lo que lleva a una denegación de servicio (DoS), o potencialmente ejecutar código arbitrario dentro del contexto del proceso que se ejecuta como root.\n\nEl problema es específico del procesamiento de un cambio en la autorización (CoA) cuando ocurre un rebote de puerto. Un puntero es liberado pero luego fue referenciado más tarde en la misma ruta de código. La explotación exitosa está fuera del control directo del atacante debido a la sincronización específica de los dos eventos requeridos para ejecutar la ruta de código vulnerable.\n\nEste problema afecta a sistemas con autenticación 802.1X con control de acceso a la red basado en puerto (PNAC) habilitado.\nEste problema afecta a:\n\nJunos OS:\n\n  *  desde 23.2R2-S1 antes de 23.2R2-S5,\n  *  desde 23.4R2 antes de 23.4R2-S6,\n  *  desde 24.2 antes de 24.2R2-S3,\n  *  desde 24.4 antes de 24.4R2-S1,\n  *  desde 25.2 antes de 25.2R1-S2, 25.2R2;\n\nJunos OS Evolved:\n\n  *  desde 23.2R2-S1 antes de 23.2R2-S5-EVO,\n  *  desde 23.4R2 antes de 23.4R2-S6-EVO,\n  *  desde 24.2 antes de 24.2R2-S3-EVO,\n  *  desde 24.4 antes de 24.4R2-S1-EVO,\n  *  desde 25.2 antes de 25.2R1-S2-EVO, 25.2R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Green",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "GREEN"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "279E59FE-96DF-4E1D-A3A2-61D180F04533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF1798-F3C2-4645-96E7-1E82368B184D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7572BB-9C77-4214-9C5F-CC83C7B93E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAADBF98-38BE-40E2-AF1B-9077DCED0809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "558F0A4C-0C72-4BF1-B2DE-C0D3BFD54BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7B9DEB-7472-4010-8717-8050555C2FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D657944B-2066-4F2C-BC92-EDF4DE1C165C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "75A58924-6348-44CF-AB39-1FCE17FE81AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9A903B31-D9E5-43FA-B09F-7E7769803720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BEA27-77F8-4CDF-A49A-FEF9C33DA513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB82B22F-9005-4EF0-A1E3-4261757783D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0224D3F1-8B86-432C-8F5B-B4B7B69ADF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EB2FE5FE-0ADE-406E-A23D-FDCC104B2496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2E58987A-D7B7-4FFF-9969-E8FD76AE2BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E779C0D4-A8F7-4976-B3C8-B9802B96E715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C7457415-D893-474B-ABA6-9841BB5CC6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD89AAD-C615-42AF-B8AF-E6067862F0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28AFF11D-E418-4A76-B557-F60622602537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A86A69D-2B90-4B3B-A6EC-88358284787D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "080BEA58-9667-4C2C-810D-DC1187DB67DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "34072A94-CFEB-4FAA-8E68-E98D4F7602E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C79FF7EC-AD91-4F9F-B8AC-B1A9C9271816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B32ADA05-5F5D-45B6-BB7B-3FA6A6F229F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6526E82-A6A6-4A65-9B01-B3FCB947F44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B74FA-DF84-4E3E-BCF9-44EEF9E45910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DC024CDE-DA63-4E87-BA97-5E8C06B0D8B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "25DA0DD2-E974-448C-BD05-ED6FCA4725FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:25.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF96553-DB70-4DFA-8658-306A7477DD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "83C415EF-E87B-4259-A836-59B3A9C3914B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD32E67-9D8D-437D-96BC-CA97A1F686BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:25.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "EB843A79-1B1C-4638-96B9-F1F191F1F75F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106007",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106007",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21909",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:06.727",
      "lastModified" : "2026-01-23T19:40:48.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker controlling an adjacent IS-IS neighbor to send a specific update packet causing a memory leak. Continued receipt and processing of these packets will exhaust all available memory, crashing rpd and creating a Denial of Service (DoS) condition.\n\nMemory usage can be monitored through the use of the 'show task memory detail' command. For example:\n\nuser@junos> show task memory detail | match ted-infra\n  TED-INFRA-COOKIE             25     1072       28     1184       229\n\n\n\nuser@junos> \n\nshow task memory detail | match ted-infra\n  TED-INFRA-COOKIE             31     1360       34     1472       307\n\nThis issue affects:\n\nJunos OS: \n\n  *  from 23.2 before 23.2R2, \n  *  from 23.4 before 23.4R1-S2, 23.4R2, \n  *  from 24.1 before 24.1R2; \n\n\nJunos OS Evolved: \n\n  *  from 23.2 before 23.2R2-EVO, \n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO, \n  *  from 24.1 before 24.1R2-EVO.\n\n\nThis issue does not affect Junos OS versions before 23.2R1 or Junos OS Evolved versions before 23.2R1-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Missing Release of Memory after Effective Lifetime en el demonio del protocolo de enrutamiento (rpd) de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante no autenticado que controla un vecino IS-IS adyacente enviar un paquete de actualización específico causando una fuga de memoria. La recepción y el procesamiento continuos de estos paquetes agotarán toda la memoria disponible, bloqueando rpd y creando una condición de denegación de servicio (DoS).\n\nEl uso de la memoria se puede monitorear mediante el uso del comando 'show task memory detail'. Por ejemplo:\n\nuser@junos&gt; show task memory detail | match ted-infra\n&#xa0; TED-INFRA-COOKIE  &#xa0; &#xa0; &#xa0; &#xa0; &#xa0;  25  &#xa0;  1072  &#xa0; &#xa0;  28  &#xa0;  1184  &#xa0; &#xa0;  229\n\n\n\nuser@junos&gt; \n\nshow task memory detail | match ted-infra\n&#xa0; TED-INFRA-COOKIE  &#xa0; &#xa0; &#xa0; &#xa0; &#xa0;  31  &#xa0;  1360  &#xa0; &#xa0;  34  &#xa0;  1472  &#xa0; &#xa0;  307\n\nEste problema afecta a:\n\nJunos OS:\n\n  *  desde 23.2 anterior a 23.2R2,\n  *  desde 23.4 anterior a 23.4R1-S2, 23.4R2,\n  *  desde 24.1 anterior a 24.1R2;\n\nJunos OS Evolved:\n\n  *  desde 23.2 anterior a 23.2R2-EVO,\n  *  desde 23.4 anterior a 23.4R1-S2-EVO, 23.4R2-EVO,\n  *  desde 24.1 anterior a 24.1R2-EVO.\n\nEste problema no afecta a las versiones de Junos OS anteriores a 23.2R1 ni a las versiones de Junos OS Evolved anteriores a 23.2R1-EVO."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Green",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "GREEN"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "58C99F21-D87E-48FD-85EF-9A5EF6DE53B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA5E5D6-F7B5-46BE-B96D-F64CCEAF08F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEAA7FD-385F-4221-907E-65ABC16BE4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "558D234D-BC50-415F-86D6-8E19D6C3ACE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F4EEEE-77E9-4973-A770-99E7BA2F05F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7F0D73-85EE-4A07-B51B-6BF52ECBA75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE777A1F-9CD9-426E-AF1C-FBE01EB9A4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7147BA60-30A5-4CED-9AAF-F6BEA0528B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB82B22F-9005-4EF0-A1E3-4261757783D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8E41F858-24E8-4986-BED6-BE5151219DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:24.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EE57490C-2800-4456-8293-B54A255CF348"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106008",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106008",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21910",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:06.920",
      "lastModified" : "2026-02-25T17:17:44.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms allows an unauthenticated network-adjacent attacker flapping an interface to cause traffic between VXLAN Network Identifiers (VNIs) to drop, leading to a Denial of Service (DoS).\n\nOn all EX4k and QFX5k platforms, a link flap in an\n\nEVPN-VXLAN configuration Link Aggregation Group (LAG)\nresults in Inter-VNI traffic dropping when there are multiple load-balanced next-hop routes for the same destination.\n\nThis issue is only applicable to systems that support EVPN-VXLAN Virtual Port-Link Aggregation Groups (VPLAG), such as the QFX5110, QFX5120, QFX5200, EX4100, EX4300, EX4400, and EX4650.\n\nService can only be restored by restarting the affected FPC via the 'request chassis fpc restart slot <slot-number>' command.\n\nThis issue affects Junos OS \n\non EX4k and QFX5k Series: \n\n\n\n  *  all versions before 21.4R3-S12, \n  *  all versions of 22.2\n  *  from 22.4 before 22.4R3-S8, \n  *  from 23.2 before 23.2R2-S5, \n  *  from 23.4 before 23.4R2-S5, \n  *  from 24.2 before 24.2R2-S3,\n  *  from 24.4 before 24.4R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación incorrecta de condiciones inusuales o excepcionales en el motor de reenvío de paquetes (PFE) de Juniper Networks Junos OS en plataformas de las series EX4k y QFX5k permite a un atacante no autenticado adyacente a la red que hace fluctuar una interfaz causar la caída del tráfico entre identificadores de red VXLAN (VNI), lo que lleva a una denegación de servicio (DoS).\n\nEn todas las plataformas EX4k y QFX5k, una fluctuación de enlace en un Grupo de Agregación de Enlaces (LAG) con configuración EVPN-VXLAN resulta en la caída del tráfico Inter-VNI cuando hay múltiples rutas de siguiente salto con balanceo de carga para el mismo destino.\n\nEste problema solo es aplicable a sistemas que soportan Grupos de Agregación de Enlaces de Puerto Virtual EVPN-VXLAN (VPLAG), como los QFX5110, QFX5120, QFX5200, EX4100, EX4300, EX4400 y EX4650.\n\nEl servicio solo puede restaurarse reiniciando la FPC afectada mediante el comando 'request chassis fpc restart slot '.\n\nEste problema afecta a Junos OS en las series EX4k y QFX5k:\n\n  *  todas las versiones anteriores a 21.4R3-S12,\n  *  todas las versiones de 22.2\n  *  desde 22.4 anteriores a 22.4R3-S8,\n  *  desde 23.2 anteriores a 23.2R2-S5,\n  *  desde 23.4 anteriores a 23.4R2-S5,\n  *  desde 24.2 anteriores a 24.2R2-S3,\n  *  desde 24.4 anteriores a 24.4R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Green",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "GREEN"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.4",
            "matchCriteriaId" : "AA5E63CF-31E5-4391-896F-148F05DA6BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "521DE11A-805C-4727-AE9F-52272D515BC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DD76552A-AB3E-4D5C-8FD3-399E1E24DFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B196A-2AF1-4AE5-9148-A75A572807BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457616-2D91-4913-9A7D-038BBF8F1F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C470FB4E-A927-4AF3-ACB0-AD1E264218B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "44E98BC3-1D43-481A-AB09-FFA502C36AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0DA88F-6C61-4FEA-ABF3-99F7DD43DB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4FC60-140D-49EF-8011-A5888D8493B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB6507D-FFEF-44B4-B27B-0FA8B4A3B3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6589195B-50D9-48F3-9805-4CA8C41EB46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "11340C63-A638-420C-85C9-1B4438C88D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152FD759-F5D2-4ACE-ADD6-7FE89B31D961"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2521C83-E8F2-4621-9727-75BB3FC11E64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4100-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F496D19-D28C-4517-90A3-90EC62BC5D79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4100-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA4A8C7-EBC0-449E-BD37-69FABDC917C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B43F6CB-0595-4957-8B3B-ADD4EA84D8C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5230-64cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D09BE-C16F-4E77-B6FB-C0C58BBD7675"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ABF8F9D-45C1-4554-A213-435A68709FCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5241:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685120A6-7005-4ECB-A37F-0F225BB92676"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D6C74F-E85F-4D62-BDAF-FE619B467C76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106009",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106009",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21911",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:07.110",
      "lastModified" : "2026-01-23T16:59:03.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Calculation vulnerability in the Layer 2 Control\n\nProtocol \n\n Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker flapping the management interface to cause the learning of new MACs over label-switched interfaces (LSI) to stop while generating a flood of logs, resulting in high CPU usage.\n\nWhen the issue is seen, the following log message will be generated:\n\nop:1 flag:0x6 mac:xx:xx:xx:xx:xx:xx bd:2 ifl:13302 reason:0(REASON_NONE) i-op:6(INTRNL_OP_HW_FORCE_DELETE) status:10 lstatus:10 err:26(GETIFBD_VALIDATE_FAILED) err-reason 4(IFBD_VALIDATE_FAIL_EPOCH_MISMATCH) hw_wr:0x4 ctxsync:0 fwdsync:0  rtt-id:51 p_ifl:0  fwd_nh:0 svlbnh:0 event:- smask:0x100000000 dmask:0x0 mplsmask 0x1 act:0x5800 extf:0x0 pfe-id 0 hw-notif-ifl 13302 programmed-ifl 4294967295 pseudo-vtep underlay-ifl-idx 0 stack:GET_MAC, ALLOCATE_MAC, GET_IFL, GET_IFF, GET_IFBD, STOP, \n\n\nThis issue affects Junos OS Evolved: \n\n  *  all versions before 21.4R3-S7-EVO, \n  *  from 22.2 before 22.2R3-S4-EVO, \n  *  from 22.3 before 22.3R3-S3-EVO, \n  *  from 22.4 before 22.4R3-S2-EVO, \n  *  from 23.2 before 23.2R2-S1-EVO, \n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cálculo incorrecto en el demonio del protocolo de control de capa 2 (l2cpd) de Juniper Networks Junos OS Evolved permite a un atacante adyacente a la red no autenticado que alterna la interfaz de gestión detener el aprendizaje de nuevas MAC a través de interfaces conmutadas por etiquetas (LSI) mientras genera una inundación de registros, lo que resulta en un alto uso de la CPU.\n\nCuando se observa el problema, se generará el siguiente mensaje de registro:\n\nop:1 flag:0x6 mac:xx:xx:xx:xx:xx:xx bd:2 ifl:13302 reason:0(REASON_NONE) i-op:6(INTRNL_OP_HW_FORCE_DELETE) status:10 lstatus:10 err:26(GETIFBD_VALIDATE_FAILED) err-reason 4(IFBD_VALIDATE_FAIL_EPOCH_MISMATCH) hw_wr:0x4 ctxsync:0 fwdsync:0 rtt-id:51 p_ifl:0 fwd_nh:0 svlbnh:0 event:- smask:0x100000000 dmask:0x0 mplsmask 0x1 act:0x5800 extf:0x0 pfe-id 0 hw-notif-ifl 13302 programmed-ifl 4294967295 pseudo-vtep underlay-ifl-idx 0 stack:GET_MAC, ALLOCATE_MAC, GET_IFL, GET_IFF, GET_IFBD, STOP,\n\nEste problema afecta a Junos OS Evolved:\n\n  *  todas las versiones anteriores a 21.4R3-S7-EVO,\n  *  desde 22.2 anteriores a 22.2R3-S4-EVO,\n  *  desde 22.3 anteriores a 22.3R3-S3-EVO,\n  *  desde 22.4 anteriores a 22.4R3-S2-EVO,\n  *  desde 23.2 anteriores a 23.2R2-S1-EVO,\n  *  desde 23.4 anteriores a 23.4R1-S2-EVO, 23.4R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Amber",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.4",
            "matchCriteriaId" : "A51696D6-8503-4CBD-AD19-861E5BE94ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6937069-8C19-4B01-8415-ED7E9EAE2CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21DF05B8-EF7E-422F-8831-06904160714C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "492FCE45-68A1-4378-85D4-C4034FE0D836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "522114CC-1505-4205-B4B8-797DE1BD833B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D664AB-0FA7-49C7-B6E1-69C77652FBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB01252-2F11-41DB-9023-C74FD723334E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "F91450D5-F8CE-42EA-BB7E-312FCE024CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CA3365-F9AF-40DF-8700-30AD4BC58E27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE395C-A651-4568-88E3-3600544BF799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FEFD0A-A969-4F53-8668-1231FD675D6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81CC3480-4B65-4588-8D46-FA80A8F6D143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E76F5F-DB37-4B7F-9247-3CEB4EBD7696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C63DBEE5-B0C2-498F-A672-B6596C89B0A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9370C46D-3AA1-4562-B67F-DF6EA10F209B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD8C240-A7FE-4FD5-ADCC-289C1BC461BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB9F20B-7683-4B0D-8D2B-5569414EBC29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EF84D-55A9-41DC-A324-69E1DC426D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "433631CA-3AC4-4D66-9B46-AEA4209347F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E4CD8AD-277A-4FC5-A102-3E151060C216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC09BAC-83E7-48CE-B571-ED49277B2987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA4481D2-F693-48A5-8DBC-E86430987A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "136CA584-2475-4A14-9771-F367180201D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4546776C-A657-42E3-9A36-47F9F59A88AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "156DD8ED-CE6E-48C0-9E67-16B04767D62E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "10F9C2B1-BD81-4EDC-ADF5-4B0F39001C7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "61F649B0-0121-4760-9432-5F57214EFC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0A33C425-921F-4795-B834-608C8F1597E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "93887799-F62C-4A4A-BCF5-004D0B4D4154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62C473D2-2612-4480-82D8-8A24D0687BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB4C5CA-A709-4B13-A9E0-372098A72AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "04CE952D-E3C1-4B34-9E65-EC52BFE887AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE9D1A7-4721-4E1D-B965-FDC38126B1DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8643AA3-29EF-48A7-B033-CB60988E214B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9800BA03-E6BF-4212-B2E7-69C0FD27D294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCA655D-C542-44F1-B183-4C864CFF2D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEAA7FD-385F-4221-907E-65ABC16BE4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "558D234D-BC50-415F-86D6-8E19D6C3ACE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F4EEEE-77E9-4973-A770-99E7BA2F05F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BB6910-B994-45FD-8153-5EC00EE842E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7F0D73-85EE-4A07-B51B-6BF52ECBA75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE777A1F-9CD9-426E-AF1C-FBE01EB9A4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7147BA60-30A5-4CED-9AAF-F6BEA0528B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB82B22F-9005-4EF0-A1E3-4261757783D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106010",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106010",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21912",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:07.357",
      "lastModified" : "2026-02-25T17:18:19.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of Juniper Networks Junos OS on MX10k Series allows a local, low-privileged attacker executing the 'show system firmware' CLI command to cause an LC480 or LC2101 line card to reset.\n\nOn MX10k Series systems with LC480 or LC2101 line cards, repeated execution of the 'show system firmware' CLI command can cause the line card to crash and restart. Additionally, some time after the line card crashes, chassisd may also crash and restart, generating a core dump.This issue affects Junos OS on MX10k Series: \n\n\n\n  *  all versions before 21.2R3-S10, \n  *  from 21.4 before 21.4R3-S9, \n  *  from 22.2 before 22.2R3-S7, \n  *  from 22.4 before 22.4R3-S6, \n  *  from 23.2 before 23.2R2-S2, \n  *  from 23.4 before 23.4R2-S3, \n  *  from 24.2 before 24.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de condición de carrera (TOCTOU) de tiempo de verificación y tiempo de uso en el método para recopilar estadísticas de firmware Ethernet FPC de Juniper Networks Junos OS en la serie MX10k permite a un atacante local con pocos privilegios que ejecuta el comando CLI 'show system firmware' causar que una tarjeta de línea LC480 o LC2101 se reinicie.\n\nEn sistemas de la serie MX10k con tarjetas de línea LC480 o LC2101, la ejecución repetida del comando CLI 'show system firmware' puede causar que la tarjeta de línea falle y se reinicie. Además, algún tiempo después de que la tarjeta de línea falle, chassisd también puede fallar y reiniciarse, generando un volcado de memoria. Este problema afecta a Junos OS en la serie MX10k:\n\n  *  todas las versiones anteriores a 21.2R3-S10,\n  *  desde 21.4 anteriores a 21.4R3-S9,\n  *  desde 22.2 anteriores a 22.2R3-S7,\n  *  desde 22.4 anteriores a 22.4R3-S6,\n  *  desde 23.2 anteriores a 23.2R2-S2,\n  *  desde 23.4 anteriores a 23.4R2-S3,\n  *  desde 24.2 anteriores a 24.2R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:Amber",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "331C0F12-D9B9-483B-9EF0-28E48ED8346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "53938295-8999-4316-9DED-88E24D037852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "2307BF56-640F-49A8-B060-6ACB0F653A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "737DDF96-7B1D-44E2-AD0F-E2F50858B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "35E0BB39-18AE-4FAD-A528-FDFF6222DDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCAA120-20A2-43D8-87D3-716225CE233F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "614A2070-A6CC-4BA7-9EEE-93AE3198A055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5B196A-2AF1-4AE5-9148-A75A572807BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "3B457616-2D91-4913-9A7D-038BBF8F1F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C470FB4E-A927-4AF3-ACB0-AD1E264218B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "44E98BC3-1D43-481A-AB09-FFA502C36AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0DA88F-6C61-4FEA-ABF3-99F7DD43DB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4FC60-140D-49EF-8011-A5888D8493B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "06156CD6-09D3-4A05-9C5E-BC64A70640F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC0D2D2-4922-4675-8A2C-57A08D7BE334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "591AA3E6-62A2-4A1A-A04C-E808F71D8B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "786F993E-32CB-492A-A7CC-A7E4F48EA8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "60CEA89D-BAC4-41CD-A1D1-AA5EDDEBD54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BC449CC7-B2D6-41CB-8D6C-81DE89E79520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "05E47861-3311-45E2-A722-8CD7FFDC2DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "748EAB0A-6B22-4098-8735-CC76BEAA9BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90F705F4-16E9-4B75-B246-34EDCA7EAD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:lc2101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C53ED6-2B85-49C6-BB00-9C21BEDB856F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:lc480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EBB06-2479-4D56-B8D9-15195D6F118F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F7BB7E-3A52-4C23-A4D2-50E75C912AFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106011",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106011",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21913",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:07.537",
      "lastModified" : "2026-01-23T19:40:56.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\nOn EX4000 models with 48 ports (EX4000-48T, EX4000-48P, EX4000-48MP) a high volume of traffic destined to the device will cause an FXPC crash and restart, which leads to a complete service outage until the device has automatically restarted.\n\n\n\n\nThe following reboot reason can be seen in the output of 'show chassis routing-engine' and as a log message:\n\n  reason=0x4000002 reason_string=0x4000002:watchdog + panic with core dump \n\n\n\n\nThis issue affects Junos OS on EX4000-48T, EX4000-48P and EX4000-48MP:\n\n\n\n  *  24.4 versions before 24.4R2,\n  *  25.2 versions before 25.2R1-S2, 25.2R2.\n\n\n\n\nThis issue does not affect versions before 24.4R1 as the first Junos OS version for the EX4000 models was 24.4R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inicialización incorrecta de recursos en el Administrador de Dispositivos Internos (IDM) de Juniper Networks Junos OS en modelos EX4000 permite a un atacante no autenticado, basado en red, causar una Denegación de Servicio (DoS).\n\nEn los modelos EX4000 con 48 puertos (EX4000-48T, EX4000-48P, EX4000-48MP), un alto volumen de tráfico destinado al dispositivo causará un fallo y reinicio de FXPC, lo que lleva a una interrupción completa del servicio hasta que el dispositivo se haya reiniciado automáticamente.\n\nLa siguiente razón de reinicio se puede ver en la salida de 'show chassis routing-engine' y como un mensaje de registro:\n\nreason=0x4000002 reason_string=0x4000002:watchdog + panic with core dump\n\nEste problema afecta a Junos OS en EX4000-48T, EX4000-48P y EX4000-48MP:\n\n  *  versiones 24.4 anteriores a 24.4R2,\n  *  versiones 25.2 anteriores a 25.2R1-S2, 25.2R2.\n\nEste problema no afecta a las versiones anteriores a 24.4R1, ya que la primera versión de Junos OS para los modelos EX4000 fue 24.4R1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7572BB-9C77-4214-9C5F-CC83C7B93E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAADBF98-38BE-40E2-AF1B-9077DCED0809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "558F0A4C-0C72-4BF1-B2DE-C0D3BFD54BCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7B9DEB-7472-4010-8717-8050555C2FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4000-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62095696-9ECD-4348-9CEF-B2964ADECDC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4000-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D907C1B-4C3D-4280-B5D9-FA0557B5A72F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4000-48t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4009C8F8-19AE-4DAF-8CF7-0DC5EA76A852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106014",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106014",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21914",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:07.700",
      "lastModified" : "2026-01-23T19:41:03.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos).\n\nIf an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol (GTP) Modify Bearer Request message, a lock is acquired and never released. This results in other threads not being able to acquire a lock themselves, causing a watchdog timeout leading to FPC crash and restart. This issue leads to a complete traffic outage until the device has automatically recovered.\n\nThis issue affects Junos OS on SRX Series:\n\n  *  all versions before 22.4R3-S8,\n  *  23.2 versions before 23.2R2-S5,\n  *  23.4 versions before 23.4R2-S6,\n  *  24.2 versions before 24.2R2-S3,\n  *  24.4 versions before 24.4R2-S2,\n  *  25.2 versions before 25.2R1-S1, 25.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de bloqueo incorrecto en el plugin GTP de Juniper Networks Junos OS en la serie SRX permite a un atacante no autenticado y basado en red causar una denegación de servicio (DoS).\n\nSi un dispositivo de la serie SRX recibe un mensaje de solicitud de modificación de portador (Modify Bearer Request) del protocolo de tunelización GPRS (GTP) específicamente malformado, se adquiere un bloqueo y nunca se libera. Esto resulta en que otros hilos no pueden adquirir un bloqueo por sí mismos, causando un tiempo de espera del watchdog que lleva a un fallo y reinicio del FPC. Este problema lleva a una interrupción completa del tráfico hasta que el dispositivo se haya recuperado automáticamente.\n\nEste problema afecta a Junos OS en la serie SRX:\n\n  *  todas las versiones anteriores a 22.4R3-S8,\n  *  versiones 23.2 anteriores a 23.2R2-S5,\n  *  versiones 23.4 anteriores a 23.4R2-S6,\n  *  versiones 24.2 anteriores a 24.2R2-S3,\n  *  versiones 24.4 anteriores a 24.4R2-S2,\n  *  versiones 25.2 anteriores a 25.2R1-S1, 25.2R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "57F66641-003B-49D6-A9B9-AB300CFE3C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "11340C63-A638-420C-85C9-1B4438C88D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "279E59FE-96DF-4E1D-A3A2-61D180F04533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF1798-F3C2-4645-96E7-1E82368B184D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BB5EE1-04C7-4DF3-807A-06005ECFEEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B7572BB-9C77-4214-9C5F-CC83C7B93E37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CAADBF98-38BE-40E2-AF1B-9077DCED0809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7B9DEB-7472-4010-8717-8050555C2FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE06B18-BFB5-4029-A05D-386CFBFBF683"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A1DCCD-208C-46D9-8E14-89592B49AB9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5942B6E-AFC7-40E4-8007-68C804BD52E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F893F-7B06-43B5-8653-A8D9794C052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462CFD52-D3E2-4F7A-98AC-C589D2420556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106015",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106015",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21917",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:07.877",
      "lastModified" : "2026-01-23T19:41:44.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\nIf an SRX device configured for UTM Web-Filtering receives a specifically malformed SSL packet, this will cause an FPC crash and restart.\nThis issue affects Junos OS on SRX Series:\n\n\n\n  *  23.2 versions from 23.2R2-S2 before 23.2R2-S5, \n  *  23.4 versions from 23.4R2-S1 before 23.4R2-S5,\n  *  24.2 versions before 24.2R2-S2,\n  *  24.4 versions before 24.4R1-S3, 24.4R2.\n\n\nEarlier versions of Junos are also affected, but no fix is available."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación incorrecta de la corrección sintáctica de la entrada en el módulo de filtrado web de Juniper Networks Junos OS en la serie SRX permite a un atacante no autenticado y basado en red causar una denegación de servicio (DoS).\n\nSi un dispositivo SRX configurado para filtrado web UTM recibe un paquete SSL específicamente malformado, esto causará un fallo y reinicio del FPC.\nEste problema afecta a Junos OS en la serie SRX:\n\n  *  Versiones 23.2 desde 23.2R2-S2 anteriores a 23.2R2-S5,\n  *  Versiones 23.4 desde 23.4R2-S1 anteriores a 23.4R2-S5,\n  *  Versiones 24.2 anteriores a 24.2R2-S2,\n  *  Versiones 24.4 anteriores a 24.4R1-S3, 24.4R2.\n\nLas versiones anteriores de Junos también están afectadas, pero no hay una solución disponible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1286"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEF1798-F3C2-4645-96E7-1E82368B184D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE06B18-BFB5-4029-A05D-386CFBFBF683"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A1DCCD-208C-46D9-8E14-89592B49AB9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5942B6E-AFC7-40E4-8007-68C804BD52E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F893F-7B06-43B5-8653-A8D9794C052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462CFD52-D3E2-4F7A-98AC-C589D2420556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA105996",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA105996",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21918",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:08.050",
      "lastModified" : "2026-01-23T19:41:38.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On all SRX and MX Series platforms, when during TCP session establishment a specific sequence of packets is encountered a double free happens. This causes flowd to crash and the respective FPC to restart.\n\n\n\n\n\nThis issue affects Junos OS on SRX and MX Series:\n\n\n\n  *  all versions before 22.4R3-S7,\n  *  23.2 versions before 23.2R2-S3,\n  *  23.4 versions before 23.4R2-S4,\n  *  24.2 versions before 24.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de doble liberación en el demonio de procesamiento de flujo (flowd) de Juniper Networks Junos OS en las series SRX y MX permite a un atacante no autenticado y basado en red causar una Denegación de Servicio (DoS). En todas las plataformas de las series SRX y MX, cuando durante el establecimiento de una sesión TCP se encuentra una secuencia específica de paquetes, ocurre una doble liberación. Esto provoca que flowd se bloquee y que el FPC respectivo se reinicie.\n\nEste problema afecta a Junos OS en las series SRX y MX:\n\n  *  todas las versiones anteriores a 22.4R3-S7,\n  *  versiones 23.2 anteriores a 23.2R2-S3,\n  *  versiones 23.4 anteriores a 23.4R2-S4,\n  *  versiones 24.2 anteriores a 24.2R2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "57F66641-003B-49D6-A9B9-AB300CFE3C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F7BB7E-3A52-4C23-A4D2-50E75C912AFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7FB0CC-624D-4AB9-A7AC-BB19838C3B22"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE06B18-BFB5-4029-A05D-386CFBFBF683"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A1DCCD-208C-46D9-8E14-89592B49AB9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5942B6E-AFC7-40E4-8007-68C804BD52E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F893F-7B06-43B5-8653-A8D9794C052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462CFD52-D3E2-4F7A-98AC-C589D2420556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106018",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106018",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21920",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:08.217",
      "lastModified" : "2026-01-23T18:51:59.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\n\nIf an SRX Series device configured for DNS processing, receives a specifically formatted DNS request flowd will crash and restart, which causes a service interruption until the process has recovered.\n\nThis issue affects Junos OS on SRX Series:\n\n\n\n  *  23.4 versions before 23.4R2-S5,\n  *  24.2 versions before 24.2R2-S1,\n  *  24.4 versions before 24.4R2.\n\n\n\n\n\n\nThis issue does not affect Junos OS versions before 23.4R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de valor de retorno no verificado en el módulo DNS de Juniper Networks Junos OS en la serie SRX permite a un atacante no autenticado y basado en la red causar una denegación de servicio (DoS).\n\nSi un dispositivo de la serie SRX configurado para el procesamiento de DNS recibe una solicitud DNS específicamente formateada, flowd se bloqueará y reiniciará, lo que causa una interrupción del servicio hasta que el proceso se haya recuperado.\n\nEste problema afecta a Junos OS en la serie SRX:\n\n  *  versiones 23.4 anteriores a 23.4R2-S5,\n  *  versiones 24.2 anteriores a 24.2R2-S1,\n  *  versiones 24.4 anteriores a 24.4R2.\n\nEste problema no afecta a las versiones de Junos OS anteriores a 23.4R1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "175CCB13-76C0-44A4-A71D-41E22B92EB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "166BFDB3-1945-4949-BC2B-E18442FF2E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5923610F-878C-48CA-8B5D-9C609E4DD4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C207E3-0252-4192-8E8C-E2ED2831B4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E6974492-FE69-4340-8881-61C3329C1545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89524D6D-0B22-4952-AD8E-8072C5A05D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD69A194-1B03-44EA-8092-79BD10C6F729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8463ADB4-B8A7-4D63-97A9-232ED713A21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE68337F-106E-4317-A5B6-292B0159F577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "266B520A-482A-43F7-90F8-B9D64D30034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C452BDCB-34E3-42D3-8909-2312356EB70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8158F2-2028-40E9-955F-CFD581A32F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7233A1-EC7A-4458-9AE1-835480A03A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "D74087E2-5CAA-4085-8408-EB70EC1D5D91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE06B18-BFB5-4029-A05D-386CFBFBF683"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48A1DCCD-208C-46D9-8E14-89592B49AB9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5942B6E-AFC7-40E4-8007-68C804BD52E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826F893F-7B06-43B5-8653-A8D9794C052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462CFD52-D3E2-4F7A-98AC-C589D2420556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106020",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106020",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21921",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-01-15T21:16:08.400",
      "lastModified" : "2026-01-23T18:52:35.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privileges to cause a Denial-of-Service (DoS).\n\nWhen telemetry collectors are frequently subscribing and unsubscribing to sensors continuously over a long period of time, telemetry-capable processes like chassisd, rpd or mib2d will crash and restart, which - depending on the process - can cause a complete outage until the system has recovered.\n\nThis issue affects:\n\n Junos OS: \n\n\n\n  *  all versions before 22.4R3-S8,\n  *  23.2 versions before 23.2R2-S5,\n  *  23.4 versions before 23.4R2;\n\n\n\n\nJunos OS Evolved:\n\n\n\n  *  all versions before 22.4R3-S8-EVO,\n  *  23.2 versions before 23.2R2-S5-EVO,\n  *  23.4 versions before 23.4R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Uso Después de Liberar en el demonio de chasis (chassisd) de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante basado en red autenticado con bajos privilegios causar una Denegación de Servicio (DoS).\n\nCuando los recolectores de telemetría se suscriben y anulan la suscripción a sensores frecuentemente y de forma continua durante un largo período de tiempo, los procesos con capacidad de telemetría como chassisd, rpd o mib2d se bloquearán y reiniciarán, lo cual - dependiendo del proceso - puede causar una interrupción completa hasta que el sistema se haya recuperado.\n\nEste problema afecta:\n\nJunos OS:\n\n  *  todas las versiones anteriores a 22.4R3-S8,\n  *  versiones 23.2 anteriores a 23.2R2-S5,\n  *  versiones 23.4 anteriores a 23.4R2;\n\nJunos OS Evolved:\n\n  *  todas las versiones anteriores a 22.4R3-S8-EVO,\n  *  versiones 23.2 anteriores a 23.2R2-S5-EVO,\n  *  versiones 23.4 anteriores a 23.4R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "57F66641-003B-49D6-A9B9-AB300CFE3C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1379EF30-AF04-4F98-8328-52A631F24737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1A77D6-D3AD-481B-979C-8F778530B175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3A064B6B-A99B-4D8D-A62D-B00C7870BC30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "40813417-A938-4F74-A419-8C5188A35486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC1BA1A-DF0E-4B15-86BA-24C60E546732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB967BF-3495-476D-839A-9DBFCBE69F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5688D6-DCA4-4550-9CD1-A3D792252129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB98579-FA33-4E41-A162-A46E9709FBD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2562F-FB18-4347-8497-7D61B8157EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "60A1E37B-1990-44D9-87FE-300678243BE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D306ED88-8700-4FD4-8919-3C85728C04C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "11340C63-A638-420C-85C9-1B4438C88D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A78CC80-E8B1-4CDA-BB35-A61833657FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3B2FE1-C228-46BE-AC76-70C2687050AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B16FF0-900F-4AEE-B670-A537139F6909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B227E831-30FF-4BE1-B8B2-31829A5610A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FB32DF-D062-4FB9-8777-452978BEC7B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B6C811-5C10-4486-849D-5559B592350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "078D61B9-A228-453C-9D20-6F9C6B20637F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F136A0-021D-43FE-BDD3-AD7201F7FC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78481ABC-3620-410D-BC78-334657E0BB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A5BA3-87BD-473A-B229-2AAB2C797005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B74AC3E-8FC9-400A-A176-4F7F21F10756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "A9925263-E7B7-49AA-8271-AF320F355B80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0A33C425-921F-4795-B834-608C8F1597E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "93887799-F62C-4A4A-BCF5-004D0B4D4154"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62C473D2-2612-4480-82D8-8A24D0687BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "7FB4C5CA-A709-4B13-A9E0-372098A72AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "04CE952D-E3C1-4B34-9E65-EC52BFE887AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE9D1A7-4721-4E1D-B965-FDC38126B1DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8643AA3-29EF-48A7-B033-CB60988E214B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9800BA03-E6BF-4212-B2E7-69C0FD27D294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACCA655D-C542-44F1-B183-4C864CFF2D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6D499B19-A91A-4B76-B1CB-6A07A4CB212B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B2830C-26EE-446E-B0C3-B5E43AD897B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7367E6-B491-4A1F-B9D7-BC86A15A0773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "72A89D1E-9EA4-4959-9F54-84F1F99A4ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "01980CDF-A5CE-480D-BCED-BD5E29E4DE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6ECC3B-657C-4475-95B0-1FD18B076BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEAA7FD-385F-4221-907E-65ABC16BE4BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "558D234D-BC50-415F-86D6-8E19D6C3ACE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F4EEEE-77E9-4973-A770-99E7BA2F05F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A4BB6910-B994-45FD-8153-5EC00EE842E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D657944B-2066-4F2C-BC92-EDF4DE1C165C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "75A58924-6348-44CF-AB39-1FCE17FE81AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9A903B31-D9E5-43FA-B09F-7E7769803720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "E23BEA27-77F8-4CDF-A49A-FEF9C33DA513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7F0D73-85EE-4A07-B51B-6BF52ECBA75E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE777A1F-9CD9-426E-AF1C-FBE01EB9A4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7147BA60-30A5-4CED-9AAF-F6BEA0528B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5CE59B-14B2-4F4C-81B5-0430EC954956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA106021",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA106021",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0915",
      "sourceIdentifier" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
      "published" : "2026-01-15T22:16:12.457",
      "lastModified" : "2026-01-23T19:36:50.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."
      }, {
        "lang" : "es",
        "value" : "Llamar a getnetbyaddr o getnetbyaddr_r con un nsswitch.conf configurado que especifica el backend DNS de la biblioteca para redes y consulta una red con valor cero en la GNU C Library versión 2.0 hasta la versión 2.42 puede filtrar el contenido de la pila al resolvedor DNS configurado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "2.42",
            "matchCriteriaId" : "45D5C7C8-E53C-4AA3-97A6-1DFCBE5ED529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
        "source" : "3ff69d7a-14f2-4f67-a097-88dee7810d18",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/16/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1008",
      "sourceIdentifier" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
      "published" : "2026-01-15T23:15:50.970",
      "lastModified" : "2026-01-23T19:34:53.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques.\nThe injected payload is persisted and executed when other users view the affected profile page, potentially allowing session token theft, phishing attacks, or malicious redirects. Exploitation requires an authenticated account and user interaction to view the crafted profile."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en los campos de texto del perfil de usuario de Altium 365. Una sanitización de entrada insuficiente por parte del servidor permite a los usuarios autenticados inyectar cargas útiles arbitrarias de HTML y JavaScript utilizando técnicas de omisión de análisis de atributos basadas en espacios en blanco.\nLa carga útil inyectada se persiste y se ejecuta cuando otros usuarios ven la página de perfil afectada, lo que podría permitir el robo de tokens de sesión, ataques de phishing o redirecciones maliciosas. La explotación requiere una cuenta autenticada e interacción del usuario para ver el perfil manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altium:altium_live:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C3257-AC40-4BC5-BEBA-492D4DECCFC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.altium.com/platform/security-compliance/security-advisories",
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1009",
      "sourceIdentifier" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
      "published" : "2026-01-15T23:15:51.153",
      "lastModified" : "2026-01-23T19:32:23.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post.\nSuccessful exploitation allows the attacker’s payload to execute in the context of the victim’s authenticated Altium 365 session, enabling unauthorized access to workspace data, including design files and workspace settings. Exploitation requires user interaction to view a malicious forum post."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) almacenado existe en el Foro de Altium debido a la falta de sanitización de entrada del lado del servidor en el contenido de las publicaciones del foro. Un atacante autenticado puede inyectar JavaScript arbitrario en las publicaciones del foro, el cual se almacena y ejecuta cuando otros usuarios ven la publicación afectada.\nLa explotación exitosa permite que la carga útil del atacante se ejecute en el contexto de la sesión autenticada de Altium 365 de la víctima, lo que permite el acceso no autorizado a los datos del espacio de trabajo, incluyendo archivos de diseño y configuraciones del espacio de trabajo. La explotación requiere interacción del usuario para ver una publicación de foro maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altium:altium_live:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C3257-AC40-4BC5-BEBA-492D4DECCFC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.altium.com/platform/security-compliance/security-advisories",
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1010",
      "sourceIdentifier" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
      "published" : "2026-01-15T23:15:51.323",
      "lastModified" : "2026-01-23T19:31:41.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data.\n\nWhen an administrator views the affected workflow, the injected payload executes in the administrator’s browser context, allowing privilege escalation, including creation of new administrator accounts, session token theft, and execution of administrative actions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) almacenado existe en el Altium Workflow Engine debido a la falta de saneamiento de entrada del lado del servidor en las API de envío de formularios de flujo de trabajo. Un usuario autenticado regular puede inyectar JavaScript arbitrario en los datos del flujo de trabajo.\n\nCuando un administrador ve el flujo de trabajo afectado, la carga útil inyectada se ejecuta en el contexto del navegador del administrador, permitiendo la escalada de privilegios, incluyendo la creación de nuevas cuentas de administrador, el robo de tokens de sesión y la ejecución de acciones administrativas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altium:on-prem_enterprise_server:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEBB57C-6A6D-4FC9-BA14-8324F1F7661C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.altium.com/platform/security-compliance/security-advisories",
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1012",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-15T23:15:51.493",
      "lastModified" : "2026-01-15T23:15:51.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22045",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T23:15:51.593",
      "lastModified" : "2026-01-23T19:29:05.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.35 and 3.6.7, there is a potential vulnerability in Traefik ACME TLS certificates' automatic generation: the ACME TLS-ALPN fast path can allow unauthenticated clients to tie up go routines and file descriptors indefinitely when the ACME TLS challenge is enabled. A malicious client can open many connections, send a minimal ClientHello with acme-tls/1, then stop responding, leading to denial of service of the entry point. The vulnerability is fixed in 2.11.35 and 3.6.7."
      }, {
        "lang" : "es",
        "value" : "Traefik es un proxy inverso HTTP y balanceador de carga. Antes de 2.11.35 y 3.6.7, existe una potencial vulnerabilidad en la generación automática de certificados TLS ACME de Traefik: la ruta rápida ACME TLS-ALPN puede permitir a clientes no autenticados acaparar go routines y descriptores de archivo indefinidamente cuando el desafío ACME TLS está habilitado. Un cliente malicioso puede abrir muchas conexiones, enviar un ClientHello mínimo con acme-tls/1, luego dejar de responder, lo que lleva a una denegación de servicio del punto de entrada. La vulnerabilidad está corregida en 2.11.35 y 3.6.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.35",
            "matchCriteriaId" : "84C034EA-1F19-462D-9472-68F1CAA93115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "44AA42E3-588B-4741-B128-74C761D1B5FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/commit/e9f3089e9045812bcf1b410a9d40568917b26c3d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.11.35",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v3.6.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-cwjm-3f7h-9hwq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22863",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T23:15:51.767",
      "lastModified" : "2026-01-21T14:35:52.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server secrets. This vulnerability is fixed in 2.6.0."
      }, {
        "lang" : "es",
        "value" : "Deno es un entorno de ejecución de JavaScript, TypeScript y WebAssembly. Antes de la versión 2.6.0, node:crypto no finaliza el cifrado. La vulnerabilidad permite a un atacante tener cifrados infinitos. Esto puede llevar a intentos ingenuos de fuerza bruta, así como a ataques más refinados con el objetivo de aprender los secretos del servidor. Esta vulnerabilidad está corregida en la versión 2.6.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-325"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.0",
            "matchCriteriaId" : "BC8E481E-2055-46D7-B260-FB8A88E610D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/releases/tag/v2.6.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-5379-f5hf-w38v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22864",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-15T23:15:51.937",
      "lastModified" : "2026-01-21T14:32:39.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and therefore can be bypassed when the extension uses alternate casing (for example .BAT, .Bat, etc.). This vulnerability is fixed in 2.5.6."
      }, {
        "lang" : "es",
        "value" : "Deno es un entorno de ejecución de JavaScript, TypeScript y WebAssembly. Antes de 2.5.6, un parche anterior tenía como objetivo bloquear la ejecución de archivos batch/shell de Windows devolviendo un error cuando la extensión de una ruta ejecutada coincidía con .bat o .cmd. Esa verificación realiza una comparación que distingue entre mayúsculas y minúsculas contra literales en minúsculas y por lo tanto puede ser eludida cuando la extensión utiliza un uso de mayúsculas y minúsculas alternativo (por ejemplo, .BAT, .Bat, etc.). Esta vulnerabilidad está corregida en 2.5.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.6",
            "matchCriteriaId" : "D302E8AF-7ACC-4470-B0AB-B865727AE026"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/releases/tag/v2.5.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-m3c4-prhw-mrx6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1011",
      "sourceIdentifier" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
      "published" : "2026-01-16T00:16:29.050",
      "lastModified" : "2026-01-23T20:26:55.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing server-side input sanitization. Although the client interface applies HTML escaping, the backend accepts and stores arbitrary HTML and JavaScript supplied via modified POST requests.\n\nThe injected content is rendered verbatim when support cases are viewed by other users, including support staff with elevated privileges, allowing execution of arbitrary JavaScript in the victim’s browser context."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el endpoint AddComment del Centro de Soporte de Altium debido a la falta de sanitización de entrada del lado del servidor. Aunque la interfaz del cliente aplica escape de HTML, el backend acepta y almacena HTML y JavaScript arbitrarios suministrados a través de solicitudes POST modificadas.\n\nEl contenido inyectado se renderiza textualmente cuando otros usuarios ven los casos de soporte, incluido el personal de soporte con privilegios elevados, lo que permite la ejecución de JavaScript arbitrario en el contexto del navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altium:altium_live:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1.39",
            "matchCriteriaId" : "079E28E9-A5B9-49AF-8D96-B56C46DB5231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.altium.com/platform/security-compliance/security-advisories",
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1018",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-16T03:16:18.110",
      "lastModified" : "2026-01-23T20:29:22.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Base de Datos de Estadísticas Policiales desarrollado por Gotac tiene una vulnerabilidad de lectura arbitraria de archivos, permitiendo a un atacante remoto no autenticado explotar el salto de ruta absoluto para descargar archivos arbitrarios del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotac:police_statistics_database_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "39D39287-7704-4250-A93D-652FEEDA891C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10637-3e4b3-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1019",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-16T03:16:18.363",
      "lastModified" : "2026-01-23T20:29:51.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Base de Datos de Estadísticas Policiales desarrollado por Gotac tiene una vulnerabilidad de autenticación faltante, permitiendo a atacantes remotos no autenticados leer, modificar y eliminar el contenido de la base de datos mediante el uso de una funcionalidad específica."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotac:police_statistics_database_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "66845D9D-5CE2-491A-9E08-25B86A3251CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10637-3e4b3-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1020",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-16T03:16:18.590",
      "lastModified" : "2026-01-23T20:25:02.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Police Statistics Database System developed by Gotac has a Absolute Path Traversal vulnerability, allowing unauthenticated remote attackers to enumerate the system file directory."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Base de Datos de Estadísticas Policiales desarrollado por Gotac tiene una vulnerabilidad de Salto de Ruta Absoluto, que permite a atacantes remotos no autenticados enumerar el directorio de archivos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotac:police_statistics_database_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "66845D9D-5CE2-491A-9E08-25B86A3251CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10637-3e4b3-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1021",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-16T03:16:18.817",
      "lastModified" : "2026-01-23T20:24:35.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Police Statistics Database System developed by Gotac has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attacker to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Base de Datos de Estadísticas Policiales desarrollado por Gotac tiene una vulnerabilidad de carga de archivos arbitrarios, permitiendo a un atacante remoto no autenticado subir y ejecutar puertas traseras web shell, lo que permite la ejecución de código arbitrario en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotac:police_statistics_database_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "39D39287-7704-4250-A93D-652FEEDA891C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10637-3e4b3-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1022",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-16T04:15:49.113",
      "lastModified" : "2026-01-23T20:23:02.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Base de Datos de Estadísticas desarrollado por Gotac tiene una vulnerabilidad de lectura arbitraria de archivos, permitiendo a atacantes remotos no autenticados explotar el salto de ruta relativo para descargar archivos arbitrarios del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotac:statistics_database_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "D5CB577D-47DC-41BA-8435-EF35023F14A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10640-0fd0b-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10639-813ad-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1023",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-16T04:15:49.320",
      "lastModified" : "2026-01-23T20:20:47.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Base de Datos de Estadísticas desarrollado por Gotac tiene una vulnerabilidad de Autenticación Faltante, permitiendo a atacantes remotos no autenticados explotar directamente una funcionalidad específica para consultar el contenido de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotac:statistics_database_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "535F25EA-9BFB-4B96-9F05-D621A6E157C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10640-0fd0b-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10639-813ad-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23709",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-16T04:15:49.483",
      "lastModified" : "2026-01-16T04:15:49.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23710",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-16T04:15:49.563",
      "lastModified" : "2026-01-16T04:15:49.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23711",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-16T04:15:49.623",
      "lastModified" : "2026-01-16T04:15:49.623",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23712",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-16T04:15:49.687",
      "lastModified" : "2026-01-16T04:15:49.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23713",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-16T04:15:49.747",
      "lastModified" : "2026-01-16T04:15:49.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23714",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-16T04:15:49.807",
      "lastModified" : "2026-01-16T04:15:49.807",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0858",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-01-16T05:16:16.117",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to arbitrary script execution in the context of applications that render the SVG."
      }, {
        "lang" : "es",
        "value" : "Versiones del paquete net.sourceforge.plantuml:plantuml anteriores a 1.2026.0 son vulnerables a XSS Almacenado debido a una sanitización insuficiente de atributos interactivos en diagramas de GraphViz. Como resultado, un diagrama PlantUML manipulado puede inyectar JavaScript malicioso en la salida SVG generada, lo que lleva a la ejecución arbitraria de scripts en el contexto de aplicaciones que renderizan el SVG."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plantuml:plantuml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2026.0",
            "matchCriteriaId" : "9E36C622-030B-42A0-9663-4E1071E0882C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/plantuml/plantuml/commit/6826315db092d2e432aeab1a0894e08017c6e4bd",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/plantuml/plantuml/releases/tag/v1.2026.0",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-NETSOURCEFORGEPLANTUML-14552230",
        "source" : "report@snyk.io",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1000",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T05:16:17.283",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including, 3.1.3. This is due to missing capability checks on the resetIntegration() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's integration settings, delete all plugin options, and drop the plugin's database tables (woo_mailerlite_carts and woo_mailerlite_jobs), resulting in complete loss of plugin data including customer abandoned cart information and sync job history."
      }, {
        "lang" : "es",
        "value" : "El plugin de integración MailerLite - WooCommerce para WordPress es vulnerable a la modificación y eliminación no autorizadas de datos en todas las versiones hasta la 3.1.3, inclusive. Esto se debe a la falta de comprobaciones de capacidad en la función resetIntegration(). Esto hace posible que atacantes autenticados, con acceso de nivel de Suscriptor y superior, restablezcan la configuración de integración del plugin, eliminen todas las opciones del plugin y eliminen las tablas de la base de datos del plugin (woo_mailerlite_carts y woo_mailerlite_jobs), lo que resulta en una pérdida completa de los datos del plugin, incluyendo información de carritos abandonados de clientes e historial de trabajos de sincronización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-mailerlite/tags/3.1.3/admin/controllers/WooMailerLiteAdminSettingsController.php#L231",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-mailerlite/tags/3.1.3/includes/WooMailerLite.php#L127",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-mailerlite/tags/3.1.3/includes/migrations/WooMailerLiteMigration.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3415073%40woo-mailerlite%2Ftrunk&old=3399626%40woo-mailerlite%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e20deec4-f40c-4bd3-91f7-6a9d643a5520?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0975",
      "sourceIdentifier" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
      "published" : "2026-01-16T06:15:51.187",
      "lastModified" : "2026-01-20T19:20:21.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics DIAView has Command Injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "Delta Electronics DIAView tiene vulnerabilidad de inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:diaview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "F27FF503-4356-4F27-9A1A-15F4680501BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00002_DIAView%20-Exposed%20Dangerous%20Method%20Remote%20Code%20Execution%20(CVE-2026-0975).pdf",
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23768",
      "sourceIdentifier" : "cve@navercorp.com",
      "published" : "2026-01-16T06:15:51.333",
      "lastModified" : "2026-01-23T17:26:59.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@navercorp.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute missing a file extension."
      }, {
        "lang" : "es",
        "value" : "lucy-xss-filter antes del commit 7c1de6d permite a un atacante inducir solicitudes HEAD del lado del servidor a URLs arbitrarias cuando la opción ObjectSecurityListener o EmbedSecurityListener está habilitada y se utilizan etiquetas embed u object con un atributo src al que le falta una extensión de archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@navercorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naver:lucy-xss-filter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-06-08",
            "matchCriteriaId" : "EE152946-8B7E-490F-986A-D584F6CC5D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.naver.com/detail/cve-2026-23768.html",
        "source" : "cve@navercorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/naver/lucy-xss-filter/pull/31",
        "source" : "cve@navercorp.com",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23769",
      "sourceIdentifier" : "cve@navercorp.com",
      "published" : "2026-01-16T06:15:51.483",
      "lastModified" : "2026-01-23T17:19:04.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@navercorp.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files."
      }, {
        "lang" : "es",
        "value" : "lucy-xss-filter antes del commit e5826c0 permite a un atacante ejecutar JavaScript malicioso debido a una sanitización incorrecta causada por archivos de reglas de superconjunto predeterminados mal configurados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@navercorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naver:lucy-xss-filter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-06-08",
            "matchCriteriaId" : "EE152946-8B7E-490F-986A-D584F6CC5D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.naver.com/detail/cve-2026-23769.html",
        "source" : "cve@navercorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/naver/lucy-xss-filter/pull/32",
        "source" : "cve@navercorp.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0916",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T07:15:56.667",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'related_posts_by_tax' shortcode in all versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Related Posts por Taxonomy para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'related_posts_by_tax' del plugin en todas las versiones hasta la 2.7.6, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/related-posts-by-taxonomy/tags/2.7.6/includes/functions.php#L259",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/related-posts-by-taxonomy/tags/2.7.7/includes/functions.php#L259",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0582fe7d-884c-4019-837a-861d36ccc842?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0939",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T07:15:56.840",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possible for unauthenticated attackers to manipulate WooCommerce order statuses, either marking unpaid orders as paid, or failed."
      }, {
        "lang" : "es",
        "value" : "El plugin Rede Itaú para WooCommerce para WordPress es vulnerable a la manipulación del estado de los pedidos debido a una verificación insuficiente de la autenticidad de los datos en todas las versiones hasta e incluyendo la 5.1.2. Esto se debe a que el plugin no verifica la autenticidad de las devoluciones de llamada de pago. Esto hace posible que atacantes no autenticados manipulen los estados de los pedidos de WooCommerce, ya sea marcando pedidos no pagados como pagados, o fallidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-rede/tags/5.1.2/Includes/LknIntegrationRedeForWoocommerceWcEndpoint.php#L45",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-rede/tags/5.1.2/Includes/LknIntegrationRedeForWoocommerceWcEndpoint.php#L460",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-rede/tags/5.1.2/Includes/LknIntegrationRedeForWoocommerceWcEndpoint.php#L710",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3441046/woo-rede/tags/5.1.3/Includes/LknIntegrationRedeForWoocommerceWcEndpoint.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/722c666b-913f-4289-82e6-30aa0a3abc2b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0942",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T07:15:57.030",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs() function in all versions up to, and including, 5.1.5. This makes it possible for unauthenticated attackers to delete the Rede Order Logs metadata from all WooCommerce orders."
      }, {
        "lang" : "es",
        "value" : "El plugin Rede Itaú para WooCommerce — Pago PIX, Tarjeta de Crédito y Débito para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidad en la función clearOrderLogs() en todas las versiones hasta la 5.1.2, inclusive. Esto hace posible que atacantes no autenticados eliminen los metadatos de los Registros de Pedidos de Rede de todos los pedidos de WooCommerce."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-rede/tags/5.1.2/Includes/LknIntegrationRedeForWoocommerceWcEndpoint.php#L42",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-rede/tags/5.1.2/Includes/LknIntegrationRedeForWoocommerceWcEndpoint.php#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4927c060-f2b2-4916-b049-1442bba63e98?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1003",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T08:15:46.557",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access and above, to delete any post on the WordPress site, including posts authored by other users."
      }, {
        "lang" : "es",
        "value" : "El plugin GetGenie para WordPress es vulnerable a una omisión de autorización en todas las versiones hasta la 4.3.0, inclusive. Esto se debe a que el plugin no verifica correctamente que un usuario está autorizado para eliminar una publicación específica. Esto hace posible que atacantes autenticados, con acceso de nivel Autor y superior, eliminen cualquier publicación en el sitio de WordPress, incluidas las publicaciones creadas por otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/getgenie/trunk/app/Api/GetGenieChat.php#L153",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3436920/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/38ec647a-3c0c-4d3c-ba34-64c17803867b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0913",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T09:16:20.760",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'usp_access' shortcode in all versions up to, and including, 20260110 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin User Submitted Posts – Enable Users a Submit Posts from the Front End para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'usp_access' del plugin en todas las versiones hasta, e incluyendo, 20260110 debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/user-submitted-posts/tags/20251210/library/shortcode-access.php#L20",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3439027/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/85bf7a1b-3c54-40c9-8f19-fcb9dd478a0e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1004",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T09:16:21.407",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.5.5 via the 'eael_product_quickview_popup' function. This makes it possible for unauthenticated attackers to retrieve WooCommerce product information for products with draft, pending, or private status, which should normally be restricted."
      }, {
        "lang" : "es",
        "value" : "El plugin Essential Addons para Elementor para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta la 6.5.5 inclusive a través de la función 'eael_product_quickview_popup'. Esto hace posible que atacantes no autenticados recuperen información de productos de WooCommerce para productos con estado de borrador, pendiente o privado, que normalmente debería estar restringida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WPDevelopers/essential-addons-for-elementor-lite/commit/4e43db06bcf12870cc3b185ed59b3fe2cd227945",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Traits/Ajax_Handler.php#L1439",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Traits/Ajax_Handler.php#L64",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Traits/Ajax_Handler.php#L65",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Traits/Ajax_Handler.php#L820",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Traits/Ajax_Handler.php#L832",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/06ef9a21-e2b9-40c7-9de5-cff175fa10a5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20759",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-16T09:16:22.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, which may allow a logged-in user with the low(\"monitoring user\") or higher privilege to execute an arbitrary OS command."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos del sistema operativo existe en múltiples cámaras de red de la serie TRIFORA 3 proporcionadas por TOA Corporation, lo que podría permitir a un usuario autenticado con el privilegio bajo ('usuario de monitoreo') o superior ejecutar un comando arbitrario del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN08087148/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.toa-products.com/securityinfo/pdf/tv2025-001jp.pdf",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20894",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-16T09:16:22.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesses the setting screen."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de cross-site scripting en múltiples cámaras de red serie TRIFORA 3 proporcionadas por TOA Corporation. Si un administrador atacante configura el producto afectado con alguna entrada maliciosa, un script arbitrario puede ser ejecutado en el navegador de un administrador víctima que accede a la pantalla de configuración."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN08087148/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.toa-products.com/securityinfo/pdf/tv2025-001jp.pdf",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22876",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-16T09:16:23.013",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If this vulnerability is exploited, arbitrary files on the affected product may be retrieved by a logged-in user with the low(\"monitoring user\") or higher privilege."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta existe en múltiples cámaras de red de la serie TRIFORA 3 proporcionadas por TOA Corporation. Si se explota esta vulnerabilidad, archivos arbitrarios en el producto afectado pueden ser recuperados por un usuario autenticado con privilegios bajos ('usuario de monitoreo') o superiores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN08087148/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.toa-products.com/securityinfo/pdf/tv2025-001jp.pdf",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0612",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-01-16T13:16:11.677",
      "lastModified" : "2026-01-23T17:00:47.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian."
      }, {
        "lang" : "es",
        "value" : "El libreríario contiene una vulnerabilidad de fuga de información a través de la herramienta 'web_fetch', que puede ser utilizada para recuperar contenido externo arbitrario proporcionado por un atacante, lo que puede ser utilizado para redirigir solicitudes a través de la infraestructura de El libreríario. El proveedor ha corregido la vulnerabilidad en todas las versiones de TheLibrarian."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mindgard.ai/blog/thelibrarian-ios-ai-security-",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://thelibrarian.io/",
        "source" : "cret@cert.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0613",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-01-16T13:16:11.780",
      "lastModified" : "2026-01-23T17:00:11.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions."
      }, {
        "lang" : "es",
        "value" : "El Librarian contiene una vulnerabilidad interna de escaneo de puertos, facilitada por la herramienta 'web_fetch', que puede ser utilizada con un comportamiento de tipo SSRF para realizar solicitudes GET a direcciones IP y servicios internos, permitiendo el escaneo del entorno de nube de Hertzner que utiliza TheLibrarian. El proveedor ha corregido la vulnerabilidad en todas las versiones afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://thelibrarian.io/",
        "source" : "cret@cert.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0615",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-01-16T13:16:11.873",
      "lastModified" : "2026-01-23T16:59:52.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running processes within TheLibrarian backend.  The vendor has fixed the vulnerability in all affected versions."
      }, {
        "lang" : "es",
        "value" : "La página de estado de 'supervisord' de The Librarian puede ser recuperada por la herramienta 'web_fetch', la cual puede ser utilizada para recuperar procesos en ejecución dentro del backend de TheLibrarian. El proveedor ha corregido la vulnerabilidad en todas las versiones afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mindgard.ai/blog/thelibrarian-ios-ai-security-",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://thelibrarian.io/",
        "source" : "cret@cert.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0616",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-01-16T13:16:11.960",
      "lastModified" : "2026-01-23T16:59:34.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions."
      }, {
        "lang" : "es",
        "value" : "La herramienta web_fetch de TheLibrarians puede usarse para recuperar el contenido de la interfaz de Adminer, que luego puede usarse para iniciar sesión en el sistema de backend interno de TheLibrarian. El proveedor ha corregido la vulnerabilidad en todas las versiones afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://thelibrarian.io/",
        "source" : "cret@cert.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0695",
      "sourceIdentifier" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
      "published" : "2026-01-16T14:15:54.793",
      "lastModified" : "2026-01-27T13:15:54.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ConnectWise PSA versions older than 2026.1, Time Entry notes stored in the Time Entry Audit Trail may be rendered without applying output encoding to certain content. Under specific conditions, this may allow stored script code to execute in the context of a user’s browser when the affected content is displayed."
      }, {
        "lang" : "es",
        "value" : "En versiones de ConnectWise PSA anteriores a 2026.1, las notas de entrada de tiempo almacenadas en la Pista de Auditoría de Entrada de Tiempo pueden ser renderizadas sin aplicar codificación de salida a cierto contenido. Bajo condiciones específicas, esto puede permitir que código de script almacenado se ejecute en el contexto del navegador de un usuario cuando el contenido afectado se muestra."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:professional_service_automation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.1",
            "matchCriteriaId" : "CFB3E3A9-C554-4A40-9AB0-4881B9C30293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.connectwise.com/company/trust/security-bulletins/2026-01-15-psa-security-fix",
        "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2026-0695",
        "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0696",
      "sourceIdentifier" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
      "published" : "2026-01-16T14:15:54.940",
      "lastModified" : "2026-01-27T13:15:54.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values."
      }, {
        "lang" : "es",
        "value" : "En versiones de ConnectWise PSA anteriores a la 2026.1, ciertas cookies de sesión no se configuraron con el atributo HttpOnly. En algunos escenarios, esto podría permitir que scripts del lado del cliente accedieran a los valores de las cookies de sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:professional_service_automation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.1",
            "matchCriteriaId" : "CFB3E3A9-C554-4A40-9AB0-4881B9C30293"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.connectwise.com/company/trust/security-bulletins/2026-01-15-psa-security-fix",
        "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2026-0696",
        "source" : "7d616e1a-3288-43b1-a0dd-0a65d3e70a49"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0823",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-16T14:15:55.070",
      "lastModified" : "2026-01-16T14:15:55.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21623",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2026-01-16T15:15:54.733",
      "lastModified" : "2026-01-30T18:42:53.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla."
      }, {
        "lang" : "es",
        "value" : "Falta de filtrado de entrada conduce a una vulnerabilidad XSS persistente en el manejo de publicaciones del foro del componente Easy Discuss para Joomla."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@joomla.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@joomla.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackideas:easydiscuss:*:*:*:*:*:joomla\\!:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "5.0.15",
            "matchCriteriaId" : "1F4EB9D6-4491-4616-8485-B1FDFF3B88E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://stackideas.com/easydiscuss",
        "source" : "security@joomla.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21624",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2026-01-16T15:15:54.873",
      "lastModified" : "2026-01-30T18:43:24.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla."
      }, {
        "lang" : "es",
        "value" : "Falta de filtrado de entrada conduce a una vulnerabilidad XSS persistente en el manejo del texto del avatar del usuario del componente Easy Discuss para Joomla."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@joomla.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@joomla.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackideas:easydiscuss:*:*:*:*:*:joomla\\!:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "5.0.15",
            "matchCriteriaId" : "1F4EB9D6-4491-4616-8485-B1FDFF3B88E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://stackideas.com/easydiscuss",
        "source" : "security@joomla.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21625",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2026-01-16T15:15:55.017",
      "lastModified" : "2026-01-30T18:45:43.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening."
      }, {
        "lang" : "es",
        "value" : "Cargas proporcionadas por el usuario al componente Easy Discuss para Joomla no se validan correctamente. Las cargas se verifican puramente por extensiones de archivo, no se realizan comprobaciones de tipo MIME."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@joomla.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@joomla.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackideas:easydiscuss:*:*:*:*:*:joomla\\!:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "5.0.15",
            "matchCriteriaId" : "1F4EB9D6-4491-4616-8485-B1FDFF3B88E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://stackideas.com/easydiscuss",
        "source" : "security@joomla.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0949",
      "sourceIdentifier" : "20be33e2-bf35-4d13-8fad-18bd2f3e3659",
      "published" : "2026-01-16T17:15:54.047",
      "lastModified" : "2026-02-10T17:25:39.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is then executed by any user accessing the chart. By default only the superuser and users with pem_admin or pem_super_admin privileges are able to access the Manage Charts menu."
      }, {
        "lang" : "es",
        "value" : "Las versiones de PEM anteriores a la 9.8.1 están afectadas por una vulnerabilidad de cross-site scripting (XSS) almacenado que permite a los usuarios con acceso al menú 'Manage Charts' inyectar JavaScript arbitrario al crear un nuevo gráfico, el cual es luego ejecutado por cualquier usuario que acceda al gráfico. Por defecto, solo el superusuario y los usuarios con privilegios pem_admin o pem_super_admin pueden acceder al menú 'Manage Charts'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "20be33e2-bf35-4d13-8fad-18bd2f3e3659",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "20be33e2-bf35-4d13-8fad-18bd2f3e3659",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprisedb:postgres_enterprise_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.8.1",
            "matchCriteriaId" : "36756BDF-F614-4035-B6CC-1BED2359F574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.enterprisedb.com/docs/security/advisories/cve20260949/",
        "source" : "20be33e2-bf35-4d13-8fad-18bd2f3e3659",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22782",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T17:15:54.343",
      "lastModified" : "2026-02-09T20:47:26.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. From >= 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret (and expected signature), which exposes the secret to log readers and enables forged RPC calls. In crates/ecstore/src/rpc/http_auth.rs, the invalid signature branch logs sensitive data. This log line includes secret and expected_signature, both derived from the shared HMAC key. Any invalidly signed request triggers this path. The function is reachable from RPC and admin request handlers. This vulnerability is fixed in 1.0.0-alpha.80."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. Desde &gt;= 1.0.0-alpha.1 hasta 1.0.0-alpha.79, las firmas RPC inválidas hacen que el servidor registre el secreto HMAC compartido (y la firma esperada), lo que expone el secreto a los lectores de registros y permite llamadas RPC falsificadas. En crates/ecstore/src/rpc/http_auth.rs, la rama de firma inválida registra datos sensibles. Esta línea de registro incluye secret y expected_signature, ambos derivados de la clave HMAC compartida. Cualquier solicitud firmada inválidamente activa esta ruta. La función es accesible desde los manejadores de solicitudes RPC y de administración. Esta vulnerabilidad está corregida en 1.0.0-alpha.80."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha1:*:*:*:rust:*:*",
            "matchCriteriaId" : "454A2F3A-76CF-4F2D-97FE-AEDEBE8FF1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha10:*:*:*:rust:*:*",
            "matchCriteriaId" : "32B2D146-7920-4C6D-B42F-1BDDF5193394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha11:*:*:*:rust:*:*",
            "matchCriteriaId" : "B25BC365-35BA-438A-B5B1-3FA696767821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha12:*:*:*:rust:*:*",
            "matchCriteriaId" : "B69213F1-7D94-4185-9309-FF3140733550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD2476D6-257C-4A96-BED4-D8B002402242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*",
            "matchCriteriaId" : "774EC64C-73ED-4D6B-893B-30A066DA934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B567F4F-131F-4D4B-8C0C-9212F22F2BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*",
            "matchCriteriaId" : "711F7641-A2B2-410B-B05D-6656F9A1798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB79AC62-2B79-441C-BC09-4C834C32EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*",
            "matchCriteriaId" : "62DE84EE-9F3B-460A-AC13-D2B8CCBC5B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*",
            "matchCriteriaId" : "DEF70599-6550-49D2-9800-FE3249A66568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha2:*:*:*:rust:*:*",
            "matchCriteriaId" : "550786BD-A6A4-454B-BDAB-67AE64DABCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDFE93A5-B6D7-482A-A891-4D8844604C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*",
            "matchCriteriaId" : "79AC4F00-B006-46C2-863F-2946BB02B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*",
            "matchCriteriaId" : "E313A243-ED56-498D-988F-E088693EBB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*",
            "matchCriteriaId" : "D3A60CB7-1F01-4A60-8555-C225AC89B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*",
            "matchCriteriaId" : "1C98618D-CF5D-406B-8AA5-34B412F3D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*",
            "matchCriteriaId" : "98373960-FEDB-4933-92D5-2A597045DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*",
            "matchCriteriaId" : "83E0E1A5-3C07-45FF-80FD-0DB375E1575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*",
            "matchCriteriaId" : "C2D66076-4005-4F58-A8E2-69062053D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*",
            "matchCriteriaId" : "1D8CB0F5-299F-4BB0-B264-F5642DD991C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*",
            "matchCriteriaId" : "96E20418-FE0C-4202-8771-FFF8EBB1B62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha3:*:*:*:rust:*:*",
            "matchCriteriaId" : "C16A625B-3FC4-48EB-9107-6E7585080D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*",
            "matchCriteriaId" : "810A17F9-AEEA-4396-B437-120789BBE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*",
            "matchCriteriaId" : "7B1FECD4-E993-417D-AEA7-F8E97DC6A5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*",
            "matchCriteriaId" : "3839F299-E0E7-4994-A8AC-B67A534C9847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*",
            "matchCriteriaId" : "46CAEA4E-5DFD-4668-ABF0-DC53EB04EE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*",
            "matchCriteriaId" : "591075AB-81EF-4D42-A2A0-FA28BC6B78CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*",
            "matchCriteriaId" : "FD46ED07-6DCC-4BF8-A4E8-78B2FF6DCE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*",
            "matchCriteriaId" : "6DF15533-D6E1-49B0-B30A-6FEECC7AE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*",
            "matchCriteriaId" : "EC68F03A-D299-4BFB-A99E-4B08E4E0848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*",
            "matchCriteriaId" : "0DD60024-CAB2-4DA6-A9CA-503D2631E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*",
            "matchCriteriaId" : "32470ED0-7873-41A3-B2D5-7CD444ED0A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha4:*:*:*:rust:*:*",
            "matchCriteriaId" : "A88E9293-4B7C-4C52-9943-47197DB55D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*",
            "matchCriteriaId" : "E2EFC74D-40E7-426C-9F7B-3B654F2B940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*",
            "matchCriteriaId" : "EAAF504E-51A5-492B-887E-BB67788B899C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*",
            "matchCriteriaId" : "35C83244-D2C7-4D70-9C0B-D0590B00C608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*",
            "matchCriteriaId" : "429E4ECD-997A-4D3B-9DE2-60835AE14473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*",
            "matchCriteriaId" : "5DDDBAA5-D207-498C-A6F0-79F07806C511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*",
            "matchCriteriaId" : "81758B85-6D2B-4914-96EC-E4CCDE2F9A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*",
            "matchCriteriaId" : "D439B484-E32D-4A6A-84EE-9307A028F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDA137F7-DC8A-44F4-8061-F502AC8DD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*",
            "matchCriteriaId" : "AE3EF7B3-E8C0-4844-9165-3A26EB426615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB40D926-AE20-46A7-9B6E-ED1BADB9A08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha5:*:*:*:rust:*:*",
            "matchCriteriaId" : "7F5E8DE5-ABB0-4884-B473-07FA596A8707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*",
            "matchCriteriaId" : "3A43A950-59A6-4343-815A-953C11DC3F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B36190-C30B-45BC-9738-BE0B3321025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*",
            "matchCriteriaId" : "86A2967C-E2C6-4C73-9BDE-CCECACDB2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*",
            "matchCriteriaId" : "5E10A654-E265-4469-8099-ABBB1F5D8BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*",
            "matchCriteriaId" : "762591A8-A0A2-45D2-B15F-1E85DFC5CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*",
            "matchCriteriaId" : "53DE196C-1914-40AE-854D-4988073D57C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha6:*:*:*:rust:*:*",
            "matchCriteriaId" : "2B55C391-0232-4F06-A9D8-3663FA564E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha7:*:*:*:rust:*:*",
            "matchCriteriaId" : "54AB158B-F536-4627-8C6B-65AEE112FDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*",
            "matchCriteriaId" : "96461CC0-012C-40D7-B1CB-FF9A6B7EB644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha79:*:*:*:rust:*:*",
            "matchCriteriaId" : "9AA7AE2E-83E3-4796-8569-16030DB2CF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha8:*:*:*:rust:*:*",
            "matchCriteriaId" : "F800AEB3-3AD7-42D8-BC3A-23703851435B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha9:*:*:*:rust:*:*",
            "matchCriteriaId" : "5821FADC-CF73-4639-911A-F3302D239B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/blob/9e162b6e9ebb874cc1d06a7b33bc4a05786578aa/crates/ecstore/src/rpc/http_auth.rs#L115-L122",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rustfs/rustfs/commit/6b2eebee1d07399ef02c0863bd515b4412a5a560",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-333v-68xh-8mmq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23523",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T17:15:54.480",
      "lastModified" : "2026-02-09T20:45:56.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0."
      }, {
        "lang" : "es",
        "value" : "Dive es una aplicación de escritorio de host MCP de código abierto que permite la integración con LLM de llamada a funciones. Antes de 0.13.0, un deeplink manipulado puede instalar una configuración de servidor MCP controlada por el atacante sin suficiente confirmación del usuario y puede llevar a la ejecución arbitraria de comandos locales en la máquina de la víctima. Esta vulnerabilidad se corrige en 0.13.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openagentplatform:dive:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.0",
            "matchCriteriaId" : "5CEE8F57-062C-4DA5-86AF-AE6FE89FCA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenAgentPlatform/Dive/commit/a5162ac9eff366d8ea1215b8a47139a81a55a779",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-pjj5-f3wm-f9m8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23528",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T17:15:54.640",
      "lastModified" : "2026-03-12T18:29:56.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting (XSS) bug in the Dask dashboard. It is possible for attackers to craft a phishing URL that assumes Jupyter Lab and Dask may be running on localhost and using default ports. If a user clicks on the malicious link it will open an error page in the Dask Dashboard via the Jupyter Lab proxy which will cause code to be executed by the default Jupyter Python kernel. This vulnerability is fixed in 2026.1.0."
      }, {
        "lang" : "es",
        "value" : "Dask distributed es un planificador de tareas distribuido para Dask. Antes de 2026.1.0, cuando Jupyter Lab, jupyter-server-proxy y Dask distributed se ejecutan todos juntos, es posible crear una URL que resultará en la ejecución de código por parte de Jupyter debido a un error de cross-site-scripting (XSS) en el panel de control de Dask. Es posible para los atacantes crear una URL de phishing que asume que Jupyter Lab y Dask pueden estar ejecutándose en localhost y usando puertos predeterminados. Si un usuario hace clic en el enlace malicioso, se abrirá una página de error en el panel de control de Dask a través del proxy de Jupyter Lab, lo que hará que se ejecute código por el kernel de Python predeterminado de Jupyter. Esta vulnerabilidad está corregida en 2026.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        }, {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anaconda:dask:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2026.1.0",
            "matchCriteriaId" : "45205ECC-5053-492F-8C7E-06EA48E6EEEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dask/distributed/commit/ab72092a8a938923c2bb51a2cd14ca26614827fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dask/distributed/security/advisories/GHSA-c336-7962-wfj2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23529",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T17:15:54.783",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to 2.11.0, there is an arbitrary file read in Google BigQuery Sink connector. Aiven's Google BigQuery Kafka Connect Sink connector requires Google Cloud credential configurations for authentication to BigQuery services. During connector configuration, users can supply credential JSON files that are processed by Google authentication libraries. The service fails to validate externally-sourced credential configurations before passing them to the authentication libraries. An attacker can exploit this by providing a malicious credential configuration containing crafted credential_source.file paths or credential_source.url endpoints, resulting in arbitrary file reads or SSRF attacks."
      }, {
        "lang" : "es",
        "value" : "El Conector de Kafka Connect para BigQuery es una implementación de un conector de sumidero de Apache Kafka a Google BigQuery. Antes de la versión 2.11.0, existe una lectura arbitraria de archivos en el conector de sumidero de Google BigQuery. El conector de sumidero de Kafka Connect para Google BigQuery de Aiven requiere configuraciones de credenciales de Google Cloud para la autenticación a los servicios de BigQuery. Durante la configuración del conector, los usuarios pueden proporcionar archivos JSON de credenciales que son procesados por las librerías de autenticación de Google. El servicio no valida las configuraciones de credenciales de origen externo antes de pasarlas a las librerías de autenticación. Un atacante puede explotar esto al proporcionar una configuración de credenciales maliciosa que contenga rutas credential_source.file manipuladas o puntos finales credential_source.url, lo que resulta en lecturas arbitrarias de archivos o ataques SSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloud.google.com/support/bulletins#gcp-2025-005",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/commit/20ea3921c6fe72d605a033c1943b20f49eaba981",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/releases/tag/v2.11.0",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/security/advisories/GHSA-3mg8-2g53-5gj4",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0629",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-01-16T18:16:09.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security."
      }, {
        "lang" : "es",
        "value" : "Omisión de autenticación en la función de recuperación de contraseña de la interfaz web local en múltiples modelos de cámaras VIGI permite a un atacante en la LAN restablecer la contraseña de administrador sin verificación manipulando el estado del lado del cliente. Los atacantes pueden obtener acceso administrativo completo al dispositivo, comprometiendo la configuración y la seguridad de la red."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/us/support/faq/4906/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.vigi.com/en/support/download/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.vigi.com/in/support/download/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.vigi.com/us/support/download/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T19:16:19.117",
      "lastModified" : "2026-03-13T14:19:34.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2."
      }, {
        "lang" : "es",
        "value" : "pyasn1 es una librería ASN.1 genérica para Python. Antes de la versión 0.6.2, se ha encontrado un problema de denegación de servicio que provoca el agotamiento de la memoria debido a un RELATIVE-OID malformado con octetos de continuación excesivos. Esta vulnerabilidad está corregida en la versión 0.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyasn1:pyasn1:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.6.2",
            "matchCriteriaId" : "C70B68D3-480C-4132-84A7-CF1C31714EB2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23535",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T19:16:19.407",
      "lastModified" : "2026-02-18T16:26:25.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2."
      }, {
        "lang" : "es",
        "value" : "wlc es un cliente de línea de comandos de Weblate que utiliza la API REST de Weblate. Antes de la versión 1.17.2, la descarga de múltiples traducciones podría escribir en una ubicación arbitraria cuando era instruida por un servidor malicioso. Esta vulnerabilidad está corregida en la versión 1.17.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:wlc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.2",
            "matchCriteriaId" : "FE9E9EAB-FA37-452C-8726-AC707E423550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WeblateOrg/wlc/commit/216e691c6e50abae97fe2e4e4f21501bf49a585f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/pull/1128",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/releases/tag/1.17.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/WeblateOrg/wlc/security/advisories/GHSA-mmwx-79f6-67jg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23634",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:49.733",
      "lastModified" : "2026-03-04T14:43:21.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pepr is a type safe K8s middleware. Prior to 1.0.5 , Pepr defaults to a cluster-admin RBAC configuration and does not explicitly force or enforce least-privilege guidance for module authors. The default behavior exists to make the “getting started” experience smooth: new users can experiment with Pepr and create resources dynamically without needing to pre-configure RBAC. This vulnerability is fixed in 1.0.5."
      }, {
        "lang" : "es",
        "value" : "Pepr es un middleware de K8s con seguridad de tipos. Antes de la versión 1.0.5, Pepr se configura por defecto con una configuración RBAC de cluster-admin y no fuerza ni impone explícitamente directrices de mínimo privilegio para los autores de módulos. Este comportamiento predeterminado existe para que la experiencia de 'primeros pasos' sea fluida: los nuevos usuarios pueden experimentar con Pepr y crear recursos dinámicamente sin necesidad de preconfigurar RBAC. Esta vulnerabilidad se corrige en la versión 1.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-272"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:defenseunicorns:pepr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "DC7900DF-C37E-4D04-9745-4A3E414A3806"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/defenseunicorns/pepr/releases/tag/v1.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/defenseunicorns/pepr/security/advisories/GHSA-w54x-r83c-x79q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23645",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:49.880",
      "lastModified" : "2026-01-30T19:32:11.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is self-hosted, open source personal knowledge management software. Prior to 3.5.4-dev2, a Stored Cross-Site Scripting (XSS) vulnerability exists in SiYuan Note. The application does not sanitize uploaded SVG files. If a user uploads and views a malicious SVG file (e.g., imported from an untrusted source), arbitrary JavaScript code is executed in the context of their authenticated session. This vulnerability is fixed in 3.5.4-dev2."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un software de gestión de conocimiento personal de código abierto y autoalojado. Antes de la versión 3.5.4-dev2, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en SiYuan Note. La aplicación no sanitiza los archivos SVG subidos. Si un usuario sube y visualiza un archivo SVG malicioso (por ejemplo, importado de una fuente no confiable), se ejecuta código JavaScript arbitrario en el contexto de su sesión autenticada. Esta vulnerabilidad se ha corregido en la versión 3.5.4-dev2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "D3F308D6-1396-4488-9382-0EE485C9289C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:3.5.4:dev1:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB8C612-80B3-4D14-9454-D444D227FA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/commit/11115da3d0de950593ee4ce375cf7f9018484388",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/issues/16844",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-pcjq-j3mq-jv5j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23722",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.017",
      "lastModified" : "2026-01-30T18:27:52.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the WeGIA system, specifically within the html/memorando/insere_despacho.php file. The application fails to properly sanitize or encode user-supplied input via the id_memorando GET parameter before reflecting it into the HTML source (likely inside a <script> block or an attribute). This allows unauthenticated attackers to inject arbitrary JavaScript or HTML into the context of the user's browser session. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un Gestor Web para Instituciones Benéficas. Antes de 3.6.2, se descubrió una vulnerabilidad de cross-site scripting (XSS) reflejado en el sistema WeGIA, específicamente dentro del archivo html/memorando/insere_despacho.PHP. La aplicación no logra sanear o codificar correctamente la entrada proporcionada por el usuario a través del parámetro GET id_memorando antes de reflejarla en el código fuente HTML (probablemente dentro de un bloque "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g7hh-6qj7-mcqf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23723",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.163",
      "lastModified" : "2026-01-30T18:28:51.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured environments. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la 3.6.2, se identificó una vulnerabilidad de inyección SQL autenticada en el endpoint Atendido_ocorrenciaControle a través del parámetro id_memorando. Esta falla permite la exfiltración completa de la base de datos, la exposición de PII sensible y posibles lecturas arbitrarias de archivos en entornos mal configurados. Esta vulnerabilidad está corregida en la 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xfmp-2hf9-gfjp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23724",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.310",
      "lastModified" : "2026-01-30T18:29:45.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the html/atendido/cadastro_ocorrencia.php endpoint of the WeGIA application. The application does not sanitize user-controlled data before rendering it inside the “Atendido” selection dropdown. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Previo a la 3.6.2, se identificó una vulnerabilidad de cross-site scripting (XSS) almacenado en el endpoint html/atendido/cadastro_ocorrencia.php de la aplicación WeGIA. La aplicación no sanitiza los datos controlados por el usuario antes de renderizarlos dentro del menú desplegable de selección 'Atendido'. Esta vulnerabilidad está corregida en la 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-3r3q-8573-g3cq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23725",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.460",
      "lastModified" : "2026-01-30T18:29:24.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the html/pet/adotantes/cadastro_adotante.php and html/pet/adotantes/informacao_adotantes.php endpoint of the WeGIA application. The application does not sanitize user-controlled input before rendering it inside the Adopters Information table, allowing persistent JavaScript injection. Any user who visits the page will have the payload executed automatically. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la 3.6.2, se identificó una vulnerabilidad de cross-site scripting (XSS) almacenado en el endpoint html/pet/adotantes/cadastro_adotante.PHP y html/pet/adotantes/informacao_adotantes.PHP de la aplicación WeGIA. La aplicación no sanea la entrada controlada por el usuario antes de renderizarla dentro de la tabla de Información de Adoptantes, lo que permite la inyección persistente de JavaScript. A cualquier usuario que visite la página se le ejecutará la carga útil automáticamente. Esta vulnerabilidad está corregida en la 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-c85q-4fwg-99gw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23726",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.597",
      "lastModified" : "2026-01-30T18:29:14.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=TipoEntradaControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la versión 3.6.2, una vulnerabilidad de redirección abierta fue identificada en el endpoint /WeGIA/controle/control.php de la aplicación WeGIA, específicamente a través del parámetro nextPage cuando se combina con metodo=listarTodos y nomeClasse=TipoEntradaControle. La aplicación no valida ni restringe el parámetro nextPage, permitiendo a los atacantes redirigir a los usuarios a sitios web externos arbitrarios. Esto puede ser utilizado indebidamente para ataques de phishing, robo de credenciales, distribución de malware e ingeniería social utilizando el dominio de confianza de WeGIA. Esta vulnerabilidad está corregida en la versión 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-h7qx-j7g3-7fx3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23727",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.740",
      "lastModified" : "2026-01-30T18:29:51.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=TipoSaidaControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de 3.6.2, se identificó una vulnerabilidad de redirección abierta en el endpoint /WeGIA/controle/control.php de la aplicación WeGIA, específicamente a través del parámetro nextPage cuando se combina con metodo=listarTodos y nomeClasse=TipoSaidaControle. La aplicación no valida ni restringe el parámetro nextPage, permitiendo a los atacantes redirigir a los usuarios a sitios web externos arbitrarios. Esto puede ser explotado para ataques de phishing, robo de credenciales, distribución de malware e ingeniería social utilizando el dominio de confianza de WeGIA. Esta vulnerabilidad está corregida en 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-pmq9-8p4w-m4f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23728",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:50.890",
      "lastModified" : "2026-01-30T18:29:58.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=DestinoControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la versión 3.6.2, se identificó una vulnerabilidad de redirección abierta en el endpoint /WeGIA/controle/control.php de la aplicación WeGIA, específicamente a través del parámetro nextPage cuando se combina con metodo=listarTodos y nomeClasse=DestinoControle. La aplicación no valida ni restringe el parámetro nextPage, lo que permite a los atacantes redirigir a los usuarios a sitios web externos arbitrarios. Esto puede ser utilizado indebidamente para ataques de phishing, robo de credenciales, distribución de malware e ingeniería social utilizando el dominio de confianza de WeGIA. Esta vulnerabilidad está corregida en la versión 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jf25-p56f-wpgh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23729",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:51.047",
      "lastModified" : "2026-01-30T18:30:09.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarDescricao and nomeClasse=ProdutoControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la 3.6.2, se identificó una vulnerabilidad de redirección abierta en el endpoint /WeGIA/controle/control.php de la aplicación WeGIA, específicamente a través del parámetro nextPage cuando se combina con metodo=listarDescricao y nomeClasse=ProdutoControle. La aplicación no valida ni restringe el parámetro nextPage, permitiendo a los atacantes redirigir a los usuarios a sitios web externos arbitrarios. Esto puede ser explotado para ataques de phishing, robo de credenciales, distribución de malware e ingeniería social utilizando el dominio de confianza de WeGIA. Esta vulnerabilidad se corrigió en la 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-w88p-v7h6-m728",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23730",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:51.183",
      "lastModified" : "2026-01-30T18:30:19.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=ProdutoControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de 3.6.2, se encontró una vulnerabilidad de redirección abierta en el endpoint /WeGIA/controle/control.PHP de la aplicación WeGIA, específicamente a través del parámetro nextPage cuando se combina con metodo=listarTodos y nomeClasse=ProdutoControle. La aplicación no valida ni restringe el parámetro nextPage, permitiendo a los atacantes redirigir a los usuarios a sitios web externos arbitrarios. Esto puede ser explotado para ataques de phishing, robo de credenciales, distribución de malware e ingeniería social utilizando el dominio de confianza de WeGIA. Esta vulnerabilidad está corregida en 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-6gx4-6gwv-cxc3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23731",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:51.327",
      "lastModified" : "2026-01-30T18:30:32.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to 3.6.2, The web application is vulnerable to clickjacking attacks. The WeGIA application does not send any defensive HTTP headers related to framing protection. In particular, X-Frame-Options is missing andContent-Security-Policy with frame-ancestors directive is not configured. Because of this, an attacker can load any WeGIA page inside a malicious HTML document, overlay deceptive elements, hide real buttons, or force accidental interaction with sensitive workflows. This vulnerability is fixed in 3.6.2."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Anterior a 3.6.2, la aplicación web es vulnerable a ataques de clickjacking. La aplicación WeGIA no envía ningún encabezado HTTP defensivo relacionado con la protección contra el encuadre. En particular, falta X-Frame-Options y Content-Security-Policy con la directiva frame-ancestors no está configurado. Debido a esto, un atacante puede cargar cualquier página de WeGIA dentro de un documento HTML malicioso, superponer elementos engañosos, ocultar botones reales o forzar la interacción accidental con flujos de trabajo sensibles. Esta vulnerabilidad está corregida en 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "419B3A85-5754-4198-A73E-92A9DA8E7A68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/pull/1333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-99qp-hjvh-c59q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23735",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:51.473",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GraphQL Modules is a toolset of libraries and guidelines dedicated to create reusable, maintainable, testable and extendable modules out of your GraphQL server. From 2.2.1 to before 2.4.1 and 3.1.1, when 2 or more parallel requests are made which trigger the same service, the context of the requests is mixed up in the service when the context is injected via @ExecutionContext(). ExecutionContext is often used to pass authentication tokens from incoming requests to services loading data from backend APIs. This vulnerability is fixed in 2.4.1 and 3.1.1."
      }, {
        "lang" : "es",
        "value" : "GraphQL Modules es un conjunto de herramientas de bibliotecas y directrices dedicado a crear módulos reutilizables, mantenibles, testeables y extensibles a partir de tu servidor GraphQL. Desde la versión 2.2.1 hasta antes de la 2.4.1 y la 3.1.1, cuando se realizan 2 o más solicitudes paralelas que activan el mismo servicio, el contexto de las solicitudes se mezcla en el servicio cuando el contexto se inyecta a través de @ExecutionContext(). ExecutionContext se utiliza a menudo para pasar tokens de autenticación de solicitudes entrantes a servicios que cargan datos de APIs de backend. Esta vulnerabilidad se corrige en las versiones 2.4.1 y 3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/graphql-hive/graphql-modules/issues/2613",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/graphql-hive/graphql-modules/pull/2521",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/graphql-hive/graphql-modules/releases/tag/release-1768575025568",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23742",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:51.613",
      "lastModified" : "2026-02-18T16:28:20.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skipper is an HTTP router and reverse proxy for service composition. The default skipper configuration before 0.23.0 was -lua-sources=inline,file. The problem starts if untrusted users can create lua filters, because of -lua-sources=inline , for example through a Kubernetes Ingress resource. The configuration inline allows these user to create a script that is able to read the filesystem accessible to the skipper process and if the user has access to read the logs, they an read skipper secrets. This vulnerability is fixed in 0.23.0."
      }, {
        "lang" : "es",
        "value" : "Skipper es un router HTTP y proxy inverso para composición de servicios. La configuración predeterminada de Skipper antes de la versión 0.23.0 era -lua-sources=inline,file. El problema comienza si usuarios no confiables pueden crear filtros Lua, debido a -lua-sources=inline, por ejemplo, a través de un recurso Ingress de Kubernetes. La configuración inline permite a estos usuarios crear un script que es capaz de leer el sistema de archivos accesible al proceso de Skipper y, si el usuario tiene acceso para leer los registros, puede leer los secretos de Skipper. Esta vulnerabilidad se corrige en la versión 0.23.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-250"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zalando:skipper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.23.0",
            "matchCriteriaId" : "B0D14C02-AFA2-4DFF-BFE2-65B34B7B0F81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zalando/skipper/commit/0b52894570773b29e2f3c571b94b4211ef8fa714",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zalando/skipper/releases/tag/v0.23.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/zalando/skipper/security/advisories/GHSA-cc8m-98fm-rc9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23744",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T20:15:51.763",
      "lastModified" : "2026-03-13T14:19:59.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch."
      }, {
        "lang" : "es",
        "value" : "MCPJam inspector es la plataforma de desarrollo local-first para servidores MCP. Las versiones 1.4.2 y anteriores tienen una vulnerabilidad de ejecución remota de código (RCE), que permite a un atacante enviar una solicitud HTTP manipulada que desencadena la instalación de un servidor MCP, lo que lleva a un RCE. Dado que MCPJam inspector por defecto escucha en 0.0.0.0 en lugar de 127.0.0.1, un atacante puede provocar la RCE de forma remota a través de una simple solicitud HTTP. La versión 1.4.3 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcpjam:inspector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "5D462285-6F2E-445A-B169-77B9CC71AD45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MCPJam/inspector/commit/e6b9cf9d9e6c9cbec31493b1bdca3a1255fe3e7a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23643",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T21:15:51.543",
      "lastModified" : "2026-02-23T20:51:11.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1."
      }, {
        "lang" : "es",
        "value" : "CakePHP es un framework de desarrollo rápido para PHP. El método PaginatorHelper::limitControl() tiene una vulnerabilidad de cross-site-scripting a través de la manipulación de parámetros de cadena de consulta. Este problema ha sido solucionado en 5.2.12 y 5.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.10",
            "versionEndExcluding" : "5.2.12",
            "matchCriteriaId" : "DACDDE3A-55B3-43F0-A030-07372FDEC42B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:5.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DEA383-8A1A-47C5-B1B9-BB4FEF91024D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bakery.cakephp.org/2026/01/14/cakephp_5212.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/commit/c842e7f45d85696e6527d8991dd72f525ced955f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/issues/19172",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/releases/tag/5.2.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/releases/tag/5.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/security/advisories/GHSA-qh8m-9qxx-53m5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23800",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-16T21:15:52.037",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Asignación Incorrecta de Privilegios en Modular DS modular-connector permite la escalada de privilegios. Este problema afecta a Modular DS: desde 2.5.2 antes de 2.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/wordpress/plugin/modular-connector/vulnerability/wordpress-modular-ds-plugin-2-5-2-privilege-escalation-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20960",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-16T22:16:25.553",
      "lastModified" : "2026-02-12T18:37:37.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Autorización indebida en Microsoft Power Apps permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:power_apps:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "3.25121",
            "matchCriteriaId" : "423B0F12-FF16-46E8-BE55-4ED350A963EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20960",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21223",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-16T22:16:25.983",
      "lastModified" : "2026-02-22T17:16:54.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally."
      }, {
        "lang" : "es",
        "value" : "El Servicio de Elevación de Microsoft Edge expone una interfaz COM privilegiada que valida de forma inadecuada los privilegios del proceso llamador. Un usuario local estándar (no administrador) puede invocar el método de interfaz IElevatorEdge LaunchUpdateCmdElevatedAndWait, haciendo que el servicio ejecute comandos de actualización privilegiados como LocalSystem.\nEsto permite a un no administrador habilitar o deshabilitar la Seguridad Basada en Virtualización (VBS) de Windows modificando claves de registro de sistema protegidas bajo HKLM\\SYSTEM\\CurrentControlSet\\Control\\DeviceGuard. Deshabilitar VBS debilita protecciones críticas de la plataforma como Credential Guard, la Integridad de Código Protegida por Hipervisor (HVCI) y el kernel seguro, lo que resulta en una omisión de característica de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.3719.82",
            "matchCriteriaId" : "004B4A9D-AEC7-40B6-9C4D-A249AF5EB048"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21223",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23745",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T22:16:26.830",
      "lastModified" : "2026-02-18T16:20:07.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3."
      }, {
        "lang" : "es",
        "value" : "node-tar es un Tar para Node.js. La biblioteca node-tar (&lt;= 7.5.2) no sanea la ruta de enlace de las entradas Link (enlace duro) y SymbolicLink cuando preservePaths es falso (el comportamiento seguro predeterminado). Esto permite a archivos maliciosos eludir la restricción de la raíz de extracción, lo que lleva a la Sobrescritura Arbitraria de Archivos mediante enlaces duros y al Envenenamiento de Symlink mediante destinos de symlink absolutos. Esta vulnerabilidad está corregida en 7.5.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isaacs:tar:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.5.3",
            "matchCriteriaId" : "BF78DB31-ACED-49B8-ABE8-ADD4C5E4DAF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22816",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T23:15:50.127",
      "lastModified" : "2026-02-18T16:17:00.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these exceptions, Gradle would continue to the next repository in the list and potentially resolve dependencies from a different repository. If a Gradle build used an unresolvable host name, Gradle would continue to work as long as all dependencies could be resolved from another repository. An unresolvable host name could be caused by allowing a repository's domain name registration to lapse or typo-ing the real domain name. This behavior could allow an attacker to register a service under the host name used by the build and serve malicious artifacts. The attack requires the repository to be listed before others in the build configuration. Gradle has introduced a change in behavior in Gradle 9.3.0 to stop searching other repositories when encountering these errors."
      }, {
        "lang" : "es",
        "value" : "Gradle es una herramienta de automatización de compilaciones, y su herramienta de plataforma nativa proporciona enlaces Java para APIs nativas. Al resolver dependencias en versiones anteriores a la 9.3.0, algunas excepciones no eran tratadas como errores fatales y no causarían la desactivación de un repositorio. Si una compilación encontraba una de estas excepciones, Gradle continuaría con el siguiente repositorio en la lista y potencialmente resolvería dependencias de un repositorio diferente. Si una compilación de Gradle utilizaba un nombre de host irresoluble, Gradle seguiría funcionando siempre y cuando todas las dependencias pudieran resolverse desde otro repositorio. Un nombre de host irresoluble podría ser causado por permitir que el registro del nombre de dominio de un repositorio caduque o por escribir mal el nombre de dominio real. Este comportamiento podría permitir a un atacante registrar un servicio bajo el nombre de host utilizado por la compilación y servir artefactos maliciosos. El ataque requiere que el repositorio esté listado antes que otros en la configuración de la compilación. Gradle ha introducido un cambio en el comportamiento en Gradle 9.3.0 para dejar de buscar otros repositorios al encontrar estos errores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        }, {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.14.4",
            "matchCriteriaId" : "641EFE35-6227-4F41-A541-BB1B5410310E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.3.0",
            "matchCriteriaId" : "734289A3-4267-4B9A-B4C0-1BC498FDC907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-w78c-w6vf-rw82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22865",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-16T23:15:50.280",
      "lastModified" : "2026-02-18T16:16:01.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these exceptions, Gradle would continue to the next repository in the list and potentially resolve dependencies from a different repository. An exception like NoHttpResponseException can indicate transient errors. If the errors persist after a maximum number of retries, Gradle would continue to the next repository. This behavior could allow an attacker to disrupt the service of a repository and leverage another repository to serve malicious artifacts. This attack requires the attacker to have control over a repository after the disrupted repository. Gradle has introduced a change in behavior in Gradle 9.3.0 to stop searching other repositories when encountering these errors."
      }, {
        "lang" : "es",
        "value" : "Gradle es una herramienta de automatización de compilación, y su herramienta de plataforma nativa proporciona enlaces Java para APIs nativas. Al resolver dependencias en versiones anteriores a la 9.3.0, algunas excepciones no se trataban como errores fatales y no causarían la deshabilitación de un repositorio. Si una compilación encontraba una de estas excepciones, Gradle continuaría con el siguiente repositorio de la lista y potencialmente resolvería dependencias de un repositorio diferente. Una excepción como NoHttpResponseException puede indicar errores transitorios. Si los errores persisten después de un número máximo de reintentos, Gradle continuaría con el siguiente repositorio. Este comportamiento podría permitir a un atacante interrumpir el servicio de un repositorio y aprovechar otro repositorio para servir artefactos maliciosos. Este ataque requiere que el atacante tenga control sobre un repositorio después del repositorio interrumpido. Gradle ha introducido un cambio de comportamiento en Gradle 9.3.0 para dejar de buscar en otros repositorios al encontrar estos errores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        }, {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.14.4",
            "matchCriteriaId" : "641EFE35-6227-4F41-A541-BB1B5410310E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.3.0",
            "matchCriteriaId" : "734289A3-4267-4B9A-B4C0-1BC498FDC907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-mqwm-5m85-gmcv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0517",
      "sourceIdentifier" : "SecurityResponse@netmotionsoftware.com",
      "published" : "2026-01-17T01:15:51.030",
      "lastModified" : "2026-02-02T16:01:42.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure\n Access Server prior to 14.20. An attacker can send a specially crafted packet \nto a server and cause the server to crash"
      }, {
        "lang" : "es",
        "value" : "CVE-2026-0517 es una vulnerabilidad de denegación de servicio en versiones de Secure Access Server anteriores a la 14.20. Un atacante puede enviar un paquete especialmente diseñado a un servidor y provocar que el servidor se bloquee."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "SecurityResponse@netmotionsoftware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.20",
            "matchCriteriaId" : "0037723E-6D5A-4D4C-91CC-7EB085C4CF61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-0517",
        "source" : "SecurityResponse@netmotionsoftware.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0518",
      "sourceIdentifier" : "SecurityResponse@netmotionsoftware.com",
      "published" : "2026-01-17T02:15:49.470",
      "lastModified" : "2026-02-02T16:03:47.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CVE-2026-0518 is a cross-site scripting vulnerability in versions of \nSecure Access prior to 14.20. An attacker with administrative privileges\n can interfere with another administrator’s use of the console."
      }, {
        "lang" : "es",
        "value" : "CVE-2026-0518 es una vulnerabilidad de cross-site scripting en versiones de Secure Access anteriores a la 14.20. Un atacante con privilegios administrativos puede interferir con el uso de la consola por parte de otro administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "SecurityResponse@netmotionsoftware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.20",
            "matchCriteriaId" : "0037723E-6D5A-4D4C-91CC-7EB085C4CF61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-0518",
        "source" : "SecurityResponse@netmotionsoftware.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0519",
      "sourceIdentifier" : "SecurityResponse@netmotionsoftware.com",
      "published" : "2026-01-17T02:15:49.627",
      "lastModified" : "2026-02-02T16:04:56.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Secure Access 12.70 and prior to 14.20, the logging \nsubsystem may write an unredacted authentication token to logs under \ncertain configurations. Any party with access to those logs could read \nthe token and reuse it to access an integrated system."
      }, {
        "lang" : "es",
        "value" : "En Secure Access 12.70 y previo a la 14.20, el subsistema de registro podría escribir un token de autenticación sin redactar en los registros bajo ciertas configuraciones. Cualquier parte con acceso a esos registros podría leer el token y reutilizarlo para acceder a un sistema integrado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "SecurityResponse@netmotionsoftware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.70",
            "versionEndExcluding" : "14.20",
            "matchCriteriaId" : "DB3C9C13-5E04-471A-8CAA-C09B049F420F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-0519",
        "source" : "SecurityResponse@netmotionsoftware.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0682",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-17T04:16:07.987",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the 'audio_url' parameter. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin Church Admin para WordPress es vulnerable a la falsificación de petición del lado del servidor en todas las versiones hasta la 5.0.28, inclusive, debido a la validación insuficiente de las URL proporcionadas por el usuario en el parámetro 'audio_url'. Esto permite a atacantes autenticados, con acceso de nivel de Administrador, realizar peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede usarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/church-admin/tags/5.0.27/includes/functions.php#L6297",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/church-admin/tags/5.0.27/includes/sermon-podcast.php#L1181",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/church-admin/trunk/includes/functions.php#L6297",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/church-admin/trunk/includes/sermon-podcast.php#L1181",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3440847%40church-admin&new=3440847%40church-admin&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/77227fc5-7c38-476d-af4c-4b2ad3dd8420?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0820",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-17T04:16:08.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler function in all versions up to, and including, 4.1116. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary signatures to any order in the system, potentially modifying order metadata and triggering unauthorized status changes."
      }, {
        "lang" : "es",
        "value" : "El plugin RepairBuddy – Repair Shop CRM &amp; Booking Plugin para WordPress plugin de WordPress es vulnerable a Referencia Directa a Objeto Insegura debido a la falta de comprobaciones de capacidad en la función wc_upload_and_save_signature_handler en todas las versiones hasta la 4.1116, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, cargar firmas arbitrarias a cualquier pedido en el sistema, modificando potencialmente los metadatos del pedido y desencadenando cambios de estado no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/computer-repair-shop/tags/4.1116/lib/includes/classes/class-wcrb_signature.php#L562",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/computer-repair-shop/trunk/lib/includes/classes/class-wcrb_signature.php#L562",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3436356%40computer-repair-shop&new=3436356%40computer-repair-shop&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1b2ad299-03b1-4b9e-a241-d2ad2d85c3ac?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0691",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-17T07:16:01.933",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CM E-Mail Blacklist – Simple email filtering for safer registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'black_email' parameter in all versions up to, and including, 1.6.2. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin CM E-Mail Blacklist – Simple email filtering para safer registration para WordPress es vulnerable a Stored Cross-Site Scripting a través del parámetro 'black_email' en todas las versiones hasta la 1.6.2, inclusive. Esto se debe a una sanitización de entrada insuficiente y un escape de salida deficiente. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde unfiltered_html ha sido deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cm-email-blacklist/tags/1.6.2/backend/views/settings/email_blacklist.phtml#L67",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cm-email-blacklist/trunk/backend/views/settings/email_blacklist.phtml#L67",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3440158%40cm-email-blacklist&new=3440158%40cm-email-blacklist&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/821f4ea9-bc25-4d65-9058-5b77c4f1b230?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0808",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-17T07:16:02.123",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Spin Wheel plugin for WordPress is vulnerable to client-side prize manipulation in all versions up to, and including, 2.1.0. This is due to the plugin trusting client-supplied prize selection data without server-side validation or randomization. This makes it possible for unauthenticated attackers to manipulate which prize they win by modifying the 'prize_index' parameter sent to the server, allowing them to always select the most valuable prizes."
      }, {
        "lang" : "es",
        "value" : "El plugin Spin Wheel para WordPress es vulnerable a la manipulación de premios del lado del cliente en todas las versiones hasta la 2.1.0, inclusive. Esto se debe a que el plugin confía en los datos de selección de premios proporcionados por el cliente sin validación o aleatorización del lado del servidor. Esto hace posible que atacantes no autenticados manipulen qué premio ganan modificando el parámetro 'prize_index' enviado al servidor, permitiéndoles seleccionar siempre los premios más valiosos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/spin-wheel/tags/2.0.2/includes/class-swp-ajax.php#L73",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/spin-wheel/trunk/includes/class-swp-ajax.php#L73",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3437726%40spin-wheel&new=3437726%40spin-wheel&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c023b91e-f633-41a6-b2d7-bcb3f1d026b7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0833",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-17T07:16:02.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user-supplied social network link URLs. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Team Section Block para WordPress es vulnerable a cross-site scripting almacenado a través del bloque del plugin en todas las versiones hasta la 2.0.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en las URL de enlaces de redes sociales proporcionadas por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/team-section/tags/1.1.0/build/render.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/team-section/trunk/build/render.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3436953%40team-section&new=3436953%40team-section&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6348b119-a0dc-40ef-ae62-1de86dcefac7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0725",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-17T09:15:52.027",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Integrate Dynamics 365 CRM para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de la configuración de administrador en todas las versiones hasta la 1.1.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/integrate-dynamics-365-crm/tags/1.1.1/Wrappers/class-templatewrapper.php#L491",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/integrate-dynamics-365-crm/trunk/Wrappers/class-templatewrapper.php#L491",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3438502/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6b16028a-0b69-422b-9471-32ea6edb93a0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1048",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T17:15:48.863",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketZoom. This manipulation of the argument TicketID causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en LigeroSmart hasta la versión 6.1.26. Se ve afectada una función desconocida del archivo /otrs/index.pl?Action=AgentTicketZoom. Esta manipulación del argumento TicketID causa cross-site scripting. Es posible iniciar el ataque de forma remota. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques. El proyecto fue informado del problema tempranamente mediante un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ligerosmart:ligerosmart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.26",
            "matchCriteriaId" : "A6446F8A-7F90-4333-A60D-2CAAC185002A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LigeroSmart/ligerosmart/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/279",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/279#issue-3775562926",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729399",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1049",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T18:15:48.717",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument TicketID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en LigeroSmart hasta 6.1.26. El elemento afectado es una función desconocida del archivo /otrs/index.pl. Dicha manipulación del argumento TicketID conduce a cross site scripting. Es posible lanzar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de incidencias pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ligerosmart:ligerosmart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.26",
            "matchCriteriaId" : "A6446F8A-7F90-4333-A60D-2CAAC185002A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LigeroSmart/ligerosmart/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/280",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/280#issue-3776580352",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.729402",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746919",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1050",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T18:15:48.917",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en risesoft-y9 Digital-Infrastructure hasta la versión 9.6.7. Afecta a una función desconocida del archivo source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java del componente REST Authenticate Endpoint. La ejecución de una manipulación puede conducir a una inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado. El proyecto fue notificado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/risesoft-y9/Digital-Infrastructure/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/risesoft-y9/Digital-Infrastructure/issues/2",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/risesoft-y9/Digital-Infrastructure/issues/2#issue-3777863959",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341603",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341603",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.731010",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1059",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T19:15:50.917",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en FeMiner wms hasta 9cad1f1b179a98b9547fd003c23b07c7594775fa. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /src/chkuser.php. La manipulación del argumento Username conduce a inyección SQL. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden ser especificados. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feminer:warehouse_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-11-15",
            "matchCriteriaId" : "70556CE1-382A-46DF-B2B2-6BBFDAFF3A80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wangchaoxing/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341628",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341628",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/wangchaoxing/CVE/issues/1",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1061",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T19:15:51.140",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in xiweicheng TMS up to 2.28.0. Affected by this issue is the function Upload of the file src/main/java/com/lhjz/portal/controller/FileController.java. The manipulation of the argument filename results in unrestricted upload. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en xiweicheng TMS hasta 2.28.0. Afectada por este problema es la función Upload del archivo src/main/java/com/lhjz/portal/controller/FileController.java. La manipulación del argumento filename resulta en una carga sin restricciones. El ataque puede realizarse de forma remota. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiweicheng:teamwork_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.28.0",
            "matchCriteriaId" : "836FAB89-E919-491F-B9A9-E0B41BB67E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bkglfpp/CVE-md/blob/main/%E5%95%86%E6%88%B7%E5%95%86%E5%9F%8E%E2%80%94%E5%95%86%E5%9F%8E%E5%BC%80%E5%8F%91tms/%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731240",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1062",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T20:15:53.740",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in xiweicheng TMS up to 2.28.0. This affects the function Summary of the file src/main/java/com/lhjz/portal/util/HtmlUtil.java. This manipulation of the argument url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en xiweicheng TMS hasta la versión 2.28.0. Esto afecta a la función Summary del archivo src/main/java/com/lhjz/portal/util/HtmlUtil.java. Esta manipulación del argumento url provoca falsificación de petición del lado del servidor. Es posible iniciar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiweicheng:teamwork_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.28.0",
            "matchCriteriaId" : "836FAB89-E919-491F-B9A9-E0B41BB67E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bkglfpp/CVE-md/blob/main/%E5%95%86%E6%88%B7%E5%95%86%E5%9F%8E%E2%80%94%E5%95%86%E5%9F%8E%E5%BC%80%E5%8F%91tms/SSRF%EF%BC%881%EF%BC%89.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bkglfpp/CVE-md/blob/main/%E5%95%86%E6%88%B7%E5%95%86%E5%9F%8E%E2%80%94%E5%95%86%E5%9F%8E%E5%BC%80%E5%8F%91tms/SSRF%EF%BC%882%EF%BC%89.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731241",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731242",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1063",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T20:15:53.947",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en bastillion-io Bastillion hasta la versión 4.0.1. Esta vulnerabilidad afecta a código desconocido del archivo src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java del componente Sistema de Gestión de Claves Públicas. Dicha manipulación conduce a inyección de comandos. Es posible lanzar el ataque de forma remota. El exploit ha sido revelado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta revelación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341631",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341631",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.731303",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1064",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T21:15:49.693",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in bastillion-io Bastillion up to 4.0.1. This issue affects some unknown processing of the file src/main/java/io/bastillion/manage/control/SystemKtrl.java of the component System Management Module. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en bastillion-io Bastillion hasta 4.0.1. Este problema afecta un procesamiento desconocido del archivo src/main/java/io/bastillion/manage/control/SystemKtrl.java del componente Módulo de Gestión del Sistema. Realizar una manipulación resulta en inyección de comandos. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría usarse. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report2.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341632",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341632",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.731308",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1066",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-17T21:15:49.960",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en kalcaddle kodbox hasta la versión 1.61.10. Este problema afecta un procesamiento desconocido del archivo /?explorer/index/zip del componente Compression Handler. La manipulación resulta en inyección de comandos. El ataque puede ser lanzado remotamente. El exploit ahora es público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kodcloud:kodbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.61.10",
            "matchCriteriaId" : "2980DF42-81D1-46D8-86AE-1EE93BBD64FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DReazer/CV3/blob/main/Krce.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731436",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1105",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T00:15:49.197",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of the argument _order leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en EasyCMS hasta 1.6. Esta vulnerabilidad afecta código desconocido del archivo /UserAction.class.PHP. Dicha manipulación del argumento _order conduce a inyección SQL. El ataque puede ser ejecutado de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easycms:easycms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "018DA419-A976-4312-82A2-4176CC22E454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ueh1013/VULN/issues/15",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341697",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341697",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731465",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1106",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T01:15:51.023",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Chamilo LMS hasta la versión 2.0.0 Beta 1. Este problema afecta la función deleteLegal del archivo src/CoreBundle/Controller/SocialController.PHP del componente Legal Consent Handler. Realizar una manipulación del argumento userId resulta en una autorización indebida. El ataque es posible de ser llevado a cabo de forma remota. El exploit ha sido publicado al público y puede ser utilizado para ataques. Se contactó al proveedor tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "B89E53DA-9C45-48F2-A060-FBFDA8E29B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF7661F-C1F7-4CAB-BBDF-FC5BF7F5BEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "FE56AF71-9D53-42C6-980D-09E1C418ED87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "01195674-9E1A-4C07-B7D3-0F0CC2E6511B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE63449-5A56-4302-A4BF-F3D19FC96A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "A84A06F9-5AB7-4703-8153-33AC68882B95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:2.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B91302A3-53DE-4ED0-BAAB-FE9DA03F8242"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://note-hxlab.wetolink.com/share/w92t1Q0a74Gj",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341698",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341698",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731510",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1107",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T01:15:51.247",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en EyouCMS hasta la versión 1.7.1/5.0. La función afectada es check_userinfo del archivo Diyajax.php del componente Member Avatar Handler. La ejecución de una manipulación del argumento viewfile puede llevar a una carga sin restricciones. El ataque puede realizarse de forma remota. El exploit se ha hecho público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864C3DFC-1DC1-416C-905C-2F14AE7EC550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:1.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E52F19-4AF6-470D-9A2A-21266A2F96C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2516B91F-A684-401F-977A-70AFF38EEDFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/24-2021/vul3/blob/main/Eyoucms/Eyoucms%3D1.7.1%20check_userinfo%20api%20viewfile%20exists%2C%20causing%20code%20execution%20due%20to%20file%20inclusion.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/24-2021/vul3/blob/main/Eyoucms/Eyoucms%3D1.7.1%20check_userinfo%20api%20viewfile%20exists%2C%20causing%20code%20execution%20due%20to%20file%20inclusion.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731540",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1108",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T02:16:25.990",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en cijliu librtsp hasta 2ec1a81ad65280568a0c7c16420d7c10fde13b04. El elemento afectado es la función rtsp_rely_dumps. La manipulación conduce a desbordamiento de búfer. Un ataque debe abordarse localmente. Este producto utiliza una versión continua para proporcionar entrega continua. Por lo tanto, no se dispone de detalles de versión para versiones afectadas ni actualizadas. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cijliu:librtsp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-03-14",
            "matchCriteriaId" : "434C52CB-48A2-409B-8685-B0907D0936EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_rely_dumps/librtsp_rtsp_rely_dumps.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1109",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T04:15:59.613",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is the function rtsp_parse_request. The manipulation results in buffer overflow. Attacking locally is a requirement. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en cijliu librtsp hasta 2ec1a81ad65280568a0c7c16420d7c10fde13b04. El elemento afectado es la función rtsp_parse_request. La manipulación resulta en desbordamiento de búfer. Atacar localmente es un requisito. Este producto adopta el enfoque de lanzamientos continuos para proporcionar entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas y actualizadas no están disponibles. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cijliu:librtsp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-03-14",
            "matchCriteriaId" : "434C52CB-48A2-409B-8685-B0907D0936EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_request/librtsp_rtsp_parse_request.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341701",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341701",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1110",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T05:16:19.280",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulation causes buffer overflow. It is possible to launch the attack on the local host. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en cijliu librtsp hasta 2ec1a81ad65280568a0c7c16420d7c10fde13b04. Esto afecta a la función rtsp_parse_method. Esta manipulación causa desbordamiento de búfer. Es posible lanzar el ataque en el host local. Entrega continua con lanzamientos continuos es utilizada por este producto. Por lo tanto, no hay detalles de versión disponibles de las versiones afectadas ni actualizadas. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cijliu:librtsp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-03-14",
            "matchCriteriaId" : "434C52CB-48A2-409B-8685-B0907D0936EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_method/librtsp_rtsp_parse_method.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732603",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1111",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T06:16:01.007",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Sanluan PublicCMS hasta la versión 5.202506.d. Esto afecta a la función Save del archivo com/publiccms/controller/admin/sys/TaskTemplateAdminController.java del componente Task Template Management Handler. Dicha manipulación del argumento path conduce a salto de ruta. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.202506.d",
            "matchCriteriaId" : "B937509A-33F9-4B58-9E04-4297591A198E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732726",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1112",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T07:16:03.343",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performing a manipulation of the argument ids results in improper authorization. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Sanluan PublicCMS hasta la versión 5.202506.d. Afectada es la función delete del archivo publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java del componente Trade Address Deletion Endpoint. Realizar una manipulación del argumento ids resulta en autorización indebida. El ataque puede ser iniciado de forma remota. El exploit ha sido hecho público y podría ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.202506.d",
            "matchCriteriaId" : "B937509A-33F9-4B58-9E04-4297591A198E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.732771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1118",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T11:15:48.860",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en itsourcecode Society Management System 1.0. Afectada es una función desconocida del archivo /admin/add_activity.php. Realizar una manipulación del argumento Title resulta en inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ya es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AriazzzZ/CVE/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341710",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341710",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734289",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1119",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T12:15:48.270",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/delete_activity.php. Executing a manipulation of the argument activity_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode Society Management System 1.0. El elemento afectado es una función desconocida del archivo /admin/delete_activity.PHP. La ejecución de una manipulación del argumento activity_id puede conducir a una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AriazzzZ/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341711",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341711",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734290",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1120",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T14:16:16.387",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_work.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Yonyou KSOA 9.0. El elemento afectado es una función desconocida del archivo /worksheet/del_work.jsp del componente HTTP GET Parameter Handler. La manipulación del argumento ID conduce a inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341712",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341712",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734535",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1121",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T14:16:16.597",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Yonyou KSOA 9.0. This affects an unknown function of the file /worksheet/del_workplan.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Yonyou KSOA 9.0. Esto afecta una función desconocida del archivo /worksheet/del_workplan.jsp del componente HTTP GET Parameter Handler. La manipulación del argumento ID resulta en inyección SQL. El ataque puede lanzarse remotamente. El exploit se ha hecho público y podría utilizarse. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341713",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341713",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734548",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1122",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T14:16:16.783",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Parameter Handler. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Yonyou KSOA 9.0. Esto afecta una función desconocida del archivo /worksheet/work_info.jsp del componente HTTP GET Parameter Handler. Esta manipulación del argumento ID causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734549",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1123",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T15:15:51.167",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Yonyou KSOA 9.0. Affected is an unknown function of the file /worksheet/work_mod.jsp of the component HTTP GET Parameter Handler. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Yonyou KSOA 9.0. Se ve afectada una función desconocida del archivo /worksheet/work_mod.jsp del componente HTTP GET Parameter Handler. Dicha manipulación del argumento ID conduce a una inyección SQL. El ataque puede lanzarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0863",
      "sourceIdentifier" : "reefs@jfrog.com",
      "published" : "2026-01-18T16:15:50.450",
      "lastModified" : "2026-02-10T17:23:41.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.\n\nThe vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under \"Internal\" execution mode.\n\nIf the instance is operating under the  \"External\" execution mode (ex. n8n's official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significantly reduces the vulnerability impact."
      }, {
        "lang" : "es",
        "value" : "Usando formato de cadenas y manejo de excepciones, un atacante puede eludir las restricciones del sandbox python-task-executor de n8n y ejecutar código Python arbitrario sin restricciones en el sistema operativo subyacente.\n\nLa vulnerabilidad puede ser explotada a través del bloque de Código por un usuario autenticado con permisos básicos y puede llevar a una toma de control completa de la instancia de n8n en instancias que operan bajo el modo de ejecución 'Internal'.\n\nSi la instancia está operando bajo el modo de ejecución 'External' (ej. la imagen oficial de Docker de n8n) - la ejecución de código arbitrario ocurre dentro de un contenedor Sidecar y no en el nodo principal, lo que reduce significativamente el impacto de la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "reefs@jfrog.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "reefs@jfrog.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.123.14",
            "matchCriteriaId" : "C80B3A94-5FBD-4713-BA71-7E1FD4999072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.3.5",
            "matchCriteriaId" : "50811F6D-ED48-4B09-BC5F-09D60EE44ABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.2",
            "matchCriteriaId" : "ADF10FAB-9911-4234-A45B-0A067A5B0DD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/b73a4283cb14e0f27ce19692326f362c7bf3da02",
        "source" : "reefs@jfrog.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://research.jfrog.com/vulnerabilities/n8n-python-runner-sandbox-escape-jfsa-2026-001651077/",
        "source" : "reefs@jfrog.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.smartkeyss.com/post/cve-2026-0863-python-sandbox-escape-in-n8n-via-exception-formatting-and-implicit-code-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://research.jfrog.com/vulnerabilities/n8n-python-runner-sandbox-escape-jfsa-2026-001651077/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1124",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T16:15:50.630",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_report.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Yonyou KSOA 9.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /worksheet/work_report.jsp del componente HTTP GET Parameter Handler. Realizar una manipulación del argumento ID resulta en inyección SQL. La explotación remota del ataque es posible. El exploit ha sido liberado al público y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1125",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T16:15:50.810",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings. Executing a manipulation of the argument wd_enable can lead to command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en D-Link DIR-823X 250416. Este problema afecta a la función sub_412E7C del archivo /goform/set_wifidog_settings. La manipulación del argumento wd_enable puede llevar a una inyección de comandos. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF2817F-F2E7-4432-A644-765F91DD1C4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DavCloudz/cve/blob/main/D-link/DIR_823X/DIR-823X%20V250416%20Command%20Execution%20Vulnerability.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734966",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743503",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1126",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-18T17:15:49.713",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in lwj flow up to a3d2fe8133db9d3b50fda4f66f68634640344641. This affects the function uploadFile of the file \\flow-master\\flow-front-rest\\src\\main\\java\\com\\dragon\\flow\\web\\resource\\flow\\FormResource.java of the component SVG File Handler. The manipulation of the argument File leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en lwj flow hasta a3d2fe8133db9d3b50fda4f66f68634640344641. Esto afecta a la función uploadFile del archivo \\flow-master\\flow-front-rest\\src\\main\\java\\com\\dragon\\flow\\web\\resource\\flow\\FormResource.java del componente SVG File Handler. La manipulación del argumento File conduce a una carga sin restricciones. El ataque puede llevarse a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden especificarse. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/lwj/flow/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gitee.com/lwj/flow/issues/IDIQSE",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341718",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341718",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.735122",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23525",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-18T23:15:48.220",
      "lastModified" : "2026-03-13T14:29:08.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting (XSS) vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data or sensitive system interfaces. All versions of 1Panel up to and including v1.10.33-lts and v2.0.16 are affected. An attacker could publish a malicious application that, when loaded by users (locally or remotely), can execute arbitrary scripts. This may result in theft of user cookies, unauthorized access to system functions, or other actions that compromise the confidentiality, integrity, and availability of the system. The vulnerability is caused by insufficient sanitization of content rendered by the MdEditor component with the `previewOnly` attribute enabled. Specifically, the App Store renders application README content without proper XSS protection, allowing script execution during content rendering; and similar issues exist in system upgrade-related components, which can be fixed by implementing proper XSS sanitization in the MdEditor component. These vulnerabilities can be mitigated by applying proper XSS protection and sanitization when rendering content in the MdEditor component. Safe versions with a patch incorporated are v1.10.34-lts and v2.0.17."
      }, {
        "lang" : "es",
        "value" : "1Panel es un panel de control de código abierto, basado en web, para la gestión de servidores Linux. Una vulnerabilidad de cross-site scripting (XSS) almacenado existe en la Tienda de Aplicaciones de 1Panel al ver los detalles de la aplicación. Scripts maliciosos pueden ejecutarse en el contexto del navegador del usuario, potencialmente comprometiendo datos de sesión o interfaces sensibles del sistema. Todas las versiones de 1Panel hasta e incluyendo v1.10.33-lts y v2.0.16 están afectadas. Un atacante podría publicar una aplicación maliciosa que, cuando es cargada por los usuarios (local o remotamente), puede ejecutar scripts arbitrarios. Esto puede resultar en el robo de cookies de usuario, acceso no autorizado a funciones del sistema u otras acciones que comprometan la confidencialidad, integridad y disponibilidad del sistema. La vulnerabilidad es causada por una sanitización insuficiente del contenido renderizado por el componente MdEditor con el atributo 'previewOnly' habilitado. Específicamente, la Tienda de Aplicaciones renderiza contenido README de la aplicación sin la protección XSS adecuada, permitiendo la ejecución de scripts durante la renderización del contenido; y problemas similares existen en componentes relacionados con la actualización del sistema, los cuales pueden ser solucionados implementando una sanitización XSS adecuada en el componente MdEditor. Estas vulnerabilidades pueden ser mitigadas aplicando protección y sanitización XSS adecuadas al renderizar contenido en el componente MdEditor. Las versiones seguras con un parche incorporado son v1.10.34-lts y v2.0.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.34",
            "matchCriteriaId" : "F5968FDD-8F6D-487E-9326-0949B42D2BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.17",
            "matchCriteriaId" : "5D333955-D761-4982-A30A-D59D1735FCFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-mg24-6h5c-9q42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23626",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-18T23:15:48.393",
      "lastModified" : "2026-02-18T16:30:19.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy (`DefaultPolicy`) that allows arbitrary method calls on objects available in the template context. An authenticated user with export permissions can deploy a malicious Twig template that extracts sensitive information including environment variables, all user password hashes, serialized session tokens, and CSRF tokens. Version 2.46.0 patches this issue."
      }, {
        "lang" : "es",
        "value" : "Kimai es una aplicación de seguimiento de tiempo multiusuario basada en web. Antes de la versión 2.46.0, la funcionalidad de exportación de Kimai utiliza un Twig sandbox con una política de seguridad excesivamente permisiva ('DefaultPolicy') que permite llamadas a métodos arbitrarias en objetos disponibles en el contexto de la plantilla. Un usuario autenticado con permisos de exportación puede desplegar una plantilla Twig maliciosa que extrae información sensible, incluyendo variables de entorno, todos los hashes de contraseña de usuario, tokens de sesión serializados y tokens CSRF. La versión 2.46.0 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kimai:kimai:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.46.0",
            "matchCriteriaId" : "47DBF927-9B2F-4E84-9D11-0BB8793F2015"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kimai/kimai/commit/6a86afb5fd79f6c1825060b87c09bd1909c2e86f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kimai/kimai/pull/5757",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/kimai/kimai/releases/tag/2.46.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kimai/kimai/security/advisories/GHSA-jg2j-2w24-54cg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23644",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-18T23:15:48.547",
      "lastModified" : "2026-02-18T16:10:48.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "esm.sh is a no-build content delivery network (CDN) for web development. Prior to Go pseeudoversion 0.0.0-20260116051925-c62ab83c589e, the software has a path traversal vulnerability due to an incomplete fix. `path.Clean` normalizes a path but does not prevent absolute paths in a malicious tar file. Commit https://github.com/esm-dev/esm.sh/commit/9d77b88c320733ff6689d938d85d246a3af9af16, corresponding to pseudoversion 0.0.0-20260116051925-c62ab83c589e, fixes this issue."
      }, {
        "lang" : "es",
        "value" : "esm.sh es una red de entrega de contenido (CDN) sin compilación para desarrollo web. Antes de la pseudoversión Go 0.0.0-20260116051925-c62ab83c589e, el software tiene una vulnerabilidad de salto de ruta debido a una corrección incompleta. 'path.Clean' normaliza una ruta pero no evita rutas absolutas en un archivo tar malicioso. El commit https://github.com/esm-dev/esm.sh/commit/9d77b88c320733ff6689d938d85d246a3af9af16, correspondiente a la pseudoversión 0.0.0-20260116051925-c62ab83c589e, soluciona este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esm:esm.sh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "136",
            "matchCriteriaId" : "6FB0321A-8476-4667-8F8F-BF9D9E1DF466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/esm-dev/esm.sh/commit/9d77b88c320733ff6689d938d85d246a3af9af16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/esm-dev/esm.sh/commit/c62ab83c589e7b421a0e1376d2a00a4e48161093",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/esm-dev/esm.sh/security/advisories/GHSA-2657-3c98-63jq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2025-4138",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23733",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-18T23:15:48.710",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LobeChat is an open source chat application platform. Prior to version 2.0.0-next.180, a stored Cross-Site Scripting (XSS) vulnerability in the Mermaid artifact renderer allows attackers to execute arbitrary JavaScript within the application context. This XSS can be escalated to Remote Code Execution (RCE) by leveraging the exposed `electronAPI` IPC bridge, allowing attackers to run arbitrary system commands on the victim's machine. Version 2.0.0-next.180 patches the issue."
      }, {
        "lang" : "es",
        "value" : "LobeChat es una plataforma de aplicación de chat de código abierto. Antes de la versión 2.0.0-next.180, una vulnerabilidad de cross-site scripting (XSS) almacenado en el renderizador de artefactos Mermaid permite a los atacantes ejecutar JavaScript arbitrario dentro del contexto de la aplicación. Este XSS puede escalarse a ejecución remota de código (RCE) aprovechando el puente IPC 'electronAPI' expuesto, permitiendo a los atacantes ejecutar comandos de sistema arbitrarios en la máquina de la víctima. La versión 2.0.0-next.180 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-4gpc-rhpj-9443",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23829",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T00:15:48.707",
      "lastModified" : "2026-02-23T17:29:31.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to Header Injection due to an insufficient Regular Expression used to validate `RCPT TO` and `MAIL FROM` addresses. An attacker can inject arbitrary SMTP headers (or corrupt existing ones) by including carriage return characters (`\\r`) in the email address. This header injection occurs because the regex intended to filter control characters fails to exclude `\\r` and `\\n` when used inside a character class. Version 1.28.3 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "Mailpit es una herramienta de pruebas de correo electrónico y una API para desarrolladores. Antes de la versión 1.28.3, el servidor SMTP de Mailpit era vulnerable a la inyección de encabezados debido a una expresión regular insuficiente utilizada para validar las direcciones `RCPT TO` y `MAIL FROM`. Un atacante puede inyectar encabezados SMTP arbitrarios (o corromper los existentes) incluyendo caracteres de retorno de carro (\"\\r\") en la dirección de correo electrónico. Esta inyección de encabezados se produce porque la expresión regular destinada a filtrar los caracteres de control no excluye \"\\r\" y \"\\n\" cuando se utiliza dentro de una clase de caracteres. La versión 1.28.3 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        }, {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axllent:mailpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.3",
            "matchCriteriaId" : "D00C1680-049F-472C-A900-66D6B2A11A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axllent/mailpit/commit/36cc06c125954dec6673219dafa084e13cc14534",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/releases/tag/v1.28.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-54wq-72mp-cq7c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1129",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T01:16:00.833",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Yonyou KSOA 9.0. Esta vulnerabilidad afecta código desconocido del archivo /worksheet/worksadd.jsp del componente HTTP GET Parameter Handler. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser realizado desde remoto. El exploit es ahora público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341719",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341719",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734557",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1130",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T01:16:01.033",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_plan.jsp of the component HTTP GET Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Yonyou KSOA 9.0. Este problema afecta a algún procesamiento desconocido del archivo /worksheet/worksadd_plan.jsp del componente HTTP GET Parameter Handler. Esta manipulación del argumento ID causa inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341720",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341720",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734565",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1131",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T02:15:56.827",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of the component HTTP GET Parameter Handler. Such manipulation of the argument catalogid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Yonyou KSOA 9.0. Se ve afectada una función desconocida del archivo /kmc/save_catalog.jsp del componente HTTP GET Parameter Handler. Dicha manipulación del argumento catalogid conduce a una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734566",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1132",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T02:15:57.020",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument folderid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Yonyou KSOA 9.0. El elemento afectado es una función desconocida del archivo /kmf/edit_folder.jsp del componente HTTP GET Parameter Handler. Realizar una manipulación del argumento folderid resulta en inyección SQL. El ataque puede ser iniciado de forma remota. El exploit ha sido hecho público y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/15",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341722",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341722",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734568",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1133",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T03:16:02.023",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Yonyou KSOA 9.0. El elemento afectado es una función desconocida del archivo /kmf/folder.jsp del componente HTTP GET Parameter Handler. La ejecución de una manipulación del argumento folderid puede conducir a inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341723",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341723",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734576",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0943",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-01-19T04:15:58.710",
      "lastModified" : "2026-03-04T14:48:22.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. \n\nVersions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CVE-2026-22693."
      }, {
        "lang" : "es",
        "value" : "Versiones de HarfBuzz::Shaper anteriores a la 0.032 para Perl contienen una librería incluida con una vulnerabilidad de desreferencia de puntero nulo.\n\nLas versiones anteriores a la 0.032 contienen HarfBuzz 8.4.0 o anterior incluido como hb_src.tar.gz en el tarball de origen, el cual está afectado por CVE-2026-22693."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jv:harfbuzz\\:\\:shaper:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "0.032",
            "matchCriteriaId" : "9A596B45-7207-4CBE-9E42-6133EDAA5AD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429296",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://metacpan.org/release/JV/HarfBuzz-Shaper-0.032/changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-22693",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "VDB Entry", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1134",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T04:15:58.830",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the file /admin/expenses.php. The manipulation of the argument detail leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en itsourcecode Society Management System 1.0. Esto afecta una función desconocida del archivo /admin/expenses.php. La manipulación del argumento detail conduce a cross-site scripting. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TEhS411/cve/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341724",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341724",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1135",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T04:15:59.123",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en itsourcecode Society Management System 1.0. Esto afecta a una función desconocida del archivo /admin/activity.PHP. La manipulación del argumento Title resulta en cross-site scripting. El ataque puede lanzarse remotamente. El exploit ha sido publicado y puede utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TEhS411/cve/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341725",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341725",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735157",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1136",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T04:15:59.303",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Affected is the function Save of the file /blog/bContent/save of the component ContentController. This manipulation of the argument content/author/title causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en lcg0124 BootDo hasta e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Se ve afectada la función Save del archivo /blog/bContent/save del componente ContentController. Esta manipulación del argumento content/author/title causa cross site scripting. La explotación remota del ataque es posible. El exploit se ha puesto a disposición del público y podría usarse para ataques. Este producto sigue un enfoque de lanzamiento continuo para la entrega continua, por lo que no se proporcionan detalles de la versión para las versiones afectadas o actualizadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/webzzaa/CVE-/issues/4",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341726",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341726",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.735164",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1137",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T05:16:05.920",
      "lastModified" : "2026-02-04T20:39:50.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formWebAuthGlobalConfig. Performing a manipulation results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en UTT ?? 520W 1.7.7-180627. Afectada por este problema es la función strcpy del archivo /goform/formWebAuthGlobalConfig. Realizar una manipulación resulta en desbordamiento de búfer. El ataque es posible de ser llevado a cabo remotamente. El exploit es ahora público y puede ser usado. El proveedor fue contactado temprano sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/32.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1138",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T05:16:09.100",
      "lastModified" : "2026-02-04T20:40:46.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ. Executing a manipulation can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en UTT ?? 520W 1.7.7-180627. Esto afecta a la función strcpy del archivo /goform/ConfigExceptQQ. La ejecución de una manipulación puede conducir a un desbordamiento de búfer. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/33.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1139",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T05:16:09.303",
      "lastModified" : "2026-02-04T20:41:41.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en UTT ?? 520W 1.7.7-180627. Esta vulnerabilidad afecta la función strcpy del archivo /goform/ConfigExceptMSN. La manipulación conduce a desbordamiento de búfer. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/34.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341730",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341730",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735299",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1140",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T06:16:01.640",
      "lastModified" : "2026-02-04T20:42:33.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en UTT ?? 520W 1.7.7-180627. Este problema afecta la función strcpy del archivo /goform/ConfigExceptAli. La manipulación resulta en un desbordamiento de búfer. Es posible lanzar el ataque de forma remota. El exploit ha sido hecho público y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-180627",
            "matchCriteriaId" : "1ED9CE5B-AC0E-4C53-A084-7777D5050400"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/35.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341731",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341731",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1141",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T07:16:22.027",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en PHPGurukul News Portal 1.0. El elemento afectado es una función desconocida del archivo /admin/add-subadmins.php del componente Add Sub-Admin Page. Dicha manipulación conduce a una autorización indebida. El ataque puede ser lanzado de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:news_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70433F59-D09B-4F66-981A-FFE1598906E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Asim-QAZi/BrokenAccessControl-News-Portal-Project-in-PHP-and-MySQL-in-PHPGurukul",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735483",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736668",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1142",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T07:16:22.457",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en PHPGurukul News Portal 1.0. El elemento afectado es una función desconocida. Al realizar una manipulación, resulta en falsificación de petición en sitios cruzados. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:news_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70433F59-D09B-4F66-981A-FFE1598906E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Asim-QAZi/CSRF-Add-Subadmin-in-News-Portal-Project-in-PHP-and-MySql-in-PHPGurukul",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1143",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T07:16:22.667",
      "lastModified" : "2026-01-29T18:31:16.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en TOTOLINK A3700R 9.1.2u.5822_B20200513. Esta afecta a la función setWiFiEasyGuestCfg del archivo /cgi-bin/cstecgi.cgi. La ejecución de una manipulación del argumento ssid puede conducir a un desbordamiento de búfer. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a3700r_firmware:9.1.2u.5822_b20200513:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F5D7B3-9362-4A1F-A53C-8B7DA8CAFAA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a3700r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05777EB4-0963-4317-AB0B-287A2140915D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setWiFiEasyGuestCfg-2e353a41781f8057a244ead07d5eaaff?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735502",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1144",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T08:16:04.857",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is identified as ea3e9d77454e8fc9cb3ef3c504e9c16af5a80141. Applying a patch is advised to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en quickjs-ng quickjs hasta la versión 0.11.0. Se ve afectada una función desconocida del archivo quickjs.c del componente Atomics Ops Handler. La manipulación resulta en uso después de liberar. El ataque puede ser ejecutado remotamente. El exploit es ahora público y puede ser utilizado. El parche se identifica como ea3e9d77454e8fc9cb3ef3c504e9c16af5a80141. Se aconseja aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickjs-ng:quickjs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.0",
            "matchCriteriaId" : "99E7BDDC-5F85-4D2D-A0FE-87E837B594D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quickjs-ng/quickjs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/commit/ea3e9d77454e8fc9cb3ef3c504e9c16af5a80141",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1302",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/pull/1303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735537",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735538",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1145",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T09:16:02.587",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_constructor_ta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 53aebe66170d545bb6265906fe4324e4477de8b4. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en quickjs-ng quickjs hasta 0.11.0. Afectada por esta vulnerabilidad es la función js_typed_array_constructor_ta del archivo quickjs.c. Esta manipulación causa desbordamiento de búfer basado en montículo. El ataque es posible de realizar de forma remota. El exploit ha sido publicado y puede ser utilizado. Nombre del parche: 53aebe66170d545bb6265906fe4324e4477de8b4. Se sugiere instalar un parche para abordar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickjs-ng:quickjs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.0",
            "matchCriteriaId" : "99E7BDDC-5F85-4D2D-A0FE-87E837B594D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/paralin/quickjs/commit/53aebe66170d545bb6265906fe4324e4477de8b4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/issues/1305#issue-3785444372",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/quickjs-ng/quickjs/pull/1306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735539",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1146",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T09:16:02.803",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/api_register_patient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /PHP/api_register_patient.php. Dicha manipulación del argumento firstName/lastName conduce a cross site scripting. El ataque puede ser realizado de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.341739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735543",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1147",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T10:16:08.477",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affects an unknown part of the file /php/api_patient_schedule.php. Performing a manipulation of the argument Reason results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Esto afecta una parte desconocida del archivo /php/api_patient_schedule.php. Realizar una manipulación del argumento Reason resulta en cross site scripting. Es posible iniciar el ataque remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.341740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735544",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1148",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T10:16:08.697",
      "lastModified" : "2026-01-30T18:13:43.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This vulnerability affects unknown code. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Esta vulnerabilidad afecta a código desconocido. La ejecución de una manipulación puede conducir a una falsificación de petición en sitios cruzados. Es posible lanzar el ataque de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.341741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735545",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1149",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T10:16:08.877",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Totolink LR350 9.3.5u.6369_B20220309. Este problema afecta a la función setDiagnosisCfg del archivo /cgi-bin/cstecgi.cgi del componente POST Request Handler. La manipulación del argumento ip conduce a inyección de comandos. El ataque puede iniciarse remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7C618F-D415-4075-96A5-45E44B52FB62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:lr350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA0663B-3F55-44EF-AF32-F83AB0411748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setDiagnosisCfg-2e453a41781f800d9ba9c6da80b55276?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735695",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1150",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T11:15:49.250",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument command results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Totolink LR350 9.3.5u.6369_B20220309. Afecta a la función setTracerouteCfg del archivo /cgi-bin/cstecgi.cgi del componente POST Request Handler. La manipulación del argumento command resulta en inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7C618F-D415-4075-96A5-45E44B52FB62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:lr350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA0663B-3F55-44EF-AF32-F83AB0411748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setTracerouteCfg-2e453a41781f803494e3e4161a393487?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735696",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1151",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T11:15:50.047",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en technical-laohu mpay hasta la versión 1.2.4. El elemento afectado es una función desconocida del componente Centro de Usuarios. Esta manipulación del argumento Nickname causa cross site scripting. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:technical-laohu:mpay:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.4",
            "matchCriteriaId" : "C5DCECBB-D75E-42B4-89F2-76CA77FD1A51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bdkuzma/vuln/issues/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1152",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T12:15:51.980",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en technical-laohu mpay hasta 1.2.4. El elemento afectado es una función desconocida del componente QR Code Image Handler. Dicha manipulación del argumento codeimg conduce a una carga sin restricciones. El ataque puede ser lanzado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:technical-laohu:mpay:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.4",
            "matchCriteriaId" : "C5DCECBB-D75E-42B4-89F2-76CA77FD1A51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bdkuzma/vuln/issues/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1153",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T13:16:20.007",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in technical-laohu mpay up to 1.2.4. This affects an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en technical-laohu mpay hasta 1.2.4. Esto afecta a una función desconocida. Realizar una manipulación resulta en falsificación de petición en sitios cruzados. La explotación remota del ataque es posible. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:technical-laohu:mpay:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.4",
            "matchCriteriaId" : "C5DCECBB-D75E-42B4-89F2-76CA77FD1A51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bdkuzma/vuln/issues/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735789",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1154",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T13:16:20.177",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be executed remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en SourceCodester E-Learning System 1.0. Esto afecta a una función desconocida del archivo /admin/modules/lesson/index.php del componente Lesson Module Handler. La ejecución de una manipulación del argumento Título/Descripción puede conducir a cross-site scripting básico. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:e-learning_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D92133-21C1-489C-B3D8-6B5EE506BC1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/0xCaptainFahim/dada955760b424a851de12bccadee997",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735855",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1155",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T13:16:20.360",
      "lastModified" : "2026-01-29T18:39:38.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Totolink LR350 9.3.5u.6369_B20220309. Afectada por esta vulnerabilidad es la función setWiFiEasyGuestCfg del archivo /cgi-bin/cstecgi.cgi. La manipulación del argumento ssid resulta en desbordamiento de búfer. El ataque puede realizarse desde remoto. El exploit se ha hecho público y podría utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7C618F-D415-4075-96A5-45E44B52FB62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:lr350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA0663B-3F55-44EF-AF32-F83AB0411748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setWiFiEasyGuestCfg-2e453a41781f8034bae3d1a11066a8fb?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1181",
      "sourceIdentifier" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
      "published" : "2026-01-19T13:16:20.543",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Altium 365 workspace endpoints were configured with an overly permissive Cross-Origin Resource Sharing (CORS) policy that allowed credentialed cross-origin requests from other Altium-controlled subdomains, including forum.live.altium.com. As a result, JavaScript executing on those origins could access authenticated workspace APIs in the context of a logged-in user. When chained with vulnerabilities in those external applications, this misconfiguration enables unauthorized access to workspace data, administrative actions, and bypass of IP allowlisting controls, including in GovCloud environments."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales del espacio de trabajo de Altium 365 fueron configurados con una política de Intercambio de Recursos de Origen Cruzado (CORS) excesivamente permisiva que permitía solicitudes de origen cruzado con credenciales desde otros subdominios controlados por Altium, incluyendo forum.live.altium.com. Como resultado, el JavaScript que se ejecutaba en esos orígenes podía acceder a las API autenticadas del espacio de trabajo en el contexto de un usuario con sesión iniciada. Cuando se encadena con vulnerabilidades en esas aplicaciones externas, esta mala configuración permite el acceso no autorizado a los datos del espacio de trabajo, acciones administrativas y la elusión de los controles de inclusión en lista blanca de IP, incluso en entornos GovCloud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.altium.com/platform/security-compliance/security-advisories",
        "source" : "4760f414-e1ae-4ff1-bdad-c7a9c3538b79"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1156",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T14:15:49.950",
      "lastModified" : "2026-01-29T18:40:14.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Totolink LR350 9.3.5u.6369_B20220309. Afectada por este problema está la función setWiFiBasicCfg del archivo /cgi-bin/cstecgi.cgi. Esta manipulación del argumento ssid causa desbordamiento de búfer. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7C618F-D415-4075-96A5-45E44B52FB62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:lr350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA0663B-3F55-44EF-AF32-F83AB0411748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setWiFiBasicCfg-2e453a41781f80a2ad43e85bf5d46659?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735722",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1157",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T14:15:50.140",
      "lastModified" : "2026-01-29T18:36:21.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Totolink LR350 9.3.5u.6369_B20220309. Esto afecta a la función setWiFiEasyCfg del archivo /cgi-bin/cstecgi.cgi. Dicha manipulación del argumento ssid conduce a un desbordamiento de búfer. Es posible lanzar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7C618F-D415-4075-96A5-45E44B52FB62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:lr350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA0663B-3F55-44EF-AF32-F83AB0411748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setWiFiEasyCfg-2e453a41781f80b7b53cef33c6a782aa?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341751",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341751",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735726",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0610",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-01-19T15:15:50.080",
      "lastModified" : "2026-02-10T15:18:15.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en sesiones remotas en Devolutions Server. Este problema afecta a Devolutions Server 2025.3.1 hasta 2025.3.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.3.1.0",
            "versionEndExcluding" : "2025.3.14.0",
            "matchCriteriaId" : "4AB0B4A6-06F7-48B3-8A6A-FF16B36CA000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0003/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1007",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-01-19T15:15:50.220",
      "lastModified" : "2026-02-10T16:59:28.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny IP rules.This issue affects Server: from 2025.3.1 through 2025.3.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización incorrecta en el componente de puerta de enlace virtual en Devolutions Server permite a los atacantes eludir las reglas de denegación de IP. Este problema afecta a Server: desde 2025.3.1 hasta 2025.3.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.3.1.0",
            "versionEndExcluding" : "2025.3.14.0",
            "matchCriteriaId" : "4AB0B4A6-06F7-48B3-8A6A-FF16B36CA000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0003/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1158",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T15:15:50.340",
      "lastModified" : "2026-01-29T18:34:39.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Totolink LR350 9.3.5u.6369_B20220309. Esta vulnerabilidad afecta a la función setWizardCfg del archivo /cgi-bin/cstecgi.cgi del componente POST Request Handler. Realizar una manipulación del argumento ssid resulta en desbordamiento de búfer. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:lr350_firmware:9.3.5u.6369_b20220309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7C618F-D415-4075-96A5-45E44B52FB62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:lr350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA0663B-3F55-44EF-AF32-F83AB0411748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setWizardCfg-2e453a41781f80ce89cfc1d25049e279?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341752",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341752",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1159",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T15:15:50.513",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order_online.php. Executing a manipulation of the argument product_name can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode Online Frozen Foods Ordering System 1.0. Este problema afecta algún procesamiento desconocido del archivo /order_online.php. La ejecución de una manipulación del argumento product_name puede llevar a una inyección SQL. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonesevangelista:online_frozen_foods_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DABEDB4F-8EAF-478A-86B3-393DB7E58022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/YouSeeYouOneDayDayDe/Nick_1321_vuls/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341753",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341753",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736332",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21618",
      "sourceIdentifier" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "published" : "2026-01-19T15:15:50.693",
      "lastModified" : "2026-04-06T17:17:06.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.SharedAuthorizationView' modules) allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/hexpm_web/views/shared_authorization_view.ex and program routines 'Elixir.HexpmWeb.SharedAuthorizationView':render_grouped_scopes/3.\n\nThis issue affects hexpm: from 617e44c71f1dd9043870205f371d375c5c4d886d before c692438684ead90c3bcbfb9ccf4e63c768c668a8, from pkg:github/hexpm/hexpm@617e44c71f1dd9043870205f371d375c5c4d886d before pkg:github/hexpm/hexpm@c692438684ead90c3bcbfb9ccf4e63c768c668a8; hex.pm: from 2025-10-01 before 2026-01-19."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') vulnerabilidad en hexpm hexpm/hexpm (módulos 'Elixir.HexpmWeb.SharedAuthorizationView') permite cross-site scripting (XSS). Esta vulnerabilidad está asociada con los archivos de programa lib/hexpm_web/views/shared_authorization_view.ex y las rutinas de programa 'Elixir.HexpmWeb.SharedAuthorizationView':render_grouped_scopes/3.\n\nEste problema afecta a hexpm: desde 617e44c71f1dd9043870205f371d375c5c4d886d antes de c692438684ead90c3bcbfb9ccf4e63c768c668a8, desde pkg:github/hexpm/hexpm@617e44c71f1dd9043870205f371d375c5c4d886d antes de pkg:github/hexpm/hexpm@c692438684ead90c3bcbfb9ccf4e63c768c668a8; hex.pm: desde 2025-10-01 antes de 2026-01-19."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hex:hexpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025-10-01",
            "versionEndExcluding" : "2026-01-19",
            "matchCriteriaId" : "0F30BDA9-1780-4D43-9654-3C9548620BE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.erlef.org/cves/CVE-2026-21618.html",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/hexpm/hexpm/commit/c692438684ead90c3bcbfb9ccf4e63c768c668a8",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hexpm/security/advisories/GHSA-6cw9-5gg4-rhpj",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://osv.dev/vulnerability/EEF-CVE-2026-21618",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1160",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T16:15:53.953",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of the component Search. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en PHPGurukul Directory Management System 1.0. Afectada es una función desconocida del archivo /index.php del componente Search. La manipulación del argumento searchdata conduce a inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:directory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77986F29-8C0B-4B73-BD32-6A610A89C64B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/YouSeeYouOneDayDayDe/Nick_1321_vuls/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341754",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341754",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736333",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1161",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T16:15:54.133",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the file /handler/recruitment.go. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en pbrong hrms 1.0.1. El elemento afectado es la función UpdateRecruitmentById del archivo /handler/recruitment.go. La manipulación resulta en cross site scripting. El ataque puede ser lanzado remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TheLiao233/cve/issues/1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341755",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341755",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.736510",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22031",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T16:15:54.310",
      "lastModified" : "2026-03-13T14:40:56.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@fastify/middie is the plugin that adds middleware support on steroids to Fastify. A security vulnerability exists in @fastify/middie prior to version 9.1.0 where middleware registered with a specific path prefix can be bypassed using URL-encoded characters (e.g., `/%61dmin` instead of `/admin`). While the middleware engine fails to match the encoded path and skips execution, the underlying Fastify router correctly decodes the path and matches the route handler, allowing attackers to access protected endpoints without the middleware constraints. Version 9.1.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "@fastify/middie es el plugin que añade soporte de middleware potenciado a Fastify. Una vulnerabilidad de seguridad existe en @fastify/middie anterior a la versión 9.1.0 donde el middleware registrado con un prefijo de ruta específico puede ser evadido usando caracteres codificados en URL (p. ej., '/%61dmin' en lugar de '/admin'). Mientras que el motor de middleware falla al coincidir con la ruta codificada y omite la ejecución, el router subyacente de Fastify decodifica correctamente la ruta y coincide con el manejador de ruta, permitiendo a los atacantes acceder a puntos finales protegidos sin las restricciones del middleware. La versión 9.1.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-177"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openjsf:\\@fastify\\/middie:*:*:*:*:*:fastify:*:*",
            "versionEndExcluding" : "9.1.0",
            "matchCriteriaId" : "00C6B023-3DE9-434D-B17F-8E58B5E3163B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/middie/commit/d44cd56eb724490babf7b452fdbbdd37ea2effba",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/middie/pull/245",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/fastify/middie/releases/tag/v9.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/fastify/middie/security/advisories/GHSA-cxrg-g7r8-w69p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1162",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T17:15:50.087",
      "lastModified" : "2026-02-06T19:18:18.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of the argument passwd1 causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en UTT HiPER 810 1.7.4-141218. El elemento afectado es la función strcpy del archivo /goform/setSysAdm. Esta manipulación del argumento passwd1 causa desbordamiento de búfer. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810_firmware:1.7.4-141218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185B9785-D7CC-41DC-96B6-7929F86F2348"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B54BBB-783B-4C95-9EC5-12488D8C1AC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT810/blob/main/1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/cha0yang1/UTT810/blob/main/1.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341756",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341756",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736511",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22037",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T17:15:50.283",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The @fastify/express plugin adds full Express compatibility to Fastify. A security vulnerability exists in @fastify/express prior to version 4.0.3 where middleware registered with a specific path prefix can be bypassed using URL-encoded characters (e.g., `/%61dmin` instead of `/admin`). While the middleware engine fails to match the encoded path and skips execution, the underlying Fastify router correctly decodes the path and matches the route handler, allowing attackers to access protected endpoints without the middleware constraints. The vulnerability is caused by how @fastify/express matches requests against registered middleware paths. This vulnerability is similar to, but differs from, CVE-2026-22031 because this is a different npm module with its own code. Version 4.0.3 of @fastify/express contains a patch fort the issue."
      }, {
        "lang" : "es",
        "value" : "El plugin @fastify/express añade compatibilidad completa con Express a Fastify. Existe una vulnerabilidad de seguridad en @fastify/express anterior a la versión 4.0.3 donde el middleware registrado con un prefijo de ruta específico puede ser eludido utilizando caracteres codificados en URL (p. ej., '/%61dmin' en lugar de '/admin'). Mientras que el motor de middleware no logra coincidir con la ruta codificada y omite la ejecución, el router subyacente de Fastify decodifica correctamente la ruta y coincide con el manejador de ruta, permitiendo a los atacantes acceder a puntos finales protegidos sin las restricciones del middleware. La vulnerabilidad es causada por cómo @fastify/express compara las solicitudes con las rutas de middleware registradas. Esta vulnerabilidad es similar a, pero difiere de, CVE-2026-22031 porque este es un módulo npm diferente con su propio código. La versión 4.0.3 de @fastify/express contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-177"
        }, {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/fastify-express/commit/dc02a3fe1387f945143f22597baa42557d549a40",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/fastify/fastify-express/security/advisories/GHSA-g6q3-96cp-5r5m",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22850",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T17:15:50.430",
      "lastModified" : "2026-03-09T21:16:44.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Koko Analytics is an open-source analytics plugin for WordPress. Versions prior to 2.1.3 are vulnerable to arbitrary SQL execution through unescaped analytics export/import and permissive admin SQL import. Unauthenticated visitors can submit arbitrary path (`pa`) and referrer (`r`) values to the public tracking endpoint in src/Resources/functions/collect.php, which stores those strings verbatim in the analytics tables. The admin export logic in src/Admin/Data_Export.php writes these stored values directly into SQL INSERT statements without escaping. A crafted path such as \"),('999','x');DROP TABLE wp_users;-- breaks out of the value list. When an administrator later imports that export file, the import handler in src/Admin/Data_Import.php reads the uploaded SQL with file_get_contents, performs only a superficial header check, splits on semicolons, and executes each statement via $wpdb->query with no validation of table names or statement types. Additionally, any authenticated user with manage_koko_analytics can upload an arbitrary .sql file and have it executed in the same permissive way. Combined, attacker-controlled input flows from the tracking endpoint into exported SQL and through the import execution sink, or directly via malicious uploads, enabling arbitrary SQL execution. In a worst-case scenario, attackers can achieve arbitrary SQL execution on the WordPress database, allowing deletion of core tables (e.g., wp_users), insertion of backdoor administrator accounts, or other destructive/privilege-escalating actions. Version 2.1.3 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Koko Analytics es un plugin de análisis de código abierto para WordPress. Las versiones anteriores a la 2.1.3 son vulnerables a la ejecución arbitraria de SQL debido a la exportación/importación de datos analíticos sin escapar y a una importación de SQL administrativa poco restrictiva. Los visitantes no autenticados pueden enviar valores arbitrarios de ruta (`pa`) y de origen (`r`) al punto final de seguimiento público en src/Resources/functions/collect.php, que almacena esas cadenas tal cual en las tablas de análisis. La lógica de exportación de administración en src/Admin/Data_Export.php escribe estos valores almacenados directamente en sentencias SQL INSERT sin escapar. Una ruta manipulada como \"),(“999”,'x'); \"DROP TABLE wp_users;--\" se sale de la lista de valores. Cuando un administrador importa posteriormente ese archivo de exportación, el controlador de importación en src/Admin/Data_Import.php lee el SQL cargado con file_get_contents, realiza solo una comprobación superficial del encabezado, divide por puntos y coma, y ejecuta cada instrucción mediante $wpdb-&gt;query sin validar los nombres de las tablas ni los tipos de instrucción. Además, cualquier usuario autenticado con el permiso manage_koko_analytics puede subir un archivo .sql arbitrario y hacer que se ejecute de la misma manera permisiva. En conjunto, las entradas controladas por el atacante fluyen desde el punto final de seguimiento hacia el SQL exportado y a través del canal de ejecución de la importación, o directamente mediante subidas maliciosas, lo que permite la ejecución arbitraria de SQL. En el peor de los casos, los atacantes pueden ejecutar código SQL arbitrario en la base de datos de WordPress, lo que les permitiría eliminar tablas fundamentales (por ejemplo, wp_users), crear cuentas de administrador con puertas traseras o llevar a cabo otras acciones destructivas o de escalada de privilegios. La versión 2.1.3 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibericode:koko_analytics:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "CB3DC92C-231A-456F-A8CE-109A55F6F278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1HdQKf42prwrBUUG2CwbIkccTp2i6HR6d/view?usp=sharing",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation" ]
      }, {
        "url" : "https://github.com/ibericode/koko-analytics/commit/7b7d58f4a1838c8203cf4e7bb59847c982432119",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ibericode/koko-analytics/security/advisories/GHSA-jgfh-264m-xh3q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23522",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T17:15:50.590",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out, so it's enabling attackers to delete other users' KB files if they know the knowledge base ID and file ID. While the vulnerability is confirmed, practical exploitation requires knowing target's KB ID and target's file ID. These IDs are random and not easily enumerable. However, IDs may leak through shared links, logs, referrer headers and so on. Missing authorization check is a critical security flaw regardless. Users should upgrade to version 2.0.0-next.193 to receive a patch."
      }, {
        "lang" : "es",
        "value" : "LobeChat es una plataforma de aplicación de chat de código abierto. Antes de la versión 2.0.0-next.193, el endpoint tRPC 'knowledgeBase.removeFilesFromKnowledgeBase' permite a los usuarios autenticados eliminar archivos de cualquier base de conocimiento sin verificar la propiedad. El filtro 'userId' en la consulta de la base de datos está comentado, lo que permite a los atacantes eliminar archivos de KB de otros usuarios si conocen el ID de la base de conocimiento y el ID del archivo. Aunque la vulnerabilidad está confirmada, la explotación práctica requiere conocer el ID de KB del objetivo y el ID del archivo del objetivo. Estos ID son aleatorios y no son fácilmente enumerables. Sin embargo, los ID pueden filtrarse a través de enlaces compartidos, registros, encabezados de referencia y demás. La falta de verificación de autorización es una falla de seguridad crítica de todos modos. Los usuarios deben actualizar a la versión 2.0.0-next.193 para recibir un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lobehub/lobe-chat/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-j7xp-4mg9-x28r",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23530",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T17:15:50.747",
      "lastModified" : "2026-01-28T18:53:04.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_planar` does not validate `nSrcWidth`/`nSrcHeight` against `planar->maxWidth`/`maxHeight` before RLE decode. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, 'freerdp_bitmap_decompress_planar' no valida 'nSrcWidth'/'nSrcHeight' contra 'planar-&gt;maxWidth'/'maxHeight' antes de la decodificación RLE. Un servidor malicioso puede desencadenar un desbordamiento de búfer de pila del lado del cliente, causando un fallo (DoS) y una posible corrupción de la pila con riesgo de ejecución de código dependiendo del comportamiento del asignador y del diseño de la pila circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/planar.c#L1689-L1696",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/planar.c#L1713-L1716",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/planar.c#L951-L953",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r4hv-852m-fq7p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23531",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T17:15:50.897",
      "lastModified" : "2026-01-28T18:51:35.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating the destination rectangle, allowing an out-of-bounds read/write via crafted RDPGFX surface updates. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, en ClearCodec, cuando 'glyphData' está presente, 'clear_decompress' llama a 'freerdp_image_copy_no_overlap' sin validar el rectángulo de destino, lo que permite una lectura/escritura fuera de límites a través de actualizaciones de superficie RDPGFX manipuladas. Un servidor malicioso puede desencadenar un desbordamiento de búfer de pila del lado del cliente, causando un fallo (DoS) y una potencial corrupción de pila con riesgo de ejecución de código, dependiendo del comportamiento del asignador y del diseño de pila circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/clear.c#L1139-L1145",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xj5h-9cr5-23c5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23532",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T17:15:51.040",
      "lastModified" : "2026-01-28T18:48:28.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the  FreeRDP client’s `gdi_SurfaceToSurface` path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, un desbordamiento de búfer de pila del lado del cliente ocurre en la ruta 'gdi_SurfaceToSurface' del cliente FreeRDP debido a una falta de coincidencia entre la sujeción del rectángulo de destino y el tamaño de copia real. Un servidor malicioso puede desencadenar un desbordamiento de búfer de pila del lado del cliente, causando un fallo (DoS) y una posible corrupción de la pila con riesgo de ejecución de código dependiendo del comportamiento del asignador y del diseño de la pila circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/gdi/gfx.c#L1368-L1382",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fq8c-87hj-7gvr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1169",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T18:16:04.583",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en birkir prime hasta 0.4.0.beta.0. Esta vulnerabilidad afecta a código desconocido. Dicha manipulación conduce a falsificación de petición en sitios cruzados. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser usado. El proyecto fue informado del problema tempranamente a través de un informe de problema pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/birkir/prime/issues/547",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341763",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341763",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731287",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1170",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T18:16:04.773",
      "lastModified" : "2026-02-23T09:16:48.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file /graphql of the component GraphQL API. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en birkir prime hasta 0.4.0.beta.0. Este problema afecta a algún procesamiento desconocido del archivo /graphql del componente GraphQL API. Realizar una manipulación resulta en revelación de información. El ataque puede iniciarse de forma remota. El exploit ahora es público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/birkir/prime/issues/541",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731100",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-19T18:16:04.950",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged identity headers such as X-Is-Admin-Project, X-Roles, or X-User-Id, an authenticated attacker may escalate privileges or impersonate other users. All deployments using the external_oauth2_token middleware are affected."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en OpenStack keystonemiddleware 10.5 hasta 10.7 antes de 10.7.2, 10.8 y 10.9 antes de 10.9.1, y 10.10 hasta 10.12 antes de 10.12.1. El middleware external_oauth2_token no sanea los encabezados de autenticación entrantes antes de procesar los tokens de OAuth 2.0. Al enviar encabezados de identidad falsificados como X-Is-Admin-Project, X-Roles, o X-User-Id, un atacante autenticado puede escalar privilegios o suplantar a otros usuarios. Todas las implementaciones que utilizan el middleware external_oauth2_token se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.net/bugs/2129018",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/16/9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/16/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/16/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23533",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:05.170",
      "lastModified" : "2026-01-28T18:46:17.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX ClearCodec decode path when maliciously crafted residual data causes out-of-bounds writes during color output. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, se produce un desbordamiento de búfer de montón del lado del cliente en la ruta de decodificación RDPGFX ClearCodec cuando datos residuales creados maliciosamente causan escrituras fuera de límites durante la salida de color. Un servidor malicioso puede desencadenar un desbordamiento de búfer de montón del lado del cliente, causando un fallo (DoS) y una posible corrupción del montón con riesgo de ejecución de código dependiendo del comportamiento del asignador y del diseño del montón circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/clear.c#L268-L281",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/clear.c#L336",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-32q9-m5qr-9j2v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23534",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:05.307",
      "lastModified" : "2026-01-28T18:44:11.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes past the end of the destination surface buffer. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, un desbordamiento de búfer de montón del lado del cliente ocurre en la ruta de decodificación de las bandas ClearCodec cuando coordenadas de banda manipuladas permiten escrituras más allá del final del búfer de superficie de destino. Un servidor malicioso puede desencadenar un desbordamiento de búfer de montón del lado del cliente, causando un fallo (DoS) y una posible corrupción del montón con riesgo de ejecución de código dependiendo del comportamiento del asignador y del diseño del montón circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/clear.c#L878-L879",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/clear.c#L883-L884",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3frr-mp8w-4599",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23625",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:05.437",
      "lastModified" : "2026-02-02T20:49:09.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.4 are affected by a stored cross-site scripting vulnerability in the Roadmap view. OpenProject’s roadmap view renders the “Related work packages” list for each version. When a version contains work packages from a different project (e.g., a subproject), the helper link_to_work_package prepends package.project.to_s to the link and returns the entire string with .html_safe. Because project names are user-controlled and no escaping happens before calling html_safe, any HTML placed in a subproject name is injected verbatim into the page. The underlying issue is mitigated in versions 16.6.5 and 17.0.0 by setting a `X-Content-Type-Options: nosniff` header, which was in place until a refactoring move to Rails standard content-security policy, which did not properly apply this header in the new configuration since OpenProject 16.3.0. Those who cannot upgrade their installations should ensure that they add a X-Content-Type-Options: nosniff header in their proxying web application server."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Las versiones 16.3.0 a la 16.6.4 están afectadas por una vulnerabilidad de cross-site scripting almacenado en la vista de Hoja de Ruta. La vista de hoja de ruta de OpenProject renderiza la lista de 'Paquetes de trabajo relacionados' para cada versión. Cuando una versión contiene paquetes de trabajo de un proyecto diferente (por ejemplo, un subproyecto), el ayudante link_to_work_package antepone package.project.to_s al enlace y devuelve la cadena completa con .html_safe. Debido a que los nombres de los proyectos son controlados por el usuario y no se produce ningún escape antes de llamar a html_safe, cualquier HTML colocado en el nombre de un subproyecto se inyecta textualmente en la página. El problema subyacente se mitiga en las versiones 16.6.5 y 17.0.0 al establecer un encabezado 'X-Content-Type-Options: nosniff', que estuvo en su lugar hasta una refactorización a la política de seguridad de contenido estándar de Rails, que no aplicó correctamente este encabezado en la nueva configuración desde OpenProject 16.3.0. Aquellos que no puedan actualizar sus instalaciones deben asegurarse de añadir un encabezado 'X-Content-Type-Options: nosniff' en su servidor de aplicaciones web de proxy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "16.3.0",
            "versionEndExcluding" : "16.6.5",
            "matchCriteriaId" : "9E445CBC-3EAC-4310-BF92-C9DC0CC0AF09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-cvpq-cc56-gwxx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23646",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:05.587",
      "lastModified" : "2026-02-02T20:46:13.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Users of OpenProject versions prior to 16.6.5 and 17.0.1 have the ability to view and end their active sessions via Account Settings → Sessions. When deleting a session, it was not properly checked if the session belongs to the user. As the ID that is used to identify these session objects use incremental integers, users could iterate requests using `DELETE /my/sessions/:id` and thus unauthenticate other users. Users did not have access to any sensitive information (like browser identifier, IP addresses, etc) of other users that are stored in the session. The problem was patched in OpenProject versions 16.6.5 and 17.0.1. No known workarounds are available as this does not require any permissions or other that can temporarily be disabled."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Los usuarios de versiones de OpenProject anteriores a la 16.6.5 y 17.0.1 tienen la capacidad de ver y finalizar sus sesiones activas a través de Configuración de la cuenta ? Sesiones. Al eliminar una sesión, no se verificaba correctamente si la sesión pertenecía al usuario. Dado que el ID que se utiliza para identificar estos objetos de sesión usa enteros incrementales, los usuarios podían iterar solicitudes usando 'DELETE /my/sessions/:id' y así desautenticar a otros usuarios. Los usuarios no tenían acceso a ninguna información sensible (como identificador de navegador, direcciones IP, etc.) de otros usuarios que se almacena en la sesión. El problema fue parcheado en las versiones de OpenProject 16.6.5 y 17.0.1. No hay soluciones alternativas conocidas disponibles ya que esto no requiere ningún permiso u otro que pueda deshabilitarse temporalmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-488"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.5",
            "matchCriteriaId" : "4C6FE059-AB36-4883-AE55-2E65FDE51BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FA3834-A1AB-4489-AE2A-2C7FAE9B619F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-w422-xf8f-v4vp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23721",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:05.730",
      "lastModified" : "2026-02-02T20:44:39.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. When using groups in OpenProject to manage users, the group members should only be visible to users that have the View Members permission in any project that the group is also a member of. Prior to versions 17.0.1 and 16.6.5, due to a failed permission check, if a user had the View Members permission in any project, they could enumerate all Groups and view which other users are part of the group. The issue has been fixed in OpenProject 17.0.1 and 16.6.5. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Cuando se utilizan grupos en OpenProject para gestionar usuarios, los miembros del grupo solo deberían ser visibles para los usuarios que tienen el permiso 'Ver miembros' en cualquier proyecto del que el grupo también sea miembro. Antes de las versiones 17.0.1 y 16.6.5, debido a una comprobación de permisos fallida, si un usuario tenía el permiso 'Ver miembros' en cualquier proyecto, podía enumerar todos los Grupos y ver qué otros usuarios formaban parte del grupo. El problema ha sido solucionado en OpenProject 17.0.1 y 16.6.5. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.5",
            "matchCriteriaId" : "4C6FE059-AB36-4883-AE55-2E65FDE51BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FA3834-A1AB-4489-AE2A-2C7FAE9B619F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-vj77-wrc2-5h5h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23732",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:05.867",
      "lastModified" : "2026-01-28T18:38:37.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbData`/remaining length and never validates against the minimum size implied by `cx/cy`. A malicious server can trigger a client‑side global buffer overflow, causing a crash (DoS). Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, el análisis de FastGlyph confía en 'cbData'/la longitud restante y nunca valida contra el tamaño mínimo implícito por 'cx/cy'. Un servidor malicioso puede desencadenar un desbordamiento de búfer global del lado del cliente, causando un fallo (DoS). La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/cache/glyph.c#L463-L480",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/codec/color.c#L261-L277",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/core/graphics.c#L138",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/core/orders.c#L2186C17-L2199",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qxp-j2fj-c3pp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qxp-j2fj-c3pp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23833",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:06.007",
      "lastModified" : "2026-03-04T15:02:35.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ESPHome is a system to control microcontrollers remotely through Home Automation systems. In versions 2025.9.0 through 2025.12.6, an integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used. The bounds check `ptr + field_length > end` in `components/api/proto.cpp` can overflow when a malicious client sends a large `field_length` value. This affects all ESPHome device platforms (ESP32, ESP8266, RP2040, LibreTiny). The overflow bypasses the out-of-bounds check, causing the device to read invalid memory and crash. When using the plaintext API protocol, this attack can be performed without authentication. When noise encryption is enabled, knowledge of the encryption key is required. Users should upgrade to ESPHome 2025.12.7 or later to receive a patch, enable API encryption with a unique key per device, and follow the Security Best Practices."
      }, {
        "lang" : "es",
        "value" : "ESPHome es un sistema para controlar microcontroladores remotamente a través de sistemas de automatización del hogar. En las versiones 2025.9.0 a 2025.12.6, un desbordamiento de entero en el decodificador protobuf del componente API permite ataques de denegación de servicio cuando no se utiliza el cifrado de API. La comprobación de límites `ptr + field_length &gt; end` en `components/api/proto.cpp` puede desbordarse cuando un cliente malicioso envía un valor `field_length` grande. Esto afecta a todas las plataformas de dispositivos ESPHome (ESP32, ESP8266, RP2040, LibreTiny). El desbordamiento omite la comprobación fuera de límites, lo que provoca que el dispositivo lea memoria no válida y falle. Cuando se utiliza el protocolo API de texto plano, este ataque puede realizarse sin autenticación. Cuando el cifrado de ruido está habilitado, se requiere conocimiento de la clave de cifrado. Los usuarios deben actualizar a ESPHome 2025.12.7 o posterior para recibir un parche, habilitar el cifrado de API con una clave única por dispositivo y seguir las Mejores Prácticas de Seguridad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esphome:esphome:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.9.0",
            "versionEndExcluding" : "2025.12.7",
            "matchCriteriaId" : "F8E39B6F-1F3D-4F50-B25F-5582CCDDD22D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://esphome.io/guides/security_best_practices",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/esphome/esphome/commit/69d7b6e9210390051318bd8e6410727689de08d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/esphome/esphome/pull/13306",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/esphome/esphome/security/advisories/GHSA-4h3h-63v6-88qx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23836",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:06.147",
      "lastModified" : "2026-02-18T16:01:00.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized code generation for HotCRP formulas which allowed users to trigger the execution of arbitrary PHP code. The problem is patched in release version 3.2."
      }, {
        "lang" : "es",
        "value" : "HotCRP es software de revisión de conferencias. Un problema introducido en abril de 2024 en la versión 3.1 llevó a una generación de código insuficientemente saneado para las fórmulas de HotCRP, lo que permitió a los usuarios desencadenar la ejecución de código PHP arbitrario. El problema está parcheado en la versión de lanzamiento 3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotcrp:hotcrp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.2",
            "matchCriteriaId" : "B96A133C-9FF9-4749-9340-E21E8FBB2A13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kohler/hotcrp/commit/4674fcfbb76511072a1145dad620756fc1d4b4e9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/commit/bfc7e0db15df6ed6d544a639020d2ce05a5f0834",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/security/advisories/GHSA-hpqh-j6qx-x57h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23883",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:06.297",
      "lastModified" : "2026-01-28T18:35:31.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `pointer_free` calls `xf_Pointer_Free` and frees it again, triggering ASan UAF. A malicious server can trigger a client‑side use after free, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, xf_Pointer_New libera cursorPixels en caso de fallo, luego pointer_free llama a xf_Pointer_Free y lo libera de nuevo, lo que activa un UAF de ASan. Un servidor malicioso puede desencadenar un uso después de liberación del lado del cliente, causando una caída (DoS) y una posible corrupción de la pila con riesgo de ejecución de código, dependiendo del comportamiento del asignador y del diseño de la pila circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_graphics.c#L312-L319",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_graphics.c#L340",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/libfreerdp/cache/pointer.c#L164-L174",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcrr-85qx-4p6x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23884",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T18:16:06.430",
      "lastModified" : "2026-01-28T18:31:29.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trigger a client‑side use after free, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.21.0, la eliminación de mapas de bits fuera de pantalla deja 'gdi-&gt;drawing' apuntando a memoria liberada, causando UAF cuando llegan paquetes de actualización relacionados. Un servidor malicioso puede desencadenar un uso después de la liberación del lado del cliente, causando un fallo (DoS) y una posible corrupción del heap con riesgo de ejecución de código, dependiendo del comportamiento del asignador y del diseño del heap circundante. La versión 3.21.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.0",
            "matchCriteriaId" : "E6899265-905F-4A3A-96D3-07B552FBFBEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/libfreerdp/cache/offscreen.c#L114-L122",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/libfreerdp/cache/offscreen.c#L87-L91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cfgj-vc84-f3pp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1171",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T19:16:03.373",
      "lastModified" : "2026-02-23T09:16:49.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the component GraphQL Field Handler. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en birkir prime hasta la versión 0.4.0.beta.0. Se ve afectada una función desconocida del archivo /graphql del componente GraphQL Field Handler. La ejecución de una manipulación puede llevar a una denegación de servicio. El ataque puede lanzarse remotamente. El exploit ha sido publicado y puede utilizarse. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/birkir/prime/issues/542",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341765",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341765",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1172",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T19:16:03.553",
      "lastModified" : "2026-02-23T09:16:49.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the file /graphql of the component GraphQL Directive Handler. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en birkir prime hasta la versión 0.4.0.beta.0. El elemento afectado es una función desconocida del archivo /graphql del componente GraphQL Directive Handler. La manipulación conduce a denegación de servicio. La explotación remota del ataque es posible. El exploit ha sido revelado al público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/birkir/prime/issues/543",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731103",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23838",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:03.937",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tandoor Recipes is a recipe manager than can be installed with the Nix package manager. Starting in version 23.05 and prior to version 26.05, when using the default configuration of Tandoor Recipes, specifically using SQLite and default `MEDIA_ROOT`, the full database file may be externally accessible, potentially on the Internet. The root cause is that the NixOS module configures the working directory of Tandoor Recipes, as well as the value of `MEDIA_ROOT`, to be `/var/lib/tandoor-recipes`. This causes Tandoor Recipes to create its `db.sqlite3` database file in the same directory as `MEDIA_ROOT` causing it to be accessible without authentication through HTTP like any other media file. This is the case when using `GUNICORN_MEDIA=1` or when using a web server like nginx to serve media files. NixOS 26.05 changes the default value of `MEDIA_ROOT` to a sub folder of the data directory. This only applies to configurations with `system.stateVersion` >= 26.05. For older configurations, one of the workarounds should be applied instead. NixOS 25.11 has received a backport of this patch, though it doesn't fix this vulnerability without user intervention. A recommended workaround is to move `MEDIA_ROOT` into a subdirectory. Non-recommended workarounds include switching to PostgreSQL or disallowing access to `db.sqlite3`."
      }, {
        "lang" : "es",
        "value" : "Tandoor Recipes es un gestor de recetas que se puede instalar con el gestor de paquetes Nix. A partir de la versión 23.05 y antes de la versión 26.05, al usar la configuración predeterminada de Tandoor Recipes, específicamente usando SQLite y el `MEDIA_ROOT` predeterminado, el archivo completo de la base de datos puede ser accesible externamente, potencialmente en Internet. La causa raíz es que el módulo de NixOS configura el directorio de trabajo de Tandoor Recipes, así como el valor de `MEDIA_ROOT`, para que sea `/var/lib/tandoor-recipes`. Esto hace que Tandoor Recipes cree su archivo de base de datos `db.sqlite3` en el mismo directorio que `MEDIA_ROOT` haciéndolo accesible sin autenticación a través de HTTP como cualquier otro archivo multimedia. Este es el caso al usar `GUNICORN_MEDIA=1` o al usar un servidor web como nginx para servir archivos multimedia. NixOS 26.05 cambia el valor predeterminado de `MEDIA_ROOT` a una subcarpeta del directorio de datos. Esto solo se aplica a configuraciones con `system.stateVersion` &gt;= 26.05. Para configuraciones más antiguas, una de las soluciones alternativas debería aplicarse en su lugar. NixOS 25.11 ha recibido un backport de este parche, aunque no corrige esta vulnerabilidad sin intervención del usuario. Una solución alternativa recomendada es mover `MEDIA_ROOT` a un subdirectorio. Las soluciones alternativas no recomendadas incluyen cambiar a PostgreSQL o denegar el acceso a `db.sqlite3`."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NixOS/nixpkgs/issues/338339",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/pull/427845",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/pull/481140",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/security/advisories/GHSA-g8w3-p77x-mmxh",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23839",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.080",
      "lastModified" : "2026-02-03T14:48:00.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryUpdated=`. Version 0.70.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Movary es una aplicación web para rastrear, calificar y explorar tu historial de películas vistas. Debido a una validación de entrada insuficiente, los atacantes pueden desencadenar cargas útiles de cross-site scripting en versiones anteriores a la 0.70.0. El parámetro vulnerable es '?categoryUpdated='. La versión 0.70.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leepeuker:movary:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.70.0",
            "matchCriteriaId" : "97791827-BE81-4574-9CDC-B0033B5ADE68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leepeuker/movary/blob/main/public/js/settings-account-location.js#L237",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/leepeuker/movary/releases/tag/0.70.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/leepeuker/movary/security/advisories/GHSA-v32w-5qx7-p3vq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23840",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.227",
      "lastModified" : "2026-02-03T14:47:15.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryDeleted=`. Version 0.70.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Movary es una aplicación web para rastrear, calificar y explorar tu historial de películas vistas. Debido a una validación de entrada insuficiente, los atacantes pueden activar cargas útiles de cross-site scripting en versiones anteriores a la 0.70.0. El parámetro vulnerable es '?categoryDeleted='. La versión 0.70.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leepeuker:movary:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.70.0",
            "matchCriteriaId" : "97791827-BE81-4574-9CDC-B0033B5ADE68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leepeuker/movary/blob/main/public/js/settings-account-location.js#L204",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/leepeuker/movary/releases/tag/0.70.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/leepeuker/movary/security/advisories/GHSA-pj3m-gmq8-2r57",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23841",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.370",
      "lastModified" : "2026-02-02T15:17:06.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryCreated=`. Version 0.70.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Movary es una aplicación web para rastrear, calificar y explorar tu historial de películas vistas. Debido a una validación de entrada insuficiente, los atacantes pueden activar cargas útiles de cross-site scripting en versiones anteriores a la 0.70.0. El parámetro vulnerable es '?categoryCreated='. La versión 0.70.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leepeuker:movary:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.70.0",
            "matchCriteriaId" : "97791827-BE81-4574-9CDC-B0033B5ADE68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leepeuker/movary/releases/tag/0.70.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/leepeuker/movary/security/advisories/GHSA-v877-x568-4v5v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23842",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.510",
      "lastModified" : "2026-02-05T18:03:53.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management. Concurrent invocations of the get_response() method can exhaust the underlying SQLAlchemy connection pool, resulting in persistent service unavailability and requiring a manual restart to recover. Version 1.2.11 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "ChatterBot es un motor de diálogo conversacional de aprendizaje automático para crear chatbots. Las versiones de ChatterBot hasta la 1.2.10 son vulnerables a una condición de denegación de servicio causada por una gestión inadecuada de la sesión de base de datos y del pool de conexiones. Las invocaciones concurrentes del método get_response() pueden agotar el pool de conexiones subyacente de SQLAlchemy, lo que resulta en una indisponibilidad persistente del servicio y requiere un reinicio manual para recuperarse. La versión 1.2.11 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatterbot:chatterbot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.11",
            "matchCriteriaId" : "4D8B9379-D459-4198-B388-2BCC2378AB98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunthercox/ChatterBot/commit/de89fe648139f8eeacc998ad4524fab291a378cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gunthercox/ChatterBot/pull/2432",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gunthercox/ChatterBot/releases/tag/1.2.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-v4w8-49pv-mf72",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/assets/4ee845c4-b847-4854-84ec-4b2fb2f7090f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23843",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.660",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "teklifolustur_app is a web-based PHP application that allows users to create, manage, and track quotes for their clients. Prior to commit dd082a134a225b8dcd401b6224eead4fb183ea1c, an Insecure Direct Object Reference (IDOR) vulnerability exists in the offer view functionality. Authenticated users can manipulate the offer_id parameter to access offers belonging to other users. The issue is caused by missing authorization checks ensuring that the requested offer belonged to the currently authenticated user. Commit dd082a134a225b8dcd401b6224eead4fb183ea1c contains a patch."
      }, {
        "lang" : "es",
        "value" : "teklifolustur_app es una aplicación PHP basada en web que permite a los usuarios crear, gestionar y rastrear cotizaciones para sus clientes. Antes del commit dd082a134a225b8dcd401b6224eead4fb183ea1c, una vulnerabilidad de Referencia Directa Insegura a Objeto (IDOR) existía en la funcionalidad de vista de ofertas. Los usuarios autenticados podían manipular el parámetro offer_id para acceder a ofertas que pertenecían a otros usuarios. El problema era provocado por la falta de comprobaciones de autorización que asegurasen que la oferta solicitada pertenecía al usuario actualmente autenticado. El commit dd082a134a225b8dcd401b6224eead4fb183ea1c contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sibercii6-crypto/teklifolustur_app/commit/dd082a134a225b8dcd401b6224eead4fb183ea1c",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/sibercii6-crypto/teklifolustur_app/security/advisories/GHSA-6h9r-mmg3-cg7m",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23845",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.820",
      "lastModified" : "2026-02-05T18:35:31.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery (SSRF) via HTML Check CSS Download. The HTML Check feature (`/api/v1/message/{ID}/html-check`) is designed to analyze HTML emails for compatibility. During this process, the `inlineRemoteCSS()` function automatically downloads CSS files from external `<link rel=\"stylesheet\" href=\"...\">` tags to inline them for testing. Version 1.28.3 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Mailpit es una herramienta de prueba de correo electrónico y API para desarrolladores. Las versiones anteriores a la 1.28.3 son vulnerables a la falsificación de petición del lado del servidor (SSRF) a través de la descarga de CSS de la función HTML Check. La función HTML Check ('/api/v1/message/{ID}/html-check') está diseñada para analizar correos electrónicos HTML para compatibilidad. Durante este proceso, la función 'inlineRemoteCSS()' descarga automáticamente archivos CSS de etiquetas externas ' para incrustarlos para pruebas. La versión 1.28.3 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axllent:mailpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.3",
            "matchCriteriaId" : "D00C1680-049F-472C-A900-66D6B2A11A04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axllent/mailpit/commit/1679a0aba592ebc8487a996d37fea8318c984dfe",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/releases/tag/v1.28.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-6jxm-fv7w-rw5j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23878",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T19:16:04.963",
      "lastModified" : "2026-02-05T18:39:14.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents (PDFs, attachments) associated with any submission. The problem was patched in commit ceacd5f1476458792c44c6a993670f02c984b4a0."
      }, {
        "lang" : "es",
        "value" : "HotCRP es un software de revisión de conferencias. A partir del commit aa20ef288828b04550950cf67c831af8a525f508 y antes del commit ceacd5f1476458792c44c6a993670f02c984b4a0, los autores con al menos una entrega en un sitio de HotCRP podían usar la API de documentos para descargar cualquier documento (PDFs, adjuntos) asociado con cualquier entrega. El problema fue parcheado en el commit ceacd5f1476458792c44c6a993670f02c984b4a0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotcrp:hotcrp:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49A46B9-6C68-43E5-9B50-3C271E236CDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kohler/hotcrp/commit/aa20ef288828b04550950cf67c831af8a525f508",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/commit/ceacd5f1476458792c44c6a993670f02c984b4a0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/security/advisories/GHSA-vh3x-xwj4-jvqx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1173",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T20:15:48.760",
      "lastModified" : "2026-02-23T09:16:49.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en birkir prime hasta la versión 0.4.0.beta.0. El elemento afectado es una función desconocida del archivo /graphql del componente GraphQL Array Based Query Batch Handler. La manipulación resulta en denegación de servicio. El ataque puede ser ejecutado de forma remota. El exploit ha sido hecho público y podría ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/birkir/prime/issues/544",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1174",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T20:15:48.930",
      "lastModified" : "2026-02-23T09:16:49.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en birkir prime hasta la versión 0.4.0.beta.0. Esto afecta a una función desconocida del archivo /graphql del componente GraphQL Alias Handler. Esta manipulación causa consumo de recursos. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue notificado del problema tempranamente a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/birkir/prime/issues/545",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21696",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T20:15:49.107",
      "lastModified" : "2026-02-02T20:40:21.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a condition that floods the panel with activity records. After Wings sends activity logs to the panel it deletes the processed activity entries from the wings SQLite database. However, it does not consider the max parameter limit of SQLite, 32766 as of SQLite 3.32.0. If wings attempts to delete more than 32766 entries from the SQLite database in one query, it triggers an error (SQL logic error: too many SQL variables (1)) and does not remove any entries from the database. These entries are then indefinitely re-processed and resent to the panel each time the cron runs. By successfully exploiting this vulnerability, an attacker can trigger a situation where wings will keep uploading the same activity data to the panel repeatedly (growing each time to include new activity) until the panels' database server runs out of disk space. Version 1.12.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Wings es el plano de control del servidor para Pterodactyl, un panel de gestión de servidores de juegos gratuito y de código abierto. A partir de la versión 1.7.0 y antes de la versión 1.12.0, Wings no considera el límite máximo de parámetros de SQLite al procesar las entradas del registro de actividad, lo que permite a un usuario con pocos privilegios activar una condición que inunda el panel con registros de actividad. Después de que Wings envía los registros de actividad al panel, elimina las entradas de actividad procesadas de la base de datos SQLite de Wings. Sin embargo, no considera el límite máximo de parámetros de SQLite, 32766 a partir de SQLite 3.32.0. Si Wings intenta eliminar más de 32766 entradas de la base de datos SQLite en una sola consulta, activa un error (error de lógica SQL: demasiadas variables SQL (1)) y no elimina ninguna entrada de la base de datos. Estas entradas son entonces reprocesadas indefinidamente y reenviadas al panel cada vez que se ejecuta el cron. Al explotar con éxito esta vulnerabilidad, un atacante puede desencadenar una situación en la que Wings seguirá subiendo los mismos datos de actividad al panel repetidamente (creciendo cada vez para incluir nueva actividad) hasta que el servidor de la base de datos del panel se quede sin espacio en disco. La versión 1.12.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.12.0",
            "matchCriteriaId" : "DB68BF14-2EEE-43EF-8AAC-DC858B1C623C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pterodactyl/wings/blob/9ffbcdcdb1163da823cf9959b9602df9f7dcb54a/internal/cron/activity_cron.go#L81",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/blob/9ffbcdcdb1163da823cf9959b9602df9f7dcb54a/internal/cron/sftp_cron.go#L86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-2497-gp99-2m74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23846",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T20:15:49.243",
      "lastModified" : "2026-02-05T18:44:54.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwords via URL query parameters instead of the HTTP request body. This causes passwords to be logged in server access logs and potentially exposed through browser history, Referer headers, and proxy logs. Version 1.16.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Tugtainer es una aplicación autoalojada para automatizar actualizaciones de contenedores Docker. En versiones anteriores a la 1.16.1, el mecanismo de autenticación de contraseña transmite contraseñas a través de parámetros de consulta de URL en lugar del cuerpo de la solicitud HTTP. Esto provoca que las contraseñas se registren en los registros de acceso del servidor y se expongan potencialmente a través del historial del navegador, los encabezados Referer y los registros de proxy. La versión 1.16.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quenary:tugtainer:*:*:*:*:*:docker:*:*",
            "versionEndExcluding" : "1.16.1",
            "matchCriteriaId" : "B0EB5A8E-D461-4035-93D7-007BF202F58D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Quenary/tugtainer/commit/9d23bf40ac1d39005582abfcf0a84753a4e29d52",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Quenary/tugtainer/security/advisories/GHSA-f2qf-f544-xm4p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23847",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T20:15:49.393",
      "lastModified" : "2026-01-30T15:36:42.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Versions prior to 3.5.4 are vulnerable to reflected cross-site scripting in /api/icon/getDynamicIcon due to unsanitized SVG input. The endpoint generates SVG images for text icons (type=8). The content query parameter is inserted directly into the SVG <text> tag without XML escaping. Since the response Content-Type is image/svg+xml, injecting unescaped tags allows breaking the XML structure and executing JavaScript. Version 3.5.4 patches the issue.]"
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Las versiones anteriores a la 3.5.4 son vulnerables a cross-site scripting reflejado en /API/icon/getDynamicIcon debido a una entrada SVG no saneada. El endpoint genera imágenes SVG para iconos de texto (type=8). El parámetro de consulta content se inserta directamente en la etiqueta SVG  sin escape XML. Dado que el Content-Type de la respuesta es image/svg+xml, la inyección de etiquetas sin escape permite romper la estructura XML y ejecutar JavaScript. La versión 3.5.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "D3F308D6-1396-4488-9382-0EE485C9289C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/commit/5c0cc375b47567e15edd2119066b09bb0aa18777",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/issues/16844",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w836-5gpm-7r93",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23850",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T20:15:49.533",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted server side html-rendering which allows arbitrary file read (LFD). Version 3.5.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. En versiones anteriores a la 3.5.4, la característica de markdown permite la renderización HTML sin restricciones del lado del servidor, lo que permite la lectura arbitraria de archivos (LFD). La versión 3.5.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "D3F308D6-1396-4488-9382-0EE485C9289C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/blob/master/kernel/model/file.go#L1035",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/blob/v3.4.2/kernel/api/filetree.go#L799-L886",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/commit/b2274baba2e11c8cf8901b0c5c871e5b27f1f6dd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/commit/f8f4b517077b92c90c0d7b51ac11be1b34b273ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/issues/16860",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-cv54-7wv7-qxcw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23851",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T20:15:49.670",
      "lastModified" : "2026-01-30T15:12:24.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Versions prior to 3.5.4 contain a logic vulnerability in the /api/file/globalCopyFiles endpoint. The function allows authenticated users to copy files from any location on the server's filesystem into the application's workspace without proper path validation. The vulnerability exists in the api/file.go source code. The function globalCopyFiles accepts a list of source paths (srcs) from the JSON request body. While the code checks if the source file exists using filelock.IsExist(src), it fails to validate whether the source path resides within the authorized workspace directory. Version 3.5.4 patches the issue."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Las versiones anteriores a la 3.5.4 contienen una vulnerabilidad de lógica en el endpoint /api/file/globalCopyFiles. La función permite a los usuarios autenticados copiar archivos desde cualquier ubicación del sistema de archivos del servidor al espacio de trabajo de la aplicación sin una validación de ruta adecuada. La vulnerabilidad existe en el código fuente api/file.go. La función globalCopyFiles acepta una lista de rutas de origen (srcs) del cuerpo de la solicitud JSON. Aunque el código verifica si el archivo de origen existe usando filelock.IsExist(src), no valida si la ruta de origen reside dentro del directorio de espacio de trabajo autorizado. La versión 3.5.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "D3F308D6-1396-4488-9382-0EE485C9289C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/commit/b2274baba2e11c8cf8901b0c5c871e5b27f1f6dd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/commit/f8f4b517077b92c90c0d7b51ac11be1b34b273ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/issues/16860",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-94c7-g2fj-7682",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T20:15:49.803",
      "lastModified" : "2026-01-30T15:08:46.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Versions prior to 3.5.4 have a stored Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject arbitrary HTML attributes into the `icon` attribute of a block via the `/api/attr/setBlockAttrs` API. The payload is later rendered in the dynamic icon feature in an unsanitized context, leading to stored XSS and, in the desktop environment, potential remote code execution (RCE). This issue bypasses the previous fix for issue `#15970` (XSS → RCE via dynamic icons). Version 3.5.4 contains an updated fix."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Las versiones anteriores a la 3.5.4 tienen una vulnerabilidad de cross-site scripting (XSS) almacenado que permite a un atacante inyectar atributos HTML arbitrarios en el atributo 'icon' de un bloque a través de la API '/api/attr/setBlockAttrs'. La carga útil se renderiza posteriormente en la función de icono dinámico en un contexto no saneado, lo que lleva a XSS almacenado y, en el entorno de escritorio, a una posible ejecución remota de código (RCE). Este problema elude la corrección anterior para el problema '#15970' (XSS ? RCE a través de iconos dinámicos). La versión 3.5.4 contiene una corrección actualizada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "D3F308D6-1396-4488-9382-0EE485C9289C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/commit/0be7e1d4e0da9aac0da850b7aeb9b50ede7e5bdb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7c6g-g2hx-23vv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1175",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T21:15:49.487",
      "lastModified" : "2026-02-04T18:18:15.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en birkir prime hasta 0.4.0.beta.0. Esto impacta una función desconocida del archivo /graphql del componente GraphQL Directive Handler. Dicha manipulación conduce a la exposición de información a través de mensaje de error. El ataque puede ser realizado de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de problema, pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "65419F9E-4813-4B36-BA74-1839A5525EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birkir/prime/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/birkir/prime/issues/546",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.731106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1176",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T21:15:50.587",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en itsourcecode School Management System 1.0. Afectada es una función desconocida del archivo /subject/index.php. Realizar una manipulación del argumento ID resulta en inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/32",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736477",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23837",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:50.903",
      "lastModified" : "2026-02-02T13:24:34.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and poetntially earlier versions allows unauthenticated users to bypass the mandatory authentication check in the roleBasedAuthMiddleware. By simply not providing an authentication cookie (making req.user undefined), a request is incorrectly passed through to downstream handlers. All users running MyTube with loginEnabled: true are impacted. This flaw allows an attacker to access and modify application settings via /api/settings, change administrative and visitor passwords, and access other protected routes that rely on this specific middleware. The problem is patched in v1.7.66. MyTube maintainers recommend all users upgrade to at least version v1.7.64 immediately to secure their instances. The fix ensures that the middleware explicitly blocks requests if a user is not authenticated, rather than defaulting to next(). Those who cannot upgrade immediately can mitigate risk by restricting network access by usi a firewall or reverse proxy (like Nginx) to restrict access to the /api/ endpoints to trusted IP addresses only or, if they are comfortable editing the source code, manually patch by locating roleBasedAuthMiddleware and ensuring that the logic defaults to an error (401 Unauthorized) when req.user is undefined, instead of calling next()."
      }, {
        "lang" : "es",
        "value" : "MyTube es un descargador y reproductor autoalojado para varios sitios web de vídeo. Una vulnerabilidad presente en la versión 1.7.65 y potencialmente en versiones anteriores permite a los usuarios no autenticados eludir la comprobación de autenticación obligatoria en el roleBasedAuthMiddleware. Simplemente al no proporcionar una cookie de autenticación (haciendo que req.user sea indefinido), una solicitud se pasa incorrectamente a los manejadores posteriores. Todos los usuarios que ejecutan MyTube con loginEnabled: true se ven afectados. Esta falla permite a un atacante acceder y modificar la configuración de la aplicación a través de /API/settings, cambiar las contraseñas administrativas y de visitante, y acceder a otras rutas protegidas que dependen de este middleware específico. El problema está parcheado en la v1.7.66. Los mantenedores de MyTube recomiendan a todos los usuarios actualizar a la versión v1.7.64 como mínimo inmediatamente para asegurar sus instancias. La solución asegura que el middleware bloquea explícitamente las solicitudes si un usuario no está autenticado, en lugar de recurrir a next(). Aquellos que no puedan actualizar inmediatamente pueden mitigar el riesgo restringiendo el acceso a la red usando un cortafuegos o un proxy inverso (como Nginx) para restringir el acceso a los puntos finales /API/ solo a direcciones IP de confianza o, si se sienten cómodos editando el código fuente, aplicar un parche manualmente localizando roleBasedAuthMiddleware y asegurándose de que la lógica recurra a un error (401 Unauthorized) cuando req.user sea indefinido, en lugar de llamar a next()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:franklioxygen:mytube:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.66",
            "matchCriteriaId" : "2C05A30F-C789-4252-9C6D-E381B1D1E670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/franklioxygen/MyTube/commit/f85ae9b0d6e4a6480c6af5b675a99069d08d496e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-cmvj-g69f-8664",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23844",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:51.207",
      "lastModified" : "2026-02-05T18:49:26.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Whisper Money is a personal finance application. Versions prior to 0.1.5 have an insecure direct object reference vulnerability. A user can update/create account balances in other users' bank accounts. Version 0.1.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Whisper Money es una aplicación de finanzas personales. Las versiones anteriores a la 0.1.5 tienen una vulnerabilidad de referencia directa insegura a objetos. Un usuario puede actualizar/crear saldos de cuentas en las cuentas bancarias de otros usuarios. La versión 0.1.5 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-488"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whisper.money:whisper_money:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.5",
            "matchCriteriaId" : "10737ED6-1DD2-4FC6-80DB-CC3DB723EAFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/whisper-money/whisper-money/commit/80117c3edeaf5c5a5166f3815fc555a15b5ce686",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/whisper-money/whisper-money/pull/60",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/whisper-money/whisper-money/security/advisories/GHSA-c4g3-wpxr-2m74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23848",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:51.433",
      "lastModified" : "2026-02-02T13:27:34.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.7.71, a rate limiting bypass via `X-Forwarded-For` header spoofing allows unauthenticated attackers to bypass IP-based rate limiting on general API endpoints. Attackers can spoof client IPs by manipulating the `X-Forwarded-For` header, enabling unlimited requests to protected endpoints, including general API endpoints (enabling DoS) and other rate-limited functionality. Version 1.7.71 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "MyTube es un descargador y reproductor autoalojado para varios sitios web de vídeo. Antes de la versión 1.7.71, una omisión de limitación de velocidad mediante la suplantación del encabezado `X-Forwarded-For` permite a atacantes no autenticados omitir la limitación de velocidad basada en IP en los endpoints generales de la API. Los atacantes pueden suplantar las IP del cliente manipulando el encabezado `X-Forwarded-For`, lo que permite solicitudes ilimitadas a puntos finales protegidos, incluidos los puntos finales generales de la API (lo que permite DoS) y otras funcionalidades con limitación de velocidad. La versión 1.7.71 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:franklioxygen:mytube:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.71",
            "matchCriteriaId" : "2F1B06A3-6E3D-40FA-87EF-05C2805BEE55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/franklioxygen/MyTube/commit/bc057458804ae7ac70ea00605680512ed3d4257b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-59gr-529g-x45h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23849",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:51.653",
      "lastModified" : "2026-02-03T14:30:45.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Browser provides a file managing interface within a specified directory and can be used to upload, delete, preview, rename, and edit files. Prior to version 2.55.0, the JSONAuth. Auth function contains a logic flaw that allows unauthenticated attackers to enumerate valid usernames by measuring the response time of the /api/login endpoint. The vulnerability exists due to a \"short-circuit\" evaluation in the authentication logic. When a username is not found in the database, the function returns immediately. However, if the username does exist, the code proceeds to verify the password using bcrypt (users.CheckPwd), which is a computationally expensive operation designed to be slow. This difference in execution path creates a measurable timing discrepancy. Version 2.55.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "El Navegador de Archivos proporciona una interfaz de gestión de archivos dentro de un directorio especificado y puede ser utilizado para subir, eliminar, previsualizar, renombrar y editar archivos. Antes de la versión 2.55.0, la función JSONAuth. Auth contiene un fallo lógico que permite a atacantes no autenticados enumerar nombres de usuario válidos midiendo el tiempo de respuesta del endpoint /api/login. La vulnerabilidad existe debido a una evaluación de 'cortocircuito' en la lógica de autenticación. Cuando un nombre de usuario no se encuentra en la base de datos, la función devuelve inmediatamente. Sin embargo, si el nombre de usuario sí existe, el código procede a verificar la contraseña usando bcrypt (users.CheckPwd), que es una operación computacionalmente costosa diseñada para ser lenta. Esta diferencia en la ruta de ejecución crea una discrepancia de tiempo medible. La versión 2.55.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.55.0",
            "matchCriteriaId" : "36CB8D4B-1DFD-4F56-81BD-E31B346B0CE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/filebrowser/filebrowser/commit/24781badd413ee20333aba5cce1919d676e01889",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-43mm-m3h2-3prc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23875",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:51.890",
      "lastModified" : "2026-02-05T19:50:58.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CrawlChat is an open-source, AI-powered platform that transforms technical documentation into intelligent chatbots. Prior to version 0.0.8, a non-existing permission check for the CrawlChat's Discord bot allows non-manage guild users to put malicious content onto the collection knowledge base. Usually, admin / mods of a Discord guild use the `jigsaw` emoji to save a specific message (chain) onto the collection's knowledge base of CrawlChat. Unfortunately an permission check (for e.g. MANAGE_SERVER; MANAGE_MESSAGES etc.) was not done, allowing normal users of the guild to information to the knowledge base. With targeting specific parts that are commonly asked, users can manipulate the content given out by the bot (on all integrations), to e.g. redirect users to a malicious site, or send information to a malicious user. Version 0.0.8 patches the issue."
      }, {
        "lang" : "es",
        "value" : "CrawlChat es una plataforma de código abierto, impulsada por IA, que transforma la documentación técnica en chatbots inteligentes. Antes de la versión 0.0.8, una verificación de permisos inexistente para el bot de Discord de CrawlChat permite a usuarios que no gestionan el gremio colocar contenido malicioso en la base de conocimientos de la colección. Normalmente, los administradores / moderadores de un gremio de Discord usan el emoji 'jigsaw' para guardar un mensaje específico (cadena) en la base de conocimientos de la colección de CrawlChat. Desafortunadamente, no se realizó una verificación de permisos (por ejemplo, MANAGE_SERVER; MANAGE_MESSAGES, etc.), permitiendo a los usuarios normales del gremio información a la base de conocimientos. Al apuntar a partes específicas que se preguntan comúnmente, los usuarios pueden manipular el contenido proporcionado por el bot (en todas las integraciones), para, por ejemplo, redirigir a los usuarios a un sitio malicioso, o enviar información a un usuario malicioso. La versión 0.0.8 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crawlchat:crawlchat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.8",
            "matchCriteriaId" : "D2B3FA94-6CD8-4EB0-A1D7-23661BB56EBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crawlchat/crawlchat/commit/f90ebb93c6a830f6cf609d683f6425af8434573a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/crawlchat/crawlchat/releases/tag/v0.0.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/crawlchat/crawlchat/security/advisories/GHSA-f484-62p4-6w4p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23877",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:52.147",
      "lastModified" : "2026-03-13T14:42:23.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) can browse arbitrary directories on the server filesystem. Version 2.1.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Swing Music es un reproductor de música autoalojado para archivos de audio locales. Antes de la versión 2.1.4, la función `list_folders()` de Swing Music en el endpoint `/folder/dir-browser` es vulnerable a ataques de salto de directorio. Cualquier usuario autenticado (incluidos los no administradores) puede navegar por directorios arbitrarios en el sistema de archivos del servidor. La versión 2.1.4 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-25"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swingmx:swing_music:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.4",
            "matchCriteriaId" : "C6C617A2-90C7-409F-9D71-B31879D6A3BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swingmx/swingmusic/commit/9a915ca62af1502b9550722df82f5d432cb73de3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/swingmx/swingmusic/security/advisories/GHSA-pj88-9xww-gxmh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23880",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:52.357",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OnboardLite is a comprehensive membership lifecycle platform built for student organizations at the University of Central Florida. Versions of the software prior to commit 1d32081a66f21bcf41df1ecb672490b13f6e429f have a stored cross-site scripting vulnerability that can be rendered to an admin when they attempt to migrate a user's discord account in the dashboard. Commit 1d32081a66f21bcf41df1ecb672490b13f6e429f patches the issue."
      }, {
        "lang" : "es",
        "value" : "OnboardLite es una plataforma integral para el ciclo de vida de la membresía construida para organizaciones estudiantiles en la Universidad de Florida Central. Las versiones del software anteriores al commit 1d32081a66f21bcf41df1ecb672490b13f6e429f tienen una vulnerabilidad de cross-site scripting almacenado que puede ser renderizada a un administrador cuando intenta migrar la cuenta de Discord de un usuario en el panel de control. El commit 1d32081a66f21bcf41df1ecb672490b13f6e429f corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HackUCF/OnboardLite/commit/1d32081a66f21bcf41df1ecb672490b13f6e429f",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/HackUCF/OnboardLite/security/advisories/GHSA-93w8-83cg-h89g",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23886",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T21:15:52.597",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Swift W3C TraceContext is a Swift implementation of the W3C Trace Context standard, and Swift OTel is an OpenTelemetry Protocol (OTLP) backend for Swift Log, Swift Metrics, and Swift Distributed Tracing. Prior to Swift W3C TraceContext version 1.0.0-beta.5 and Swift OTel version 1.0.4, a denial-of-service vulnerability due to improper input validation allows a remote attacker to crash the service via a malformed HTTP header. This allows crashing the process with data coming from the network when used with, for example, an HTTP server. Most common way of using Swift W3C Trace Context is through Swift OTel. Version 1.0.0-beta.5 of Swift W3C TraceContext and version 1.0.4 of Swift OTel contain a patch for this issue. As a workaround, disable either Swift OTel or the code that extracts the trace information from an incoming header (such as a `TracingMiddleware`)."
      }, {
        "lang" : "es",
        "value" : "Swift W3C TraceContext es una implementación en Swift del estándar W3C Trace Context, y Swift OTel es un backend del Protocolo OpenTelemetry (OTLP) para Swift Log, Swift Metrics y Swift Distributed Tracing. Antes de Swift W3C TraceContext versión 1.0.0-beta.5 y Swift OTel versión 1.0.4, una vulnerabilidad de denegación de servicio debido a una validación de entrada incorrecta permite a un atacante remoto bloquear el servicio a través de un encabezado HTTP malformado. Esto permite bloquear el proceso con datos provenientes de la red cuando se usa con, por ejemplo, un servidor HTTP. La forma más común de usar Swift W3C Trace Context es a través de Swift OTel. La versión 1.0.0-beta.5 de Swift W3C TraceContext y la versión 1.0.4 de Swift OTel contienen un parche para este problema. Como solución alternativa, deshabilite Swift OTel o el código que extrae la información de rastreo de un encabezado entrante (como un 'TracingMiddleware')."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swift-otel/swift-otel/releases/tag/1.0.4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/swift-otel/swift-w3c-trace-context/commit/5da9b143ba6046734de3fa51dafea28290174e4e",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/swift-otel/swift-w3c-trace-context/releases/tag/1.0.0-beta.5",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/swift-otel/swift-w3c-trace-context/security/advisories/GHSA-mvpq-2v8x-ww6g",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1177",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T22:16:02.080",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /kmf/save_folder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una debilidad ha sido identificada en Yonyou KSOA 9.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /kmf/save_folder.jsp del componente HTTP GET Parameter Handler. La ejecución de una manipulación del argumento folderid puede llevar a inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734577",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1178",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T22:16:02.273",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /kmf/select.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Yonyou KSOA 9.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /kmf/select.jsp del componente HTTP GET Parameter Handler. La manipulación del argumento folderid conduce a inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23885",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T22:16:02.453",
      "lastModified" : "2026-04-09T14:54:27.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby `eval()` function to dynamically execute a string provided by the `resource_handler.engine_name` attribute in `Alchemy::ResourcesHelper#resource_url_proxy`. The vulnerability exists in `app/helpers/alchemy/resources_helper.rb` at line 28. The code explicitly bypasses security linting with `# rubocop:disable Security/Eval`, indicating that the use of a dangerous function was known but not properly mitigated. Since `engine_name` is sourced from module definitions that can be influenced by administrative configurations, it allows an authenticated attacker to escape the Ruby sandbox and execute arbitrary system commands on the host OS. Versions 7.4.12 and 8.0.3 fix the issue by replacing `eval()` with `send()`."
      }, {
        "lang" : "es",
        "value" : "Alchemy es un motor de sistema de gestión de contenido de código abierto escrito en Ruby on Rails. Antes de las versiones 7.4.12 y 8.0.3, la aplicación utiliza la función `eval()` de Ruby para ejecutar dinámicamente una cadena proporcionada por el atributo `resource_handler.engine_name` en `Alchemy::ResourcesHelper#resource_url_proxy`. La vulnerabilidad existe en `app/helpers/alchemy/resources_helper.rb` en la línea 28. El código omite explícitamente el análisis de seguridad con `# rubocop:disable Security/Eval`, indicando que el uso de una función peligrosa era conocido pero no mitigado adecuadamente. Dado que `engine_name` se obtiene de definiciones de módulos que pueden ser influenciadas por configuraciones de administración, permite a un atacante autenticado escapar de la sandbox de Ruby y ejecutar comandos de sistema arbitrarios en el sistema operativo anfitrión. Las versiones 7.4.12 y 8.0.3 solucionan el problema reemplazando `eval()` por `send()`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alchemy-cms:alchemy_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.12",
            "matchCriteriaId" : "6F247A42-8A2A-4EB9-98D9-6D29401B36FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alchemy-cms:alchemy_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "7950D68F-3FA8-4C37-8AC4-0F0D8D5B9110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AlchemyCMS/alchemy_cms/commit/55d03ec600fd9e07faae1138b923790028917d26",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AlchemyCMS/alchemy_cms/commit/563c4ce45bf5813b7823bf3403ca1fc32cb769e7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AlchemyCMS/alchemy_cms/releases/tag/v7.4.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/AlchemyCMS/alchemy_cms/releases/tag/v8.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/AlchemyCMS/alchemy_cms/security/advisories/GHSA-2762-657x-v979",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23944",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-19T22:16:02.603",
      "lastModified" : "2026-02-02T15:19:05.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to version 1.13.2, unauthenticated requests could be proxied to remote environment agents, allowing access to remote environment resources without authentication. The environment proxy middleware handled `/api/environments/{id}/...` requests for remote environments before authentication was enforced. When the environment ID was not local, the middleware proxied the request and attached the manager-held agent token, even if the caller was unauthenticated. This enabled unauthenticated access to remote environment operations (e.g., listing containers, streaming logs, or other agent endpoints). An unauthenticated attacker could access and manipulate remote environment resources via the proxy, potentially leading to data exposure, unauthorized changes, or service disruption. Version 1.13.2 patches the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Arcane es una interfaz para gestionar contenedores Docker, imágenes, redes y volúmenes. Antes de la versión 1.13.2, las solicitudes no autenticadas podían ser redirigidas a agentes de entornos remotos, permitiendo el acceso a recursos de entornos remotos sin autenticación. El middleware de proxy de entorno manejaba las solicitudes `/api/environments/{id}/...` para entornos remotos antes de que se aplicara la autenticación. Cuando el ID del entorno no era local, el middleware redirigía la solicitud y adjuntaba el token de agente en posesión del gestor, incluso si el solicitante no estaba autenticado. Esto permitía el acceso no autenticado a operaciones de entornos remotos (por ejemplo, listar contenedores, transmitir registros u otros puntos finales de agente). Un atacante no autenticado podía acceder y manipular recursos de entornos remotos a través del proxy, lo que podría llevar a la exposición de datos, cambios no autorizados o interrupción del servicio. La versión 1.13.2 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcane:arcane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.2",
            "matchCriteriaId" : "3331EF16-7450-4A37-8FD0-7BE706CC82C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getarcaneapp/arcane/commit/2008e1b93b25d0c4c3fff3af07843766231614eb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getarcaneapp/arcane/pull/1532",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://github.com/getarcaneapp/arcane/releases/tag/v1.13.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-2jv8-39rp-cqqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1179",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T23:16:02.870",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/user_popedom.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Yonyou KSOA 9.0. Esto afecta una parte desconocida del archivo /kmf/user_popedom.jsp del componente HTTP GET Parameter Handler. La manipulación del argumento folderid resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit es ahora público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yonyou:ksoa:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16092315-0438-4B91-A293-8CE177EAD656"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve/issues/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734594",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1192",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T23:16:03.067",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imode_alldata.php. Executing a manipulation of the argument DevId can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Tosei Online Store Management System ??????????? 1.01. El elemento afectado es una función desconocida del archivo /cgi-bin/imode_alldata.php. La ejecución de una manipulación del argumento DevId puede llevar a una inyección de comandos. El ataque puede ejecutarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tosei-corporation:online_store_management_system:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8CD5D8-4061-415D-9D2E-A83B841831E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.341777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734205",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/yuqueyonghuexlgkz/zepczx/keenhf9u2bnw5o6g",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1193",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-19T23:16:03.247",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cache/view of the component View Interface. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en MineAdmin 1.x/2.x. El elemento afectado es una función desconocida del archivo /system/cache/view del componente View Interface. La manipulación conduce a una autorización indebida. El ataque es posible de llevar a cabo de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A167C8E-5C7F-4192-8DD0-01444D06C9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED883D-2F40-4DE0-8816-8495146E06B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/MineAdmin-Vulnerability/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1194",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T00:15:48.727",
      "lastModified" : "2026-02-05T20:06:58.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in MineAdmin 1.x/2.x. This affects an unknown function of the component Swagger. The manipulation results in information disclosure. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en MineAdmin 1.x/2.x. Esto afecta una función desconocida del componente Swagger. La manipulación resulta en revelación de información. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó con el proveedor con antelación sobre esta revelación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A167C8E-5C7F-4192-8DD0-01444D06C9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED883D-2F40-4DE0-8816-8495146E06B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/MineAdmin-Vulnerability/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341779",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341779",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734271",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22218",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-20T00:15:48.910",
      "lastModified" : "2026-02-02T20:56:44.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element identifier (chainlitKey) can then be used to retrieve the file contents via /project/file/<chainlitKey>, allowing disclosure of any file readable by the Chainlit service."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Chainlit anteriores a la 2.9.4 contienen una vulnerabilidad de lectura arbitraria de archivos en el flujo de actualización de /project/element. Un cliente autenticado puede enviar un Element personalizado con un valor de ruta controlado por el usuario, haciendo que el servidor copie el archivo referenciado en la sesión del atacante. El identificador de elemento resultante (chainlitKey) puede usarse entonces para recuperar el contenido del archivo a través de /project/file/, permitiendo la divulgación de cualquier archivo legible por el servicio Chainlit."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainlit:chainlit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.4",
            "matchCriteriaId" : "829EC540-D789-4A01-A062-B4EA52818A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Chainlit/chainlit/releases/tag/2.9.4",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/chainlit-arbitrary-file-read-via-project-element",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22219",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-20T00:15:49.053",
      "lastModified" : "2026-02-02T20:56:09.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Chainlit anteriores a la 2.9.4 contienen una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en el flujo de actualización de /project/element cuando se configura con el backend de la capa de datos de SQLAlchemy. Un cliente autenticado puede proporcionar un valor de URL controlado por el usuario en un Element, que es recuperado por la lógica de creación de elementos de SQLAlchemy utilizando una petición HTTP GET saliente. Esto permite a un atacante realizar peticiones HTTP arbitrarias desde el servidor de Chainlit a servicios de red internos o puntos finales de metadatos en la nube y almacenar las respuestas recuperadas a través del proveedor de almacenamiento configurado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainlit:chainlit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.4",
            "matchCriteriaId" : "829EC540-D789-4A01-A062-B4EA52818A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Chainlit/chainlit/releases/tag/2.9.4",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/chainlit-sqlalchemy-data-layer-ssrf-via-project-element",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1195",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T01:15:56.260",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en MineAdmin 1.x/2.x. Esto afecta a la función refresh del archivo /system/refresh del componente JWT Token Handler. Esta manipulación causa una verificación insuficiente de la autenticidad de los datos. Es posible iniciar el ataque remotamente. El ataque se considera de alta complejidad. Se dice que la explotabilidad es difícil. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A167C8E-5C7F-4192-8DD0-01444D06C9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED883D-2F40-4DE0-8816-8495146E06B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/MineAdmin-Vulnerability/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341780",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341780",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1196",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T01:15:56.443",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en MineAdmin 1.x/2.x. Afectada es una función desconocida del archivo /system/getFileInfoById. Tal manipulación del argumento ID conduce a revelación de información. Es posible lanzar el ataque remotamente. El ataque requiere un alto nivel de complejidad. La explotabilidad se dice que es difícil. El exploit ha sido revelado públicamente y puede ser usado. El proveedor fue contactado tempranamente sobre esta revelación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A167C8E-5C7F-4192-8DD0-01444D06C9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED883D-2F40-4DE0-8816-8495146E06B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/MineAdmin-Vulnerability/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341781",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341781",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1197",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T01:15:56.620",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en MineAdmin 1.x/2.x. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /system/downloadById. Realizar una manipulación del argumento ID resulta en revelación de información. El ataque puede ser iniciado remotamente. La complejidad del ataque es calificada como alta. La explotación parece ser difícil. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta revelación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A167C8E-5C7F-4192-8DD0-01444D06C9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mineadmin:mineadmin:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EED883D-2F40-4DE0-8816-8495146E06B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/MineAdmin-Vulnerability/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341782",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341782",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1202",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T01:15:56.800",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in CRMEB up to 5.6.3. The affected element is the function appleLogin of the file crmeb/app/api/controller/v1/LoginController.php. Performing a manipulation of the argument openId results in improper authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en CRMEB hasta la versión 5.6.3. El elemento afectado es la función appleLogin del archivo crmeb/app/API/controller/v1/LoginController.PHP. Realizar una manipulación del argumento openId resulta en autenticación impropia. El ataque es posible de llevar a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.3",
            "matchCriteriaId" : "F4890E95-8C9F-4E12-B5A2-72AF73C7F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/apple_login_auth_bypass.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341788",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341788",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.734711",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1203",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T01:15:56.977",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in CRMEB up to 5.6.3. The impacted element is the function remoteRegister of the file crmeb/app/services/user/LoginServices.php of the component JSON Token Handler. Executing a manipulation of the argument uid can lead to improper authentication. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en CRMEB hasta la versión 5.6.3. El elemento afectado es la función remoteRegister del archivo crmeb/app/services/user/LoginServices.PHP del componente JSON Token Handler. La ejecución de una manipulación del argumento uid puede llevar a una autenticación incorrecta. El ataque puede realizarse de forma remota. El ataque requiere un alto nivel de complejidad. La explotabilidad se considera difícil. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.3",
            "matchCriteriaId" : "F4890E95-8C9F-4E12-B5A2-72AF73C7F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/jwt_auth_bypass/remote_register_jwt_bypass.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.341789",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.341789",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735349",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22770",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-20T01:15:57.153",
      "lastModified" : "2026-01-29T14:56:04.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But, in versions prior to 7.1.2-13, the last element in the set is not properly initialized. This will result in a release of an invalid pointer inside DestroyBilateralTLS when the memory allocation fails. Version 7.1.2-13 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. El método BilateralBlurImage asignará un conjunto de búferes dobles dentro de AcquireBilateralTLS. Pero, en versiones anteriores a la 7.1.2-13, el último elemento del conjunto no se inicializa correctamente. Esto resultará en la liberación de un puntero inválido dentro de DestroyBilateralTLS cuando la asignación de memoria falle. La versión 7.1.2-13 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-13",
            "matchCriteriaId" : "A4F0ED35-C455-412F-860C-5B3A9371E882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/3e0330721020e0c5bb52e4b77c347527dd71658e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-39h3-g67r-7g3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23874",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-20T01:15:57.300",
      "lastModified" : "2026-01-29T13:57:07.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `<write>` command when writing to MSL format. Version 7.1.2-13 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Las versiones anteriores a la 7.1.2-13 tienen un desbordamiento de pila mediante recursión infinita en el comando `` de MSL (Magick Scripting Language) al escribir en formato MSL. La versión 7.1.2-13 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-13",
            "matchCriteriaId" : "A4F0ED35-C455-412F-860C-5B3A9371E882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9vj4-wc7r-p844",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23876",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-20T01:15:57.440",
      "lastModified" : "2026-01-29T13:54:14.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-13 y 6.9.13-38, una vulnerabilidad de desbordamiento de búfer de pila en el decodificador de imágenes XBM (ReadXBMImage) permite a un atacante escribir datos controlados más allá del búfer de pila asignado al procesar un archivo de imagen creado con fines maliciosos. Cualquier operación que lea o identifique una imagen puede desencadenar el desbordamiento, haciéndolo explotable a través de las cadenas de procesamiento comunes de carga y procesamiento de imágenes. Las versiones 7.1.2-13 y 6.9.13-38 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-38",
            "matchCriteriaId" : "B5479E5D-F05A-4418-9D2B-12523B300E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-13",
            "matchCriteriaId" : "F658C5B2-8A54-42DB-88AB-FB7D5FE1712C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23947",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-20T01:15:57.583",
      "lastModified" : "2026-02-27T19:05:08.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions prior to 7.19.0 until 8.0.2 are vulnerable to arbitrary code execution in environments consuming generated clients. This issue is similar in nature to CVE-2026-22785, but affects a different code path in @orval/core that was not addressed by CVE-2026-22785's fix. The vulnerability allows untrusted OpenAPI specifications to inject arbitrary TypeScript/JavaScript code into generated clients via the x-enumDescriptions field, which is embedded without proper escaping in getEnumImplementation(). I have confirmed that the injection occurs during const enum generation and results in executable code within the generated schema files. Orval 7.19.0 and 8.0.2 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Orval genera clientes JS con seguridad de tipos (TypeScript) a partir de cualquier especificación OpenAPI v3 o Swagger v2 válida. Las versiones anteriores a la 7.19.0 hasta la 8.0.2 son vulnerables a la ejecución de código arbitrario en entornos que consumen clientes generados. Este problema es similar en naturaleza a CVE-2026-22785, pero afecta a una ruta de código diferente en @orval/core que no fue abordada por la corrección de CVE-2026-22785. La vulnerabilidad permite a especificaciones OpenAPI no confiables inyectar código TypeScript/JavaScript arbitrario en clientes generados a través del campo x-enumDescriptions, el cual se incrusta sin el escape adecuado en getEnumImplementation(). He confirmado que la inyección ocurre durante la generación de enumeraciones constantes y resulta en código ejecutable dentro de los archivos de esquema generados. Orval 7.19.0 y 8.0.2 contienen una corrección para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.19.0",
            "matchCriteriaId" : "0AAE568E-4A06-4EFF-8618-458703194D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "37F5479C-90CE-43A1-A3F9-5FC8AA7BDBBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orval-labs/orval/releases/tag/v8.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23949",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-20T01:15:57.723",
      "lastModified" : "2026-03-11T23:12:19.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `jaraco.context.tarball()` function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed. The strip_first_component filter splits the path on the first `/` and extracts the second component, while allowing `../` sequences. Paths like `dummy_dir/../../etc/passwd` become `../../etc/passwd`. Note that this suffers from a nested tarball attack as well with multi-level tar files such as `dummy_dir/inner.tar.gz`, where the inner.tar.gz includes a traversal `dummy_dir/../../config/.env` that also gets translated to `../../config/.env`. Version 6.1.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "jaraco.context, un paquete de software de código abierto que proporciona algunos decoradores y gestores de contexto útiles, tiene una vulnerabilidad de recorrido de ruta Zip Slip en la función `jaraco.context.tarball()` a partir de la versión 5.2.0 y anterior a la versión 6.1.0. La vulnerabilidad puede permitir a los atacantes extraer archivos fuera del directorio de extracción previsto cuando se procesan archivos tar maliciosos. El filtro strip_first_component divide la ruta en la primera barra «/» y extrae el segundo componente, al tiempo que permite secuencias «../». Las rutas como «dummy_dir/../../etc /passwd» se convierten en «../../etc /passwd». Tenga en cuenta que esto también sufre un ataque de archivo tar anidado con archivos tar de varios niveles, como `dummy_dir/inner.tar.gz`, donde inner.tar.gz incluye un recorrido `dummy_dir/../../config/.env` que también se traduce a `../../config/.env`. La versión 6.1.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaraco:jaraco.context:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "6.1.0",
            "matchCriteriaId" : "A34A13FF-2FDE-4605-81B7-D5C6507952A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23950",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-20T01:15:57.870",
      "lastModified" : "2026-02-18T15:50:29.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `ß` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `ß` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `ß` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue."
      }, {
        "lang" : "es",
        "value" : "node-tar, un Tar para Node.js, tiene una vulnerabilidad de condición de carrera en versiones hasta la 7.5.3 inclusive. Esto se debe a un manejo incompleto de colisiones de rutas Unicode en el sistema 'path-reservations'. En sistemas de archivos que no distinguen mayúsculas y minúsculas o que no distinguen la normalización (como macOS APFS, en el que ha sido probado), la librería no logra bloquear rutas en colisión (por ejemplo, 'ß' y 'ss'), permitiendo que se procesen en paralelo. Esto elude las salvaguardias internas de concurrencia de la librería y permite ataques de envenenamiento de enlaces simbólicos (Symlink Poisoning) a través de condiciones de carrera. La librería utiliza un sistema 'PathReservations' para asegurar que las comprobaciones de metadatos y las operaciones de archivo para la misma ruta se serialicen. Esto previene condiciones de carrera donde una entrada podría sobrescribir otra concurrentemente. Esta es una Condición de Carrera que permite la Sobreescritura Arbitraria de Archivos (Arbitrary File Overwrite). Esta vulnerabilidad afecta a usuarios y sistemas que utilizan node-tar en macOS (APFS/HFS+). Debido al uso de la normalización Unicode 'NFD' (en la que 'ß' y 'ss' son diferentes), las rutas en conflicto no conservan su orden correctamente en sistemas de archivos que ignoran la normalización Unicode (por ejemplo, APFS (en el que 'ß' causa una colisión de inodos con 'ss')). Esto permite a un atacante eludir bloqueos de paralelización internos ('PathReservations') utilizando nombres de archivo en conflicto dentro de un archivo tar malicioso. El parche en la versión 7.5.4 actualiza 'path-reservations.js' para usar una forma de normalización que coincida con el comportamiento del sistema de archivos de destino (por ejemplo, 'NFKD'), seguido primero de 'toLocaleLowerCase('en')' y luego de 'toLocaleUpperCase('en')'. Como solución alternativa, los usuarios que no pueden actualizar rápidamente, y que están utilizando 'node-tar' programáticamente para extraer datos arbitrarios de tarball deberían filtrar todas las entradas 'SymbolicLink' (como hace npm) para defenderse contra escrituras de archivos arbitrarias a través de este problema de colisión de nombres de entradas del sistema de archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-176"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isaacs:tar:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.5.4",
            "matchCriteriaId" : "D724D370-A0D0-436A-82FD-91AE149B932E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1051",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T02:15:46.423",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.1.0. This is due to missing or incorrect nonce validation on the hook_newsletter_action() function. This makes it possible for unauthenticated attackers to unsubscribe newsletter subscribers via a forged request granted they can trick a logged-in user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress 'The Newsletter – Send awesome emails from WordPress' es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 9.1.0, inclusive. Esto se debe a la validación de nonce faltante o incorrecta en la función hook_newsletter_action(). Esto hace posible que atacantes no autenticados den de baja a suscriptores del boletín a través de una petición falsificada, siempre que puedan engañar a un usuario con sesión iniciada para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/newsletter/tags/9.1.0/unsubscription/unsubscription.php#L141",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8de2156f-5087-4c16-8e5d-93b5c72ec536?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0899",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:12.480",
      "lastModified" : "2026-01-29T20:20:16.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Acceso a memoria fuera de límites en V8 en Google Chrome anterior a 144.0.7559.59 permitió a un atacante remoto explotar potencialmente la corrupción de objetos a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/458914193",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0900",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:14.660",
      "lastModified" : "2026-01-29T20:21:33.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en V8 en Google Chrome anterior a 144.0.7559.59 permitió a un atacante remoto explotar potencialmente la corrupción de objetos a través de una página HTML diseñada específicamente. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/465730465",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0901",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:15.510",
      "lastModified" : "2026-01-30T16:28:25.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en Blink en Google Chrome en Android anterior a 144.0.7559.59 permitió a un atacante remoto realizar suplantación de UI mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/40057499",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0902",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:15.623",
      "lastModified" : "2026-01-29T20:21:45.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en V8 en Google Chrome anterior a 144.0.7559.59 permitió a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-474"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/469143679",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0903",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:15.733",
      "lastModified" : "2026-01-29T20:22:01.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en Descargas en Google Chrome en Windows anterior a 144.0.7559.59 permitió a un atacante remoto eludir las protecciones de tipos de archivo peligrosos mediante un archivo malicioso. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/444803530",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0904",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:15.893",
      "lastModified" : "2026-01-29T20:22:51.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Interfaz de usuario de seguridad incorrecta en Credenciales Digitales en Google Chrome anterior a 144.0.7559.59 permitió a un atacante remoto realizar suplantación de dominio mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/452209495",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0905",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:15.997",
      "lastModified" : "2026-01-29T20:23:06.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Aplicación insuficiente de políticas en la Red en Google Chrome anterior a 144.0.7559.59 permitió a un atacante que obtuvo un archivo de registro de red obtener potencialmente información potencialmente sensible a través de un archivo de registro de red. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/465466773",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0906",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:16.110",
      "lastModified" : "2026-01-29T20:27:23.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI  in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "Interfaz de usuario de seguridad incorrecta en Google Chrome para Android anterior a 144.0.7559.59 permitió a un atacante remoto suplantar el contenido de la Omnibox (barra de URL) a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/467448811",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0907",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:16.217",
      "lastModified" : "2026-01-29T20:27:46.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "Interfaz de usuario de seguridad incorrecta en Vista Dividida en Google Chrome anterior a 144.0.7559.59 permitió a un atacante remoto realizar suplantación de UI a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/444653104",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0908",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-20T05:16:16.327",
      "lastModified" : "2026-01-29T20:27:56.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en ANGLE en Google Chrome anterior a 144.0.7559.59 permitió a un atacante remoto potencialmente explotar la corrupción de pila a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.59",
            "matchCriteriaId" : "7322229C-61DF-4A91-9816-F7796F9AABCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.60",
            "matchCriteriaId" : "258B923C-054B-4411-9E82-36C89A6BE4C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/452209503",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23909",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.467",
      "lastModified" : "2026-01-20T05:16:16.467",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23910",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.600",
      "lastModified" : "2026-01-20T05:16:16.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23911",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.673",
      "lastModified" : "2026-01-20T05:16:16.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23912",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.743",
      "lastModified" : "2026-01-20T05:16:16.743",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23913",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.817",
      "lastModified" : "2026-01-20T05:16:16.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23914",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.883",
      "lastModified" : "2026-01-20T05:16:16.883",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23915",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:16.953",
      "lastModified" : "2026-01-20T05:16:16.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23916",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:17.030",
      "lastModified" : "2026-01-20T05:16:17.030",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23917",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-20T05:16:17.093",
      "lastModified" : "2026-01-20T05:16:17.093",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1042",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T06:16:00.477",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Hello Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'digit_one' and 'digit_two' parameters in all versions up to, and including, 1.02 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Hello Bar para WordPress es vulnerable a cross-site scripting almacenado a través de los parámetros 'digit_one' y 'digit_two' en todas las versiones hasta la 1.02, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/wp-hello-bar.1.02.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-hello-bar/tags/1.02/wp-hello-bar.php#L152",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-hello-bar/tags/1.02/wp-hello-bar.php#L214",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-hello-bar/tags/1.02/wp-hello-bar.php#L222",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/wp-hello-bar/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/73b55486-adb8-40c6-9113-c98618d9cb00?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1045",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T06:16:00.640",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Viet contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Viet contact para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.3.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con permisos de nivel de administrador o superiores, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/viet-contact/trunk/inc/vietcontact-admin.php#L34",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/viet-contact/trunk/inc/vietcontact-content.php#L11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/131a6a35-e0d2-4613-8614-24bf11011098?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1218",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-20T06:16:00.797",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0. Impacted is the function initRCForm of the file RichClientService.class of the component com.artery.richclient.RichClientService. Performing a manipulation results in xml external entity reference. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Bjskzy Zhiyou ERP hasta 11.0. Afectada es la función initRCForm del archivo RichClientService.class del componente com.artery.richclient.RichClientService. Realizar una manipulación resulta en referencia a entidad externa XML. El ataque es posible de ser llevado a cabo remotamente. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        }, {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dingpotian/cve-vul/blob/main/Shikong-Zhiyou-ERP/Shikong-Zhiyou-ERP-XXE-RichClientService-initRCForm.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.341908",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.341908",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.735201",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1221",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-20T07:15:50.047",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS  has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware."
      }, {
        "lang" : "es",
        "value" : "El controlador AP PrismX MX100 desarrollado por BROWAN COMMUNICATIONS tiene una vulnerabilidad de Uso de Credenciales Hardcodeadas, permitiendo a atacantes remotos no autenticados iniciar sesión en la base de datos utilizando credenciales de base de datos hardcodeadas almacenadas en el firmware."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10643-2f8d7-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10642-3b808-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1222",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-20T07:15:50.290",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server."
      }, {
        "lang" : "es",
        "value" : "El controlador AP PrismX MX100 desarrollado por BROWAN COMMUNICATIONS tiene una vulnerabilidad de carga de archivos arbitrarios, permitiendo a atacantes remotos privilegiados cargar y ejecutar puertas traseras web shell, lo que posibilita la ejecución de código arbitrario en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10643-2f8d7-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10642-3b808-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1223",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-20T07:15:50.473",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend."
      }, {
        "lang" : "es",
        "value" : "El controlador de AP PrismX MX100 desarrollado por BROWAN COMMUNICATIONS tiene una vulnerabilidad de credenciales insuficientemente protegidas, permitiendo a atacantes remotos autenticados obtener contraseñas SMTP en texto plano a través de la interfaz web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10643-2f8d7-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10642-3b808-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0895",
      "sourceIdentifier" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
      "published" : "2026-01-20T08:16:01.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The extension extends TYPO3’ FileSpool component, which was vulnerable to Insecure Deserialization prior to  TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-sa-2026-004 . Since the related fix is overwritten by the extension, using the extension with a patched TYPO3 core version still allows for Insecure Deserialization, because the affected vulnerable code was extracted from TYPO3 core to the extension. More information about this vulnerability can be found in the related TYPO3 Core Security Advisory  TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-sa-2026-004 ."
      }, {
        "lang" : "es",
        "value" : "La extensión extiende el componente FileSpool de TYPO3, que era vulnerable a deserialización insegura antes de TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-sa-2026-004. Dado que la corrección relacionada es sobrescrita por la extensión, usar la extensión con una versión del núcleo de TYPO3 parcheada aún permite la deserialización insegura, porque el código vulnerable afectado fue extraído del núcleo de TYPO3 a la extensión. Más información sobre esta vulnerabilidad se puede encontrar en el aviso de seguridad del núcleo de TYPO3 relacionado TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-sa-2026-004."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CPS-IT/mailqueue/commit/12a0a35027bb5609917790a94e43bbf117abf733",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a"
      }, {
        "url" : "https://github.com/CPS-IT/mailqueue/commit/fd09aa4e1a751551bae4b228bee814e22f2048db",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a"
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2026-001",
        "source" : "f4fb688c-4412-4426-b4b8-421ecf27b14a"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1180",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-20T13:16:03.003",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using private_key_jwt. The issue allows a client to specify an arbitrary jwks_uri, which Keycloak then retrieves without validating the destination. This enables attackers to coerce the Keycloak server into making HTTP requests to internal or restricted network resources. As a result, attackers can probe internal services and cloud metadata endpoints, creating an information disclosure and reconnaissance risk."
      }, {
        "lang" : "es",
        "value" : "Se identificó un fallo en la característica de registro dinámico de clientes de OpenID Connect de Keycloak cuando los clientes se autentican usando private_key_jwt. El problema permite a un cliente especificar una jwks_uri arbitraria, que Keycloak luego recupera sin validar el destino. Esto permite a los atacantes forzar al servidor de Keycloak a realizar solicitudes HTTP a recursos de red internos o restringidos. Como resultado, los atacantes pueden sondear servicios internos y puntos finales de metadatos en la nube, creando un riesgo de revelación de información y reconocimiento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:6477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:6478",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1180",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2430781",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1183",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-20T13:16:03.180",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de in inyección HTML en múltiples productos de Botble como TransP, Athena, Martfury y Homzen, que consiste en una inyección HTML debido a una falta de validación adecuada de la entrada del usuario al enviar una solicitud a '/search' utilizando el parámetro 'q'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/html-injection-multiple-botble-products",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22844",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2026-01-20T14:16:21.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en los Routers Multimedia (MMR) de Zoom Node anteriores a la versión 5.2.1716.0 podría permitir a un participante de la reunión realizar la ejecución remota de código del MMR a través del acceso a la red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zoom.com/en/trust/security-bulletin/zsb-26001",
        "source" : "security@zoom.us"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0548",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T15:20:06.687",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized attachment deletion due to a missing capability check on the `delete_existing_user_photo` function in all versions up to, and including, 3.9.4. This makes it possible for authenticated attackers, with subscriber level access and above, to delete arbitrary attachments on the site."
      }, {
        "lang" : "es",
        "value" : "El plugin de solución de eLearning y cursos en línea Tutor LMS para WordPress es vulnerable a la eliminación no autorizada de adjuntos debido a una comprobación de capacidad faltante en la función 'delete_existing_user_photo' en todas las versiones hasta la 3.9.4, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, eliminen adjuntos arbitrarios en el sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?old_path=/tutor/tags/3.9.4/classes/User.php&new_path=/tutor/tags/3.9.5/classes/User.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e475e02-494a-4ad0-a83c-d027c3a32989?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0554",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T15:20:06.853",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NotificationX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'regenerate' and 'reset' REST API endpoints in all versions up to, and including, 3.1.11. This makes it possible for authenticated attackers, with Contributor-level access and above, to reset analytics for any NotificationX campaign, regardless of ownership."
      }, {
        "lang" : "es",
        "value" : "El plugin NotificationX para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en los endpoints de la API REST 'regenerate' y 'reset' en todas las versiones hasta la 3.1.11, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, restablecer las analíticas para cualquier campaña de NotificationX, independientemente de la propiedad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3433555%40notificationx&old=3426659%40notificationx&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://research.cleantalk.org/cve-2026-0554",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e3cd843b-ab38-45c4-a661-78d4e6db5201?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0608",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T15:20:07.010",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Head Meta Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'head-meta-data' post meta field in all versions up to, and including, 20251118 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Head Meta Data para WordPress es vulnerable a cross-site scripting almacenado a través del campo meta de publicación 'head-meta-data' en todas las versiones hasta, e incluyendo, 20251118 debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?old_path=/head-meta-data/tags/20251118&new_path=/head-meta-data/tags/20260105",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9592bb6d-8e1d-4c89-addd-11c07272a628?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0690",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T15:20:07.437",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FlatPM – Ad Manager, AdSense and Custom Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rank_math_description' custom field in all versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin FlatPM – Ad Manager, AdSense y Custom Code para WordPress es vulnerable a cross-site scripting almacenado a través del campo personalizado 'rank_math_description' en todas las versiones hasta la 3.2.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3434760/flatpm-wp",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/14b89618-8a30-4b8c-9490-f05e8fa8ca8a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0726",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-20T15:20:07.613",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.6 via deserialization of untrusted input in the 'nxt_unserialize_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present."
      }, {
        "lang" : "es",
        "value" : "El plugin Nexter Extension – Site Enhancements Toolkit para WordPress es vulnerable a la Inyección de Objetos PHP en todas las versiones hasta la 4.4.6, inclusive, mediante la deserialización de entrada no confiable en la función 'nxt_unserialize_replace'. Esto hace posible que atacantes no autenticados inyecten un Objeto PHP. No se conoce ninguna cadena POP presente en el software vulnerable, lo que significa que esta vulnerabilidad no tiene impacto a menos que otro plugin o tema que contenga una cadena POP esté instalado en el sitio. Si una cadena POP está presente a través de un plugin o tema adicional instalado en el sistema objetivo, podría permitir al atacante realizar acciones como eliminar archivos arbitrarios, recuperar datos sensibles o ejecutar código, dependiendo de la cadena POP presente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?old_path=/nexter-extension/tags/4.4.6/include/panel-settings/extensions/nexter-ext-replace-url.php&new_path=/nexter-extension/tags/4.4.7/include/panel-settings/extensions/nexter-ext-replace-url.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/02de9287-68e4-46ce-a491-3f6cbb7fc0ed?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1245",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-01-20T19:15:50.573",
      "lastModified" : "2026-02-03T21:41:59.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code injection vulnerability in the binary-parser library prior to version 2.3.0 allows arbitrary JavaScript code execution when untrusted values are used in parser field names or encoding parameters. The library directly interpolates these values into dynamically generated code without sanitization, enabling attackers to execute arbitrary code in the context of the Node.js process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de código en la librería binary-parser anterior a la versión 2.3.0 permite la ejecución arbitraria de código JavaScript cuando se utilizan valores no confiables en nombres de campos del analizador o parámetros de codificación. La librería interpola directamente estos valores en código generado dinámicamente sin sanitización, permitiendo a los atacantes ejecutar código arbitrario en el contexto del proceso de Node.js."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keichi:binary-parser:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "7FCCACB7-F3FF-4E03-91E5-3D0E0D2F69A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keichi/binary-parser",
        "source" : "cret@cert.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/keichi/binary-parser/pull/283",
        "source" : "cret@cert.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://kb.cert.org/vuls/id/102648",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/binary-parser",
        "source" : "cret@cert.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/102648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0622",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-01-20T20:16:01.483",
      "lastModified" : "2026-02-03T21:38:57.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset"
      }, {
        "lang" : "es",
        "value" : "La WebUI de Open 5GS utiliza una clave de firma JWT embebida (cámbiame) siempre que la variable de entorno JWT_SECRET_KEY no está definida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/issues/2264",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/856",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/pull/857",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/458022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21636",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:05.813",
      "lastModified" : "2026-01-30T20:20:56.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is enabled. Even without `--allow-net`, attacker-controlled inputs (such as URLs or socketPath options) can connect to arbitrary local sockets via net, tls, or undici/fetch. This breaks the intended security boundary of the permission model and enables access to privileged local services, potentially leading to privilege escalation, data exposure, or local code execution.\n\n* The issue affects users of the Node.js permission model on version v25.\n\nIn the moment of this vulnerability, network permissions (`--allow-net`) are still in the experimental phase."
      }, {
        "lang" : "es",
        "value" : "Una falla en el modelo de permisos de Node.js permite que las conexiones de Unix Domain Socket (UDS) eludan las restricciones de red cuando '--permission' está habilitado. Incluso sin '--allow-net', las entradas controladas por el atacante (como URLs u opciones de socketPath) pueden conectarse a sockets locales arbitrarios a través de net, tls o undici/fetch. Esto rompe el límite de seguridad previsto del modelo de permisos y permite el acceso a servicios locales privilegiados, lo que podría llevar a escalada de privilegios, exposición de datos o ejecución de código local.\n\n* El problema afecta a los usuarios del modelo de permisos de Node.js en la versión v25.\n\nEn el momento de esta vulnerabilidad, los permisos de red ('--allow-net') todavía están en fase experimental."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.3.0",
            "matchCriteriaId" : "970EF154-D905-4FDA-85CB-C3AB08BEFAEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21637",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:05.950",
      "lastModified" : "2026-01-30T20:18:32.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped."
      }, {
        "lang" : "es",
        "value" : "Una falla en el manejo de errores TLS de Node.js permite a atacantes remotos colapsar o agotar los recursos de un servidor TLS cuando se utilizan 'pskCallback' o 'ALPNCallback'. Las excepciones síncronas lanzadas durante estas devoluciones de llamada eluden las rutas estándar de manejo de errores TLS (tlsClientError y error), causando una terminación inmediata del proceso o fugas silenciosas de descriptores de archivo que eventualmente conducen a una denegación de servicio. Debido a que estas devoluciones de llamada procesan entradas controladas por el atacante durante el handshake TLS, un cliente remoto puede desencadenar el problema repetidamente. Esta vulnerabilidad afecta a los servidores TLS que utilizan devoluciones de llamada PSK o ALPN en todas las versiones de Node.js donde estas devoluciones de llamada lanzan excepciones sin ser envueltas de forma segura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "20.20.0",
            "matchCriteriaId" : "E84DD4EF-E69C-4141-80A3-06E83EE94A78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.22.0",
            "matchCriteriaId" : "132A7510-B3E9-4F85-9B61-A834B12DD7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.13.0",
            "matchCriteriaId" : "A83233BD-D901-4A1A-A3AF-0DC3E76CD2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.3.0",
            "matchCriteriaId" : "970EF154-D905-4FDA-85CB-C3AB08BEFAEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",
        "source" : "support@hackerone.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21640",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:06.063",
      "lastModified" : "2026-01-30T20:17:33.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error."
      }, {
        "lang" : "es",
        "value" : "El miembro de la comunidad de HackerOne Faraz Ahmed (PakCyberbot) ha informado de una inyección de cadena de formato en la configuración de Revive Adserver. Cuando se utilizan combinaciones de caracteres específicas en una configuración, la consola del usuario administrador podría deshabilitarse debido a un error fatal de PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquaplatform:revive_adserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "2AA08D1C-3638-4E0D-AC58-A8527E77536F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/3445332",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21641",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:06.187",
      "lastModified" : "2026-01-30T20:15:53.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. Users with permissions to delete trackers are mistakenly allowed to delete trackers owned by other accounts."
      }, {
        "lang" : "es",
        "value" : "El miembro de la comunidad de HackerOne Jad Ghamloush (0xjad) ha informado de una vulnerabilidad de omisión de autorización en el script `tracker-delete.php` de Revive Adserver. A los usuarios con permisos para eliminar rastreadores se les permite erróneamente eliminar rastreadores que pertenecen a otras cuentas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquaplatform:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "FB1E6D97-42AD-4A1B-89B3-86356A4B5E59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/3445710",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21642",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:06.310",
      "lastModified" : "2026-01-30T20:14:51.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `banner-acl.php` and `channel-acl.php` scripts of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed."
      }, {
        "lang" : "es",
        "value" : "El miembro de la comunidad de HackerOne Patrick Lang (7yr) ha reportado una vulnerabilidad de XSS reflejado en los scripts 'banner-acl.php' y 'channel-acl.php' de Revive Adserver. Un atacante puede crear una URL específica que incluye una carga útil HTML en un parámetro. Si un administrador con sesión iniciada visita la URL, el HTML se envía al navegador y se ejecutarían scripts maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquaplatform:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "FB1E6D97-42AD-4A1B-89B3-86356A4B5E59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/3470970",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21663",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:06.443",
      "lastModified" : "2026-02-03T21:05:31.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed."
      }, {
        "lang" : "es",
        "value" : "El miembro de la comunidad de HackerOne Patrick Lang (7yr) ha informado de una vulnerabilidad de XSS reflejado en el script banner-acl.php de Revive Adserver. Un atacante puede crear una URL específica que incluye una carga útil HTML en un parámetro. Si un administrador con sesión iniciada visita la URL, el HTML se envía al navegador y los scripts maliciosos se ejecutarían."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquaplatform:revive_adserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "2AA08D1C-3638-4E0D-AC58-A8527E77536F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/3473696",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21664",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-01-20T21:16:07.223",
      "lastModified" : "2026-02-03T21:04:36.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HackerOne community member Huynh Pham Thanh Luc (nigh7c0r3) has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed."
      }, {
        "lang" : "es",
        "value" : "El miembro de la comunidad de HackerOne Huynh Pham Thanh Luc (nigh7c0r3) ha informado de una vulnerabilidad de XSS reflejado en el script de entrega afr.php de Revive Adserver. Un atacante puede crear una URL específica que incluye una carga útil HTML en un parámetro. Si un administrador con sesión iniciada visita la URL, el HTML es enviado al navegador y se ejecutarían scripts maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquaplatform:revive_adserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.4",
            "matchCriteriaId" : "2AA08D1C-3638-4E0D-AC58-A8527E77536F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/3468169",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0672",
      "sourceIdentifier" : "cna@python.org",
      "published" : "2026-01-20T22:15:52.680",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."
      }, {
        "lang" : "es",
        "value" : "Al usar http.cookies.Morsel, los valores y parámetros de cookie controlados por el usuario pueden permitir la inyección de encabezados HTTP en los mensajes. El parche rechaza todos los caracteres de control dentro de los nombres, valores y parámetros de las cookies."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@python.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@python.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/issues/143919",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/pull/143920",
        "source" : "cna@python.org"
      }, {
        "url" : "https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/",
        "source" : "cna@python.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0865",
      "sourceIdentifier" : "cna@python.org",
      "published" : "2026-01-20T22:15:52.800",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User-controlled header names and values containing newlines can allow injecting HTTP headers."
      }, {
        "lang" : "es",
        "value" : "Nombres y valores de encabezado controlados por el usuario que contienen saltos de línea pueden permitir la inyección de encabezados HTTP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@python.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@python.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/python/cpython/commit/22e4d55285cee52bc4dbe061324e5f30bd4dee58",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/23e3c0ae867cca0130e441e776c9955b9027c510",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/286e3ac39984fe85a17f4ab39c64d382137aae5f",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/2f840249550e082dc351743f474ba56da10478d2",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/4802b96a2cde58570c24c13ef3289490980961c5",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/66da7bf6fe7b81e3ecc9c0a25bd47d4616c8d1a6",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/83ecd18779f286d872f68bfce175651e407d9fff",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/8bb044d29310bb05d15086cdaa8bf64867d61a97",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/bfba660085767f8c2d582134e9d511a85eda04cf",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/c592227ffb48679af9845a45dbb0875d975bb219",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/e4846a93ac07a8ae9aa18203af0dd13d6e7a6995",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/f7fceed79ca1bceae8dbe5ba5bc8928564da7211",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/issues/143916",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/pull/143917",
        "source" : "cna@python.org"
      }, {
        "url" : "https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/",
        "source" : "cna@python.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21922",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:54.500",
      "lastModified" : "2026-01-29T21:31:39.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent).   The supported version that is affected is 25.04.07. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Planning and Budgeting Cloud Service executes to compromise Oracle Planning and Budgeting Cloud Service.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Planning and Budgeting Cloud Service accessible data. Note: Update EPM Agent. Please refer to <a href=\"https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/diepm/epm_agent_downloading_agent_110x80569d70.html\">Downloading the EPM Agent for more information. CVSS 3.1 Base Score 4.2 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Planning and Budgeting Cloud Service de Oracle Hyperion (componente: EPM Agent). La versión soportada que está afectada es 25.04.07. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle Planning and Budgeting Cloud Service comprometer Oracle Planning and Budgeting Cloud Service. Ataques exitosos requieren interacción humana de una persona distinta al atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles de Oracle Planning and Budgeting Cloud Service. Nota: Actualice EPM Agent. Por favor, consulte <a href=\"https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/diepm/epm_agent_downloading_agent_110x80569d70.html\" rel=\"nofollow\">Downloading the EPM Agent</a> para más información. Puntuación Base CVSS 3.1 4.2 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:planning_and_budgeting_cloud_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.04",
            "versionEndIncluding" : "25.09",
            "matchCriteriaId" : "747391DF-F44D-4410-BA45-5FA7A0EE73BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21923",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:54.667",
      "lastModified" : "2026-01-29T21:25:57.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform).   The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Life Sciences Central Designer accessible data as well as  unauthorized read access to a subset of Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Life Sciences Central Designer de Oracle Health Sciences Applications (componente: Platform). La versión compatible que se ve afectada es 7.0.1.0. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Life Sciences Central Designer. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Life Sciences Central Designer, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Life Sciences Central Designer. Puntuación base CVSS 3.1 de 6.5 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:life_sciences_central_designer:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD42C36C-1BB2-4A80-B997-1F9C1861D7A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21924",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:54.790",
      "lastModified" : "2026-01-29T21:23:21.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Utilities Application Framework product of Oracle Utilities Applications (component: General).  Supported versions that are affected are 4.4.0.3.0, 4.5.0.0.0, 4.5.0.1.1, 4.5.0.1.3, 4.5.0.2.0, 25.4 and  25.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Utilities Application Framework.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Utilities Application Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Utilities Application Framework accessible data as well as  unauthorized read access to a subset of Oracle Utilities Application Framework accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Utilities Application Framework de Oracle Utilities Applications (componente: General). Las versiones soportadas que están afectadas son 4.4.0.3.0, 4.5.0.0.0, 4.5.0.1.1, 4.5.0.1.3, 4.5.0.2.0, 25.4 y 25.10. La vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red vía HTTP comprometer Oracle Utilities Application Framework. Los ataques exitosos requieren interacción humana de una persona distinta al atacante y, aunque la vulnerabilidad está en Oracle Utilities Application Framework, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Utilities Application Framework, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Utilities Application Framework. Puntuación Base CVSS 3.1 de 5.4 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.3.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2224F133-2D7D-4F3A-995A-31599C579ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB808D4-FFFD-4488-A2AB-C31B8372A26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.5.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97D67DC-53C9-4BD7-A037-909F027961F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.5.0.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FF292A-DDD6-498B-B903-5DA70FA560D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.5.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1385E2-0AB9-41AA-BADF-755A6B7A110C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:25.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7F6C8-B2EC-4E6C-AF54-F939FCA9D040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:25.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76119EF9-7806-42BD-A057-BDEA56695600"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21925",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:54.917",
      "lastModified" : "2026-01-30T16:11:07.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: RMI). Las versiones compatibles afectadas son Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM para JDK: 17.0.17 y 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red a través de múltiples protocolos comprometer Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad puede ser explotada utilizando APIs en el Componente especificado, por ejemplo, a través de un servicio web que suministra datos a las APIs. Esta vulnerabilidad también se aplica a implementaciones de Java, típicamente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets de Java en sandbox, que cargan y ejecutan código no confiable (por ejemplo, código que proviene de internet) y dependen del sandbox de Java para la seguridad. Puntuación Base CVSS 3.1 4.8 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "625D4829-2E57-4C05-BEFE-CE30F6D16E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F6A0B-89BB-4851-9DF7-2A6C139DAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4F8E6F-3B7D-49D8-8619-63B23F244AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "2905151E-7D6C-4E7C-A371-941EABBF6CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "A77BE683-07F2-4A1E-8B62-E104B4866DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "3605CFE2-513B-4384-9617-6F4A86DFCEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D9D6AA-C17D-49FF-93B6-444FEC757A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86D044A-6780-4DD9-85D1-B1EC64ACBF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7B1B52-5FE9-444B-8BD4-6CA4B2B8E78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D0136-84A2-4EAD-9641-7E96E4386CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "FA31F595-0796-4BED-BD29-8C55BBE3792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "AC169A27-61AD-42C8-9127-7B8A8622450D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "8EB89776-DD1C-4117-BC7E-B263B6AA9853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7696E8-6F94-425E-A62D-D800ED6715D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3951FD6-E2A7-497A-97AF-976878B512CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB701439-8B86-41F3-A77E-53C340FF1CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70279FE8-6A11-405B-80CA-B3427C11B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21926",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.050",
      "lastModified" : "2026-01-29T21:22:10.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).  Supported versions that are affected are 17.0-25.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Siebel CRM Deployment.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Siebel CRM Deployment de Oracle Siebel CRM (componente: Infraestructura del servidor). Las versiones compatibles que están afectadas son 17.0-25.2. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de TLS comprometer Siebel CRM Deployment. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una caída repetible con frecuencia (DoS completo) de Siebel CRM Deployment. Puntuación base CVSS 3.1 de 7.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_customer_relationship_management_deployment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "25.2",
            "matchCriteriaId" : "A0FF4EF8-2D6E-4739-9737-1CADDCB51792"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21927",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.180",
      "lastModified" : "2026-01-29T21:16:32.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Driver).   The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Solaris accessible data as well as  unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Driver). La versión soportada que está afectada es la 11. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle Solaris comprometer Oracle Solaris. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles de Oracle Solaris, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Solaris. Puntuación Base CVSS 3.1 de 5.8 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21928",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.303",
      "lastModified" : "2026-03-03T16:16:20.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).   The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Kernel). La versión compatible que se ve afectada es la 11. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de TCP comprometer Oracle Solaris. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Solaris. Puntuación base CVSS 3.1 de 5.3 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21929",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.410",
      "lastModified" : "2026-01-29T15:45:39.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).  Supported versions that are affected are 9.0.0-9.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Analizador sintáctico). Las versiones compatibles que están afectadas son 9.0.0-9.5.0. Vulnerabilidad difícil de explotar permite a un atacante con pocos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un fallo repetible con frecuencia (DoS completo) de MySQL Server. Puntuación base CVSS 3.1 de 5.3 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21930",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.530",
      "lastModified" : "2026-01-29T21:16:12.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems).   The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 2.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle ZFS Storage Appliance Kit de Oracle Systems (componente: Filesystems). La versión compatible que está afectada es la 8.8. vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle ZFS Storage Appliance Kit comprometer Oracle ZFS Storage Appliance Kit. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle ZFS Storage Appliance Kit. Puntuación Base CVSS 3.1 de 2.3 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "556648E8-64A4-451F-9C10-22A829892C5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21931",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.667",
      "lastModified" : "2026-01-29T21:15:55.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component: Brookstrut Sample App).  Supported versions that are affected are 23.2.0, 23.2.1, 24.1.0, 24.2.0 and  24.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle APEX Sample Applications.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle APEX Sample Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle APEX Sample Applications accessible data as well as  unauthorized read access to a subset of Oracle APEX Sample Applications accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle APEX Sample Applications de Oracle APEX (componente: Brookstrut Sample App). Las versiones compatibles que están afectadas son 23.2.0, 23.2.1, 24.1.0, 24.2.0 y 24.2.1. La vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red vía HTTP comprometer Oracle APEX Sample Applications. Los ataques exitosos requieren interacción humana de una persona que no sea el atacante y, aunque la vulnerabilidad está en Oracle APEX Sample Applications, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle APEX Sample Applications, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle APEX Sample Applications. Puntuación Base CVSS 3.1 de 5.4 (impactos en la Confidencialidad y la Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:23.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8552BC-0210-47B5-A8F0-BDDE9D4246A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:23.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819C823C-EBA7-44E6-A628-DD464CC42766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:24.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137641FC-136A-43F7-8C49-1322726486CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:apex:24.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DC2D29-4FE4-4FFA-878C-7275993BC3C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21932",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.793",
      "lastModified" : "2026-01-30T16:08:39.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: AWT, JavaFX). Las versiones compatibles afectadas son Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM para JDK: 17.0.17 y 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometer Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Los ataques exitosos requieren interacción humana de una persona distinta al atacante y, si bien la vulnerabilidad está en Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación de acceso no autorizados a datos críticos o a todos los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, típicamente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets de Java en sandbox, que cargan y ejecutan código no confiable (p. ej., código que proviene de internet) y dependen del sandbox de Java para la seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, típicamente en servidores, que cargan y ejecutan solo código confiable (p. ej., código instalado por un administrador). Puntuación Base CVSS 3.1 de 7.4 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "625D4829-2E57-4C05-BEFE-CE30F6D16E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F6A0B-89BB-4851-9DF7-2A6C139DAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4F8E6F-3B7D-49D8-8619-63B23F244AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "2905151E-7D6C-4E7C-A371-941EABBF6CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "A77BE683-07F2-4A1E-8B62-E104B4866DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "3605CFE2-513B-4384-9617-6F4A86DFCEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D9D6AA-C17D-49FF-93B6-444FEC757A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86D044A-6780-4DD9-85D1-B1EC64ACBF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7B1B52-5FE9-444B-8BD4-6CA4B2B8E78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D0136-84A2-4EAD-9641-7E96E4386CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "FA31F595-0796-4BED-BD29-8C55BBE3792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "AC169A27-61AD-42C8-9127-7B8A8622450D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "8EB89776-DD1C-4117-BC7E-B263B6AA9853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7696E8-6F94-425E-A62D-D800ED6715D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3951FD6-E2A7-497A-97AF-976878B512CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB701439-8B86-41F3-A77E-53C340FF1CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70279FE8-6A11-405B-80CA-B3427C11B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21933",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:55.917",
      "lastModified" : "2026-01-30T16:07:09.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Networking). Las versiones compatibles afectadas son Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM para JDK: 17.0.17 y 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometer Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Los ataques exitosos requieren interacción humana de una persona que no sea el atacante y, si bien la vulnerabilidad se encuentra en Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad puede ser explotada utilizando APIs en el Componente especificado, por ejemplo, a través de un servicio web que suministra datos a las APIs. Esta vulnerabilidad también se aplica a implementaciones de Java, típicamente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox, que cargan y ejecutan código no confiable (por ejemplo, código que proviene de internet) y dependen del sandbox de Java para la seguridad. Puntuación Base CVSS 3.1 de 6.1 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "625D4829-2E57-4C05-BEFE-CE30F6D16E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F6A0B-89BB-4851-9DF7-2A6C139DAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4F8E6F-3B7D-49D8-8619-63B23F244AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "2905151E-7D6C-4E7C-A371-941EABBF6CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "A77BE683-07F2-4A1E-8B62-E104B4866DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "3605CFE2-513B-4384-9617-6F4A86DFCEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D9D6AA-C17D-49FF-93B6-444FEC757A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86D044A-6780-4DD9-85D1-B1EC64ACBF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7B1B52-5FE9-444B-8BD4-6CA4B2B8E78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D0136-84A2-4EAD-9641-7E96E4386CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "FA31F595-0796-4BED-BD29-8C55BBE3792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "AC169A27-61AD-42C8-9127-7B8A8622450D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "8EB89776-DD1C-4117-BC7E-B263B6AA9853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7696E8-6F94-425E-A62D-D800ED6715D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3951FD6-E2A7-497A-97AF-976878B512CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB701439-8B86-41F3-A77E-53C340FF1CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70279FE8-6A11-405B-80CA-B3427C11B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21934",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.033",
      "lastModified" : "2026-01-29T21:11:43.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications).  Supported versions that are affected are 8.60, 8.61 and  8.62. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Notificaciones Push). Las versiones compatibles afectadas son 8.60, 8.61 y 8.62. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red vía HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de PeopleSoft Enterprise PeopleTools. Puntuación Base CVSS 3.1 de 5.4 (impactos en la Confidencialidad y la Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18F15FC6-947A-462A-8329-C52907799A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E4EFC-096B-4861-8D55-D8DAA37A21E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21935",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.160",
      "lastModified" : "2026-01-29T21:11:22.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Driver).   The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Solaris accessible data as well as  unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Driver). La versión soportada que está afectada es la 11. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle Solaris comprometer Oracle Solaris. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles de Oracle Solaris, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Solaris. Puntuación Base CVSS 3.1 de 5.8 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21936",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.277",
      "lastModified" : "2026-01-29T15:44:06.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Versiones compatibles que están afectadas son 8.0.0-8.0.44, 8.4.0-8.4.7 y 9.0.0-9.5.0. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o un fallo repetible con frecuencia (DoS completo) de MySQL Server. Puntuación Base CVSS 3.1 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndIncluding" : "7.6.36",
            "matchCriteriaId" : "8B3194AE-3177-4CC0-9FC0-292562A6E971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "25C90188-0FF3-4398-BC31-23CC9C49F5EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "BC70A6D6-9D76-408C-A56F-8DF26F751465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "242ED878-0BEA-4613-8721-1DA44C2BFE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "C31CF81B-A295-4D90-84D3-377D7184D59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "19AAA920-1429-4F6F-A191-31632570991C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21937",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.410",
      "lastModified" : "2026-01-29T15:32:36.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DDL). Las versiones compatibles afectadas son 8.0.0-8.0.44, 8.4.0-8.4.7 y 9.0.0-9.5.0. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer el MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una caída frecuentemente repetible (DoS completo) del MySQL Server. Puntuación base CVSS 3.1 de 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "C31CF81B-A295-4D90-84D3-377D7184D59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "19AAA920-1429-4F6F-A191-31632570991C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21938",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.533",
      "lastModified" : "2026-01-29T21:11:06.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).  Supported versions that are affected are 8.60, 8.61 and  8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Portal). Versiones compatibles que están afectadas son 8.60, 8.61 y 8.62. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red vía HTTP comprometer PeopleSoft Enterprise PeopleTools. Ataques exitosos requieren interacción humana de una persona que no sea el atacante y aunque la vulnerabilidad está en PeopleSoft Enterprise PeopleTools, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de PeopleSoft Enterprise PeopleTools. Puntuación Base CVSS 3.1 de 6.1 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18F15FC6-947A-462A-8329-C52907799A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E4EFC-096B-4861-8D55-D8DAA37A21E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21939",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.663",
      "lastModified" : "2026-01-29T20:34:46.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the SQLcl component of Oracle Database Server.  Supported versions that are affected are 23.4.0-23.26.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where SQLcl executes to compromise SQLcl.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of SQLcl. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente SQLcl de Oracle Database Server. Las versiones compatibles que están afectadas son 23.4.0-23.26.0. Vulnerabilidad difícil de explotar permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se ejecuta SQLcl comprometer SQLcl. Los ataques exitosos requieren interacción humana de una persona que no sea el atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de SQLcl. Puntuación base CVSS 3.1 de 7.0 (Impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.4",
            "versionEndIncluding" : "23.26",
            "matchCriteriaId" : "EA00B2D5-D2BA-4AD6-A58D-BE549C49C38E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21940",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.787",
      "lastModified" : "2026-01-29T20:35:05.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group).   The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Agile PLM de Oracle Supply Chain (componente: Usuario y Grupo de Usuarios). La versión compatible que está afectada es 9.3.6. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red vía HTTP comprometer Oracle Agile PLM. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Agile PLM. Puntuación Base CVSS 3.1 7.5 (Impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:supply_chain_products_suite:9.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DA93B4-7030-4F2F-89B6-1E0EFD7EB150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21941",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:56.903",
      "lastModified" : "2026-01-29T15:31:07.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles afectadas son 8.0.0-8.0.44, 8.4.0-8.4.7 y 9.0.0-9.5.0. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometer el MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o un fallo (crash) frecuentemente repetible (DoS completo) del MySQL Server. Puntuación Base CVSS 3.1 de 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "C31CF81B-A295-4D90-84D3-377D7184D59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "19AAA920-1429-4F6F-A191-31632570991C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21942",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.027",
      "lastModified" : "2026-01-29T20:35:17.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).  Supported versions that are affected are 10 and  11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.0 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Sistemas de Archivos). Las versiones compatibles que están afectadas son 10 y 11. La vulnerabilidad fácilmente explotable permite a un atacante con bajos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle Solaris comprometer Oracle Solaris. Los ataques exitosos requieren interacción humana de una persona que no sea el atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una caída (crash) frecuentemente repetible (DoS completo) de Oracle Solaris. Puntuación base CVSS 3.1 de 5.0 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21943",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.147",
      "lastModified" : "2026-01-29T20:40:04.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Scripting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as  unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Scripting de Oracle E-Business Suite (componente: Scripting Admin). Las versiones compatibles que están afectadas son 12.2.3-12.2.15. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Scripting. Los ataques exitosos requieren interacción humana de una persona distinta al atacante y, aunque la vulnerabilidad está en Oracle Scripting, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Scripting, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Scripting. Puntuación Base CVSS 3.1 de 6.1 (impactos de Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.15",
            "matchCriteriaId" : "ECD007BA-0198-494F-8F63-912B08A1E6E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21944",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.267",
      "lastModified" : "2026-01-29T20:47:56.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).   The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile Product Lifecycle Management for Process accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Agile Product Lifecycle Management para Process de Oracle Supply Chain (componente: Product Quality Management). La versión compatible que está afectada es 6.2.4. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red vía HTTP comprometer Oracle Agile Product Lifecycle Management para Process. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Agile Product Lifecycle Management para Process. Puntuación base CVSS 3.1 de 6.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F85AABE-B854-4887-A641-2102D355F9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21945",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.390",
      "lastModified" : "2026-01-30T16:03:26.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Seguridad). Las versiones compatibles afectadas son Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM para JDK: 17.0.17 y 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometer Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una caída (crash) frecuentemente repetible (DoS completo) de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, típicamente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox, que cargan y ejecutan código no confiable (por ejemplo, código que proviene de internet) y dependen del sandbox de Java para la seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, típicamente en servidores, que cargan y ejecutan solo código confiable (por ejemplo, código instalado por un administrador). Puntuación base CVSS 3.1 7.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.16:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "625D4829-2E57-4C05-BEFE-CE30F6D16E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0F6A0B-89BB-4851-9DF7-2A6C139DAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB4F8E6F-3B7D-49D8-8619-63B23F244AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "2905151E-7D6C-4E7C-A371-941EABBF6CC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "A77BE683-07F2-4A1E-8B62-E104B4866DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "3605CFE2-513B-4384-9617-6F4A86DFCEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D9D6AA-C17D-49FF-93B6-444FEC757A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D86D044A-6780-4DD9-85D1-B1EC64ACBF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7B1B52-5FE9-444B-8BD4-6CA4B2B8E78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1D0136-84A2-4EAD-9641-7E96E4386CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:-:*:*:*",
            "matchCriteriaId" : "FA31F595-0796-4BED-BD29-8C55BBE3792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471:*:*:enterprise_performance_pack:*:*:*",
            "matchCriteriaId" : "AC169A27-61AD-42C8-9127-7B8A8622450D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "8EB89776-DD1C-4117-BC7E-B263B6AA9853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7696E8-6F94-425E-A62D-D800ED6715D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3951FD6-E2A7-497A-97AF-976878B512CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:21.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB701439-8B86-41F3-A77E-53C340FF1CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:25.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70279FE8-6A11-405B-80CA-B3427C11B35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21946",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.500",
      "lastModified" : "2026-01-29T20:48:16.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).  Supported versions that are affected are 9.2.0.0-9.2.26.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as  unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto JD Edwards EnterpriseOne Tools de Oracle JD Edwards (componente: Web Runtime SEC). Versiones compatibles que están afectadas son 9.2.0.0-9.2.26.0. vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer JD Edwards EnterpriseOne Tools. Ataques exitosos requieren interacción humana de una persona que no sea el atacante y aunque la vulnerabilidad está en JD Edwards EnterpriseOne Tools, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de JD Edwards EnterpriseOne Tools, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de JD Edwards EnterpriseOne Tools. Puntuación Base CVSS 3.1 de 6.1 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0.0",
            "versionEndIncluding" : "9.2.26.0",
            "matchCriteriaId" : "8DA0C34B-7E0A-405C-819A-DCAF91A2C865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21947",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.620",
      "lastModified" : "2026-01-29T20:58:40.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Oracle Java SE (componente: JavaFX). Versiones compatibles que están afectadas son Oracle Java SE: 8u471-b50. Vulnerabilidad difícil de explotar permite a atacante no autenticado con acceso a la red a través de múltiples protocolos comprometer Oracle Java SE. Ataques exitosos requieren interacción humana de una persona que no sea el atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, típicamente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets de Java en sandbox, que cargan y ejecutan código no confiable (p. ej., código que proviene de internet) y dependen del sandbox de Java para la seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, típicamente en servidores, que cargan y ejecutan solo código confiable (p. ej., código instalado por un administrador). Puntuación Base CVSS 3.1 3.1 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "3605CFE2-513B-4384-9617-6F4A86DFCEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update471_b50:*:*:-:*:*:*",
            "matchCriteriaId" : "8EB89776-DD1C-4117-BC7E-B263B6AA9853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21948",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.757",
      "lastModified" : "2026-01-29T15:30:25.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer). Las versiones soportadas que están afectadas son 8.0.0-8.0.44, 8.4.0-8.4.7 y 9.0.0-9.5.0. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometer el MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una caída frecuentemente repetible (DoS completo) del MySQL Server. Puntuación base CVSS 3.1 de 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "C31CF81B-A295-4D90-84D3-377D7184D59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "19AAA920-1429-4F6F-A191-31632570991C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21949",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.877",
      "lastModified" : "2026-01-29T15:22:31.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles afectadas son 9.0.0-9.5.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un fallo (crash) frecuentemente repetible (DoS completo) de MySQL Server. Puntuación base CVSS 3.1 de 6.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21950",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:57.993",
      "lastModified" : "2026-01-29T15:28:59.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer). Las versiones compatibles que están afectadas son 9.0.0-9.5.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o un fallo repetible con frecuencia (DoS completo) de MySQL Server. Puntuación base CVSS 3.1 6.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21951",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.110",
      "lastModified" : "2026-01-29T20:59:17.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).  Supported versions that are affected are 8.60, 8.61 and  8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Integration Broker). Versiones compatibles que están afectadas son 8.60, 8.61 y 8.62. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer PeopleSoft Enterprise PeopleTools. Ataques exitosos requieren interacción humana de una persona distinta al atacante y aunque la vulnerabilidad está en PeopleSoft Enterprise PeopleTools, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de PeopleSoft Enterprise PeopleTools. Puntuación Base CVSS 3.1 de 6.1 (impactos en Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18F15FC6-947A-462A-8329-C52907799A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E4EFC-096B-4861-8D55-D8DAA37A21E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21952",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.230",
      "lastModified" : "2026-01-29T15:28:21.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).  Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Analizador sintáctico). Las versiones compatibles que están afectadas son 9.0.0-9.5.0. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o un fallo repetible con frecuencia (DoS completo) de MySQL Server. Puntuación base CVSS 3.1 de 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21955",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.347",
      "lastModified" : "2026-01-29T16:02:41.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde Oracle VM VirtualBox se ejecuta comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 8.2 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21956",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.477",
      "lastModified" : "2026-01-29T16:02:15.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones compatibles que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 8.2 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21957",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.613",
      "lastModified" : "2026-01-29T16:01:46.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad difícil de exploit permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 de 7.5 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21959",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.740",
      "lastModified" : "2026-01-29T20:59:34.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Workflow accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Workflow de Oracle E-Business Suite (componente: Workflow Loader). Las versiones compatibles que están afectadas son 12.2.3-12.2.15. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red vía HTTP comprometer Oracle Workflow. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Workflow. Puntuación Base CVSS 3.1 de 4.9 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.15",
            "matchCriteriaId" : "6A7096C1-7479-4111-A29B-5FF3AA0ECCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21960",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.853",
      "lastModified" : "2026-01-29T20:59:47.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as  unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Applications DBA de Oracle E-Business Suite (componente: Java utils). Las versiones compatibles que están afectadas son 12.2.3-12.2.15. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red vía HTTP comprometer Oracle Applications DBA. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles de Oracle Applications DBA, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Applications DBA. Puntuación Base CVSS 3.1 de 6.5 (impactos en la Confidencialidad y la Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_dba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.15",
            "matchCriteriaId" : "07D382CD-2C94-4B1A-9C44-9B2232AFDD8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21961",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:58.987",
      "lastModified" : "2026-01-29T21:00:03.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer, Employee Snapshot).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise HCM Human Resources, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise HCM Human Resources de Oracle PeopleSoft (componente: Company Dir / Org Chart Viewer, Employee Snapshot). La versión soportada que está afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red vía HTTP comprometer PeopleSoft Enterprise HCM Human Resources. Los ataques exitosos requieren interacción humana de una persona que no sea el atacante y, aunque la vulnerabilidad está en PeopleSoft Enterprise HCM Human Resources, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de PeopleSoft Enterprise HCM Human Resources, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de PeopleSoft Enterprise HCM Human Resources. Puntuación Base CVSS 3.1 de 6.1 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_human_resources:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB17640-C307-4997-9D2F-A461812107E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21962",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.110",
      "lastModified" : "2026-02-03T00:16:10.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS).  Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and  14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in.  While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as  unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in de Oracle Fusion Middleware (componente: Weblogic Server Proxy Plug-in para Servidor HTTP Apache, Weblogic Server Proxy Plug-in para IIS). Las versiones compatibles afectadas son 12.2.1.4.0, 14.1.1.0.0 y 14.1.2.0.0. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. Aunque la vulnerabilidad está en Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación de datos críticos o de todos los datos accesibles por Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles por Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. Nota: La versión afectada para Weblogic Server Proxy Plug-in para IIS es solo 12.2.1.4.0. Puntuación Base CVSS 3.1 10.0 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD04BEE5-E9A8-4584-A68C-0195CE9C402C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24404505-FD69-4844-8253-053776E1CC1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:14.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49A6B4CB-3C5C-446A-902D-3C4824CA24D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E29C004-51D7-4BBE-B28A-EE6B7B10F89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E726C52-A697-4A3B-AA34-F88FF8FE5DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:14.1.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C22A45-61D1-43D3-A187-993FBA4485F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      }, {
        "url" : "https://x.com/0xacb/status/2015473216844620280",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21963",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.230",
      "lastModified" : "2026-01-29T16:01:09.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles por Oracle VM VirtualBox. CVSS 3.1 Puntuación Base 6.0 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39934CFB-352A-47C3-8F1B-96568708D325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21964",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.350",
      "lastModified" : "2026-01-29T14:49:09.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).  Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Thread Pooling). Las versiones soportadas que están afectadas son 8.0.0-8.0.44, 8.4.0-8.4.7 y 9.0.0-9.5.0. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios y acceso de red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o un fallo (crash) frecuentemente repetible (DoS completo) de MySQL Server. Puntuación Base CVSS 3.1 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "1F5EEA23-CE0F-4E73-A0BA-4DCE0CFE5D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "DCF15521-E485-4CE3-8C2C-36CA8BB5CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "08F7C250-E6A6-4A49-982E-4DF74B79E927"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21965",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.487",
      "lastModified" : "2026-01-29T15:27:45.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).  Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Pluggable Auth). Las versiones compatibles que están afectadas son 9.0.0-9.5.0. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una denegación de servicio parcial (DoS parcial) de MySQL Server. Puntuación base CVSS 3.1 de 2.7 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21966",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.607",
      "lastModified" : "2026-01-29T14:48:47.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).  Supported versions that are affected are 5.6.19.23, 5.6.25.17, 5.6.26.10 and  5.6.27.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as  unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Hospitality OPERA 5 Property Services de Oracle Hospitality Applications (componente: Opera). Las versiones compatibles afectadas son 5.6.19.23, 5.6.25.17, 5.6.26.10 y 5.6.27.4. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Hospitality OPERA 5 Property Services. Los ataques exitosos requieren interacción humana de una persona distinta del atacante y, aunque la vulnerabilidad está en Oracle Hospitality OPERA 5 Property Services, los ataques pueden tener un impacto significativo en productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Hospitality OPERA 5 Property Services, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Hospitality OPERA 5 Property Services. Puntuación base CVSS 3.1 de 6.1 (impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.19.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04679532-E932-4A98-851D-A5D2686E811A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72AC12F-7DA8-4AB4-9645-FD6FCE2AB539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.26.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F029305F-46E1-4620-9545-ED7066B33B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857E949C-0A97-4148-BE92-B0E55808290F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21967",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.733",
      "lastModified" : "2026-01-29T14:48:41.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet).  Supported versions that are affected are 5.6.19.23, 5.6.25.17, 5.6.26.10 and  5.6.27.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 accessible data as well as  unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality OPERA 5. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Hospitality OPERA 5 de Oracle Hospitality Applications (componente: Opera Servlet). Las versiones compatibles afectadas son 5.6.19.23, 5.6.25.17, 5.6.26.10 y 5.6.27.4. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle Hospitality OPERA 5. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Hospitality OPERA 5, así como acceso no autorizado para actualizar, insertar o eliminar algunos de los datos accesibles de Oracle Hospitality OPERA 5 y capacidad no autorizada para causar una denegación de servicio parcial (DoS parcial) de Oracle Hospitality OPERA 5. Puntuación Base CVSS 3.1 de 8.6 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.19.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04679532-E932-4A98-851D-A5D2686E811A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.25.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72AC12F-7DA8-4AB4-9645-FD6FCE2AB539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.26.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F029305F-46E1-4620-9545-ED7066B33B0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5:5.6.27.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "857E949C-0A97-4148-BE92-B0E55808290F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21968",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.853",
      "lastModified" : "2026-01-29T15:26:57.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer). Las versiones compatibles afectadas son 8.0.0-8.0.44, 8.4.0-8.4.7 y 9.0.0-9.5.0. La vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una caída frecuentemente repetible (DoS completo) de MySQL Server. Puntuación Base CVSS 3.1 6.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "C31CF81B-A295-4D90-84D3-377D7184D59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "19AAA920-1429-4F6F-A191-31632570991C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "80A941A0-B16F-477B-9062-EF768F4CAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21969",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:15:59.970",
      "lastModified" : "2026-01-29T14:48:11.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal).   The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process.  Successful attacks of this vulnerability can result in takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Agile Product Lifecycle Management para Process de Oracle Supply Chain (componente: Supplier Portal). La versión soportada que está afectada es 6.2.4. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer Oracle Agile Product Lifecycle Management para Process. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle Agile Product Lifecycle Management para Process. Puntuación Base CVSS 3.1 de 9.8 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F85AABE-B854-4887-A641-2102D355F9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21970",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.090",
      "lastModified" : "2026-01-29T14:47:41.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform).   The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Life Sciences Central Designer de Oracle Health Sciences Applications (componente: Platform). La versión soportada que está afectada es 7.0.1.0. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios con acceso a la red vía HTTP comprometer Oracle Life Sciences Central Designer. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Life Sciences Central Designer. Puntuación Base CVSS 3.1 6.5 (Impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:life_sciences_central_designer:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD42C36C-1BB2-4A80-B997-1F9C1861D7A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21971",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.210",
      "lastModified" : "2026-01-29T14:47:26.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM Purchasing.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM Purchasing accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise SCM Purchasing accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise SCM Purchasing de Oracle PeopleSoft (componente: Purchasing). La versión compatible que se ve afectada es 9.2. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red vía HTTP comprometer PeopleSoft Enterprise SCM Purchasing. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de PeopleSoft Enterprise SCM Purchasing, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de PeopleSoft Enterprise SCM Purchasing. Puntuación Base CVSS 3.1 de 5.4 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_supply_chain_management_purchasing:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33380872-8382-41C9-B640-35FA5DCF1046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21972",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.330",
      "lastModified" : "2026-01-29T14:47:18.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Configurator accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Configurator de Oracle E-Business Suite (componente: Interfaz de Usuario). Las versiones compatibles que están afectadas son 12.2.3-12.2.15. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red vía HTTP comprometer Oracle Configurator. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Configurator. Puntuación Base CVSS 3.1 5.3 (Impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.15",
            "matchCriteriaId" : "327DECB4-3BE7-43C2-94AA-FF821F802F92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21973",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.460",
      "lastModified" : "2026-02-02T18:38:25.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Security Management System).  Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and  14.8.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data as well as  unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle FLEXCUBE Investor Servicing de Oracle Financial Services Applications (componente: Security Management System). Las versiones compatibles afectadas son 14.5.0.15.0, 14.7.0.8.0 y 14.8.0.1.0. La vulnerabilidad fácilmente explotable permite a un atacante con bajos privilegios con acceso a la red a través de HTTP comprometer Oracle FLEXCUBE Investor Servicing. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles de Oracle FLEXCUBE Investor Servicing, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Investor Servicing. Puntuación base CVSS 3.1 de 8.1 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:14.5.0.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F10A63A-C33C-4AF9-B191-9E1C316D767D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:14.7.0.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD60BD3-6A87-476B-A150-6BC4EA075D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_investor_servicing:14.8.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352D23AE-0660-4E40-B567-99E9C60A40C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21974",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.587",
      "lastModified" : "2026-01-29T14:47:09.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform).   The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Designer.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Life Sciences Central Designer accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Life Sciences Central Designer de Oracle Health Sciences Applications (componente: Platform). La versión compatible que está afectada es la 7.0.1.0. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer Oracle Life Sciences Central Designer. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Life Sciences Central Designer. Puntuación Base CVSS 3.1 de 5.3 (Impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:life_sciences_central_designer:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD42C36C-1BB2-4A80-B997-1F9C1861D7A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21975",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.707",
      "lastModified" : "2026-01-29T14:46:56.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java VM component of Oracle Database Server.  Supported versions that are affected are 19.3-19.29 and  21.3-21.20. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise Java VM.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java VM. CVSS 3.1 Base Score 4.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java VM de Oracle Database Server. Versiones compatibles que están afectadas son 19.3-19.29 y 21.3-21.20. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios que tiene privilegio de Usuario Autenticado con acceso a la red a través de Oracle Net comprometer Java VM. Ataques exitosos requieren interacción humana de una persona distinta al atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o un fallo repetible con frecuencia (DoS completo) de Java VM. Puntuación Base CVSS 3.1 4.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_virtual_machine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.3",
            "versionEndIncluding" : "19.29",
            "matchCriteriaId" : "23A2CF85-43BC-4DC4-AD84-C944335BB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_virtual_machine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.3",
            "versionEndIncluding" : "21.20",
            "matchCriteriaId" : "8A716A4D-77C8-4939-9AC2-03FD6C19735B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21976",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.850",
      "lastModified" : "2026-01-29T14:46:40.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud).  Supported versions that are affected are 7.6.0.0.0 and  8.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Analytics (componente: Oracle Analytics Cloud). Versiones compatibles que están afectadas son 7.6.0.0.0 y 8.2.0.0.0. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle Business Intelligence Enterprise Edition comprometer Oracle Business Intelligence Enterprise Edition. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Business Intelligence Enterprise Edition. Puntuación base CVSS 3.1 de 7.1 (Impactos en la Confidencialidad y la Integridad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:7.6.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "43D14BEA-91DC-43B8-B733-5B4DF06E9D0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:8.2.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "5F31EEDA-FA38-419C-8AF8-CAB10EA8432F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21977",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:00.987",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Appliance (component: Security).  Supported versions that are affected are 23.1.0-23.1.202509. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Zero Data Loss Recovery Appliance Software.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Zero Data Loss Recovery Appliance Software accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto de software Oracle Zero Data Loss Recovery Appliance de Oracle Zero Data Loss Recovery Appliance (componente: Seguridad). Versiones compatibles que están afectadas son 23.1.0-23.1.202509. Vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red a través de Oracle Net comprometer el software Oracle Zero Data Loss Recovery Appliance. Ataques exitosos requieren interacción humana de una persona que no sea el atacante. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles del software Oracle Zero Data Loss Recovery Appliance. Puntuación base CVSS 3.1 de 3.1 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21978",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.137",
      "lastModified" : "2026-02-02T18:25:25.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing).  Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle FLEXCUBE Universal Banking de Oracle Financial Services Applications (componente: Relationship Pricing). Las versiones soportadas que están afectadas son 14.0.0.0.0-14.8.0.0.0. Una vulnerabilidad fácilmente explotable permite a un atacante con bajos privilegios con acceso a la red vía HTTP comprometer Oracle FLEXCUBE Universal Banking. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle FLEXCUBE Universal Banking. Puntuación base CVSS 3.1 de 6.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.8.0.0.0",
            "matchCriteriaId" : "4DED7FF9-DDFD-4143-BC12-B03C9AB2A6C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21979",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.267",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent).   The supported version that is affected is 25.04.07. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Planning and Budgeting Cloud Service executes to compromise Oracle Planning and Budgeting Cloud Service.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Planning and Budgeting Cloud Service accessible data. Note: Update EPM Agent. Please refer to <a href=\"https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/diepm/epm_agent_downloading_agent_110x80569d70.html\">Downloading the EPM Agent for more information. CVSS 3.1 Base Score 4.2 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Planning and Budgeting Cloud Service de Oracle Hyperion (componente: EPM Agent). La versión soportada que está afectada es 25.04.07. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios y acceso a la infraestructura donde se ejecuta Oracle Planning and Budgeting Cloud Service comprometer Oracle Planning and Budgeting Cloud Service. Los ataques exitosos requieren interacción humana de una persona distinta al atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Planning and Budgeting Cloud Service. Nota: Actualice el EPM Agent. Consulte <a href=\"https://docs.oracle.com/en/cloud/saas/enterprise-performance-management-common/diepm/epm_agent_downloading_agent_110x80569d70.html\" rel=\"nofollow\">Downloading the EPM Agent para más información. Puntuación Base CVSS 3.1 de 4.2 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N).</a>"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        } ]
      },
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21980",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.390",
      "lastModified" : "2026-01-29T14:46:09.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Life Sciences Central Coding product of Oracle Health Sciences Applications (component: Platform).   The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Life Sciences Central Coding.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Life Sciences Central Coding accessible data as well as  unauthorized read access to a subset of Oracle Life Sciences Central Coding accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Life Sciences Central Coding de Oracle Health Sciences Applications (componente: Platform). La versión soportada que está afectada es 7.0.1.0. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer Oracle Life Sciences Central Coding. Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Life Sciences Central Coding, así como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Life Sciences Central Coding. Puntuación Base CVSS 3.1 6.5 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:life_sciences_central_coding:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F6524B-01F2-4291-91DB-16BAEA412037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21981",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.510",
      "lastModified" : "2026-01-29T14:40:39.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.6 (Confidentiality and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que están afectadas son 7.1.14 y 7.2.4. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox y capacidad no autorizada de causar una denegación de servicio parcial (DoS parcial) de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 de 4.6 (impactos en la Confidencialidad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21982",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.637",
      "lastModified" : "2026-01-29T14:40:31.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones compatibles que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso al segmento de comunicación físico adjunto al hardware donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación base CVSS 3.1 de 7.5 (Impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21983",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.763",
      "lastModified" : "2026-01-29T14:40:25.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Difícil de explotar vulnerabilidad permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 7.5 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21984",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:01.880",
      "lastModified" : "2026-01-29T14:40:13.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad difícil de explotar permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 7.5 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21985",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:02.000",
      "lastModified" : "2026-01-29T14:40:06.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox. CVSS 3.1 Puntuación Base 6.0 (impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21986",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:02.120",
      "lastModified" : "2026-01-29T14:39:59.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows VMs only. CVSS 3.1 Base Score 7.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones compatibles que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un fallo repetible con frecuencia (DoS completo) de Oracle VM VirtualBox. Nota: Esta vulnerabilidad se aplica solo a las máquinas virtuales de Windows. Puntuación Base CVSS 3.1 7.1 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21987",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:02.237",
      "lastModified" : "2026-01-29T14:39:49.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 de 8.2 (impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21988",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:02.353",
      "lastModified" : "2026-01-29T14:39:39.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones soportadas que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 de 8.2 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21989",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:02.470",
      "lastModified" : "2026-01-29T14:39:14.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as  unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios y acceso a la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad reside en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de creación, eliminación o modificación a datos críticos o a todos los datos accesibles por Oracle VM VirtualBox, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles por Oracle VM VirtualBox y la capacidad no autorizada de causar una denegación de servicio parcial (DoS parcial) de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 de 8.1 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21990",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2026-01-20T22:16:02.590",
      "lastModified" : "2026-01-29T16:00:32.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are 7.1.14 and  7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Versiones compatibles que están afectadas son 7.1.14 y 7.2.4. Vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer Oracle VM VirtualBox. Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden impactar significativamente productos adicionales (cambio de alcance). Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox. Puntuación Base CVSS 3.1 8.2 (impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723CD90A-7213-4B3C-B969-C6D7110CAF46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44ABFABE-8FFC-48CF-B627-4241CAD563B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2026.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0933",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-01-20T23:16:06.043",
      "lastModified" : "2026-01-27T21:12:28.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler.\n\n\n\n\nRoot causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g.,  execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution.\n\n\n\n\nImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the \n\n--commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to:\n\n  *  Run any shell command.\n  *  Exfiltrate environment variables.\n  *  Compromise the CI runner to install backdoors or modify build artifacts.\n\n\n\nCredits Disclosed responsibly by kny4hacker.\n\n\n\n\nMitigation\n  *  Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher.\n  *  Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher.\n  *  Users on Wrangler v2 (EOL) should upgrade to a supported major version."
      }, {
        "lang" : "es",
        "value" : "Resumen\nSe ha encontrado una vulnerabilidad de inyección de comandos (CWE-78) que existe en el comando 'wrangler pages deploy'. El problema ocurre porque el parámetro --commit-hash se pasa directamente a un comando de shell sin la validación o sanitización adecuadas, permitiendo a un atacante con control de --commit-hash ejecutar comandos arbitrarios en el sistema que ejecuta Wrangler.\n\nCausa raíz\nLa variable commitHash, derivada de la entrada del usuario a través del argumento CLI --commit-hash, se interpola directamente en un comando de shell usando literales de plantilla (p. ej., execSync('git show -s --format=%B ${commitHash}')). Los metacaracteres de shell son interpretados por el shell, lo que permite la ejecución de comandos.\n\nImpacto\nEsta vulnerabilidad es generalmente difícil de exploit, ya que requiere que --commit-hash esté controlado por el atacante. La vulnerabilidad afecta principalmente a entornos CI/CD donde 'wrangler pages deploy' se utiliza en pipelines automatizados y el parámetro --commit-hash se rellena desde fuentes externas, potencialmente no confiables. Un atacante podría exploit esto para:\n\n  * Ejecutar cualquier comando de shell.\n  * Exfiltrar variables de entorno.\n  * Comprometer el ejecutor de CI para instalar puertas traseras o modificar artefactos de compilación.\n\nCréditos\nDivulgado de forma responsable por kny4hacker.\n\nMitigación\n  * Se solicita a los usuarios de Wrangler v4 que actualicen a Wrangler v4.59.1 o superior.\n  * Se solicita a los usuarios de Wrangler v3 que actualicen a Wrangler v3.114.17 o superior.\n  * Los usuarios de Wrangler v2 (EOL) deben actualizar a una versión principal compatible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:wrangler:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.15",
            "versionEndExcluding" : "3.114.17",
            "matchCriteriaId" : "C22AB9BD-AA08-4F21-9F00-EE077888827F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:wrangler:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.59.1",
            "matchCriteriaId" : "FDB2DBCA-953B-4E8E-A8D3-C978C083C1A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/workers-sdk",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24020",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:10.780",
      "lastModified" : "2026-01-21T05:16:10.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24021",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:10.943",
      "lastModified" : "2026-01-21T05:16:10.943",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24022",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:11.010",
      "lastModified" : "2026-01-21T05:16:11.010",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24023",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:11.077",
      "lastModified" : "2026-01-21T05:16:11.077",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24024",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:11.143",
      "lastModified" : "2026-01-21T05:16:11.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24025",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:11.207",
      "lastModified" : "2026-01-21T05:16:11.207",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24026",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-21T05:16:11.270",
      "lastModified" : "2026-01-21T05:16:11.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1035",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-21T06:15:46.937",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse policies. When strict refresh token rotation is enabled, the validation and update of refresh token usage are not performed atomically. This allows concurrent refresh requests to bypass single-use enforcement and issue multiple access tokens from the same refresh token. As a result, Keycloak’s refresh token rotation hardening can be undermined."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en el servidor Keycloak durante el procesamiento de tokens de actualización, específicamente en la clase TokenManager responsable de aplicar las políticas de reutilización de tokens de actualización. Cuando la rotación estricta de tokens de actualización está habilitada, la validación y actualización del uso del token de actualización no se realizan de forma atómica. Esto permite que las solicitudes de actualización concurrentes eludan la aplicación del uso único y emitan múltiples tokens de acceso desde el mismo token de actualización. Como resultado, el endurecimiento de la rotación de tokens de actualización de Keycloak puede verse socavado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:6477",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:6478",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1035",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2430314",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22976",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-21T07:16:01.433",
      "lastModified" : "2026-02-26T20:02:36.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset\n\n`qfq_class->leaf_qdisc->q.qlen > 0` does not imply that the class\nitself is active.\n\nTwo qfq_class objects may point to the same leaf_qdisc. This happens\nwhen:\n\n1. one QFQ qdisc is attached to the dev as the root qdisc, and\n\n2. another QFQ qdisc is temporarily referenced (e.g., via qdisc_get()\n/ qdisc_put()) and is pending to be destroyed, as in function\ntc_new_tfilter.\n\nWhen packets are enqueued through the root QFQ qdisc, the shared\nleaf_qdisc->q.qlen increases. At the same time, the second QFQ\nqdisc triggers qdisc_put and qdisc_destroy: the qdisc enters\nqfq_reset() with its own q->q.qlen == 0, but its class's leaf\nqdisc->q.qlen > 0. Therefore, the qfq_reset would wrongly deactivate\nan inactive aggregate and trigger a null-deref in qfq_deactivate_agg:\n\n[    0.903172] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[    0.903571] #PF: supervisor write access in kernel mode\n[    0.903860] #PF: error_code(0x0002) - not-present page\n[    0.904177] PGD 10299b067 P4D 10299b067 PUD 10299c067 PMD 0\n[    0.904502] Oops: Oops: 0002 [#1] SMP NOPTI\n[    0.904737] CPU: 0 UID: 0 PID: 135 Comm: exploit Not tainted 6.19.0-rc3+ #2 NONE\n[    0.905157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\n[    0.905754] RIP: 0010:qfq_deactivate_agg (include/linux/list.h:992 (discriminator 2) include/linux/list.h:1006 (discriminator 2) net/sched/sch_qfq.c:1367 (discriminator 2) net/sched/sch_qfq.c:1393 (discriminator 2))\n[    0.906046] Code: 0f 84 4d 01 00 00 48 89 70 18 8b 4b 10 48 c7 c2 ff ff ff ff 48 8b 78 08 48 d3 e2 48 21 f2 48 2b 13 48 8b 30 48 d3 ea 8b 4b 18 0\n\nCode starting with the faulting instruction\n===========================================\n   0:\t0f 84 4d 01 00 00    \tje     0x153\n   6:\t48 89 70 18          \tmov    %rsi,0x18(%rax)\n   a:\t8b 4b 10             \tmov    0x10(%rbx),%ecx\n   d:\t48 c7 c2 ff ff ff ff \tmov    $0xffffffffffffffff,%rdx\n  14:\t48 8b 78 08          \tmov    0x8(%rax),%rdi\n  18:\t48 d3 e2             \tshl    %cl,%rdx\n  1b:\t48 21 f2             \tand    %rsi,%rdx\n  1e:\t48 2b 13             \tsub    (%rbx),%rdx\n  21:\t48 8b 30             \tmov    (%rax),%rsi\n  24:\t48 d3 ea             \tshr    %cl,%rdx\n  27:\t8b 4b 18             \tmov    0x18(%rbx),%ecx\n\t...\n[    0.907095] RSP: 0018:ffffc900004a39a0 EFLAGS: 00010246\n[    0.907368] RAX: ffff8881043a0880 RBX: ffff888102953340 RCX: 0000000000000000\n[    0.907723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n[    0.908100] RBP: ffff888102952180 R08: 0000000000000000 R09: 0000000000000000\n[    0.908451] R10: ffff8881043a0000 R11: 0000000000000000 R12: ffff888102952000\n[    0.908804] R13: ffff888102952180 R14: ffff8881043a0ad8 R15: ffff8881043a0880\n[    0.909179] FS:  000000002a1a0380(0000) GS:ffff888196d8d000(0000) knlGS:0000000000000000\n[    0.909572] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    0.909857] CR2: 0000000000000000 CR3: 0000000102993002 CR4: 0000000000772ef0\n[    0.910247] PKRU: 55555554\n[    0.910391] Call Trace:\n[    0.910527]  <TASK>\n[    0.910638]  qfq_reset_qdisc (net/sched/sch_qfq.c:357 net/sched/sch_qfq.c:1485)\n[    0.910826]  qdisc_reset (include/linux/skbuff.h:2195 include/linux/skbuff.h:2501 include/linux/skbuff.h:3424 include/linux/skbuff.h:3430 net/sched/sch_generic.c:1036)\n[    0.911040]  __qdisc_destroy (net/sched/sch_generic.c:1076)\n[    0.911236]  tc_new_tfilter (net/sched/cls_api.c:2447)\n[    0.911447]  rtnetlink_rcv_msg (net/core/rtnetlink.c:6958)\n[    0.911663]  ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6861)\n[    0.911894]  netlink_rcv_skb (net/netlink/af_netlink.c:2550)\n[    0.912100]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)\n[    0.912296]  ? __alloc_skb (net/core/skbuff.c:706)\n[    0.912484]  netlink_sendmsg (net/netlink/af\n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: sch_qfq: Corrección de desreferencia NULL al desactivar un agregado inactivo en qfq_reset\n\n'qfq_class-&gt;leaf_qdisc-&gt;q.qlen &gt; 0' no implica que la propia clase esté activa.\n\nDos objetos qfq_class pueden apuntar al mismo leaf_qdisc. Esto ocurre cuando:\n\n1. un qdisc QFQ está adjunto al dev como el qdisc raíz, y\n\n2. otro qdisc QFQ es referenciado temporalmente (p. ej., a través de qdisc_get() / qdisc_put()) y está pendiente de ser destruido, como en la función tc_new_tfilter.\n\nCuando los paquetes son encolados a través del qdisc QFQ raíz, el leaf_qdisc-&gt;q.qlen compartido aumenta. Al mismo tiempo, el segundo qdisc QFQ dispara qdisc_put y qdisc_destroy: el qdisc entra en qfq_reset() con su propio q-&gt;q.qlen == 0, pero el leaf qdisc de su clase-&gt;q.qlen &gt; 0. Por lo tanto, el qfq_reset desactivaría erróneamente un agregado inactivo y dispararía una desreferencia nula en qfq_deactivate_agg:\n\n[    0.903172] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[    0.903571] #PF: supervisor write access in kernel mode\n[    0.903860] #PF: error_code(0x0002) - not-present page\n[    0.904177] PGD 10299b067 P4D 10299b067 PUD 10299c067 PMD 0\n[    0.904502] Oops: Oops: 0002 [#1] SMP NOPTI\n[    0.904737] CPU: 0 UID: 0 PID: 135 Comm: exploit Not tainted 6.19.0-rc3+ #2 NONE\n[    0.905157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\n[    0.905754] RIP: 0010:qfq_deactivate_agg (include/linux/list.h:992 (discriminator 2) include/linux/list.h:1006 (discriminator 2) net/sched/sch_qfq.c:1367 (discriminator 2) net/sched/sch_qfq.c:1393 (discriminator 2))\n[    0.906046] Code: 0f 84 4d 01 00 00 48 89 70 18 8b 4b 10 48 c7 c2 ff ff ff ff 48 8b 78 08 48 d3 e2 48 21 f2 48 2b 13 48 8b 30 48 d3 ea 8b 4b 18 0\n\nCódigo que comienza con la instrucción que causa el fallo\n===========================================\n   0:\t0f 84 4d 01 00 00    \tje     0x153\n   6:\t48 89 70 18          \tmov    %rsi,0x18(%rax)\n   a:\t8b 4b 10             \tmov    0x10(%rbx),%ecx\n   d:\t48 c7 c2 ff ff ff ff \tmov    $0xffffffffffffffff,%rdx\n  14:\t48 8b 78 08          \tmov    0x8(%rax),%rdi\n  18:\t48 d3 e2             \tshl    %cl,%rdx\n  1b:\t48 21 f2             \tand    %rsi,%rdx\n  1e:\t48 2b 13             \tsub    (%rbx),%rdx\n  21:\t48 8b 30             \tmov    (%rax),%rsi\n  24:\t48 d3 ea             \tshr    %cl,%rdx\n  27:\t8b 4b 18             \tmov    0x18(%rbx),%ecx\n\t...\n[    0.907095] RSP: 0018:ffffc900004a39a0 EFLAGS: 00010246\n[    0.907368] RAX: ffff8881043a0880 RBX: ffff888102953340 RCX: 0000000000000000\n[    0.907723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n[    0.908100] RBP: ffff888102952180 R08: 0000000000000000 R09: 0000000000000000\n[    0.908451] R10: ffff8881043a0000 R11: 0000000000000000 R12: ffff888102952000\n[    0.908804] R13: ffff888102952180 R14: ffff8881043a0ad8 R15: ffff8881043a0880\n[    0.909179] FS:  000000002a1a0380(0000) GS:ffff888196d8d000(0000) knlGS:0000000000000000\n[    0.909572] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    0.909857] CR2: 0000000000000000 CR3: 0000000102993002 CR4: 0000000000772ef0\n[    0.910247] PKRU: 55555554\n[    0.910391] Call Trace:\n[    0.910527]  \n[    0.910638]  qfq_reset_qdisc (net/sched/sch_qfq.c:357 net/sched/sch_qfq.c:1485)\n[    0.910826]  qdisc_reset (include/linux/skbuff.h:2195 include/linux/skbuff.h:2501 include/linux/skbuff.h:3424 include/linux/skbuff.h:3430 net/sched/sch_generic.c:1036)\n[    0.911040]  __qdisc_destroy (net/sched/sch_generic.c:1076)\n[    0.911236]  tc_new_tfilter (net/sched/cls_api.c:2447)\n[    0.911447]  rtnetlink_rcv_msg (net/core/rtnetlink.c:6958)\n[    0.911663]  ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6861)\n[    0.911894]  netlink_rcv_skb (net/netlink/af_netlink.c:2550)\n[    0.912100]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)\n[    0.912296]  ? __alloc_skb (net/core/skbuff.c:706)\n[    0.912484]  netlink_sendmsg (net/netlink/af\n---truncated---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "F7FB331B-C639-484C-AC8F-06ACD071EE13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0809c4bc06c9c961222df29f2eccfd449304056f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/11bf9134613f6c71fc0ff36c5d8d33856f6ae3bb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/43497313d0da3e12b5cfcd97aa17bf48ee663f95",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/51ffd447bc37bf1a5776b85523f51d2bc69977f6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6116a83ec167d3ab1390cded854d237481f41b63",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c1d73b1480235731e35c81df70b08f4714a7d095",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cdb24200b043438a144df501f1ebbd926bb1a2c7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-21T07:16:01.597",
      "lastModified" : "2026-02-11T15:40:42.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable."
      }, {
        "lang" : "es",
        "value" : "telnetd en GNU Inetutils a través de 2.7 permite la omisión de autenticación remota a través de un valor '-f root' para la variable de entorno USER."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-01-26",
      "cisaActionDue" : "2026-02-16",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "GNU InetUtils Argument Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.3",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "1A15FADC-AD86-4C11-B182-C1AC2D73A3BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gnu.org/software/inetutils/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/20/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/20/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-24061-detection-script-remote-authentication-bypass-in-gnu-inetutils-package",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-24061-mitigation-script-remote-authentication-bypass-in-gnu-inetutils-package",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/01/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24061",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/index.html",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/20/2#:~:text=root@...a%3A~%20USER='",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24016",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-21T08:15:59.407",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed."
      }, {
        "lang" : "es",
        "value" : "El instalador de ServerView Agents para Windows proporcionado por Fsas Technologies Inc. puede cargar de forma insegura librerías de Enlace Dinámico. Se puede ejecutar código arbitrario con privilegios de administrador cuando se ejecuta el instalador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN65211823/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.fsastech.com/ja-jp/resources/security/2026/0121.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2026-012107-Security-Notice.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0663",
      "sourceIdentifier" : "security@m-files.com",
      "published" : "2026-01-21T11:15:50.880",
      "lastModified" : "2026-02-23T11:16:21.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vault administrator privileges to crash the M-Files Server process by calling a vulnerable API endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio en versiones de M-Files Server anteriores a la 26.1.15632.3 permite a un atacante autenticado con privilegios de administrador de bóveda bloquear el proceso de M-Files Server al llamar a un endpoint de API vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@m-files.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@m-files.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1286"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1.15632.3",
            "matchCriteriaId" : "B6429F61-1137-4326-B844-DC601E7CD394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://empower.m-files.com/security-advisories/CVE-2026-0663",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://product.m-files.com/security-advisories/cve-2026-0663/",
        "source" : "security@m-files.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0988",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-21T12:15:55.560",
      "lastModified" : "2026-04-24T21:16:17.357",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS)."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en glib. La falta de validación de los parámetros offset y count en la función g_buffered_input_stream_peek() puede conducir a un desbordamiento de entero durante el cálculo de la longitud. Cuando se proporcionan valores especialmente manipulados, este desbordamiento resulta en que se pase un tamaño incorrecto a memcpy(), lo que desencadena un desbordamiento de búfer. Esto puede causar caídas de la aplicación, lo que lleva a una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:7461",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0988",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429886",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/3851",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22022",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-01-21T14:16:06.573",
      "lastModified" : "2026-01-27T20:34:13.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's \"Rule Based Authorization Plugin\" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components.  Only deployments that meet all of the following criteria are impacted by this vulnerability:\n\n  *  Use of Solr's \"RuleBasedAuthorizationPlugin\"\n  *  A RuleBasedAuthorizationPlugin config (see security.json) that specifies multiple \"roles\"\n  *  A RuleBasedAuthorizationPlugin permission list (see security.json) that uses one or more of the following pre-defined permission rules: \"config-read\", \"config-edit\", \"schema-read\", \"metrics-read\", or \"security-read\".\n  *  A RuleBasedAuthorizationPlugin permission list that doesn't define the \"all\" pre-defined permission\n  *  A networking setup that allows clients to make unfiltered network requests to Solr. (i.e. user-submitted HTTP/HTTPS requests reach Solr as-is, unmodified or restricted by any intervening proxy or gateway)\n\nUsers can mitigate this vulnerability by ensuring that their RuleBasedAuthorizationPlugin configuration specifies the \"all\" pre-defined permission and associates the permission with an \"admin\" or other privileged role.  Users can also upgrade to a Solr version outside of the impacted range, such as the recently released Solr 9.10.1."
      }, {
        "lang" : "es",
        "value" : "Las implementaciones de Apache Solr 5.3.0 hasta 9.10.0 que dependen del 'Rule Based Authorization Plugin' de Solr son vulnerables a permitir acceso no autorizado a ciertas APIs de Solr, debido a una validación de entrada insuficientemente estricta en esos componentes. Solo las implementaciones que cumplen todos los siguientes criterios se ven afectadas por esta vulnerabilidad:\n\n  *  Uso del 'RuleBasedAuthorizationPlugin' de Solr\n  *  Una configuración de RuleBasedAuthorizationPlugin (ver security.json) que especifica múltiples 'roles'\n  *  Una lista de permisos de RuleBasedAuthorizationPlugin (ver security.json) que utiliza una o más de las siguientes reglas de permiso predefinidas: 'config-read', 'config-edit', 'schema-read', 'metrics-read' o 'security-read'.\n  *  Una lista de permisos de RuleBasedAuthorizationPlugin que no define el permiso predefinido 'all'\n  *  Una configuración de red que permite a los clientes realizar solicitudes de red sin filtrar a Solr. (es decir, las solicitudes HTTP/HTTPS enviadas por el usuario llegan a Solr tal cual, sin modificar ni restringir por ningún proxy o puerta de enlace intermedio)\n\nLos usuarios pueden mitigar esta vulnerabilidad asegurándose de que su configuración de RuleBasedAuthorizationPlugin especifique el permiso predefinido 'all' y asocie el permiso con un rol 'admin' u otro rol privilegiado. Los usuarios también pueden actualizar a una versión de Solr fuera del rango afectado, como el recientemente lanzado Solr 9.10.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "9.10.1",
            "matchCriteriaId" : "2F2760AF-9E4B-4552-847C-DE58D908164F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/d59hqbgo7p62myq7mgfpz7or8n1j7wbn",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/20/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22444",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-01-21T14:16:06.707",
      "lastModified" : "2026-01-27T20:30:40.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"create core\" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's  \"allowPaths\" security setting https://https://solr.apache.org/guide/solr/latest/configuration-guide/configuring-solr-xml.html#the-solr-element .  These read-only accesses can allow users to create cores using unexpected configsets if any are accessible via the filesystem.  On Windows systems configured to allow UNC paths this can additionally cause disclosure of NTLM \"user\" hashes. \n\nSolr deployments are subject to this vulnerability if they meet the following criteria:\n  *  Solr is running in its \"standalone\" mode.\n  *  Solr's \"allowPath\" setting is being used to restrict file access to certain directories.\n  *  Solr's \"create core\" API is exposed and accessible to untrusted users.  This can happen if Solr's  RuleBasedAuthorizationPlugin https://solr.apache.org/guide/solr/latest/deployment-guide/rule-based-authorization-plugin.html  is disabled, or if it is enabled but the \"core-admin-edit\" predefined permission (or an equivalent custom permission) is given to low-trust (i.e. non-admin) user roles.\n\nUsers can mitigate this by enabling Solr's RuleBasedAuthorizationPlugin (if disabled) and configuring a permission-list that prevents untrusted users from creating new Solr cores.  Users should also upgrade to Apache Solr 9.10.1 or greater, which contain fixes for this issue."
      }, {
        "lang" : "es",
        "value" : "La API 'create core' de Apache Solr 8.6 hasta 9.10.0 carece de suficiente validación de entrada en algunos parámetros de la API, lo que puede hacer que Solr compruebe la existencia e intente leer rutas del sistema de archivos que deberían ser denegadas por la configuración de seguridad 'allowPaths' de Solr https://https://solr.apache.org/guide/solr/latest/configuration-guide/configuring-solr-xml.html#the-solr-element . Estos accesos de solo lectura pueden permitir a los usuarios crear núcleos utilizando conjuntos de configuración (configsets) inesperados si alguno es accesible a través del sistema de archivos. En sistemas Windows configurados para permitir rutas UNC, esto puede causar adicionalmente la divulgación de hashes NTLM de 'usuario'.\n\nLas implementaciones de Solr están sujetas a esta vulnerabilidad si cumplen los siguientes criterios:\n  * Solr se está ejecutando en su modo 'standalone'.\n  * La configuración 'allowPath' de Solr se está utilizando para restringir el acceso a archivos a ciertos directorios.\n  * La API 'create core' de Solr está expuesta y es accesible para usuarios no confiables. Esto puede ocurrir si el RuleBasedAuthorizationPlugin de Solr https://solr.apache.org/guide/solr/latest/deployment-guide/rule-based-authorization-plugin.html está deshabilitado, o si está habilitado pero el permiso predefinido 'core-admin-edit' (o un permiso personalizado equivalente) se otorga a roles de usuario de baja confianza (es decir, no administradores).\n\nLos usuarios pueden mitigar esto habilitando el RuleBasedAuthorizationPlugin de Solr (si está deshabilitado) y configurando una lista de permisos que impida a los usuarios no confiables crear nuevos núcleos de Solr. Los usuarios también deberían actualizar a Apache Solr 9.10.1 o superior, que contienen correcciones para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "9.10.1",
            "matchCriteriaId" : "8EEA3BEF-03F1-4D74-A368-95EDEAA65966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/qkrb9dd4xrlqmmq73lrhkbfkttto2d1m",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/20/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22977",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-21T14:16:06.853",
      "lastModified" : "2026-02-26T20:02:55.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sock: fix hardened usercopy panic in sock_recv_errqueue\n\nskbuff_fclone_cache was created without defining a usercopy region,\n[1] unlike skbuff_head_cache which properly whitelists the cb[] field.\n[2] This causes a usercopy BUG() when CONFIG_HARDENED_USERCOPY is\nenabled and the kernel attempts to copy sk_buff.cb data to userspace\nvia sock_recv_errqueue() -> put_cmsg().\n\nThe crash occurs when: 1. TCP allocates an skb using alloc_skb_fclone()\n   (from skbuff_fclone_cache) [1]\n2. The skb is cloned via skb_clone() using the pre-allocated fclone\n[3] 3. The cloned skb is queued to sk_error_queue for timestamp\nreporting 4. Userspace reads the error queue via recvmsg(MSG_ERRQUEUE)\n5. sock_recv_errqueue() calls put_cmsg() to copy serr->ee from skb->cb\n[4] 6. __check_heap_object() fails because skbuff_fclone_cache has no\n   usercopy whitelist [5]\n\nWhen cloned skbs allocated from skbuff_fclone_cache are used in the\nsocket error queue, accessing the sock_exterr_skb structure in skb->cb\nvia put_cmsg() triggers a usercopy hardening violation:\n\n[    5.379589] usercopy: Kernel memory exposure attempt detected from SLUB object 'skbuff_fclone_cache' (offset 296, size 16)!\n[    5.382796] kernel BUG at mm/usercopy.c:102!\n[    5.383923] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\n[    5.384903] CPU: 1 UID: 0 PID: 138 Comm: poc_put_cmsg Not tainted 6.12.57 #7\n[    5.384903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[    5.384903] RIP: 0010:usercopy_abort+0x6c/0x80\n[    5.384903] Code: 1a 86 51 48 c7 c2 40 15 1a 86 41 52 48 c7 c7 c0 15 1a 86 48 0f 45 d6 48 c7 c6 80 15 1a 86 48 89 c1 49 0f 45 f3 e8 84 27 88 ff <0f> 0b 490\n[    5.384903] RSP: 0018:ffffc900006f77a8 EFLAGS: 00010246\n[    5.384903] RAX: 000000000000006f RBX: ffff88800f0ad2a8 RCX: 1ffffffff0f72e74\n[    5.384903] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff87b973a0\n[    5.384903] RBP: 0000000000000010 R08: 0000000000000000 R09: fffffbfff0f72e74\n[    5.384903] R10: 0000000000000003 R11: 79706f6372657375 R12: 0000000000000001\n[    5.384903] R13: ffff88800f0ad2b8 R14: ffffea00003c2b40 R15: ffffea00003c2b00\n[    5.384903] FS:  0000000011bc4380(0000) GS:ffff8880bf100000(0000) knlGS:0000000000000000\n[    5.384903] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    5.384903] CR2: 000056aa3b8e5fe4 CR3: 000000000ea26004 CR4: 0000000000770ef0\n[    5.384903] PKRU: 55555554\n[    5.384903] Call Trace:\n[    5.384903]  <TASK>\n[    5.384903]  __check_heap_object+0x9a/0xd0\n[    5.384903]  __check_object_size+0x46c/0x690\n[    5.384903]  put_cmsg+0x129/0x5e0\n[    5.384903]  sock_recv_errqueue+0x22f/0x380\n[    5.384903]  tls_sw_recvmsg+0x7ed/0x1960\n[    5.384903]  ? srso_alias_return_thunk+0x5/0xfbef5\n[    5.384903]  ? schedule+0x6d/0x270\n[    5.384903]  ? srso_alias_return_thunk+0x5/0xfbef5\n[    5.384903]  ? mutex_unlock+0x81/0xd0\n[    5.384903]  ? __pfx_mutex_unlock+0x10/0x10\n[    5.384903]  ? __pfx_tls_sw_recvmsg+0x10/0x10\n[    5.384903]  ? _raw_spin_lock_irqsave+0x8f/0xf0\n[    5.384903]  ? _raw_read_unlock_irqrestore+0x20/0x40\n[    5.384903]  ? srso_alias_return_thunk+0x5/0xfbef5\n\nThe crash offset 296 corresponds to skb2->cb within skbuff_fclones:\n  - sizeof(struct sk_buff) = 232 - offsetof(struct sk_buff, cb) = 40 -\n  offset of skb2.cb in fclones = 232 + 40 = 272 - crash offset 296 =\n  272 + 24 (inside sock_exterr_skb.ee)\n\nThis patch uses a local stack variable as a bounce buffer to avoid the hardened usercopy check failure.\n\n[1] https://elixir.bootlin.com/linux/v6.12.62/source/net/ipv4/tcp.c#L885\n[2] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5104\n[3] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5566\n[4] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5491\n[5] https://elixir.bootlin.com/linux/v6.12.62/source/mm/slub.c#L5719"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: sock: soluciona el pánico de usercopy endurecido en sock_recv_errqueue\n\nskbuff_fclone_cache fue creada sin definir una región de usercopy,\n[1] a diferencia de skbuff_head_cache que incluye correctamente en la lista blanca el campo cb[].\n[2] Esto causa un BUG() de usercopy cuando CONFIG_HARDENED_USERCOPY está\nhabilitado y el kernel intenta copiar datos de sk_buff.cb al espacio de usuario\na través de sock_recv_errqueue() -&gt; put_cmsg().\n\nEl fallo ocurre cuando: 1. TCP asigna un skb usando alloc_skb_fclone()\n   (de skbuff_fclone_cache) [1]\n2. El skb es clonado a través de skb_clone() usando el fclone preasignado\n[3] 3. El skb clonado se encola en sk_error_queue para el reporte de marca de tiempo\n4. El espacio de usuario lee la cola de errores a través de recvmsg(MSG_ERRQUEUE)\n5. sock_recv_errqueue() llama a put_cmsg() para copiar serr-&gt;ee de skb-&gt;cb\n[4] 6. __check_heap_object() falla porque skbuff_fclone_cache no tiene una\n   lista blanca de usercopy [5]\n\nCuando los skbs clonados asignados de skbuff_fclone_cache se usan en la\ncola de errores del socket, acceder a la estructura sock_exterr_skb en skb-&gt;cb\na través de put_cmsg() desencadena una violación de endurecimiento de usercopy:\n\n[    5.379589] usercopy: Intento de exposición de memoria del kernel detectado desde el objeto SLUB 'skbuff_fclone_cache' (desplazamiento 296, tamaño 16)!\n[    5.382796] kernel BUG at mm/usercopy.c:102!\n[    5.383923] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\n[    5.384903] CPU: 1 UID: 0 PID: 138 Comm: poc_put_cmsg Not tainted 6.12.57 #7\n[    5.384903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[    5.384903] RIP: 0010:usercopy_abort+0x6c/0x80\n[    5.384903] Code: 1a 86 51 48 c7 c2 40 15 1a 86 41 52 48 c7 c7 c0 15 1a 86 48 0f 45 d6 48 c7 c6 80 15 1a 86 48 89 c1 49 0f 45 f3 e8 84 27 88 ff &lt;0f&gt; 0b 490\n[    5.384903] RSP: 0018:ffffc900006f77a8 EFLAGS: 00010246\n[    5.384903] RAX: 000000000000006f RBX: ffff88800f0ad2a8 RCX: 1ffffffff0f72e74\n[    5.384903] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff87b973a0\n[    5.384903] RBP: 0000000000000010 R08: 0000000000000000 R09: fffffbfff0f72e74\n[    5.384903] R10: 0000000000000003 R11: 79706f6372657375 R12: 0000000000000001\n[    5.384903] R13: ffff88800f0ad2b8 R14: ffffea00003c2b40 R15: ffffea00003c2b00\n[    5.384903] FS:  0000000011bc4380(0000) GS:ffff8880bf100000(0000) knlGS:0000000000000000\n[    5.384903] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[    5.384903] CR2: 000056aa3b8e5fe4 CR3: 000000000ea26004 CR4: 0000000000770ef0\n[    5.384903] PKRU: 55555554\n[    5.384903] Call Trace:\n[    5.384903]  \n[    5.384903]  __check_heap_object+0x9a/0xd0\n[    5.384903]  __check_object_size+0x46c/0x690\n[    5.384903]  put_cmsg+0x129/0x5e0\n[    5.384903]  sock_recv_errqueue+0x22f/0x380\n[    5.384903]  tls_sw_recvmsg+0x7ed/0x1960\n[    5.384903]  ? srso_alias_return_thunk+0x5/0xfbef5\n[    5.384903]  ? schedule+0x6d/0x270\n[    5.384903]  ? srso_alias_return_thunk+0x5/0xfbef5\n[    5.384903]  ? mutex_unlock+0x81/0xd0\n[    5.384903]  ? __pfx_mutex_unlock+0x10/0x10\n[    5.384903]  ? __pfx_tls_sw_recvmsg+0x10/0x10\n[    5.384903]  ? _raw_spin_lock_irqsave+0x8f/0xf0\n[    5.384903]  ? _raw_read_unlock_irqrestore+0x20/0x40\n[    5.384903]  ? srso_alias_return_thunk+0x5/0xfbef5\n\nEl desplazamiento de fallo 296 corresponde a skb2-&gt;cb dentro de skbuff_fclones:\n  - sizeof(struct sk_buff) = 232 - offsetof(struct sk_buff, cb) = 40 -\n  desplazamiento de skb2.cb en fclones = 232 + 40 = 272 - desplazamiento de fallo 296 =\n  272 + 24 (dentro de sock_exterr_skb.ee)\n\nEste parche utiliza una variable de pila local como un búfer de rebote para evitar el fallo de la comprobación de usercopy endurecido.\n\n[1] https://elixir.bootlin.com/linux/v6.12.62/source/net/ipv4/tcp.c#L885\n[2] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5104"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "28823BF6-2E21-40F0-9BF2-FB2E3202B725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/005671c60fcf1dbdb8bddf12a62568fd5e4ec391",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2a71a1a8d0ed718b1c7a9ac61f07e5755c47ae20",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/582a5e922a9652fcbb7d0165c95d5b20aa37575d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/88dd6be7ebb3153b662c2cebcb06e032a92857f5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8c6901aa29626e35045130bac09b75f791acca85",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c655d2167bf014d4c61b4faeca59b60ff9b9f6b1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e00b169eaac5f7cdbf710c354c8fa76d02009115",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1290",
      "sourceIdentifier" : "67325c3f-c596-46c5-a235-e1a1e73abe4e",
      "published" : "2026-01-21T16:16:08.040",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación por debilidad primaria en Jamf Jamf Pro permite impacto no especificado. Este problema afecta a Jamf Pro: desde 11.20 hasta 11.24."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "67325c3f-c596-46c5-a235-e1a1e73abe4e",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "67325c3f-c596-46c5-a235-e1a1e73abe4e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "references" : [ {
        "url" : "https://learn.jamf.com/en-US/bundle/jamf-pro-release-notes-11.24.0/page/Resolved_Issues.html",
        "source" : "67325c3f-c596-46c5-a235-e1a1e73abe4e"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20045",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-21T17:16:08.077",
      "lastModified" : "2026-02-13T21:37:06.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.&nbsp;\r\n\r\nThis vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.&nbsp;\r\nNote: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM y Presence Service (Unified CM IM&amp;P), Cisco Unity Connection y Cisco Webex Calling Dedicated Instance podría permitir a un atacante remoto no autenticado ejecutar comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación incorrecta de la entrada proporcionada por el usuario en las solicitudes HTTP. Un atacante podría explotar esta vulnerabilidad enviando una secuencia de solicitudes HTTP manipuladas a la interfaz de gestión basada en web de un dispositivo afectado. Un exploit exitoso podría permitir al atacante obtener acceso a nivel de usuario al sistema operativo subyacente y luego elevar privilegios a root.\nNota: Cisco ha asignado a este aviso de seguridad una Calificación de Impacto de Seguridad (SIR) de Crítico en lugar de Alto como indica la puntuación. La razón es que la explotación de esta vulnerabilidad podría resultar en que un atacante eleve privilegios a root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-01-21",
      "cisaActionDue" : "2026-02-11",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Cisco Unified Communications Products Code Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "14su5",
            "matchCriteriaId" : "9A84A37B-553F-48B5-8F92-678A478EE896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "14su5",
            "matchCriteriaId" : "27BC4E6E-8C4D-4EEA-A8DB-8CBC11349336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15su3a",
            "matchCriteriaId" : "E8EE2A11-29DC-45EF-A9B0-E053C004EF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15su3a",
            "matchCriteriaId" : "99E5929A-E9DE-4370-A363-66BDA1D46BDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "14su5",
            "matchCriteriaId" : "1235D0E6-5703-4DAB-8D50-0DBEF7A9A1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15su3a",
            "matchCriteriaId" : "EF732C27-6F22-4987-BCED-B7303E8F9789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "14su5",
            "matchCriteriaId" : "8CD37F03-3690-4C47-9768-06EB00F693AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15su3",
            "matchCriteriaId" : "FD7BF042-4261-4F93-913D-D7B756F975CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20045",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20055",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-21T17:16:08.253",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.&nbsp;\r\n\r\nThese vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de gestión basada en web de Cisco Packaged Contact Center Enterprise (Packaged CCE) y Cisco Unified Contact Center Enterprise (Unified CCE) podrían permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) contra un usuario de la interfaz de gestión basada en web de un dispositivo afectado.\n\nEstas vulnerabilidades existen porque la interfaz de gestión basada en web no valida correctamente la entrada proporcionada por el usuario. Un atacante podría explotar estas vulnerabilidades inyectando código malicioso en páginas específicas de la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar estas vulnerabilidades, el atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20080",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-21T17:16:08.410",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding.\r\n\r\nThis vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit this vulnerability by initiating a denial of service (DoS) attack against the SSH port. A successful exploit could allow the attacker to cause the SSH service to be unresponsive during the period of the DoS attack. All other operations remain stable during the attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio SSH de Cisco IEC6400 Wireless Backhaul Edge Compute Software podría permitir a un atacante remoto no autenticado que el servicio SSH deje de responder.\n\nEsta vulnerabilidad existe porque el servicio SSH carece de protección eficaz contra inundaciones. Un atacante podría explotar esta vulnerabilidad al iniciar un ataque de denegación de servicio (DoS) contra el puerto SSH. Un exploit exitoso podría permitir al atacante que el servicio SSH no responda durante el período del ataque DoS. Todas las demás operaciones permanecen estables durante el ataque."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20092",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-21T17:16:08.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance.\r\n\r\nThis vulnerability is due to improper file permissions on configuration files for system accounts within the maintenance shell of the virtual appliance. An attacker could exploit this vulnerability by accessing the maintenance shell as a read-only administrator and manipulating system files to grant root privileges. A successful exploit could allow the attacker to elevate their privileges to&nbsp;root on the virtual appliance and gain full control of the appliance, giving them the ability to access sensitive information, modify workloads and configurations on the host system, and cause a denial of service (DoS)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el shell de mantenimiento de solo lectura de Cisco Intersight Virtual Appliance podría permitir a un atacante local autenticado con privilegios administrativos elevar privilegios a root en el dispositivo virtual.\n\nEsta vulnerabilidad se debe a permisos de archivo incorrectos en los archivos de configuración para las cuentas de sistema dentro del shell de mantenimiento del dispositivo virtual. Un atacante podría explotar esta vulnerabilidad al acceder al shell de mantenimiento como administrador de solo lectura y manipular archivos de sistema para otorgar privilegios de root. Un exploit exitoso podría permitir al atacante elevar sus privilegios a root en el dispositivo virtual y obtener control total del dispositivo, dándoles la capacidad de acceder a información sensible, modificar cargas de trabajo y configuraciones en el sistema host, y causar una denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20109",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-01-21T17:16:08.723",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.&nbsp;\r\n\r\nThese vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de gestión basada en web de Cisco Packaged Contact Center Enterprise (Packaged CCE) y Cisco Unified Contact Center Enterprise (Unified CCE) podrían permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) contra un usuario de la interfaz de gestión basada en web de un dispositivo afectado.\n\nEstas vulnerabilidades existen porque la interfaz de gestión basada en web no valida correctamente la entrada proporcionada por el usuario. Un atacante podría explotar estas vulnerabilidades inyectando código malicioso en páginas específicas de la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar estas vulnerabilidades, el atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0834",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-01-21T18:16:24.773",
      "lastModified" : "2026-04-28T19:36:28.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\n\nThis issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419\n\n\nArcher AX53 v1.0 < \n\nV1_251215\n\n\n\nTL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad lógica en TP-Link Archer C20 v6.0 y Archer AX53 v1.0 (módulo TDDP) permite a atacantes adyacentes no autenticados ejecutar comandos administrativos incluyendo restablecimiento de fábrica y reinicio del dispositivo sin credenciales. Atacantes en la red adyacente pueden activar de forma remota restablecimientos de fábrica y reinicios sin credenciales, causando pérdida de configuración e interrupción de la disponibilidad del dispositivo. Este problema afecta a Archer C20 v6.0 &lt; V6_251031.\n\nArcher AX53 v1.0 &lt; V1_251215"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_ax53_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C762E60-933C-4B61-84D1-0A6FE4D5E08E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_ax53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394AAF99-8784-4872-8EED-A12B97C575E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_c20_firmware:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36B6485-1C16-4FC9-B5ED-3B0D5FC9B16B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_c20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FFFAF05-D4CE-454A-B830-7899CAFC8ED0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattg.systems/posts/cve-2026-0834/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tl-wr841n/v13/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4905/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23754",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-21T18:16:25.370",
      "lastModified" : "2026-01-30T21:30:51.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints. Any authenticated user can supply an arbitrary user_id value to retrieve sensitive credential data belonging to other users, including super administrators. The exposed credential material can be reused directly as a valid authentication secret, allowing full impersonation of the targeted account. This results in complete account takeover and full administrative control over the D-View system."
      }, {
        "lang" : "es",
        "value" : "D-Link D-View 8 versiones 2.0.1.107 e inferiores contienen una vulnerabilidad de control de acceso inadecuado en los endpoints de la API de backend. Cualquier usuario autenticado puede proporcionar un valor user_id arbitrario para recuperar datos de credenciales sensibles pertenecientes a otros usuarios, incluidos los superadministradores. El material de credenciales expuesto puede reutilizarse directamente como un secreto de autenticación válido, permitiendo la suplantación completa de la cuenta objetivo. Esto resulta en una toma de control completa de la cuenta y control administrativo total sobre el sistema D-View."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlink:d-view_8:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1.107",
            "matchCriteriaId" : "E503B0B7-ED8A-42E4-8519-732D4AE9C796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10471",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/dlink-dview-8-idor-allows-credential-disclosure-and-account-takeover",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23755",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-21T18:16:26.117",
      "lastModified" : "2026-01-30T21:33:18.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious version.dll alongside the legitimate installer so that, when a victim runs the installer and approves the UAC prompt, attacker-controlled code executes with administrator privileges. This can lead to full system compromise."
      }, {
        "lang" : "es",
        "value" : "Versiones 2.0.1.107 y anteriores de D-Link D-View 8 contienen una vulnerabilidad de ruta de búsqueda no controlada en el instalador. Cuando se ejecuta con privilegios elevados a través de UAC, el instalador intenta cargar version.dll desde su directorio de ejecución, permitiendo la precarga de DLL. Un atacante puede suministrar un version.dll malicioso junto con el instalador legítimo de modo que, cuando una víctima ejecuta el instalador y aprueba la solicitud de UAC, el código controlado por el atacante se ejecuta con privilegios de administrador. Esto puede conducir a un compromiso total del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlink:d-view_8:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1.107",
            "matchCriteriaId" : "E503B0B7-ED8A-42E4-8519-732D4AE9C796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10471",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/dlink-dview-8-installer-dll-preloading-via-uncontrolled-search-path",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23955",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T20:16:12.517",
      "lastModified" : "2026-02-06T21:21:59.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing the integer value as expected, like most of interpreted languages. This can be used by malicious operator to read unintended memory regions, including the heap and the stack. Version 2025.9.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "EVerest es una pila de software de carga de VE. Antes de la versión 2025.9.0, en varios lugares, los valores enteros se concatenan a cadenas literales al lanzar errores. Esto resulta en aritmética de punteros en lugar de imprimir el valor entero como se espera, como la mayoría de los lenguajes interpretados. Esto puede ser utilizado por un operador malicioso para leer regiones de memoria no intencionadas, incluyendo el montón y la pila. La versión 2025.9.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1046"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linuxfoundation:everest:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.9.0",
            "matchCriteriaId" : "B1D746C7-49D6-43DE-90B2-C79F58ADB9B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/EVerest/everest-core/security/advisories/GHSA-px57-jx97-hrff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T21:16:08.693",
      "lastModified" : "2026-02-02T15:04:41.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, potentially leaking the user's API keys. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.0.65, which contains a patch, or to the latest version."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.0.65, una vulnerabilidad en el flujo de carga de proyectos de Claude Code permitía a repositorios maliciosos exfiltrar datos, incluyendo claves API de Anthropic, antes de que los usuarios confirmaran la confianza. Un repositorio controlado por un atacante podría incluir un archivo de configuración que estableciera ANTHROPIC_BASE_URL a un punto final controlado por un atacante y, cuando se abría el repositorio, Claude Code leería la configuración e inmediatamente emitiría solicitudes API antes de mostrar la solicitud de confianza, filtrando potencialmente las claves API del usuario. Los usuarios con la actualización automática estándar de Claude Code ya han recibido esta corrección. Se aconseja a los usuarios que realizan actualizaciones manuales que actualicen a la versión 2.0.65, que contiene un parche, o a la última versión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.65",
            "matchCriteriaId" : "DD35DBC7-825A-49D0-825E-8DD6BE1A257A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-jh7p-qr78-84p7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22598",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T21:16:09.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 contains a patch. One may also apply the patch manually."
      }, {
        "lang" : "es",
        "value" : "ManageIQ es una plataforma de gestión de código abierto. Se encontró una falla en la API de ManageIQ anterior a la versión radjabov-2 donde se podía crear un TimeProfile malformado, lo que provocaba que las solicitudes posteriores de la interfaz de usuario (UI) y la API agotaran el tiempo de espera, lo que llevaba a una denegación de servicio. La versión radjabov-2 contiene un parche. También se puede aplicar el parche manualmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ManageIQ/manageiq/commit/79cef10c7d0278d8a37c3f547c426948180df4df.patch",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/ManageIQ/manageiq/commit/86132851257d73ed9e31a88315e47a8a2b838113",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/ManageIQ/manageiq/security/advisories/GHSA-m832-x3g8-63j3",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22792",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T21:16:09.957",
      "lastModified" : "2026-01-29T19:46:50.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `<img onerror=...>` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "5ire es un asistente de inteligencia artificial de escritorio multiplataforma y cliente de protocolo de contexto de modelo. Antes de la versión 0.15.3, una renderización HTML insegura permite que HTML no confiable (incluidos los atributos de evento on*) se ejecute en el contexto del renderizador. Un atacante puede inyectar una carga útil `` para ejecutar JavaScript arbitrario en el renderizador, lo que puede llamar a las API de puente expuestas como `window.bridge.mcpServersManager.createServer`. Esto permite la creación no autorizada de servidores MCP y conduce a la ejecución remota de comandos. La versión 0.15.3 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:5ire:5ire:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.3",
            "matchCriteriaId" : "E337B209-844D-4396-B279-063A15A1C0DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nanbingxyz/5ire/releases/tag/v0.15.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nanbingxyz/5ire/security/advisories/GHSA-p5fm-wm8g-rffx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22793",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T21:16:10.107",
      "lastModified" : "2026-01-29T19:58:16.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe option parsing vulnerability in the ECharts Markdown plugin allows any user able to submit ECharts code blocks to execute arbitrary JavaScript code in the renderer context. This can lead to Remote Code Execution (RCE) in environments where privileged APIs (such as Electron’s electron.mcp) are exposed, resulting in full compromise of the host system. Version 0.15.3 patches the issue."
      }, {
        "lang" : "es",
        "value" : "5ire es un asistente de escritorio multiplataforma de inteligencia artificial y cliente de protocolo de contexto de modelo. Antes de la versión 0.15.3, una vulnerabilidad de análisis de opciones insegura en el plugin de Markdown de ECharts permite a cualquier usuario capaz de enviar bloques de código de ECharts ejecutar código JavaScript arbitrario en el contexto del renderizador. Esto puede llevar a Ejecución Remota de Código (RCE) en entornos donde las API privilegiadas (como electron.mcp de Electron) están expuestas, lo que resulta en un compromiso total del sistema anfitrión. La versión 0.15.3 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:5ire:5ire:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.3",
            "matchCriteriaId" : "E337B209-844D-4396-B279-063A15A1C0DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nanbingxyz/5ire/releases/tag/v0.15.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nanbingxyz/5ire/security/advisories/GHSA-wg3x-7c26-97wj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22807",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.077",
      "lastModified" : "2026-01-30T14:43:22.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging Face `auto_map` dynamic modules during model resolution without gating on `trust_remote_code`, allowing attacker-controlled Python code in a model repo/path to execute at server startup. An attacker who can influence the model repo/path (local directory or remote Hugging Face repo) can achieve arbitrary code execution on the vLLM host during model load. This happens before any request handling and does not require API access. Version 0.14.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "vLLM es un motor de inferencia y servicio para modelos de lenguaje grandes (LLM). A partir de la versión 0.10.1 y antes de la versión 0.14.0, vLLM carga módulos dinámicos 'auto_map' de Hugging Face durante la resolución del modelo sin depender de 'trust_remote_code', permitiendo que código Python controlado por el atacante en un repositorio/ruta de modelo se ejecute al inicio del servidor. Un atacante que pueda influir en el repositorio/ruta del modelo (directorio local o repositorio remoto de Hugging Face) puede lograr la ejecución de código arbitrario en el host de vLLM durante la carga del modelo. Esto ocurre antes de cualquier manejo de solicitudes y no requiere acceso a la API. La versión 0.14.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.1",
            "versionEndExcluding" : "0.14.0",
            "matchCriteriaId" : "F2E87BA6-DDF8-4FF6-A286-B44780082C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/pull/32194",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/releases/tag/v0.14.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22808",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.233",
      "lastModified" : "2026-02-18T15:31:03.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fleetdm/fleet is open source device management software. Prior to versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, if Windows MDM is enabled, an unauthenticated attacker can exploit this XSS vulnerability to steal a Fleet administrator's authentication token (FLEET::auth_token) from localStorage. This could allow unauthorized access to Fleet, including administrative access, visibility into device data, and modification of configuration. Versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 fix the issue. If an immediate upgrade is not possible, affected Fleet users should temporarily disable Windows MDM."
      }, {
        "lang" : "es",
        "value" : "fleetdm/fleet es software de gestión de dispositivos de código abierto. Antes de las versiones 4.78.2, 4.77.1, 4.76.2, 4.75.2 y 4.53.3, si Windows MDM está habilitado, un atacante no autenticado puede explotar esta vulnerabilidad XSS para robar el token de autenticación de un administrador de Fleet (FLEET::auth_token) de localStorage. Esto podría permitir el acceso no autorizado a Fleet, incluyendo acceso administrativo, visibilidad de los datos del dispositivo y modificación de la configuración. Las versiones 4.78.2, 4.77.1, 4.76.2, 4.75.2 y 4.53.3 solucionan el problema. Si una actualización inmediata no es posible, los usuarios de Fleet afectados deberían deshabilitar temporalmente Windows MDM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.3",
            "matchCriteriaId" : "58B2870D-823A-4862-A51B-B3F86C60D89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.75.0",
            "versionEndExcluding" : "4.75.2",
            "matchCriteriaId" : "E363A7DF-0880-44B8-82A6-0192D1D43471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.76.0",
            "versionEndExcluding" : "4.76.2",
            "matchCriteriaId" : "53B5B8B6-F8C9-45E2-A160-D5834B1F3D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.78.0",
            "versionEndExcluding" : "4.78.2",
            "matchCriteriaId" : "B2A64FBB-EFC6-4BB3-B9C7-0A3D754DCF25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:4.77.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE525B6A-8AF1-4D33-8EE9-FFD6A1C4F3F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-gfpw-jgvr-cw4j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22822",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.380",
      "lastModified" : "2026-02-18T15:29:01.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.  Starting in version 0.20.2 and prior to version 1.2.0, the `getSecretKey` template function, while introduced for senhasegura Devops Secrets Management (DSM) provider, has the ability to fetch secrets cross-namespaces with the roleBinding of the external-secrets controller, bypassing our security mechanisms. This function was completely removed in version 1.2.0, as everything done with that templating function can be done in a different way while respecting External Secrets Operator's safeguards As a workaround, use a policy engine such as Kubernetes, Kyverno, Kubewarden, or OPA to prevent the usage of `getSecretKey` in any ExternalSecret resource."
      }, {
        "lang" : "es",
        "value" : "External Secrets Operator lee información de un servicio de terceros e inyecta automáticamente los valores como Secrets de Kubernetes. A partir de la versión 0.20.2 y antes de la versión 1.2.0, la función de plantilla 'getSecretKey', aunque introducida para el proveedor senhasegura Devops Secrets Management (DSM), tiene la capacidad de obtener secretos entre espacios de nombres con el roleBinding del controlador external-secrets, eludiendo nuestros mecanismos de seguridad. Esta función fue completamente eliminada en la versión 1.2.0, ya que todo lo que se hacía con esa función de plantilla se puede hacer de una manera diferente respetando las salvaguardas de External Secrets Operator. Como solución alternativa, utilice un motor de políticas como Kubernetes, Kyverno, Kubewarden u OPA para evitar el uso de 'getSecretKey' en cualquier recurso ExternalSecret."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:external-secrets:external_secrets_operator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.20.2",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "F9E0E951-2317-45FB-A1AD-7426EFBBA6E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/external-secrets/external-secrets/commit/17d3e22b8d3fbe339faf8515a95ec06ec92b1feb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/external-secrets/external-secrets/issues/5690",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/external-secrets/external-secrets/pull/3895",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/external-secrets/external-secrets/releases/tag/v1.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/external-secrets/external-secrets/security/advisories/GHSA-77v3-r3jw-j2v2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22849",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.533",
      "lastModified" : "2026-01-29T18:17:46.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor was allowing users to modify rich text fields with HTML without running any backend HTML cleaners thus allowing malicious actors to perform stored XSS attacks on dashboards and storefronts. Malicious staff members could craft script injections to target other staff members, possibly stealing their access and/or refresh tokens. This issue has been patched in versions 3.22.27, 3.21.43, and 3.20.108. In case of inability to upgrade straight away, a possible workaround is to use client-side cleaner."
      }, {
        "lang" : "es",
        "value" : "Saleor es una plataforma de comercio electrónico. A partir de la versión 3.0.0 y antes de las versiones 3.20.108, 3.21.43 y 3.22.27, Saleor permitía a los usuarios modificar campos de texto enriquecido con HTML sin ejecutar ningún limpiador HTML de backend, lo que permitía a actores maliciosos realizar ataques de XSS almacenado en paneles de control y escaparates. Miembros del personal maliciosos podían crear inyecciones de scripts para atacar a otros miembros del personal, posiblemente robando sus tokens de acceso y/o de actualización. Este problema ha sido parcheado en las versiones 3.22.27, 3.21.43 y 3.20.108. En caso de no poder actualizar de inmediato, una posible solución alternativa es usar un limpiador del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-83"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.20.108",
            "matchCriteriaId" : "7F684302-13A5-4BD3-B546-3AB0297C0CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.21.0",
            "versionEndExcluding" : "3.21.43",
            "matchCriteriaId" : "FDC53D16-03D0-4360-B155-4EDE149A2C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.22.0",
            "versionEndExcluding" : "3.22.27",
            "matchCriteriaId" : "A7BCEDB3-50C9-46CC-A3A7-564F00D76570"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.saleor.io/security/#editorjs--html-cleaning",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/1085c7813224a0a65f1dac7275cbc3244e23c386",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/676d95dbc7d811610e68f2ea8f9b6652cbd58e9b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/9110eba68c3f73afa1f72b45bd9b1394c752d335",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/b67a0b9d9f243e5d6c2f9c7643d42a54c24c90ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/bb5f883aeb0f085899a9d4f35d429cf7eb07a11d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-8jcj-r5g2-qrpv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23499",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.703",
      "lastModified" : "2026-01-29T18:19:14.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor allowed authenticated staff users or Apps to upload arbitrary files, including malicious HTML and SVG files containing Javascript. Depending on the deployment strategy, these files may be served from the same domain as the dashboard without any restrictions leading to the execution of malicious scripts in the context of the user's browser. Malicious staff members could craft script injections to target other staff members, possibly stealing their access and/or refresh tokens. Users are vulnerable if they host the media files inside the same domain as the dashboard, e.g., dashboard is at `example.com/dashboard/` and media are under `example.com/media/`. They are not impact if media files are hosted in a different domain, e.g., `media.example.com`. Users are impacted if they do not return a `Content-Disposition: attachment` header for the media files. Saleor Cloud users are not impacted. This issue has been patched in versions: 3.22.27, 3.21.43, and 3.20.108. Some workarounds are available for those unable to upgrade. Configure the servers hosting the media files (e.g., CDN or reverse proxy) to return the Content-Disposition: attachment header. This instructs browsers to download the file instead of rendering them in the browser. Prevent the servers from returning HTML and SVG files. Set-up a `Content-Security-Policy` for media files, such as `Content-Security-Policy: default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none';`."
      }, {
        "lang" : "es",
        "value" : "Saleor es una plataforma de comercio electrónico. A partir de la versión 3.0.0 y antes de las versiones 3.20.108, 3.21.43 y 3.22.27, Saleor permitía a los usuarios de personal autenticados o a las aplicaciones (Apps) subir archivos arbitrarios, incluyendo archivos HTML y SVG maliciosos que contenían Javascript. Dependiendo de la estrategia de despliegue, estos archivos pueden ser servidos desde el mismo dominio que el panel de control sin restricciones, lo que lleva a la ejecución de scripts maliciosos en el contexto del navegador del usuario. Miembros del personal maliciosos podrían crear inyecciones de scripts para atacar a otros miembros del personal, posiblemente robando sus tokens de acceso y/o de actualización. Los usuarios son vulnerables si alojan los archivos multimedia dentro del mismo dominio que el panel de control, p. ej., el panel de control está en 'example.com/dashboard/' y los medios están bajo 'example.com/media/'. No tienen impacto si los archivos multimedia están alojados en un dominio diferente, p. ej., 'media.example.com'. Los usuarios tienen impacto si no devuelven una cabecera 'Content-Disposition: attachment' para los archivos multimedia. Los usuarios de Saleor Cloud no tienen impacto. Este problema ha sido parcheado en las versiones: 3.22.27, 3.21.43 y 3.20.108. Algunas soluciones provisionales están disponibles para aquellos que no pueden actualizar. Configure los servidores que alojan los archivos multimedia (p. ej., CDN o proxy inverso) para que devuelvan la cabecera Content-Disposition: attachment. Esto indica a los navegadores que descarguen el archivo en lugar de renderizarlo en el navegador. Evite que los servidores devuelvan archivos HTML y SVG. Configure una 'Content-Security-Policy' para los archivos multimedia, como 'Content-Security-Policy: default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none';'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.20.108",
            "matchCriteriaId" : "7F684302-13A5-4BD3-B546-3AB0297C0CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.21.0",
            "versionEndExcluding" : "3.21.43",
            "matchCriteriaId" : "FDC53D16-03D0-4360-B155-4EDE149A2C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.22.0",
            "versionEndExcluding" : "3.22.27",
            "matchCriteriaId" : "A7BCEDB3-50C9-46CC-A3A7-564F00D76570"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.saleor.io/security/#restricted-file-uploads",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/77f7927a0db9a216440df92c51012136f13e1d99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/7d33efc7a06252320cd51cbb20c2e308aed2fd10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/9110eba68c3f73afa1f72b45bd9b1394c752d335",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/ac6936a336289c77398ef600cad3498ad4ba261c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/b3cb27b3fe96dae3c879063e56d32a9398eabd24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-666h-2p49-pg95",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23516",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.850",
      "lastModified" : "2026-02-20T20:08:06.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or project, then get the victim user to either edit that label, or view a shape that refers to that label; and/or get the victim user to upload a maliciously crafted SVG image when configuring a skeleton. This gives the attacker temporary access to all CVAT resources that the victim user can access. Version 2.55.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "CVAT es una herramienta de anotación de video e imagen interactiva de código abierto para visión artificial. En las versiones 2.2.0 a la 2.54.0, un atacante es capaz de ejecutar JavaScript arbitrario en la sesión de la interfaz de usuario de CVAT de un usuario víctima, siempre que sea capaz de crear una etiqueta creada maliciosamente en una tarea o proyecto de CVAT, luego lograr que el usuario víctima edite esa etiqueta, o vea una forma que se refiera a esa etiqueta; y/o lograr que el usuario víctima cargue una imagen SVG creada maliciosamente al configurar un esqueleto. Esto le da al atacante acceso temporal a todos los recursos de CVAT a los que el usuario víctima puede acceder. La versión 2.55.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-83"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvat:computer_vision_annotation_tool:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.55.0",
            "matchCriteriaId" : "4152356D-0D27-449D-A709-A15F7FD1665E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cvat-ai/cvat/commit/40800707fe39e3ff76c8d036eb953eb12d764e70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cvat-ai/cvat/security/advisories/GHSA-3m7p-wx65-c7mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23517",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:49.997",
      "lastModified" : "2026-02-27T16:16:14.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 allowed authenticated users to access debug and profiling endpoints regardless of role. As a result, low-privilege users could view internal server diagnostics and trigger resource-intensive profiling operations. Fleet’s debug/pprof endpoints are accessible to any authenticated user regardless of role, including the lowest-privilege “Observer” role. This allows low-privilege users to access sensitive server internals, including runtime profiling data and in-memory application state, and to trigger CPU-intensive profiling operations that could lead to denial of service. Versions 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 fix the issue. If an immediate upgrade is not possible, users should put the debug/pprof endpoints behind an IP allowlist as a workaround."
      }, {
        "lang" : "es",
        "value" : "Fleet es un software de gestión de dispositivos de código abierto. Un problema de control de acceso roto en versiones anteriores a 4.78.3, 4.77.1, 4.76.2, 4.75.2 y 4.53.3 permitía a los usuarios autenticados acceder a los puntos finales de depuración y perfilado independientemente del rol. Como resultado, los usuarios con privilegios bajos podían ver diagnósticos internos del servidor y activar operaciones de perfilado que consumen muchos recursos. Los puntos finales debug/pprof de Fleet son accesibles para cualquier usuario autenticado independientemente del rol, incluido el rol 'Observer' con los privilegios más bajos. Esto permite a los usuarios con privilegios bajos acceder a elementos internos sensibles del servidor, incluidos datos de perfilado en tiempo de ejecución y el estado de la aplicación en memoria, y activar operaciones de perfilado intensivas en CPU que podrían llevar a una denegación de servicio. Las versiones 4.78.3, 4.77.1, 4.76.2, 4.75.2 y 4.53.3 solucionan el problema. Si una actualización inmediata no es posible, los usuarios deberían colocar los puntos finales debug/pprof detrás de una lista blanca de IP como solución alternativa."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.3",
            "matchCriteriaId" : "58B2870D-823A-4862-A51B-B3F86C60D89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.75.0",
            "versionEndExcluding" : "4.75.2",
            "matchCriteriaId" : "E363A7DF-0880-44B8-82A6-0192D1D43471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.76.0",
            "versionEndExcluding" : "4.76.2",
            "matchCriteriaId" : "53B5B8B6-F8C9-45E2-A160-D5834B1F3D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.78.0",
            "versionEndExcluding" : "4.78.3",
            "matchCriteriaId" : "B8118C02-5CB2-45D3-AE6E-90313FB29720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:4.77.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE525B6A-8AF1-4D33-8EE9-FFD6A1C4F3F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/commit/5c030e32a3a9bc512355b5e1bf19636e4e6d0317",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-4r5r-ccr6-q6f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23518",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:50.140",
      "lastModified" : "2026-02-27T16:14:59.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows MDM enrollment flow could allow an attacker to submit forged authentication tokens that are not properly validated. Because JWT signatures were not verified, Fleet could accept attacker-controlled identity claims, enabling enrollment of unauthorized devices under arbitrary Azure AD user identities. Versions 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 fix the issue. If an immediate upgrade is not possible, affected Fleet users should temporarily disable Windows MDM."
      }, {
        "lang" : "es",
        "value" : "Fleet es software de gestión de dispositivos de código abierto. En versiones anteriores a 4.78.3, 4.77.1, 4.76.2, 4.75.2 y 4.53.3, una vulnerabilidad en el flujo de inscripción de MDM de Windows de Fleet podría permitir a un atacante enviar tokens de autenticación falsificados que no se validan correctamente. Debido a que las firmas JWT no se verificaban, Fleet podría aceptar reclamaciones de identidad controladas por el atacante, permitiendo la inscripción de dispositivos no autorizados bajo identidades de usuario arbitrarias de Azure AD. Las versiones 4.78.3, 4.77.1, 4.76.2, 4.75.2 y 4.53.3 solucionan el problema. Si una actualización inmediata no es posible, los usuarios de Fleet afectados deberían deshabilitar temporalmente Windows MDM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.53.3",
            "matchCriteriaId" : "58B2870D-823A-4862-A51B-B3F86C60D89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.75.0",
            "versionEndExcluding" : "4.75.2",
            "matchCriteriaId" : "E363A7DF-0880-44B8-82A6-0192D1D43471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.76.0",
            "versionEndExcluding" : "4.76.2",
            "matchCriteriaId" : "53B5B8B6-F8C9-45E2-A160-D5834B1F3D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.78.0",
            "versionEndExcluding" : "4.78.3",
            "matchCriteriaId" : "B8118C02-5CB2-45D3-AE6E-90313FB29720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:4.77.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE525B6A-8AF1-4D33-8EE9-FFD6A1C4F3F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/commit/e225ef57912c8f4ac8977e24b5ebe1d9fd875257",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-63m5-974w-448v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23524",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:50.280",
      "lastModified" : "2026-03-06T20:02:37.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiated, which leaves users vulnerable to Remote Code Execution. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication, but only affects Laravel Reverb when horizontal scaling is enabled (REVERB_SCALING_ENABLED=true). This issue has been fixed in version 1.7.0. As a workaround, require a strong password for Redis access and ensure the service is only accessible via a private network or local loopback, and/or set REVERB_SCALING_ENABLED=false to bypass the vulnerable logic entirely (if the environment uses only one Reverb node)."
      }, {
        "lang" : "es",
        "value" : "Laravel Reverb proporciona un backend de comunicación WebSocket en tiempo real para aplicaciones Laravel. En las versiones 1.6.3 e inferiores, Reverb pasa datos del canal Redis directamente a la función unserialize() de PHP sin restringir qué clases pueden ser instanciadas, lo que deja a los usuarios vulnerables a la ejecución remota de código. La explotabilidad de esta vulnerabilidad se incrementa porque los servidores Redis se implementan comúnmente sin autenticación, pero solo afecta a Laravel Reverb cuando el escalado horizontal está habilitado (REVERB_SCALING_ENABLED=true). Este problema ha sido solucionado en la versión 1.7.0. Como solución alternativa, requiera una contraseña fuerte para el acceso a Redis y asegúrese de que el servicio solo sea accesible a través de una red privada o loopback local, y/o configure REVERB_SCALING_ENABLED=false para eludir completamente la lógica vulnerable (si el entorno utiliza solo un nodo Reverb)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:reverb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "AC0C178D-8618-4963-8AB2-75B260023D0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/502.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/laravel/reverb/commit/9ec26f8ffbb701f84920dd0bb9781a1797591f1a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/laravel/reverb/releases/tag/v1.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/laravel/reverb/security/advisories/GHSA-m27r-m6rx-mhm4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://laravel.com/docs/12.x/reverb#scaling",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23526",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:50.433",
      "lastModified" : "2026-02-20T20:08:27.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have the staff status may freely change their permissions, including giving themselves superuser status and joining the admin group, which gives them full access to the data in the CVAT instance. Version 2.55.0 fixes the issue. As a workaround, review the list of users with staff status and revoke it from any users that are not expected to have superuser privileges."
      }, {
        "lang" : "es",
        "value" : "CVAT es una herramienta de anotación interactiva de vídeo e imagen de código abierto para visión por computadora. En las versiones 1.0.0 a 2.54.0, los usuarios que tienen el estado de personal pueden cambiar libremente sus permisos, incluyendo otorgarse a sí mismos el estado de superusuario y unirse al grupo de administradores, lo que les da acceso completo a los datos en la instancia de CVAT. La versión 2.55.0 corrige el problema. Como solución alternativa, revise la lista de usuarios con estado de personal y revóquelo a cualquier usuario que no se espere que tenga privilegios de superusuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-267"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cvat:computer_vision_annotation_tool:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "2.55.0",
            "matchCriteriaId" : "4B280485-FCFA-441E-AFDD-E1F65EAB5131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cvat-ai/cvat/commit/88ac7aa4d5b52271a30f1aa387c0f5745f8f77d4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cvat-ai/cvat/security/advisories/GHSA-7pvv-w55f-qmw7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23960",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T22:15:50.627",
      "lastModified" : "2026-02-17T16:56:21.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo Server origin, enabling API actions with the victim’s privileges. Versions 3.6.17 and 3.7.8 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Argo Workflows es un motor de flujo de trabajo de código abierto nativo de contenedores para orquestar trabajos paralelos en Kubernetes. Antes de las versiones 3.6.17 y 3.7.8, un XSS almacenado en el listado del directorio de artefactos permite a cualquier autor de flujo de trabajo ejecutar JavaScript arbitrario en el navegador de otro usuario bajo el origen del servidor Argo, lo que permite acciones de API con los privilegios de la víctima. Las versiones 3.6.17 y 3.7.8 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_workflows:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "3.6.17",
            "matchCriteriaId" : "FBACAF34-13D0-430F-8730-7613ADFE12D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_workflows:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.8",
            "matchCriteriaId" : "FBAC2E34-63C4-4F95-821A-4159E1B8300E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-workflows/blob/9872c296d29dcc5e9c78493054961ede9fc30797/server/artifacts/artifact_server.go#L194-L244",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/argoproj/argo-workflows/commit/159a5c56285ecd4d3bb0a67aeef4507779a44e17",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/argoproj/argo-workflows/releases/tag/v3.6.17",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/argoproj/argo-workflows/releases/tag/v3.7.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/argoproj/argo-workflows/security/advisories/GHSA-cv78-6m8q-ph82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23630",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:52.187",
      "lastModified" : "2026-02-17T16:50:10.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code block rendering is vulnerable to stored Cross-Site Scripting (XSS). The frontend can render attacker-controlled Mermaid diagrams using mermaid.render(), then inject the returned SVG/HTML into the DOM via dangerouslySetInnerHTML without sanitization. Mermaid per-diagram %%{init}%% directives allow overriding securityLevel and enabling htmlLabels, permitting arbitrary HTML/JS execution for any viewer. This issue has been fixed in version 0.24.0."
      }, {
        "lang" : "es",
        "value" : "Docmost es un software de wiki colaborativo y documentación de código abierto. En las versiones 0.3.0 a la 0.23.2, la renderización de bloques de código Mermaid es vulnerable a cross-site scripting (XSS) almacenado. El frontend puede renderizar diagramas Mermaid controlados por el atacante usando mermaid.render(), luego inyectar el SVG/HTML devuelto en el DOM a través de dangerouslySetInnerHTML sin sanitización. Las directivas %%{init}%% de Mermaid por diagrama permiten anular securityLevel y habilitar htmlLabels, permitiendo la ejecución arbitraria de HTML/JS para cualquier visor. Este problema ha sido solucionado en la versión 0.24.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmost:docmost:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.24.0",
            "matchCriteriaId" : "6CC11D0B-FC45-4B78-A37D-CD653CD33D2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/docmost/docmost/commit/cb9f27da9a8b4940760e37e5238a1eb91e427daf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/docmost/docmost/releases/tag/v0.24.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/docmost/docmost/security/advisories/GHSA-r4hj-mc62-jmwj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23736",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:52.340",
      "lastModified" : "2026-02-27T19:36:50.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization. This vulnerability affects only JSON deserialization functionality. This issue is fixed in version 1.4.1."
      }, {
        "lang" : "es",
        "value" : "seroval facilita la serialización de valores JS, incluyendo estructuras complejas más allá de las capacidades de JSON.stringify. En las versiones 1.4.0 y anteriores, debido a una validación de entrada inadecuada, una clave de objeto maliciosa puede conducir a la contaminación de prototipos durante la deserialización JSON. Esta vulnerabilidad afecta solo a la funcionalidad de deserialización JSON. Este problema se ha solucionado en la versión 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lxsmnsyc:seroval:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "85760E40-9AB1-40EB-98A1-D1A4411AAFC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-hj76-42vx-jwp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23737",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:52.493",
      "lastModified" : "2026-02-27T19:31:57.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, improper input handling in the JSON deserialization component can lead to arbitrary JavaScript code execution. Exploitation is possible via overriding constant value and error deserialization, allowing indirect access to unsafe JS evaluation. At minimum, attackers need the ability to perform 4 separate requests on the same function, and partial knowledge of how the serialized data is used during later runtime processing. This vulnerability affects the fromJSON and fromCrossJSON functions in a client-to-server transmission scenario. This issue has been fixed in version 1.4.0."
      }, {
        "lang" : "es",
        "value" : "seroval facilita la serialización de valores JS, incluyendo estructuras complejas más allá de las capacidades de JSON.stringify. En las versiones 1.4.0 e inferiores, un manejo inadecuado de la entrada en el componente de deserialización JSON puede llevar a la ejecución arbitraria de código JavaScript. Es posible explotarlo mediante la anulación de la deserialización de valores constantes y errores, permitiendo el acceso indirecto a la evaluación JS insegura. Como mínimo, los atacantes necesitan la capacidad de realizar 4 solicitudes separadas en la misma función, y un conocimiento parcial de cómo se utilizan los datos serializados durante el procesamiento posterior en tiempo de ejecución. Esta vulnerabilidad afecta a las funciones fromJSON y fromCrossJSON en un escenario de transmisión de cliente a servidor. Este problema ha sido solucionado en la versión 1.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lxsmnsyc:seroval:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "85760E40-9AB1-40EB-98A1-D1A4411AAFC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-3rxj-6cgf-8cfw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23968",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:52.637",
      "lastModified" : "2026-02-02T14:11:03.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Copier is a library and CLI app for rendering project templates. Prior to version 9.11.2, Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently include arbitrary files/directories outside the local template clone location by using symlinks along with `_preserve_symlinks: false` (which is Copier's default setting). Version 9.11.2 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Copier es una librería y aplicación CLI para renderizar plantillas de proyecto. Antes de la versión 9.11.2, Copier sugiere que es seguro generar un proyecto a partir de una plantilla segura, es decir, una que no utiliza características inseguras como extensiones Jinja personalizadas que requerirían pasar la bandera '--UNSAFE,--trust'. Resulta que una plantilla segura puede actualmente incluir archivos/directorios arbitrarios fuera de la ubicación de clonación de la plantilla local utilizando enlaces simbólicos junto con '_preserve_symlinks: false' (que es la configuración predeterminada de Copier). La versión 9.11.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:copier-org:copier:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "9.11.2",
            "matchCriteriaId" : "D801CAA3-21AA-451E-AB4E-8D30E9C5345D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/copier-org/copier/commit/b3a7b3772d17cf0e7a4481978188c9f536c8d8f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/copier-org/copier/security/advisories/GHSA-xjhm-gp88-8pfx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23986",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:52.793",
      "lastModified" : "2026-02-02T14:10:51.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Copier is a library and CLI app for rendering project templates. Prior to version 9.11.2, Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently write to arbitrary directories outside the destination path by using directory a symlink along with `_preserve_symlinks: true` and a generated directory structure whose rendered path is inside the symlinked directory. This way, a malicious template author can create a template that overwrites arbitrary files (according to the user's write permissions), e.g., to cause havoc. Version 9.11.2 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Copier es una librería y aplicación CLI para renderizar plantillas de proyecto. Antes de la versión 9.11.2, Copier sugiere que es seguro generar un proyecto a partir de una plantilla segura, es decir, una que no utiliza características inseguras como extensiones Jinja personalizadas, lo que requeriría pasar la bandera '--UNSAFE,--trust'. Resulta que una plantilla segura puede actualmente escribir en directorios arbitrarios fuera de la ruta de destino utilizando un enlace simbólico de directorio junto con '_preserve_symlinks: true' y una estructura de directorio generada cuya ruta renderizada está dentro del directorio con enlace simbólico. De esta manera, un autor de plantilla malicioso puede crear una plantilla que sobrescribe archivos arbitrarios (según los permisos de escritura del usuario), por ejemplo, para causar estragos. La versión 9.11.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:copier-org:copier:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "9.11.2",
            "matchCriteriaId" : "D801CAA3-21AA-451E-AB4E-8D30E9C5345D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/copier-org/copier/commit/b3a7b3772d17cf0e7a4481978188c9f536c8d8f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/copier-org/copier/releases/tag/v9.11.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/copier-org/copier/security/advisories/GHSA-4fqp-r85r-hxqh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23990",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:52.930",
      "lastModified" : "2026-03-06T20:01:58.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows an attacker to bypass Kubernetes RBAC impersonation and execute API requests with the operator's service account privileges. In order to be vulnerable, cluster admins must configure the Flux Operator with an OIDC provider that issues tokens lacking the expected claims (e.g., `email`, `groups`), or configure custom CEL expressions that can evaluate to empty values. After OIDC token claims are processed through CEL expressions, there is no validation that the resulting `username` and `groups` values are non-empty. When both values are empty, the Kubernetes client-go library does not add impersonation headers to API requests, causing them to be executed with the flux-operator service account's credentials instead of the authenticated user's limited permissions. This can result in privilege escalation, data exposure, and/or information disclosure. Version 0.40.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "El Flux Operator es un controlador CRD de Kubernetes que gestiona el ciclo de vida de CNCF Flux CD y la distribución empresarial ControlPlane. A partir de la versión 0.36.0 y antes de la versión 0.40.0, existe una vulnerabilidad de escalada de privilegios en el código de autenticación de la interfaz de usuario web (Web UI) de Flux Operator que permite a un atacante eludir la suplantación de identidad de Kubernetes RBAC y ejecutar solicitudes de API con los privilegios de la cuenta de servicio del operador. Para ser vulnerable, los administradores del clúster deben configurar el Flux Operator con un proveedor OIDC que emita tokens que carezcan de las reclamaciones esperadas (por ejemplo, 'email', 'groups'), o configurar expresiones CEL personalizadas que puedan evaluarse como valores vacíos. Después de que las reclamaciones del token OIDC se procesen a través de expresiones CEL, no hay validación de que los valores resultantes de 'username' y 'groups' no estén vacíos. Cuando ambos valores están vacíos, la librería client-go de Kubernetes no añade encabezados de suplantación a las solicitudes de API, lo que hace que se ejecuten con las credenciales de la cuenta de servicio de flux-operator en lugar de los permisos limitados del usuario autenticado. Esto puede resultar en escalada de privilegios, exposición de datos y/o revelación de información. La versión 0.40.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:control-plane:flux_operator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.36.0",
            "versionEndExcluding" : "0.40.0",
            "matchCriteriaId" : "8E6653F2-6D30-4853-B2FD-9D474CBA289A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/controlplaneio-fluxcd/flux-operator/commit/084540424f6de8ba5d88fb1fd1e8472ba29afd7e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/controlplaneio-fluxcd/flux-operator/pull/610",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/controlplaneio-fluxcd/flux-operator/releases/tag/v0.40.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/controlplaneio-fluxcd/flux-operator/security/advisories/GHSA-4xh5-jcj2-ch8q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23996",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:53.090",
      "lastModified" : "2026-02-27T14:52:40.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastAPI Api Key provides a backend-agnostic library that provides an API key system. Version 1.1.0 has a timing side-channel vulnerability in verify_key(). The method applied a random delay only on verification failures, allowing an attacker to statistically distinguish valid from invalid API keys by measuring response latencies. With enough repeated requests, an adversary could infer whether a key_id corresponds to a valid key, potentially accelerating brute-force or enumeration attacks. All users relying on verify_key() for API key authentication prior to the fix are affected. Users should upgrade to version 1.1.0 to receive a patch. The patch applies a uniform random delay (min_delay to max_delay) to all responses regardless of outcome, eliminating the timing correlation. Some workarounds are available. Add an application-level fixed delay or random jitter to all authentication responses (success and failure) before the fix is applied and/or use rate limiting to reduce the feasibility of statistical timing attacks."
      }, {
        "lang" : "es",
        "value" : "FastAPI Api Key proporciona una librería agnóstica al backend que proporciona un sistema de claves API. La versión 1.1.0 tiene una vulnerabilidad de canal lateral de temporización en verify_key(). El método aplicó un retraso aleatorio solo en fallos de verificación, permitiendo a un atacante distinguir estadísticamente las claves API válidas de las inválidas midiendo las latencias de respuesta. Con suficientes solicitudes repetidas, un adversario podría inferir si un key_id corresponde a una clave válida, acelerando potencialmente los ataques de fuerza bruta o enumeración. Todos los usuarios que dependen de verify_key() para la autenticación de claves API antes de la corrección se ven afectados. Los usuarios deben actualizar a la versión 1.1.0 para recibir un parche. El parche aplica un retraso aleatorio uniforme (min_delay a max_delay) a todas las respuestas independientemente del resultado, eliminando la correlación de temporización. Hay disponibles algunas soluciones alternativas. Añadir un retraso fijo a nivel de aplicación o fluctuación aleatoria a todas las respuestas de autenticación (éxito y fallo) antes de que se aplique la corrección y/o usar la limitación de velocidad para reducir la viabilidad de los ataques de temporización estadísticos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:athroniaeth:fastapi_api_key:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "9E32065D-0671-42EB-8A49-1434ECD4EE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Athroniaeth/fastapi-api-key/commit/310b2c5c77305f38c63c0b917539a0344071dfd8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Athroniaeth/fastapi-api-key/releases/tag/1.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Athroniaeth/fastapi-api-key/security/advisories/GHSA-95c6-p277-p87g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24046",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:53.240",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based path traversal attacks. An attacker with access to create and execute Scaffolder templates could exploit symlinks to read arbitrary files via the `debug:log` action by creating a symlink pointing to sensitive files (e.g., `/etc/passwd`, configuration files, secrets); delete arbitrary files via the `fs:delete` action by creating symlinks pointing outside the workspace, and write files outside the workspace via archive extraction (tar/zip) containing malicious symlinks. This affects any Backstage deployment where users can create or execute Scaffolder templates. This vulnerability is fixed in `@backstage/backend-defaults` versions 0.12.2, 0.13.2, 0.14.1, and 0.15.0; `@backstage/plugin-scaffolder-backend` versions 2.2.2, 3.0.2, and 3.1.1; and `@backstage/plugin-scaffolder-node` versions 0.11.2 and 0.12.3. Users should upgrade to these versions or later. Some workarounds are available. Follow the recommendation in the Backstage Threat Model to limit access to creating and updating templates, restrict who can create and execute Scaffolder templates using the permissions framework, audit existing templates for symlink usage, and/or run Backstage in a containerized environment with limited filesystem access."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores. Múltiples acciones de Scaffolder y utilidades de extracción de archivos eran vulnerables a ataques de salto de ruta basados en symlinks. Un atacante con acceso para crear y ejecutar plantillas de Scaffolder podría explotar symlinks para leer archivos arbitrarios a través de la acción debug:log creando un symlink que apunte a archivos sensibles (p. ej., /etc /passwd, archivos de configuración, secretos); eliminar archivos arbitrarios a través de la acción fs:delete creando symlinks que apunten fuera del espacio de trabajo, y escribir archivos fuera del espacio de trabajo a través de la extracción de archivos (tar/zip) que contengan symlinks maliciosos. Esto afecta a cualquier implementación de Backstage donde los usuarios puedan crear o ejecutar plantillas de Scaffolder. Esta vulnerabilidad está corregida en las versiones 0.12.2, 0.13.2, 0.14.1 y 0.15.0 de @backstage/backend-defaults; las versiones 2.2.2, 3.0.2 y 3.1.1 de @backstage/plugin-scaffolder-backend; y las versiones 0.11.2 y 0.12.3 de @backstage/plugin-scaffolder-node. Los usuarios deben actualizar a estas versiones o posteriores. Hay algunas soluciones alternativas disponibles. Siga la recomendación en el Modelo de Amenazas de Backstage para limitar el acceso a la creación y actualización de plantillas, restringir quién puede crear y ejecutar plantillas de Scaffolder utilizando el framework de permisos, auditar las plantillas existentes en busca de uso de symlinks, y/o ejecutar Backstage en un entorno en contenedores con acceso limitado al sistema de archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/commit/c641c147ab371a9a8a2f5f67fdb7cb9c97ef345d",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-rq6q-wr2q-7pgp",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24047",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:53.407",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals, and @backstage/cli-common provides config loading functionality used by the backend and command line interface of Backstage. Prior to version 0.1.17, the `resolveSafeChildPath` utility function in `@backstage/backend-plugin-api`, which is used to prevent path traversal attacks, failed to properly validate symlink chains and dangling symlinks. An attacker could bypass the path validation via symlink chains (creating `link1 → link2 → /outside` where intermediate symlinks eventually resolve outside the allowed directory) and dangling symlinks (creating symlinks pointing to non-existent paths outside the base directory, which would later be created during file operations). This function is used by Scaffolder actions and other backend components to ensure file operations stay within designated directories. This vulnerability is fixed in `@backstage/backend-plugin-api` version 0.1.17. Users should upgrade to this version or later. Some workarounds are available. Run Backstage in a containerized environment with limited filesystem access and/or restrict template creation to trusted users."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrollador, y @backstage/cli-common proporciona funcionalidad de carga de configuración utilizada por el backend y la interfaz de línea de comandos de Backstage. Antes de la versión 0.1.17, la función de utilidad 'resolveSafeChildPath' en '@backstage/backend-plugin-api', que se utiliza para prevenir ataques de salto de ruta, no validaba correctamente las cadenas de enlaces simbólicos y los enlaces simbólicos colgantes. Un atacante podría eludir la validación de ruta a través de cadenas de enlaces simbólicos (creando 'link1 ? link2 ? /outside' donde los enlaces simbólicos intermedios finalmente se resuelven fuera del directorio permitido) y enlaces simbólicos colgantes (creando enlaces simbólicos que apuntan a rutas inexistentes fuera del directorio base, que luego se crearían durante las operaciones de archivo). Esta función es utilizada por las acciones de Scaffolder y otros componentes de backend para asegurar que las operaciones de archivo permanezcan dentro de los directorios designados. Esta vulnerabilidad se corrige en '@backstage/backend-plugin-api' versión 0.1.17. Los usuarios deben actualizar a esta versión o posterior. Hay disponibles algunas soluciones alternativas. Ejecute Backstage en un entorno en contenedores con acceso limitado al sistema de archivos y/o restrinja la creación de plantillas a usuarios de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/commit/ae4dd5d1572a4f639e1a466fd982656b50f8e692",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-2p49-45hj-7mc9",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24048",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-21T23:15:53.580",
      "lastModified" : "2026-04-25T18:01:55.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals, and @backstage/backend-defaults provides the default implementations and setup for a standard Backstage backend app. Prior to versions 0.12.2, 0.13.2, 0.14.1, and 0.15.0, the `FetchUrlReader` component, used by the catalog and other plugins to fetch content from URLs, followed HTTP redirects automatically. This allowed an attacker who controls a host listed in `backend.reading.allow` to redirect requests to internal or sensitive URLs that are not on the allowlist, bypassing the URL allowlist security control. This is a Server-Side Request Forgery (SSRF) vulnerability that could allow access to internal resources, but it does not allow attackers to include additional request headers. This vulnerability is fixed in `@backstage/backend-defaults` version 0.12.2, 0.13.2, 0.14.1, and 0.15.0. Users should upgrade to this version or later. Some workarounds are available. Restrict `backend.reading.allow` to only trusted hosts that you control and that do not issue redirects, ensure allowed hosts do not have open redirect vulnerabilities, and/or use network-level controls to block access from Backstage to sensitive internal endpoints."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores, y @backstage/backend-defaults proporciona las implementaciones y configuración predeterminadas para una aplicación backend estándar de Backstage. Antes de las versiones 0.12.2, 0.13.2, 0.14.1 y 0.15.0, el componente 'FetchUrlReader', utilizado por el catálogo y otros plugins para obtener contenido de URLs, seguía las redirecciones HTTP automáticamente. Esto permitía a un atacante que controla un host listado en 'backend.reading.allow' redirigir peticiones a URLs internas o sensibles que no están en la lista de permitidos, eludiendo el control de seguridad de la lista de permitidos de URLs. Esta es una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) que podría permitir el acceso a recursos internos, pero no permite a los atacantes incluir encabezados de petición adicionales. Esta vulnerabilidad está corregida en la versión 0.12.2, 0.13.2, 0.14.1 y 0.15.0 de '@backstage/backend-defaults'. Los usuarios deberían actualizar a esta versión o posterior. Hay disponibles algunas soluciones alternativas. Restrinja 'backend.reading.allow' solo a hosts de confianza que usted controle y que no emitan redirecciones, asegúrese de que los hosts permitidos no tengan vulnerabilidades de redirección abierta, y/o utilice controles a nivel de red para bloquear el acceso desde Backstage a puntos finales internos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage\\/backend_defaults:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.12.2",
            "matchCriteriaId" : "E08D45A6-7DA9-4A8F-8F55-9AF20C57D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage\\/backend_defaults:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.13.0",
            "versionEndIncluding" : "0.13.2",
            "matchCriteriaId" : "EE49AAE8-2821-4862-926A-358CB9291669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage\\/backend_defaults:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.14.0",
            "versionEndIncluding" : "0.14.1",
            "matchCriteriaId" : "8C648CE5-74D9-4293-A373-CCAB072B2A96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/commit/27f9061d24affd1b9212fe0abd476bfc3fbaedcb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-q2x5-4xjx-c6p9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1036",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-22T00:15:51.490",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_comment() function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to delete arbitrary image comments. Note: comments functionality is only available in the Pro version of the plugin."
      }, {
        "lang" : "es",
        "value" : "El plugin Photo Gallery por 10Web – Mobile-Friendly Image Gallery para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidad en la función delete_comment() en todas las versiones hasta la 1.8.36, inclusive. Esto hace posible que atacantes no autenticados eliminen comentarios de imágenes arbitrarios. Nota: la funcionalidad de comentarios solo está disponible en la versión Pro del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.35/frontend/controllers/BWGControllerGalleryBox.php#L173",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4eb2ae42-584d-4da8-9184-461b5a37b7b6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23873",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T00:15:51.770",
      "lastModified" : "2026-02-27T15:02:33.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hustoj is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. All versions are vulnerable to CSV Injection (Formula Injection) through the contest rank export functionality (contestrank.xls.php and admin/ranklist_export.php). The application fails to sanitize user-supplied input (specifically the \"Nickname\" field) before exporting it to an .xls file (which renders as an HTML table but is opened by Excel). If a malicious user sets their nickname to an Excel formula when an administrator exports and opens the rank list in Microsoft Excel, the formula will be executed. This can lead to arbitrary command execution (RCE) on the administrator's machine or data exfiltration. A fix was not available at the time of publication."
      }, {
        "lang" : "es",
        "value" : "hustoj es un juez en línea de código abierto basado en PHP/C++/MySQL/Linux para el entrenamiento de ACM/ICPC y NOIP. Todas las versiones son vulnerables a la inyección CSV (inyección de fórmulas) a través de la funcionalidad de exportación de clasificación de concursos (contestrank.xls.php y admin/ranklist_export.php). La aplicación no logra sanear la entrada proporcionada por el usuario (específicamente el campo 'Nickname') antes de exportarla a un archivo .xls (que se renderiza como una tabla HTML pero es abierto por Excel). Si un usuario malicioso establece su apodo a una fórmula de Excel cuando un administrador exporta y abre la lista de clasificación en Microsoft Excel, la fórmula será ejecutada. Esto puede llevar a la ejecución arbitraria de comandos (RCE) en la máquina del administrador o a la exfiltración de datos. Una solución no estaba disponible en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hustoj:hustoj:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.01.31",
            "matchCriteriaId" : "1AAF6021-2121-444F-A632-865C9524A033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhblue/hustoj/security/advisories/GHSA-gqwv-v7vx-2qjw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23887",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T00:15:51.930",
      "lastModified" : "2026-02-18T15:03:12.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. In versions 6.8.148 and below, and 25.0.1 through 25.0.79, the application stores unsanitized filenames in the database, which can lead to Stored Cross-Site Scripting (XSS). Users who interact with these specially crafted file names within the Group-Office application are affected. While the scope is limited to the file-viewing context, it could still be used to interfere with user sessions or perform unintended actions in the browser. This issue is fixed in versions 6.8.149 and 25.0.80."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta de gestión de relaciones con clientes (CRM) y groupware empresarial. En las versiones 6.8.148 e inferiores, y de la 25.0.1 a la 25.0.79, la aplicación almacena nombres de archivo sin sanear en la base de datos, lo que puede conducir a un Cross-Site Scripting Almacenado (XSS). Esto afecta a los usuarios que interactúan con estos nombres de archivo especialmente diseñados dentro de la aplicación Group-Office. Aunque el alcance se limita al contexto de visualización de archivos, aún podría utilizarse para interferir con las sesiones de los usuarios o realizar acciones no deseadas en el navegador. Este problema se ha solucionado en las versiones 6.8.149 y 25.0.80."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.149",
            "matchCriteriaId" : "5F354AC7-4322-4BA2-91B0-278E15EE8803"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.80",
            "matchCriteriaId" : "B1CAF33B-24E7-4044-BBDE-40961A8E3CCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/commit/3fa40d7edd31fbe33babe07061d5a14ad19ea40f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/commit/ac91b128157bc9c5ea015b6141ce71cd3bbc43f0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-3gj5-gvvr-g6hp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23893",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T01:15:52.310",
      "lastModified" : "2026-03-06T20:00:01.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token directories, resulting in privilege escalation or data exposure. Token and lock directories are 0770 (group-writable for token users), so any token-group member can plant files and symlinks inside them. When run as root, the base code handling token directory file access, as well as several openCryptoki tools used for administrative purposes, may reset ownership or permissions on existing files inside the token directories. An attacker with token-group membership can exploit the system when an administrator runs a PKCS#11 application or administrative tool that performs chown on files inside the token directory during normal maintenance. This issue is fixed in commit 5e6e4b4, but has not been included in a released version at the time of publication."
      }, {
        "lang" : "es",
        "value" : "openCryptoki es una librería PKCS#11 y proporciona herramientas para Linux y AIX. Las versiones 2.3.2 y superiores son vulnerables al seguimiento de enlaces simbólicos cuando se ejecutan en contextos privilegiados. Un usuario del grupo de tokens puede redirigir operaciones de archivo a destinos arbitrarios del sistema de archivos al colocar enlaces simbólicos en directorios de tokens con permisos de escritura para el grupo, lo que resulta en escalada de privilegios o exposición de datos. Los directorios de tokens y de bloqueo son 0770 (con permisos de escritura para el grupo de usuarios de tokens), por lo que cualquier miembro del grupo de tokens puede colocar archivos y enlaces simbólicos dentro de ellos. Cuando se ejecuta como root, el código base que maneja el acceso a archivos del directorio de tokens, así como varias herramientas de openCryptoki utilizadas con fines administrativos, pueden restablecer la propiedad o los permisos en archivos existentes dentro de los directorios de tokens. Un atacante con membresía en el grupo de tokens puede explotar el sistema cuando un administrador ejecuta una aplicación PKCS#11 o una herramienta administrativa que realiza chown en archivos dentro del directorio de tokens durante el mantenimiento normal. Este problema está solucionado en el commit 5e6e4b4, pero no ha sido incluido en una versión publicada en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencryptoki_project:opencryptoki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.2",
            "matchCriteriaId" : "88FDC076-2D79-4CAE-9002-05B35359D880"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencryptoki/opencryptoki/commit/5e6e4b42f2b1fcc1e4ef1b920e463bfa55da8b45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-j6c7-mvpx-jx5q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23946",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T01:15:52.467",
      "lastModified" : "2026-02-17T16:44:09.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tendenci is an open source content management system built for non-profits, associations and cause-based sites. Versions 15.3.11 and below include a critical deserialization vulnerability in the Helpdesk module (which is not enabled by default). This vulnerability allows Remote Code Execution (RCE) by an authenticated user with staff security level due to using Python's pickle module in helpdesk /reports/. The original CVE-2020-14942 was incompletely patched. While ticket_list() was fixed to use safe JSON deserialization, the run_report() function still uses unsafe pickle.loads(). The impact is limited to the permissions of the user running the application, typically www-data, which generally lacks write (except for upload directories) and execute permissions. This issue has been fixed in version 15.3.12."
      }, {
        "lang" : "es",
        "value" : "Tendenci es un sistema de gestión de contenidos de código abierto creado para organizaciones sin fines de lucro, asociaciones y sitios basados en causas. Las versiones 15.3.11 e inferiores incluyen una vulnerabilidad crítica de deserialización en el módulo Helpdesk (que no está habilitado por defecto). Esta vulnerabilidad permite la ejecución remota de código (RCE) por parte de un usuario autenticado con nivel de seguridad de personal debido al uso del módulo pickle de Python en helpdesk /reports/. El CVE-2020-14942 original se parcheó de forma incompleta. Aunque se corrigió ticket_list() para usar deserialización JSON segura, la función run_report() todavía usa pickle.loads() inseguro. El impacto está limitado a los permisos del usuario que ejecuta la aplicación, típicamente www-data, que generalmente carece de permisos de escritura (excepto para directorios de carga) y ejecución. Este problema ha sido corregido en la versión 15.3.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tendenci:tendenci:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.3.12",
            "matchCriteriaId" : "830362AC-5281-471F-A3E9-830713123133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.python.org/3/library/pickle.html#restricting-globals",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-jqmc-fxxp-r589",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/tendenci/tendenci/commit/23d9fd85ab7654e9c83cfc86cb4175c0bd7a77f1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tendenci/tendenci/commit/2ff0a457614944a1b417081c543ea4c5bb95d636",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tendenci/tendenci/commit/63e1b84a5b163466d1d8d811d35e7021a7ca0d0e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tendenci/tendenci/issues/867",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tendenci/tendenci/releases/tag/v15.3.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/tendenci/tendenci/security/advisories/GHSA-339m-4qw5-j2g3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23951",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T01:15:52.633",
      "lastModified" : "2026-02-17T16:48:48.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting in an out-of-bounds heap read that crashes the app. There are no published fixes at the time of publication."
      }, {
        "lang" : "es",
        "value" : "SumatraPDF es un lector multiformato para Windows. Todas las versiones contienen un error de off-by-one en el código de validación que solo se activa con exactamente 2 registros, causando un subdesbordamiento de enteros en el cálculo del tamaño. Este error existe en PalmDbReader::GetRecord al abrir un archivo Mobi manipulado, resultando en una lectura de montón fuera de límites que bloquea la aplicación. No hay correcciones publicadas en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC837AF-B0DA-4A27-8CF4-EE8846526B37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/blob/master/src/PalmDbReader.cpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/security/advisories/GHSA-hj4w-c5x8-p2hv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23952",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T01:15:52.790",
      "lastModified" : "2026-02-27T15:35:07.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Las versiones 14.10.1 e inferiores tienen una vulnerabilidad de desreferencia de puntero NULL en el analizador MSL (Magick Scripting Language) al procesar etiquetas  antes de que se carguen las imágenes. Esto puede conducir a un ataque DoS debido a un fallo de aserción (en compilaciones de depuración) o a una desreferencia de puntero NULL (en compilaciones de lanzamiento). Este problema se ha solucionado en la versión 14.10.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-38",
            "matchCriteriaId" : "B5479E5D-F05A-4418-9D2B-12523B300E2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-13",
            "matchCriteriaId" : "F658C5B2-8A54-42DB-88AB-FB7D5FE1712C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.2",
            "matchCriteriaId" : "016CE8C8-345A-46C9-8E07-6B8E94D3D2FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5vx3-wx4q-6cj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23699",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-22T02:15:52.127",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection vulnerability. If this vulnerability is exploited, arbitrary commands may be executed on the devices."
      }, {
        "lang" : "es",
        "value" : "La serie AP180 con versiones de firmware anteriores a AP_RGOS 11.9(4)B1P8 contiene una vulnerabilidad de inyección de comandos del sistema operativo. Si se explota esta vulnerabilidad, se pueden ejecutar comandos arbitrarios en los dispositivos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN86850670/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.ruijie.co.jp/products/rg-ap180-pe_p432111650928590848.html#productDocument",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23956",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T02:15:52.310",
      "lastModified" : "2026-02-27T19:33:23.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0\nand below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during deserialization. Additionally, overriding RegExp serialization with patterns that trigger catastrophic backtracking can lead to ReDoS (Regular Expression Denial of Service). This issue has been fixed in version 1.4.1."
      }, {
        "lang" : "es",
        "value" : "seroval facilita la serialización de valores JS, incluyendo estructuras complejas que van más allá de las capacidades de JSON.stringify. En las versiones 1.4.0 y anteriores, la anulación de la serialización de RegExp con patrones extremadamente grandes puede agotar la memoria en tiempo de ejecución de JavaScript durante la deserialización. Además, la anulación de la serialización de RegExp con patrones que desencadenan un retroceso catastrófico puede conducir a ReDoS (Denegación de Servicio por Expresiones Regulares). Este problema ha sido solucionado en la versión 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lxsmnsyc:seroval:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "85760E40-9AB1-40EB-98A1-D1A4411AAFC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-hx9m-jf43-8ffr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23957",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T02:15:52.470",
      "lastModified" : "2026-04-06T13:51:20.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0\nand below, overriding encoded array lengths by replacing them with an excessively large value causes the deserialization process to significantly increase processing time. This issue has been fixed in version 1.4.1."
      }, {
        "lang" : "es",
        "value" : "seroval facilita la serialización de valores JS, incluyendo estructuras complejas más allá de las capacidades de JSON.stringify. En las versiones 1.4.0 e inferiores, la anulación de las longitudes de arrays codificados al reemplazarlas con un valor excesivamente grande provoca que el proceso de deserialización aumente significativamente el tiempo de procesamiento. Este problema ha sido solucionado en la versión 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lxsmnsyc:seroval:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "85760E40-9AB1-40EB-98A1-D1A4411AAFC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-66fc-rw6m-c2q6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23958",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T02:15:52.627",
      "lastModified" : "2026-02-17T16:28:47.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase uses the MD5 hash of the user’s password as the JWT signing secret. This deterministic secret derivation allows an attacker to brute-force the admin’s password by exploiting unmonitored API endpoints that verify JWT tokens. The vulnerability has been fixed in v2.10.19. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Dataease es una herramienta de análisis de visualización de datos de código abierto. Antes de la versión 2.10.19, DataEase utiliza el hash MD5 de la contraseña del usuario como secreto de firma JWT. Esta derivación de secreto determinista permite a un atacante forzar por fuerza bruta la contraseña del administrador explotando puntos finales de API no monitoreados que verifican tokens JWT. La vulnerabilidad ha sido corregida en la v2.10.19. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.19",
            "matchCriteriaId" : "74084BB3-D364-4DCE-A125-A8509D6284BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-5wvm-4m4q-rh7j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ox.security/blog/blog-dataease-cve-2026-23958-admin-takeover/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23961",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T02:15:52.780",
      "lastModified" : "2026-02-02T20:29:07.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under certain circumstances, previously-unknown posts from suspended users can be processed. This issue allows old posts from suspended users to occasionally end up on timelines on all Mastodon versions. Additionally, on Mastodon versions from v4.5.0 to v4.5.4, v4.4.5 to v4.4.11, v4.3.13 to v4.3.17, and v4.2.26 to v4.2.29, remote suspended users can partially bypass the suspension to get new posts in. Mastodon versions v4.5.5, v4.4.12, v4.3.18 are patched."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito y de código abierto basado en ActivityPub. Mastodon permite a los administradores de servidor suspender usuarios remotos para evitar interacciones. Sin embargo, algunos errores de lógica permiten que haya publicaciones ya conocidas de dichos usuarios suspendidos que aparezcan en las líneas de tiempo si se promocionan. Además, bajo ciertas circunstancias, se pueden procesar publicaciones previamente desconocidas de usuarios suspendidos. Este problema permite que haya publicaciones antiguas de usuarios suspendidos que, ocasionalmente, terminen en las líneas de tiempo en todas las versiones de Mastodon. Adicionalmente, en las versiones de Mastodon desde la v4.5.0 hasta la v4.5.4, de la v4.4.5 hasta la v4.4.11, de la v4.3.13 hasta la v4.3.17, y de la v4.2.26 hasta la v4.2.29, los usuarios remotos suspendidos pueden evitar parcialmente la suspensión para introducir nuevas publicaciones. Las versiones de Mastodon v4.5.5, v4.4.12, v4.3.18 están parcheadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.18",
            "matchCriteriaId" : "0ADDA491-E534-4DFB-856F-9D07F38F3A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.12",
            "matchCriteriaId" : "9BAA2A25-EE70-4B9F-8848-2CCE9C243077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.5",
            "matchCriteriaId" : "71845808-53CF-46D1-9A12-F14F1BAED488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.3.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.4.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.5.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-5h2f-wg8j-xqwp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23959",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:46.233",
      "lastModified" : "2026-02-17T16:13:17.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was identified in versions prior to 4.1.9 in the `CustomerTransformerController` within the CoreShop admin panel. The affected endpoint improperly interpolates user-supplied input into a SQL query, leading to database error disclosure and potential data extraction. Version 4.1.9 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "CoreShop es una solución de comercio electrónico mejorada de Pimcore. Se identificó una vulnerabilidad de inyección SQL basada en errores en versiones anteriores a la 4.1.9 en el 'CustomerTransformerController' dentro del panel de administración de CoreShop. El endpoint afectado interpola incorrectamente la entrada proporcionada por el usuario en una consulta SQL, lo que lleva a la divulgación de errores de la base de datos y a la posible extracción de datos. La versión 4.1.9 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-564"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coreshop:coreshop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.9",
            "matchCriteriaId" : "AD4072DD-B1C7-43DE-9201-64819589B281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coreshop/CoreShop/commit/af80b8f5c7df5f02f44e9c5e0a4a564de274eec2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coreshop/CoreShop/releases/tag/4.1.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/coreshop/CoreShop/security/advisories/GHSA-fqcv-8859-86x2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23962",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:46.400",
      "lastModified" : "2026-02-02T20:27:51.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a very large amount of options, greatly increasing resource consumption. Depending on the number of poll options, an attacker can cause disproportionate resource usage in both Mastodon servers and clients, potentially causing Denial of Service either server-side or client-side. Mastodon versions v4.5.5, v4.4.12, v4.3.18 are patched."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito y de código abierto basado en ActivityPub. Las versiones de Mastodon anteriores a la v4.3.18, v4.4.12 y v4.5.5 no tienen un límite en el número máximo de opciones de encuesta para publicaciones remotas, lo que permite a los atacantes crear encuestas con una cantidad muy grande de opciones, aumentando considerablemente el consumo de recursos. Dependiendo del número de opciones de encuesta, un atacante puede causar un uso desproporcionado de recursos tanto en los servidores como en los clientes de Mastodon, lo que podría causar una denegación de servicio ya sea del lado del servidor o del lado del cliente. Las versiones de Mastodon v4.5.5, v4.4.12, v4.3.18 están parcheadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.18",
            "matchCriteriaId" : "0ADDA491-E534-4DFB-856F-9D07F38F3A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.12",
            "matchCriteriaId" : "9BAA2A25-EE70-4B9F-8848-2CCE9C243077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.5",
            "matchCriteriaId" : "71845808-53CF-46D1-9A12-F14F1BAED488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.3.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.4.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.5.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-gg8q-rcg7-p79g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23963",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:46.550",
      "lastModified" : "2026-02-02T20:27:15.387",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5, 4.4.12, and 4.3.18, the server does not enforce a maximum length for the names of lists or filters, or for filter keywords, allowing any user to set an arbitrarily long string as the name or keyword. Any local user can abuse the list or filter fields to cause disproportionate storage and computing resource usage. They can additionally cause their own web interface to be unusable, although they must intentionally do this to themselves or unknowingly approve a malicious API client. Mastodon versions v4.5.5, v4.4.12, v4.3.18 are patched."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito, de código abierto, basado en ActivityPub. Antes de las versiones 4.5.5, 4.4.12 y 4.3.18, el servidor no aplica una longitud máxima para los nombres de listas o filtros, ni para las palabras clave de filtro, permitiendo a cualquier usuario establecer una cadena arbitrariamente larga como nombre o palabra clave. Cualquier usuario local puede abusar de los campos de lista o filtro para causar un uso desproporcionado de los recursos de almacenamiento y computación. Adicionalmente, pueden hacer que su propia interfaz web sea inutilizable, aunque deben hacerlo intencionalmente a sí mismos o aprobar sin saberlo un cliente API malicioso. Las versiones de Mastodon v4.5.5, v4.4.12, v4.3.18 están parcheadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.18",
            "matchCriteriaId" : "0ADDA491-E534-4DFB-856F-9D07F38F3A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.12",
            "matchCriteriaId" : "9BAA2A25-EE70-4B9F-8848-2CCE9C243077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.5",
            "matchCriteriaId" : "71845808-53CF-46D1-9A12-F14F1BAED488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.3.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.4.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.5.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-6x3w-9g92-gvf3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23964",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:46.700",
      "lastModified" : "2026-02-02T20:26:10.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5, 4.4.12, and 4.3.18, an insecure direct object reference in the web push subscription update endpoint lets any authenticated user update another user's push subscription by guessing or obtaining the numeric subscription id. This can be used to disrupt push notifications for other users and also leaks the web push subscription endpoint. Any user with a web push subscription is impacted, because another authenticated user can tamper with their push subscription settings if they can guess or obtain the subscription id. This allows an attacker to disrupt push notifications by changing the policy (whether to filter notifications from non-followers or non-followed users) and subscribed notification types of their victims. Additionally, the endpoint returns the subscription object, which includes the push notification endpoint for this subscription, but not its keypair. Mastodon versions v4.5.5, v4.4.12, v4.3.18 are patched."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito y de código abierto basado en ActivityPub. Antes de las versiones 4.5.5, 4.4.12 y 4.3.18, una referencia directa a objeto insegura en el endpoint de actualización de suscripción de notificaciones push web permite a cualquier usuario autenticado actualizar la suscripción de notificaciones push de otro usuario adivinando u obteniendo el ID numérico de la suscripción. Esto puede usarse para interrumpir las notificaciones push de otros usuarios y también filtra el endpoint de suscripción de notificaciones push web. Cualquier usuario con una suscripción de notificaciones push web se ve afectado, porque otro usuario autenticado puede manipular la configuración de su suscripción de notificaciones push si puede adivinar u obtener el ID de la suscripción. Esto permite a un atacante interrumpir las notificaciones push cambiando la política (si filtrar notificaciones de usuarios no seguidores o no seguidos) y los tipos de notificación suscritos de sus víctimas. Además, el endpoint devuelve el objeto de suscripción, que incluye el endpoint de notificación push para esta suscripción, pero no su par de claves. Las versiones de Mastodon v4.5.5, v4.4.12, v4.3.18 están parcheadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.18",
            "matchCriteriaId" : "0ADDA491-E534-4DFB-856F-9D07F38F3A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.12",
            "matchCriteriaId" : "9BAA2A25-EE70-4B9F-8848-2CCE9C243077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.5",
            "matchCriteriaId" : "71845808-53CF-46D1-9A12-F14F1BAED488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.3.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.4.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.5.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-f3q8-7vw3-69v4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23965",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:46.860",
      "lastModified" : "2026-02-25T15:27:23.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurations, an attacker can forge valid signatures for arbitrary public keys. If the message space contains sufficient redundancy, the attacker can fix the prefix of the message associated with the forged signature to satisfy specific formatting requirements. Version 0.4.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "sm-crypto proporciona implementaciones de JavaScript de los algoritmos criptográficos chinos SM2, SM3 y SM4. Hay una vulnerabilidad de falsificación de firma en la lógica de verificación de firma SM2 de sm-crypto anterior a la versión 0.4.0. En configuraciones predeterminadas, un atacante puede falsificar firmas válidas para claves públicas arbitrarias. Si el espacio de mensajes contiene suficiente redundancia, el atacante puede fijar el prefijo del mensaje asociado con la firma falsificada para satisfacer requisitos de formato específicos. La versión 0.4.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juneandgreen:sm-crypto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "1E895E89-0BB9-45B8-8DEF-8598D9494916"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JuneAndGreen/sm-crypto/commit/85295a859d0766222d12ce2be3e6fce7b438b510",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-hpwg-xg7m-3p6m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23966",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.007",
      "lastModified" : "2026-02-25T15:30:40.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can fully recover the private key within approximately several hundred interactions. Version 0.3.14 patches the issue."
      }, {
        "lang" : "es",
        "value" : "sm-crypto proporciona implementaciones de JavaScript de los algoritmos criptográficos chinos SM2, SM3 y SM4. Existe una vulnerabilidad de recuperación de clave privada en la lógica de descifrado SM2 de sm-crypto anterior a la versión 0.3.14. Al interactuar con la interfaz de descifrado SM2 varias veces, un atacante puede recuperar completamente la clave privada en aproximadamente varios cientos de interacciones. La versión 0.3.14 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juneandgreen:sm-crypto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.14",
            "matchCriteriaId" : "902F9DFD-B5BC-4BF4-9AF2-CB42F616B3D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JuneAndGreen/sm-crypto/commit/b1c824e58fdf1eaa73692c124a095819a8c45707",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-pgx9-497m-6c4v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23967",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.167",
      "lastModified" : "2026-02-25T15:31:26.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An attacker can derive a new valid signature for a previously signed message from an existing signature. Version 0.3.14 patches the issue."
      }, {
        "lang" : "es",
        "value" : "sm-crypto proporciona implementaciones de JavaScript de los algoritmos criptográficos chinos SM2, SM3 y SM4. Existe una vulnerabilidad de maleabilidad de firma en la lógica de verificación de firma SM2 de la librería sm-crypto anterior a la versión 0.3.14. Un atacante puede derivar una nueva firma válida para un mensaje previamente firmado a partir de una firma existente. La versión 0.3.14 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juneandgreen:sm-crypto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.14",
            "matchCriteriaId" : "902F9DFD-B5BC-4BF4-9AF2-CB42F616B3D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JuneAndGreen/sm-crypto/security/advisories/GHSA-qv7w-v773-3xqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23991",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.317",
      "lastModified" : "2026-02-17T16:10:55.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, if the TUF repository (or any of its mirrors) returns invalid TUF metadata JSON (valid JSON but not well formed TUF metadata), the client will panic during parsing, causing a denial of service. The panic happens before any signature is validated. This means that a compromised repository/mirror/cache can DoS clients without having access to any signing key. Version 2.3.1 fixes the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "go-tuf es una implementación en Go de The Update Framework (TUF). A partir de la versión 2.0.0 y antes de la versión 2.3.1, si el repositorio TUF (o cualquiera de sus espejos) devuelve JSON de metadatos TUF no válido (JSON válido pero metadatos TUF no bien formados), el cliente entrará en pánico durante el análisis, causando una denegación de servicio. El pánico ocurre antes de que se valide cualquier firma. Esto significa que un repositorio/espejo/caché comprometido puede DoS a los clientes sin tener acceso a ninguna clave de firma. La versión 2.3.1 soluciona el problema. No hay soluciones alternativas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        }, {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theupdateframework:go-tuf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "6442E623-C25E-418E-A418-324F815885AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theupdateframework/go-tuf/commit/73345ab6b0eb7e59d525dac17a428f043074cef6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/theupdateframework/go-tuf/releases/tag/v2.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-846p-jg2w-w324",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23992",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.470",
      "lastModified" : "2026-02-17T16:02:19.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to unauthorized modification to TUF metadata files is possible at rest, or during transit as no integrity checks are made. Version 2.3.1 fixes the issue. As a workaround, always make sure that the TUF metadata roles are configured with a threshold of at least 1."
      }, {
        "lang" : "es",
        "value" : "go-tuf es una implementación en Go de The Update Framework (TUF). A partir de la versión 2.0.0 y antes de la versión 2.3.1, un repositorio TUF comprometido o mal configurado puede tener el valor configurado de los umbrales de firma establecido en 0, lo que deshabilita efectivamente la verificación de firmas. Esto puede llevar a que sea posible la modificación no autorizada de los archivos de metadatos de TUF en reposo o en tránsito, ya que no se realizan comprobaciones de integridad. La versión 2.3.1 corrige el problema. Como solución alternativa, asegúrese siempre de que los roles de metadatos de TUF estén configurados con un umbral de al menos 1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theupdateframework:go-tuf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "6442E623-C25E-418E-A418-324F815885AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theupdateframework/go-tuf/commit/b38d91fdbc69dfe31fe9230d97dafe527ea854a0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-fphv-w9fq-2525",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24001",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.627",
      "lastModified" : "2026-03-04T15:23:41.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsdiff is a JavaScript text differencing implementation. Prior to versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1, attempting to parse a patch whose filename headers contain the line break characters `\\r`, `\\u2028`, or `\\u2029` can cause the `parsePatch` method to enter an infinite loop. It then consumes memory without limit until the process crashes due to running out of memory. Applications are therefore likely to be vulnerable to a denial-of-service attack if they call `parsePatch` with a user-provided patch as input. A large payload is not needed to trigger the vulnerability, so size limits on user input do not provide any protection. Furthermore, some applications may be vulnerable even when calling `parsePatch` on a patch generated by the application itself if the user is nonetheless able to control the filename headers (e.g. by directly providing the filenames of the files to be diffed). The `applyPatch` method is similarly affected if (and only if) called with a string representation of a patch as an argument, since under the hood it parses that string using `parsePatch`. Other methods of the library are unaffected. Finally, a second and lesser interdependent bug - a ReDOS - also exhibits when those same line break characters are present in a patch's *patch* header (also known as its \"leading garbage\"). A maliciously-crafted patch header of length *n* can take `parsePatch` O(*n*³) time to parse. Versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1 contain a fix. As a workaround, do not attempt to parse patches that contain any of these characters: `\\r`, `\\u2028`, or `\\u2029`."
      }, {
        "lang" : "es",
        "value" : "jsdiff es una implementación de diferenciación de texto en JavaScript. Antes de las versiones 8.0.3, 5.2.2, 4.0.4 y 3.5.1, intentar analizar un parche cuyos encabezados de nombre de archivo contienen los caracteres de salto de línea `\\r`, `\\u2028` o `\\u2029` puede hacer que el método `parsePatch` entre en un bucle infinito. Luego consume memoria sin límite hasta que el proceso falla por falta de memoria. Por lo tanto, las aplicaciones son propensas a ser vulnerables a un ataque de denegación de servicio si llaman a `parsePatch` con un parche proporcionado por el usuario como entrada. No se necesita una carga útil grande para activar la vulnerabilidad, por lo que los límites de tamaño en la entrada del usuario no proporcionan ninguna protección. Además, algunas aplicaciones pueden ser vulnerables incluso al llamar a `parsePatch` en un parche generado por la propia aplicación si el usuario, no obstante, puede controlar los encabezados de nombre de archivo (por ejemplo, proporcionando directamente los nombres de archivo de los archivos a diferenciar). El método `applyPatch` se ve afectado de manera similar si (y solo si) se llama con una representación de cadena de un parche como argumento, ya que internamente analiza esa cadena usando `parsePatch`. Otros métodos de la librería no se ven afectados. Finalmente, un segundo error menos interdependiente - un ReDOS - también se manifiesta cuando esos mismos caracteres de salto de línea están presentes en el encabezado *patch* de un parche (también conocido como su 'leading garbage'). Un encabezado de parche maliciosamente elaborado de longitud *n* puede tomarle a `parsePatch` un tiempo de O(*n*³) para analizar. Las versiones 8.0.3, 5.2.2, 4.0.4 y 3.5.1 contienen una corrección. Como solución alternativa, no intente analizar parches que contengan ninguno de estos caracteres: `\\r`, `\\u2028` o `\\u2029`."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kpdecker:jsdiff:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.5.1",
            "matchCriteriaId" : "44451D09-9FDB-43D6-8E29-33D8306067CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kpdecker:jsdiff:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "AD273CF5-9C48-4A54-BBBF-3C921F993312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kpdecker:jsdiff:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.2",
            "matchCriteriaId" : "7A5DF5EF-0C3D-4A23-B468-CD94F474A87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kpdecker:jsdiff:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "FCA7FF3F-546F-494B-A5B0-42A93E4181EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kpdecker/jsdiff/commit/15a1585230748c8ae6f8274c202e0c87309142f5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kpdecker/jsdiff/issues/653",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/kpdecker/jsdiff/pull/649",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/kpdecker/jsdiff/security/advisories/GHSA-73rr-hh4g-fpgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24002",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.777",
      "lastModified" : "2026-02-17T17:59:16.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, but pyodide on node does not have a useful sandbox barrier. If a user of Grist sets `GRIST_SANDBOX_FLAVOR` to `pyodide` and opens a malicious document, that document could run arbitrary processes on the server hosting Grist. The problem has been addressed in Grist version 1.7.9 and up, by running pyodide under deno. As a workaround, a user can use the gvisor-based sandbox by setting  `GRIST_SANDBOX_FLAVOR` to `gvisor`."
      }, {
        "lang" : "es",
        "value" : "Grist es un software de hoja de cálculo que utiliza Python como su lenguaje de fórmulas. Grist ofrece varios métodos para ejecutar esas fórmulas en un sandbox, para casos en los que el usuario podría estar trabajando con hojas de cálculo no confiables. Uno de esos métodos los ejecuta en pyodide, pero pyodide en node no tiene una barrera de sandbox útil. Si un usuario de Grist establece 'GRIST_SANDBOX_FLAVOR' en 'pyodide' y abre un documento malicioso, ese documento podría ejecutar procesos arbitrarios en el servidor que aloja Grist. El problema se ha abordado en Grist versión 1.7.9 y posteriores, ejecutando pyodide bajo deno. Como solución alternativa, un usuario puede usar el sandbox basado en gvisor estableciendo 'GRIST_SANDBOX_FLAVOR' en 'gvisor'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getgrist:grist-core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.9",
            "matchCriteriaId" : "9F8A7C5C-5BE0-4EA5-BB48-F038908933ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gristlabs/grist-core/security/advisories/GHSA-7xvx-8pf2-pv5g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.getgrist.com/self-managed/#how-do-i-sandbox-documents",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24006",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:47.933",
      "lastModified" : "2026-04-06T13:51:37.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0\nand below, serialization of objects with extreme depth can exceed the maximum call stack limit. In version 1.4.1, Seroval introduces a `depthLimit` parameter in serialization/deserialization methods. An error will be thrown if the depth limit is reached."
      }, {
        "lang" : "es",
        "value" : "Seroval facilita la serialización de valores JS, incluyendo estructuras complejas más allá de las capacidades de JSON.stringify. En las versiones 1.4.0 y anteriores, la serialización de objetos con una profundidad extrema puede exceder el límite máximo de la pila de llamadas. En la versión 1.4.1, Seroval introduce un parámetro 'depthLimit' en los métodos de serialización/deserialización. Se lanzará un error si se alcanza el límite de profundidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lxsmnsyc:seroval:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "85760E40-9AB1-40EB-98A1-D1A4411AAFC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-3j22-8qj3-26mx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24010",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T03:15:48.090",
      "lastModified" : "2026-01-29T20:00:49.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HTML file disguised as a profile picture, an attacker can create a convincing login page replica that steals user credentials. When a victim visits the uploaded file URL, they see an authentic-looking \"Session Expired\" message prompting them to re-authenticate. All entered credentials are captured and sent to the attacker's server, enabling Account Takeover. Version 1.5.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) de código abierto y gratuito. Una vulnerabilidad crítica de carga de archivos en versiones anteriores a la 1.5.0, con ingeniería social, permite a usuarios autenticados desplegar ataques de phishing. Al cargar un archivo HTML malicioso disfrazado como una imagen de perfil, un atacante puede crear una réplica convincente de página de inicio de sesión que roba credenciales de usuario. Cuando una víctima visita la URL del archivo cargado, ve un mensaje de 'Sesión Expirada' de aspecto auténtico que les solicita volver a autenticarse. Todas las credenciales introducidas son capturadas y enviadas al servidor del atacante, lo que permite la toma de control de cuentas. La versión 1.5.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-474"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "57934F7E-B93F-40A5-9E9A-CB97D7568936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-5jfv-gw8w-49h3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24034",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:15:59.303",
      "lastModified" : "2026-01-29T19:03:50.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). In versions prior to 1.5.0, a cross-site scripting vulnerability can be triggered because the extension and content-type are not checked during the profile photo update step. Version 1.5.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) de código abierto y gratuito. En versiones anteriores a la 1.5.0, se puede activar una vulnerabilidad de cross-site scripting porque la extensión y el tipo de contenido (content-type) no se verifican durante el paso de actualización de la foto de perfil. La versión 1.5.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "57934F7E-B93F-40A5-9E9A-CB97D7568936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-mvwg-7c8w-qw2p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24035",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:15:59.453",
      "lastModified" : "2026-01-29T19:02:03.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). An Improper Access Control vulnerability exists in Horilla HR Software starting in version 1.4.0 and prior to version 1.5.0, allowing any authenticated employee to upload documents on behalf of another employee without proper authorization. This occurs due to insufficient server-side validation of the employee_id parameter during file upload operations, allowing any authenticated employee to upload document in behalf of any employee. Version 1.5.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) gratuito y de código abierto. Existe una vulnerabilidad de control de acceso inadecuado en el software Horilla HR a partir de la versión 1.4.0 y anterior a la versión 1.5.0, que permite a cualquier empleado autenticado subir documentos en nombre de otro empleado sin la autorización adecuada. Esto ocurre debido a una validación insuficiente del lado del servidor del parámetro employee_id durante las operaciones de carga de archivos, lo que permite a cualquier empleado autenticado subir documentos en nombre de cualquier empleado. La versión 1.5.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55143854-C369-4CAA-B671-90EFC9170F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1i00-NnipvxH8bGY-SyqEjnDQfxIbVGRR/view?usp=sharing",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-fm3f-xpgx-8xr3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24036",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:15:59.597",
      "lastModified" : "2026-01-29T18:58:16.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). Versions 1.4.0 and above expose unpublished job postings through the /recruitment/recruitment-details// endpoint without authentication. The response includes draft job titles, descriptions and application link allowing unauthenticated users to view unpublished roles and access the application workflow for unpublished jobs. Unauthorized access to unpublished job posts can leak sensitive internal hiring information and cause confusion among candidates. This issue has been fixed in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) de código abierto y gratuito. Las versiones 1.4.0 y superiores exponen ofertas de empleo no publicadas a través del endpoint /recruitment/recruitment-details// sin autenticación. La respuesta incluye títulos de puestos de trabajo en borrador, descripciones y un enlace de solicitud, lo que permite a los usuarios no autenticados ver roles no publicados y acceder al flujo de trabajo de solicitud para trabajos no publicados. El acceso no autorizado a las ofertas de empleo no publicadas puede filtrar información interna de contratación sensible y causar confusión entre los candidatos. Este problema ha sido solucionado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55143854-C369-4CAA-B671-90EFC9170F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/horilla-opensource/horilla/commit/9a585a1588431499092a49d7e82cb77daa4d99ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-q4xr-w96p-3vg7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24037",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:15:59.743",
      "lastModified" : "2026-01-29T18:56:43.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the has_xss() function attempts to block XSS by matching input against a set of regex patterns. However, the regexes are incomplete and context-agnostic, making them easy to bypass. Attackers are able to redirect users to malicious domains, run external JavaScript, and steal CSRF tokens that can be used to craft CSRF attacks against admins. This issue has been fixed in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) gratuito y de código abierto. En la versión 1.4.0, la función has_xss() intenta bloquear XSS comparando la entrada con un conjunto de patrones de expresiones regulares. Sin embargo, las expresiones regulares son incompletas y agnósticas al contexto, lo que las hace fáciles de eludir. Los atacantes pueden redirigir a los usuarios a dominios maliciosos, ejecutar JavaScript externo y robar tokens CSRF que pueden usarse para elaborar ataques CSRF contra administradores. Este problema ha sido solucionado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55143854-C369-4CAA-B671-90EFC9170F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-rqw5-fjm4-rgvm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24038",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:15:59.890",
      "lastModified" : "2026-01-29T18:54:50.163",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP is also None, causing the comparison user_otp == otp to pass. This allows an attacker to bypass two-factor authentication entirely without ever providing a valid OTP. If administrative accounts are targeted, it could lead to compromise of sensitive HR data, manipulation of employee records, and further system-wide abuse. This issue has been fixed in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) gratuito y de código abierto. En la versión 1.4.0, la lógica de manejo de OTP tiene una verificación de igualdad defectuosa que puede ser evitada. Cuando un OTP expira, el servidor devuelve None, y si un atacante omite el campo otp de su solicitud POST, el OTP proporcionado por el usuario también es None, haciendo que la comparación user_otp == otp se apruebe. Esto permite a un atacante evitar completamente la autenticación de dos factores sin proporcionar nunca un OTP válido. Si se dirigen a cuentas de administración, podría llevar al compromiso de datos sensibles de RRHH, manipulación de registros de empleados y a un abuso adicional en todo el sistema. Este problema ha sido solucionado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55143854-C369-4CAA-B671-90EFC9170F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-hqpv-ff5v-3hwf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24039",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:16:00.033",
      "lastModified" : "2026-01-29T18:47:30.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Horilla is a free and open source Human Resource Management System (HRMS). Version 1.4.0 has Improper Access Control, allowing low-privileged employees to self-approve documents they have uploaded. The document-approval UI is intended to be restricted to administrator or high-privilege roles only; however, an insufficient server-side authorization check on the approval endpoint lets a standard employee modify the approval status of their own uploaded document. A successful exploitation allows users with only employee-level permissions to alter application state reserved for administrators. This undermines the integrity of HR processes (for example, acceptance of credentials, certifications, or supporting materials), and may enable submission of unvetted documents. This issue is fixed in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Horilla es un Sistema de Gestión de Recursos Humanos (HRMS) gratuito y de código abierto. La versión 1.4.0 tiene un Control de Acceso Inadecuado, permitiendo a empleados con pocos privilegios autoaprobar documentos que han subido. La interfaz de usuario (UI) de aprobación de documentos está destinada a ser restringida solo a roles de administrador o de grandes privilegios; sin embargo, una verificación de autorización insuficiente del lado del servidor en el endpoint de aprobación permite a un empleado estándar modificar el estado de aprobación de su propio documento subido. Si se explota con éxito, usuarios con permisos solo de nivel de empleado pueden alterar el estado de la aplicación reservado para administradores. Esto socava la integridad de los procesos de RRHH (por ejemplo, la aceptación de credenciales, certificaciones o materiales de apoyo), y puede permitir la presentación de documentos no verificados. Este problema está solucionado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55143854-C369-4CAA-B671-90EFC9170F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/horilla-opensource/horilla/releases/tag/1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-99mq-mhwv-w9qx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24042",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:16:00.187",
      "lastModified" : "2026-02-17T17:50:44.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users to execute unpublished (edit-mode) actions by sending viewMode=false (or omitting it) to POST /api/v1/actions/execute. This bypasses the expected publish boundary where public viewers should only execute published actions, not edit-mode versions. An attack can result in sensitive data exposure, execution of edit‑mode queries and APIs, development data access, and the ability to trigger side effect behavior. This issue does not have a released fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "Appsmith es una plataforma para construir paneles de administración, herramientas internas y paneles de control. En las versiones 1.94 e inferiores, las aplicaciones de acceso público permiten a usuarios no autenticados ejecutar acciones no publicadas (en modo edición) enviando viewMode=false (o omitiéndolo) a POST /API/v1/actions/execute. Esto elude el límite de publicación esperado donde los espectadores públicos solo deberían ejecutar acciones publicadas, no versiones en modo edición. Un ataque puede resultar en exposición de datos sensibles, ejecución de consultas y API en modo edición, acceso a datos de desarrollo y la capacidad de desencadenar comportamientos con efectos secundarios. Este problema no tiene una solución publicada en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.94",
            "matchCriteriaId" : "E0D385D9-E0EC-4CED-AB28-87B2CD03C5E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appsmithorg/appsmith/security/advisories/GHSA-j9qq-4fj9-9883",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24055",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T04:16:00.367",
      "lastModified" : "2026-02-17T17:46:42.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow, and the callback stores installations based on this untrusted metadata. This allows an attacker to bind their Slack workspace to any project and potentially receive changes to prompts stored in Langfuse Prompt Management. An attacker can replace existing Prompt Slack Automation integrations or pre-register a malicious one, though the latter requires an authenticated user to unknowingly configure it despite visible workspace and channel indicators in the UI. This issue has been fixed in version 3.147.0."
      }, {
        "lang" : "es",
        "value" : "Langfuse es una plataforma de ingeniería de modelos de lenguaje grandes de código abierto. En las versiones 3.146.0 e inferiores, el endpoint /api/public/slack/install inicia el OAuth de Slack utilizando un projectId proporcionado por el cliente sin autenticación ni autorización. El projectId se conserva durante todo el flujo de OAuth, y la devolución de llamada almacena las instalaciones basándose en estos metadatos no confiables. Esto permite a un atacante vincular su espacio de trabajo de Slack a cualquier proyecto y potencialmente recibir cambios en las indicaciones (prompts) almacenadas en Langfuse Prompt Management. Un atacante puede reemplazar las integraciones existentes de Prompt Slack Automation o pre-registrar una maliciosa, aunque esto último requiere que un usuario autenticado la configure sin saberlo a pesar de los indicadores visibles del espacio de trabajo y del canal en la interfaz de usuario (UI). Este problema ha sido solucionado en la versión 3.147.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langfuse:langfuse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.89.0",
            "versionEndExcluding" : "3.147.0",
            "matchCriteriaId" : "1058C1A1-0AEA-4CF4-9E22-B05B57F96B1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langfuse/langfuse/commit/3adc89e4d72729eabef55e46888b8ce80a7e3b0a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langfuse/langfuse/releases/tag/v3.147.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/langfuse/langfuse/security/advisories/GHSA-pvq7-vvfj-p98x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Mitigation" ]
      }, {
        "url" : "https://langfuse.com/docs/prompt-management/features/webhooks-slack-integrations",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24049",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T05:16:23.157",
      "lastModified" : "2026-02-18T14:56:48.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2."
      }, {
        "lang" : "es",
        "value" : "wheel es una herramienta de línea de comandos para manipular archivos wheel de Python, según se define en PEP 427. En las versiones 0.40.0 a 0.46.1, la función unpack es vulnerable a la modificación de permisos de archivos debido a un manejo incorrecto de los permisos de archivos después de la extracción. La lógica confía ciegamente en el nombre de archivo del encabezado del archivo comprimido para la operación chmod, a pesar de que el propio proceso de extracción podría haber saneado la ruta. Los atacantes pueden crear un archivo wheel malicioso que, al ser descomprimido, cambia los permisos de archivos críticos del sistema (por ejemplo, /etc /passwd, claves SSH, archivos de configuración), permitiendo la escalada de privilegios o la ejecución de código arbitrario al modificar scripts ahora escribibles. Este problema ha sido solucionado en la versión 0.46.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wheel_project:wheel:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "0.40.0",
            "versionEndExcluding" : "0.46.2",
            "matchCriteriaId" : "977849BE-E1EA-4B60-AF30-9C248A8B9635"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pypa/wheel/releases/tag/0.46.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0920",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-22T07:15:50.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'lakit_bkrole' parameter during registration and gain administrator access to the site."
      }, {
        "lang" : "es",
        "value" : "El plugin LA-Studio Element Kit para Elementor para WordPress es vulnerable a la creación de usuarios administrativos en todas las versiones hasta e incluyendo la 1.5.6.3. Esto se debe a que la función 'ajax_register_handle' no restringe con qué roles de usuario puede registrarse un usuario. Esto hace posible que atacantes no autenticados suministren el parámetro 'lakit_bkrole' durante el registro y obtengan acceso de administrador al sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/lastudio-element-kit/tags/1.5.6.3/includes/integrations/override.php#L301",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3439121/lastudio-element-kit",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/65ebc744-6cc2-47ce-b225-81820e49d59c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-22T08:16:00.857",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with \"status\": \"offline\"), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as \"You will appear offline.\""
      }, {
        "lang" : "es",
        "value" : "Discord hasta el 16 de enero de 2026 permite recopilar información sobre si el estado del cliente de un usuario es Invisible (y no realmente fuera de línea) porque la respuesta a una solicitud de API de WebSocket incluye al usuario en el array de presencias (con 'status': 'offline'), mientras que los usuarios fuera de línea son omitidos del array de presencias. Esto es discutiblemente inconsistente con la descripción de la interfaz de usuario de Invisible como 'Aparecerás fuera de línea'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "references" : [ {
        "url" : "https://xmrcat.org/discord-invisibility-bypass",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1330",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-22T09:15:51.990",
      "lastModified" : "2026-02-17T19:31:32.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files."
      }, {
        "lang" : "es",
        "value" : "MeetingHub desarrollado por HAMASTAR Technology tiene una vulnerabilidad de lectura arbitraria de archivos, permitiendo a atacantes remotos no autenticados explotar el salto de ruta absoluto para descargar archivos de sistema arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hamastar:meetinghub_paperless_meetings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-12-10",
            "matchCriteriaId" : "251B1D2A-2FF9-44AE-B652-D3830D85689C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10651-ff09c-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10650-a5ee9-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1331",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-22T09:15:52.197",
      "lastModified" : "2026-02-17T19:32:31.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server."
      }, {
        "lang" : "es",
        "value" : "MeetingHub desarrollado por HAMASTAR Technology tiene una vulnerabilidad de carga de archivos arbitrarios, permitiendo a atacantes remotos no autenticados cargar y ejecutar puertas traseras de tipo web shell, habilitando así la ejecución de código arbitrario en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hamastar:meetinghub_paperless_meetings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-12-10",
            "matchCriteriaId" : "251B1D2A-2FF9-44AE-B652-D3830D85689C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10651-ff09c-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10650-a5ee9-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1225",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-01-22T10:16:07.693",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACE vulnerability in configuration file processing  by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration file.\n\n\n\n\nThe instantiation of a potentially malicious Java class requires that said class is present on the user's class-path. In addition, the attacker must  have write access to a \nconfiguration file. However, after successful instantiation, the instance is very likely to be discarded with no further ado."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad ACE en el procesamiento de archivos de configuración por QOS.CH logback-core hasta la versión 1.5.24 inclusive en aplicaciones Java, permite a un atacante instanciar clases ya presentes en el classpath comprometiendo un archivo de configuración de logback existente.\n\nLa instanciación de una clase Java potencialmente maliciosa requiere que dicha clase esté presente en el classpath del usuario. Además, el atacante debe tener acceso de escritura a un archivo de configuración. Sin embargo, después de una instanciación exitosa, es muy probable que la instancia sea descartada sin más preámbulos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:X/RE:M/U:Green",
            "baseScore" : 1.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "NO",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "GREEN"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://logback.qos.ch/news.html#1.5.25",
        "source" : "vulnerability@ncsc.ch"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1332",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-22T10:16:07.970",
      "lastModified" : "2026-02-17T19:16:13.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information."
      }, {
        "lang" : "es",
        "value" : "MeetingHub desarrollado por HAMASTAR Technology tiene una vulnerabilidad de autenticación faltante, permitiendo a atacantes remotos no autenticados acceder a funciones específicas de la API y obtener información relacionada con las reuniones."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hamastar:meetinghub_paperless_meetings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025-12-10",
            "matchCriteriaId" : "251B1D2A-2FF9-44AE-B652-D3830D85689C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10651-ff09c-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10650-a5ee9-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0723",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-22T15:16:50.030",
      "lastModified" : "2026-01-26T21:06:04.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 18.6 anterior a la 18.6.4, la 18.7 anterior a la 18.7.2, y la 18.8 anterior a la 18.8.2 que podría haber permitido a un individuo con conocimiento existente del ID de credencial de una víctima omitir la autenticación de dos factores al enviar respuestas de dispositivo falsificadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.6.0",
            "versionEndExcluding" : "18.6.4",
            "matchCriteriaId" : "DCFE3D48-36BA-44C2-8F0D-38CFDB1A366D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.6.0",
            "versionEndExcluding" : "18.6.4",
            "matchCriteriaId" : "1ED8B99B-2F16-48A4-A538-7FE3A8DBF3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.2",
            "matchCriteriaId" : "7E36C974-4A52-424A-8758-E45B750C013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.2",
            "matchCriteriaId" : "F71560B5-1000-45F1-8A5C-078D6C3D03E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.2",
            "matchCriteriaId" : "582D13A9-DEEE-4E3F-BFC5-61F270C99B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.2",
            "matchCriteriaId" : "760BBB79-D5BD-4871-8522-3C2C7E65767B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/585333",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/3476052",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1102",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-22T15:16:50.227",
      "lastModified" : "2026-01-26T21:09:33.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending repeated malformed SSH authentication requests."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 12.3 anterior a la 18.6.4, la 18.7 anterior a la 18.7.2, y la 18.8 anterior a la 18.8.2 que podría haber permitido a un usuario no autenticado crear una condición de denegación de servicio enviando repetidas solicitudes de autenticación SSH malformadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.3.0",
            "versionEndExcluding" : "18.6.4",
            "matchCriteriaId" : "D2396DAD-8F31-4CD8-83AB-B8B862BAB422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.3.0",
            "versionEndExcluding" : "18.6.4",
            "matchCriteriaId" : "48A3D878-F753-4137-8CAB-8CD570DC000D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.2",
            "matchCriteriaId" : "7E36C974-4A52-424A-8758-E45B750C013E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.2",
            "matchCriteriaId" : "F71560B5-1000-45F1-8A5C-078D6C3D03E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.2",
            "matchCriteriaId" : "582D13A9-DEEE-4E3F-BFC5-61F270C99B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.2",
            "matchCriteriaId" : "760BBB79-D5BD-4871-8522-3C2C7E65767B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/579746",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1324",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-22T15:16:50.420",
      "lastModified" : "2026-01-30T16:34:58.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation of the argument keypassword leads to os command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en el Sistema de Gestión de Operación y Mantenimiento de Sangfor hasta la versión 3.0.12. Afectada por este problema es la función SessionController del archivo /isomp-protocol/protocol/session del componente Manejador del Protocolo SSH. La manipulación del argumento keypassword conduce a inyección de comandos del sistema operativo. Es posible iniciar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "B2514FE4-F7D8-46CC-9ACF-FC9B7433599F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/20",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1325",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-22T15:16:50.610",
      "lastModified" : "2026-01-30T16:37:09.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function edit_pwd_mall of the file /fort/login/edit_pwd_mall. The manipulation of the argument flag results in weak password recovery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en el Sistema de Gestión de Seguridad de Operación y Mantenimiento de Sangfor hasta la versión 3.0.12. Esto afecta la función edit_pwd_mall del archivo /fort/login/edit_pwd_mall. La manipulación del argumento flag resulta en una recuperación de contraseña débil. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "B2514FE4-F7D8-46CC-9ACF-FC9B7433599F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736208",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1326",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-22T15:16:50.790",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Totolink NR1800X 9.1.0u.6279_B20210910. Esta vulnerabilidad afecta a la función setWanCfg del archivo /cgi-bin/cstecgi.cgi del componente POST Request Handler. Esta manipulación del argumento Hostname causa inyección de comandos. El ataque puede iniciarse de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6279_b20210910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFB91EF-6C07-45CB-AA17-A3D937FC9D7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:nr1800x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D2D0E8-2678-4238-8229-83450ECA1153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-NR1800X-setWanCfg-2e453a41781f80b390f3e1ce0d9dd5b9?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342302",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342302",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735787",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1327",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-22T15:16:50.967",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Totolink NR1800X 9.1.0u.6279_B20210910. Este problema afecta a la función setTracerouteCfg del archivo /cgi-bin/cstecgi.cgi del componente POST Request Handler. Dicha manipulación del argumento command conduce a una inyección de comandos. El ataque puede ser lanzado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6279_b20210910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFB91EF-6C07-45CB-AA17-A3D937FC9D7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:nr1800x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D2D0E8-2678-4238-8229-83450ECA1153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-NR1800X-setTracerouteCfg-2e453a41781f80df8ef9d32983758502?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735790",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1328",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-22T15:16:51.173",
      "lastModified" : "2026-01-29T17:47:56.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Totolink NR1800X 9.1.0u.6279_B20210910. Afectada es la función setWizardCfg del archivo /cgi-bin/cstecgi.cgi del componente POST Request Handler. Realizar una manipulación del argumento ssid resulta en un desbordamiento de búfer. El ataque puede iniciarse de forma remota. El exploit ya es público y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6279_b20210910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFB91EF-6C07-45CB-AA17-A3D937FC9D7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:nr1800x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D2D0E8-2678-4238-8229-83450ECA1153"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lavender-bicycle-a5a.notion.site/TOTOLINK-NR1800X-setWizardCfg-2e453a41781f80568a54c9368082fbe9?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342304",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342304",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.735792",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1329",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-22T15:16:54.757",
      "lastModified" : "2026-02-03T13:59:25.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Tenda AX1803 1.0.0.1. El elemento afectado es la función fromGetWifiGuestBasic del archivo /goform/WifiGuestSet. La ejecución de una manipulación del argumento guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity puede llevar a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B81C53EE-14CD-426B-ADF3-6D9B4D69DC84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413B93A8-6188-4D89-8141-C5B73F4AA071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://river-brow-763.notion.site/Tenda-AX1803-Buffer-Overflow-in-fromGetWifiGusetBasic-2e3a595a7aef80a78225db34317daa40#2e3a595a7aef801ab517e4af5631227a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736063",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736064",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736065",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736066",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736067",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23760",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-22T15:16:55.120",
      "lastModified" : "2026-01-27T16:16:55.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An unauthenticated attacker can supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance. NOTE: SmarterMail system administrator privileges grant the ability to execute operating system commands via built-in management functionality, effectively providing administrative (SYSTEM or root) access on the underlying host."
      }, {
        "lang" : "es",
        "value" : "Las versiones de SmarterTools SmarterMail anteriores a la compilación 9511 contienen una vulnerabilidad de omisión de autenticación en la API de restablecimiento de contraseña. El endpoint force-reset-password permite solicitudes anónimas y no verifica la contraseña existente o un token de restablecimiento al restablecer cuentas de administrador del sistema. Un atacante no autenticado puede proporcionar un nombre de usuario de administrador objetivo y una nueva contraseña para restablecer la cuenta, lo que resulta en un compromiso de administración total de la instancia de SmarterMail. NOTA: Los privilegios de administrador del sistema de SmarterMail otorgan la capacidad de ejecutar comandos del sistema operativo a través de la funcionalidad de gestión incorporada, proporcionando efectivamente acceso de administrador (SYSTEM o root) en el host subyacente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-01-26",
      "cisaActionDue" : "2026-02-16",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability",
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "100.0.9511",
            "matchCriteriaId" : "D508C7EA-385D-428C-ACD3-9E2F93F0FB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-white.com/public-vulnerability-list/#authenticationserviceforceresetpassword-missing-authentication-in-smartermail",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://labs.watchtowr.com/attackers-with-decompilers-strike-again-smartertools-smartermail-wt-2026-0001-auth-bypass/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.smartertools.com/smartermail/release-notes/current",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/smartertools-smartermail-authentication-bypass-via-password-reset-api",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-23760",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.huntress.com/blog/smartermail-account-takeover-leading-to-rce",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24009",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T16:16:09.320",
      "lastModified" : "2026-04-09T14:25:51.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater."
      }, {
        "lang" : "es",
        "value" : "Docling Core (o docling-core) es una librería que define tipos de datos centrales y transformaciones en la aplicación de procesamiento de documentos Docling. Una vulnerabilidad de ejecución remota de código (RCE) relacionada con PyYAML, concretamente CVE-2020-14343, se expone en docling-core a partir de la versión 2.21.0 y anterior a la versión 2.48.4, específicamente solo si la aplicación utiliza pyyaml anterior a la versión 5.4 e invoca 'docling_core.types.doc.DoclingDocument.load_from_yaml()' pasándole datos YAML no confiables. La vulnerabilidad ha sido parcheada en docling-core versión 2.48.4. La solución mitiga el problema al cambiar la deserialización de 'PyYAML' de 'yaml.FullLoader' a 'yaml.SafeLoader', asegurando que los datos no confiables no puedan desencadenar la ejecución de código. Los usuarios que no puedan actualizar docling-core inmediatamente pueden, alternativamente, asegurarse de que la versión instalada de PyYAML sea 5.4 o superior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docling:docling-core:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "2.21.0",
            "versionEndExcluding" : "2.48.4",
            "matchCriteriaId" : "FD7C4503-47A0-4AC3-BCF6-17C8E790F67F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-8q59-q68h-6hv4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/docling-project/docling-core/issues/482",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/docling-project/docling-core/releases/tag/v2.48.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0533",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-01-22T17:16:28.937",
      "lastModified" : "2026-01-30T17:07:29.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una carga útil HTML creada maliciosamente en un nombre de diseño, cuando se muestra durante el diálogo de confirmación de eliminación y es pulsada por un usuario, puede desencadenar una vulnerabilidad de cross-site scripting (XSS) almacenado en la aplicación de escritorio Autodesk Fusion. Un actor malicioso puede aprovechar esta vulnerabilidad para leer archivos locales o ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2606.1.21",
            "matchCriteriaId" : "00476C10-FCC9-4EDD-AE74-95A8E99806B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0534",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-01-22T17:16:29.113",
      "lastModified" : "2026-01-30T17:08:06.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una carga útil HTML diseñada maliciosamente, almacenada en el atributo de una pieza y al ser pulsada por un usuario, puede desencadenar una vulnerabilidad de cross-site scripting almacenado (XSS) en la aplicación de escritorio Autodesk Fusion. Un actor malicioso puede aprovechar esta vulnerabilidad para leer archivos locales o ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2606.1.21",
            "matchCriteriaId" : "00476C10-FCC9-4EDD-AE74-95A8E99806B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0535",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-01-22T17:16:30.260",
      "lastModified" : "2026-01-30T17:07:49.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una carga útil HTML creada maliciosamente, almacenada en la descripción de un componente y en la que un usuario hace clic, puede desencadenar una vulnerabilidad de cross-site scripting (XSS) almacenado en la aplicación de escritorio Autodesk Fusion. Un actor malicioso puede aprovechar esta vulnerabilidad para leer archivos locales o ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2606.1.21",
            "matchCriteriaId" : "00476C10-FCC9-4EDD-AE74-95A8E99806B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1260",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2026-01-22T17:16:30.643",
      "lastModified" : "2026-01-30T18:33:45.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure."
      }, {
        "lang" : "es",
        "value" : "Acceso a memoria no válido en versiones de Sentencepiece inferiores a la 0.2.1 al usar un archivo de modelo vulnerable, que no se crea en el procedimiento de entrenamiento normal."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:sentencepiece:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.1",
            "matchCriteriaId" : "E4AF7FCB-EDF3-4A3B-89FE-DBC8D23BD85F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/google/sentencepiece/releases/tag/v0.2.1",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22278",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-22T17:16:31.027",
      "lastModified" : "2026-01-28T18:18:33.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Dell PowerScale OneFS anteriores a la 9.13.0.0 contienen una vulnerabilidad de restricción inadecuada de intentos excesivos de autenticación. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "D004A551-1E20-4170-A949-143E488FA9C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22347",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.210",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through <= 3.3.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider permite XSS basado en DOM. Este problema afecta a Carousel Horizontal Posts Content Slider: desde n/a hasta &lt;= 3.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/carousel-horizontal-posts-content-slider/vulnerability/wordpress-carousel-horizontal-posts-content-slider-plugin-3-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22348",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.363",
      "lastModified" : "2026-04-28T19:36:30.427",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through <= 1.53."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Tasos Fel Civic Cookie Control civic-cookie-control-8 permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configuradas. Este problema afecta a Civic Cookie Control: desde n/a hasta &lt;= 1.53."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/civic-cookie-control-8/vulnerability/wordpress-civic-cookie-control-plugin-1-53-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22349",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.490",
      "lastModified" : "2026-04-28T19:36:30.600",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in linux4me2 Menu In Post menu-in-post allows DOM-Based XSS.This issue affects Menu In Post: from n/a through <= 1.4.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en linux4me2 Menu In Post menu-in-post permite XSS basado en DOM. Este problema afecta a Menu In Post: desde n/a hasta &lt;= 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/menu-in-post/vulnerability/wordpress-menu-in-post-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22353",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.610",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winkm89 teachPress teachpress allows Stored XSS.This issue affects teachPress: from n/a through <= 9.0.12."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en winkm89 teachPress teachpress permite XSS Almacenado. Este problema afecta a teachPress: desde n/d hasta &lt;= 9.0.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/teachpress/vulnerability/wordpress-teachpress-plugin-9-0-12-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22355",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.727",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en gregmolnar Simple XML Sitemap simple-xml-sitemap permite XSS Almacenado. Este problema afecta a Simple XML Sitemap: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/simple-xml-sitemap/vulnerability/wordpress-simple-xml-sitemap-plugin-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22358",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.850",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Electrician - Electrical Service WordPress electrician allows Server Side Request Forgery.This issue affects Electrician - Electrical Service WordPress: from n/a through <= 5.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en SmartDataSoft Electrician - Electrical Service WordPress electrician permite falsificación de petición del lado del servidor. Este problema afecta a Electrician - Electrical Service WordPress: desde n/a hasta &lt;= 5.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/electrician/vulnerability/wordpress-electrician-electrical-service-wordpress-theme-5-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22359",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:31.977",
      "lastModified" : "2026-04-28T19:36:31.543",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el importador de películas AA-Team Wordpress Movies Bulk Importer permite la falsificación de petición en sitios cruzados. Este problema afecta a Wordpress Movies Bulk Importer: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/movies%20importer/vulnerability/wordpress-wordpress-movies-bulk-importer-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22360",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:32.100",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in AA-Team SearchAzon searchazon allows Cross Site Request Forgery.This issue affects SearchAzon: from n/a through <= 1.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en AA-Team SearchAzon searchazon permite la falsificación de petición en sitios cruzados. Este problema afecta a SearchAzon: desde n/a hasta &lt;= 1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/searchazon/vulnerability/wordpress-searchazon-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22382",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:32.233",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Cross Site Request Forgery.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el tema de WordPress Mikado-Themes PawFriends - Pet Shop and Veterinary pawfriends permite la falsificación de petición en sitios cruzados. Este problema afecta al tema de WordPress PawFriends - Pet Shop and Veterinary: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/pawfriends/vulnerability/wordpress-pawfriends-pet-shop-and-veterinary-wordpress-theme-theme-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22388",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:32.590",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through <= 2.2.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Imran Emu Owl Carousel WP owl-carousel-wp permite XSS Almacenado. Este problema afecta a Owl Carousel WP: desde n/a hasta &lt;= 2.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/owl-carousel-wp/vulnerability/wordpress-owl-carousel-wp-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22391",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:32.713",
      "lastModified" : "2026-04-28T19:36:33.850",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Cocco cocco allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cocco: from n/a through <= 1.5.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Cocco cocco permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a Cocco: desde n/a hasta &lt;= 1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/cocco/vulnerability/wordpress-cocco-theme-1-5-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22393",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:32.837",
      "lastModified" : "2026-04-28T19:36:34.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Curly curly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Curly: from n/a through <= 3.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Curly curly permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Curly: desde n/a hasta &lt;= 3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/curly/vulnerability/wordpress-curly-theme-3-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22396",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:32.947",
      "lastModified" : "2026-04-28T19:36:34.250",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fiorello fiorello allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fiorello: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Fiorello fiorello permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Fiorello: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fiorello/vulnerability/wordpress-fiorello-theme-1-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22398",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.067",
      "lastModified" : "2026-04-28T19:36:34.417",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fleur fleur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fleur: from n/a through <= 2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Fleur fleur permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a Fleur: desde n/a hasta &lt;= 2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fleur/vulnerability/wordpress-fleur-theme-2-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22400",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.193",
      "lastModified" : "2026-04-28T19:36:34.583",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Holmes holmes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Holmes: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización mediante clave controlada por el usuario en Mikado-Themes Holmes holmes permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Holmes: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/holmes/vulnerability/wordpress-holmes-theme-1-7-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22401",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.313",
      "lastModified" : "2026-04-28T19:36:34.697",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pavothemes Freshio freshio allows PHP Local File Inclusion.This issue affects Freshio: from n/a through <= 2.4.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'Inclusión remota de ficheros PHP') en pavothemes Freshio freshio permite la Inclusión local de ficheros PHP. Este problema afecta a Freshio: desde n/a hasta &lt;= 2.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/freshio/vulnerability/wordpress-freshio-theme-2-4-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22402",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.433",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pavothemes Triply triply allows PHP Local File Inclusion.This issue affects Triply: from n/a through <= 2.4.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control Inadecuado del Nombre de Fichero para la Declaración Include/Require en Programa PHP ('Inclusión Remota de Ficheros PHP') en pavothemes Triply triply permite Inclusión Local de Ficheros PHP. Este problema afecta a Triply: desde n/a hasta &lt;= 2.4.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/triply/vulnerability/wordpress-triply-theme-2-4-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22404",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.553",
      "lastModified" : "2026-04-28T19:36:34.920",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Innovio innovio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Innovio: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de una clave controlada por el usuario en Mikado-Themes Innovio innovio permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Innovio: desde n/d hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/innovio/vulnerability/wordpress-innovio-theme-1-7-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22406",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.673",
      "lastModified" : "2026-04-28T19:36:35.090",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Overton: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Mikado-Themes Overton overton permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Overton: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/overton/vulnerability/wordpress-overton-theme-1-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22407",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.790",
      "lastModified" : "2026-04-28T19:36:35.200",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through <= 2.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Roam roam permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Roam: desde n/a hasta &lt;= 2.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/roam/vulnerability/wordpress-roam-theme-2-1-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22409",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:33.917",
      "lastModified" : "2026-04-28T19:36:35.363",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justicia: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Mikado-Themes Justicia justicia permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Justicia: desde n/d hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/justicia/vulnerability/wordpress-justicia-theme-1-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22411",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.037",
      "lastModified" : "2026-04-28T19:36:35.537",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dolcino: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Dolcino dolcino permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Dolcino: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dolcino/vulnerability/wordpress-dolcino-theme-1-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22426",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.153",
      "lastModified" : "2026-04-28T19:36:36.707",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Elated-Themes Sweet Jane sweetjane allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sweet Jane: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Elated-Themes Sweet Jane sweetjane permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Sweet Jane: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/sweetjane/vulnerability/wordpress-sweet-jane-theme-1-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22430",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.270",
      "lastModified" : "2026-04-28T19:36:36.980",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Mikado-Themes Verdure verdure permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Verdure: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/verdure/vulnerability/wordpress-verdure-theme-1-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22445",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.393",
      "lastModified" : "2026-04-28T19:36:37.837",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Proptech Plugin Apimo Connector apimo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apimo Connector: from n/a through <= 2.6.5.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Proptech Plugin Apimo Connector apimo permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Apimo Connector: desde n/a hasta &lt;= 2.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/apimo/vulnerability/wordpress-apimo-connector-plugin-2-6-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22447",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.537",
      "lastModified" : "2026-04-28T19:36:38.003",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through <= 1.8.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Select-Themes Prowess prowess permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Prowess: desde n/a hasta &lt;= 1.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/prowess/vulnerability/wordpress-prowess-theme-1-8-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22450",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.663",
      "lastModified" : "2026-04-28T19:36:38.283",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Don Peppe: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Select-Themes Don Peppe donpeppe permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Don Peppe: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/donpeppe/vulnerability/wordpress-don-peppe-theme-1-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22458",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.793",
      "lastModified" : "2026-04-28T19:36:38.797",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Mikado-Themes Wanderland wanderland allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wanderland: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Mikado-Themes Wanderland wanderland permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Wanderland: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-theme-1-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22461",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:34.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through <= 6.6.18."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Falta de Autorización en WebAppick CTX Feed webappick-product-feed-for-woocommerce permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a CTX Feed: desde n/a hasta &lt;= 6.6.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/webappick-product-feed-for-woocommerce/vulnerability/wordpress-ctx-feed-plugin-6-6-15-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22462",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.030",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in richardevcom Add Polylang support for Customizer add-polylang-support-for-customizer allows Cross Site Request Forgery.This issue affects Add Polylang support for Customizer: from n/a through <= 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en richardevcom Add Polylang support para Customizer add-polylang-support-for-customizer permite falsificación de petición en sitios cruzados. Este problema afecta a Add Polylang support para Customizer: desde n/a hasta &lt;= 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/add-polylang-support-for-customizer/vulnerability/wordpress-add-polylang-support-for-customizer-plugin-1-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22463",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.153",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Micro.company Form to Chat App form-to-chat allows Stored XSS.This issue affects Form to Chat App: from n/a through <= 1.2.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Micro.company Form a Chat App form-to-chat permite XSS Almacenado. Este problema afecta a Form a Chat App: desde n/a hasta &lt;= 1.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/form-to-chat/vulnerability/wordpress-form-to-chat-app-plugin-1-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22464",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.277",
      "lastModified" : "2026-04-28T19:36:39.260",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows PHP Local File Inclusion.This issue affects My auctions allegro: from n/a through <= 3.6.33."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en wphocus My auctions allegro my-auctions-allegro-free-edition permite Inclusión Local de Ficheros PHP. Este problema afecta a My auctions allegro: desde n/a hasta &lt;= 3.6.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/my-auctions-allegro-free-edition/vulnerability/wordpress-my-auctions-allegro-plugin-3-6-33-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22466",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.400",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Chandni Patel WP MapIt wp-mapit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP MapIt: from n/a through <= 3.0.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en Chandni Patel WP MapIt wp-mapit permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP MapIt: desde n/a hasta &lt;= 3.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-mapit/vulnerability/wordpress-wp-mapit-plugin-3-0-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22468",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.523",
      "lastModified" : "2026-04-28T19:36:39.543",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Absolute Addons For Elementor: from n/a through <= 1.0.14."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en AbsolutePlugins Absolute Addons para Elementor absolute-addons permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Absolute Addons para Elementor: desde n/a hasta &lt;= 1.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/absolute-addons/vulnerability/wordpress-absolute-addons-for-elementor-plugin-1-0-14-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22469",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.643",
      "lastModified" : "2026-04-28T19:36:39.663",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in mwtemplates DeepDigital deepdigital allows Code Injection.This issue affects DeepDigital: from n/a through <= 1.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización incorrecta de etiquetas HTML relacionadas con scripts en una página web (XSS Básico) en mwtemplates DeepDigital deepdigital permite la inyección de código. Este problema afecta a DeepDigital: desde n/a hasta &lt;= 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/deepdigital/vulnerability/wordpress-deepdigital-theme-1-0-2-arbitrary-shortcode-execution-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22470",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.763",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FireStorm Plugins FireStorm Professional Real Estate fs-real-estate-plugin allows Blind SQL Injection.This issue affects FireStorm Professional Real Estate: from n/a through <= 2.7.11."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de Elementos Especiales utilizados en un Comando SQL ('inyección SQL') vulnerabilidad en FireStorm Plugins FireStorm Professional Real Estate fs-real-estate-plugin permite inyección SQL Ciega. Este problema afecta a FireStorm Professional Real Estate: desde n/a hasta &lt;= 2.7.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/fs-real-estate-plugin/vulnerability/wordpress-firestorm-professional-real-estate-plugin-2-7-11-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22472",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:35.880",
      "lastModified" : "2026-04-28T19:36:39.943",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form Builder: from n/a through <= 3.9.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en hassantafreshi Easy Form Builder easy-form-builder permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Easy Form Builder: desde n/a hasta &lt;= 3.9.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/easy-form-builder/vulnerability/wordpress-easy-form-builder-plugin-3-9-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22481",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:36.013",
      "lastModified" : "2026-04-28T19:36:40.563",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through <= 2.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a BD Courier Order Ratio Checker: desde n/a hasta &lt;= 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/bd-courier-order-ratio-checker/vulnerability/wordpress-bd-courier-order-ratio-checker-plugin-2-0-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22482",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:36.140",
      "lastModified" : "2026-04-28T19:36:40.677",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in wbolt.com IMGspider imgspider allows Server Side Request Forgery.This issue affects IMGspider: from n/a through <= 2.3.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en wbolt.com IMGspider imgspider permite la falsificación de petición del lado del servidor. Este problema afecta a IMGspider: desde n/a hasta &lt;= 2.3.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/imgspider/vulnerability/wordpress-imgspider-plugin-2-3-12-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22483",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:36.270",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in winkm89 teachPress teachpress allows Cross Site Request Forgery.This issue affects teachPress: from n/a through <= 9.0.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en winkm89 teachPress teachpress permite la falsificación de petición en sitios cruzados. Este problema afecta a teachPress: desde n/a hasta &lt;= 9.0.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/teachpress/vulnerability/wordpress-teachpress-plugin-9-0-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23761",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-22T17:16:37.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). When a handle is opened with a special file attribute value, the drivers improperly initialize FILE_OBJECT->FsContext to a non-pointer magic value. If subsequent operations are not handled by the VB-Audio driver and are forwarded down the audio driver stack (e.g., via PortCls to ks.sys), the invalid FsContext value can be dereferenced, causing a kernel crash (BSoD), typically SYSTEM_SERVICE_EXCEPTION with STATUS_ACCESS_VIOLATION. This flaw allows a local unprivileged user to trigger a denial-of-service on affected Windows systems."
      }, {
        "lang" : "es",
        "value" : "VB-Audio Voicemeeter, Voicemeeter Banana y Voicemeeter Potato (versiones que terminan en 1.1.1.9, 2.1.1.9 y 3.1.1.9 y anteriores, respectivamente), así como VB-Audio Matrix y Matrix Coconut (versiones que terminan en 1.0.2.2 y 2.0.2.2 y anteriores, respectivamente), contienen una vulnerabilidad en sus controladores de audio virtuales (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys y vbaudio_vmvaio3*.sys). Cuando se abre un identificador con un valor de atributo de archivo especial, los controladores inicializan incorrectamente FILE_OBJECT-&gt;FsContext a un valor mágico no puntero. Si las operaciones subsiguientes no son manejadas por el controlador de VB-Audio y son reenviadas a la pila de controladores de audio (por ejemplo, a través de PortCls a ks.sys), el valor FsContext inválido puede ser desreferenciado, causando un fallo del kernel (BSoD), típicamente SYSTEM_SERVICE_EXCEPTION con STATUS_ACCESS_VIOLATION. Esta falla permite a un usuario local sin privilegios activar una denegación de servicio en sistemas Windows afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7527#p7527",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7574#p7574",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/emkaix/security-research/tree/main/CVE-2026-23761",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://vb-audio.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/vb-audio-voicemeeter-and-matrix-drivers-dos-via-improper-file-object-fscontext-initialization",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23762",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-22T17:16:37.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). The drivers map non-paged pool memory into user space via MmMapLockedPagesSpecifyCache using UserMode access without proper exception handling. If the mapping fails, such as when a process has exhausted available virtual address space, MmMapLockedPagesSpecifyCache raises an exception that is not caught, causing a kernel crash (BSoD), typically SYSTEM_SERVICE_EXCEPTION with STATUS_NO_MEMORY. This flaw allows a local unprivileged user to trigger a denial-of-service on affected Windows systems."
      }, {
        "lang" : "es",
        "value" : "VB-Audio Voicemeeter, Voicemeeter Banana y Voicemeeter Potato (versiones que terminan en 1.1.1.9, 2.1.1.9 y 3.1.1.9 y anteriores, respectivamente), así como VB-Audio Matrix y Matrix Coconut (versiones que terminan en 1.0.2.2 y 2.0.2.2 y anteriores, respectivamente), contienen una vulnerabilidad en sus controladores de audio virtuales (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys y vbaudio_vmvaio3*.sys). Los controladores mapean memoria del pool no paginado en el espacio de usuario a través de MmMapLockedPagesSpecifyCache utilizando acceso en modo usuario sin un manejo adecuado de excepciones. Si el mapeo falla, como cuando un proceso ha agotado el espacio de direcciones virtual disponible, MmMapLockedPagesSpecifyCache genera una excepción que no es capturada, causando un fallo del kernel (BSoD), típicamente SYSTEM_SERVICE_EXCEPTION con STATUS_NO_MEMORY. Esta falla permite a un usuario local sin privilegios activar una denegación de servicio en sistemas Windows afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7527#p7527",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7574#p7574",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/emkaix/security-research/tree/main/CVE-2026-23762",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://vb-audio.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/vb-audio-voicemeeter-and-matrix-drivers-dos-via-mmmaplockedpagesspecifycache",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23763",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-22T17:16:37.620",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a local privilege escalation vulnerability in the VBMatrix VAIO virtual audio driver (vbmatrixvaio64*_win10.sys). The driver allocates a 128-byte non-paged pool buffer and, upon receiving IOCTL 0x222060, maps it into user space using an MDL and MmMapLockedPagesSpecifyCache. Because the allocation size is not page-aligned, the mapping exposes the entire 0x1000-byte kernel page containing the buffer plus adjacent non-paged pool allocations with read/write permissions. An unprivileged local attacker can open a device handle (using the required 0x800 attribute flag), invoke the IOCTL to obtain the mapping, and then read or modify live kernel objects and pointers present on that page. This enables bypass of KASLR, arbitrary kernel memory read/write within the exposed page, corruption of kernel objects, and escalation to SYSTEM."
      }, {
        "lang" : "es",
        "value" : "VB-Audio Matrix y Matrix Coconut (versiones que terminan en 1.0.2.2 y 2.0.2.2 y anteriores, respectivamente), contienen una vulnerabilidad de escalada de privilegios local en el controlador de audio virtual VBMatrix VAIO (vbmatrixvaio64*_win10.sys). El controlador asigna un búfer de grupo no paginado de 128 bytes y, al recibir el IOCTL 0x222060, lo mapea en el espacio de usuario utilizando un MDL y MmMapLockedPagesSpecifyCache. Debido a que el tamaño de la asignación no está alineado con la página, el mapeo expone toda la página del kernel de 0x1000 bytes que contiene el búfer más asignaciones adyacentes del grupo no paginado con permisos de lectura/escritura. Un atacante local sin privilegios puede abrir un identificador de dispositivo (utilizando el indicador de atributo 0x800 requerido), invocar el IOCTL para obtener el mapeo, y luego leer o modificar objetos y punteros del kernel en vivo presentes en esa página. Esto permite el bypass de KASLR, lectura/escritura arbitraria de memoria del kernel dentro de la página expuesta, corrupción de objetos del kernel, y escalada a SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7527#p7527",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7574#p7574",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/emkaix/security-research/tree/main/CVE-2026-23763",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://vb-audio.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/vb-audio-matrix-drivers-local-privilege-escalation-via-kernel-memory-exposure",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23764",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-22T17:16:37.757",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). The drivers allocate non-paged pool and map it into user space, where a length value associated with the allocation is exposed and can be modified by an unprivileged local attacker. On subsequent IOCTL handling, the corrupted length is used directly as the IoAllocateMdl length argument without adequate integrity checks before building and mapping the MDL, which can cause a kernel crash (BSoD), typically PAGE_FAULT_IN_NONPAGED_AREA. This flaw allows a local user to trigger a denial-of-service on affected Windows systems."
      }, {
        "lang" : "es",
        "value" : "VB-Audio Voicemeeter, Voicemeeter Banana y Voicemeeter Potato (versiones que terminan en 1.1.1.9, 2.1.1.9 y 3.1.1.9 y anteriores, respectivamente), así como VB-Audio Matrix y Matrix Coconut (versiones que terminan en 1.0.2.2 y 2.0.2.2 y anteriores, respectivamente), contienen una vulnerabilidad en sus controladores de audio virtuales (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys y vbaudio_vmvaio3*.sys). Los controladores asignan un grupo no paginado y lo mapean en el espacio de usuario, donde un valor de longitud asociado con la asignación está expuesto y puede ser modificado por un atacante local no privilegiado. En el manejo posterior de IOCTL, la longitud corrupta se utiliza directamente como el argumento de longitud de IoAllocateMdl sin comprobaciones de integridad adecuadas antes de construir y mapear el MDL, lo que puede causar un fallo del kernel (BSoD), típicamente PAGE_FAULT_IN_NONPAGED_AREA. Esta falla permite a un usuario local activar una denegación de servicio en sistemas Windows afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7527#p7527",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://forum.vb-audio.com/viewtopic.php?p=7574#p7574",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/emkaix/security-research/tree/main/CVE-2026-23764",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://vb-audio.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/vb-audio-voicemeeter-and-matrix-drivers-dos-via-corrupted-ioallocatemdl-length",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23974",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:38.090",
      "lastModified" : "2026-04-28T16:16:07.900",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/a through < 1.7.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en uxper Golo golo permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Golo: desde n/a hasta &lt; 1.7.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/golo/vulnerability/wordpress-golo-theme-1-7-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23975",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:38.210",
      "lastModified" : "2026-04-28T16:16:08.027",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo golo allows PHP Local File Inclusion.This issue affects Golo: from n/a through < 1.7.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('PHP inclusión remota de ficheros') en uxper Golo golo permite PHP inclusión local de ficheros. Este problema afecta a Golo: desde n/a hasta &lt; 1.7.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/golo/vulnerability/wordpress-golo-theme-1-7-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23976",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:38.333",
      "lastModified" : "2026-04-28T16:16:08.147",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through <= 2.13.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en WP Chill Modula Image Gallery modula-best-grid-gallery permite XSS Almacenado. Este problema afecta a Modula Image Gallery: desde n/a hasta &lt;= 2.13.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/modula-best-grid-gallery/vulnerability/wordpress-modula-image-gallery-plugin-2-13-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23978",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:38.450",
      "lastModified" : "2026-04-28T16:16:08.397",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Softwebmedia Gyan Elements gyan-elements allows PHP Local File Inclusion.This issue affects Gyan Elements: from n/a through <= 2.2.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('PHP inclusión remota de ficheros') en Softwebmedia Gyan Elements gyan-elements permite PHP inclusión local de ficheros. Este problema afecta a Gyan Elements: desde n/a hasta &lt;= 2.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/gyan-elements/vulnerability/wordpress-gyan-elements-plugin-2-2-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24353",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:38.910",
      "lastModified" : "2026-04-28T03:16:02.620",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through <= 4.4.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en wpeverest User Registration user-registration permite la explotación de niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a User Registration: desde n/a hasta &lt;= 4.4.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/user-registration/vulnerability/wordpress-user-registration-plugin-4-4-9-arbitrary-shortcode-execution-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24354",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Shortcodes & Performance penci-shortcodes allows DOM-Based XSS.This issue affects Penci Shortcodes & Performance: from n/a through <= 6.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PenciDesign Penci Shortcodes &amp; Performance penci-shortcodes permite XSS basado en DOM. Este problema afecta a Penci Shortcodes &amp; Performance: desde n/a hasta &lt;= 6.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-shortcodes/vulnerability/wordpress-penci-shortcodes-performance-plugin-6-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24355",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.173",
      "lastModified" : "2026-04-28T03:16:02.757",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality allows Stored XSS.This issue affects Houzez Theme - Functionality: from n/a through <= 4.2.6."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en favethemes Houzez Theme - Functionality houzez-theme-functionality permite XSS Almacenado. Este problema afecta a Houzez Theme - Functionality: desde n/d hasta &lt;= 4.2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24356",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.300",
      "lastModified" : "2026-04-28T03:16:02.877",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Roxnor GetGenie getgenie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetGenie: from n/a through <= 4.3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Roxnor GetGenie getgenie permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a GetGenie: desde n/a hasta &lt;= 4.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/getgenie/vulnerability/wordpress-getgenie-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24357",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.427",
      "lastModified" : "2026-04-28T03:16:03.007",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Recipe Maker: from n/a through <= 10.2.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Brecht WP Recipe Maker wp-recipe-maker permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Recipe Maker: desde n/a hasta &lt;= 10.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-recipe-maker/vulnerability/wordpress-wp-recipe-maker-plugin-10-2-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24358",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.570",
      "lastModified" : "2026-04-28T03:16:03.133",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Falta de Autorización en ExpressTech Systems Quiz And Survey Master quiz-master-next permite la explotación de niveles de seguridad de control de acceso mal configurados. Este problema afecta a Quiz And Survey Master: desde n/a hasta &lt;= 10.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-10-3-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24360",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.700",
      "lastModified" : "2026-04-28T03:16:03.307",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Server Side Request Forgery.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting permite la falsificación de petición del lado del servidor. Este problema afecta a Seriously Simple Podcasting: desde n/a hasta &lt;= 3.14.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-14-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24361",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.820",
      "lastModified" : "2026-04-28T19:36:46.270",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress – Course Review learnpress-course-review allows Stored XSS.This issue affects LearnPress – Course Review: from n/a through <= 4.1.9."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en ThimPress LearnPress - Course Review learnpress-course-review permite XSS Almacenado. Este problema afecta a LearnPress - Course Review: desde n/a hasta &lt;= 4.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/learnpress-course-review/vulnerability/wordpress-learnpress-course-review-plugin-4-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24365",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:39.937",
      "lastModified" : "2026-04-28T03:16:03.593",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in storeapps Stock Manager for WooCommerce woocommerce-stock-manager allows Cross Site Request Forgery.This issue affects Stock Manager for WooCommerce: from n/a through < 3.6.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en storeapps Stock Manager para WooCommerce woocommerce-stock-manager permite la falsificación de petición en sitios cruzados. Este problema afecta a Stock Manager para WooCommerce: desde n/a hasta &lt; 3.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woocommerce-stock-manager/vulnerability/wordpress-stock-manager-for-woocommerce-plugin-3-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24366",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.060",
      "lastModified" : "2026-04-28T03:16:03.710",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Request A Quote: from n/a through <= 2.46.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a YITH WooCommerce Request A Quote: desde n/a hasta &lt;= 2.46.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/yith-woocommerce-request-a-quote/vulnerability/wordpress-yith-woocommerce-request-a-quote-plugin-2-46-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24367",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.183",
      "lastModified" : "2026-04-28T15:16:06.840",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through < 3.2.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización incorrecta de elementos especiales utilizados en un comando SQL ('Inyección SQL') en shinetheme Traveler traveler permite Inyección SQL Ciega. Este problema afecta a Traveler: desde n/a hasta &lt; 3.2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/traveler/vulnerability/wordpress-traveler-theme-3-2-8-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24368",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.303",
      "lastModified" : "2026-04-28T15:16:06.997",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Theme-one The Grid the-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Grid: from n/a through < 2.8.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Theme-one The Grid the-grid permite explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a The Grid: desde n/a hasta &lt; 2.8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/the-grid/vulnerability/wordpress-the-grid-plugin-2-8-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24371",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.423",
      "lastModified" : "2026-04-28T15:16:07.360",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through <= 1.8.16."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en bookingalgorithms BA Book Everything ba-book-everything permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a BA Book Everything: desde n/a hasta &lt;= 1.8.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ba-book-everything/vulnerability/wordpress-ba-book-everything-plugin-1-8-16-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24374",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.547",
      "lastModified" : "2026-04-28T15:16:07.583",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Cross Site Request Forgery.This issue affects RegistrationMagic: from n/a through <= 6.0.6.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager permite la falsificación de petición en sitios cruzados. Este problema afecta a RegistrationMagic: desde n/a hasta &lt;= 6.0.6.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/custom-registration-form-builder-with-submission-manager/vulnerability/wordpress-registrationmagic-plugin-6-0-6-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24377",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.663",
      "lastModified" : "2026-04-28T15:16:07.960",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through <= 4.6.3."
      }, {
        "lang" : "es",
        "value" : "Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada vulnerabilidad en POSIMYTH Nexter Blocks the-plus-addons-for-block-editor permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Nexter Blocks: desde n/a hasta &lt;= 4.6.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/the-plus-addons-for-block-editor/vulnerability/wordpress-nexter-blocks-plugin-4-6-3-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24379",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.790",
      "lastModified" : "2026-04-28T15:16:08.163",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en wpjobportal WP Job Portal wp-job-portal permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Job Portal: desde n/d hasta &lt;= 2.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24380",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:40.910",
      "lastModified" : "2026-04-28T15:16:08.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through <= 4.2.8.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Metagauss EventPrime eventprime-event-calendar-management permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a EventPrime: desde n/a hasta &lt;= 4.2.8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/eventprime-event-calendar-management/vulnerability/wordpress-eventprime-plugin-4-2-8-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24381",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.023",
      "lastModified" : "2026-04-28T15:16:08.450",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This issue affects PhotoMe: from n/a through < 5.7.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en ThemeGoods PhotoMe photome permite la falsificación de petición del lado del servidor. Este problema afecta a PhotoMe: desde n/a hasta &lt; 5.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/photome/vulnerability/wordpress-photome-theme-5-7-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24383",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.353",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Slider b-slider allows DOM-Based XSS.This issue affects B Slider: from n/a through <= 2.0.6."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en bPlugins B Slider b-slider permite XSS basado en DOM. Este problema afecta a B Slider: desde n/a hasta &lt;= 2.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/b-slider/vulnerability/wordpress-b-slider-plugin-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24384",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.500",
      "lastModified" : "2026-04-28T15:16:08.813",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through <= 2.14."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en launchinteractive Merge + Minify + Refresh merge-minify-refresh permite la falsificación de petición en sitios cruzados. Este problema afecta a Merge + Minify + Refresh: desde n/a hasta &lt;= 2.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/merge-minify-refresh/vulnerability/wordpress-merge-minify-refresh-plugin-2-14-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24386",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.627",
      "lastModified" : "2026-04-28T19:36:47.783",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Element Invader Element Invader – Template Kits for Elementor elementinvader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Invader – Template Kits for Elementor: from n/a through <= 1.2.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Element Invader Element Invader – Template Kits para Elementor elementinvader permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Element Invader – Template Kits para Elementor: desde n/a hasta &lt;= 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/elementinvader/vulnerability/wordpress-element-invader-template-kits-for-elementor-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24387",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.747",
      "lastModified" : "2026-04-28T15:16:09.200",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through <= 2.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a WP Quick Post Duplicator: desde n/a hasta &lt;= 2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-quick-post-duplicator/vulnerability/wordpress-wp-quick-post-duplicator-plugin-2-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24388",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.870",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through <= 2.14.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Ludwig You WPMasterToolKit wpmastertoolkit permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WPMasterToolKit: desde n/a hasta &lt;= 2.14.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpmastertoolkit/vulnerability/wordpress-wpmastertoolkit-plugin-2-14-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24389",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:41.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through <= 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en WP Chill Gallery PhotoBlocks photoblocks-grid-gallery permite XSS basado en DOM. Este problema afecta a Gallery PhotoBlocks: desde n/a hasta &lt;= 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/photoblocks-grid-gallery/vulnerability/wordpress-gallery-photoblocks-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24390",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-22T17:16:42.110",
      "lastModified" : "2026-04-28T15:16:09.503",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QantumThemes Kentha Elementor Widgets kentha-elementor allows PHP Local File Inclusion.This issue affects Kentha Elementor Widgets: from n/a through < 3.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en QantumThemes Kentha Elementor Widgets kentha-elementor permite la inclusión local de ficheros PHP. Este problema afecta a Kentha Elementor Widgets: desde n/a hasta &lt; 3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/kentha-elementor/vulnerability/wordpress-kentha-elementor-widgets-plugin-3-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22279",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-22T19:15:56.843",
      "lastModified" : "2026-01-28T18:16:38.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information tampering."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a la 9.13.0.0, contiene una vulnerabilidad de registro insuficiente. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que podría llevar a la manipulación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-778"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "D004A551-1E20-4170-A949-143E488FA9C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22280",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-22T19:15:57.023",
      "lastModified" : "2026-01-28T18:14:37.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains an incorrect permission assignment for critical resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones 9.5.0.0 hasta 9.5.1.5, versiones 9.6.0.0 hasta 9.7.1.10, versiones 9.8.0.0 hasta 9.10.1.3, versiones a partir de 9.11.0.0 y anteriores a 9.13.0.0, contiene una vulnerabilidad de asignación de permisos incorrecta para un recurso crítico. Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que podría llevar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndExcluding" : "9.5.1.6",
            "matchCriteriaId" : "75F87F94-D52B-4D81-89A7-CBE5AEFEBA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndExcluding" : "9.7.1.11",
            "matchCriteriaId" : "8E921D4F-223E-4630-897F-B55D2B1E06A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.8.0.0",
            "versionEndExcluding" : "9.10.1.4",
            "matchCriteriaId" : "80A6C071-87C3-40C6-8C26-F6D239A77388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "9019F2DB-1449-4315-85CB-A35BB2AEF4BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22281",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-22T20:16:13.257",
      "lastModified" : "2026-01-28T18:14:09.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to denial of service."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones 9.5.0.0 a 9.5.1.5, versiones 9.6.0.0 a 9.7.1.10, versiones 9.8.0.0 a 9.10.1.3, versiones a partir de 9.11.0.0 y anteriores a 9.13.0.0, contiene una vulnerabilidad de condición de carrera de tipo Time-of-check Time-of-use (TOCTOU). Un atacante con privilegios bajos con acceso a la red adyacente podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndExcluding" : "9.5.1.6",
            "matchCriteriaId" : "75F87F94-D52B-4D81-89A7-CBE5AEFEBA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6.0.0",
            "versionEndExcluding" : "9.7.1.11",
            "matchCriteriaId" : "8E921D4F-223E-4630-897F-B55D2B1E06A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.8.0.0",
            "versionEndExcluding" : "9.10.1.4",
            "matchCriteriaId" : "80A6C071-87C3-40C6-8C26-F6D239A77388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "9019F2DB-1449-4315-85CB-A35BB2AEF4BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0798",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:15.957",
      "lastModified" : "2026-01-29T21:59:24.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags, and content."
      }, {
        "lang" : "es",
        "value" : "Gitea puede enviar correos electrónicos de notificación de lanzamiento para repositorios privados a usuarios cuyo acceso ha sido revocado. Cuando un repositorio cambia de público a privado, los usuarios que previamente seguían el repositorio pueden seguir recibiendo notificaciones de lanzamiento, divulgando potencialmente títulos de lanzamiento, etiquetas y contenido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36319",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-f4wq-6ww5-m56p",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1201",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-01-22T22:16:16.130",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elusión de autorización a través de una clave controlada por el usuario en los controladores de automatización del hogar Hubitat Elevation anteriores a la versión 2.4.2.157 podría permitir a un usuario remoto autenticado controlar dispositivos conectados fuera de su ámbito de autorización mediante la manipulación de solicitudes del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://ostrichlab.io/research-blog/?post=hubitat_writeup",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-06",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20736",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:17.207",
      "lastModified" : "2026-01-29T21:46:59.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access."
      }, {
        "lang" : "es",
        "value" : "Gitea no verifica correctamente el contexto del repositorio al eliminar adjuntos. Un usuario que previamente subió un adjunto a un repositorio podría eliminarlo después de perder el acceso a ese repositorio al realizar la solicitud a través de un repositorio diferente al que puede acceder."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36320",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-jr6h-pwwp-c8g6",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20750",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:17.370",
      "lastModified" : "2026-01-29T21:48:07.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea does not properly validate project ownership in organization project operations. A user with project write access in one organization may be able to modify projects belonging to a different organization."
      }, {
        "lang" : "es",
        "value" : "Gitea no valida correctamente la titularidad de los proyectos en las operaciones de proyectos de la organización. Un usuario con permisos de escritura en proyectos de una organización podría modificar proyectos pertenecientes a una organización diferente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36318",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36373",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-h4fh-pc4w-8w27",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20800",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:17.540",
      "lastModified" : "2026-01-29T21:57:04.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea's notification API does not re-validate repository access permissions when returning notification details. After a user's access to a private repository is revoked, they may still view issue and pull request titles through previously received notifications."
      }, {
        "lang" : "es",
        "value" : "La API de notificaciones de Gitea no revalida los permisos de acceso al repositorio al devolver los detalles de la notificación. Después de que se revoque el acceso de un usuario a un repositorio privado, aún pueden ver los títulos de las incidencias y las solicitudes de extracción a través de notificaciones recibidas previamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36339",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-g54m-9f6g-wj7q",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20883",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:17.713",
      "lastModified" : "2026-01-29T21:58:25.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches."
      }, {
        "lang" : "es",
        "value" : "La API del cronómetro de Gitea no revalida los permisos de acceso al repositorio. Después de que se revoca el acceso de un usuario a un repositorio privado, aún pueden ver los títulos de las incidencias y los nombres de los repositorios a través de cronómetros iniciados previamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36340",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36368",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-644v-xv3j-xgqg",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20888",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:17.890",
      "lastModified" : "2026-01-29T22:00:58.803",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able to cancel auto-merges scheduled by other users."
      }, {
        "lang" : "es",
        "value" : "Gitea no verifica correctamente la autorización al cancelar fusiones automáticas programadas a través de la interfaz web. Un usuario con acceso de lectura a las solicitudes de extracción podría cancelar fusiones automáticas programadas por otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36341",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36356",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-ccq9-c5hv-cf64",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20897",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:18.960",
      "lastModified" : "2026-01-29T22:02:20.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories."
      }, {
        "lang" : "es",
        "value" : "Gitea no valida correctamente la propiedad del repositorio al eliminar bloqueos de Git LFS. Un usuario con acceso de escritura a un repositorio podría eliminar bloqueos LFS pertenecientes a otros repositorios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36344",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36349",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-rrq5-r9h5-pc7c",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20904",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:19.130",
      "lastModified" : "2026-01-29T22:03:08.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea does not properly validate ownership when toggling OpenID URI visibility. An authenticated user may be able to change the visibility settings of other users' OpenID identities."
      }, {
        "lang" : "es",
        "value" : "Gitea no valida correctamente la titularidad al alternar la visibilidad de la URI de OpenID. Un usuario autenticado podría cambiar la configuración de visibilidad de las identidades OpenID de otros usuarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36346",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36361",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-jrpc-w85r-hgqx",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20912",
      "sourceIdentifier" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
      "published" : "2026-01-22T22:16:19.297",
      "lastModified" : "2026-01-29T22:03:58.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea does not properly validate repository ownership when linking attachments to releases. An attachment uploaded to a private repository could potentially be linked to a release in a different public repository, making it accessible to unauthorized users."
      }, {
        "lang" : "es",
        "value" : "Gitea no valida correctamente la propiedad del repositorio al vincular adjuntos a las versiones. Un adjunto subido a un repositorio privado podría vincularse potencialmente a una versión en un repositorio público diferente, haciéndolo accesible a usuarios no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.25.4",
            "matchCriteriaId" : "DFCB7D74-331D-4582-AB41-113A25BE8FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.com/release-of-1.25.4/",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36320",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/36355",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/releases/tag/v1.25.4",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/security/advisories/GHSA-vfmv-f93v-37mw",
        "source" : "88ee5874-cf24-4952-aea0-31affedb7ff2",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23831",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T22:16:19.523",
      "lastModified" : "2026-02-02T15:06:43.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rekor is a software supply chain transparency log. In versions 1.4.3 and below, the entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message, causing nil Pointer Dereference. Function validate() returns nil (success) when message is empty, leaving sign1Msg uninitialized, and Canonicalize() later dereferences v.sign1Msg.Payload. A malformed proposed entry of the cose/v0.0.1 type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal. This issue has been fixed in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Rekor es un registro de transparencia de la cadena de suministro de software. En las versiones 1.4.3 e inferiores, la implementación de entrada puede entrar en pánico con una entrada controlada por el atacante al canonizar una entrada propuesta con un spec.message vacío, causando una desreferenciación de puntero nulo. La función validate() devuelve nil (éxito) cuando el mensaje está vacío, dejando sign1Msg sin inicializar, y Canonicalize() desreferencia posteriormente v.sign1Msg.Payload. Una entrada propuesta malformada del tipo cose/v0.0.1 puede causar un pánico en un hilo dentro del proceso de Rekor. El hilo se recupera por lo que el cliente recibe un mensaje de error 500 y el servicio aún continúa, por lo que el impacto en la disponibilidad de esto es mínimo. Este problema ha sido solucionado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:rekor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "046CFEF8-2DAB-4D9A-AD13-CB83A9EB462E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/rekor/commit/39bae3d192bce48ef4ef2cbd1788fb5770fee8cd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sigstore/rekor/releases/tag/v1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/sigstore/rekor/security/advisories/GHSA-273p-m2cw-6833",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23953",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T22:16:20.673",
      "lastModified" : "2026-01-30T17:28:45.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration (e.g a member of the ‘incus’ group) can create an environment variable containing newlines, which can be used to add additional configuration items in the container’s lxc.conf due to newline injection. This can allow adding arbitrary lifecycle hooks, ultimately resulting in arbitrary command execution on the host. Exploiting this issue on IncusOS requires a slight modification of the payload to change to a different writable directory for the validation step (e.g /tmp). This can be confirmed with a second container with /tmp mounted from the host (A privileged action for validation only). A fix is planned for versions 6.0.6\nand 6.21.0, but they have not been released at the time of publication."
      }, {
        "lang" : "es",
        "value" : "Incus es un gestor de contenedores de sistema y máquinas virtuales. En las versiones 6.20.0 e inferiores, un usuario con la capacidad de lanzar un contenedor con una configuración YAML personalizada (por ejemplo, un miembro del grupo 'incus') puede crear una variable de entorno que contiene saltos de línea, la cual puede usarse para añadir elementos de configuración adicionales en el lxc.conf del contenedor debido a la inyección de saltos de línea. Esto puede permitir añadir ganchos de ciclo de vida arbitrarios, lo que en última instancia resulta en la ejecución arbitraria de comandos en el anfitrión. Explotar este problema en IncusOS requiere una ligera modificación de la carga útil para cambiar a un directorio diferente con permisos de escritura para el paso de validación (por ejemplo, /tmp). Esto puede confirmarse con un segundo contenedor con /tmp montado desde el anfitrión (Una acción privilegiada solo para validación). Se planea una solución para las versiones 6.0.6 y 6.21.0, pero no han sido lanzadas en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "0DF87DBE-86FF-4E74-8086-AE3360A94C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.21.0",
            "matchCriteriaId" : "47AA575C-385C-4C34-8CC0-F370EC4ED7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L1081",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lxc/incus/security/advisories/GHSA-x6jc-phwx-hp32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/24473682/environment_newline_injection.sh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/user-attachments/files/24473685/environment_newline_injection.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23954",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T22:16:20.833",
      "lastModified" : "2026-01-30T17:28:49.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the ‘incus’ group) to use directory traversal or symbolic links in the templating functionality to achieve host arbitrary file read, and host arbitrary file write. This ultimately results in arbitrary command execution on the host. When using an image with a metadata.yaml containing templates, both the source and target paths are not checked for symbolic links or directory traversal. This can also be exploited in IncusOS. A fix is planned for versions 6.0.6 and 6.21.0, but they have not been released at the time of publication."
      }, {
        "lang" : "es",
        "value" : "Incus es un gestor de contenedores de sistema y máquinas virtuales. Las versiones 6.21.0 e inferiores permiten a un usuario con la capacidad de lanzar un contenedor con una imagen personalizada (por ejemplo, un miembro del grupo 'incus') utilizar salto de directorio o enlaces simbólicos en la funcionalidad de plantillas para lograr la lectura arbitraria de archivos del host y la escritura arbitraria de archivos del host. Esto finalmente resulta en la ejecución arbitraria de comandos en el host. Al usar una imagen con un metadata.yaml que contiene plantillas, ni las rutas de origen ni las de destino se verifican en busca de enlaces simbólicos o salto de directorio. Esto también puede ser explotado en IncusOS. Se planea una corrección para las versiones 6.0.6 y 6.21.0, pero no han sido lanzadas en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.5",
            "matchCriteriaId" : "0DF87DBE-86FF-4E74-8086-AE3360A94C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.21.0",
            "matchCriteriaId" : "47AA575C-385C-4C34-8CC0-F370EC4ED7B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7215",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7294",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/24473599/template_arbitrary_write.sh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/user-attachments/files/24473601/templates_arbitrary_write.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23988",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T22:16:21.193",
      "lastModified" : "2026-02-27T14:36:16.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rufus is a utility that helps format and create bootable USB flash drives. Versions 4.11 and below contain a race condition (TOCTOU) in src/net.c during the creation, validation, and execution of the Fido PowerShell script. Since Rufus runs with elevated privileges (Administrator) but writes the script to the %TEMP% directory (writeable by standard users) without locking the file, a local attacker can replace the legitimate script with a malicious one between the file write operation and the execution step. This allows arbitrary code execution with Administrator privileges. This issue has been fixed in version 4.12_BETA."
      }, {
        "lang" : "es",
        "value" : "Rufus es una utilidad que ayuda a formatear y crear unidades flash USB de arranque. Las versiones 4.11 e inferiores contienen una condición de carrera (TOCTOU) en src/net.c durante la creación, validación y ejecución del script de PowerShell Fido. Dado que Rufus se ejecuta con privilegios elevados (Administrador) pero escribe el script en el directorio %TEMP% (escribible por usuarios estándar) sin bloquear el archivo, un atacante local puede reemplazar el script legítimo por uno malicioso entre la operación de escritura del archivo y el paso de ejecución. Esto permite la ejecución de código arbitrario con privilegios de Administrador. Este problema ha sido solucionado en la versión 4.12_BETA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akeo:rufus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12",
            "matchCriteriaId" : "FFBED744-9C21-4139-98DB-E44AC10397E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pbatard/rufus/commit/460cc5768aa45be07941b9e4ebc9bee02d282873",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pbatard/rufus/releases/tag/v4.12_BETA",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/pbatard/rufus/security/advisories/GHSA-hcx5-hrhj-xhq9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24058",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T22:16:21.387",
      "lastModified" : "2026-02-18T14:49:33.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soft Serve is a self-hostable Git server for the command line. Versions 0.11.2 and below have a critical authentication bypass vulnerability that allows an attacker to impersonate any user (including admin) by \"offering\" the victim's public key during the SSH handshake before authenticating with their own valid key. This occurs because the user identity is stored in the session context during the \"offer\" phase and is not cleared if that specific authentication attempt fails. This issue has been fixed in version 0.11.3."
      }, {
        "lang" : "es",
        "value" : "Soft Serve es un servidor Git autoalojable para la línea de comandos. Las versiones 0.11.2 e inferiores tienen una vulnerabilidad crítica de omisión de autenticación que permite a un atacante suplantar a cualquier usuario (incluido el administrador) al 'ofrecer' la clave pública de la víctima durante el handshake SSH antes de autenticarse con su propia clave válida. Esto ocurre porque la identidad del usuario se almacena en el contexto de la sesión durante la fase de 'oferta' y no se borra si ese intento de autenticación específico falla. Este problema ha sido solucionado en la versión 0.11.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-289"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charm:soft_serve:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.11.3",
            "matchCriteriaId" : "EE609E86-02D8-4580-9122-048301D83CFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/charmbracelet/soft-serve/commit/8539f9ad39918b67d612a35785a2b4326efc8741",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/charmbracelet/soft-serve/releases/tag/v0.11.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-pchf-49fh-w34r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24117",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T22:16:21.577",
      "lastModified" : "2026-02-02T15:07:44.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rekor is a software supply chain transparency log. In versions 1.4.3 and below, attackers can trigger SSRF to arbitrary internal services because /api/v1/index/retrieve supports retrieving a public key via user-provided URL. Since the SSRF only can trigger GET requests, the request cannot mutate state. The response from the GET request is not returned to the caller so data exfiltration is not possible. A malicious actor could attempt to probe an internal network through Blind SSRF. The issue has been fixed in version 1.5.0. To workaround this issue, disable the search endpoint with --enable_retrieve_api=false."
      }, {
        "lang" : "es",
        "value" : "Rekor es un registro de transparencia de la cadena de suministro de software. En las versiones 1.4.3 e inferiores, los atacantes pueden desencadenar SSRF a servicios internos arbitrarios porque /api/v1/index/retrieve admite la recuperación de una clave pública a través de una URL proporcionada por el usuario. Dado que el SSRF solo puede desencadenar solicitudes GET, la solicitud no puede mutar el estado. La respuesta de la solicitud GET no se devuelve al llamante, por lo que no es posible exfiltrar datos. Un actor malicioso podría intentar sondear una red interna a través de SSRF Ciego. El problema ha sido solucionado en la versión 1.5.0. Como solución alternativa a este problema, deshabilite el endpoint de búsqueda con --enable_retrieve_api=false."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:rekor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "046CFEF8-2DAB-4D9A-AD13-CB83A9EB462E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/rekor/commit/60ef2bceba192c5bf9327d003bceea8bf1f8275f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sigstore/rekor/releases/tag/v1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/sigstore/rekor/security/advisories/GHSA-4c4x-jm2x-pf9j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21227",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:57.220",
      "lastModified" : "2026-02-03T12:50:56.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Limitación inadecuada de un nombre de ruta a un directorio restringido ('salto de ruta') en Azure Logic Apps permite a un atacante no autorizado elevar privilegios sobre una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_logic_apps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6568E5D-75D4-4A94-BFBF-3FA619F9FDD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21227",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21264",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:57.407",
      "lastModified" : "2026-02-03T12:58:31.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en Microsoft Account permite a un atacante no autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:account:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAFA2F9-C35B-4359-A38D-6AF611819033"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21264",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21520",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:57.657",
      "lastModified" : "2026-02-02T13:31:19.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector"
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en Copilot Studio permite a un atacante no autenticado ver información sensible a través de un vector de ataque de red"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:copilot_studio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7859CFCD-C125-4992-9DCD-A843175DF9BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21520",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21521",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:57.823",
      "lastModified" : "2026-02-02T13:30:53.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de secuencias de escape, meta o control en Copilot permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_word_copilot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A538269-3D01-41B4-B8B1-B70D8514D336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21521",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21524",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:57.993",
      "lastModified" : "2026-02-03T12:47:27.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en Azure Data Explorer permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_data_explorer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B8A49B-18E3-4A83-96B7-88014063796E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21524",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24124",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T23:15:58.153",
      "lastModified" : "2026-02-26T21:42:54.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dragonfly is an open source P2P-based file distribution and image acceleration system. In versions 2.4.1-rc.0 and below, the Job API endpoints (/api/v1/jobs) lack JWT authentication middleware and RBAC authorization checks in the routing configuration. This allows any unauthenticated user with access to the Manager API to view, update and delete jobs. The issue is fixed in version 2.4.1-rc.1."
      }, {
        "lang" : "es",
        "value" : "Dragonfly es un sistema de distribución de archivos y aceleración de imágenes basado en P2P de código abierto. En las versiones 2.4.1-rc.0 e inferiores, los endpoints de la API de trabajos (/api/v1/jobs) carecen de middleware de autenticación JWT y de comprobaciones de autorización RBAC en la configuración de enrutamiento. Esto permite a cualquier usuario no autenticado con acceso a la API del Manager ver, actualizar y eliminar trabajos. El problema se ha corregido en la versión 2.4.1-rc.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:dragonfly:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "8415ECC7-F04F-4D86-B1B1-63AA3947A69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:dragonfly:2.4.1:beta0:*:*:*:go:*:*",
            "matchCriteriaId" : "4CD047B6-68F7-4CC9-9561-A4D079103877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:dragonfly:2.4.1:beta1:*:*:*:go:*:*",
            "matchCriteriaId" : "51F51456-C6A6-49D3-AD56-E0910F0DFE14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:dragonfly:2.4.1:rc0:*:*:*:go:*:*",
            "matchCriteriaId" : "F7FE647B-92E9-460E-BC22-BCDBE9144730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dragonflyoss/dragonfly/commit/9fb9a2dfde3100f32dc7f48eabee4c2b64eac55f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-j8hf-cp34-g4j7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24129",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T23:15:58.303",
      "lastModified" : "2026-02-26T21:38:33.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0."
      }, {
        "lang" : "es",
        "value" : "Runtipi es un orquestador de servidor doméstico personal basado en Docker que facilita múltiples servicios en un único servidor. Las versiones 3.7.0 y superiores permiten a un usuario autenticado ejecutar comandos de sistema arbitrarios en el servidor anfitrión inyectando metacaracteres de shell en los nombres de archivo de las copias de seguridad. El BackupManager no logra sanear los nombres de archivo de las copias de seguridad cargadas. El sistema persiste los archivos cargados por el usuario directamente en el sistema de archivos del anfitrión utilizando el 'originalname' en bruto proporcionado en la solicitud. Esto permite a un atacante preparar un archivo que contiene metacaracteres de shell (por ejemplo, $(id).tar.gz) en una ruta predecible, que luego se referencia durante el proceso de restauración. Al lograr almacenar el archivo,  permite que el comando de restauración posterior lo referencie y ejecute. Este problema ha sido solucionado en la versión 4.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runtipi:runtipi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "7AE4B49C-D816-47CE-9DBB-D65762BE8763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/runtipi/runtipi/commit/c3aa948885554a370d374692158a3bfe1cfdc85a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/runtipi/runtipi/releases/tag/v4.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/runtipi/runtipi/security/advisories/GHSA-vrgf-rcj5-6gv9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24130",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-22T23:15:58.477",
      "lastModified" : "2026-02-27T13:57:16.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the \"ldap\" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0."
      }, {
        "lang" : "es",
        "value" : "Moonraker es un servidor web Python que proporciona acceso API al firmware de impresión 3D Klipper. En las versiones 0.9.3 e inferiores, las instancias configuradas con el componente 'ldap' habilitado son vulnerables a técnicas de inyección de filtros de búsqueda LDAP a través del endpoint de inicio de sesión. El mensaje de respuesta de error 401 puede utilizarse para determinar si una búsqueda fue exitosa o no, permitiendo métodos de fuerza bruta para descubrir entradas LDAP en el servidor, como IDs de usuario y atributos de usuario. Este problema ha sido solucionado en la versión 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        }, {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arksine:moonraker:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "DC3E79B0-4D30-48F6-87F5-19439216A6AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Arksine/moonraker/commit/74c5d8e44c4a4abbfbb06fb991e7ebb9ac947f42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Arksine/moonraker/security/advisories/GHSA-3jqf-v4mv-747g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24305",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:58.667",
      "lastModified" : "2026-02-03T12:46:12.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Entra ID Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Elevación de Privilegios en Azure Entra ID"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:entra_id:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D09E509F-AFF3-4991-877A-D197388E7AD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24305",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24306",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:58.837",
      "lastModified" : "2026-02-27T13:44:45.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Azure Front Door (AFD) permite a un atacante no autorizado elevar privilegios sobre una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_front_door:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66AE777-ECFA-4FD1-A6B5-AD9E8181020A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24306",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24307",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-22T23:15:59.003",
      "lastModified" : "2026-02-12T17:29:54.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Validación incorrecta del tipo de entrada especificado en M365 Copilot permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A390D9-7457-430A-82CC-A24DA275BF06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24307",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20613",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-01-23T00:15:52.283",
      "lastModified" : "2026-01-27T20:17:18.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location on the system using relative pathnames. This issue is addressed in container 0.8.0 and containerization 0.21.0."
      }, {
        "lang" : "es",
        "value" : "La función ArchiveReader.extractContents() utilizada por cctl image load y contenedor image load no realiza ninguna validación de rutas antes de extraer un miembro del archivo. Esto significa que un archivo construido de forma descuidada o maliciosa puede extraer un archivo en cualquier ubicación escribible por el usuario en el sistema utilizando rutas relativas. Este problema se aborda en contenedor 0.8.0 y containerization 0.21.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "C6FA03D6-D8FD-484D-ABC3-C4E06F004E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:containerization:*:*:*:*:*:swift:*:*",
            "versionEndExcluding" : "0.21.0",
            "matchCriteriaId" : "1FE4C5FD-62B9-4CCC-90EA-065CDF156FFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apple/containerization/security/advisories/GHSA-cq3j-qj2h-6rv3",
        "source" : "product-security@apple.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24132",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-23T00:15:52.403",
      "lastModified" : "2026-02-27T19:00:40.547",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions \n7.19.0 and below and 8.0.0-rc.0 through 8.0.2 allow untrusted OpenAPI specifications to inject arbitrary TypeScript/JavaScript into generated mock files via the const keyword on schema properties. These const values are interpolated into the mock scalar generator (getMockScalar in packages/mock/src/faker/getters/scalar.ts) without proper escaping or type-safe serialization, which results in attacker-controlled code being emitted into both interface definitions and faker/MSW handlers. The vulnerability is similar in impact to the previously reported enum x-enumDescriptions (GHSA-h526-wf6g-67jv), but it affects a different code path in the faker-based mock generator rather than @orval/core. The issue has been fixed in versions 7.20.0 and 8.0.3."
      }, {
        "lang" : "es",
        "value" : "Orval genera clientes JS con seguridad de tipos (TypeScript) a partir de cualquier especificación OpenAPI v3 o Swagger v2 válida. Las versiones 7.19.0 e inferiores y de la 8.0.0-rc.0 a la 8.0.2 permiten que especificaciones OpenAPI no confiables inyecten TypeScript/JavaScript arbitrario en archivos mock generados a través de la palabra clave const en las propiedades del esquema. Estos valores const se interpolan en el generador escalar mock (getMockScalar en packages/mock/src/faker/getters/scalar.ts) sin un escape adecuado o serialización con seguridad de tipos, lo que resulta en código controlado por el atacante siendo emitido tanto en las definiciones de interfaz como en los manejadores de faker/MSW. La vulnerabilidad es similar en impacto a la previamente reportada enum x-enumDescriptions (GHSA-h526-wf6g-67jv), pero afecta una ruta de código diferente en el generador mock basado en faker en lugar de @orval/core. El problema ha sido solucionado en las versiones 7.20.0 y 8.0.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "7.20.0",
            "matchCriteriaId" : "58823C13-79AA-42F4-8F1F-E045A6C80548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "9EE654F7-9C50-4514-AB35-B1E38D04F231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orval-labs/orval/commit/44ca8c1f5f930a3e4cefb6b79b38bcde7f8532a5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/commit/6d8ece07ccb80693ad43edabccb3957aceadcd06",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/commit/9b211cddc9f009f8a671e4ac5c6cb72cd8646b62",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/pull/2828",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/pull/2829",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/pull/2830",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/releases/tag/v7.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/releases/tag/v8.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/security/advisories/GHSA-f456-rf33-4626",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24137",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-23T00:15:52.553",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client (pkg/tuf/client.go) supports caching target files to disk. It constructs a filesystem path by joining a cache base directory with a target name sourced from signed target metadata; however, it does not validate that the resulting path stays within the cache base directory. A malicious TUF repository can trigger arbitrary file overwriting, limited to the permissions that the calling process has. Note that this should only affect clients that are directly using the TUF client in sigstore/sigstore or are using an older version of Cosign. Public Sigstore deployment users are unaffected, as TUF metadata is validated by a quorum of trusted collaborators. This issue has been fixed in version 1.10.4. As a workaround, users can disable disk caching for the legacy client by setting SIGSTORE_NO_CACHE=true in the environment, migrate to https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf, or upgrade to the latest sigstore/sigstore release."
      }, {
        "lang" : "es",
        "value" : "El framework sigstore es una librería go común compartida entre los servicios y clientes de sigstore. En las versiones 1.10.3 e inferiores, el cliente TUF heredado (pkg/tuf/client.go) admite el almacenamiento en caché de archivos objetivo en disco. Construye una ruta del sistema de archivos uniendo un directorio base de caché con un nombre de objetivo obtenido de metadatos de objetivo firmados; sin embargo, no valida que la ruta resultante permanezca dentro del directorio base de caché. Un repositorio TUF malicioso puede desencadenar la sobrescritura arbitraria de archivos, limitada a los permisos que tiene el proceso que realiza la llamada. Tenga en cuenta que esto solo debería afectar a los clientes que están utilizando directamente el cliente TUF en sigstore/sigstore o están utilizando una versión anterior de Cosign. Los usuarios de implementaciones públicas de Sigstore no se ven afectados, ya que los metadatos de TUF son validados por un quórum de colaboradores de confianza. Este problema ha sido solucionado en la versión 1.10.4. Como solución alternativa, los usuarios pueden deshabilitar el almacenamiento en caché en disco para el cliente heredado configurando SIGSTORE_NO_CACHE=true en el entorno, migrar a https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf, o actualizar a la última versión de sigstore/sigstore."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/sigstore/commit/8ec410a2993ea78083aecf0e473a85453039496e",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/sigstore/sigstore/releases/tag/v1.10.4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/sigstore/sigstore/security/advisories/GHSA-fcv2-xgw5-pqxf",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24138",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-23T01:15:51.023",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1754 and below contain an unauthenticated SSRF vulnerability in getversion.php which can be triggered by providing a user-controlled url parameter. It can be used to fetch both internal websites and files on the machine running FOG. This appears to be reachable without an authenticated web session when the request includes newService=1. The issue does not have a fixed release version at the time of publication."
      }, {
        "lang" : "es",
        "value" : "FOG es un sistema de gestión de inventario/suite de clonación/creación de imágenes/rescate de código abierto gratuito. Las versiones 1.5.10.1754 e inferiores contienen una vulnerabilidad SSRF no autenticada en getversion.php que puede ser activada al proporcionar un parámetro de URL controlado por el usuario. Puede ser utilizada para obtener tanto sitios web internos como archivos en la máquina que ejecuta FOG. Esto parece ser alcanzable sin una sesión web autenticada cuando la solicitud incluye newService=1. El problema no tiene una versión de lanzamiento corregida en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FOGProject/fogproject/security/advisories/GHSA-79xw-c2qx-g7xj",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24304",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-23T02:15:55.547",
      "lastModified" : "2026-02-12T17:23:04.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Azure Resource Manager permite a un atacante autorizado escalar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_resource_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C0D61C-CC26-4E98-B9E9-F51DCCD8E93F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24304",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0710",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-01-23T04:16:01.860",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in SIPp. A remote attacker could exploit this by sending specially crafted Session Initiation Protocol (SIP) messages during an active call. This vulnerability, a NULL pointer dereference, can cause the application to crash, leading to a denial of service. Under specific conditions, it may also allow an attacker to execute unauthorized code, compromising the system's integrity and availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en SIPp. Un atacante remoto podría explotar esto enviando mensajes del Protocolo de Iniciación de Sesión (SIP) especialmente diseñados durante una llamada activa. Esta vulnerabilidad, una desreferencia de puntero NULL, puede provocar el bloqueo de la aplicación, lo que lleva a una denegación de servicio. Bajo condiciones específicas, también podría permitir a un atacante ejecutar código no autorizado, comprometiendo la integridad y disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0710",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427788",
        "source" : "patrick@puiterwijk.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0755",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.017",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the execAsync method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27783."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en gemini-mcp-tool execAsync. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de gemini-mcp-tool. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la implementación del método execAsync. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-27783."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-021/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0756",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.157",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of github-kanban-mcp-server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the create_issue parameter. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27784."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código execAsync en github-kanban-mcp-server. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de github-kanban-mcp-server. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe en el manejo del parámetro create_issue. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-27784."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-022/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0757",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.297",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability. This vulnerability allows remote attackers to bypass the sandbox on affected installations of MCP Manager for Claude Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the processing of MCP config objects. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escape the sandbox and execute arbitrary code in the context of the current process at medium integrity. Was ZDI-CAN-27810."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y escape de sandbox por ejecución de comandos en MCP Manager para Claude Desktop. Esta vulnerabilidad permite a atacantes remotos eludir la sandbox en instalaciones afectadas de MCP Manager para Claude Desktop. Se requiere interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla específica reside en el procesamiento de objetos de configuración de MCP. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para escapar de la sandbox y ejecutar código arbitrario en el contexto del proceso actual con integridad media. Fue ZDI-CAN-27810."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-023/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0758",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.433",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of mcp-server-siri-shortcuts. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the shortcutName parameter. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-27910."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y escalada de privilegios shortcutName en mcp-server-siri-shortcuts. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de mcp-server-siri-shortcuts. Un atacante debe primero obtener la capacidad de ejecutar código con privilegios bajos en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del parámetro shortcutName. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de la cuenta de servicio. Fue ZDI-CAN-27910."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-024/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0759",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the executeCommand method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27786."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código executeCommand en Katana Network Development Starter Kit. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Katana Network Development Starter Kit. La autenticación no es necesaria para explotar esta vulnerabilidad.\n\nLa falla específica existe en la implementación del método executeCommand. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-27786."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-025/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0760",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.707",
      "lastModified" : "2026-02-20T13:42:12.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the deserialize_message function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28121."
      }, {
        "lang" : "es",
        "value" : "Foundation Agents MetaGPT deserialize_message Deserialización de Datos No Confiables Vulnerabilidad de Ejecución Remota de Código. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foundation Agents MetaGPT. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la función deserialize_message. El problema resulta de la falta de validación adecuada de datos proporcionados por el usuario, lo que puede resultar en deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28121."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepwisdom:metagpt:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E5C450-428D-4576-BCB3-622B8633EF67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-026/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0761",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.847",
      "lastModified" : "2026-02-20T13:41:55.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the actionoutput_str_to_mapping function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28124."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código de ejecución remota de código en Foundation Agents MetaGPT actionoutput_str_to_mapping. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foundation Agents MetaGPT. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside en la función actionoutput_str_to_mapping. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar código Python. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28124."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepwisdom:metagpt:0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E5C450-428D-4576-BCB3-622B8633EF67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-027/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0762",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:02.973",
      "lastModified" : "2026-02-18T16:41:56.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the stream_daas function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27956."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en GPT Academic stream_daas. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GPT Academic. Se requiere interacción con un servidor DAAS malicioso para explotar esta vulnerabilidad, pero los vectores de ataque pueden variar dependiendo de la implementación.\n\nLa falla específica existe dentro de la función stream_daas. El problema se debe a la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Fue ZDI-CAN-27956."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:binary-husky:gpt_academic:3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6552037-FD85-48BB-A474-C85A10783308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-028/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0763",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.110",
      "lastModified" : "2026-02-18T16:42:19.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the run_in_subprocess_wrapper_func function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27958."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en GPT Academic run_in_subprocess_wrapper_func. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GPT Academic. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la función run_in_subprocess_wrapper_func. El problema se debe a la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Fue ZDI-CAN-27958."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:binary-husky:gpt_academic:3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6552037-FD85-48BB-A474-C85A10783308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-029/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0764",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.250",
      "lastModified" : "2026-02-18T16:42:46.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the upload endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27957."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución Remota de Código por Deserialización de Datos No Confiables en la carga de GPT Academic. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GPT Academic. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del endpoint de carga. El problema resulta de la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Fue ZDI-CAN-27957."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:binary-husky:gpt_academic:3.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6552037-FD85-48BB-A474-C85A10783308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-030/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0765",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.390",
      "lastModified" : "2026-01-30T19:48:35.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the install_frontmatter_requirements function.The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28258."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en Open WebUI PIP install_frontmatter_requirements. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Open WebUI. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside dentro de la función install_frontmatter_requirements. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28258."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebui:open_webui:0.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5D5634-470E-499C-A7C3-A5FD7277D287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-031/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0766",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.527",
      "lastModified" : "2026-01-30T19:47:56.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the load_tool_module_by_id function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28257."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en load_tool_module_by_id de Open WebUI. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Open WebUI. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la función load_tool_module_by_id. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar código Python. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28257."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebui:open_webui:0.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5D5634-470E-499C-A7C3-A5FD7277D287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-032/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0767",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.660",
      "lastModified" : "2026-01-30T19:36:59.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Open WebUI. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of credentials provided to the endpoint. The issue results from transmitting sensitive information in plaintext. An attacker can leverage this vulnerability to disclose transmitted credentials, leading to further compromise. Was ZDI-CAN-28259."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información por transmisión de credenciales en texto claro en Open WebUI. Esta vulnerabilidad permite a atacantes adyacentes a la red revelar información sensible en instalaciones afectadas de Open WebUI. La autenticación no es necesaria para explotar esta vulnerabilidad.\n\nLa falla específica reside en el manejo de las credenciales proporcionadas al endpoint. El problema se debe a la transmisión de información sensible en texto claro. Un atacante puede aprovechar esta vulnerabilidad para revelar credenciales transmitidas, lo que lleva a un mayor compromiso. Fue ZDI-CAN-28259."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebui:open_webui:0.6.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5D5634-470E-499C-A7C3-A5FD7277D287"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-033/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0768",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.800",
      "lastModified" : "2026-02-18T16:43:11.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-27322."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de código y ejecución remota de código en Langflow. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Langflow. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe en el manejo del parámetro code proporcionado al endpoint validate. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar código Python. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Fue ZDI-CAN-27322."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81AAA7F9-843A-456C-89A1-B99D18AD4328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-034/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0769",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:03.933",
      "lastModified" : "2026-02-18T16:43:31.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of eval_custom_component_code function. The issue results from the lack of proper validation of a user-supplied string before using it to execute python code. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26972."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por inyección de eval en Langflow eval_custom_component_code. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Langflow. La autenticación no es necesaria para explotar esta vulnerabilidad.\n\nLa falla específica reside en la implementación de la función eval_custom_component_code. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar código Python. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-26972."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BBE2B7A-5520-4886-8087-E6A96ABC0BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-035/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0770",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.063",
      "lastModified" : "2026-02-18T16:43:44.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325."
      }, {
        "lang" : "es",
        "value" : "Langflow exec_globals Inclusión de Funcionalidad desde Esfera de Control No Confiable Vulnerabilidad de Ejecución Remota de Código. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Langflow. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del manejo del parámetro exec_globals proporcionado al endpoint validate. El problema resulta de la inclusión de un recurso desde una esfera de control no confiable. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Fue ZDI-CAN-27325."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81AAA7F9-843A-456C-89A1-B99D18AD4328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-036/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0771",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.200",
      "lastModified" : "2026-02-18T19:05:10.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product.\n\nThe specific flaw exists within the handling of Python function components. Depending upon product configuration, an attacker may be able to introduce custom Python code into a workflow. An attacker can leverage this vulnerability to execute code in the context of the application. Was ZDI-CAN-27497."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inyección de Código PythonFunction de Langflow con Ejecución Remota de Código. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Langflow. Los vectores de ataque y la explotabilidad variarán dependiendo de la configuración del producto.\n\nLa falla específica existe dentro del manejo de los componentes de función Python. Dependiendo de la configuración del producto, un atacante podría ser capaz de introducir código Python personalizado en un flujo de trabajo. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la aplicación. Fue ZDI-CAN-27497."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:1.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81AAA7F9-843A-456C-89A1-B99D18AD4328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-037/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0772",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.333",
      "lastModified" : "2026-02-18T19:05:00.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the disk cache service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27919."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución Remota de Código por Deserialización de Datos No Confiables en la Caché de Disco de Langflow. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Langflow. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del servicio de caché de disco. El problema resulta de la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-27919."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:1.5.0:dev2:*:*:*:*:*:*",
            "matchCriteriaId" : "D9126CC7-6E41-43A5-8988-BB2755F74AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-038/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0773",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.493",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Upsonic. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the add_tool endpoint, which listens on TCP port 7541 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26845."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución Remota de Código por Deserialización de Datos No Confiables en Upsonic Cloudpickle. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Upsonic. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del endpoint add_tool, que escucha en el puerto TCP 7541 por defecto. El problema resulta de la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-26845."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-042/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0774",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchYourLAN. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the arpstrs parameter. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26708."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por inyección de argumentos en la página de configuración de WatchYourLAN. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en instalaciones afectadas de WatchYourLAN. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside en el manejo del parámetro arpstrs. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-26708."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-039/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0775",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.793",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the handling of modules. The application loads modules from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25430."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de privilegios local por asignación incorrecta de permisos en npm cli. Esta vulnerabilidad permite a los atacantes locales escalar privilegios en instalaciones afectadas de npm cli. Un atacante debe primero obtener la capacidad de ejecutar código con privilegios bajos en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla específica existe en el manejo de módulos. La aplicación carga módulos desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de un usuario objetivo. Fue ZDI-CAN-25430."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-043/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0776",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:04.933",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the discord_rpc module. The product loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-27057."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de privilegios local por elemento de ruta de búsqueda no controlado en el Cliente de Discord. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas del Cliente de Discord. Un atacante debe primero obtener la capacidad de ejecutar código con privilegios bajos en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del módulo discord_rpc. El producto carga un archivo desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de un usuario objetivo. Fue ZDI-CAN-27057."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-040/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0778",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.073",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the telnet service, which listens on TCP port 2000 by default. The issue results from the lack of authentication prior to allowing remote connections. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23285."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por falta de autenticación en el servicio Telnet de Enel X JuiceBox 40. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en instalaciones afectadas de estaciones de carga Enel X JuiceBox 40. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del servicio Telnet, que escucha en el puerto TCP 2000 por defecto. El problema resulta de la falta de autenticación antes de permitir conexiones remotas. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-23285."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-041/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0779",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.210",
      "lastModified" : "2026-02-18T19:04:41.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-25568."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos Ping con ejecución remota de código en ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-25568."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-001/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0780",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.357",
      "lastModified" : "2026-02-13T21:02:18.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28289."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside en la interfaz de usuario basada en web. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28289."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-002/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0781",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.490",
      "lastModified" : "2026-02-13T21:02:34.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28290."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28290."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-003/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0782",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.637",
      "lastModified" : "2026-02-13T20:59:25.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28291."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28291."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-004/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0783",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.770",
      "lastModified" : "2026-02-13T20:44:20.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28292."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28292."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-005/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0784",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:05.907",
      "lastModified" : "2026-02-13T20:44:11.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28293."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de in inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside en la interfaz de usuario basada en web. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28293."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-006/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0785",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.047",
      "lastModified" : "2026-02-18T19:04:28.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the API interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28294."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la API de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de la API. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28294."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-007/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0786",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.180",
      "lastModified" : "2026-02-18T16:46:34.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the SCI module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28295."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos SCI y ejecución remota de código en ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del módulo SCI. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28295."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-008/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0787",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.317",
      "lastModified" : "2026-02-18T19:04:13.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the SAC module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28296."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en el módulo SAC de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside en el módulo SAC. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de utilizarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28296."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-009/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0788",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.447",
      "lastModified" : "2026-02-13T21:09:41.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability. This vulnerability allows remote attackers to execute web requests with a target user's privileges on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the functionality for viewing the syslog. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to interact with the application in the context of the target user. Was ZDI-CAN-28298."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting Persistente en la UI web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar solicitudes web con los privilegios de un usuario objetivo en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. No se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la funcionalidad para ver el syslog. El problema resulta de la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede llevar a la inyección de un script arbitrario. Un atacante puede aprovechar esta vulnerabilidad para interactuar con la aplicación en el contexto del usuario objetivo. Fue ZDI-CAN-28298."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-010/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0789",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.580",
      "lastModified" : "2026-02-13T21:09:50.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper management of sensitive information. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28297."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información por inclusión de cookie de autenticación en el cuerpo de la respuesta en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos revelar información sensible en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema resulta de la falta de gestión adecuada de información sensible. Un atacante puede aprovechar esta vulnerabilidad para revelar información en el contexto del dispositivo. Fue ZDI-CAN-28297."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-011/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0790",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.720",
      "lastModified" : "2026-02-13T20:32:36.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información por solicitud directa en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos revelar información sensible en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. Al navegar directamente a una URL, un usuario puede obtener acceso no autorizado a datos. Un atacante puede aprovechar esta vulnerabilidad para revelar información en el contexto del dispositivo. Fue ZDI-CAN-28299."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-012/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0791",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.857",
      "lastModified" : "2026-02-18T18:52:53.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the Replaces header of SIP INVITE requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28300."
      }, {
        "lang" : "es",
        "value" : "ALGO 8180 IP Audio Alerter SIP INVITE Replaces Vulnerabilidad de ejecución remota de código por desbordamiento de búfer basado en pila. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del manejo del encabezado Replaces de las solicitudes SIP INVITE. El problema resulta de la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en pila de longitud fija. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28300."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-013/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0792",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:06.987",
      "lastModified" : "2026-02-18T18:52:15.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the Alert-Info header of SIP INVITE requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28301."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basado en pila con ejecución remota de código en Alert-Info de SIP INVITE de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro del manejo del encabezado Alert-Info de solicitudes SIP INVITE. El problema resulta de la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en pila de longitud fija. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28301."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-014/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0793",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:07.123",
      "lastModified" : "2026-02-18T18:51:47.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the InformaCast functionality. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28302."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por desbordamiento de búfer basado en montículo en ALGO 8180 IP Audio Alerter InformaCast. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es necesaria para explotar esta vulnerabilidad.\n\nLa falla específica reside en la funcionalidad InformaCast. El problema se debe a la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en montículo. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28302."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-015/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0794",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:07.250",
      "lastModified" : "2026-02-18T18:51:30.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of SIP calls. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28303."
      }, {
        "lang" : "es",
        "value" : "ALGO 8180 IP Audio Alerter SIP Vulnerabilidad de ejecución remota de código por uso después de liberación. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe en el manejo de llamadas SIP. El problema resulta de la falta de validación de la existencia de un objeto antes de realizar operaciones sobre el objeto. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28303."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-016/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0795",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:07.387",
      "lastModified" : "2026-02-18T18:51:11.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28321."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28321."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-017/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0796",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-01-23T04:16:07.523",
      "lastModified" : "2026-02-13T20:43:52.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-28322."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del dispositivo. Fue ZDI-CAN-28322."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853BF5C9-122B-4F47-9CE7-DA3E307130ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A20E73F-D499-4973-ADDE-8B702E6F5254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-018/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24334",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:32.257",
      "lastModified" : "2026-01-23T05:16:32.257",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24335",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:32.690",
      "lastModified" : "2026-01-23T05:16:32.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24336",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:32.823",
      "lastModified" : "2026-01-23T05:16:32.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24337",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:32.930",
      "lastModified" : "2026-01-23T05:16:32.930",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24338",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:33.037",
      "lastModified" : "2026-01-23T05:16:33.037",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24339",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:33.187",
      "lastModified" : "2026-01-23T05:16:33.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24340",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:33.313",
      "lastModified" : "2026-01-23T05:16:33.313",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24341",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:33.437",
      "lastModified" : "2026-01-23T05:16:33.437",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24342",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-23T05:16:33.570",
      "lastModified" : "2026-01-23T05:16:33.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0927",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-23T06:15:50.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization checks in the uploadMedicalReport() function in all versions up to, and including, 3.6.15. This makes it possible for unauthenticated attackers to upload text files and PDF documents to the affected site's server which may be leveraged for further attacks such as hosting malicious content or phishing pages via PDF files."
      }, {
        "lang" : "es",
        "value" : "El plugin KiviCare – Sistema de Gestión de Clínicas y Pacientes (EHR) para WordPress es vulnerable a subidas arbitrarias de archivos debido a la falta de comprobaciones de autorización en la función uploadMedicalReport() en todas las versiones hasta la 3.6.15, inclusive. Esto hace posible que atacantes no autenticados suban archivos de texto y documentos PDF al servidor del sitio afectado, lo que puede ser aprovechado para ataques adicionales como alojar contenido malicioso o páginas de phishing a través de archivos PDF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/kivicare-clinic-management-system/tags/3.6.15/app/controllers/KCAppointmentController.php#L1328",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kivicare-clinic-management-system/trunk/app/controllers/KCAppointmentController.php#L1328",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3443088/kivicare-clinic-management-system/trunk/app/controllers/KCAppointmentController.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/489931ef-bac3-4de8-84ec-6f226d96f778?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0603",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-23T07:15:53.660",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en Hibernate. Un atacante remoto con pocos privilegios podría explotar una vulnerabilidad de inyección SQL de segundo orden al proporcionar caracteres no alfanuméricos especialmente diseñados y no saneados en la columna ID cuando se utiliza el InlineIdsOrClauseBuilder. Esto podría llevar a la revelación de información sensible, como la lectura de archivos del sistema, y permitir la manipulación o eliminación de datos dentro de la base de datos de la aplicación, lo que resultaría en una denegación de servicio a nivel de aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:4915",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:4916",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:4917",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:4924",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:6011",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:6012",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0603",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427147",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-23T08:16:01.490",
      "lastModified" : "2026-02-05T17:27:53.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data."
      }, {
        "lang" : "es",
        "value" : "En libexpat anterior a 2.7.4, XML_ExternalEntityParserCreate no copia los datos de usuario del manejador de codificación desconocido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.4",
            "matchCriteriaId" : "8506CE35-F4E2-420E-99FB-FC24254BF7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libexpat/libexpat/pull/1131",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1363",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-23T09:15:47.430",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IAQS and I6 developed by JNC has a Client-Side Enforcement of Server-Side Security vulnerability, allowing unauthenticated remote attackers to gain administrator privileges by manipulating the web front-end."
      }, {
        "lang" : "es",
        "value" : "IAQS e I6 desarrollados por JNC tienen una vulnerabilidad de imposición de seguridad del lado del servidor en el lado del cliente, permitiendo a atacantes remotos no autenticados obtener privilegios de administrador manipulando el front-end web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-603"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10653-117a1-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10652-4cdca-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1364",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-23T09:15:47.643",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IAQS and I6 developed by JNC has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly operate system administrative functionalities."
      }, {
        "lang" : "es",
        "value" : "IAQS e I6 desarrollados por JNC tienen una vulnerabilidad de autenticación faltante, permitiendo a atacantes remotos, no autenticados, operar directamente funcionalidades de administración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10653-117a1-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10652-4cdca-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22271",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-23T09:15:48.030",
      "lastModified" : "2026-02-18T13:55:05.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure."
      }, {
        "lang" : "es",
        "value" : "Dell ECS, versiones 3.8.1.0 a 3.8.1.7, y Dell ObjectScale versiones anteriores a 4.2.0.0, contiene una vulnerabilidad de Transmisión de Información Sensible en Texto Claro. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la exposición de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.1.0",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "8FFE0BD5-DC60-46D3-9A26-6E82DBB982EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "25F884EC-C7A1-4734-8C17-08BFF2046175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22273",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-23T10:15:53.317",
      "lastModified" : "2026-02-18T13:55:12.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell ECS, versiones 3.8.1.0 hasta 3.8.1.7, y Dell ObjectScale versiones anteriores a 4.2.0.0, contiene una vulnerabilidad de Uso de Credenciales por Defecto en el SO. Un atacante con pocos privilegios con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.1.0",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "8FFE0BD5-DC60-46D3-9A26-6E82DBB982EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "25F884EC-C7A1-4734-8C17-08BFF2046175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22274",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-23T10:15:53.480",
      "lastModified" : "2026-02-18T13:55:35.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit."
      }, {
        "lang" : "es",
        "value" : "Dell ECS, versiones 3.8.1.0 a 3.8.1.7, y Dell ObjectScale versiones anteriores a 4.2.0.0, contiene una vulnerabilidad de Transmisión en Texto Plano de Información Sensible en el Syslog de Fabric. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad para interceptar y modificar información en tránsito."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.1.0",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "8FFE0BD5-DC60-46D3-9A26-6E82DBB982EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "25F884EC-C7A1-4734-8C17-08BFF2046175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22275",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-23T10:15:53.643",
      "lastModified" : "2026-02-18T13:55:42.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information in Source Code vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure."
      }, {
        "lang" : "es",
        "value" : "Dell ECS, versiones 3.8.1.0 hasta 3.8.1.7, y Dell ObjectScale versiones anteriores a 4.2.0.0, contiene una vulnerabilidad de Inclusión de Información Sensible en el Código Fuente. Un atacante con pocos privilegios con acceso local podría potencialmente explotar esta vulnerabilidad, lo que lleva a la exposición de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-540"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.1.0",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "8FFE0BD5-DC60-46D3-9A26-6E82DBB982EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "25F884EC-C7A1-4734-8C17-08BFF2046175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22276",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-23T10:15:53.800",
      "lastModified" : "2026-02-18T13:57:44.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure."
      }, {
        "lang" : "es",
        "value" : "Dell ECS, versiones 3.8.1.0 a 3.8.1.7, y Dell ObjectScale versiones anteriores a 4.2.0.0, contiene una vulnerabilidad de almacenamiento de información sensible en texto claro. Un atacante con pocos privilegios con acceso local podría, potencialmente, explotar esta vulnerabilidad, lo que llevaría a la revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.1.0",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "8FFE0BD5-DC60-46D3-9A26-6E82DBB982EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0.0",
            "matchCriteriaId" : "25F884EC-C7A1-4734-8C17-08BFF2046175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0914",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-23T13:15:49.530",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lw_content_block' shortcode in all versions up to, and including, 3.1.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP DSGVO Tools (GDPR) para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'lw_content_block' del plugin en todas las versiones hasta la 3.1.36, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/shapepress-dsgvo/tags/3.1.35/public/shortcodes/content-block-shortcode.php#L17",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3440083/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4474c79b-f93a-4725-8345-ad5c5260913c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0994",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2026-01-23T15:16:06.840",
      "lastModified" : "2026-04-09T14:19:17.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de denegación de servicio (DoS) en google.protobuf.json_format.ParseDict() en Python, donde el límite max_recursion_depth puede ser evitado al analizar mensajes anidados de google.protobuf.Any.\n\nDebido a que no se contabiliza la profundidad de recursión dentro de la lógica interna de manejo de Any, un atacante puede proporcionar estructuras Any profundamente anidadas que evitan el límite de recursión previsto, agotando finalmente la pila de recursión de Python y causando un RecursionError."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:protobuf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "33.4",
            "matchCriteriaId" : "CF0F8C1C-5CDF-4758-864F-FFF2CBF7B00C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/protocolbuffers/protobuf/pull/25239",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24521",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:07.750",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Timur Kamaev Kama Thumbnail kama-thumbnail allows Cross Site Request Forgery.This issue affects Kama Thumbnail: from n/a through <= 3.5.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Timur Kamaev Kama Thumbnail kama-thumbnail permite falsificación de petición en sitios cruzados. Este problema afecta a Kama Thumbnail: desde n/a hasta &lt;= 3.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/kama-thumbnail/vulnerability/wordpress-kama-thumbnail-plugin-3-5-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24522",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:07.900",
      "lastModified" : "2026-04-28T15:16:09.873",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through <= 1.2.16."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en MyThemeShop WP Subscribe wp-subscribe permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Subscribe: desde n/a hasta &lt;= 1.2.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-subscribe/vulnerability/wordpress-wp-subscribe-plugin-1-2-16-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24523",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.047",
      "lastModified" : "2026-04-28T15:16:10.037",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada en Marcus (también conocido como @msykes) WP FullCalendar wp-fullcalendar permite Recuperar Datos Sensibles Incrustados. Este problema afecta a WP FullCalendar: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-fullcalendar/vulnerability/wordpress-wp-fullcalendar-plugin-1-6-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24524",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.200",
      "lastModified" : "2026-04-28T15:16:10.180",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.2.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Essekia Tablesome tablesome permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a Tablesome: desde n/a hasta &lt;= 1.1.35.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/tablesome/vulnerability/wordpress-tablesome-plugin-1-1-35-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24525",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.340",
      "lastModified" : "2026-04-28T15:16:10.333",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CLP Varnish Cache: from n/a through <= 1.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en CloudPanel CLP Varnish Cache clp-varnish-cache permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a CLP Varnish Cache: desde n/a hasta &lt;= 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/clp-varnish-cache/vulnerability/wordpress-clp-varnish-cache-plugin-1-0-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24526",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.497",
      "lastModified" : "2026-04-28T19:36:48.497",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a through <= 3.5.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Steve Truman Email Inquiry &amp; Cart Options para WooCommerce woocommerce-email-inquiry-cart-options permite XSS basado en DOM. Este problema afecta a Email Inquiry &amp; Cart Options para WooCommerce: desde n/a hasta &lt;= 3.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woocommerce-email-inquiry-cart-options/vulnerability/wordpress-email-inquiry-cart-options-for-woocommerce-plugin-3-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24528",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.640",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade Nova Blocks nova-blocks allows DOM-Based XSS.This issue affects Nova Blocks: from n/a through <= 2.1.9."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en pixelgrade Nova Blocks nova-blocks permite XSS basado en DOM. Este problema afecta a Nova Blocks: desde n/a hasta &lt;= 2.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/nova-blocks/vulnerability/wordpress-nova-blocks-plugin-2-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24529",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Alejandro Quick Restaurant Reservations quick-restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Restaurant Reservations: from n/a through <= 1.6.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Alejandro Quick Restaurant Reservations quick-restaurant-reservations permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Quick Restaurant Reservations: desde n/a hasta &lt;= 1.6.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/quick-restaurant-reservations/vulnerability/wordpress-quick-restaurant-reservations-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24530",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:08.993",
      "lastModified" : "2026-04-28T15:16:10.697",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through <= 2.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por ausencia de autorización en sheepfish WebP Conversion webp-conversion permite explotar niveles de seguridad de control de acceso mal configurados. Este problema afecta a WebP Conversion: desde n/a hasta &lt;= 2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/webp-conversion/vulnerability/wordpress-webp-conversion-plugin-2-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24531",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:09.127",
      "lastModified" : "2026-04-28T15:16:10.840",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through <= 2.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en Select-Themes Prowess prowess permite la Inclusión Local de Ficheros PHP. Este problema afecta a Prowess: desde n/a hasta &lt;= 2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/prowess/vulnerability/wordpress-prowess-theme-2-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24532",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:09.273",
      "lastModified" : "2026-04-28T15:16:10.983",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security – WP Hardening, Login Security & Malware Scans: from n/a through <= 5.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por autorización faltante en SiteLock SiteLock Security sitelock permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a SiteLock Security: desde n/a hasta &lt;= 5.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sitelock/vulnerability/wordpress-sitelock-security-plugin-5-0-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24534",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:09.427",
      "lastModified" : "2026-04-28T15:16:11.133",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in uPress Booter booter-bots-crawlers-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booter: from n/a through <= 1.5.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en uPress Booter booter-bots-crawlers-manager permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Booter: desde n/a hasta &lt;= 1.5.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/booter-bots-crawlers-manager/vulnerability/wordpress-booter-plugin-1-5-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24535",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:09.577",
      "lastModified" : "2026-04-28T15:16:11.270",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through <= 1.2.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Automatic Featured Images from Videos: desde n/a hasta &lt;= 1.2.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/automatic-featured-images-from-videos/vulnerability/wordpress-automatic-featured-images-from-videos-plugin-1-2-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24536",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:09.733",
      "lastModified" : "2026-04-28T15:16:11.420",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webpushr Webpushr webpushr-web-push-notifications allows Retrieve Embedded Sensitive Data.This issue affects Webpushr: from n/a through <= 4.38.0."
      }, {
        "lang" : "es",
        "value" : "Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada  en webpushr Webpushr webpushr-web-push-notifications permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Webpushr: desde n/a hasta &lt;= 4.38.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/webpushr-web-push-notifications/vulnerability/wordpress-webpushr-plugin-4-38-0-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24538",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:09.893",
      "lastModified" : "2026-04-28T15:16:11.560",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: from n/a through <= 1.6.7."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control Inadecuado del Nombre de Fichero para la Declaración Include/Require en el Programa PHP ('Inclusión Remota de Ficheros PHP') en omnipressteam Omnipress omnipress permite la Inclusión Local de Ficheros PHP. Este problema afecta a Omnipress: desde n/a hasta &lt;= 1.6.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/omnipress/vulnerability/wordpress-omnipress-plugin-1-6-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24539",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.050",
      "lastModified" : "2026-04-28T19:36:49.110",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos – RGPD: from n/a through <= 0.68."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Falta de Autorización en ABCdatos Protección de datos – RGPD proteccion-datos-rgpd permite Explotar Niveles de Seguridad de Control de Acceso Mal Configurados. Este problema afecta a Protección de datos – RGPD: desde n/a hasta &lt;= 0.68."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/proteccion-datos-rgpd/vulnerability/wordpress-proteccion-de-datos-rgpd-plugin-0-68-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24540",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.203",
      "lastModified" : "2026-04-28T15:16:11.843",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through <= 1.5.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en Prince Integrate Google Drive integrate-google-drive permite explotar Niveles de Seguridad de Control de Acceso incorrectamente configurados. Este problema afecta a Integrate Google Drive: desde n/a hasta &lt;= 1.5.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/integrate-google-drive/vulnerability/wordpress-integrate-google-drive-plugin-1-5-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24541",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.350",
      "lastModified" : "2026-04-28T15:16:11.980",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in mkscripts Download After Email download-after-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download After Email: from n/a through <= 2.1.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en mkscripts Download After Email download-after-email permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Download After Email: desde n/a hasta &lt;= 2.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/download-after-email/vulnerability/wordpress-download-after-email-plugin-2-1-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24542",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.497",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in John James Jacoby WP Term Order wp-term-order allows Cross Site Request Forgery.This issue affects WP Term Order: from n/a through <= 2.1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en John James Jacoby WP Term Order wp-term-order permite la falsificación de petición en sitios cruzados. Este problema afecta a WP Term Order: desde n/a hasta &lt;= 2.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-term-order/vulnerability/wordpress-wp-term-order-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24543",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.637",
      "lastModified" : "2026-04-28T15:16:12.327",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Horea Radu Materialis Companion materialis-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Materialis Companion: from n/a through <= 1.3.52."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Horea Radu Materialis Companion materialis-companion permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a Materialis Companion: desde n/a hasta &lt;= 1.3.52."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/materialis-companion/vulnerability/wordpress-materialis-companion-plugin-1-3-52-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24544",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through <= 2.0.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Harmonic Design HD Quiz hd-quiz permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a HD Quiz: desde n/a hasta &lt;= 2.0.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/hd-quiz/vulnerability/wordpress-hd-quiz-plugin-2-0-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24548",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:10.940",
      "lastModified" : "2026-04-28T15:16:12.823",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through <= 2.0.91."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Prince Radio Player radio-player permite falsificación de petición del lado del servidor. Este problema afecta a Radio Player: desde n/a hasta &lt;= 2.0.91."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/radio-player/vulnerability/wordpress-radio-player-plugin-2-0-91-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24549",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:11.227",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Paolo GeoDirectory permite la falsificación de petición en sitios cruzados. Este problema afecta a GeoDirectory: desde n/a antes de 2.8.150."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/geodirectory/vulnerability/wordpress-geodirectory-plugin-2-8-147-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24550",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:11.547",
      "lastModified" : "2026-04-28T15:16:13.130",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaira Blockons blockons allows Stored XSS.This issue affects Blockons: from n/a through <= 1.2.19."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Kaira Blockons blockons permite XSS Almacenado. Este problema afecta a Blockons: desde n/a hasta &lt;= 1.2.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/blockons/vulnerability/wordpress-blockons-plugin-1-2-15-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24551",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:11.717",
      "lastModified" : "2026-04-28T15:16:13.283",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in monetagwp Monetag Official Plugin monetag-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Monetag Official Plugin: from n/a through <= 1.1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en el plugin oficial de Monetag monetagwp monetag-official permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta al plugin oficial de Monetag: desde n/d hasta &lt;= 1.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/monetag-official/vulnerability/wordpress-monetag-official-plugin-plugin-1-1-3-broken-access-control-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24553",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:11.890",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Retrieve Embedded Sensitive Data.This issue affects Fraud Prevention For Woocommerce: from n/a through <= 2.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada en Dotstore Fraud Prevention para Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Fraud Prevention para Woocommerce: desde n/a hasta &lt;= 2.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers/vulnerability/wordpress-fraud-prevention-for-woocommerce-plugin-2-3-1-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24555",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:12.210",
      "lastModified" : "2026-04-28T15:16:13.530",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through <= 2.23.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en artplacer ArtPlacer Widget artplacer-widget permite XSS Almacenado. Este problema afecta a ArtPlacer Widget: desde n/a hasta &lt;= 2.23.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/artplacer-widget/vulnerability/wordpress-artplacer-widget-plugin-2-23-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24556",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:12.430",
      "lastModified" : "2026-04-28T15:16:13.693",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementCamp: from n/a through <= 2.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en wpdive ElementCamp element-camp permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a ElementCamp: desde n/a hasta &lt;= 2.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/element-camp/vulnerability/wordpress-elementcamp-plugin-2-3-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24557",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:12.870",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in WEN Solutions Contact Form 7 GetResponse Extension contact-form-7-getresponse-extension allows Retrieve Embedded Sensitive Data.This issue affects Contact Form 7 GetResponse Extension: from n/a through <= 1.0.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inserción de Información Sensible en Datos Enviados en la extensión WEN Solutions Contact Form 7 GetResponse (contact-form-7-getresponse-extension) permite Recuperar Datos Sensibles Incrustados. Este problema afecta a la extensión Contact Form 7 GetResponse: desde n/a hasta &lt;= 1.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/contact-form-7-getresponse-extension/vulnerability/wordpress-contact-form-7-getresponse-extension-plugin-1-0-8-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24558",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.043",
      "lastModified" : "2026-04-28T15:16:13.937",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in antoniobg ABG Rich Pins abg-rich-pins allows Stored XSS.This issue affects ABG Rich Pins: from n/a through <= 1.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') en antoniobg ABG Rich Pins abg-rich-pins permite XSS Almacenado. Este problema afecta a ABG Rich Pins: desde n/d hasta &lt;= 1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/abg-rich-pins/vulnerability/wordpress-abg-rich-pins-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24559",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.187",
      "lastModified" : "2026-04-28T15:16:14.077",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Retrieve Embedded Sensitive Data.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.3."
      }, {
        "lang" : "es",
        "value" : "Inserción de Información Sensible en Datos Enviados en la integración CRM Perks para Contact Form 7 HubSpot cf7-hubspot permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Integración para Contact Form 7 HubSpot: desde n/a hasta &lt;= 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cf7-hubspot/vulnerability/wordpress-integration-for-contact-form-7-hubspot-plugin-1-4-3-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24560",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.337",
      "lastModified" : "2026-04-28T15:16:14.220",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Cloudinary Cloudinary cloudinary-image-management-and-manipulation-in-the-cloud-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cloudinary: from n/a through <= 3.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Cloudinary Cloudinary cloudinary-image-management-and-manipulation-in-the-cloud-cdn permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Cloudinary: desde n/a hasta &lt;= 3.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cloudinary-image-management-and-manipulation-in-the-cloud-cdn/vulnerability/wordpress-cloudinary-plugin-3-3-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24561",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.487",
      "lastModified" : "2026-04-28T15:16:14.357",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización Mahmudul Hasan Arif FluentBoards fluent-boards permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a FluentBoards: desde n/a hasta &lt;= 1.91.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/fluent-boards/vulnerability/wordpress-fluentboards-plugin-1-91-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24562",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.643",
      "lastModified" : "2026-04-28T19:36:50.160",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ryviu Ryviu – Product Reviews for WooCommerce ryviu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ryviu – Product Reviews for WooCommerce: from n/a through <= 3.1.26."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Ryviu Ryviu – Product Reviews para WooCommerce ryviu permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ryviu – Product Reviews para WooCommerce: desde n/a hasta &lt;= 3.1.26."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ryviu/vulnerability/wordpress-ryviu-product-reviews-for-woocommerce-plugin-3-1-26-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24563",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.780",
      "lastModified" : "2026-04-28T15:16:14.573",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LifePress: from n/a through <= 2.2.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Ashan Perera LifePress lifepress permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a LifePress: desde n/a hasta &lt;= 2.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/lifepress/vulnerability/wordpress-lifepress-plugin-2-1-3-broken-access-control-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24564",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:13.940",
      "lastModified" : "2026-04-28T15:16:14.787",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Israpil Textmetrics webtexttool allows Code Injection.This issue affects Textmetrics: from n/a through <= 3.6.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Etiquetas HTML Relacionadas con Scripts en una Página Web (XSS Básico) en Israpil Textmetrics webtexttool permite la Inyección de Código. Este problema afecta a Textmetrics: desde n/a hasta &lt;= 3.6.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/webtexttool/vulnerability/wordpress-textmetrics-plugin-3-6-3-arbitrary-shortcode-execution-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24565",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:14.103",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in bPlugins B Accordion b-accordion allows Retrieve Embedded Sensitive Data.This issue affects B Accordion: from n/a through <= 2.0.2."
      }, {
        "lang" : "es",
        "value" : "Inserción de Información Sensible en Datos Enviados en bPlugins B Accordion b-accordion permite Recuperar Datos Sensibles Incrustados. Este problema afecta a B Accordion: desde n/a hasta &lt;= 2.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/b-accordion/vulnerability/wordpress-b-accordion-plugin-2-0-0-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24566",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:14.270",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in iNET iNET Webkit inet-webkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iNET Webkit: from n/a through <= 1.2.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por autorización faltante en iNET iNET Webkit inet-webkit permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a iNET Webkit: desde n/a hasta &lt;= 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/inet-webkit/vulnerability/wordpress-inet-webkit-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24567",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:14.410",
      "lastModified" : "2026-04-28T15:16:15.090",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in briarinc Anything Order by Terms anything-order-by-terms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Anything Order by Terms: from n/a through <= 1.4.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en briarinc Anything Order por Terms anything-order-by-terms permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Anything Order por Terms: desde n/a hasta &lt;= 1.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/anything-order-by-terms/vulnerability/wordpress-anything-order-by-terms-plugin-1-4-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24568",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:14.570",
      "lastModified" : "2026-04-28T15:16:15.230",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 11.1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Travel WP Travel wp-travel permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Travel: desde n/a hasta &lt;= 11.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-travel/vulnerability/wordpress-wp-travel-plugin-11-0-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24569",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:14.733",
      "lastModified" : "2026-04-28T15:16:15.377",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Sully Media Library File Size media-library-file-size allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library File Size: from n/a through <= 1.6.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por ausencia de autorización en Sully Media librería Tamaño de Archivo media-library-file-size permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Media Library File Size: desde n/a hasta &lt;= 1.6.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/media-library-file-size/vulnerability/wordpress-media-library-file-size-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24570",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:14.897",
      "lastModified" : "2026-04-28T15:16:15.517",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through <= 4.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WisdmLabs Edwiser Bridge edwiser-bridge permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Edwiser Bridge: desde n/a hasta &lt;= 4.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/edwiser-bridge/vulnerability/wordpress-edwiser-bridge-plugin-4-3-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24571",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.067",
      "lastModified" : "2026-04-28T15:16:15.657",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in boxnow BOX NOW Delivery box-now-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BOX NOW Delivery: from n/a through <= 3.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en boxnow BOX NOW Delivery box-now-delivery permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a BOX NOW Delivery: desde n/a hasta &lt;= 3.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/box-now-delivery/vulnerability/wordpress-box-now-delivery-plugin-3-0-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24572",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.210",
      "lastModified" : "2026-04-28T15:16:15.817",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through <= 4.2.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') en Nelio Software Nelio Content nelio-content permite Inyección SQL Ciega. Este problema afecta a Nelio Content: desde n/a hasta &lt;= 4.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/nelio-content/vulnerability/wordpress-nelio-content-plugin-4-1-0-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24576",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.347",
      "lastModified" : "2026-04-28T15:16:15.960",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in COP UX Flat ux-flat allows Stored XSS.This issue affects UX Flat: from n/a through <= 5.4.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en COP UX Flat ux-flat permite XSS Almacenado. Este problema afecta a UX Flat: desde n/a hasta &lt;= 5.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ux-flat/vulnerability/wordpress-ux-flat-plugin-5-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24577",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.480",
      "lastModified" : "2026-04-28T15:16:16.107",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through <= 3.8.4.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Genetech Products Pie Register pie-register permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Pie Register: desde n/a hasta &lt;= 3.8.4.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/pie-register/vulnerability/wordpress-pie-register-plugin-3-8-4-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24578",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.623",
      "lastModified" : "2026-04-28T15:16:16.247",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Jahid Hasan Admin login URL Change admin-login-url-change allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin login URL Change: from n/a through <= 1.1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Jahid Hasan Admin login URL Change admin-login-url-change permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Admin login URL Change: desde n/a hasta &lt;= 1.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/admin-login-url-change/vulnerability/wordpress-admin-login-url-change-plugin-1-1-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24579",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.770",
      "lastModified" : "2026-04-28T15:16:16.383",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through <= 1.1.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Messiah Ai Image Alt Text Generator para WP ai-image-alt-text-generator-for-wp permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ai Image Alt Text Generator para WP: desde n/a hasta &lt;= 1.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ai-image-alt-text-generator-for-wp/vulnerability/wordpress-ai-image-alt-text-generator-for-wp-plugin-1-1-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24580",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:15.903",
      "lastModified" : "2026-04-28T15:16:16.557",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid Shopping Cart: from n/a through <= 7.0.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Ecwid por Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ecwid Shopping Cart: desde n/a hasta &lt;= 7.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ecwid-shopping-cart/vulnerability/wordpress-ecwid-shopping-cart-plugin-7-0-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24581",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.050",
      "lastModified" : "2026-04-28T15:16:16.700",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Points and Rewards for WooCommerce: from n/a through <= 2.9.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Swings Points and Rewards para WooCommerce points-and-rewards-for-woocommerce permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Points and Rewards para WooCommerce: desde n/a hasta &lt;= 2.9.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/points-and-rewards-for-woocommerce/vulnerability/wordpress-points-and-rewards-for-woocommerce-plugin-2-9-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24583",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.200",
      "lastModified" : "2026-04-28T15:16:16.843",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SumUp Payment Gateway For WooCommerce: from n/a through <= 2.7.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en sumup SumUp Payment Gateway para WooCommerce sumup-payment-gateway-for-woocommerce permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a SumUp Payment Gateway para WooCommerce: desde n/a hasta &lt;= 2.7.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sumup-payment-gateway-for-woocommerce/vulnerability/wordpress-sumup-payment-gateway-for-woocommerce-plugin-2-7-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24584",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.353",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS BunnyNet Integration tutor-lms-bunnynet-integration allows DOM-Based XSS.This issue affects Tutor LMS BunnyNet Integration: from n/a through <= 1.0.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Themeum Tutor LMS BunnyNet Integration tutor-lms-bunnynet-integration permite XSS basado en DOM. Este problema afecta a Tutor LMS BunnyNet Integration: desde n/d hasta &lt;= 1.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/tutor-lms-bunnynet-integration/vulnerability/wordpress-tutor-lms-bunnynet-integration-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24585",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.513",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Hyyan Abo Fakher Hyyan WooCommerce Polylang Integration woo-poly-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hyyan WooCommerce Polylang Integration: from n/a through <= 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Hyyan Abo Fakher Hyyan WooCommerce Polylang Integration woo-poly-integration permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Hyyan WooCommerce Polylang Integration: desde n/a hasta &lt;= 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woo-poly-integration/vulnerability/wordpress-hyyan-woocommerce-polylang-integration-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24587",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.650",
      "lastModified" : "2026-04-28T15:16:17.123",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through <= 0.10.210305."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a AJAX Hits Counter + Popular Posts Widget: desde n/a hasta &lt;= 0.10.210305."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ajax-hits-counter/vulnerability/wordpress-ajax-hits-counter-popular-posts-widget-plugin-0-10-210305-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24588",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.803",
      "lastModified" : "2026-04-28T15:16:17.260",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through <= 1.5.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en topdevs Smart Product Viewer smart-product-viewer permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Smart Product Viewer: desde n/a hasta &lt;= 1.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/smart-product-viewer/vulnerability/wordpress-smart-product-viewer-plugin-1-5-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24589",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:16.940",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in Cargus eCommerce Cargus cargus allows Retrieve Embedded Sensitive Data.This issue affects Cargus: from n/a through <= 1.5.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inserción de información sensible en datos enviados en Cargus eCommerce Cargus cargus permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Cargus: desde n/a hasta &lt;= 1.5.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cargus/vulnerability/wordpress-cargus-plugin-1-5-8-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24591",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:17.097",
      "lastModified" : "2026-04-28T15:16:17.470",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yasir129 Turn Yoast SEO FAQ Block to Accordion faq-schema-block-to-accordion allows Stored XSS.This issue affects Turn Yoast SEO FAQ Block to Accordion: from n/a through <= 1.0.6."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en yasir129 Turn Yoast SEO FAQ Block to Accordion faq-schema-block-to-accordion permite XSS Almacenado. Este problema afecta a Turn Yoast SEO FAQ Block to Accordion: desde n/a hasta &lt;= 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/faq-schema-block-to-accordion/vulnerability/wordpress-turn-yoast-seo-faq-block-to-accordion-plugin-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24593",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:17.247",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects AWP Classifieds: from n/a through <= 4.4.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de exposición de información sensible del sistema a una esfera de control no autorizada en el plugin Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin permite recuperar datos sensibles incrustados. Este problema afecta a AWP Classifieds: desde n/a hasta &lt;= 4.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/another-wordpress-classifieds-plugin/vulnerability/wordpress-awp-classifieds-plugin-4-4-3-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24594",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:17.407",
      "lastModified" : "2026-04-28T15:16:17.677",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through <= 3.9.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en livemesh Livemesh Addons para WPBakery Page Builder addons-for-visual-composer permite XSS Almacenado. Este problema afecta a Livemesh Addons para WPBakery Page Builder: desde n/a hasta &lt;= 3.9.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/addons-for-visual-composer/vulnerability/wordpress-livemesh-addons-for-wpbakery-page-builder-plugin-3-9-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24595",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:17.567",
      "lastModified" : "2026-04-28T15:16:17.817",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho CRM Lead Magnet: from n/a through <= 1.8.1.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en zohocrm Zoho CRM Lead Magnet zoho-crm-forms permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Zoho CRM Lead Magnet: desde n/a hasta &lt;= 1.8.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/zoho-crm-forms/vulnerability/wordpress-zoho-crm-lead-magnet-plugin-1-8-1-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24596",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:17.793",
      "lastModified" : "2026-04-28T15:16:17.953",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in marynixie Related Posts Thumbnails Plugin for WordPress related-posts-thumbnails allows Cross Site Request Forgery.This issue affects Related Posts Thumbnails Plugin for WordPress: from n/a through <= 4.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el plugin marynixie Related Posts Thumbnails para WordPress related-posts-thumbnails permite la falsificación de petición en sitios cruzados. Este problema afecta al plugin Related Posts Thumbnails para WordPress: desde n/a hasta &lt;= 4.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/related-posts-thumbnails/vulnerability/wordpress-related-posts-thumbnails-plugin-for-wordpress-plugin-4-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24598",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:17.953",
      "lastModified" : "2026-04-28T15:16:18.097",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through <= 1.5.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en bestwebsoft Multilanguage por BestWebSoft multilanguage permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Multilanguage por BestWebSoft: desde n/a hasta &lt;= 1.5.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/multilanguage/vulnerability/wordpress-multilanguage-by-bestwebsoft-plugin-1-5-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24599",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:18.110",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through <= 2.23.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a NextMove Lite: desde n/a hasta &lt;= 2.23.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woo-thank-you-page-nextmove-lite/vulnerability/wordpress-nextmove-lite-plugin-2-23-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24600",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:18.273",
      "lastModified" : "2026-04-28T15:16:18.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Review penci-review allows Stored XSS.This issue affects Penci Review: from n/a through <= 3.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de Entrada Durante la Generación de Páginas Web ('cross-site scripting') en PenciDesign Penci Review penci-review permite XSS Almacenado. Este problema afecta a Penci Review: desde n/d hasta &lt;= 3.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-review/vulnerability/wordpress-penci-review-plugin-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24601",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:18.427",
      "lastModified" : "2026-04-28T15:16:18.447",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Pay Writer penci-pay-writer allows Stored XSS.This issue affects Penci Pay Writer: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en PenciDesign Penci Pay Writer penci-pay-writer permite XSS Almacenado. Este problema afecta a Penci Pay Writer: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-pay-writer/vulnerability/wordpress-penci-pay-writer-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24602",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:18.790",
      "lastModified" : "2026-02-04T11:16:03.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This is a false positive. According to the vendor, the function identified as a vulnerability is intentional and part of the expected design."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24603",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:18.943",
      "lastModified" : "2026-04-28T15:16:18.580",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in themebeez Universal Google Adsense and Ads manager universal-google-adsense-and-ads-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Universal Google Adsense and Ads manager: from n/a through <= 1.1.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en themebeez Universal Google Adsense and Ads manager universal-google-adsense-and-ads-manager permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Universal Google Adsense and Ads manager: desde n/a hasta &lt;= 1.1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/universal-google-adsense-and-ads-manager/vulnerability/wordpress-universal-google-adsense-and-ads-manager-plugin-1-1-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24604",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.110",
      "lastModified" : "2026-04-28T15:16:18.727",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie Compliance: from n/a through <= 2.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Simple GDPR Cookie Compliance: desde n/a hasta &lt;= 2.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/simple-gdpr-cookie-compliance/vulnerability/wordpress-simple-gdpr-cookie-compliance-plugin-2-0-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24605",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.247",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects X Addons for Elementor: from n/a through <= 1.0.23."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en pencilwp X Addons para Elementor x-addons-elementor permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a X Addons para Elementor: desde n/a hasta &lt;= 1.0.23."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/x-addons-elementor/vulnerability/wordpress-x-addons-for-elementor-plugin-1-0-23-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24606",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.407",
      "lastModified" : "2026-04-28T15:16:18.943",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through <= 4.3.13."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Web Impian Bayarcash WooCommerce bayarcash-wc permite la explotación de niveles de seguridad de control de acceso mal configurados. Este problema afecta a Bayarcash WooCommerce: desde n/a hasta &lt;= 4.3.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/bayarcash-wc/vulnerability/wordpress-bayarcash-woocommerce-plugin-4-3-11-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24607",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.567",
      "lastModified" : "2026-04-28T15:16:19.080",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through <= 1.3.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en wptravelengine Travel Monster travel-monster permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Travel Monster: desde n/a hasta &lt;= 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/travel-monster/vulnerability/wordpress-travel-monster-theme-1-3-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24608",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.707",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent Core laurent-core allows PHP Local File Inclusion.This issue affects Laurent Core: from n/a through <= 2.4.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la sentencia include/require en programa PHP ('Inclusión Remota de Ficheros PHP') en Elated-Themes Laurent Core laurent-core permite la Inclusión Local de Ficheros PHP. Este problema afecta a Laurent Core: desde n/a hasta &lt;= 2.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/laurent-core/vulnerability/wordpress-laurent-core-plugin-2-4-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24609",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.850",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through <= 3.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en programa PHP ('PHP Remote File Inclusion') en Elated-Themes Laurent laurent, permite inclusión local de ficheros PHP. Este problema afecta a Laurent: desde n/a hasta &lt;= 3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/laurent/vulnerability/wordpress-laurent-theme-3-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24612",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:19.997",
      "lastModified" : "2026-04-28T15:16:19.380",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through <= 1.5.15."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en themebeez Orchid Store orchid-store permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Orchid Store: desde n/a hasta &lt;= 1.5.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/orchid-store/vulnerability/wordpress-orchid-store-theme-1-5-15-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24613",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:20.143",
      "lastModified" : "2026-04-28T15:16:19.537",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid Shopping Cart: from n/a through <= 7.0.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Ecwid por Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ecwid Shopping Cart: desde n/a hasta &lt;= 7.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ecwid-shopping-cart/vulnerability/wordpress-ecwid-shopping-cart-plugin-7-0-5-broken-access-control-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24614",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:20.287",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through <= 1.2.10."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Devsbrain Flex QR Code Generator flex-qr-code-generator permite XSS basado en DOM. Este problema afecta a Flex QR Code Generator: desde n/a hasta &lt;= 1.2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/flex-qr-code-generator/vulnerability/wordpress-flex-qr-code-generator-plugin-1-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24615",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:20.420",
      "lastModified" : "2026-04-28T15:16:19.757",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in themebeez Cream Magazine cream-magazine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream Magazine: from n/a through <= 2.1.10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en themebeez Cream Magazine cream-magazine permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Cream Magazine: desde n/a hasta &lt;= 2.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/cream-magazine/vulnerability/wordpress-cream-magazine-theme-2-1-10-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24616",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:20.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Damian WP Popups wp-popups-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Popups: from n/a through <= 2.2.0.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Damian WP Popups wp-popups-lite permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Popups: desde n/a hasta &lt;= 2.2.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-popups-lite/vulnerability/wordpress-wp-popups-plugin-2-2-0-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24617",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:20.727",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Iser Easy Modal easy-modal allows Stored XSS.This issue affects Easy Modal: from n/a through <= 2.1.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Daniel Iser Easy Modal easy-modal permite XSS Almacenado. Este problema afecta a Easy Modal: desde n/a hasta &lt;= 2.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/easy-modal/vulnerability/wordpress-easy-modal-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24619",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:20.890",
      "lastModified" : "2026-04-28T15:16:20.033",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through <= 1.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a PopCash.Net Code Integration Tool: desde n/a hasta &lt;= 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/popcashnet-code-integration-tool/vulnerability/wordpress-popcash-net-code-integration-tool-plugin-1-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24620",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through <= 1.5.3.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en PluginOps Landing Page Builder page-builder-add permite XSS Almacenado. Este problema afecta a Landing Page Builder: desde n/a hasta &lt;= 1.5.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/page-builder-add/vulnerability/wordpress-landing-page-builder-plugin-1-5-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24621",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.207",
      "lastModified" : "2026-04-28T15:16:20.243",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through <= 3.4.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en Vladimir Statsenko Terms descriptions terms-descriptions permite XSS basado en DOM. Este problema afecta a Terms descriptions: desde n/a hasta &lt;= 3.4.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/terms-descriptions/vulnerability/wordpress-terms-descriptions-plugin-3-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24622",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.350",
      "lastModified" : "2026-04-28T15:16:20.403",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Sergiy Dzysyak Suggestion Toolkit suggestion-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Suggestion Toolkit: from n/a through <= 5.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Sergiy Dzysyak Suggestion Toolkit suggestion-toolkit permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Suggestion Toolkit: desde n/a hasta &lt;= 5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/suggestion-toolkit/vulnerability/wordpress-suggestion-toolkit-plugin-5-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24623",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.487",
      "lastModified" : "2026-04-28T15:16:20.550",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in saeros1984 Neoforum neoforum allows Reflected XSS.This issue affects Neoforum: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en saeros1984 Neoforum neoforum permite XSS Reflejado. Este problema afecta a Neoforum: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/neoforum/vulnerability/wordpress-neoforum-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24624",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.613",
      "lastModified" : "2026-04-28T15:16:20.703",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') en saeros1984 Neoforum neoforum permite Inyección SQL Ciega. Este problema afecta a Neoforum: desde n/d hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/neoforum/vulnerability/wordpress-neoforum-plugin-1-0-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24625",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.767",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Imaginate Solutions File Uploads Addon for WooCommerce woo-addon-uploads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects File Uploads Addon for WooCommerce: from n/a through <= 1.7.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en el Complemento de Carga de Archivos de Imaginate Solutions para WooCommerce woo-addon-uploads permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al Complemento de Carga de Archivos para WooCommerce: desde n/a hasta &lt;= 1.7.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woo-addon-uploads/vulnerability/wordpress-file-uploads-addon-for-woocommerce-plugin-1-7-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24626",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:21.927",
      "lastModified" : "2026-04-23T15:36:55.487",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through <= 5.1.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en LogicHunt Logo Slider logo-slider-wp permite XSS Almacenado. Este problema afecta a Logo Slider: desde n/a hasta &lt;= 4.9.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/logo-slider-wp/vulnerability/wordpress-logo-slider-plugin-4-9-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24627",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:22.083",
      "lastModified" : "2026-04-28T15:16:20.983",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Trusona Trusona for WordPress trusona allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trusona for WordPress: from n/a through <= 2.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Trusona Trusona para WordPress trusona permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Trusona para WordPress: desde n/a hasta &lt;= 2.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/trusona/vulnerability/wordpress-trusona-for-wordpress-plugin-2-0-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24629",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:22.240",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through <= 2.1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de 'cross-site scripting' por Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web en Ability, Inc Web Accessibility with Max Access accessibility-toolbar permite XSS Almacenado. Este problema afecta a Web Accessibility with Max Access: desde n/a hasta &lt;= 2.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/accessibility-toolbar/vulnerability/wordpress-web-accessibility-with-max-access-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24630",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:22.387",
      "lastModified" : "2026-04-23T15:36:55.773",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through <= 8.2.9."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Design Stylish Cost Calculator stylish-cost-calculator permite XSS Almacenado. Este problema afecta a Stylish Cost Calculator: desde n/a hasta &lt;= 8.1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/stylish-cost-calculator/vulnerability/wordpress-stylish-cost-calculator-plugin-8-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24631",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:22.530",
      "lastModified" : "2026-04-28T15:16:21.267",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Rosebud rosebud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rosebud: from n/a through <= 1.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes Rosebud rosebud permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Rosebud: desde n/a hasta &lt;= 1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/rosebud/vulnerability/wordpress-rosebud-theme-1-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24632",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:22.697",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jagdish1o1 Delay Redirects delay-redirects allows DOM-Based XSS.This issue affects Delay Redirects: from n/a through <= 1.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en jagdish1o1 Delay Redirects delay-redirects permite XSS basado en DOM. Este problema afecta a Delay Redirects: desde n/a hasta &lt;= 1.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/delay-redirects/vulnerability/wordpress-delay-redirects-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24633",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:22.970",
      "lastModified" : "2026-04-28T15:16:21.497",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through <= 3.2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por autorización faltante en Passionate Brains Add Expires Headers &amp; Optimized Minify add-expires-headers permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Add Expires Headers &amp; Optimized Minify: desde n/a hasta &lt;= 3.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/add-expires-headers/vulnerability/wordpress-add-expires-headers-optimized-minify-plugin-3-1-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24634",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:23.210",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Ultimate Reviews ultimate-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Reviews: from n/a through <= 3.2.16."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Rustaurius Ultimate Reviews ultimate-reviews permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ultimate Reviews: desde n/a hasta &lt;= 3.2.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ultimate-reviews/vulnerability/wordpress-ultimate-reviews-plugin-3-2-16-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24635",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:23.363",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in DevsBlink EduBlink Core edublink-core allows PHP Local File Inclusion.This issue affects EduBlink Core: from n/a through <= 2.0.7."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, la vulnerabilidad de 'inclusión remota de ficheros PHP' en DevsBlink EduBlink Core edublink-core permite la inclusión local de ficheros PHP. Este problema afecta a EduBlink Core: desde n/a hasta &lt;= 2.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/edublink-core/vulnerability/wordpress-edublink-core-plugin-2-0-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24636",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-01-23T15:16:23.500",
      "lastModified" : "2026-04-28T15:16:22.030",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Syed Balkhi Sugar Calendar (Lite) sugar-calendar-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sugar Calendar (Lite): from n/a through <= 3.9.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Syed Balkhi Sugar Calendar (Lite) sugar-calendar-lite permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Sugar Calendar (Lite): desde n/a hasta &lt;= 3.10.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sugar-calendar-lite/vulnerability/wordpress-sugar-calendar-lite-plugin-3-10-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22978",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:53.783",
      "lastModified" : "2026-02-26T20:17:16.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: avoid kernel-infoleak from struct iw_point\n\nstruct iw_point has a 32bit hole on 64bit arches.\n\nstruct iw_point {\n  void __user   *pointer;       /* Pointer to the data  (in user space) */\n  __u16         length;         /* number of fields or size in bytes */\n  __u16         flags;          /* Optional params */\n};\n\nMake sure to zero the structure to avoid disclosing 32bits of kernel data\nto user space."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: evitar la fuga de información del kernel de la estructura iw_point\n\nLa estructura iw_point tiene un agujero de 32 bits en arquitecturas de 64 bits.\n\nstruct iw_point {\n  void __user   *pointer;       /* Puntero a los datos (en espacio de usuario) */\n  __u16         length;         /* número de campos o tamaño en bytes */\n  __u16         flags;          /* Parámetros opcionales */\n};\n\nAsegúrese de poner a cero la estructura para evitar la divulgación de 32 bits de datos del kernel al espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "6DF628A9-C7C6-47DC-810A-2D8E53F0928F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/024f71a57d563fbe162e528c8bf2d27e9cac7c7b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/21cbf883d073abbfe09e3924466aa5e0449e7261",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/442ceac0393185e9982323f6682a52a53e8462b1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a3827e310b5a73535646ef4a552d53b3c8bf74f6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d943b5f592767b107ba8c12a902f17431350378c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e3c35177103ead4658b8a62f41e3080d45885464",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22979",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:53.893",
      "lastModified" : "2026-02-26T23:37:06.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix memory leak in skb_segment_list for GRO packets\n\nWhen skb_segment_list() is called during packet forwarding, it handles\npackets that were aggregated by the GRO engine.\n\nHistorically, the segmentation logic in skb_segment_list assumes that\nindividual segments are split from a parent SKB and may need to carry\ntheir own socket memory accounting. Accordingly, the code transfers\ntruesize from the parent to the newly created segments.\n\nPrior to commit ed4cccef64c1 (\"gro: fix ownership transfer\"), this\ntruesize subtraction in skb_segment_list() was valid because fragments\nstill carry a reference to the original socket.\n\nHowever, commit ed4cccef64c1 (\"gro: fix ownership transfer\") changed\nthis behavior by ensuring that fraglist entries are explicitly\norphaned (skb->sk = NULL) to prevent illegal orphaning later in the\nstack. This change meant that the entire socket memory charge remained\nwith the head SKB, but the corresponding accounting logic in\nskb_segment_list() was never updated.\n\nAs a result, the current code unconditionally adds each fragment's\ntruesize to delta_truesize and subtracts it from the parent SKB. Since\nthe fragments are no longer charged to the socket, this subtraction\nresults in an effective under-count of memory when the head is freed.\nThis causes sk_wmem_alloc to remain non-zero, preventing socket\ndestruction and leading to a persistent memory leak.\n\nThe leak can be observed via KMEMLEAK when tearing down the networking\nenvironment:\n\nunreferenced object 0xffff8881e6eb9100 (size 2048):\n  comm \"ping\", pid 6720, jiffies 4295492526\n  backtrace:\n    kmem_cache_alloc_noprof+0x5c6/0x800\n    sk_prot_alloc+0x5b/0x220\n    sk_alloc+0x35/0xa00\n    inet6_create.part.0+0x303/0x10d0\n    __sock_create+0x248/0x640\n    __sys_socket+0x11b/0x1d0\n\nSince skb_segment_list() is exclusively used for SKB_GSO_FRAGLIST\npackets constructed by GRO, the truesize adjustment is removed.\n\nThe call to skb_release_head_state() must be preserved. As documented in\ncommit cf673ed0e057 (\"net: fix fraglist segmentation reference count\nleak\"), it is still required to correctly drop references to SKB\nextensions that may be overwritten during __copy_skb_header()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: corrige fuga de memoria en skb_segment_list para paquetes GRO\n\nCuando se llama a skb_segment_list() durante el reenvío de paquetes, maneja paquetes que fueron agregados por el motor GRO.\n\nHistóricamente, la lógica de segmentación en skb_segment_list asume que los segmentos individuales se dividen de un SKB padre y pueden necesitar llevar su propia contabilidad de memoria de socket. En consecuencia, el código transfiere truesize del padre a los segmentos recién creados.\n\nAntes del commit ed4cccef64c1 ('gro: corrige transferencia de propiedad'), esta resta de truesize en skb_segment_list() era válida porque los fragmentos aún llevaban una referencia al socket original.\n\nSin embargo, el commit ed4cccef64c1 ('gro: corrige transferencia de propiedad') cambió este comportamiento al asegurar que las entradas de fraglist se huérfanan explícitamente (skb-&gt;sk = NULL) para evitar un huérfano ilegal más adelante en la pila. Este cambio significó que la carga completa de memoria del socket permaneció con el SKB de cabecera, pero la lógica de contabilidad correspondiente en skb_segment_list() nunca se actualizó.\n\nComo resultado, el código actual añade incondicionalmente el truesize de cada fragmento a delta_truesize y lo resta del SKB padre. Dado que los fragmentos ya no se cargan al socket, esta resta resulta en un recuento insuficiente efectivo de memoria cuando se libera la cabecera. Esto hace que sk_wmem_alloc permanezca distinto de cero, impidiendo la destrucción del socket y provocando una fuga de memoria persistente.\n\nLa fuga puede observarse a través de KMEMLEAK al desmantelar el entorno de red:\n\nobjeto sin referencia 0xffff8881e6eb9100 (tamaño 2048):\n  comm \"ping\", pid 6720, jiffies 4295492526\n  rastreo:\n    kmem_cache_alloc_noprof+0x5c6/0x800\n    sk_prot_alloc+0x5b/0x220\n    sk_alloc+0x35/0xa00\n    inet6_create.part.0+0x303/0x10d0\n    __sock_create+0x248/0x640\n    __sys_socket+0x11b/0x1d0\n\nDado que skb_segment_list() se utiliza exclusivamente para paquetes SKB_GSO_FRAGLIST construidos por GRO, el ajuste de truesize se elimina.\n\nLa llamada a skb_release_head_state() debe conservarse. Como se documenta en el commit cf673ed0e057 ('net: corrige fuga de recuento de referencias de segmentación de fraglist'), todavía es necesario para descartar correctamente las referencias a extensiones SKB que pueden ser sobrescritas durante __copy_skb_header()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.154",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "21EE109E-592F-4A01-B5D2-F078967481BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.85",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "2CE9C2E4-AEB2-4F10-8B81-C0E8350104EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.26",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "00A6049B-1DC8-4CD8-978D-9947609C9A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.5",
            "versionEndExcluding" : "6.9",
            "matchCriteriaId" : "A6B58EED-04EA-418F-99DB-71FC04B438DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.1",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "6689E2E4-21FF-4E95-B13C-F61EB83BE31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2A4A3D-068A-4CF2-A09F-9C7937DDB0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "91326417-E981-482E-A5A3-28BC1327521B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "DAECDCD8-F556-4606-8D7B-5C6D47A501F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0b27828ebd1ed3107d7929c3737adbe862e99e74",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/238e03d0466239410b72294b79494e43d4fabe77",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3264881431e308b9c72cb8a0159d57a56d67dd79",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/88bea149db2057112af3aaf63534b24fab5858ab",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c114a32a2e70b82d447f409f7ffcfa3058f9d5bd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22980",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.003",
      "lastModified" : "2026-04-27T14:16:27.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: provide locking for v4_end_grace\n\nWriting to v4_end_grace can race with server shutdown and result in\nmemory being accessed after it was freed - reclaim_str_hashtbl in\nparticularly.\n\nWe cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is\nheld while client_tracking_op->init() is called and that can wait for\nan upcall to nfsdcltrack which can write to v4_end_grace, resulting in a\ndeadlock.\n\nnfsd4_end_grace() is also called by the landromat work queue and this\ndoesn't require locking as server shutdown will stop the work and wait\nfor it before freeing anything that nfsd4_end_grace() might access.\n\nHowever, we must be sure that writing to v4_end_grace doesn't restart\nthe work item after shutdown has already waited for it.  For this we\nadd a new flag protected with nn->client_lock.  It is set only while it\nis safe to make client tracking calls, and v4_end_grace only schedules\nwork while the flag is set with the spinlock held.\n\nSo this patch adds a nfsd_net field \"client_tracking_active\" which is\nset as described.  Another field \"grace_end_forced\", is set when\nv4_end_grace is written.  After this is set, and providing\nclient_tracking_active is set, the laundromat is scheduled.\nThis \"grace_end_forced\" field bypasses other checks for whether the\ngrace period has finished.\n\nThis resolves a race which can result in use-after-free."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnfsd: proporcionar bloqueo para v4_end_grace\n\nEscribir en v4_end_grace puede competir con el apagado del servidor y resultar en que la memoria sea accedida después de haber sido liberada - reclaim_str_hashtbl en particular.\n\nNo podemos mantener nfsd_mutex durante la llamada a nfsd4_end_grace() ya que se mantiene mientras se llama a client_tracking_op-&gt;init() y eso puede esperar una llamada ascendente a nfsdcltrack que puede escribir en v4_end_grace, resultando en un interbloqueo.\n\nnfsd4_end_grace() también es llamada por la cola de trabajo 'landromat' y esto no requiere bloqueo ya que el apagado del servidor detendrá el trabajo y esperará por él antes de liberar cualquier cosa a la que nfsd4_end_grace() pudiera acceder.\n\nSin embargo, debemos asegurarnos de que escribir en v4_end_grace no reinicie el elemento de trabajo después de que el apagado ya lo haya esperado. Para esto añadimos una nueva bandera protegida con nn-&gt;client_lock. Se establece solo mientras es seguro realizar llamadas de seguimiento de cliente, y v4_end_grace solo programa trabajo mientras la bandera está establecida con el spinlock mantenido.\n\nAsí, este parche añade un campo nfsd_net 'client_tracking_active' que se establece como se describe. Otro campo 'grace_end_forced', se establece cuando se escribe en v4_end_grace. Después de que esto se establece, y siempre que client_tracking_active esté establecido, el 'laundromat' es programado. Este campo 'grace_end_forced' omite otras comprobaciones para determinar si el período de gracia ha terminado.\n\nEsto resuelve una condición de carrera que puede resultar en uso después de liberación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "80713135-E43D-4026-BAD5-679983AB1EC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/06600719d0f7a723811c45e4d51f5b742f345309",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2857bd59feb63fcf40fe4baf55401baea6b4feb4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/34eb22836e0cdba093baac66599d68c4cd245a9d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/53f07d095e7e680c5e4569a55a019f2c0348cdc6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ba4811c8b433bfa681729ca42cc62b6034f223b0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ca97360860eb02e3ae4ba42c19b439a0fcecbf06",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e8bfa2401d4c51eca6e48e9b33c798828ca9df61",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22981",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.117",
      "lastModified" : "2026-04-02T12:16:18.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: detach and close netdevs while handling a reset\n\nProtect the reset path from callbacks by setting the netdevs to detached\nstate and close any netdevs in UP state until the reset handling has\ncompleted. During a reset, the driver will de-allocate resources for the\nvport, and there is no guarantee that those will recover, which is why the\nexisting vport_ctrl_lock does not provide sufficient protection.\n\nidpf_detach_and_close() is called right before reset handling. If the\nreset handling succeeds, the netdevs state is recovered via call to\nidpf_attach_and_open(). If the reset handling fails the netdevs remain\ndown. The detach/down calls are protected with RTNL lock to avoid racing\nwith callbacks. On the recovery side the attach can be done without\nholding the RTNL lock as there are no callbacks expected at that point,\ndue to detach/close always being done first in that flow.\n\nThe previous logic restoring the netdevs state based on the\nIDPF_VPORT_UP_REQUESTED flag in the init task is not needed anymore, hence\nthe removal of idpf_set_vport_state(). The IDPF_VPORT_UP_REQUESTED is\nstill being used to restore the state of the netdevs following the reset,\nbut has no use outside of the reset handling flow.\n\nidpf_init_hard_reset() is converted to void, since it was used as such and\nthere is no error handling being done based on its return value.\n\nBefore this change, invoking hard and soft resets simultaneously will\ncause the driver to lose the vport state:\nip -br a\n<inf>\tUP\necho 1 > /sys/class/net/ens801f0/device/reset& \\\nethtool -L ens801f0 combined 8\nip -br a\n<inf>\tDOWN\nip link set <inf> up\nip -br a\n<inf>\tDOWN\n\nAlso in case of a failure in the reset path, the netdev is left\nexposed to external callbacks, while vport resources are not\ninitialized, leading to a crash on subsequent ifup/down:\n[408471.398966] idpf 0000:83:00.0: HW reset detected\n[408471.411744] idpf 0000:83:00.0: Device HW Reset initiated\n[408472.277901] idpf 0000:83:00.0: The driver was unable to contact the device's firmware. Check that the FW is running. Driver state= 0x2\n[408508.125551] BUG: kernel NULL pointer dereference, address: 0000000000000078\n[408508.126112] #PF: supervisor read access in kernel mode\n[408508.126687] #PF: error_code(0x0000) - not-present page\n[408508.127256] PGD 2aae2f067 P4D 0\n[408508.127824] Oops: Oops: 0000 [#1] SMP NOPTI\n...\n[408508.130871] RIP: 0010:idpf_stop+0x39/0x70 [idpf]\n...\n[408508.139193] Call Trace:\n[408508.139637]  <TASK>\n[408508.140077]  __dev_close_many+0xbb/0x260\n[408508.140533]  __dev_change_flags+0x1cf/0x280\n[408508.140987]  netif_change_flags+0x26/0x70\n[408508.141434]  dev_change_flags+0x3d/0xb0\n[408508.141878]  devinet_ioctl+0x460/0x890\n[408508.142321]  inet_ioctl+0x18e/0x1d0\n[408508.142762]  ? _copy_to_user+0x22/0x70\n[408508.143207]  sock_do_ioctl+0x3d/0xe0\n[408508.143652]  sock_ioctl+0x10e/0x330\n[408508.144091]  ? find_held_lock+0x2b/0x80\n[408508.144537]  __x64_sys_ioctl+0x96/0xe0\n[408508.144979]  do_syscall_64+0x79/0x3d0\n[408508.145415]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[408508.145860] RIP: 0033:0x7f3e0bb4caff"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: desvincular y cerrar netdevs mientras se maneja un reinicio\n\nProteger la ruta de reinicio de las devoluciones de llamada configurando los netdevs a estado desvinculado y cerrando cualquier netdev en estado UP hasta que el manejo del reinicio haya finalizado. Durante un reinicio, el controlador desasignará recursos para el vport, y no hay garantía de que estos se recuperen, razón por la cual el vport_ctrl_lock existente no proporciona suficiente protección.\n\nidpf_detach_and_close() se llama justo antes del manejo del reinicio. Si el manejo del reinicio tiene éxito, el estado de los netdevs se recupera mediante una llamada a idpf_attach_and_open(). Si el manejo del reinicio falla, los netdevs permanecen inactivos. Las llamadas de desvinculación/inactivación están protegidas con el bloqueo RTNL para evitar condiciones de carrera con las devoluciones de llamada. En el lado de la recuperación, la vinculación se puede realizar sin mantener el bloqueo RTNL ya que no se esperan devoluciones de llamada en ese punto, debido a que la desvinculación/cierre siempre se realiza primero en ese flujo.\n\nLa lógica anterior que restauraba el estado de los netdevs basada en el indicador IDPF_VPORT_UP_REQUESTED en la tarea de inicialización ya no es necesaria, de ahí la eliminación de idpf_set_vport_state(). El IDPF_VPORT_UP_REQUESTED todavía se utiliza para restaurar el estado de los netdevs después del reinicio, pero no tiene uso fuera del flujo de manejo del reinicio.\n\nidpf_init_hard_reset() se convierte a void, ya que se utilizaba como tal y no se realiza manejo de errores basado en su valor de retorno.\n\nAntes de este cambio, invocar reinicios duros y blandos simultáneamente hará que el controlador pierda el estado del vport:\nip -br a\n\tUP\necho 1 &gt; /sys/class/net/ens801f0/device/reset&amp; \\\nethtool -L ens801f0 combined 8\nip -br a\n\tDOWN\nip link set  up\nip -br a\n\tDOWN\n\nTambién en caso de un fallo en la ruta de reinicio, el netdev queda expuesto a devoluciones de llamada externas, mientras que los recursos del vport no están inicializados, lo que lleva a un fallo en un posterior ifup/down:\n[408471.398966] idpf 0000:83:00.0: HW reset detected\n[408471.411744] idpf 0000:83:00.0: Device HW Reset initiated\n[408472.277901] idpf 0000:83:00.0: El controlador no pudo contactar el firmware del dispositivo. Verifique que el FW esté en ejecución. Estado del controlador= 0x2\n[408508.125551] BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000078\n[408508.126112] #PF: acceso de lectura de supervisor en modo kernel\n[408508.126687] #PF: error_code(0x0000) - página no presente\n[408508.127256] PGD 2aae2f067 P4D 0\n[408508.127824] Oops: Oops: 0000 [#1] SMP NOPTI\n...\n[408508.130871] RIP: 0010:idpf_stop+0x39/0x70 [idpf]\n...\n[408508.139193] Call Trace:\n[408508.139637]  \n[408508.140077]  __dev_close_many+0xbb/0x260\n[408508.140533]  __dev_change_flags+0x1cf/0x280\n[408508.140987]  netif_change_flags+0x26/0x70\n[408508.141434]  dev_change_flags+0x3d/0xb0\n[408508.141878]  devinet_ioctl+0x460/0x890\n[408508.142321]  inet_ioctl+0x18e/0x1d0\n[408508.142762]  ? _copy_to_user+0x22/0x70\n[408508.143207]  sock_do_ioctl+0x3d/0xe0\n[408508.143652]  sock_ioctl+0x10e/0x330\n[408508.144091]  ? find_held_lock+0x2b/0x80\n[408508.144537]  __x64_sys_ioctl+0x96/0xe0\n[408508.144979]  do_syscall_64+0x79/0x3d0\n[408508.145415]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[408508.145860] RIP: 0033:0x7f3e0bb4caff"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "C006C634-C236-4B4B-B7FA-AF44C3098505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2e281e1155fc476c571c0bd2ffbfe28ab829a5c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9ad3d0836d8bc1a0f0b4bf56efc56312a9e64b97",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ac122f5fb050903b3d262001562c452be95eaf70",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22982",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.223",
      "lastModified" : "2026-02-26T18:48:27.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mscc: ocelot: Fix crash when adding interface under a lag\n\nCommit 15faa1f67ab4 (\"lan966x: Fix crash when adding interface under a lag\")\nfixed a similar issue in the lan966x driver caused by a NULL pointer dereference.\nThe ocelot_set_aggr_pgids() function in the ocelot driver has similar logic\nand is susceptible to the same crash.\n\nThis issue specifically affects the ocelot_vsc7514.c frontend, which leaves\nunused ports as NULL pointers. The felix_vsc9959.c frontend is unaffected as\nit uses the DSA framework which registers all ports.\n\nFix this by checking if the port pointer is valid before accessing it."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: mscc: ocelot: Corregir caída al añadir interfaz bajo un lag\n\nCommit 15faa1f67ab4 ('lan966x: Corregir caída al añadir interfaz bajo un lag') solucionó un problema similar en el controlador lan966x causado por una desreferenciación de puntero NULL. La función ocelot_set_aggr_pgids() en el controlador ocelot tiene una lógica similar y es susceptible a la misma caída.\n\nEste problema afecta específicamente al frontend ocelot_vsc7514.c, que deja los puertos no utilizados como punteros NULL. El frontend felix_vsc9959.c no se ve afectado ya que utiliza el framework DSA que registra todos los puertos.\n\nSolucione esto comprobando si el puntero del puerto es válido antes de acceder a él."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.12",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "695240F0-323C-4F74-9E99-46286D29CA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/03fb1708b7d1e76aecebf767ad059c319845039f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2985712dc76dfa670eb7fd607c09d4d48e5f5c6e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b17818307446c5a8d925a39a792261dbfa930041",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f490af47bbee02441e356a1e0b86e3b3dd5120ff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22983",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.333",
      "lastModified" : "2026-02-26T18:48:36.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: do not write to msg_get_inq in callee\n\nNULL pointer dereference fix.\n\nmsg_get_inq is an input field from caller to callee. Don't set it in\nthe callee, as the caller may not clear it on struct reuse.\n\nThis is a kernel-internal variant of msghdr only, and the only user\ndoes reinitialize the field. So this is not critical for that reason.\nBut it is more robust to avoid the write, and slightly simpler code.\nAnd it fixes a bug, see below.\n\nCallers set msg_get_inq to request the input queue length to be\nreturned in msg_inq. This is equivalent to but independent from the\nSO_INQ request to return that same info as a cmsg (tp->recvmsg_inq).\nTo reduce branching in the hot path the second also sets the msg_inq.\nThat is WAI.\n\nThis is a fix to commit 4d1442979e4a (\"af_unix: don't post cmsg for\nSO_INQ unless explicitly asked for\"), which fixed the inverse.\n\nAlso avoid NULL pointer dereference in unix_stream_read_generic if\nstate->msg is NULL and msg->msg_get_inq is written. A NULL state->msg\ncan happen when splicing as of commit 2b514574f7e8 (\"net: af_unix:\nimplement splice for stream af_unix sockets\").\n\nAlso collapse two branches using a bitwise or."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: no escribir en msg_get_inq en el callee\n\nCorrección de desreferencia de puntero NULL.\n\nmsg_get_inq es un campo de entrada del caller al callee. No lo establezca en el callee, ya que el caller podría no borrarlo al reutilizar la estructura.\n\nEsta es solo una variante interna del kernel de msghdr, y el único usuario reinicializa el campo. Por lo tanto, esto no es crítico por esa razón. Pero es más robusto evitar la escritura, y un código ligeramente más simple. Y corrige un error, ver abajo.\n\nLos callers establecen msg_get_inq para solicitar que la longitud de la cola de entrada sea devuelta en msg_inq. Esto es equivalente a, pero independiente de, la solicitud SO_INQ para devolver esa misma información como un cmsg (tp-&gt;recvmsg_inq). Para reducir las bifurcaciones en la ruta crítica, el segundo también establece el msg_inq. Eso es WAI.\n\nEsta es una corrección para el commit 4d1442979e4a ('af_unix: no publicar cmsg para SO_INQ a menos que se solicite explícitamente'), que corrigió lo inverso.\n\nTambién evitar la desreferencia de puntero NULL en unix_stream_read_generic si state-&gt;msg es NULL y se escribe msg-&gt;msg_get_inq. Un state-&gt;msg NULL puede ocurrir al hacer splicing a partir del commit 2b514574f7e8 ('net: af_unix: implementar splice para sockets af_unix de stream').\n\nTambién colapsar dos ramas usando un OR bit a bit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.4",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "27849DC4-2BBE-4536-8F33-2616A53ACA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/7d11e047eda5f98514ae62507065ac961981c025",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ffa2be496ef65055b28b39c6bd9a7d66943ee89a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22984",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.440",
      "lastModified" : "2026-04-27T14:16:27.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: prevent potential out-of-bounds reads in handle_auth_done()\n\nPerform an explicit bounds check on payload_len to avoid a possible\nout-of-bounds access in the callout.\n\n[ idryomov: changelog ]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlibceph: prevenir posibles lecturas fuera de límites en handle_auth_done()\n\nRealizar una comprobación explícita de límites en payload_len para evitar un posible acceso fuera de límites en la llamada.\n\n[ idryomov: registro de cambios ]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/194cfe2af4d2a1de599d39dad636b47c2f6c2c96",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2802ef3380fa8c4a08cda51ec1f085b1a712e9e2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2d653bb63d598ae4b096dd678744bdcc34ee89e8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/79fe3511db416d2f2edcfd93569807cb02736e5e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/818156caffbf55cb4d368f9c3cac64e458fb49c9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ef208ea331ef688729f64089b895ed1b49e842e3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22985",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.553",
      "lastModified" : "2026-04-02T12:16:18.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: Fix RSS LUT NULL pointer crash on early ethtool operations\n\nThe RSS LUT is not initialized until the interface comes up, causing\nthe following NULL pointer crash when ethtool operations like rxhash on/off\nare performed before the interface is brought up for the first time.\n\nMove RSS LUT initialization from ndo_open to vport creation to ensure LUT\nis always available. This enables RSS configuration via ethtool before\nbringing the interface up. Simplify LUT management by maintaining all\nchanges in the driver's soft copy and programming zeros to the indirection\ntable when rxhash is disabled. Defer HW programming until the interface\ncomes up if it is down during rxhash and LUT configuration changes.\n\nSteps to reproduce:\n** Load idpf driver; interfaces will be created\n\tmodprobe idpf\n** Before bringing the interfaces up, turn rxhash off\n\tethtool -K eth2 rxhash off\n\n[89408.371875] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[89408.371908] #PF: supervisor read access in kernel mode\n[89408.371924] #PF: error_code(0x0000) - not-present page\n[89408.371940] PGD 0 P4D 0\n[89408.371953] Oops: Oops: 0000 [#1] SMP NOPTI\n<snip>\n[89408.372052] RIP: 0010:memcpy_orig+0x16/0x130\n[89408.372310] Call Trace:\n[89408.372317]  <TASK>\n[89408.372326]  ? idpf_set_features+0xfc/0x180 [idpf]\n[89408.372363]  __netdev_update_features+0x295/0xde0\n[89408.372384]  ethnl_set_features+0x15e/0x460\n[89408.372406]  genl_family_rcv_msg_doit+0x11f/0x180\n[89408.372429]  genl_rcv_msg+0x1ad/0x2b0\n[89408.372446]  ? __pfx_ethnl_set_features+0x10/0x10\n[89408.372465]  ? __pfx_genl_rcv_msg+0x10/0x10\n[89408.372482]  netlink_rcv_skb+0x58/0x100\n[89408.372502]  genl_rcv+0x2c/0x50\n[89408.372516]  netlink_unicast+0x289/0x3e0\n[89408.372533]  netlink_sendmsg+0x215/0x440\n[89408.372551]  __sys_sendto+0x234/0x240\n[89408.372571]  __x64_sys_sendto+0x28/0x30\n[89408.372585]  x64_sys_call+0x1909/0x1da0\n[89408.372604]  do_syscall_64+0x7a/0xfa0\n[89408.373140]  ? clear_bhb_loop+0x60/0xb0\n[89408.373647]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[89408.378887]  </TASK>\n<snip>"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: Corrección de fallo de puntero NULL de la RSS LUT en operaciones tempranas de ethtool\n\nLa RSS LUT no se inicializa hasta que la interfaz se activa, causando el siguiente fallo de puntero NULL cuando se realizan operaciones de ethtool como rxhash on/off antes de que la interfaz se active por primera vez.\n\nMover la inicialización de la RSS LUT de ndo_open a la creación de vport para asegurar que la LUT esté siempre disponible. Esto permite la configuración de RSS a través de ethtool antes de activar la interfaz. Simplificar la gestión de la LUT manteniendo todos los cambios en la copia blanda del controlador y programando ceros en la tabla de indirección cuando rxhash está deshabilitado. Aplazar la programación de HW hasta que la interfaz se active si está inactiva durante los cambios de configuración de rxhash y LUT.\n\nPasos para reproducir:\n Cargar el controlador idpf; se crearán las interfaces\n\tmodprobe idpf\n Antes de activar las interfaces, desactivar rxhash\n\tethtool -K eth2 rxhash off\n\n[89408.371875] BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000000\n[89408.371908] #PF: acceso de lectura de supervisor en modo kernel\n[89408.371924] #PF: error_code(0x0000) - página no presente\n[89408.371940] PGD 0 P4D 0\n[89408.371953] Oops: Oops: 0000 [#1] SMP NOPTI\n\n[89408.372052] RIP: 0010:memcpy_orig+0x16/0x130\n[89408.372310] Traza de Llamada:\n[89408.372317] \n[89408.372326] ? idpf_set_features+0xfc/0x180 [idpf]\n[89408.372363] __netdev_update_features+0x295/0xde0\n[89408.372384] ethnl_set_features+0x15e/0x460\n[89408.372406] genl_family_rcv_msg_doit+0x11f/0x180\n[89408.372429] genl_rcv_msg+0x1ad/0x2b0\n[89408.372446] ? __pfx_ethnl_set_features+0x10/0x10\n[89408.372465] ? __pfx_genl_rcv_msg+0x10/0x10\n[89408.372482] netlink_rcv_skb+0x58/0x100\n[89408.372502] genl_rcv+0x2c/0x50\n[89408.372516] netlink_unicast+0x289/0x3e0\n[89408.372533] netlink_sendmsg+0x215/0x440\n[89408.372551] __sys_sendto+0x234/0x240\n[89408.372571] __x64_sys_sendto+0x28/0x30\n[89408.372585] x64_sys_call+0x1909/0x1da0\n[89408.372604] do_syscall_64+0x7a/0xfa0\n[89408.373140] ? clear_bhb_loop+0x60/0xb0\n[89408.373647] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[89408.378887] \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "C006C634-C236-4B4B-B7FA-AF44C3098505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/83f38f210b85676f40ba8586b5a8edae19b56995",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b29a5a7dd1f4293ee49c469938c25bf85a5aa802",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/df2790b5228fbd3ed415b70a231cffdad0431618",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22986",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.657",
      "lastModified" : "2026-04-22T13:16:19.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ngpiolib: fix race condition for gdev->srcu\n\nIf two drivers were calling gpiochip_add_data_with_key(), one may be\ntraversing the srcu-protected list in gpio_name_to_desc(), meanwhile\nother has just added its gdev in gpiodev_add_to_list_unlocked().\nThis creates a non-mutexed and non-protected timeframe, when one\ninstance is dereferencing and using &gdev->srcu, before the other\nhas initialized it, resulting in crash:\n\n[    4.935481] Unable to handle kernel paging request at virtual address ffff800272bcc000\n[    4.943396] Mem abort info:\n[    4.943400]   ESR = 0x0000000096000005\n[    4.943403]   EC = 0x25: DABT (current EL), IL = 32 bits\n[    4.943407]   SET = 0, FnV = 0\n[    4.943410]   EA = 0, S1PTW = 0\n[    4.943413]   FSC = 0x05: level 1 translation fault\n[    4.943416] Data abort info:\n[    4.943418]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000\n[    4.946220]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[    4.955261]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[    4.955268] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000038e6c000\n[    4.961449] [ffff800272bcc000] pgd=0000000000000000\n[    4.969203] , p4d=1000000039739003\n[    4.979730] , pud=0000000000000000\n[    4.980210] phandle (CPU): 0x0000005e, phandle (BE): 0x5e000000 for node \"reset\"\n[    4.991736] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP\n...\n[    5.121359] pc : __srcu_read_lock+0x44/0x98\n[    5.131091] lr : gpio_name_to_desc+0x60/0x1a0\n[    5.153671] sp : ffff8000833bb430\n[    5.298440]\n[    5.298443] Call trace:\n[    5.298445]  __srcu_read_lock+0x44/0x98\n[    5.309484]  gpio_name_to_desc+0x60/0x1a0\n[    5.320692]  gpiochip_add_data_with_key+0x488/0xf00\n    5.946419] ---[ end trace 0000000000000000 ]---\n\nMove initialization code for gdev fields before it is added to\ngpio_devices, with adjacent initialization code.\nAdjust goto statements  to reflect modified order of operations\n\n[Bartosz: fixed a build issue, removed stray newline]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngpiolib: corrige condición de carrera para gdev-&gt;srcu\n\nSi dos controladores estaban llamando a gpiochip_add_data_with_key(), uno podría estar recorriendo la lista protegida por srcu en gpio_name_to_desc(), mientras tanto, el otro acaba de añadir su gdev en gpiodev_add_to_list_unlocked(). Esto crea un marco de tiempo no mutexado y no protegido, cuando una instancia está desreferenciando y usando &amp;gdev-&gt;srcu, antes de que la otra lo haya inicializado, resultando en un fallo:\n\n[    4.935481] Unable to handle kernel paging request at virtual address ffff800272bcc000\n[    4.943396] Mem abort info:\n[    4.943400]   ESR = 0x0000000096000005\n[    4.943403]   EC = 0x25: DABT (current EL), IL = 32 bits\n[    4.943407]   SET = 0, FnV = 0\n[    4.943410]   EA = 0, S1PTW = 0\n[    4.943413]   FSC = 0x05: level 1 translation fault\n[    4.943416] Data abort info:\n[    4.943418]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000\n[    4.946220]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[    4.955261]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[    4.955268] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000038e6c000\n[    4.961449] [ffff800272bcc000] pgd=0000000000000000\n[    4.969203] , p4d=1000000039739003\n[    4.979730] , pud=0000000000000000\n[    4.980210] phandle (CPU): 0x0000005e, phandle (BE): 0x5e000000 para node \"reset\"\n[    4.991736] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP\n...\n[    5.121359] pc : __srcu_read_lock+0x44/0x98\n[    5.131091] lr : gpio_name_to_desc+0x60/0x1a0\n[    5.153671] sp : ffff8000833bb430\n[    5.298440]\n[    5.298443] Call trace:\n[    5.298445]  __srcu_read_lock+0x44/0x98\n[    5.309484]  gpio_name_to_desc+0x60/0x1a0\n[    5.320692]  gpiochip_add_data_with_key+0x488/0xf00\n    5.946419] ---[ end trace 0000000000000000 ]---\n\nMover el código de inicialización para los campos de gdev antes de que sea añadido a gpio_devices, con código de inicialización adyacente.\nAjustar las sentencias goto para reflejar el orden de operaciones modificado\n\n[Bartosz: se corrigió un problema de compilación, se eliminó una nueva línea suelta]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "67CADBBA-60A1-4A50-98FF-D6BE31D03858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1ef731547dfd73f466c5d0e52801b97191d4647f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a7ac22d53d0990152b108c3f4fe30df45fcb0181",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fb674c8f1a5d8dd3113a7326030f963fa2d79c02",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22987",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.757",
      "lastModified" : "2026-02-26T18:49:04.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy\n\nsyzbot reported a crash in tc_act_in_hw() during netns teardown where\ntcf_idrinfo_destroy() passed an ERR_PTR(-EBUSY) value as a tc_action\npointer, leading to an invalid dereference.\n\nGuard against ERR_PTR entries when iterating the action IDR so teardown\ndoes not call tc_act_in_hw() on an error pointer."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: act_api: evitar la desreferenciación de ERR_PTR en tcf_idrinfo_destroy\n\nsyzbot informó de un fallo en tc_act_in_hw() durante el desmontaje de netns donde tcf_idrinfo_destroy() pasó un valor ERR_PTR(-EBUSY) como un puntero tc_action, lo que llevó a una desreferenciación inválida.\n\nProtegerse contra entradas ERR_PTR al iterar el IDR de acción para que el desmontaje no llame a tc_act_in_hw() en un puntero de error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "F535E896-F773-4ED1-84E6-317F81D02785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/67550a1130b647bb0d093c9c0a810c69aa6a30a8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/adb25a46dc0a43173f5ea5f5f58fc8ba28970c7c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22988",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.860",
      "lastModified" : "2026-04-27T14:16:27.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\narp: do not assume dev_hard_header() does not change skb->head\n\narp_create() is the only dev_hard_header() caller\nmaking assumption about skb->head being unchanged.\n\nA recent commit broke this assumption.\n\nInitialize @arp pointer after dev_hard_header() call."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\narp: no asumir que dev_hard_header() no cambia skb-&gt;head\n\narp_create() es el único llamador de dev_hard_header() que asume que skb-&gt;head permanece sin cambios.\n\nUn commit reciente dejó de realizar esta suposición.\n\nInicializar el puntero @arp después de la llamada a dev_hard_header()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.64",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "E24038E7-22A7-43B5-8E72-1C262445BB8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.4",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "27849DC4-2BBE-4536-8F33-2616A53ACA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1.160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FE16BE-5350-467E-993C-FF2A07CBB376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.6.120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EF61BE-4718-4CD4-89DC-C7E24C2FE0B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/029935507d0af6553c45380fbf6feecf756fd226",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/393525dee5c39acff8d6705275d7fcaabcfb7f0a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/70bddc16491ef4681f3569b3a2c80309a3edcdd1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/949647e7771a4a01963fe953a96d81fba7acecf3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c92510f5e3f82ba11c95991824a41e59a9c5ed81",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dd6ccec088adff4bdf33e2b2dd102df20a7128fa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e432dbff342b95fe44645f9a90fcf333c80f4b5e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22989",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:54.970",
      "lastModified" : "2026-02-26T18:51:04.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: check that server is running in unlock_filesystem\n\nIf we are trying to unlock the filesystem via an administrative\ninterface and nfsd isn't running, it crashes the server. This\nhappens currently because nfsd4_revoke_states() access state\nstructures (eg., conf_id_hashtbl) that has been freed as a part\nof the server shutdown.\n\n[   59.465072] Call trace:\n[   59.465308]  nfsd4_revoke_states+0x1b4/0x898 [nfsd] (P)\n[   59.465830]  write_unlock_fs+0x258/0x440 [nfsd]\n[   59.466278]  nfsctl_transaction_write+0xb0/0x120 [nfsd]\n[   59.466780]  vfs_write+0x1f0/0x938\n[   59.467088]  ksys_write+0xfc/0x1f8\n[   59.467395]  __arm64_sys_write+0x74/0xb8\n[   59.467746]  invoke_syscall.constprop.0+0xdc/0x1e8\n[   59.468177]  do_el0_svc+0x154/0x1d8\n[   59.468489]  el0_svc+0x40/0xe0\n[   59.468767]  el0t_64_sync_handler+0xa0/0xe8\n[   59.469138]  el0t_64_sync+0x1ac/0x1b0\n\nEnsure this can't happen by taking the nfsd_mutex and checking that\nthe server is still up, and then holding the mutex across the call to\nnfsd4_revoke_states()."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nnfsd: comprobar que el servidor está en ejecución en unlock_filesystem\n\nSi estamos intentando desbloquear el sistema de archivos a través de una interfaz de administración y nfsd no está en ejecución, se provoca la caída del servidor. Esto ocurre actualmente porque nfsd4_revoke_states() accede a estructuras de estado (por ejemplo, conf_id_hashtbl) que han sido liberadas como parte del apagado del servidor.\n\n[   59.465072] Traza de llamada:\n[   59.465308]  nfsd4_revoke_states+0x1b4/0x898 [nfsd] (P)\n[   59.465830]  write_unlock_fs+0x258/0x440 [nfsd]\n[   59.466278]  nfsctl_transaction_write+0xb0/0x120 [nfsd]\n[   59.466780]  vfs_write+0x1f0/0x938\n[   59.467088]  ksys_write+0xfc/0x1f8\n[   59.467395]  __arm64_sys_write+0x74/0xb8\n[   59.467746]  invoke_syscall.constprop.0+0xdc/0x1e8\n[   59.468177]  do_el0_svc+0x154/0x1d8\n[   59.468489]  el0_svc+0x40/0xe0\n[   59.468767]  el0t_64_sync_handler+0xa0/0xe8\n[   59.469138]  el0t_64_sync+0x1ac/0x1b0\n\nAsegurar que esto no pueda ocurrir tomando el nfsd_mutex y comprobando que el servidor sigue activo, y luego manteniendo el mutex durante la llamada a nfsd4_revoke_states()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "49616A55-2473-4303-ADBB-059630B30A6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/d0424066fcd294977f310964bed6f2a487fa4515",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d95499900fe52f3d461ed26b7a30bebea8f12914",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e06c9f6c0f554148d4921c2a15bd054260a054ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22990",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:55.077",
      "lastModified" : "2026-04-27T14:16:27.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: replace overzealous BUG_ON in osdmap_apply_incremental()\n\nIf the osdmap is (maliciously) corrupted such that the incremental\nosdmap epoch is different from what is expected, there is no need to\nBUG.  Instead, just declare the incremental osdmap to be invalid."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlibceph: reemplazar el BUG_ON excesivo en osdmap_apply_incremental()\n\nSi el osdmap está (maliciosamente) corrupto de tal manera que la época del osdmap incremental es diferente de lo que se espera, no hay necesidad de BUG. En su lugar, simplemente declarar el osdmap incremental como inválido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.34.1",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "40C41FEA-994B-4964-8F5A-C7E2E24BBC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B1BC1D-ED46-4364-A1D9-1FA74182B03A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "86D3F64C-3F27-43E0-B0D4-62CE1E1F4EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "7927713B-5EB0-41EB-86A9-9935775162E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "59037296-3143-4FBB-AFF7-D4FE2C85502F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA27FD5-7DBF-4C85-80A9-D523B2E4B033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "9711E333-A8E7-4F4B-BCFD-2023E889651A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.34:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "E04D3358-973B-42A1-8E08-2E3AE947193C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4b106fbb1c7b841cd402abd83eb2447164c799ea",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6348d70af847b79805374fe628d3809a63fd7df3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6afd2a4213524bc742b709599a3663aeaf77193c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6c6cec3db3b418c4fdf815731bc39e46dff75e1b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9aa0b0c14cefece078286d78b97d4c09685e372d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d3613770e2677683e65d062da5e31f48c409abe9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e00c3f71b5cf75681dbd74ee3f982a99cb690c2b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22991",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:55.183",
      "lastModified" : "2026-04-27T14:16:28.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: make free_choose_arg_map() resilient to partial allocation\n\nfree_choose_arg_map() may dereference a NULL pointer if its caller fails\nafter a partial allocation.\n\nFor example, in decode_choose_args(), if allocation of arg_map->args\nfails, execution jumps to the fail label and free_choose_arg_map() is\ncalled. Since arg_map->size is updated to a non-zero value before memory\nallocation, free_choose_arg_map() will iterate over arg_map->args and\ndereference a NULL pointer.\n\nTo prevent this potential NULL pointer dereference and make\nfree_choose_arg_map() more resilient, add checks for pointers before\niterating."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlibceph: hacer free_choose_arg_map() resistente a la asignación parcial\n\nfree_choose_arg_map() puede desreferenciar un puntero NULL si su llamador falla después de una asignación parcial.\n\nPor ejemplo, en decode_choose_args(), si la asignación de arg_map-&gt;args falla, la ejecución salta a la etiqueta fail y se llama a free_choose_arg_map(). Dado que arg_map-&gt;size se actualiza a un valor distinto de cero antes de la asignación de memoria, free_choose_arg_map() iterará sobre arg_map-&gt;args y desreferenciará un puntero NULL.\n\nPara evitar esta potencial desreferencia de puntero NULL y hacer free_choose_arg_map() más resistente, añadir comprobaciones para los punteros antes de iterar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "14DEF845-E647-4A78-9311-A8F1A59E3A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8081faaf089db5280c3be820948469f7c58ef8dd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/851241d3f78a5505224dc21c03d8692f530256b4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9b3730dabcf3764bfe3ff07caf55e641a0b45234",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c4c2152a858c0ce4d2bff6ca8c1d5b0ef9f2cbdf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e3fe30e57649c551757a02e1cad073c47e1e075e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ec1850f663da64842614c86b20fe734be070c2ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f21c3fdb96833aac2f533506899fe38c19cf49d5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22992",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:55.290",
      "lastModified" : "2026-04-27T14:16:28.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: return the handler error from mon_handle_auth_done()\n\nCurrently any error from ceph_auth_handle_reply_done() is propagated\nvia finish_auth() but isn't returned from mon_handle_auth_done().  This\nresults in higher layers learning that (despite the monitor considering\nus to be successfully authenticated) something went wrong in the\nauthentication phase and reacting accordingly, but msgr2 still trying\nto proceed with establishing the session in the background.  In the\ncase of secure mode this can trigger a WARN in setup_crypto() and later\nlead to a NULL pointer dereference inside of prepare_auth_signature()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlibceph: devolver el error del manejador de mon_handle_auth_done()\n\nActualmente, cualquier error de ceph_auth_handle_reply_done() se propaga a través de finish_auth() pero no se devuelve de mon_handle_auth_done(). Esto resulta en que las capas superiores aprendan que (a pesar de que el monitor nos considere autenticados con éxito) algo salió mal en la fase de autenticación y reaccionen en consecuencia, pero msgr2 sigue intentando proceder con el establecimiento de la sesión en segundo plano. En el caso del modo seguro, esto puede activar una ADVERTENCIA en setup_crypto() y más tarde conducir a una desreferencia de puntero NULL dentro de prepare_auth_signature()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/33908769248b38a5e77cf9292817bb28e641992d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/77229551f2cf72f3e35636db68e6a825b912cf16",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9e0101e57534ef0e7578dd09608a6106736b82e5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d2c4a5f6996683f287f3851ef5412797042de7f1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e097cd858196b1914309e7e3d79b4fa79383754d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e84b48d31b5008932c0a0902982809fbaa1d3b70",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22993",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:55.393",
      "lastModified" : "2026-04-02T12:16:19.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: Fix RSS LUT NULL ptr issue after soft reset\n\nDuring soft reset, the RSS LUT is freed and not restored unless the\ninterface is up. If an ethtool command that accesses the rss lut is\nattempted immediately after reset, it will result in NULL ptr\ndereference. Also, there is no need to reset the rss lut if the soft reset\ndoes not involve queue count change.\n\nAfter soft reset, set the RSS LUT to default values based on the updated\nqueue count only if the reset was a result of a queue count change and\nthe LUT was not configured by the user. In all other cases, don't touch\nthe LUT.\n\nSteps to reproduce:\n\n** Bring the interface down (if up)\nifconfig eth1 down\n\n** update the queue count (eg., 27->20)\nethtool -L eth1 combined 20\n\n** display the RSS LUT\nethtool -x eth1\n\n[82375.558338] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[82375.558373] #PF: supervisor read access in kernel mode\n[82375.558391] #PF: error_code(0x0000) - not-present page\n[82375.558408] PGD 0 P4D 0\n[82375.558421] Oops: Oops: 0000 [#1] SMP NOPTI\n<snip>\n[82375.558516] RIP: 0010:idpf_get_rxfh+0x108/0x150 [idpf]\n[82375.558786] Call Trace:\n[82375.558793]  <TASK>\n[82375.558804]  rss_prepare.isra.0+0x187/0x2a0\n[82375.558827]  rss_prepare_data+0x3a/0x50\n[82375.558845]  ethnl_default_doit+0x13d/0x3e0\n[82375.558863]  genl_family_rcv_msg_doit+0x11f/0x180\n[82375.558886]  genl_rcv_msg+0x1ad/0x2b0\n[82375.558902]  ? __pfx_ethnl_default_doit+0x10/0x10\n[82375.558920]  ? __pfx_genl_rcv_msg+0x10/0x10\n[82375.558937]  netlink_rcv_skb+0x58/0x100\n[82375.558957]  genl_rcv+0x2c/0x50\n[82375.558971]  netlink_unicast+0x289/0x3e0\n[82375.558988]  netlink_sendmsg+0x215/0x440\n[82375.559005]  __sys_sendto+0x234/0x240\n[82375.559555]  __x64_sys_sendto+0x28/0x30\n[82375.560068]  x64_sys_call+0x1909/0x1da0\n[82375.560576]  do_syscall_64+0x7a/0xfa0\n[82375.561076]  ? clear_bhb_loop+0x60/0xb0\n[82375.561567]  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n<snip>"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: Soluciona el problema de puntero NULL de la RSS LUT después de un reinicio suave\n\nDurante el reinicio suave, la RSS LUT se libera y no se restaura a menos que la interfaz esté activa. Si se intenta un comando ethtool que accede a la rss lut inmediatamente después del reinicio, resultará en una desreferencia de puntero NULL. Además, no es necesario reiniciar la rss lut si el reinicio suave no implica un cambio en el recuento de colas.\n\nDespués del reinicio suave, establece la RSS LUT a valores predeterminados basándose en el recuento de colas actualizado solo si el reinicio fue resultado de un cambio en el recuento de colas y la LUT no fue configurada por el usuario. En todos los demás casos, no modifiques la LUT.\n\nPasos para reproducir:\n\n Desactiva la interfaz (si está activa)\nifconfig eth1 down\n\n Actualiza el recuento de colas (ej., 27-&gt;20)\nethtool -L eth1 combined 20\n\n** Muestra la RSS LUT\nethtool -x eth1\n\n[82375.558338] BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000000\n[82375.558373] #PF: acceso de lectura de supervisor en modo kernel\n[82375.558391] #PF: error_code(0x0000) - página no presente\n[82375.558408] PGD 0 P4D 0\n[82375.558421] Oops: Oops: 0000 [#1] SMP NOPTI\n\n[82375.558516] RIP: 0010:idpf_get_rxfh+0x108/0x150 [idpf]\n[82375.558786] Traza de llamada:\n[82375.558793] \n[82375.558804] rss_prepare.isra.0+0x187/0x2a0\n[82375.558827] rss_prepare_data+0x3a/0x50\n[82375.558845] ethnl_default_doit+0x13d/0x3e0\n[82375.558863] genl_family_rcv_msg_doit+0x11f/0x180\n[82375.558886] genl_rcv_msg+0x1ad/0x2b0\n[82375.558902] ? __pfx_ethnl_default_doit+0x10/0x10\n[82375.558920] ? __pfx_genl_rcv_msg+0x10/0x10\n[82375.558937] netlink_rcv_skb+0x58/0x100\n[82375.558957] genl_rcv+0x2c/0x50\n[82375.558971] netlink_unicast+0x289/0x3e0\n[82375.558988] netlink_sendmsg+0x215/0x440\n[82375.559005] __sys_sendto+0x234/0x240\n[82375.559555] __x64_sys_sendto+0x28/0x30\n[82375.560068] x64_sys_call+0x1909/0x1da0\n[82375.560576] do_syscall_64+0x7a/0xfa0\n[82375.561076] ? clear_bhb_loop+0x60/0xb0\n[82375.561567] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "C006C634-C236-4B4B-B7FA-AF44C3098505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/a09380354d2f14759b9dd45de1bc2f6bf49e651b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ab92fa4dd81beaaed4e93a851f7a37c9b2d9776f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ebecca5b093895da801b3eba1a55b4ec4027d196",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22994",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:55.490",
      "lastModified" : "2026-02-26T17:19:00.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix reference count leak in bpf_prog_test_run_xdp()\n\nsyzbot is reporting\n\n  unregister_netdevice: waiting for sit0 to become free. Usage count = 2\n\nproblem. A debug printk() patch found that a refcount is obtained at\nxdp_convert_md_to_buff() from bpf_prog_test_run_xdp().\n\nAccording to commit ec94670fcb3b (\"bpf: Support specifying ingress via\nxdp_md context in BPF_PROG_TEST_RUN\"), the refcount obtained by\nxdp_convert_md_to_buff() will be released by xdp_convert_buff_to_md().\n\nTherefore, we can consider that the error handling path introduced by\ncommit 1c1949982524 (\"bpf: introduce frags support to\nbpf_prog_test_run_xdp()\") forgot to call xdp_convert_buff_to_md()."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nbpf: Corregir fuga de contador de referencias en bpf_prog_test_run_xdp()\n\nsyzbot está reportando\n\nunregister_netdevice: esperando que sit0 quede libre. Recuento de uso = 2\n\nproblema. Un parche de depuración printk() encontró que se obtiene un contador de referencias en xdp_convert_md_to_buff() desde bpf_prog_test_run_xdp().\n\nSegún el commit ec94670fcb3b ('bpf: Soporte para especificar el ingreso a través del contexto xdp_md en BPF_PROG_TEST_RUN'), el contador de referencias obtenido por xdp_convert_md_to_buff() será liberado por xdp_convert_buff_to_md().\n\nPor lo tanto, podemos considerar que la ruta de manejo de errores introducida por el commit 1c1949982524 ('bpf: introducir soporte de fragmentos en bpf_prog_test_run_xdp()') olvidó llamar a xdp_convert_buff_to_md()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.18",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "D8396A00-9DF6-4F41-B27A-476CA41851D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/368569bc546d3368ee9980ba79fc42fdff9a3365",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/737be05a765761d7d7c9f7fe92274bd8e6f6951e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/98676ee71fd4eafeb8be63c7f3f1905d40e03101",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ec69daabe45256f98ac86c651b8ad1b2574489a7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fb9ef40cccdbacce36029b305d0ef1e12e4fea38",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22995",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-23T16:15:55.603",
      "lastModified" : "2026-02-26T17:13:33.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nublk: fix use-after-free in ublk_partition_scan_work\n\nA race condition exists between the async partition scan work and device\nteardown that can lead to a use-after-free of ub->ub_disk:\n\n1. ublk_ctrl_start_dev() schedules partition_scan_work after add_disk()\n2. ublk_stop_dev() calls ublk_stop_dev_unlocked() which does:\n   - del_gendisk(ub->ub_disk)\n   - ublk_detach_disk() sets ub->ub_disk = NULL\n   - put_disk() which may free the disk\n3. The worker ublk_partition_scan_work() then dereferences ub->ub_disk\n   leading to UAF\n\nFix this by using ublk_get_disk()/ublk_put_disk() in the worker to hold\na reference to the disk during the partition scan. The spinlock in\nublk_get_disk() synchronizes with ublk_detach_disk() ensuring the worker\neither gets a valid reference or sees NULL and exits early.\n\nAlso change flush_work() to cancel_work_sync() to avoid running the\npartition scan work unnecessarily when the disk is already detached."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nublk: corrige uso después de liberación en ublk_partition_scan_work\n\nExiste una condición de carrera entre el trabajo de escaneo de particiones asíncrono y el desmontaje del dispositivo que puede llevar a un uso después de liberación de ub-&gt;ub_disk:\n\n1. ublk_ctrl_start_dev() programa partition_scan_work después de add_disk()\n2. ublk_stop_dev() llama a ublk_stop_dev_unlocked() que hace:\n   - del_gendisk(ub-&gt;ub_disk)\n   - ublk_detach_disk() establece ub-&gt;ub_disk = NULL\n   - put_disk() que puede liberar el disco\n3. El worker ublk_partition_scan_work() entonces desreferencia ub-&gt;ub_disk llevando a UAF\n\nCorrige esto usando ublk_get_disk()/ublk_put_disk() en el worker para mantener una referencia al disco durante el escaneo de particiones. El spinlock en ublk_get_disk() se sincroniza con ublk_detach_disk() asegurando que el worker o bien obtiene una referencia válida o ve NULL y sale temprano.\n\nTambién cambia flush_work() a cancel_work_sync() para evitar ejecutar innecesariamente el trabajo de escaneo de particiones cuando el disco ya está desmontado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.4",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "27849DC4-2BBE-4536-8F33-2616A53ACA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/72e28774e9644c2bdbb4920842fbf77103a15a85",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f0d385f6689f37a2828c686fb279121df006b4cb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1299",
      "sourceIdentifier" : "cna@python.org",
      "published" : "2026-01-23T17:16:12.977",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \nemail module, specifically the \"BytesGenerator\" class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \"LiteralHeader\" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in \"BytesGenerator\"."
      }, {
        "lang" : "es",
        "value" : "El módulo de correo electrónico, específicamente la clase 'BytesGenerator', no escapaba correctamente los saltos de línea para los encabezados de correo electrónico al serializar un mensaje de correo electrónico, lo que permitía la inyección de encabezados cuando se serializa un correo electrónico. Esto solo es aplicable si se utiliza 'LiteralHeader' para escribir encabezados que no respetan las reglas de plegado de correo electrónico; el nuevo comportamiento rechazará los encabezados plegados incorrectamente en 'BytesGenerator'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@python.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@python.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.org/CVERecord?id=CVE-2024-6923",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/0a925ab591c45d6638f37b5e57796f36fa0e56d8",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/7877fe424415bc4a13045e62a90a7277413d8cb9",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/842ce19a0c0b58d61591e8f6a708c38db1fb94e4",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/8cdf6204f4ae821f32993f8fc6bad0d318f95f36",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/e417f05ad77a4c30ddc07f99e90fc0cef43e831a",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/issues/144125",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/pull/144126",
        "source" : "cna@python.org"
      }, {
        "url" : "https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/",
        "source" : "cna@python.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24423",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-23T17:16:13.483",
      "lastModified" : "2026-02-06T16:45:15.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "Las versiones de SmarterTools SmarterMail anteriores a la compilación 9511 contienen una vulnerabilidad de ejecución remota de código no autenticada en el método API ConnectToHub. El atacante podría dirigir SmarterMail al servidor HTTP malicioso, que sirve el comando malicioso del sistema operativo. Este comando será ejecutado por la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-05",
      "cisaActionDue" : "2026-02-26",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability",
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "100.0.9511",
            "matchCriteriaId" : "D508C7EA-385D-428C-ACD3-9E2F93F0FB31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-white.com/public-vulnerability-list/#systemadminsettingscontrollerconnecttohub-missing-authentication-in-smartermail",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.smartertools.com/smartermail/release-notes/current",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/smartertools-smartermail-unauthenticated-rce-via-connecttohub-api",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24423",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21867",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-23T19:15:54.487",
      "lastModified" : "2026-01-23T19:15:54.487",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Reason: This candidate was issued in error."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1386",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-01-23T21:15:51.397",
      "lastModified" : "2026-01-30T16:57:56.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A UNIX symbolic link following issue in the jailer component in Firecracker version  v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. \n\nTo mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above."
      }, {
        "lang" : "es",
        "value" : "Un problema de seguimiento de enlaces simbólicos de UNIX en el componente jailer en Firecracker versión v1.13.1 y anteriores y 1.14.0 en Linux puede permitir a un usuario local del host con acceso de escritura a los directorios precreados del jailer sobrescribir archivos arbitrarios del host a través de un ataque de enlace simbólico durante la copia de inicialización al inicio del jailer, si el jailer se ejecuta con privilegios de root.\n\nPara mitigar este problema, los usuarios deben actualizar a la versión v1.13.2 o 1.14.1 o superior."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:firecracker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.2",
            "matchCriteriaId" : "F5711475-1683-4678-A801-CEE4DD77C20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:firecracker:1.14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C1831DAD-F5BB-42AF-8CD4-EA9CD67C1247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:firecracker:1.14.0:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "0067E934-76C2-4FE3-AA7E-9BD7C8C98135"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-003-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/firecracker/releases/tag/v1.13.2",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Release Notes", "Product" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/firecracker/releases/tag/v1.14.1",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Release Notes", "Product" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/firecracker/security/advisories/GHSA-36j2-f825-qvgc",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0991",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-23T23:15:54.280",
      "lastModified" : "2026-01-23T23:15:54.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24127",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-23T23:15:54.360",
      "lastModified" : "2026-02-02T13:32:53.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back without proper contextual encoding when authentication fails. An attacker can execute script in the login page context. This issue has been fixed in version 2.19.2."
      }, {
        "lang" : "es",
        "value" : "Typemill es un CMS de archivo plano, basado en Markdown, diseñado para sitios web de documentación informativa. Un Cross-Site Scripting (XSS) reflejado existe en la plantilla de vista de error de inicio de sesión 'login.twig' de las versiones 2.19.1 e inferiores. El valor 'username' puede ser devuelto sin la codificación contextual adecuada cuando la autenticación falla. Un atacante puede ejecutar scripts en el contexto de la página de inicio de sesión. Este problema ha sido solucionado en la versión 2.19.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typemill:typemill:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.19.2",
            "matchCriteriaId" : "4E3CADA3-5037-4F37-9488-CE162A458090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/typemill/typemill/commit/b506acd11e80fb9c8db5fa6c2c8ad73580b4e88c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/typemill/typemill/releases/tag/v2.19.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/typemill/typemill/security/advisories/GHSA-65x4-pjhj-r8wr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24128",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T00:15:49.007",
      "lastModified" : "2026-02-12T16:47:29.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17.0.0-rc-1 through 17.4.4, and 17.5.0-rc-1 through 17.7.0 contain a reflected Cross-site Scripting (XSS) vulnerability, which allows an attacker to craft a malicious URL and execute arbitrary actions with the same privileges as the victim. If the victim has administrative or programming rights, those rights can be exploited to gain full access to the XWiki installation. This issue has been patched in versions 17.8.0-rc-1, 17.4.5 and 16.10.12. To workaround, the patch can be applied manually, only a single line in templates/logging_macros.vm needs to be changed, no restart is required."
      }, {
        "lang" : "es",
        "value" : "XWiki Platform es una plataforma wiki genérica que ofrece servicios en tiempo de ejecución para aplicaciones construidas sobre ella. Las versiones 7.0-milestone-2 hasta 16.10.11, 17.0.0-rc-1 hasta 17.4.4, y 17.5.0-rc-1 hasta 17.7.0 contienen una vulnerabilidad de cross-site scripting (XSS) reflejado, que permite a un atacante crear una URL maliciosa y ejecutar acciones arbitrarias con los mismos privilegios que la víctima. Si la víctima tiene derechos administrativos o de programación, esos derechos pueden ser explotados para obtener acceso completo a la instalación de XWiki. Este problema ha sido parcheado en las versiones 17.8.0-rc-1, 17.4.5 y 16.10.12. Como solución alternativa, el parche puede aplicarse manualmente, solo una línea en templates/logging_macros.vm necesita ser cambiada, no se requiere reiniciar."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.1",
            "versionEndExcluding" : "16.10.12",
            "matchCriteriaId" : "1BEA65A2-AB4E-4261-A203-D75F286BA3DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.1",
            "versionEndExcluding" : "17.4.5",
            "matchCriteriaId" : "255D4A2A-0AA2-4A40-AB6D-D1FABD3E3DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.6.0",
            "versionEndExcluding" : "17.8.0",
            "matchCriteriaId" : "9C3D6525-5D1C-48E9-89FB-CDCC473ACEF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:7.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "11FB095E-89D2-4AB5-B152-A0D5C3D0B137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:7.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "09AD3791-AE57-4D7E-97BF-8FE0062E9C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:17.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "048F966C-7E51-46CE-9DD4-F0386D3548C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki-rendering:17.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A81FD5E-9EDD-4A70-A3CF-81E0FADCD720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/8337ac8c3b19c37f306723b638b2cae8b0a57dbf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/releases/tag/xwiki-platform-16.10.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/releases/tag/xwiki-platform-17.4.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/releases/tag/xwiki-platform-17.8.0-rc-1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-wvqx-m5px-6cmp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-23462",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24136",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T00:15:49.167",
      "lastModified" : "2026-02-12T16:15:00.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109, 3.21.0-a.0 through 3.21.44 and 3.22.0-a.0 through 3.22.28 have a n Insecure Direct Object Reference (IDOR) vulnerability that allows unauthenticated actors to extract sensitive information in plain text. Orders created before Saleor 3.2.0 could have PIIs exfiltrated. The issue has been patched in Saleor versions: 3.22.29, 3.21.45, and 3.20.110. To workaround, temporarily block non-staff users from fetching order information (the order() GraphQL query) using a WAF."
      }, {
        "lang" : "es",
        "value" : "Saleor es una plataforma de comercio electrónico. Las versiones 3.2.0 a 3.20.109, 3.21.0-a.0 a 3.21.44 y 3.22.0-a.0 a 3.22.28 tienen una vulnerabilidad de Referencia Directa Insegura a Objeto (IDOR) que permite a actores no autenticados extraer información sensible en texto plano. Los pedidos creados antes de Saleor 3.2.0 podrían haber tenido PIIs exfiltrados. El problema ha sido parcheado en las versiones de Saleor: 3.22.29, 3.21.45 y 3.20.110. Como solución alternativa, bloquee temporalmente a los usuarios que no son personal de obtener información de pedidos (la consulta GraphQL order()) usando un WAF."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.20.110",
            "matchCriteriaId" : "1D519693-9F38-49CC-A2AA-7A707AE921C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.21.0",
            "versionEndExcluding" : "3.21.45",
            "matchCriteriaId" : "CD9EA08A-C411-4D72-B4DB-27FAC65202A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.22.0",
            "versionEndExcluding" : "3.22.29",
            "matchCriteriaId" : "72EB08B2-3E6B-40B7-AFE2-783A7FDDFAA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saleor/saleor/commit/5dab1857fbb2801f74e2bfe86f307e4590d9d2fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/718ce1b4fc3aef68eeac1aea0cf1d70a614ba6af",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/9bcd4f9000b189297eeb3ac88cc28c6c30229153",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/aeaced8acb5e01055eddec584263f77e517d5944",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-r6fj-f4r9-36gr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24139",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T00:15:49.313",
      "lastModified" : "2026-02-02T13:26:40.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below do not safeguard against authorization bypass, allowing guest users to download the complete application database. The application fails to properly validate user permissions on the database export endpoint, enabling low-privileged users to access sensitive data they should not have permission to view."
      }, {
        "lang" : "es",
        "value" : "MyTube es un descargador y reproductor autoalojado para varios sitios web de video. Las versiones 1.7.78 e inferiores no protegen contra la omisión de autorización, permitiendo a los usuarios invitados descargar la base de datos completa de la aplicación. La aplicación no valida correctamente los permisos de usuario en el punto final de exportación de la base de datos, permitiendo a los usuarios con bajos privilegios acceder a datos sensibles a los que no deberían tener permiso para ver."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:franklioxygen:mytube:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.78",
            "matchCriteriaId" : "5F5D04C2-9BCE-4945-BC56-3532544A03D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/franklioxygen/MyTube/commit/e271775e27d51b26e54731b7b874447f47a1f280",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-hhc3-8q8c-89q7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24140",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T00:15:49.450",
      "lastModified" : "2026-02-02T13:26:17.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below have a Mass Assignment vulnerability in the settings management functionality due to insufficient input validation. The application's saveSettings() function accepts arbitrary key-value pairs without validating property names against allowed settings. The function uses Record<string, any> as input type and iterates over all entries using Object.entries() without filtering unauthorized properties. Any field sent by the attacker is directly persisted to the database, regardless of whether it corresponds to a legitimate application setting. This issue has been fixed in version 1.7.78."
      }, {
        "lang" : "es",
        "value" : "MyTube es un descargador y reproductor autoalojado para varios sitios web de vídeo. Las versiones 1.7.78 e inferiores tienen una vulnerabilidad de Asignación Masiva en la funcionalidad de gestión de configuraciones debido a una validación de entrada insuficiente. La función saveSettings() de la aplicación acepta pares clave-valor arbitrarios sin validar los nombres de las propiedades contra las configuraciones permitidas. La función utiliza Record como tipo de entrada e itera sobre todas las entradas usando Object.entries() sin filtrar propiedades no autorizadas. Cualquier campo enviado por el atacante se persiste directamente en la base de datos, independientemente de si corresponde a una configuración legítima de la aplicación. Este problema ha sido solucionado en la versión 1.7.78."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:franklioxygen:mytube:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.78",
            "matchCriteriaId" : "2E0CEE7C-45C8-43F1-833A-3E60F1561273"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/franklioxygen/MyTube/commit/9d737cb373f7af3e5c92d458e2832caf817b6de6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-c938-x24g-fxcx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24474",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T00:15:49.603",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dioxus Components is a shadcn-style component library for the Dioxus app framework. Prior to commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a, `use_animated_open` formats a string for `eval` with an `id` that can be user supplied. Commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a patches the issue."
      }, {
        "lang" : "es",
        "value" : "Dioxus Components es una librería de componentes estilo shadcn para el framework de aplicaciones Dioxus. Antes del commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a, `use_animated_open` formatea una cadena para `eval` con un `id` que puede ser proporcionado por el usuario. El commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a parchea el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DioxusLabs/components/commit/41e4242ecb1062d04ae42a5215363c1d9fd4e23a",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/DioxusLabs/components/security/advisories/GHSA-34pj-292j-xr69",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22582",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2026-01-24T01:15:49.920",
      "lastModified" : "2026-02-12T16:13:12.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Inadecuada de Delimitadores de Argumentos en un Comando ('Inyección de Argumentos') en Salesforce Marketing Cloud Engagement (módulo MicrositeUrl) permite la Manipulación del Protocolo de Servicios Web. Este problema afecta a Marketing Cloud Engagement: antes del 21 de enero de 2026."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@salesforce.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-01-21",
            "matchCriteriaId" : "5A41CCDE-A5EA-45D6-A009-A6908459C453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/s/articleView?id=005299346&type=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22583",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2026-01-24T01:15:50.060",
      "lastModified" : "2026-02-12T16:12:21.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl module) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Inadecuada de Delimitadores de Argumentos en un Comando ('Inyección de Argumentos') en Salesforce Marketing Cloud Engagement (módulo CloudPagesUrl) permite la Manipulación del Protocolo de Servicios Web. Este problema afecta a Marketing Cloud Engagement: antes del 21 de enero de 2026."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@salesforce.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-01-21",
            "matchCriteriaId" : "5A41CCDE-A5EA-45D6-A009-A6908459C453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/s/articleView?id=005299346&type=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22585",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2026-01-24T01:15:50.167",
      "lastModified" : "2026-02-12T16:08:29.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026."
      }, {
        "lang" : "es",
        "value" : "Uso de una vulnerabilidad de Algoritmo Criptográfico Roto o Arriesgado en Salesforce Marketing Cloud Engagement (módulos CloudPages, Reenviar a un Amigo, Centro de Perfil, Centro de Suscripción, Centro de Anulación de Suscripción, Ver como Página Web) permite la Manipulación del Protocolo de Servicios Web. Este problema afecta a Marketing Cloud Engagement: antes del 21 de enero de 2026."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@salesforce.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-01-21",
            "matchCriteriaId" : "5A41CCDE-A5EA-45D6-A009-A6908459C453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/s/articleView?id=005299346&type=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22586",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2026-01-24T01:15:50.283",
      "lastModified" : "2026-02-12T16:07:53.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de clave criptográfica codificada de forma rígida en Salesforce Marketing Cloud Engagement (módulos CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage) permite la manipulación del protocolo de servicios web. Este problema afecta a Marketing Cloud Engagement: antes del 21 de enero de 2026."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@salesforce.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:marketing_cloud_engagement:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-01-21",
            "matchCriteriaId" : "5A41CCDE-A5EA-45D6-A009-A6908459C453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/s/articleView?id=005299346&type=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24399",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:50.393",
      "lastModified" : "2026-02-12T16:05:57.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChatterMate is a no-code AI chatbot agent framework. In versions 1.0.8 and below, the chatbot accepts and executes malicious HTML/JavaScript payloads when supplied as chat input. Specifically, an <iframe> payload containing a javascript: URI can be processed and executed in the browser context. This allows access to sensitive client-side data such as localStorage tokens and cookies, resulting in client-side injection. This issue has been fixed in version 1.0.9."
      }, {
        "lang" : "es",
        "value" : "ChatterMate es un framework de agente de chatbot de IA sin código. En las versiones 1.0.8 e inferiores, el chatbot acepta y ejecuta cargas útiles maliciosas de HTML/JavaScript cuando se proporcionan como entrada de chat. Específicamente, una carga útil de  que contiene una URI de javascript: puede ser procesada y ejecutada en el contexto del navegador. Esto permite el acceso a datos sensibles del lado del cliente, como tokens de localStorage y cookies, lo que resulta en una inyección del lado del cliente. Este problema ha sido solucionado en la versión 1.0.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chattermate:chattermate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9",
            "matchCriteriaId" : "0A56F451-616D-4BCC-8D6D-BFC3D82FB697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chattermate/chattermate.chat/commit/ff3398031abb97ae28546eaf993fed3619eaffdd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chattermate/chattermate.chat/releases/tag/v1.0.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/chattermate/chattermate.chat/security/advisories/GHSA-72p3-w95w-q3j4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24402",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:50.543",
      "lastModified" : "2026-01-24T01:15:50.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: GitHub cannot issue a CVE for this Security Advisory because this advisory includes information about more than one vulnerability.\r\n\r\nAccording to [rule 4.2.11 of the CVE CNA rules](https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_4-2_CVE_ID_Assignment):\r\n\r\n> 4.2.6 CNAs SHOULD assign different CVE IDs to separate Vulnerabilities, as determined using the guidance in [4.1](https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_4-1_Vulnerability_Determination).\r\n\r\n> 4.2.11 CNAs SHOULD assign different CVE IDs to different, Independently Fixable Vulnerabilities.\r\n\r\nYou can move forward in one of two ways:\r\n\r\n- If you agree that this Security Advisory concerns more than one independently fixable vulnerability, split each vulnerability into its own advisory and request one CVE for each vulnerability.\r\n- If you do not agree that these vulnerabilities are independently fixable, resubmit the CVE request with a section clarifying how they are dependent and should have the same CVE.\r\n\r\nThank you for making the open source ecosystem more secure by fixing and responsibly disclosing these vulnerabilities."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24403",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:50.620",
      "lastModified" : "2026-01-30T18:23:11.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow vulnerability exists in icValidateStatus CIccProfile::CheckHeader() when user-controllable input is incorporated into profile data unsafely. Tampering with tag tables, offsets, or size fields can trigger parsing errors, memory corruption, or DoS, potentially enabling arbitrary Code Execution or bypassing application logic. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. En las versiones 2.3.1.1 e inferiores, existe una vulnerabilidad de desbordamiento de entero en icValidateStatus CIccProfile::CheckHeader() cuando la entrada controlable por el usuario se incorpora de forma insegura en los datos del perfil. La manipulación de tablas de etiquetas, desplazamientos o campos de tamaño puede desencadenar errores de análisis, corrupción de memoria o DoS, lo que podría permitir la ejecución de código arbitrario o eludir la lógica de la aplicación. Este problema se ha solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commits/d993997005449a0a6958e65b057bd25e17dff89",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/505",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-ph33-qp8j-5q34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24404",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:50.773",
      "lastModified" : "2026-01-30T18:24:22.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, CIccXmlArrayType() contains a Null Pointer Dereference and Undefined Behavior vulnerability. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. En las versiones 2.3.1.1 e inferiores, CIccXmlArrayType() contiene una vulnerabilidad de desreferencia de puntero nulo y comportamiento indefinido. Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la ejecución de código. Este problema ha sido corregido en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/cd637eb33f0c8055fa54d8776e00555d3d39ef0c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/488",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-hqfg-45jp-hp9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24405",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:50.923",
      "lastModified" : "2026-01-30T18:24:30.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccMpeCalculator::Read(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores tienen una vulnerabilidad de desbordamiento de búfer de montón en CIccMpeCalculator::Read(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la ejecución de código. Este problema ha sido corregido en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/d22fc174866e2521f8a5f9393fab5be306329f62",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/479",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-2r5c-5w66-47vv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24406",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:51.073",
      "lastModified" : "2026-01-30T18:24:36.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccTagNamedColor2::SetSize(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores tienen una vulnerabilidad de desbordamiento de búfer de montón en CIccTagNamedColor2::SetSize(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la ejecución de código. Este problema ha sido solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/90c71cba2c563b1f5dc84197f827540d1baaea67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/480",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-h9h3-45cm-j95f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24407",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T01:15:51.223",
      "lastModified" : "2026-01-30T18:24:44.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in icSigCalcOp(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 y anteriores tienen Comportamiento Indefinido en icSigCalcOp(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la Ejecución de Código. Este problema ha sido solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/881802931a71c4b0dfc28bc80ee55b2cb84dab90",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/481",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-m6gx-93cp-4855",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24401",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T02:15:48.760",
      "lastModified" : "2026-02-12T15:58:27.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524."
      }, {
        "lang" : "es",
        "value" : "Avahi es un sistema que facilita el descubrimiento de servicios en una red local a través de la suite de protocolos mDNS/DNS-SD. En las versiones 0.9rc2 e inferiores, avahi-daemon puede ser bloqueado mediante un fallo de segmentación al enviar una respuesta mDNS no solicitada que contenga un registro CNAME recursivo, donde el alias y el nombre canónico apuntan al mismo dominio (por ejemplo, 'h.local' como CNAME para 'h.local'). Esto causa una recursión ilimitada en la función lookup_handle_cname, lo que lleva al agotamiento de la pila. La vulnerabilidad afecta a los navegadores de registros donde AVAHI_LOOKUP_USE_MULTICAST está configurado explícitamente, lo que incluye los navegadores de registros creados por los resolvedores utilizados por nss-mdns. Este problema está parcheado en el commit 78eab31128479f06e30beb8c1cbf99dd921e2524."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9",
            "matchCriteriaId" : "6481267F-934F-4A0C-9B25-59738E798458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "76971590-AEED-4CB1-B7B7-45EA8FD11524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:0.9:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "83D94AE4-46AC-4955-BB0D-193CF79149A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/avahi/avahi/issues/501",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24409",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T02:15:48.930",
      "lastModified" : "2026-01-30T18:24:52.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores tienen Comportamiento Indefinido y Desreferencia de Puntero Nulo en CIccTagXmlFloatNum&lt;&gt;::ParseXml(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la Ejecución de Código. Este problema ha sido solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/9f134c44895edd2edca4bcb97e15c0ba9aa77382",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/484",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-398v-jvcg-p8f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24410",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T02:15:49.080",
      "lastModified" : "2026-01-30T18:24:57.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores tienen Comportamiento Indefinido y Desreferencia de Puntero Nulo en CIccProfileXml::ParseBasic(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la Ejecución de Código. Este problema ha sido solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/3cf522b13832692b107322cd51c4ae5c3a21f366",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/507",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-398q-4rpv-3v9r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24411",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T02:15:49.223",
      "lastModified" : "2026-01-30T18:25:00.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 y anteriores tienen Comportamiento Indefinido en CIccTagXmlSegmentedCurve::ToXml(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfiles ICC u otros blobs binarios estructurados. Una explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la Ejecución de Código. Este problema ha sido solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-690"
        }, {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/d6d6f51a999d4266ec09347cac7e0930d6e02eec",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/499",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-x53f-7h27-9fc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24412",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T02:15:49.360",
      "lastModified" : "2026-01-30T18:25:05.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have aHeap Buffer Overflow vulnerability in the CIccTagXmlSegmentedCurve::ToXml() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and Code Execution. This issue has been fixed in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona librerías y herramientas para interactuar con, manipular y aplicar perfiles de gestión de color ICC. Las versiones 2.3.1.1 e inferiores tienen una vulnerabilidad de desbordamiento de búfer de pila en la función CIccTagXmlSegmentedCurve::ToXml(). Esto ocurre cuando la entrada controlable por el usuario se incorpora de forma insegura en datos de perfil ICC u otros blobs binarios estructurados. La explotación exitosa puede permitir a un atacante realizar DoS, manipular datos, eludir la lógica de la aplicación y la ejecución de código. Este problema ha sido solucionado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/2be3b125933a57fe8b6624e9dfd69d8e5360bf70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/518",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-6rf4-63j2-cfrf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24421",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T02:15:49.507",
      "lastModified" : "2026-01-30T17:29:58.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated() but does not verify that the requester has configuration/admin permissions. Non-admin users can trigger a configuration backup and retrieve its path. The endpoint only checks authentication, not authorization, and returns a link to the generated ZIP. This issue is fixed in version 4.0.17."
      }, {
        "lang" : "es",
        "value" : "phpMyFAQ es una aplicación web de preguntas frecuentes de código abierto. Las versiones 4.0.16 e inferiores tienen una lógica de autorización defectuosa que expone el endpoint /API/setup/backup a cualquier usuario autenticado a pesar de sus permisos. SetupController.php utiliza userIsAuthenticated() pero no verifica que el solicitante tenga permisos de configuración/administrador. Los usuarios no administradores pueden activar una copia de seguridad de la configuración y recuperar su ruta. El endpoint solo comprueba la autenticación, no la autorización, y devuelve un enlace al ZIP generado. Este problema está solucionado en la versión 4.0.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.17",
            "matchCriteriaId" : "8A48918B-2C09-403F-A8A5-8179AE32363E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-wm8h-26fv-mg7g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24420",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T03:16:00.760",
      "lastModified" : "2026-01-28T18:25:46.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below allow an authenticated user without the dlattachment permission to download FAQ attachments due to a incomprehensive permissions check. The presence of a right key is improperly validated as proof of authorization in attachment.php. Additionally, the group and user permission logic contains a flawed conditional expression that may allow unauthorized access. This issue has been fixed in version"
      }, {
        "lang" : "es",
        "value" : "phpMyFAQ es una aplicación web de FAQ de código abierto. Las versiones 4.0.16 e inferiores permiten a un usuario autenticado sin el permiso dlattachment descargar archivos adjuntos de FAQ debido a una verificación de permisos incompleta. La presencia de una clave correcta se valida incorrectamente como prueba de autorización en attachment.php. Además, la lógica de permisos de grupo y usuario contiene una expresión condicional defectuosa que puede permitir el acceso no autorizado. Este problema ha sido solucionado en la versión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.17",
            "matchCriteriaId" : "8A48918B-2C09-403F-A8A5-8179AE32363E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7p9h-m7m8-vhhv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24422",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T03:16:01.010",
      "lastModified" : "2026-01-28T18:10:23.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyFAQ is an open source FAQ web application. In versions 4.0.16 and below, multiple public API endpoints improperly expose sensitive user information due to insufficient access controls. The OpenQuestionController::list() endpoint calls Question::getAll() with showAll=true by default, returning records marked as non-public (isVisible=false) along with user email addresses, with similar exposures present in comment, news, and FAQ APIs. This information disclosure vulnerability could enable attackers to harvest email addresses for phishing campaigns or access content that was explicitly marked as private. This issue has been fixed in version 4.0.17."
      }, {
        "lang" : "es",
        "value" : "phpMyFAQ es una aplicación web de preguntas frecuentes de código abierto. En las versiones 4.0.16 e inferiores, múltiples puntos finales de API públicos exponen indebidamente información sensible del usuario debido a controles de acceso insuficientes. El punto final OpenQuestionController::list() llama a Question::getAll() con showAll=true por defecto, devolviendo registros marcados como no públicos (isVisible=false) junto con las direcciones de correo electrónico de los usuarios, con exposiciones similares presentes en las API de comentarios, noticias y preguntas frecuentes. Esta vulnerabilidad de revelación de información podría permitir a los atacantes recolectar direcciones de correo electrónico para campañas de phishing o acceder a contenido que fue explícitamente marcado como privado. Este problema ha sido solucionado en la versión 4.0.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.17",
            "matchCriteriaId" : "8A48918B-2C09-403F-A8A5-8179AE32363E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-j4rc-96xj-gvqc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24469",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-24T03:16:01.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's filesystem by crafting a malicious HTTP GET request containing ../ sequences. The application fails to sanitize the filename variable derived from the user-controlled URL path, directly concatenating it to the files_directory base path and enabling traversal outside the intended root. No patch was available at the time of publication."
      }, {
        "lang" : "es",
        "value" : "C++ HTTP Server es un servidor HTTP/1.1 diseñado para manejar conexiones de clientes y servir solicitudes HTTP. Las versiones 1.0 e inferiores son vulnerables a salto de ruta a través del método RequestHandler::handleRequest. Esta falla permite a un atacante remoto no autenticado leer archivos arbitrarios del sistema de archivos del servidor al crear una solicitud HTTP GET maliciosa que contiene secuencias ../. La aplicación no logra sanear la variable filename derivada de la ruta URL controlada por el usuario, concatenándola directamente a la ruta base files_directory y permitiendo el salto de ruta fuera de la raíz prevista. Ningún parche estaba disponible en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frustratedProton/http-server/security/advisories/GHSA-qp54-6gfq-3gff",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24642",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.400",
      "lastModified" : "2026-01-24T04:15:50.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24643",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.507",
      "lastModified" : "2026-01-24T04:15:50.507",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24644",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.570",
      "lastModified" : "2026-01-24T04:15:50.570",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24645",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.643",
      "lastModified" : "2026-01-24T04:15:50.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24646",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.703",
      "lastModified" : "2026-01-24T04:15:50.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24647",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.773",
      "lastModified" : "2026-01-24T04:15:50.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24648",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.827",
      "lastModified" : "2026-01-24T04:15:50.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24649",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-24T04:15:50.890",
      "lastModified" : "2026-01-24T04:15:50.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0806",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:07.400",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP-ClanWars plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin WP-ClanWars para WordPress es vulnerable a inyección SQL a través del parámetro 'orderby' en todas las versiones hasta la 2.0.1, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superior, añadan consultas SQL adicionales en consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/89.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-clanwars/tags/2.0.1/classes/teams.class.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-clanwars/trunk/classes/teams.class.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/65aa20e2-efc1-481a-8ed4-423d2420c3db?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0807",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:07.580",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application via the '/template-proxy/' and '/proxy-image/' endpoint."
      }, {
        "lang" : "es",
        "value" : "El plugin Frontis Blocks para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 1.1.6, inclusive. Esto se debe a una restricción insuficiente en el parámetro 'url' en la función 'template_proxy'. Esto permite que atacantes no autenticados realicen peticiones web a ubicaciones arbitrarias originadas desde la aplicación web a través del endpoint '/template-proxy/' y '/proxy-image/'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/frontis-blocks/tags/1.1.4/includes/Admin/Admin.php#L910",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/frontis-blocks/trunk/includes/Admin/Admin.php#L910",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3444616/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/322e0a27-9119-4b46-a043-d3a68c4fcdc4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1070",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:07.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Alex User Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0. This is due to missing nonce validation on the alex_user_counter_function() function. This makes it possible for unauthenticated attackers to update the plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Alex User Counter para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 6.0, inclusive. Esto se debe a la falta de validación de nonce en la función alex_user_counter_function(). Esto hace posible que atacantes no autenticados actualicen la configuración del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/user-counter/tags/6.0/user-counter.php#L41",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/user-counter/trunk/user-counter.php#L41",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1a5ef5b3-2900-44f0-9e13-66fbdc937b38?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1075",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:07.963",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZT Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to improper nonce validation on the save_ztcpt_captcha_settings action where the nonce check can be bypassed by sending an empty token value. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin ZT Captcha para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0.4, inclusive. Esto se debe a una validación de nonce incorrecta en la acción save_ztcpt_captcha_settings, donde la comprobación de nonce puede ser eludida enviando un valor de token vacío. Esto hace posible que atacantes no autenticados modifiquen la configuración del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/zt-captcha/tags/1.0.4/request/CaptchaRequest.php#L37",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/zt-captcha/trunk/request/CaptchaRequest.php#L37",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9f9d6da5-1598-4df4-8efc-306370446443?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1076",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:08.140",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Star Review Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to missing nonce validation on the settings page. This makes it possible for unauthenticated attackers to update the plugin's CSS settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Star Review Manager para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.2.2, inclusive. Esto se debe a la falta de validación de nonce en la página de configuración. Esto hace posible que atacantes no autenticados actualicen la configuración CSS del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/star-review-manager/tags/1.2.2/admin/settings.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/star-review-manager/trunk/admin/settings.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/54b6a141-eb4c-4cf0-a078-5b3aeda25466?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1081",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:08.313",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categories in bulk via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Set Bulk Post Categories para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.1, inclusive. Esto se debe a la falta de validación de nonce en la funcionalidad de actualización masiva de categorías. Esto hace posible que atacantes no autenticados modifiquen categorías de entradas de forma masiva a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/set-bulk-post-categories/tags/1.1/set-bulk-categories.php#L36",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/set-bulk-post-categories/trunk/set-bulk-categories.php#L36",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9503f908-ead2-4c34-89b9-1e2348b90f3c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1084",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:08.487",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cookie consent for developers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple settings fields in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Cookie consent para developers para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de múltiples campos de configuración en todas las versiones hasta la 1.7.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cookie-consent-for-developers/tags/1.7.1/admin/class-ntg-cookie-consent-admin.php#L112",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cookie-consent-for-developers/tags/1.7.1/admin/partials/ntg-cookie-consent-admin-display.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cookie-consent-for-developers/trunk/admin/class-ntg-cookie-consent-admin.php#L112",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cookie-consent-for-developers/trunk/admin/partials/ntg-cookie-consent-admin-display.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c16918a9-7b73-418d-adbd-aa17cb1d8cf8?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1088",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:08.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Login Page Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing nonce validation on the devotion_loginform_process() AJAX action. This makes it possible for unauthenticated attackers to update the plugin's login page settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Login Page Editor para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.2, inclusive. Esto se debe a la falta de validación de nonce en la acción AJAX devotion_loginform_process(). Esto hace posible que atacantes no autenticados actualicen la configuración de la página de inicio de sesión del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/login-page-editor/tags/1.2/class/devotion.core.class.php#L50",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/login-page-editor/trunk/class/devotion.core.class.php#L50",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f428b90d-8830-445d-b1f1-d8f860dae5cf?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1095",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:08.823",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Canto Testimonials para WordPress es vulnerable a cross-site scripting almacenado a través del atributo 'fx' del shortcode en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/canto-testimonials/tags/1.0/canto-testimonials.php#L132",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/canto-testimonials/trunk/canto-testimonials.php#L132",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6f2ef250-f951-4408-ac42-3272ddf46530?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1097",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:09.003",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin ThemeRuby Multi Authors – Assign Multiple Writers to Posts para WordPress es vulnerable a cross-site scripting almacenado a través de los atributos 'before' y 'after' del shortcode en todas las versiones hasta la 1.0.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/themeruby-multi-authors/tags/1.0.0/includes/class-tma-shortcodes.php#L76",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/themeruby-multi-authors/trunk/includes/class-tma-shortcodes.php#L76",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3446398/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ca74bb1d-1954-4869-aaa9-bf66600cdf2a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1099",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:09.177",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administrative Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'login' and 'logout' shortcode attributes in all versions up to, and including, 0.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Administrative Shortcodes para WordPress es vulnerable a cross-site scripting almacenado a través de los atributos de shortcode 'login' y 'logout' en todas las versiones hasta la 0.3.4, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida deficiente. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/administrative-shortcodes/tags/0.3.4/administrative-shortcodes.php#L196",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/administrative-shortcodes/trunk/administrative-shortcodes.php#L196",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/de931a65-c898-4b1d-99ce-20dd646bcbb0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1103",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:09.347",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AIKTP plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the /aiktp/getToken REST API endpoint in all versions up to, and including, 5.0.04. The endpoint uses the 'verify_user_logged_in' as a permission callback, which only checks if a user is logged in, but fails to verify if the user has administrative capabilities. This makes it possible for authenticated attackers with Subscriber-level access and above to retrieve the administrator's 'aiktpz_token' access token, which can then be used to create posts, upload media library files, and access private content as the administrator."
      }, {
        "lang" : "es",
        "value" : "El plugin AIKTP para WordPress es vulnerable a la modificación no autorizada de datos debido a la falta de comprobaciones de autorización en el endpoint de la API REST /aiktp/getToken en todas las versiones hasta la 5.0.04, inclusive. El endpoint utiliza 'verify_user_logged_in' como callback de permisos, que solo comprueba si un usuario ha iniciado sesión, pero no verifica si el usuario tiene capacidades administrativas. Esto hace posible que atacantes autenticados con acceso de nivel Suscriptor y superior recuperen el token de acceso 'aiktpz_token' del administrador, que luego puede ser utilizado para crear publicaciones, subir archivos de la librería de medios y acceder a contenido privado como el administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/aiktp/tags/5.0.04/includes/aiktp-sync.php#L123",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/aiktp/tags/5.0.04/includes/aiktp-sync.php#L143",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3445248%40aiktp&new=3445248%40aiktp",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/84846d95-792d-4569-b0eb-876d82d0beee?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1257",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T08:16:09.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administrative Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.3.4 via the 'slug' attribute of the 'get_template' shortcode. This is due to insufficient path validation on user-supplied input passed to the get_template_part() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \"safe\" file types can be uploaded and included."
      }, {
        "lang" : "es",
        "value" : "El plugin Administrative Shortcodes para WordPress es vulnerable a la inclusión local de ficheros en todas las versiones hasta la 0.3.4, inclusive, a través del atributo 'slug' del shortcode 'get_template'. Esto se debe a una validación de ruta insuficiente en la entrada proporcionada por el usuario pasada a la función get_template_part(). Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, incluyan y ejecuten ficheros arbitrarios en el servidor, permitiendo la ejecución de cualquier código PHP en esos ficheros. Esto puede usarse para eludir los controles de acceso, obtener datos sensibles o lograr la ejecución de código en casos donde imágenes y otros tipos de ficheros 'seguros' pueden ser subidos e incluidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/administrative-shortcodes/tags/0.3.4/administrative-shortcodes.php#L144",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/administrative-shortcodes/trunk/administrative-shortcodes.php#L144",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/administrative-shortcodes",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/119fe499-88c4-413f-a44a-2b3acfdbdeb5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0633",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:52.843",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.1.0. This is due to the use of a forgeable cookie value derived only from the entry ID and current user ID without a server-side secret. This makes it possible for unauthenticated attackers to access form submission entry data via MetForm shortcodes for entries created within the transient TTL (default is 15 minutes)."
      }, {
        "lang" : "es",
        "value" : "El plugin MetForm – Contact Form, Survey, Quiz, &amp; Custom Form Builder para Elementor para WordPress es vulnerable a la Exposición de Información Sensible en versiones hasta la 4.1.0, inclusive. Esto se debe al uso de un valor de cookie falsificable derivado únicamente del ID de entrada y del ID de usuario actual sin un secreto del lado del servidor. Esto hace posible que atacantes no autenticados accedan a los datos de entrada de envío de formularios a través de los shortcodes de MetForm para entradas creadas dentro del TTL transitorio (el valor predeterminado es 15 minutos)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3438419/metform",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d72cc420-1ff5-403b-b4ea-7c820fdebcf3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0687",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:53.023",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Meta-box GalleryMeta plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mb_gallery' custom post type in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with Author-level access and above, to create and publish galleries."
      }, {
        "lang" : "es",
        "value" : "El plugin Meta-box GalleryMeta para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en el tipo de publicación personalizado 'mb_gallery' en todas las versiones hasta la 3.0.1, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Autor y superior, creen y publiquen galerías."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/gallerymetaboxes.php#L375",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/include/posttype.php#L29",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/872c61aa-c95c-4b86-8e39-8112bb117a0b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0800",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:53.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom fields in all versions up to, and including, 20251210 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin User Submitted Posts – Enable Users to Submit Posts from the Front End para WordPress es vulnerable a cross-site scripting almacenado a través de los campos personalizados en todas las versiones hasta, e incluyendo, 20251210 debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3436859/user-submitted-posts",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec907bc-bd10-4dc5-be35-4f2aaf5ef444?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1098",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:53.353",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CM CSS Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' shortcode attribute in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin CM CSS Columns para WordPress es vulnerable a cross-site scripting almacenado a través del atributo de shortcode 'tag' en todas las versiones hasta e incluyendo la 1.2.1 debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cm-css-columns/tags/1.2.1/includes/Shortcoder.php#L109",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cm-css-columns/trunk/includes/Shortcoder.php#L109",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/dabcc606-04ab-4fb0-bf3c-d3ad915b8904?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1127",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:53.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `id` parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Timeline Event History para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'id' en todas las versiones hasta la 3.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/timeline-event-history/tags/3.2/includes/admin/class-timeline-wp-field-builder.php#L540",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba779595-2674-4d84-bc41-889ae60bd6a4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1189",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:53.680",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LeadBI Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' parameter of the 'leadbi_form' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin LeadBI para WordPress plugin de WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'form_id' del shortcode 'leadbi_form' en todas las versiones hasta la 1.7, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/leadbi/tags/1.7/includes/Plugin.php#L72",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/leadbi/trunk/includes/Plugin.php#L72",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/leadbi/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3a196eaa-64c7-447b-9384-b58fcba57ec0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1191",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:53.847",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JavaScript Notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 1.2.8. This is due to insufficient input sanitization and output escaping on user-supplied attributes in the `wp_footer` action. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin JavaScript Notifier para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración del plugin en todas las versiones hasta la 1.2.8, inclusive. Esto se debe a una sanitización de entrada insuficiente y un escape de salida inadecuado en los atributos proporcionados por el usuario en la acción 'wp_footer'. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/javascript-notifier/tags/1.2.8/javascript-notifier.php#L75",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/javascript-notifier/trunk/javascript-notifier.php#L75",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449861/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/97696702-4d40-41dd-a25f-f2ee7681a2c9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1208",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:54.017",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5. This is due to missing or incorrect nonce validation on the settings page. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Friendly Functions para Welcart para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.2.5, inclusive. Esto se debe a una validación de nonce faltante o incorrecta en la página de configuración. Esto permite que atacantes no autenticados actualicen la configuración del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/friendly-functions-for-welcart/tags/1.2.5/ffw_function_settings.php#L53",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/friendly-functions-for-welcart/tags/1.2.5/ffw_function_settings.php#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3445305/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6cc709e0-870b-4d12-9ac8-55da498768a1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1266",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:54.177",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Postalicious plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Postalicious para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 3.0.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/tags/3.0.1/wp-postalicious.php#L316",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/tags/3.0.1/wp-postalicious.php#L533",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/tags/3.0.1/wp-postalicious.php#L541",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/tags/3.0.1/wp-postalicious.php#L548",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/trunk/wp-postalicious.php#L316",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/trunk/wp-postalicious.php#L533",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/trunk/wp-postalicious.php#L541",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postalicious/trunk/wp-postalicious.php#L548",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/512c9a2f-b023-4e28-8dd8-35795e68a8b3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1300",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:54.353",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Responsive Header plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple plugin settings parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Responsive Header para WordPress es vulnerable a cross-site scripting almacenado a través de múltiples parámetros de configuración del plugin en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/responsive-header.1.0.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/responsive-header/tags/1.0/rhp-settings.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/responsive-header/trunk/rhp-settings.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/responsive-header/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/30821418-48c0-4bc6-8bf1-f558671bff24?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1302",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T09:15:54.523",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Meta-box GalleryMeta para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administración en todas las versiones hasta la 3.0.1, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida inadecuado. Esto permite que atacantes autenticados, con permisos de nivel de editor y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/gallerymetaboxes.php#L119",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/gallerymetaboxes.php#L314",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/templates/single-mb_gallery.php#L31",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/templates/single-mb_gallery.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3446962/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb9ae252-7e5f-4dc0-a162-100493b81980?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0911",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T13:15:55.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the action_import_module() function in all versions up to, and including, 7.8.9.2. This makes it possible for authenticated attackers, with a lower-privileged role (e.g., Subscriber-level access and above), to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires an admin to grant Hustle module permissions (or module edit access) to the low-privileged user so they can access the Hustle admin page and obtain the required nonce."
      }, {
        "lang" : "es",
        "value" : "El plugin The Hustle – Email Marketing, Lead Generation, Optins, Popups para WordPress es vulnerable a cargas de archivos arbitrarios debido a una validación incorrecta del tipo de archivo en la función action_import_module() en todas las versiones hasta, e incluyendo, la 7.8.9.2. Esto hace posible que atacantes autenticados, con un rol de menor privilegio (por ejemplo, acceso de nivel de Suscriptor y superior), carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecución remota de código. La explotación exitosa requiere que un administrador otorgue permisos del módulo Hustle (o acceso de edición de módulo) al usuario de bajo privilegio para que puedan acceder a la página de administración de Hustle y obtener el nonce requerido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3440956/wordpress-popup",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/22be5fb5-143e-4934-9f93-e17def18e883?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0862",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T16:15:52.697",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘options’ parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. NOTE: Successful exploitation of this vulnerability requires that the PDFCrowd API key is blank (also known as \"demo mode\", which is the default configuration when the plugin is installed) or known."
      }, {
        "lang" : "es",
        "value" : "El plugin Save as PDF Plugin por PDFCrowd para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'options' en todas las versiones hasta la 4.5.5, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace. NOTA: La explotación exitosa de esta vulnerabilidad requiere que la clave API de PDFCrowd esté en blanco (también conocido como \"modo de demostración\", que es la configuración predeterminada cuando se instala el plugin) o sea conocida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3438577/save-as-pdf-by-pdfcrowd",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/74172fcb-7428-464a-89f1-f1f3af50e361?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0593",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-24T17:15:58.997",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processBackgroundAction() function in all versions up to, and including, 10.0.04. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global map engine settings."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Go Maps (anteriormente WP Google Maps) para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función processBackgroundAction() en todas las versiones hasta la 10.0.04, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, modifiquen la configuración global del motor de mapas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3439283/wp-google-maps/trunk/includes/class.admin-notices.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7f0741c1-a5d7-41a4-a739-2cb7cb836509?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1406",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-25T12:15:46.983",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirect. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en lcg0124 BootDo hasta 5ccd963c74058036b466e038cff37de4056c1600. Afectada por esta vulnerabilidad es la función redirectToLogin del archivo AccessControlFilter.java del componente Host Header Handler. Esta manipulación del argumento Hostname causa redirección abierta. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto utiliza un modelo de lanzamiento continuo para entregar actualizaciones continuas. Como resultado, la información de versión específica para lanzamientos afectados o actualizados no está disponible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/webzzaa/CVE-/issues/5",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.342794",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.342794",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.736271",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22996",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:54.430",
      "lastModified" : "2026-02-26T17:09:05.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv\n\nmlx5e_priv is an unstable structure that can be memset(0) if profile\nattaching fails, mlx5e_priv in mlx5e_dev devlink private is used to\nreference the netdev and mdev associated with that struct. Instead,\nstore netdev directly into mlx5e_dev and get mdev from the containing\nmlx5_adev aux device structure.\n\nThis fixes a kernel oops in mlx5e_remove when switchdev mode fails due\nto change profile failure.\n\n$ devlink dev eswitch set pci/0000:00:03.0 mode switchdev\nError: mlx5_core: Failed setting eswitch to offloads.\ndmesg:\nworkqueue: Failed to create a rescuer kthread for wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12\nworkqueue: Failed to create a rescuer kthread for wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12\n\n$ devlink dev reload pci/0000:00:03.0 ==> oops\n\nBUG: kernel NULL pointer dereference, address: 0000000000000520\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\nPGD 0 P4D 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 3 UID: 0 PID: 521 Comm: devlink Not tainted 6.18.0-rc5+ #117 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\nRIP: 0010:mlx5e_remove+0x68/0x130\nRSP: 0018:ffffc900034838f0 EFLAGS: 00010246\nRAX: ffff88810283c380 RBX: ffff888101874400 RCX: ffffffff826ffc45\nRDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000\nRBP: ffff888102d789c0 R08: ffff8881007137f0 R09: ffff888100264e10\nR10: ffffc90003483898 R11: ffffc900034838a0 R12: ffff888100d261a0\nR13: ffff888100d261a0 R14: ffff8881018749a0 R15: ffff888101874400\nFS:  00007f8565fea740(0000) GS:ffff88856a759000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000520 CR3: 000000010b11a004 CR4: 0000000000370ef0\nCall Trace:\n <TASK>\n device_release_driver_internal+0x19c/0x200\n bus_remove_device+0xc6/0x130\n device_del+0x160/0x3d0\n ? devl_param_driverinit_value_get+0x2d/0x90\n mlx5_detach_device+0x89/0xe0\n mlx5_unload_one_devl_locked+0x3a/0x70\n mlx5_devlink_reload_down+0xc8/0x220\n devlink_reload+0x7d/0x260\n devlink_nl_reload_doit+0x45b/0x5a0\n genl_family_rcv_msg_doit+0xe8/0x140"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/mlx5e: No almacenar mlx5e_priv en mlx5e_dev devlink priv\n\nmlx5e_priv es una estructura inestable que puede ser memset(0) si falla la conexión del perfil. mlx5e_priv en mlx5e_dev devlink private se utiliza para referenciar el netdev y mdev asociados con esa estructura. En su lugar, almacenar netdev directamente en mlx5e_dev y obtener mdev de la estructura del dispositivo auxiliar mlx5_adev que lo contiene.\n\nEsto corrige un kernel oops en mlx5e_remove cuando el modo switchdev falla debido a un fallo en el cambio de perfil.\n\n$ devlink dev eswitch set pci/0000:00:03.0 mode switchdev\nError: mlx5_core: Falló al establecer eswitch en offloads.\ndmesg:\nworkqueue: Falló al crear un kthread de rescate para wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12\nworkqueue: Falló al crear un kthread de rescate para wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12\n\n$ devlink dev reload pci/0000:00:03.0 ==&gt; oops\n\nBUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000520\n #PF: acceso de lectura de supervisor en modo kernel\n #PF: error_code(0x0000) - página no presente\nPGD 0 P4D 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 3 UID: 0 PID: 521 Comm: devlink Not tainted 6.18.0-rc5+ #117 PREEMPT(voluntary)\nNombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\nRIP: 0010:mlx5e_remove+0x68/0x130\nRSP: 0018:ffffc900034838f0 EFLAGS: 00010246\nRAX: ffff88810283c380 RBX: ffff888101874400 RCX: ffffffff826ffc45\nRDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000\nRBP: ffff888102d789c0 R08: ffff8881007137f0 R09: ffff888100264e10\nR10: ffffc90003483898 R11: ffffc900034838a0 R12: ffff888100d261a0\nR13: ffff888100d261a0 R14: ffff8881018749a0 R15: ffff888101874400\nFS:  00007f8565fea740(0000) GS:ffff88856a759000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000520 CR3: 000000010b11a004 CR4: 0000000000370ef0\nRastro de Llamada:\n \n device_release_driver_internal+0x19c/0x200\n bus_remove_device+0xc6/0x130\n device_del+0x160/0x3d0\n ? devl_param_driverinit_value_get+0x2d/0x90\n mlx5_detach_device+0x89/0xe0\n mlx5_unload_one_devl_locked+0x3a/0x70\n mlx5_devlink_reload_down+0xc8/0x220\n devlink_reload+0x7d/0x260\n devlink_nl_reload_doit+0x45b/0x5a0\n genl_family_rcv_msg_doit+0xe8/0x140"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.12",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "03FFE083-08F0-4592-8B7A-0E43F95168A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/123eda2e5b1638e298e3a66bb1e64a8da92de5e1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a3d4f87d41f5140f1cf5c02fce5cdad2637f6244",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dcb2ad755a16cb0ecd2dc98234d71a6e216ae7fe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22997",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:54.540",
      "lastModified" : "2026-04-27T14:16:28.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts\n\nSince j1939_session_deactivate_activate_next() in j1939_tp_rxtimer() is\ncalled only when the timer is enabled, we need to call\nj1939_session_deactivate_activate_next() if we cancelled the timer.\nOtherwise, refcount for j1939_session leaks, which will later appear as\n\n| unregister_netdevice: waiting for vcan0 to become free. Usage count = 2.\n\nproblem."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: can: j1939: j1939_xtp_rx_rts_session_active(): desactivar sesión al recibir el segundo rts\n\nDado que j1939_session_deactivate_activate_next() en j1939_tp_rxtimer() se\nllama solo cuando el temporizador está habilitado, necesitamos llamar a\nj1939_session_deactivate_activate_next() si cancelamos el temporizador.\nDe lo contrario, la cuenta de referencias (refcount) para j1939_session se fuga, lo que más tarde aparecerá como\n\n| unregister_netdevice: esperando que vcan0 quede libre. Recuento de uso = 2.\n\nproblema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "11AC7CEA-DC5B-4004-A574-633B1408C1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1809c82aa073a11b7d335ae932d81ce51a588a4a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6121b7564c725b632ffe4764abe85aa239d37703",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/809a437e27a3bf3c1c6c8c157773635552116f2b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a73e7d7e346dae1c22dc3e95b02ca464b12daf2c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/adabf01c19561e42899da9de56a6a1da0e6b8a5b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b1d67607e97d489c0cfbbf55f48a76b00710b0e4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cb2a610867bc379988bae0bb4b8bbc59c0decf1a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22998",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:54.643",
      "lastModified" : "2026-04-27T14:16:28.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec\n\nCommit efa56305908b (\"nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length\")\nadded ttag bounds checking and data_offset\nvalidation in nvmet_tcp_handle_h2c_data_pdu(), but it did not validate\nwhether the command's data structures (cmd->req.sg and cmd->iov) have\nbeen properly initialized before processing H2C_DATA PDUs.\n\nThe nvmet_tcp_build_pdu_iovec() function dereferences these pointers\nwithout NULL checks. This can be triggered by sending H2C_DATA PDU\nimmediately after the ICREQ/ICRESP handshake, before\nsending a CONNECT command or NVMe write command.\n\nAttack vectors that trigger NULL pointer dereferences:\n1. H2C_DATA PDU sent before CONNECT → both pointers NULL\n2. H2C_DATA PDU for READ command → cmd->req.sg allocated, cmd->iov NULL\n3. H2C_DATA PDU for uninitialized command slot → both pointers NULL\n\nThe fix validates both cmd->req.sg and cmd->iov before calling\nnvmet_tcp_build_pdu_iovec(). Both checks are required because:\n- Uninitialized commands: both NULL\n- READ commands: cmd->req.sg allocated, cmd->iov NULL\n- WRITE commands: both allocated"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnvme-tcp: soluciona desreferencias de puntero NULL en nvmet_tcp_build_pdu_iovec\n\nEl commit efa56305908b ('nvmet-tcp: Soluciona un pánico del kernel cuando el host envía una longitud de PDU H2C inválida') añadió la comprobación de límites de ttag y la validación de data_offset en nvmet_tcp_handle_h2c_data_pdu(), pero no validó si las estructuras de datos del comando (cmd-&gt;req.sg y cmd-&gt;iov) han sido inicializadas correctamente antes de procesar las PDUs H2C_DATA.\n\nLa función nvmet_tcp_build_pdu_iovec() desreferencia estos punteros sin comprobaciones de NULL. Esto puede ser provocado enviando una PDU H2C_DATA inmediatamente después del handshake ICREQ/ICRESP, antes de enviar un comando CONNECT o un comando de escritura NVMe.\n\nVectores de ataque que provocan desreferencias de puntero NULL:\n1. PDU H2C_DATA enviada antes de CONNECT ? ambos punteros NULL\n2. PDU H2C_DATA para comando READ ? cmd-&gt;req.sg asignado, cmd-&gt;iov NULL\n3. PDU H2C_DATA para slot de comando no inicializado ? ambos punteros NULL\n\nLa solución valida tanto cmd-&gt;req.sg como cmd-&gt;iov antes de llamar a nvmet_tcp_build_pdu_iovec(). Ambas comprobaciones son necesarias porque:\n- Comandos no inicializados: ambos NULL\n- Comandos READ: cmd-&gt;req.sg asignado, cmd-&gt;iov NULL\n- Comandos WRITE: ambos asignados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.268",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "2E4BEAC0-E873-440D-A75E-55699C2412A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.209",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "B6983E9C-F8A9-4494-8156-3E2F7E736BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.148",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "B0275B58-DF8C-46AE-B9A5-20396D123D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.75",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "9DE91ACC-6DAF-42AE-8D41-3A91572E9052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.14",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "68AE0BF9-0835-45D8-AACC-EDFAC1663259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.2",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "2B14F508-4490-4A35-BEFC-40EF300279E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/32b63acd78f577b332d976aa06b56e70d054cbba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/374b095e265fa27465f34780e0eb162ff1bef913",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3def5243150716be86599c2a1767c29c68838b6d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/76abc83a9d25593c2b7613c549413079c14a4686",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7d75570002929d20e40110d6b03e46202c9d1bc7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/baabe43a0edefac8cd7b981ff87f967f6034dafe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fdecd3b6aac10d5a18d0dc500fe57f8648b66cd4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22999",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:54.753",
      "lastModified" : "2026-04-27T14:16:28.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_qfq: do not free existing class in qfq_change_class()\n\nFixes qfq_change_class() error case.\n\ncl->qdisc and cl should only be freed if a new class and qdisc\nwere allocated, or we risk various UAF."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: sch_qfq: no liberar la clase existente en qfq_change_class()\n\nCorrige el caso de error de qfq_change_class().\n\ncl-&gt;qdisc y cl solo deben liberarse si se asignaron una nueva clase y qdisc, o nos arriesgamos a varios UAF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C1D3B462-A229-4130-A191-F09550344C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0a234660dc70ce45d771cbc76b20d925b73ec160",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2a64fb9b47afffeb5dbab5fd3a518e1436dcc90e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/362e269bb03f7076ba9990e518aeddb898232e50",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3879cffd9d07aa0377c4b8835c4f64b4fb24ac78",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cff6cd703f41d8071995956142729e4bba160363",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e9d8f11652fa08c647bf7bba7dd8163241a332cd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f06f7635499bc806cbe2bbc8805c7cef8b1edddf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23000",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:54.853",
      "lastModified" : "2026-02-24T21:01:41.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix crash on profile change rollback failure\n\nmlx5e_netdev_change_profile can fail to attach a new profile and can\nfail to rollback to old profile, in such case, we could end up with a\ndangling netdev with a fully reset netdev_priv. A retry to change\nprofile, e.g. another attempt to call mlx5e_netdev_change_profile via\nswitchdev mode change, will crash trying to access the now NULL\npriv->mdev.\n\nThis fix allows mlx5e_netdev_change_profile() to handle previous\nfailures and an empty priv, by not assuming priv is valid.\n\nPass netdev and mdev to all flows requiring\nmlx5e_netdev_change_profile() and avoid passing priv.\nIn mlx5e_netdev_change_profile() check if current priv is valid, and if\nnot, just attach the new profile without trying to access the old one.\n\nThis fixes the following oops, when enabling switchdev mode for the 2nd\ntime after first time failure:\n\n ## Enabling switchdev mode first time:\n\nmlx5_core 0012:03:00.1: E-Switch: Supported tc chains and prios offload\nworkqueue: Failed to create a rescuer kthread for wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12\nworkqueue: Failed to create a rescuer kthread for wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12\n                                                                         ^^^^^^^^\nmlx5_core 0000:00:03.0: E-Switch: Disable: mode(LEGACY), nvfs(0), necvfs(0), active vports(0)\n\n ## retry: Enabling switchdev mode 2nd time:\n\nmlx5_core 0000:00:03.0: E-Switch: Supported tc chains and prios offload\nBUG: kernel NULL pointer dereference, address: 0000000000000038\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\nPGD 0 P4D 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 13 UID: 0 PID: 520 Comm: devlink Not tainted 6.18.0-rc4+ #91 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\nRIP: 0010:mlx5e_detach_netdev+0x3c/0x90\nCode: 50 00 00 f0 80 4f 78 02 48 8b bf e8 07 00 00 48 85 ff 74 16 48 8b 73 78 48 d1 ee 83 e6 01 83 f6 01 40 0f b6 f6 e8 c4 42 00 00 <48> 8b 45 38 48 85 c0 74 08 48 89 df e8 cc 47 40 1e 48 8b bb f0 07\nRSP: 0018:ffffc90000673890 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffff8881036a89c0 RCX: 0000000000000000\nRDX: ffff888113f63800 RSI: ffffffff822fe720 RDI: 0000000000000000\nRBP: 0000000000000000 R08: 0000000000002dcd R09: 0000000000000000\nR10: ffffc900006738e8 R11: 00000000ffffffff R12: 0000000000000000\nR13: 0000000000000000 R14: ffff8881036a89c0 R15: 0000000000000000\nFS:  00007fdfb8384740(0000) GS:ffff88856a9d6000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000038 CR3: 0000000112ae0005 CR4: 0000000000370ef0\nCall Trace:\n <TASK>\n mlx5e_netdev_change_profile+0x45/0xb0\n mlx5e_vport_rep_load+0x27b/0x2d0\n mlx5_esw_offloads_rep_load+0x72/0xf0\n esw_offloads_enable+0x5d0/0x970\n mlx5_eswitch_enable_locked+0x349/0x430\n ? is_mp_supported+0x57/0xb0\n mlx5_devlink_eswitch_mode_set+0x26b/0x430\n devlink_nl_eswitch_set_doit+0x6f/0xf0\n genl_family_rcv_msg_doit+0xe8/0x140\n genl_rcv_msg+0x18b/0x290\n ? __pfx_devlink_nl_pre_doit+0x10/0x10\n ? __pfx_devlink_nl_eswitch_set_doit+0x10/0x10\n ? __pfx_devlink_nl_post_doit+0x10/0x10\n ? __pfx_genl_rcv_msg+0x10/0x10\n netlink_rcv_skb+0x52/0x100\n genl_rcv+0x28/0x40\n netlink_unicast+0x282/0x3e0\n ? __alloc_skb+0xd6/0x190\n netlink_sendmsg+0x1f7/0x430\n __sys_sendto+0x213/0x220\n ? __sys_recvmsg+0x6a/0xd0\n __x64_sys_sendto+0x24/0x30\n do_syscall_64+0x50/0x1f0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\nRIP: 0033:0x7fdfb8495047"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  net/mlx5e: Soluciona el fallo en el fallo de reversión del cambio de perfil  mlx5e_netdev_change_profile puede fallar al adjuntar un nuevo perfil y puede fallar al revertir al perfil antiguo; en tal caso, podríamos terminar con un netdev colgante con un netdev_priv completamente reiniciado. Un reintento de cambiar el perfil, p. ej., otro intento de llamar a mlx5e_netdev_change_profile a través del cambio de modo switchdev, fallará al intentar acceder al ahora NULL priv-&gt;mdev.  Esta solución permite a mlx5e_netdev_change_profile() manejar fallos anteriores y un priv vacío, al no asumir que priv es válido.  Pase netdev y mdev a todos los flujos que requieran mlx5e_netdev_change_profile() y evite pasar priv. En mlx5e_netdev_change_profile() verifique si el priv actual es válido, y si no lo es, simplemente adjunte el nuevo perfil sin intentar acceder al antiguo.  Esto soluciona el siguiente oops, al habilitar el modo switchdev por segunda vez después del primer fallo:   ## Habilitando el modo switchdev por primera vez:  mlx5_core 0012:03:00.1: E-Switch: Descarga de cadenas tc y prios soportadas workqueue: Fallo al crear un kthread de rescate para wq 'mlx5e': -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init falló, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: la inicialización del nuevo perfil falló, -12 workqueue: Fallo al crear un kthread de rescate para wq 'mlx5e': -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init falló, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: falló al revertir al perfil original, -12 ^^^^^^^^ mlx5_core 0000:00:03.0: E-Switch: Deshabilitar: modo(LEGACY), nvfs(0), necvfs(0), vports activos(0)   ## reintento: Habilitando el modo switchdev por segunda vez:  mlx5_core 0000:00:03.0: E-Switch: Descarga de cadenas tc y prios soportadas BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000038  #PF: acceso de lectura de supervisor en modo kernel  #PF: error_code(0x0000) - página no presente PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 13 UID: 0 PID: 520 Comm: devlink Not tainted 6.18.0-rc4+ #91 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:mlx5e_detach_netdev+0x3c/0x90 Code: 50 00 00 f0 80 4f 78 02 48 8b bf e8 07 00 00 48 85 ff 74 16 48 8b 73 78 48 d1 ee 83 e6 01 83 f6 01 40 0f b6 f6 e8 c4 42 00 00 &lt;48&gt; 8b 45 38 48 85 c0 74 08 48 89 df e8 cc 47 40 1e 48 8b bb f0 07 RSP: 0018:ffffc90000673890 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8881036a89c0 RCX: 0000000000000000 RDX: ffff888113f63800 RSI: ffffffff822fe720 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000002dcd R09: 0000000000000000 R10: ffffc900006738e8 R11: 00000000ffffffff R12: 0000000000000000 R13: 0000000000000000 R14: ffff8881036a89c0 R15: 0000000000000000 FS:  00007fdfb8384740(0000) GS:ffff88856a9d6000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000038 CR3: 0000000112ae0005 CR4: 0000000000370ef0 Traza de Llamada:    mlx5e_netdev_change_profile+0x45/0xb0  mlx5e_vport_rep_load+0x27b/0x2d0  mlx5_esw_offloads_rep_load+0x72/0xf0  esw_offloads_enable+0x5d0/0x970  mlx5_eswitch_enable_locked+0x349/0x430  ? is_mp_supported+0x57/0xb0  mlx5_devlink_eswitch_mode_set+0x26b/0x430  devlink_nl_eswitch_set_doit+0x6f/0xf0  genl_family_rcv_msg_doit+0xe8/0x140  genl_rcv_msg+0x18b/0x290  ? __pfx_devlink_nl_pre_doit+0x10/0x10  ? __pfx_devlink_nl_eswitch_set_doit+0x10/0x10  ? __pfx_devlink_nl_post_doit+0x10/0x10  ? __pfx_genl_rcv_msg+0x10/0x10  netlink_rcv_skb+0x52/0x100  genl_rcv+0x28/0x40  netlink_unicast+0x282/0x3e0  ? __alloc_skb+0xd6/0x190  netlink_sendmsg+0x1f7/0x430  __sys_sendto+0x213/0x220  ? __sys_recvmsg+0x6a/0xd0  __x64_sys_sendto+0x24/0x30  do_syscall_64+0x50/0x1f0  entry_SYSCALL_64_after_hwframe+0x76/0x7e"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.12",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "03FFE083-08F0-4592-8B7A-0E43F95168A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4dadc4077e3f77d6d31e199a925fc7a705e7adeb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dad52950b409d6923880d65a4cddb383286e17d2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e05b8084a20f6bd5827d338c928e5e0fcbafa496",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23001",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:54.970",
      "lastModified" : "2026-04-27T14:16:28.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: fix possible UAF in macvlan_forward_source()\n\nAdd RCU protection on (struct macvlan_source_entry)->vlan.\n\nWhenever macvlan_hash_del_source() is called, we must clear\nentry->vlan pointer before RCU grace period starts.\n\nThis allows macvlan_forward_source() to skip over\nentries queued for freeing.\n\nNote that macvlan_dev are already RCU protected, as they\nare embedded in a standard netdev (netdev_priv(ndev)).\n\nhttps: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmacvlan: soluciona posible UAF en macvlan_forward_source()\n\nAñade protección RCU en (struct macvlan_source_entry)-&gt;vlan.\n\nSiempre que se llama a macvlan_hash_del_source(), debemos borrar el puntero entry-&gt;vlan antes de que comience el período de gracia de RCU.\n\nEsto permite a macvlan_forward_source() omitir entradas en cola para ser liberadas.\n\nTenga en cuenta que macvlan_dev ya están protegidos por RCU, ya que están incrustados en un netdev estándar (netdev_priv(ndev)).\n\nhttps: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18.1",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "29FC5F95-33A0-4CB2-98EB-8ED88B5DB098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.18:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2C941823-DB24-432E-8F78-90665662756A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/15f6faf36e162532bec5cc05eb3fc622108bf2ed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/232afc74a6dde0fe1830988e5827921f5ec9bb3f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/484919832e2db6ce1e8add92c469e5d459a516b5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6dbead9c7677186f22b7981dd085a0feec1f038e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7470a7a63dc162f07c26dbf960e41ee1e248d80e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8133e85b8a3ec9f10d861e0002ec6037256e987e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8518712a2ca952d6da2238c6f0a16b4ae5ea3f13",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23002",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.070",
      "lastModified" : "2026-03-25T19:22:46.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/buildid: use __kernel_read() for sleepable context\n\nPrevent a \"BUG: unable to handle kernel NULL pointer dereference in\nfilemap_read_folio\".\n\nFor the sleepable context, convert freader to use __kernel_read() instead\nof direct page cache access via read_cache_folio().  This simplifies the\nfaultable code path by using the standard kernel file reading interface\nwhich handles all the complexity of reading file data.\n\nAt the moment we are not changing the code for non-sleepable context which\nuses filemap_get_folio() and only succeeds if the target folios are\nalready in memory and up-to-date.  The reason is to keep the patch simple\nand easier to backport to stable kernels.\n\nSyzbot repro does not crash the kernel anymore and the selftests run\nsuccessfully.\n\nIn the follow up we will make __kernel_read() with IOCB_NOWAIT work for\nnon-sleepable contexts.  In addition, I would like to replace the\nsecretmem check with a more generic approach and will add fstest for the\nbuildid code."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlib/buildid: usar __kernel_read() para contexto 'sleepable'\n\nPrevenir un 'BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio'.\n\nPara el contexto 'sleepable', convertir freader para usar __kernel_read() en lugar del acceso directo a la caché de páginas a través de read_cache_folio(). Esto simplifica la ruta de código 'faultable' al usar la interfaz estándar de lectura de archivos del kernel que maneja toda la complejidad de la lectura de datos de archivos.\n\nPor el momento no estamos cambiando el código para el contexto 'non-sleepable' que usa filemap_get_folio() y solo tiene éxito si los folios objetivo ya están en memoria y actualizados. La razón es mantener el parche simple y más fácil de 'backportear' a kernels estables.\n\nLa reproducción de Syzbot ya no bloquea el kernel y las pruebas automáticas se ejecutan con éxito.\n\nEn el seguimiento haremos que __kernel_read() con IOCB_NOWAIT funcione para contextos 'non-sleepable'. Además, me gustaría reemplazar la verificación de secretmem con un enfoque más genérico y añadiré fstest para el código buildid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.1",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "26C9CFAB-AE12-4395-997A-22AC98AF8490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E698080-7669-4132-8817-4C674EEBCE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/568aeb3476c770a3863c755dd2a199c212434286",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/777a8560fd29738350c5094d4166fe5499452409",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b11dfb7708f212b96c7973a474014c071aa02e05",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23003",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.170",
      "lastModified" : "2026-04-27T14:16:29.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()\n\nBlamed commit did not take care of VLAN encapsulations\nas spotted by syzbot [1].\n\nUse skb_vlan_inet_prepare() instead of pskb_inet_may_pull().\n\n[1]\n BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n BUG: KMSAN: uninit-value in IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n  __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline]\n  INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline]\n  IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n  ip6ip6_dscp_ecn_decapsulate+0x16f/0x1b0 net/ipv6/ip6_tunnel.c:729\n  __ip6_tnl_rcv+0xed9/0x1b50 net/ipv6/ip6_tunnel.c:860\n  ip6_tnl_rcv+0xc3/0x100 net/ipv6/ip6_tunnel.c:903\n gre_rcv+0x1529/0x1b90 net/ipv6/ip6_gre.c:-1\n  ip6_protocol_deliver_rcu+0x1c89/0x2c60 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0x1f4/0x4a0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ip6_input+0x9c/0x330 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x7ca/0xc10 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [inline]\n  ip6_rcv_finish+0x958/0x990 net/ipv6/ip6_input.c:79\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ipv6_rcv+0xf1/0x3c0 net/ipv6/ip6_input.c:311\n  __netif_receive_skb_one_core net/core/dev.c:6139 [inline]\n  __netif_receive_skb+0x1df/0xac0 net/core/dev.c:6252\n  netif_receive_skb_internal net/core/dev.c:6338 [inline]\n  netif_receive_skb+0x57/0x630 net/core/dev.c:6397\n  tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485\n  tun_get_user+0x5c0e/0x6c60 drivers/net/tun.c:1953\n  tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n  new_sync_write fs/read_write.c:593 [inline]\n  vfs_write+0xbe2/0x15d0 fs/read_write.c:686\n  ksys_write fs/read_write.c:738 [inline]\n  __do_sys_write fs/read_write.c:749 [inline]\n  __se_sys_write fs/read_write.c:746 [inline]\n  __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n  x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n  slab_post_alloc_hook mm/slub.c:4960 [inline]\n  slab_alloc_node mm/slub.c:5263 [inline]\n  kmem_cache_alloc_node_noprof+0x9e7/0x17a0 mm/slub.c:5315\n  kmalloc_reserve+0x13c/0x4b0 net/core/skbuff.c:586\n  __alloc_skb+0x805/0x1040 net/core/skbuff.c:690\n  alloc_skb include/linux/skbuff.h:1383 [inline]\n  alloc_skb_with_frags+0xc5/0xa60 net/core/skbuff.c:6712\n  sock_alloc_send_pskb+0xacc/0xc60 net/core/sock.c:2995\n  tun_alloc_skb drivers/net/tun.c:1461 [inline]\n  tun_get_user+0x1142/0x6c60 drivers/net/tun.c:1794\n  tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n  new_sync_write fs/read_write.c:593 [inline]\n  vfs_write+0xbe2/0x15d0 fs/read_write.c:686\n  ksys_write fs/read_write.c:738 [inline]\n  __do_sys_write fs/read_write.c:749 [inline]\n  __se_sys_write fs/read_write.c:746 [inline]\n  __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n  x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 0 UID: 0 PID: 6465 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nip6_tunnel: usar skb_vlan_inet_prepare() en __ip6_tnl_rcv()\n\nEl commit culpable no tuvo en cuenta las encapsulaciones VLAN como fue detectado por syzbot [1].\n\nUsar skb_vlan_inet_prepare() en lugar de pskb_inet_may_pull().\n\n[1]\n ERROR: KMSAN: valor no inicializado en __INET_ECN_decapsulate include/net/inet_ecn.h:253 [en línea]\n ERROR: KMSAN: valor no inicializado en INET_ECN_decapsulate include/net/inet_ecn.h:275 [en línea]\n ERROR: KMSAN: valor no inicializado en IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n  __INET_ECN_decapsulate include/net/inet_ecn.h:253 [en línea]\n  INET_ECN_decapsulate include/net/inet_ecn.h:275 [en línea]\n  IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321\n  ip6ip6_dscp_ecn_decapsulate+0x16f/0x1b0 net/ipv6/ip6_tunnel.c:729\n  __ip6_tnl_rcv+0xed9/0x1b50 net/ipv6/ip6_tunnel.c:860\n  ip6_tnl_rcv+0xc3/0x100 net/ipv6/ip6_tunnel.c:903\n gre_rcv+0x1529/0x1b90 net/ipv6/ip6_gre.c:-1\n  ip6_protocol_deliver_rcu+0x1c89/0x2c60 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0x1f4/0x4a0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [en línea]\n  ip6_input+0x9c/0x330 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x7ca/0xc10 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [en línea]\n  ip6_rcv_finish+0x958/0x990 net/ipv6/ip6_input.c:79\n  NF_HOOK include/linux/netfilter.h:318 [en línea]\n  ipv6_rcv+0xf1/0x3c0 net/ipv6/ip6_input.c:311\n  __netif_receive_skb_one_core net/core/dev.c:6139 [en línea]\n  __netif_receive_skb+0x1df/0xac0 net/core/dev.c:6252\n  netif_receive_skb_internal net/core/dev.c:6338 [en línea]\n  netif_receive_skb+0x57/0x630 net/core/dev.c:6397\n  tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485\n  tun_get_user+0x5c0e/0x6c60 drivers/net/tun.c:1953\n  tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n  new_sync_write fs/read_write.c:593 [en línea]\n  vfs_write+0xbe2/0x15d0 fs/read_write.c:686\n  ksys_write fs/read_write.c:738 [en línea]\n  __do_sys_write fs/read_write.c:749 [en línea]\n  __se_sys_write fs/read_write.c:746 [en línea]\n  __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n  x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [en línea]\n  do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nEl valor no inicializado fue creado en:\n  slab_post_alloc_hook mm/slub.c:4960 [en línea]\n  slab_alloc_node mm/slub.c:5263 [en línea]\n  kmem_cache_alloc_node_noprof+0x9e7/0x17a0 mm/slub.c:5315\n  kmalloc_reserve+0x13c/0x4b0 net/core/skbuff.c:586\n  __alloc_skb+0x805/0x1040 net/core/skbuff.c:690\n  alloc_skb include/linux/skbuff.h:1383 [en línea]\n  alloc_skb_with_frags+0xc5/0xa60 net/core/skbuff.c:6712\n  sock_alloc_send_pskb+0xacc/0xc60 net/core/sock.c:2995\n  tun_alloc_skb drivers/net/tun.c:1461 [en línea]\n  tun_get_user+0x1142/0x6c60 drivers/net/tun.c:1794\n  tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999\n  new_sync_write fs/read_write.c:593 [en línea]\n  vfs_write+0xbe2/0x15d0 fs/read_write.c:686\n  ksys_write fs/read_write.c:738 [en línea]\n  __do_sys_write fs/read_write.c:749 [en línea]\n  __se_sys_write fs/read_write.c:746 [en línea]\n  __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746\n  x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [en línea]\n  do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 0 UID: 0 PID: 6465 Comm: syz.0.17 No contaminado syzkaller #0 PREEMPT(none)\nNombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 25/10/2025"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.210",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "01ECBC49-7F90-4FF1-AEF6-B66648C8D6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.149",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "95F52E1F-730C-4F25-A02F-08F23BFE0303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.77",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "8F20C0B3-3F3C-4673-8021-F76329E05DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.16",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "15B2E42C-6BED-4530-832D-F28F44DDED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.4",
            "versionEndExcluding" : "6.8",
            "matchCriteriaId" : "372F97C2-A80E-4F8A-9A04-3C21671C560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.1",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "8D736713-9D1E-4935-A902-B3460D4423F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "41E47F32-BA80-4333-96FD-4D25082B0FDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2f03dafea0a8096a2eb60f551218b360e5bab9a3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/64c71d60a21a9ed0a802483dcd422b5b24eb1abe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/81c734dae203757fb3c9eee6f9896386940776bd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b9f915340f25cae1562f18e1eb52deafca328414",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/df5ffde9669314500809bc498ae73d6d3d9519ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f9c5c5b791d3850570796f9e067629474e613796",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23004",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.273",
      "lastModified" : "2026-04-27T14:16:29.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()\n\nsyzbot was able to crash the kernel in rt6_uncached_list_flush_dev()\nin an interesting way [1]\n\nCrash happens in list_del_init()/INIT_LIST_HEAD() while writing\nlist->prev, while the prior write on list->next went well.\n\nstatic inline void INIT_LIST_HEAD(struct list_head *list)\n{\n\tWRITE_ONCE(list->next, list); // This went well\n\tWRITE_ONCE(list->prev, list); // Crash, @list has been freed.\n}\n\nIssue here is that rt6_uncached_list_del() did not attempt to lock\nul->lock, as list_empty(&rt->dst.rt_uncached) returned\ntrue because the WRITE_ONCE(list->next, list) happened on the other CPU.\n\nWe might use list_del_init_careful() and list_empty_careful(),\nor make sure rt6_uncached_list_del() always grabs the spinlock\nwhenever rt->dst.rt_uncached_list has been set.\n\nA similar fix is neeed for IPv4.\n\n[1]\n\n BUG: KASAN: slab-use-after-free in INIT_LIST_HEAD include/linux/list.h:46 [inline]\n BUG: KASAN: slab-use-after-free in list_del_init include/linux/list.h:296 [inline]\n BUG: KASAN: slab-use-after-free in rt6_uncached_list_flush_dev net/ipv6/route.c:191 [inline]\n BUG: KASAN: slab-use-after-free in rt6_disable_ip+0x633/0x730 net/ipv6/route.c:5020\nWrite of size 8 at addr ffff8880294cfa78 by task kworker/u8:14/3450\n\nCPU: 0 UID: 0 PID: 3450 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)}\nTainted: [L]=SOFTLOCKUP\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nWorkqueue: netns cleanup_net\nCall Trace:\n <TASK>\n  dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n  print_address_description mm/kasan/report.c:378 [inline]\n  print_report+0xca/0x240 mm/kasan/report.c:482\n  kasan_report+0x118/0x150 mm/kasan/report.c:595\n  INIT_LIST_HEAD include/linux/list.h:46 [inline]\n  list_del_init include/linux/list.h:296 [inline]\n  rt6_uncached_list_flush_dev net/ipv6/route.c:191 [inline]\n  rt6_disable_ip+0x633/0x730 net/ipv6/route.c:5020\n  addrconf_ifdown+0x143/0x18a0 net/ipv6/addrconf.c:3853\n addrconf_notify+0x1bc/0x1050 net/ipv6/addrconf.c:-1\n  notifier_call_chain+0x19d/0x3a0 kernel/notifier.c:85\n  call_netdevice_notifiers_extack net/core/dev.c:2268 [inline]\n  call_netdevice_notifiers net/core/dev.c:2282 [inline]\n  netif_close_many+0x29c/0x410 net/core/dev.c:1785\n  unregister_netdevice_many_notify+0xb50/0x2330 net/core/dev.c:12353\n  ops_exit_rtnl_list net/core/net_namespace.c:187 [inline]\n  ops_undo_list+0x3dc/0x990 net/core/net_namespace.c:248\n  cleanup_net+0x4de/0x7b0 net/core/net_namespace.c:696\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340\n  worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421\n  kthread+0x711/0x8a0 kernel/kthread.c:463\n  ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n </TASK>\n\nAllocated by task 803:\n  kasan_save_stack mm/kasan/common.c:57 [inline]\n  kasan_save_track+0x3e/0x80 mm/kasan/common.c:78\n  unpoison_slab_object mm/kasan/common.c:340 [inline]\n  __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366\n  kasan_slab_alloc include/linux/kasan.h:253 [inline]\n  slab_post_alloc_hook mm/slub.c:4953 [inline]\n  slab_alloc_node mm/slub.c:5263 [inline]\n  kmem_cache_alloc_noprof+0x18d/0x6c0 mm/slub.c:5270\n  dst_alloc+0x105/0x170 net/core/dst.c:89\n  ip6_dst_alloc net/ipv6/route.c:342 [inline]\n  icmp6_dst_alloc+0x75/0x460 net/ipv6/route.c:3333\n  mld_sendpack+0x683/0xe60 net/ipv6/mcast.c:1844\n  mld_send_cr net/ipv6/mcast.c:2154 [inline]\n  mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340\n  worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421\n  kthread+0x711/0x8a0 kernel/kthread.c:463\n  ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entr\n---truncated---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.1",
            "versionEndExcluding" : "6.6.130",
            "matchCriteriaId" : "DEBACAAC-73D9-421D-9C06-2A25784F4389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12",
            "versionEndExcluding" : "6.12.78",
            "matchCriteriaId" : "CF16B1DB-0D79-4F76-8B3C-57C79AB99F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "37D2A6B1-8BD3-429F-AD08-085E7C18B13B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D72FF4-3906-4585-B39A-A9B194F53204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/722de945216144af7cd4d39bdeb936108d2595a7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/815db2363e51f0ef416947492d4dac5b7a520f56",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9a6f0c4d5796ab89b5a28a890ce542344d58bd69",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f24a52948c95e02facbca2b3b6eb5a225e27eb01",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23005",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.377",
      "lastModified" : "2026-03-25T19:22:06.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1\n\nWhen loading guest XSAVE state via KVM_SET_XSAVE, and when updating XFD in\nresponse to a guest WRMSR, clear XFD-disabled features in the saved (or to\nbe restored) XSTATE_BV to ensure KVM doesn't attempt to load state for\nfeatures that are disabled via the guest's XFD.  Because the kernel\nexecutes XRSTOR with the guest's XFD, saving XSTATE_BV[i]=1 with XFD[i]=1\nwill cause XRSTOR to #NM and panic the kernel.\n\nE.g. if fpu_update_guest_xfd() sets XFD without clearing XSTATE_BV:\n\n  ------------[ cut here ]------------\n  WARNING: arch/x86/kernel/traps.c:1524 at exc_device_not_available+0x101/0x110, CPU#29: amx_test/848\n  Modules linked in: kvm_intel kvm irqbypass\n  CPU: 29 UID: 1000 PID: 848 Comm: amx_test Not tainted 6.19.0-rc2-ffa07f7fd437-x86_amx_nm_xfd_non_init-vm #171 NONE\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n  RIP: 0010:exc_device_not_available+0x101/0x110\n  Call Trace:\n   <TASK>\n   asm_exc_device_not_available+0x1a/0x20\n  RIP: 0010:restore_fpregs_from_fpstate+0x36/0x90\n   switch_fpu_return+0x4a/0xb0\n   kvm_arch_vcpu_ioctl_run+0x1245/0x1e40 [kvm]\n   kvm_vcpu_ioctl+0x2c3/0x8f0 [kvm]\n   __x64_sys_ioctl+0x8f/0xd0\n   do_syscall_64+0x62/0x940\n   entry_SYSCALL_64_after_hwframe+0x4b/0x53\n   </TASK>\n  ---[ end trace 0000000000000000 ]---\n\nThis can happen if the guest executes WRMSR(MSR_IA32_XFD) to set XFD[18] = 1,\nand a host IRQ triggers kernel_fpu_begin() prior to the vmexit handler's\ncall to fpu_update_guest_xfd().\n\nand if userspace stuffs XSTATE_BV[i]=1 via KVM_SET_XSAVE:\n\n  ------------[ cut here ]------------\n  WARNING: arch/x86/kernel/traps.c:1524 at exc_device_not_available+0x101/0x110, CPU#14: amx_test/867\n  Modules linked in: kvm_intel kvm irqbypass\n  CPU: 14 UID: 1000 PID: 867 Comm: amx_test Not tainted 6.19.0-rc2-2dace9faccd6-x86_amx_nm_xfd_non_init-vm #168 NONE\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n  RIP: 0010:exc_device_not_available+0x101/0x110\n  Call Trace:\n   <TASK>\n   asm_exc_device_not_available+0x1a/0x20\n  RIP: 0010:restore_fpregs_from_fpstate+0x36/0x90\n   fpu_swap_kvm_fpstate+0x6b/0x120\n   kvm_load_guest_fpu+0x30/0x80 [kvm]\n   kvm_arch_vcpu_ioctl_run+0x85/0x1e40 [kvm]\n   kvm_vcpu_ioctl+0x2c3/0x8f0 [kvm]\n   __x64_sys_ioctl+0x8f/0xd0\n   do_syscall_64+0x62/0x940\n   entry_SYSCALL_64_after_hwframe+0x4b/0x53\n   </TASK>\n  ---[ end trace 0000000000000000 ]---\n\nThe new behavior is consistent with the AMX architecture.  Per Intel's SDM,\nXSAVE saves XSTATE_BV as '0' for components that are disabled via XFD\n(and non-compacted XSAVE saves the initial configuration of the state\ncomponent):\n\n  If XSAVE, XSAVEC, XSAVEOPT, or XSAVES is saving the state component i,\n  the instruction does not generate #NM when XCR0[i] = IA32_XFD[i] = 1;\n  instead, it operates as if XINUSE[i] = 0 (and the state component was\n  in its initial state): it saves bit i of XSTATE_BV field of the XSAVE\n  header as 0; in addition, XSAVE saves the initial configuration of the\n  state component (the other instructions do not save state component i).\n\nAlternatively, KVM could always do XRSTOR with XFD=0, e.g. by using\na constant XFD based on the set of enabled features when XSAVEing for\na struct fpu_guest.  However, having XSTATE_BV[i]=1 for XFD-disabled\nfeatures can only happen in the above interrupt case, or in similar\nscenarios involving preemption on preemptible kernels, because\nfpu_swap_kvm_fpstate()'s call to save_fpregs_to_fpstate() saves the\noutgoing FPU state with the current XFD; and that is (on all but the\nfirst WRMSR to XFD) the guest XFD.\n\nTherefore, XFD can only go out of sync with XSTATE_BV in the above\ninterrupt case, or in similar scenarios involving preemption on\npreemptible kernels, and it we can consider it (de facto) part of KVM\nABI that KVM_GET_XSAVE returns XSTATE_BV[i]=0 for XFD-disabled features.\n\n[Move clea\n---truncated---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.17.1",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "DBDA7572-E110-41C4-9105-D1C8795D891A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A59F7FD3-F505-48BD-8875-F07A33F42F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1e2848bda819af569dfe7ab186223855e092a2cb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b45f721775947a84996deb5c661602254ce25ce6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b5995c01ba53d84182ecb9492fc4d91cfe8a362d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eea6f395ca502c4528314c8112da9b5d65f685eb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f577508cc8a0adb8b4ebe9480bba7683b6149930",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23006",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.480",
      "lastModified" : "2026-03-25T19:21:56.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: tlv320adcx140: fix null pointer\n\nThe \"snd_soc_component\" in \"adcx140_priv\" was only used once but never\nset. It was only used for reaching \"dev\" which is already present in\n\"adcx140_priv\"."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nASoC: tlv320adcx140: corrección de puntero nulo\n\nEl 'snd_soc_component' en 'adcx140_priv' solo se usó una vez pero nunca se configuró. Solo se usó para alcanzar 'dev', que ya está presente en 'adcx140_priv'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.1",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "FC8A14F3-D16F-4AB8-A56B-58BFF0518CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE093B34-F4CD-4052-8122-730D6537A91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/53bd838ed5950cb18927e4b2e8ee841b7cb10929",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/61757f5191daab863d25f03680e912b5449a1eed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/659939d08e5f7bc17b941c53e8c9c0a6c6113b21",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/954260a32c21d5072d8e7253c0a8b1627927cb02",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/be7664c81d3129fc313ef62ff275fd3d33cfecd4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23007",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.580",
      "lastModified" : "2026-03-25T19:21:49.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: zero non-PI portion of auto integrity buffer\n\nThe auto-generated integrity buffer for writes needs to be fully\ninitialized before being passed to the underlying block device,\notherwise the uninitialized memory can be read back by userspace or\nanyone with physical access to the storage device. If protection\ninformation is generated, that portion of the integrity buffer is\nalready initialized. The integrity data is also zeroed if PI generation\nis disabled via sysfs or the PI tuple size is 0. However, this misses\nthe case where PI is generated and the PI tuple size is nonzero, but the\nmetadata size is larger than the PI tuple. In this case, the remainder\n(\"opaque\") of the metadata is left uninitialized.\nGeneralize the BLK_INTEGRITY_CSUM_NONE check to cover any case when the\nmetadata is larger than just the PI tuple."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbloque: poner a cero la porción no-PI del búfer de integridad automático\n\nEl búfer de integridad autogenerado para escrituras necesita ser completamente inicializado antes de ser pasado al dispositivo de bloque subyacente, de lo contrario la memoria no inicializada puede ser leída por el espacio de usuario o cualquier persona con acceso físico al dispositivo de almacenamiento. Si se genera información de protección, esa porción del búfer de integridad ya está inicializada. Los datos de integridad también se ponen a cero si la generación de PI está deshabilitada a través de sysfs o el tamaño de la tupla PI es 0. Sin embargo, esto omite el caso en que se genera PI y el tamaño de la tupla PI no es cero, pero el tamaño de los metadatos es mayor que la tupla PI. En este caso, el resto ('opaco') de los metadatos se deja sin inicializar.\nGeneralizar la comprobación BLK_INTEGRITY_CSUM_NONE para cubrir cualquier caso en que los metadatos sean más grandes que solo la tupla PI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11.1",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "5DBAC6C6-38A3-4891-B448-38513277FEDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4770BA57-3F3F-493B-8608-EC3B25254949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/ca22c566b89164f6e670af56ecc45f47ef3df819",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d6072557b90e0c557df319a56f4a9dc482706d2c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23008",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.673",
      "lastModified" : "2026-03-25T19:54:20.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Fix KMS with 3D on HW version 10\n\nHW version 10 does not have GB Surfaces so there is no backing buffer for\nsurface backed FBs. This would result in a nullptr dereference and crash\nthe driver causing a black screen."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/vmwgfx: Corregir KMS con 3D en la versión de HW 10\n\nLa versión de HW 10 no tiene GB Surfaces por lo que no hay un búfer de respaldo para FBs respaldados por superficie. Esto resultaría en una desreferencia de puntero nulo y colapsaría el controlador causando una pantalla negra."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16.1",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "93EB4FA7-6AD6-4923-B7A8-9F5B3940F93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6238B17D-C12B-458F-A138-97039BFC4595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23009",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.767",
      "lastModified" : "2026-03-25T19:53:47.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nxhci: sideband: don't dereference freed ring when removing sideband endpoint\n\nxhci_sideband_remove_endpoint() incorrecly assumes that the endpoint is\nrunning and has a valid transfer ring.\n\nLianqin reported a crash during suspend/wake-up stress testing, and\nfound the cause to be dereferencing a non-existing transfer ring\n'ep->ring' during xhci_sideband_remove_endpoint().\n\nThe endpoint and its ring may be in unknown state if this function\nis called after xHCI was reinitialized in resume (lost power), or if\ndevice is being re-enumerated, disconnected or endpoint already dropped.\n\nFix this by both removing unnecessary ring access, and by checking\nep->ring exists before dereferencing it. Also make sure endpoint is\nrunning before attempting to stop it.\n\nRemove the xhci_initialize_ring_info() call during sideband endpoint\nremoval as is it only initializes ring structure enqueue, dequeue and\ncycle state values to their starting values without changing actual\nhardware enqueue, dequeue and cycle state. Leaving them out of sync\nis worse than leaving it as it is. The endpoint will get freed in after\nthis in most usecases.\n\nIf the (audio) class driver want's to reuse the endpoint after offload\nthen it is up to the class driver to ensure endpoint is properly set up."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nxhci: banda lateral: no desreferenciar el anillo liberado al eliminar el punto final de banda lateral\n\nxhci_sideband_remove_endpoint() asume incorrectamente que el punto final está en ejecución y tiene un anillo de transferencia válido.\n\nLianqin informó de un fallo durante las pruebas de estrés de suspensión/activación, y encontró que la causa era la desreferenciación de un anillo de transferencia inexistente 'ep-&gt;ring' durante xhci_sideband_remove_endpoint().\n\nEl punto final y su anillo pueden estar en un estado desconocido si esta función se llama después de que xHCI fuera reinicializado en la reanudación (pérdida de energía), o si el dispositivo está siendo reenumerado, desconectado o el punto final ya ha sido descartado.\n\nSolucione esto eliminando el acceso innecesario al anillo y comprobando que 'ep-&gt;ring' existe antes de desreferenciarlo. También asegúrese de que el punto final esté en ejecución antes de intentar detenerlo.\n\nElimine la llamada a xhci_initialize_ring_info() durante la eliminación del punto final de banda lateral, ya que solo inicializa los valores de estado de encolamiento, desencolamiento y ciclo de la estructura del anillo a sus valores iniciales sin cambiar el estado real de encolamiento, desencolamiento y ciclo del hardware. Dejarlos fuera de sincronización es peor que dejarlo como está. El punto final será liberado después de esto en la mayoría de los casos de uso.\n\nSi el controlador de clase (de audio) desea reutilizar el punto final después de la descarga, entonces es responsabilidad del controlador de clase asegurar que el punto final esté configurado correctamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16.1",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "93EB4FA7-6AD6-4923-B7A8-9F5B3940F93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6238B17D-C12B-458F-A138-97039BFC4595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/34f6634dba87ef72b3c3a3a524be663adef7ab42",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dd83dc1249737b837ac5d57c81f2b0977c613d9f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23010",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.867",
      "lastModified" : "2026-04-27T14:16:29.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix use-after-free in inet6_addr_del().\n\nsyzbot reported use-after-free of inet6_ifaddr in\ninet6_addr_del(). [0]\n\nThe cited commit accidentally moved ipv6_del_addr() for\nmngtmpaddr before reading its ifp->flags for temporary\naddresses in inet6_addr_del().\n\nLet's move ipv6_del_addr() down to fix the UAF.\n\n[0]:\nBUG: KASAN: slab-use-after-free in inet6_addr_del.constprop.0+0x67a/0x6b0 net/ipv6/addrconf.c:3117\nRead of size 4 at addr ffff88807b89c86c by task syz.3.1618/9593\n\nCPU: 0 UID: 0 PID: 9593 Comm: syz.3.1618 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nCall Trace:\n <TASK>\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xcd/0x630 mm/kasan/report.c:482\n kasan_report+0xe0/0x110 mm/kasan/report.c:595\n inet6_addr_del.constprop.0+0x67a/0x6b0 net/ipv6/addrconf.c:3117\n addrconf_del_ifaddr+0x11e/0x190 net/ipv6/addrconf.c:3181\n inet6_ioctl+0x1e5/0x2b0 net/ipv6/af_inet6.c:582\n sock_do_ioctl+0x118/0x280 net/socket.c:1254\n sock_ioctl+0x227/0x6b0 net/socket.c:1375\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f164cf8f749\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f164de64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f164d1e5fa0 RCX: 00007f164cf8f749\nRDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003\nRBP: 00007f164d013f91 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f164d1e6038 R14: 00007f164d1e5fa0 R15: 00007ffde15c8288\n </TASK>\n\nAllocated by task 9593:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:56\n kasan_save_track+0x14/0x30 mm/kasan/common.c:77\n poison_kmalloc_redzone mm/kasan/common.c:397 [inline]\n __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:414\n kmalloc_noprof include/linux/slab.h:957 [inline]\n kzalloc_noprof include/linux/slab.h:1094 [inline]\n ipv6_add_addr+0x4e3/0x2010 net/ipv6/addrconf.c:1120\n inet6_addr_add+0x256/0x9b0 net/ipv6/addrconf.c:3050\n addrconf_add_ifaddr+0x1fc/0x450 net/ipv6/addrconf.c:3160\n inet6_ioctl+0x103/0x2b0 net/ipv6/af_inet6.c:580\n sock_do_ioctl+0x118/0x280 net/socket.c:1254\n sock_ioctl+0x227/0x6b0 net/socket.c:1375\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 6099:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:56\n kasan_save_track+0x14/0x30 mm/kasan/common.c:77\n kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:584\n poison_slab_object mm/kasan/common.c:252 [inline]\n __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284\n kasan_slab_free include/linux/kasan.h:234 [inline]\n slab_free_hook mm/slub.c:2540 [inline]\n slab_free_freelist_hook mm/slub.c:2569 [inline]\n slab_free_bulk mm/slub.c:6696 [inline]\n kmem_cache_free_bulk mm/slub.c:7383 [inline]\n kmem_cache_free_bulk+0x2bf/0x680 mm/slub.c:7362\n kfree_bulk include/linux/slab.h:830 [inline]\n kvfree_rcu_bulk+0x1b7/0x1e0 mm/slab_common.c:1523\n kvfree_rcu_drain_ready mm/slab_common.c:1728 [inline]\n kfree_rcu_monitor+0x1d0/0x2f0 mm/slab_common.c:1801\n process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257\n process_scheduled_works kernel/workqu\n---truncated---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.120",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "8A65F7CD-0FE2-4DCC-AD3E-81081809CBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.64",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "0D5D88F1-0BCF-4356-A30D-5685E2B9D6F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11.11",
            "versionEndExcluding" : "6.12",
            "matchCriteriaId" : "4CBF5F6E-D446-4CAE-AAA4-413442319824"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.2",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "81BDB0AD-3170-4EDF-80AB-CBB92F6FD25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13.1",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "EBDCB390-1492-4C5A-8DB3-9078B54AADF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3F9505-6B98-4269-8B81-127E55A1BF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2684610a9c9c53f262fd864fa5c407e79f304804",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6e89d60b4f03014f7d412ce64b17a840840d490e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8b6dcb565e419846bd521e31d5e1f98e4d0e1179",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9356b69d03d0f50cce91cebdabd33dda023fbd64",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ddf96c393a33aef4887e2e406c76c2f8cda1419c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23011",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:55.977",
      "lastModified" : "2026-03-25T19:51:11.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: ip_gre: make ipgre_header() robust\n\nAnalog to commit db5b4e39c4e6 (\"ip6_gre: make ip6gre_header() robust\")\n\nOver the years, syzbot found many ways to crash the kernel\nin ipgre_header() [1].\n\nThis involves team or bonding drivers ability to dynamically\nchange their dev->needed_headroom and/or dev->hard_header_len\n\nIn this particular crash mld_newpack() allocated an skb\nwith a too small reserve/headroom, and by the time mld_sendpack()\nwas called, syzbot managed to attach an ipgre device.\n\n[1]\nskbuff: skb_under_panic: text:ffffffff89ea3cb7 len:2030915468 put:2030915372 head:ffff888058b43000 data:ffff887fdfa6e194 tail:0x120 end:0x6c0 dev:team0\n kernel BUG at net/core/skbuff.c:213 !\nOops: invalid opcode: 0000 [#1] SMP KASAN PTI\nCPU: 1 UID: 0 PID: 1322 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nWorkqueue: mld mld_ifc_work\n RIP: 0010:skb_panic+0x157/0x160 net/core/skbuff.c:213\nCall Trace:\n <TASK>\n  skb_under_panic net/core/skbuff.c:223 [inline]\n  skb_push+0xc3/0xe0 net/core/skbuff.c:2641\n  ipgre_header+0x67/0x290 net/ipv4/ip_gre.c:897\n  dev_hard_header include/linux/netdevice.h:3436 [inline]\n  neigh_connected_output+0x286/0x460 net/core/neighbour.c:1618\n  NF_HOOK_COND include/linux/netfilter.h:307 [inline]\n  ip6_output+0x340/0x550 net/ipv6/ip6_output.c:247\n  NF_HOOK+0x9e/0x380 include/linux/netfilter.h:318\n  mld_sendpack+0x8d4/0xe60 net/ipv6/mcast.c:1855\n  mld_send_cr net/ipv6/mcast.c:2154 [inline]\n  mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340\n  worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421\n  kthread+0x711/0x8a0 kernel/kthread.c:463\n  ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nipv4: ip_gre: hacer ipgre_header() robusto\n\nAnálogo al commit db5b4e39c4e6 ('ip6_gre: hacer ip6gre_header() robusto')\n\nA lo largo de los años, syzbot encontró muchas maneras de colapsar el kernel en ipgre_header() [1].\n\nEsto implica la capacidad de los controladores de equipo o de enlace (bonding drivers) de cambiar dinámicamente su dev-&gt;needed_headroom y/o dev-&gt;hard_header_len\n\nEn este colapso particular, mld_newpack() asignó un skb con una reserva/espacio de cabecera (headroom) demasiado pequeño, y para cuando se llamó a mld_sendpack(), syzbot logró adjuntar un dispositivo ipgre.\n\n[1]\nskbuff: skb_under_panic: text:ffffffff89ea3cb7 len:2030915468 put:2030915372 head:ffff888058b43000 data:ffff887fdfa6e194 tail:0x120 end:0x6c0 dev:team0\n kernel BUG at net/core/skbuff.c:213 !\nOops: invalid opcode: 0000 [#1] SMP KASAN PTI\nCPU: 1 UID: 0 PID: 1322 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nWorkqueue: mld mld_ifc_work\n RIP: 0010:skb_panic+0x157/0x160 net/core/skbuff.c:213\nCall Trace:\n \n  skb_under_panic net/core/skbuff.c:223 [inline]\n  skb_push+0xc3/0xe0 net/core/skbuff.c:2641\n  ipgre_header+0x67/0x290 net/ipv4/ip_gre.c:897\n  dev_hard_header include/linux/netdevice.h:3436 [inline]\n  neigh_connected_output+0x286/0x460 net/core/neighbour.c:1618\n  NF_HOOK_COND include/linux/netfilter.h:307 [inline]\n  ip6_output+0x340/0x550 net/ipv6/ip6_output.c:247\n  NF_HOOK+0x9e/0x380 include/linux/netfilter.h:318\n  mld_sendpack+0x8d4/0xe60 net/ipv6/mcast.c:1855\n  mld_send_cr net/ipv6/mcast.c:2154 [inline]\n  mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340\n  worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421\n  kthread+0x711/0x8a0 kernel/kthread.c:463\n  ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.1",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "D4F13569-6B1B-4155-8A0E-C5413C92E07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "82D28405-E1F2-43CF-AA38-B228805AFFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/06fe0801396a36cab865b34f666de1d65bc5ce8e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2ecf0aa7cc262472a9599cc51ba02ada0897a17a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/554201ed0a8f4d32e719f42caeaeb2735a9ed6ca",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8d5b6b2d79c1c22a5b0db1187a6439dff375a022",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aa57bfea4674e6da8104fa3a37760a6f5f255dad",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e67c577d89894811ce4dcd1a9ed29d8b63476667",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eeb9a521de40c6fadccc12fa5205e5a1b364d5a8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23012",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:56.073",
      "lastModified" : "2026-03-25T19:49:02.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/core: remove call_control in inactive contexts\n\nIf damon_call() is executed against a DAMON context that is not running,\nthe function returns error while keeping the damon_call_control object\nlinked to the context's call_controls list.  Let's suppose the object is\ndeallocated after the damon_call(), and yet another damon_call() is\nexecuted against the same context.  The function tries to add the new\ndamon_call_control object to the call_controls list, which still has the\npointer to the previous damon_call_control object, which is deallocated. \nAs a result, use-after-free happens.\n\nThis can actually be triggered using the DAMON sysfs interface.  It is not\neasily exploitable since it requires the sysfs write permission and making\na definitely weird file writes, though.  Please refer to the report for\nmore details about the issue reproduction steps.\n\nFix the issue by making two changes.  Firstly, move the final\nkdamond_call() for cancelling all existing damon_call() requests from\nterminating DAMON context to be done before the ctx->kdamond reset.  This\nmakes any code that sees NULL ctx->kdamond can safely assume the context\nmay not access damon_call() requests anymore.  Secondly, let damon_call()\nto cleanup the damon_call_control objects that were added to the\nalready-terminated DAMON context, before returning the error."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm/damon/core: eliminar call_control en contextos inactivos\n\nSi damon_call() se ejecuta contra un contexto DAMON que no está en ejecución, la función devuelve un error mientras mantiene el objeto damon_call_control vinculado a la lista call_controls del contexto. Supongamos que el objeto es desasignado después de damon_call(), y se ejecuta otro damon_call() contra el mismo contexto. La función intenta añadir el nuevo objeto damon_call_control a la lista call_controls, que todavía tiene el puntero al objeto damon_call_control anterior, que está desasignado. Como resultado, ocurre un uso después de liberación.\n\nEsto puede ser realmente activado usando la interfaz sysfs de DAMON. Sin embargo, no es fácilmente explotable ya que requiere el permiso de escritura de sysfs y realizar escrituras de archivo definitivamente extrañas. Por favor, consulte el informe para más detalles sobre los pasos de reproducción del problema.\n\nSolucione el problema realizando dos cambios. En primer lugar, mueva la kdamond_call() final para cancelar todas las solicitudes damon_call() existentes del contexto DAMON que termina, para que se realice antes del reinicio de ctx-&gt;kdamond. Esto hace que cualquier código que vea NULL en ctx-&gt;kdamond pueda asumir con seguridad que el contexto ya no puede acceder a las solicitudes damon_call(). En segundo lugar, permita que damon_call() limpie los objetos damon_call_control que fueron añadidos al contexto DAMON ya terminado, antes de devolver el error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.1",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "FDCC46B4-613C-4010-9820-E91FA006C1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC8B11D-82DC-4958-8DC7-BF5CC829A5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/23b061f421eef03647b512f3df48861706c87db3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f9132fbc2e83baf2c45a77043672a63a675c9394",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23013",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-25T15:15:56.173",
      "lastModified" : "2026-04-03T14:16:22.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback\n\noctep_vf_request_irqs() requests MSI-X queue IRQs with dev_id set to\nioq_vector. If request_irq() fails part-way, the rollback loop calls\nfree_irq() with dev_id set to 'oct', which does not match the original\ndev_id and may leave the irqaction registered.\n\nThis can keep IRQ handlers alive while ioq_vector is later freed during\nunwind/teardown, leading to a use-after-free or crash when an interrupt\nfires.\n\nFix the error path to free IRQs with the same ioq_vector dev_id used\nduring request_irq()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: octeon_ep_vf: corregir la falta de coincidencia de dev_id de free_irq en la reversión de IRQ\n\noctep_vf_request_irqs() solicita IRQs de cola MSI-X con dev_id establecido en ioq_vector. Si request_irq() falla a mitad de camino, el bucle de reversión llama a free_irq() con dev_id establecido en 'oct', lo que no coincide con el dev_id original y puede dejar la irqaction registrada.\n\nEsto puede mantener los manejadores de IRQ activos mientras ioq_vector es liberado posteriormente durante el desenrollado/desmontaje, lo que lleva a un uso después de liberación o un fallo cuando se dispara una interrupción.\n\nCorregir la ruta de error para liberar IRQs con el mismo dev_id de ioq_vector utilizado durante request_irq()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.1",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "89E789F9-62FD-41A3-B2A9-965C05F50BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2A4A3D-068A-4CF2-A09F-9C7937DDB0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/aa05a8371ae4a452df623f7202c72409d3c50e40",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aa4c066229b05fc3d3c5f42693d25b1828533b6e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f93fc5d12d69012788f82151bee55fce937e1432",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1407",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-25T22:16:00.563",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Beetel 777VR1 up to 01.00.09/01.00.09_55. This affects an unknown part of the component UART Interface. Performing a manipulation results in information disclosure. The attack may be carried out on the physical device. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Beetel 777VR1 hasta 01.00.09/01.00.09_55. Esto afecta una parte desconocida del componente Interfaz UART. Realizar una manipulación resulta en revelación de información. El ataque puede ser llevado a cabo en el dispositivo físico. Se considera que el ataque tiene alta complejidad. Se indica que la explotabilidad es difícil. El exploit ha sido publicado al público y puede ser usado para ataques. El proveedor fue contactado tempranamente sobre esta revelación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 0.3,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/253c041842f622d9c2cb6ee4111c2227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342796",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342796",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736322",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1408",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-25T23:15:48.127",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Beetel 777VR1 up to 01.00.09/01.00.09_55. This vulnerability affects unknown code of the component UART Interface. Executing a manipulation can lead to weak password requirements. The physical device can be targeted for the attack. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Beetel 777VR1 hasta la versión 01.00.09/01.00.09_55. Esta vulnerabilidad afecta a código desconocido del componente Interfaz UART. La ejecución de una manipulación puede llevar a requisitos de contraseña débiles. El dispositivo físico puede ser el objetivo del ataque. El ataque requiere un alto nivel de complejidad. Se afirma que la explotabilidad es difícil. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 0.3,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/9c51cbd91f3798b1c10f3f30fb631633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1409",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T00:16:03.050",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physical device. The attack's complexity is rated as high. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Beetel 777VR1 hasta 01.00.09/01.00.09_55. Este problema afecta a algún procesamiento desconocido del componente Interfaz UART. La manipulación lleva a una restricción inadecuada de intentos de autenticación excesivos. Es posible lanzar el ataque en el dispositivo físico. La complejidad del ataque se califica como alta. La explotabilidad se evalúa como difícil. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 0.3,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-799"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/19900b427445adf37f64ae953611bfce",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342798",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342798",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739399",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1410",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T01:15:48.773",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Beetel 777VR1 hasta 01.00.09/01.00.09_55. Afectada es una función desconocida del componente Interfaz UART. La manipulación resulta en falta de autenticación. Un ataque en el dispositivo físico es factible. Este ataque se caracteriza por alta complejidad. La explotabilidad se considera difícil. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/96a6b13ab00c493d21362e744627ea9f",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342799",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342799",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739433",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1411",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T01:15:49.363",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Beetel 777VR1 up to 01.00.09/01.00.09_55. The affected element is an unknown function of the component UART Interface. This manipulation causes improper access controls. It is feasible to perform the attack on the physical device. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Beetel 777VR1 hasta 01.00.09/01.00.09_55. El elemento afectado es una función desconocida del componente Interfaz UART. Esta manipulación provoca controles de acceso inadecuados. Es factible realizar el ataque en el dispositivo físico. La complejidad de un ataque es bastante alta. La explotabilidad se describe como difícil. El exploit se ha publicado y puede usarse. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:M/C:C/I:C/A:C",
            "baseScore" : 5.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.2,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/ea6adcd6d1eca35683570a1094164bd3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1412",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T01:15:49.570",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/get_clip_img of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad se ha encontrado en el Sistema de Gestión de Seguridad de Operación y Mantenimiento de Sangfor hasta la versión 3.0.12. El elemento afectado es una función desconocida del archivo /fort/audit/get_clip_img del componente Manejador de Solicitudes HTTP POST. Dicha manipulación del argumento frame/dirno conduce a inyección de comandos. Es posible lanzar el ataque remotamente. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "B2514FE4-F7D8-46CC-9ACF-FC9B7433599F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/22",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342801",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342801",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736513",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1413",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T02:15:48.767",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function portValidate of the file /fort/ip_and_port/port_validate of the component HTTP POST Request Handler. Performing a manipulation of the argument port results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en el Sistema de Gestión de Seguridad de Operación y Mantenimiento de Sangfor hasta la versión 3.0.12. Esto afecta la función portValidate del archivo /fort/ip_and_port/port_validate del componente Manejador de Solicitudes POST HTTP. Realizar una manipulación del argumento port resulta en inyección de comandos. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "B2514FE4-F7D8-46CC-9ACF-FC9B7433599F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736522",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1414",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T03:15:49.587",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/get_Information of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en el Sistema de Gestión de Seguridad de Operación y Mantenimiento de Sangfor hasta la versión 3.0.12. Esto afecta a la función getInformation del archivo /equipment/get_Information del componente HTTP POST Request Handler. La ejecución de una manipulación del argumento fortEquipmentIp puede conducir a una inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.12",
            "matchCriteriaId" : "B2514FE4-F7D8-46CC-9ACF-FC9B7433599F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342803",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342803",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736524",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1415",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T03:15:49.780",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gf_media_export_webvtt_metadata of the file src/media_tools/media_export.c. The manipulation of the argument Name leads to null pointer dereference. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is af951b892dfbaaa38336ba2eba6d6a42c25810fd. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en GPAC hasta 2.4.0. La función gf_media_export_webvtt_metadata del archivo src/media_tools/media_export.c está afectada. La manipulación del argumento Name conduce a una desreferencia de puntero nulo. El ataque debe llevarse a cabo localmente. El exploit está disponible públicamente y podría ser utilizado. El identificador del parche es af951b892dfbaaa38336ba2eba6d6a42c25810fd. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "3569968C-C15E-4091-B538-8B212A2F16CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/enocknt/gpac/commit/af951b892dfbaaa38336ba2eba6d6a42c25810fd",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gpac/gpac/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3428",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3428#issue-3802223345",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736541",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1416",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T04:16:09.960",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as d45c264c20addf0c1cc05124ede33f8ffa800e68. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en GPAC hasta 2.4.0. Afectada por esta vulnerabilidad es la función DumpMovieInfo del archivo applications/mp4box/filedump.c. La manipulación resulta en desreferencia de puntero nulo. El ataque debe ser iniciado desde una posición local. El exploit ha sido liberado al público y puede ser usado para ataques. El parche es identificado como d45c264c20addf0c1cc05124ede33f8ffa800e68. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "3569968C-C15E-4091-B538-8B212A2F16CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/enocknt/gpac/commit/d45c264c20addf0c1cc05124ede33f8ffa800e68",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gpac/gpac/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3427",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3427#issue-3802197432",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342805",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342805",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736542",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1417",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T04:16:10.180",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en GPAC hasta 2.4.0. Afectada por este problema es la función dump_isom_rtp del archivo applications/mp4box/filedump.c. Esta manipulación causa desreferencia de puntero nulo. El ataque necesita ser lanzado localmente. El exploit ha sido puesto a disposición del público y podría ser usado para ataques. Nombre del parche: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "3569968C-C15E-4091-B538-8B212A2F16CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/enocknt/gpac/commit/f96bd57c3ccdcde4335a0be28cd3e8fe296993de",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gpac/gpac/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3426",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3426#issue-3802172856",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736543",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1418",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T04:16:10.360",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in GPAC up to 2.4.0. This affects the function gf_text_import_srt_bifs of the file src/scene_manager/text_to_bifs.c of the component SRT Subtitle Import. Such manipulation leads to out-of-bounds write. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The name of the patch is 10c73b82cf0e367383d091db38566a0e4fe71772. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en GPAC hasta 2.4.0. Esto afecta la función gf_text_import_srt_bifs del archivo src/scene_manager/text_to_bifs.c del componente SRT Subtitle Import. Dicha manipulación conduce a una escritura fuera de límites. El ataque necesita ser realizado localmente. El exploit ha sido divulgado públicamente y puede ser usado. El nombre del parche es 10c73b82cf0e367383d091db38566a0e4fe71772. Es una buena práctica aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "3569968C-C15E-4091-B538-8B212A2F16CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/enocknt/gpac/commit/10c73b82cf0e367383d091db38566a0e4fe71772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gpac/gpac/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3425",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/3425#issue-3801961068",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342807",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342807",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736544",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1419",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T05:16:05.193",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en D-Link DCS700l 1.03.09. Afecta a una función desconocida del archivo /setDayNightMode del componente Web Form Handler. La ejecución de una manipulación del argumento LightSensorControl puede conducir a inyección de comandos. El ataque puede lanzarse remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-700l_firmware:1.03.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608930F1-8709-4F17-9E88-976B0E415079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-700l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E798414C-1A95-42CE-8B31-A3401A172F74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/D-Link-DCS700l-v1-03-09-Command-Injection-Vulnerability-in-LightSensorControl-Parameter-2e6b5c52018a80ada0f6d7e72efd7a45?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342815",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342815",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736554",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1420",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T06:16:04.073",
      "lastModified" : "2026-01-28T14:44:39.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda AC23 16.03.07.52. Esto afecta a una función desconocida del archivo /goform/WifiExtraSet. Esta manipulación del argumento wpapsk_crypto causa desbordamiento de búfer. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac23_firmware:16.03.07.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A70D64A9-3FF1-4777-ACB5-0D66D5B9448F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B730D9E-D9B0-480B-9941-7C48C56BBE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow_WifiExtraSet/Tenda%20AC23_Buffer_Overflow_WifiExtraSet.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow_WifiExtraSet/Tenda%20AC23_Buffer_Overflow_WifiExtraSet.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342836",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342836",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736559",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1421",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T06:16:04.327",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en code-projects Online Examination System 1.0. Afecta a una función desconocida del componente Add Pages. Dicha manipulación conduce a cross-site scripting. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_examination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C25C55-3F57-4D4E-99A4-068A64ECA280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-1-stored-xss-in-all-add-pages",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342837",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342837",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736605",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1422",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T07:16:07.570",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Online Examination System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /index.php del componente Login Page. Realizar una manipulación del argumento User resulta en inyección SQL. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_examination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C25C55-3F57-4D4E-99A4-068A64ECA280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-2-sql-injection-on-login-page",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342838",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342838",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736606",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1423",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T07:16:07.830",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /admin_pic.php. Executing a manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en code-projects Online Examination System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /admin_pic.php. Ejecutar una manipulación puede llevar a una carga sin restricciones. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_examination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C25C55-3F57-4D4E-99A4-068A64ECA280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-3-remote-code-execution-via-unsafe-file-upload",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342839",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342839",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736607",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1424",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T07:16:08.063",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en PHPGurukul News Portal 1.0. Esto afecta una parte desconocida del componente Profile Pic Handler. La manipulación conduce a una carga sin restricciones. Es posible iniciar el ataque remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:news_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70433F59-D09B-4F66-981A-FFE1598906E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rsecroot/News-Portal/blob/main/Cross%20Site%20Scripting.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342840",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342840",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736637",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1425",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T08:16:00.490",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The patch is identified as 2d57c4b4e1add9b4537aeb403f794a084727e1c8. Applying a patch is advised to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en pymumu SmartDNS hasta la versión 47.1. Esta vulnerabilidad afecta a la función _dns_decode_rr_head/_dns_decode_SVCB_HTTPS del archivo src/dns.c del componente SVBC Record Parser. La manipulación resulta en un desbordamiento de búfer basado en pila. Es posible lanzar el ataque de forma remota. Un alto nivel de complejidad está asociado con este ataque. Se afirma que la explotabilidad es difícil. El parche se identifica como 2d57c4b4e1add9b4537aeb403f794a084727e1c8. Se aconseja aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pymumu/smartdns/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/pymumu/smartdns/commit/2d57c4b4e1add9b4537aeb403f794a084727e1c8",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.342841",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.342841",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.736827",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1427",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-26T08:16:00.753",
      "lastModified" : "2026-03-11T22:51:20.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Portal de Inicio de Sesión Único desarrollado por WellChoose tiene una vulnerabilidad de inyección de comandos del sistema operativo, permitiendo a atacantes remotos autenticados inyectar comandos arbitrarios del sistema operativo y ejecutarlos en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wellchoose:single_sign-on_portal_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "iftop_p4_181",
            "matchCriteriaId" : "F6466370-06D4-4AE1-9E0D-DF0BBE2690E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10655-59160-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10654-23f40-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1428",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-26T09:15:47.433",
      "lastModified" : "2026-03-11T22:50:28.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Portal de Inicio de Sesión Único desarrollado por WellChoose tiene una vulnerabilidad de inyección de comandos del sistema operativo, permitiendo a atacantes remotos autenticados inyectar comandos arbitrarios del sistema operativo y ejecutarlos en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wellchoose:single_sign-on_portal_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "iftop_p4_181",
            "matchCriteriaId" : "F6466370-06D4-4AE1-9E0D-DF0BBE2690E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10655-59160-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10654-23f40-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1429",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-26T09:15:47.603",
      "lastModified" : "2026-03-11T22:44:48.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks."
      }, {
        "lang" : "es",
        "value" : "El Sistema de portal de inicio de sesión único desarrollado por WellChoose tiene una vulnerabilidad de cross-site scripting reflejado, permitiendo a atacantes remotos autenticados ejecutar códigos JavaScript arbitrarios en el navegador del usuario a través de ataques de phishing."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wellchoose:single_sign-on_portal_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "iftop_p4_181",
            "matchCriteriaId" : "F6466370-06D4-4AE1-9E0D-DF0BBE2690E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10655-59160-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10654-23f40-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24656",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-01-26T10:16:09.597",
      "lastModified" : "2026-01-27T20:30:09.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter.\n\n\nThe Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed.\nIt means that the log socket collector is vulnerable to deserialization of untrusted data, eventually causing DoS.\n\n\nNB: Decanter log socket collector is not installed by default. Users who have not installed Decanter log socket are not impacted by this issue.\n\nThis issue affects Apache Karaf Decanter before 2.12.0.\n\nUsers are recommended to upgrade to version 2.12.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en Apache Karaf Decanter.\n\nEl colector de socket de registro de Decanter expone el puerto 4560, sin autenticación. Si el colector expone la propiedad de clases permitidas, esta configuración puede ser eludida.\nEsto significa que el colector de socket de registro es vulnerable a la deserialización de datos no confiables, lo que eventualmente causa DoS.\n\nNB: El colector de socket de registro de Decanter no está instalado por defecto. Los usuarios que no han instalado el socket de registro de Decanter no se ven afectados por este problema.\n\nEste problema afecta a Apache Karaf Decanter anterior a la versión 2.12.0.\n\nSe recomienda a los usuarios actualizar a la versión 2.12.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:karaf_decanter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "8AC91F7D-EA3C-4D8A-95D2-BCA9902B744C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/dc5wmdn6hyc992olntkl75kk04ndzx34",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/24/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1283",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2026-01-26T14:15:56.853",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer basado en montículo que afecta al procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versión SOLIDWORKS Desktop 2025 hasta la versión SOLIDWORKS Desktop 2026 podría permitir a un atacante ejecutar código arbitrario al abrir un archivo EPRT especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1283",
        "source" : "3DS.Information-Security@3ds.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1284",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2026-01-26T14:15:57.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de límites que afecta el procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versión SOLIDWORKS Desktop 2025 hasta la versión SOLIDWORKS Desktop 2026 podría permitir a un atacante ejecutar código arbitrario al abrir un archivo EPRT especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1284",
        "source" : "3DS.Information-Security@3ds.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0925",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-01-26T18:16:28.457",
      "lastModified" : "2026-03-09T18:10:26.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed an improper input validation vulnerability in Discover."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de validación de entrada incorrecta en Discover."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:discover:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.10.134",
            "matchCriteriaId" : "F71FE26F-8FE6-4982-9018-8742B1DFC0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:discover:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.15.130",
            "matchCriteriaId" : "B88BAB1D-6C10-4EBA-885D-94BA6F162BC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-002",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1224",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-01-26T18:16:28.850",
      "lastModified" : "2026-03-09T18:09:29.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed an uncontrolled resource consumption vulnerability in Discover."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de consumo de recursos no controlado en Discover."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:discover:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.10.134",
            "matchCriteriaId" : "C18F0671-1A84-47C0-93D9-23782B90148F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:discover:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.15.130",
            "matchCriteriaId" : "B88BAB1D-6C10-4EBA-885D-94BA6F162BC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-001",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1446",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2026-01-26T18:16:30.140",
      "lastModified" : "2026-02-13T19:41:55.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier. ArcGIS Pro is a desktop application, and exploitation is limited to local users interacting with the application; no privileged role or elevated permissions are required beyond standard local user access. A local attacker can supply malicious strings that may be rendered and executed when a specific dialog within ArcGIS Pro is opened. This issue is fixed in ArcGIS Pro version 3.6.1."
      }, {
        "lang" : "es",
        "value" : "Hay un problema de Cross-Site Scripting (XSS) en las versiones 3.6.0 y anteriores de Esri ArcGIS Pro. ArcGIS Pro es una aplicación de escritorio, y la explotación se limita a usuarios locales que interactúan con la aplicación; no se requiere ningún rol privilegiado ni permisos elevados más allá del acceso estándar de usuario local. Un atacante local puede proporcionar cadenas maliciosas que pueden ser renderizadas y ejecutadas cuando se abre un diálogo específico dentro de ArcGIS Pro. Este problema está solucionado en la versión 3.6.1 de ArcGIS Pro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.1",
            "matchCriteriaId" : "2F0713E0-AF74-4D99-8276-077D18CED526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-pro/administration/arcgis-pro-3-6-1-patch",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21509",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-01-26T18:16:38.540",
      "lastModified" : "2026-02-11T15:40:33.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally."
      }, {
        "lang" : "es",
        "value" : "Dependencia de entradas no confiables en una decisión de seguridad en Microsoft Office permite a un atacante no autorizado eludir una característica de seguridad localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-01-26",
      "cisaActionDue" : "2026-02-16",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Office Security Feature Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "72324216-4EB3-4243-A007-FEF3133C7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21509-detection-script-microsoft-office-security-feature-bypass-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21509-mitigation-script-microsoft-office-security-feature-bypass-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21509",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24428",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:40.117",
      "lastModified" : "2026-01-29T13:02:04.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user management API that allows a low-privileged authenticated user to change the administrator account password. By sending a crafted request directly to the backend endpoint, an attacker can bypass role-based restrictions enforced by the web interface and obtain full administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta la V16.01.0.19(5037) inclusive contienen una falla de autorización en la API de gestión de usuarios que permite a un usuario autenticado con bajos privilegios cambiar la contraseña de la cuenta de administrador. Al enviar una solicitud manipulada directamente al endpoint del backend, un atacante puede eludir las restricciones basadas en roles impuestas por la interfaz web y obtener privilegios administrativos completos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-incorrect-authorization-allows-administrator-password-change",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24429",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:40.267",
      "lastModified" : "2026-01-29T13:01:22.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account that is not required to be changed during initial configuration. An attacker can leverage these default credentials to gain authenticated access to the management interface."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo la V16.01.0.19(5037) se envían con una contraseña predefinida por defecto para una cuenta de autenticación integrada que no es necesario cambiar durante la configuración inicial. Un atacante puede aprovechar estas credenciales por defecto para obtener acceso autenticado a la interfaz de gestión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1393"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FBE634-0D3F-4439-B4A6-F427C82967C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-hardcoded-default-password-for-built-in-account",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24430",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:40.423",
      "lastModified" : "2026-01-28T20:16:51.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in cleartext within HTTP responses generated by the maintenance interface. Because the management interface is accessible over unencrypted HTTP by default, credentials may be exposed to network-based interception."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo la V16.01.0.19(5037) revelan credenciales de cuenta sensibles en texto claro dentro de las respuestas HTTP generadas por la interfaz de mantenimiento. Debido a que la interfaz de gestión es accesible a través de HTTP sin cifrar por defecto, las credenciales pueden quedar expuestas a la interceptación basada en la red."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-http-responses-expose-plaintext-credentials",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24431",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:40.567",
      "lastModified" : "2026-01-28T20:14:45.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administrative web interface. Any user with access to the affected management pages can directly view credentials."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo V16.01.0.19(5037) muestran las contraseñas de cuentas de usuario almacenadas en texto plano dentro de la interfaz web administrativa. Cualquier usuario con acceso a las páginas de administración afectadas puede ver directamente las credenciales."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-317"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-csrf-protections-for-administrative-actions",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24432",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:40.713",
      "lastModified" : "2026-01-28T20:11:24.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) lack cross-site request forgery (CSRF) protections on administrative endpoints, including those used to change administrator account credentials. As a result, an attacker can craft malicious requests that, when triggered by an authenticated user’s browser, modify administrative passwords and other configuration settings."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta la V16.01.0.19(5037) inclusive carecen de protecciones contra falsificación de petición en sitios cruzados (CSRF) en los puntos finales administrativos, incluyendo aquellos utilizados para cambiar las credenciales de la cuenta de administrador. Como resultado, un atacante puede elaborar peticiones maliciosas que, cuando son activadas por el navegador de un usuario autenticado, modifican las contraseñas administrativas y otras configuraciones."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FBE634-0D3F-4439-B4A6-F427C82967C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-csrf-protections-for-administrative-actions",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24433",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:40.873",
      "lastModified" : "2026-01-28T20:10:23.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain a stored cross-site scripting vulnerability in the user creation functionality. Insufficient input validation allows attacker-controlled script content to be stored and later executed when administrative users access the affected management pages."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware Shenzhen Tenda W30E V2 hasta e incluyendo V16.01.0.19(5037) contienen una vulnerabilidad de cross-site scripting almacenado en la funcionalidad de creación de usuarios. La validación de entrada insuficiente permite que el contenido de script controlado por el atacante sea almacenado y posteriormente ejecutado cuando los usuarios administrativos acceden a las páginas de gestión afectadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-stored-xss-via-user-name-field",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24435",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:41.030",
      "lastModified" : "2026-02-02T19:56:16.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) implement an insecure Cross-Origin Resource Sharing (CORS) policy on authenticated administrative endpoints. The device sets Access-Control-Allow-Origin: * in combination with Access-Control-Allow-Credentials: true, allowing attacker-controlled origins to issue credentialed cross-origin requests."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo V16.01.0.19(5037) implementan una política insegura de Intercambio de Recursos de Origen Cruzado (CORS) en puntos finales administrativos autenticados. El dispositivo establece Access-Control-Allow-Origin: * en combinación con Access-Control-Allow-Credentials: true, permitiendo que orígenes controlados por el atacante emitan solicitudes de origen cruzado con credenciales."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-permissive-cors-allows-cross-origin-data-access",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24436",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:41.167",
      "lastModified" : "2026-01-28T19:57:17.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate limiting or account lockout mechanisms on authentication endpoints. This allows attackers to perform unrestricted brute-force attempts against administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo V16.01.0.19(5037) no imponen mecanismos de limitación de tasa o de bloqueo de cuenta en los puntos finales de autenticación. Esto permite a los atacantes realizar intentos de fuerza bruta sin restricciones contra las credenciales administrativas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-lacks-rate-limiting-on-authentication",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24437",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:41.317",
      "lastModified" : "2026-01-28T19:49:11.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo la V16.01.0.19(5037) sirven contenido administrativo sensible sin directivas de control de caché apropiadas. Como resultado, los navegadores pueden almacenar localmente respuestas que contienen credenciales, exponiéndolas a un acceso no autorizado posterior."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-525"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-cache-controls-for-credential-bearing-pages",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24439",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:41.463",
      "lastModified" : "2026-01-28T20:01:46.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the X-Content-Type-Options: nosniff response header on web management interfaces. As a result, browsers that perform MIME sniffing may incorrectly interpret attacker-influenced responses as executable script."
      }, {
        "lang" : "es",
        "value" : "El firmware de Shenzhen Tenda W30E V2, versiones hasta la V16.01.0.19(5037) inclusive, no incluye el encabezado de respuesta X-Content-Type-Options: nosniff en las interfaces de gestión web. Como resultado, los navegadores que realizan MIME sniffing pueden interpretar incorrectamente las respuestas influenciadas por el atacante como script ejecutable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-lacks-x-content-type-options-header",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24440",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-26T18:16:41.637",
      "lastModified" : "2026-01-28T19:20:05.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwords to be changed through the maintenance interface without requiring verification of the existing password. This enables unauthorized password changes when access to the affected endpoint is obtained."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Shenzhen Tenda W30E V2 hasta e incluyendo V16.01.0.19(5037) permiten cambiar las contraseñas de cuenta a través de la interfaz de mantenimiento sin requerir verificación de la contraseña existente. Esto posibilita cambios de contraseña no autorizados cuando se obtiene acceso al endpoint afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.0.19\\(5037\\)",
            "matchCriteriaId" : "4DB07B19-71FC-4936-98BD-36A8B3B7CBF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56B9C2BB-D36E-40F8-83FF-FC919337F6BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/W30E",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-w30e-v2-allows-password-change-without-verifying-current-password",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0810",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-26T20:16:09.600",
      "lastModified" : "2026-02-26T16:23:35.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en gix-date. La función 'gix_date::parse::TimeBuf::as_str' puede generar cadenas de caracteres que contienen caracteres no UTF-8 inválidos. Este problema viola las invariantes de seguridad internas del componente 'TimeBuf', lo que lleva a un comportamiento indefinido cuando estas cadenas de caracteres malformadas son procesadas posteriormente. Esto podría resultar potencialmente en inestabilidad de la aplicación u otras consecuencias imprevistas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-135"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitoxidelabs:gix-date:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.12.0",
            "matchCriteriaId" : "CEC88A8B-FA09-4BDD-953B-44892BC8CE53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0810",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427057",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://crates.io/crates/gix-date",
        "source" : "secalert@redhat.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/GitoxideLabs/gitoxide/issues/2305",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2025-0140.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GitoxideLabs/gitoxide/issues/2305",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1190",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-26T20:16:09.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language (SAML) setup, it fails to validate the `NotOnOrAfter` timestamp within the `SubjectConfirmationData`. This allows an attacker to delay the expiration of SAML responses, potentially extending the time a response is considered valid and leading to unexpected session durations or resource consumption."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la funcionalidad de intermediación SAML de Keycloak. Cuando Keycloak está configurado como un cliente en una configuración de Security Assertion Markup Language (SAML), falla al validar la marca de tiempo 'NotOnOrAfter' dentro de 'SubjectConfirmationData'. Esto permite a un atacante retrasar la expiración de las respuestas SAML, extendiendo potencialmente el tiempo que una respuesta se considera válida y llevando a duraciones de sesión inesperadas o consumo de recursos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-112"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1190",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2430835",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1443",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T20:16:09.973",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en code-projects Online Music Site 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /Administrator/PHP/AdminDeleteUser.php. Esta manipulación del argumento ID causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Volije/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736967",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23864",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2026-01-26T20:16:16.773",
      "lastModified" : "2026-02-13T15:23:05.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack.\n\nThe vulnerabilities are triggered by sending specially crafted HTTP requests to Server Function endpoints, and could lead to server crashes, out-of-memory exceptions or excessive CPU usage; depending on the vulnerable code path being exercised, the application configuration and application code.\n\nStrongly consider upgrading to the latest package versions to reduce risk and prevent availability issues in applications using React Server Components."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de denegación de servicio existen en los Componentes de Servidor de React, afectando los siguientes paquetes: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack.\n\nLas vulnerabilidades se activan al enviar solicitudes HTTP especialmente diseñadas a los puntos finales de las Funciones de Servidor, y podrían provocar caídas del servidor, excepciones por falta de memoria o uso excesivo de CPU; dependiendo de la ruta de código vulnerable que se esté ejecutando, la configuración de la aplicación y el código de la aplicación.\n\nConsidere encarecidamente actualizar a las últimas versiones de los paquetes para reducir el riesgo y prevenir problemas de disponibilidad en aplicaciones que utilizan Componentes de Servidor de React."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.0.4",
            "matchCriteriaId" : "0F93D6DB-994E-428D-970C-D50737B628CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.1.0",
            "versionEndExcluding" : "19.1.5",
            "matchCriteriaId" : "2151CF1A-4E87-421E-9714-3AA87639FD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.2.0",
            "versionEndExcluding" : "19.2.4",
            "matchCriteriaId" : "9FC73AD9-7EA4-4789-B75B-DC1FFF6F66AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.facebook.com/security/advisories/cve-2026-23864",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1444",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T22:15:54.377",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects an unknown part of the file controllers/books_center/add_book_check.php. Such manipulation of the argument mark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en iJason-Liu Books_Manager hasta 298ba736387ca37810466349af13a0fdf828e99c. Esto afecta una parte desconocida del archivo controllers/books_center/add_book_check.PHP. Tal manipulación del argumento mark lleva a cross site scripting. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado. Este producto no usa versionado. Esta es la razón por la que la información sobre las versiones afectadas y no afectadas no está disponible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.y1fan.work/2026/01/13/%E5%AD%98%E5%82%A8%E5%9E%8Bxss/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.342873",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.342873",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.736968",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1445",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-26T22:15:54.607",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This vulnerability affects unknown code of the file controllers/books_center/upload_bookCover.php. Performing a manipulation of the argument book_cover results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en iJason-Liu Books_Manager hasta 298ba736387ca37810466349af13a0fdf828e99c. Esta vulnerabilidad afecta código desconocido del archivo controllers/books_center/upload_bookCover.php. Realizar una manipulación del argumento book_cover resulta en una carga sin restricciones. El ataque puede ser iniciado de forma remota. El exploit ha sido hecho público y podría ser utilizado. Este producto utiliza un modelo de lanzamiento continuo para entregar actualizaciones continuas. Como resultado, la información de versión específica para las versiones afectadas o actualizadas no está disponible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.y1fan.work/2026/01/13/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0getshell/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.342874",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.342874",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.736971",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22696",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:55.733",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dcap-qvl implements the quote verification logic for DCAP (Data Center Attestation Primitives). A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral (including qe_identity, qe_identity_signature, and qe_identity_issuer_chain) from the PCCS. However, it skips to verify the QE Identity signature against its certificate chain and does not enforce policy constraints on the QE Report. An attacker can forge the QE Identity data to whitelist a malicious or non-Intel Quoting Enclave. This allows the attacker to forge the QE and sign untrusted quotes that the verifier will accept as valid. Effectively, this bypasses the entire remote attestation security model, as the verifier can no longer trust the entity responsible for signing the quotes. All deployments utilizing the dcap-qvl library for SGX or TDX quote verification are affected. The vulnerability has been patched in dcap-qvl version 0.3.9. The fix implements the missing cryptographic verification for the QE Identity signature and enforces the required checks for MRSIGNER, ISVPRODID, and ISVSVN against the QE Report. Users of the `@phala/dcap-qvl-node` and `@phala/dcap-qvl-web` packages should switch to the pure JavaScript implementation, `@phala/dcap-qvl`. There are no known workarounds for this vulnerability. Users must upgrade to the patched version to ensure that QE Identity collateral is properly verified."
      }, {
        "lang" : "es",
        "value" : "dcap-qvl implementa la lógica de verificación de citas para DCAP (Data Center Attestation Primitives). Una vulnerabilidad presente en versiones anteriores a la 0.3.9 implica una brecha crítica en el proceso de verificación criptográfica dentro de dcap-qvl. La librería obtiene el colateral de Identidad QE (incluyendo qe_identity, qe_identity_signature y qe_identity_issuer_chain) del PCCS. Sin embargo, omite verificar la firma de Identidad QE contra su cadena de certificados y no aplica restricciones de política en el Informe QE. Un atacante puede falsificar los datos de Identidad QE para incluir en la lista blanca un Enclave de Citas malicioso o no Intel. Esto permite al atacante falsificar el QE y firmar citas no confiables que el verificador aceptará como válidas. Efectivamente, esto elude todo el modelo de seguridad de atestación remota, ya que el verificador ya no puede confiar en la entidad responsable de firmar las citas. Todas las implementaciones que utilizan la librería dcap-qvl para la verificación de citas SGX o TDX están afectadas. La vulnerabilidad ha sido parcheada en la versión 0.3.9 de dcap-qvl. La solución implementa la verificación criptográfica faltante para la firma de Identidad QE y aplica las comprobaciones requeridas para MRSIGNER, ISVPRODID e ISVSVN contra el Informe QE. Los usuarios de los paquetes '@phala/dcap-qvl-node' y '@phala/dcap-qvl-web' deberían cambiar a la implementación pura de JavaScript, '@phala/dcap-qvl'. No existen soluciones alternativas conocidas para esta vulnerabilidad. Los usuarios deben actualizar a la versión parcheada para asegurar que el colateral de Identidad QE sea verificado correctamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Phala-Network/dcap-qvl/security/advisories/GHSA-796p-j2gh-9m2q",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22709",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:55.890",
      "lastModified" : "2026-02-17T20:59:29.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, `Promise.prototype.then` `Promise.prototype.catch` callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. In lib/setup-sandbox.js, the callback function of `localPromise.prototype.then` is sanitized, but `globalPromise.prototype.then` is not sanitized. The return value of async functions is `globalPromise` object. Version 3.10.2 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "vm2 es una vm/sandbox de código abierto para Node.js. En vm2, en versiones anteriores a la 3.10.2, la sanitización de las devoluciones de llamada de `Promise.prototype.then` `Promise.prototype.catch` puede ser eludida. Esto permite a los atacantes escapar de la sandbox y ejecutar código arbitrario. En lib/setup-sandbox.js, la función de devolución de llamada de `localPromise.prototype.then` es sanitizada, pero `globalPromise.prototype.then` no es sanitizada. El valor de retorno de las funciones asíncronas es un objeto `globalPromise`. La versión 3.10.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        }, {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "CD4F9978-8CFB-4C45-8C2A-469413D81852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/patriksimek/vm2/commit/4b009c2d4b1131c01810c1205e641d614c322a29",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/releases/tag/v3.10.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-99p7-6v5w-7xg8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23888",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:56.047",
      "lastModified" : "2026-01-28T17:47:32.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's binary fetcher allows malicious packages to write files outside the intended extraction directory. The vulnerability has two attack vectors: (1) Malicious ZIP entries containing `../` or absolute paths that escape the extraction root via AdmZip's `extractAllTo`, and (2) The `BinaryResolution.prefix` field is concatenated into the extraction path without validation, allowing a crafted prefix like `../../evil` to redirect extracted files outside `targetDir`. The issue impacts all pnpm users who install packages with binary assets, users who configure custom Node.js binary locations and CI/CD pipelines that auto-install binary dependencies. It can lead to overwriting config files, scripts, or other sensitive files leading to RCE. Version 10.28.1 contains a patch."
      }, {
        "lang" : "es",
        "value" : "pnpm es un gestor de paquetes. Antes de la versión 10.28.1, una vulnerabilidad de salto de ruta en el recuperador de binarios de pnpm permite a paquetes maliciosos escribir archivos fuera del directorio de extracción previsto. La vulnerabilidad tiene dos vectores de ataque: (1) Entradas ZIP maliciosas que contienen '../' o rutas absolutas que escapan de la raíz de extracción a través de 'extractAllTo' de AdmZip, y (2) El campo 'BinaryResolution.prefix' se concatena en la ruta de extracción sin validación, permitiendo que un prefijo manipulado como '../../evil' redirija los archivos extraídos fuera de 'targetDir'. El problema afecta a todos los usuarios de pnpm que instalan paquetes con activos binarios, a los usuarios que configuran ubicaciones de binarios de Node.js personalizadas y a las tuberías CI/CD que auto-instalan dependencias binarias. Puede llevar a la sobrescritura de archivos de configuración, scripts u otros archivos sensibles, lo que lleva a RCE. La versión 10.28.1 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-23"
        }, {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.28.1",
            "matchCriteriaId" : "5AFF60E6-D1CC-46A7-9122-988E9B68D1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnpm/pnpm/commit/5c382f0ca3b7cc49963b94677426e66539dcb3f5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/releases/tag/v10.28.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/security/advisories/GHSA-6pfh-p556-v868",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23889",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:56.213",
      "lastModified" : "2026-01-28T17:33:40.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's tarball extraction allows malicious packages to write files outside the package directory on Windows. The path normalization only checks for `./` but not `.\\`. On Windows, backslashes are directory separators, enabling path traversal. This vulnerability is Windows-only. This issue impacts Windows pnpm users and Windows CI/CD pipelines (GitHub Actions Windows runners, Azure DevOps). It can lead to overwriting `.npmrc`, build configs, or other files. Version 10.28.1 contains a patch."
      }, {
        "lang" : "es",
        "value" : "pnpm es un gestor de paquetes. Antes de la versión 10.28.1, una vulnerabilidad de salto de ruta en la extracción de tarball de pnpm permite a paquetes maliciosos escribir archivos fuera del directorio del paquete en Windows. La normalización de rutas solo verifica `./` pero no `.\\`. En Windows, las barras invertidas son separadores de directorio, lo que permite el salto de ruta. Esta vulnerabilidad es solo para Windows. Este problema afecta a usuarios de pnpm en Windows y a las pipelines de CI/CD en Windows (ejecutores de GitHub Actions en Windows, Azure DevOps). Puede llevar a la sobrescritura de .npmrc, configuraciones de compilación u otros archivos. La versión 10.28.1 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.28.1",
            "matchCriteriaId" : "5AFF60E6-D1CC-46A7-9122-988E9B68D1B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnpm/pnpm/commit/6ca07ffbe6fc0e8b8cdc968f228903ba0886f7c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/releases/tag/v10.28.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/security/advisories/GHSA-6x96-7vc8-cm3p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23890",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:56.363",
      "lastModified" : "2026-01-28T17:32:21.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's bin linking allows malicious npm packages to create executable shims or symlinks outside of `node_modules/.bin`. Bin names starting with `@` bypass validation, and after scope normalization, path traversal sequences like `../../` remain intact. This issue affects all pnpm users who install npm packages and CI/CD pipelines using pnpm. It can lead to overwriting config files, scripts, or other sensitive files. Version 10.28.1 contains a patch."
      }, {
        "lang" : "es",
        "value" : "pnpm es un gestor de paquetes. Antes de la versión 10.28.1, una vulnerabilidad de salto de ruta en el enlace de binarios de pnpm permite a paquetes npm maliciosos crear shims ejecutables o enlaces simbólicos fuera de 'node_modules/.bin'. Los nombres de binarios que comienzan con '@' eluden la validación, y después de la normalización del ámbito, secuencias de salto de ruta como '../../' permanecen intactas. Este problema afecta a todos los usuarios de pnpm que instalan paquetes npm y a los pipelines CI/CD que utilizan pnpm. Puede llevar a la sobrescritura de archivos de configuración, scripts u otros archivos sensibles. La versión 10.28.1 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.28.1",
            "matchCriteriaId" : "5AFF60E6-D1CC-46A7-9122-988E9B68D1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnpm/pnpm/commit/8afbb1598445d37985d91fda18abb4795ae5062d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/releases/tag/v10.28.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/security/advisories/GHSA-xpqm-wm3m-f34h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24003",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:56.513",
      "lastModified" : "2026-02-17T20:48:01.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EVerest is an EV charging software stack. In versions up to and including 2025.12.1, it is possible to bypass the sequence state verification including authentication, and send requests that transition to forbidden states relative to the current one, thereby updating the current context with illegitimate data.cThanks to the modular design of EVerest, authorization is handled in a separate module and EVSEManager Charger internal state machine cannot transition out of the `WaitingForAuthentication` state through ISO 15118-2 communication. From this state, it was however possible through ISO 15118-2 messages which are published to the MQTT server to trick it into preparing to charge, and even to prepare to send current. The final requirement to actually send current to the EV was the closure of the contactors, which does not appear to be possible without leaving the `WaitingForAuthentication` state and leveraging ISO 15118-2 messages. As of time of publication, no fixed versions are available."
      }, {
        "lang" : "es",
        "value" : "EVerest es una pila de software de carga de vehículos eléctricos. En versiones hasta la 2025.12.1 inclusive, es posible omitir la verificación del estado de la secuencia, incluyendo la autenticación, y enviar solicitudes que transicionan a estados prohibidos en relación con el actual, actualizando así el contexto actual con datos ilegítimos. Gracias al diseño modular de EVerest, la autorización se gestiona en un módulo separado y la máquina de estados interna del cargador EVSEManager no puede transicionar fuera del estado 'WaitingForAuthentication' a través de la comunicación ISO 15118-2. Desde este estado, sin embargo, fue posible a través de mensajes ISO 15118-2 que se publican en el servidor MQTT engañarlo para que se prepare para cargar, e incluso para que se prepare para enviar corriente. El requisito final para enviar corriente al vehículo eléctrico fue el cierre de los contactores, lo cual no parece ser posible sin salir del estado 'WaitingForAuthentication' y aprovechar los mensajes ISO 15118-2. A la fecha de publicación, no hay versiones corregidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linuxfoundation:everest:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025.12.1",
            "matchCriteriaId" : "C2054B5F-AED8-4768-8D31-2B05D3CF67EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/EVerest/everest-core/blob/main/modules/EVSE/EvseV2G/iso_server.cpp#L44",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/EVerest/everest-core/security/advisories/GHSA-9vv5-67cv-9crq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24056",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:56.667",
      "lastModified" : "2026-01-28T17:27:13.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pnpm is a package manager. Prior to version 10.28.2, when pnpm installs a `file:` (directory) or `git:` dependency, it follows symlinks and reads their target contents without constraining them to the package root. A malicious package containing a symlink to an absolute path (e.g., `/etc/passwd`, `~/.ssh/id_rsa`) causes pnpm to copy that file's contents into `node_modules`, leaking local data. The vulnerability only affects `file:` and `git:` dependencies. Registry packages (npm) have symlinks stripped during publish and are NOT affected. The issue impacts developers installing local/file dependencies andCI/CD pipelines installing git dependencies. It can lead to credential theft via symlinks to `~/.aws/credentials`, `~/.npmrc`, `~/.ssh/id_rsa`. Version 10.28.2 contains a patch."
      }, {
        "lang" : "es",
        "value" : "pnpm es un gestor de paquetes. Antes de la versión 10.28.2, cuando pnpm instala una dependencia 'file:' (directorio) o 'git:', sigue los enlaces simbólicos y lee el contenido de sus destinos sin restringirlos a la raíz del paquete. Un paquete malicioso que contiene un enlace simbólico a una ruta absoluta (por ejemplo, '/etc /passwd', '~/.ssh/id_rsa') hace que pnpm copie el contenido de ese archivo en 'node_modules', filtrando datos locales. La vulnerabilidad solo afecta a las dependencias 'file:' y 'git:'. Los paquetes de registro (npm) tienen los enlaces simbólicos eliminados durante la publicación y NO se ven afectados. El problema afecta a los desarrolladores que instalan dependencias locales/de archivo y a las tuberías de CI/CD que instalan dependencias de git. Puede conducir al robo de credenciales a través de enlaces simbólicos a '~/.aws/credentials', '~/.npmrc', '~/.ssh/id_rsa'. La versión 10.28.2 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.28.2",
            "matchCriteriaId" : "BA06266E-E70F-4B2B-AA69-7482EEE8A7A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnpm/pnpm/commit/b277b45bc35ae77ca72d7634d144bbd58a48b70f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/releases/tag/v10.28.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/security/advisories/GHSA-m733-5w8f-5ggw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24131",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T22:15:56.830",
      "lastModified" : "2026-01-28T17:05:46.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pnpm is a package manager. Prior to version 10.28.2, when pnpm processes a package's `directories.bin` field, it uses `path.join()` without validating the result stays within the package root. A malicious npm package can specify `\"directories\": {\"bin\": \"../../../../tmp\"}` to escape the package directory, causing pnpm to chmod 755 files at arbitrary locations. This issue only affects Unix/Linux/macOS. Windows is not affected (`fixBin` gated by `EXECUTABLE_SHEBANG_SUPPORTED`). Version 10.28.2 contains a patch."
      }, {
        "lang" : "es",
        "value" : "pnpm es un gestor de paquetes. Antes de la versión 10.28.2, cuando pnpm procesa el campo 'directories.bin' de un paquete, utiliza 'path.join()' sin validar que el resultado permanezca dentro de la raíz del paquete. Un paquete npm malicioso puede especificar \"directories\": {\"bin\": \"../../../../tmp\"} para escapar del directorio del paquete, haciendo que pnpm aplique chmod 755 a archivos en ubicaciones arbitrarias. Este problema solo afecta a Unix/Linux/macOS. Windows no se ve afectado ('fixBin' está restringido por 'EXECUTABLE_SHEBANG_SUPPORTED'). La versión 10.28.2 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.28.2",
            "matchCriteriaId" : "BA06266E-E70F-4B2B-AA69-7482EEE8A7A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnpm/pnpm/commit/17432ad5bbed5c2e77255ca6d56a1449bbcfd943",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/releases/tag/v10.28.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pnpm/pnpm/security/advisories/GHSA-v253-rj99-jwpq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24123",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T23:16:08.460",
      "lastModified" : "2026-02-03T15:07:55.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to version 1.4.34, BentoML's `bentofile.yaml` configuration allows path traversal attacks through multiple file path fields (`description`, `docker.setup_script`, `docker.dockerfile_template`, `conda.environment_yml`). An attacker can craft a malicious bentofile that, when built by a victim, exfiltrates arbitrary files from the filesystem into the bento archive. This enables supply chain attacks where sensitive files (SSH keys, credentials, environment variables) are silently embedded in bentos and exposed when pushed to registries or deployed. Version 1.4.34 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "BentoML es una librería de Python para construir sistemas de servicio en línea optimizados para aplicaciones de IA e inferencia de modelos. Antes de la versión 1.4.34, la configuración `bentofile.yaml` de BentoML permite ataques de salto de ruta a través de múltiples campos de ruta de archivo (`description`, `docker.setup_script`, `docker.dockerfile_template`, `conda.environment_yml`). Un atacante puede crear un bentofile malicioso que, cuando es construido por una víctima, exfiltra archivos arbitrarios del sistema de archivos al archivo bento. Esto permite ataques a la cadena de suministro donde archivos sensibles (claves SSH, credenciales, variables de entorno) son incrustados silenciosamente en los bentos y expuestos cuando se suben a registros o se despliegan. La versión 1.4.34 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bentoml:bentoml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.34",
            "matchCriteriaId" : "DE676E6B-09BB-4BB5-839C-CDA683332ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bentoml/BentoML/commit/84d08cfeb40c5f2ce71b3d3444bbaa0fb16b5ca4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bentoml/BentoML/releases/tag/v1.4.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24400",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T23:16:08.803",
      "lastModified" : "2026-03-09T14:15:14.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity (XXE) vulnerability exists in `org.assertj.core.util.xml.XmlStringPrettyFormatter`: the `toXmlDocument(String)` method initializes `DocumentBuilderFactory` with default settings, without disabling DTDs or external entities. This formatter is used by the `isXmlEqualTo(CharSequence)` assertion for `CharSequence` values. An application is vulnerable only when it uses untrusted XML input with either `isXmlEqualTo(CharSequence)` from `org.assertj.core.api.AbstractCharSequenceAssert` or `xmlPrettyFormat(String)` from `org.assertj.core.util.xml.XmlStringPrettyFormatter`. If untrusted XML input is processed by tone of these methods, an attacker couldnread arbitrary local files via `file://` URIs (e.g., `/etc/passwd`, application configuration files); perform Server-Side Request Forgery (SSRF) via HTTP/HTTPS URIs, and/or cause Denial of Service via \"Billion Laughs\" entity expansion attacks. `isXmlEqualTo(CharSequence)` has been deprecated in favor of XMLUnit in version 3.18.0 and will be removed in version 4.0. Users of affected versions should, in order of preference: replace `isXmlEqualTo(CharSequence)` with XMLUnit, upgrade to version 3.27.7, or avoid using `isXmlEqualTo(CharSequence)` or `XmlStringPrettyFormatter` with untrusted input. `XmlStringPrettyFormatter` has historically been considered a utility for `isXmlEqualTo(CharSequence)` rather than a feature for AssertJ users, so it is deprecated in version 3.27.7 and removed in version 4.0, with no replacement."
      }, {
        "lang" : "es",
        "value" : "AssertJ proporciona aserciones de prueba fluidas para Java y la Máquina Virtual de Java (JVM). A partir de la versión 1.4.0 y antes de la versión 3.27.7, existe una vulnerabilidad de Entidad Externa XML (XXE) en `org.assertj.core.util.xml.XmlStringPrettyFormatter`: el método `toXmlDocument(String)` inicializa `DocumentBuilderFactory` con configuraciones predeterminadas, sin deshabilitar DTDs o entidades externas. Este formateador es utilizado por la aserción `isXmlEqualTo(CharSequence)` para valores `CharSequence`. Una aplicación es vulnerable solo cuando utiliza entrada XML no confiable con `isXmlEqualTo(CharSequence)` de `org.assertj.core.api.AbstractCharSequenceAssert` o `xmlPrettyFormat(String)` de `org.assertj.core.util.xml.XmlStringPrettyFormatter`. Si la entrada XML no confiable es procesada por uno de estos métodos, un atacante podría leer archivos locales arbitrarios a través de URIs `file://` (por ejemplo, `/etc /passwd`, archivos de configuración de la aplicación); realizar Falsificación de Petición del Lado del Servidor (SSRF) a través de URIs HTTP/HTTPS, y/o causar Denegación de Servicio a través de ataques de expansión de entidad \"Billion Laughs\". `isXmlEqualTo(CharSequence)` ha sido desaprobado a favor de XMLUnit en la versión 3.18.0 y será eliminado en la versión 4.0. Los usuarios de las versiones afectadas deberían, en orden de preferencia: reemplazar `isXmlEqualTo(CharSequence)` con XMLUnit, actualizar a la versión 3.27.7, o evitar usar `isXmlEqualTo(CharSequence)` o `XmlStringPrettyFormatter` con entrada no confiable. `XmlStringPrettyFormatter` históricamente ha sido considerado una utilidad para `isXmlEqualTo(CharSequence)` en lugar de una característica para los usuarios de AssertJ, por lo que es desaprobado en la versión 3.27.7 y eliminado en la versión 4.0, sin reemplazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:assertj:assertj:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "3.27.7",
            "matchCriteriaId" : "BFAFB3AE-8EC2-4EB4-8F33-5FAC24932474"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24408",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T23:16:08.973",
      "lastModified" : "2026-03-02T21:19:25.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sigstore-python is a Python tool for generating and verifying Sigstore signatures. Prior to version 4.2.0, the sigstore-python OAuth authentication flow is susceptible to Cross-Site Request Forgery. `_OAuthSession` creates a unique \"state\" and sends it as a parameter in the authentication request but the \"state\" in the server response seems not not be cross-checked with this value. Version 4.2.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "sigstore-python es una herramienta de Python para generar y verificar firmas de Sigstore. Antes de la versión 4.2.0, el flujo de autenticación OAuth de sigstore-python es susceptible a la falsificación de petición en sitios cruzados. `_OAuthSession` crea un 'estado' único y lo envía como parámetro en la petición de autenticación, pero el 'estado' en la respuesta del servidor parece no ser verificado con este valor. La versión 4.2.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:sigstore-python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.0",
            "matchCriteriaId" : "7DA3586E-04FD-4D7E-85C8-BAE152F3C9D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/sigstore-python/commit/5e77497fe8f0b202bdd118949074ec2f20da69aa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sigstore/sigstore-python/releases/tag/v4.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/sigstore/sigstore-python/security/advisories/GHSA-hm8f-75xx-w2vr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24470",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T23:16:09.123",
      "lastModified" : "2026-02-18T17:39:44.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.24.0, when running Skipper as an Ingress controller, users with permissions to create an Ingress and a Service of type ExternalName can create routes that enable them to use Skipper's network access to reach internal services. Version 0.24.0 disables Kubernetes ExternalName by default. As a workaround, developers can allow list targets of an ExternalName and allow list via regular expressions."
      }, {
        "lang" : "es",
        "value" : "Skipper es un router HTTP y proxy inverso para la composición de servicios. Antes de la versión 0.24.0, al ejecutar Skipper como un controlador Ingress, los usuarios con permisos para crear un Ingress y un Servicio de tipo ExternalName pueden crear rutas que les permiten usar el acceso de red de Skipper para alcanzar servicios internos. La versión 0.24.0 deshabilita Kubernetes ExternalName por defecto. Como solución alternativa, los desarrolladores pueden incluir en la lista de permitidos los objetivos de un ExternalName e incluir en la lista de permitidos mediante expresiones regulares."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-441"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zalando:skipper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.24.0",
            "matchCriteriaId" : "DEBBEB5D-B41E-48C3-BF83-F5018AAA9D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zalando/skipper/commit/a4c87ce029a58eb8e1c2c1f93049194a39cf6219",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zalando/skipper/security/advisories/GHSA-mxxc-p822-2hx9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      }, {
        "url" : "https://kubernetes.io/docs/concepts/services-networking/service/#externalname",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-26T23:16:09.283",
      "lastModified" : "2026-02-17T20:45:33.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `\"` prematurely ends the `<input>` tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Shaarli es un servicio personal de marcadores. Antes de la versión 0.16.0, la creación de una etiqueta maliciosa, al comenzar con '\"', terminaba prematuramente la etiqueta `` en la página de inicio y permitía a un atacante añadir HTML arbitrario, lo que llevaba a un posible ataque XSS. La versión 0.16.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shaarli_project:shaarli:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.16.0",
            "matchCriteriaId" : "648ADAFF-B886-4426-BD9A-C67B4B839AA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shaarli/Shaarli/commit/b854c789289c4b0dfbb7c1e5793bae7d8f94e063",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/shaarli/Shaarli/security/advisories/GHSA-g3xq-mj52-f8pg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1448",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-27T00:15:50.573",
      "lastModified" : "2026-01-28T16:37:25.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wiz_policy_3_machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en D-Link DIR-615 hasta la versión 4.10. Esto afecta a una función desconocida del archivo /wiz_policy_3_machine.PHP del componente Interfaz de Gestión Web. Realizar una manipulación del argumento ipaddr resulta en inyección de comandos. Es posible iniciar el ataque de forma remota. El exploit ya es público y puede ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no cuentan con soporte por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "E28848DF-B57F-4335-941E-E6C50A9E74B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E92E959-C211-4979-A233-163BEFCF6F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pentagonal-time-3a7.notion.site/DIR-615-v4-10-2e7e5dd4c5a580a5aac5c8ce35933396?pvs=73",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.342880",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.342880",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.737006",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1449",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-27T00:15:50.790",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Hisense TransTech Smart Bus Management System up to 20260113. Affected is the function Page_Load of the file YZSoft/Forms/XForm/BM/BusComManagement/TireMng.aspx. Executing a manipulation of the argument key can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en el sistema de gestión de autobuses inteligentes Hisense TransTech hasta el 20260113. Afectada es la función Page_Load del archivo YZSoft/Forms/XForm/BM/BusComManagement/TireMng.aspx. La ejecución de una manipulación del argumento key puede llevar a inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/15",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.342881",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.342881",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.737032",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T00:15:51.150",
      "lastModified" : "2026-01-28T15:59:06.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticated users via the `/api/setup-complete` endpoint. Leakage of QdrantApiKey allows an unauthenticated attacker full read/write access to the Qdrant vector database instance used by AnythingLLM. Since Qdrant often stores the core knowledge base for RAG in AnythingLLM, this can lead to complete compromise of the semantic search / retrieval functionality and indirect leakage of confidential uploaded documents. Version 1.10.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "AnythingLLM es una aplicación que convierte fragmentos de contenido en contexto que cualquier LLM puede usar como referencias durante el chat. Si AnythingLLM anterior a la versión 1.10.0 está configurado para usar Qdrant como la base de datos vectorial con una clave API, esta QdrantApiKey podría quedar expuesta en texto plano a usuarios no autenticados a través del endpoint `/api/setup-complete`. La fuga de QdrantApiKey permite a un atacante no autenticado acceso completo de lectura/escritura a la instancia de la base de datos vectorial Qdrant utilizada por AnythingLLM. Dado que Qdrant a menudo almacena la base de conocimiento central para RAG en AnythingLLM, esto puede llevar a un compromiso completo de la funcionalidad de búsqueda semántica / recuperación y a la fuga indirecta de documentos confidenciales cargados. La versión 1.10.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.0",
            "matchCriteriaId" : "8DEA04F2-1EE6-4943-B989-76CB56A33BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-gm94-qc2p-xcwf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T00:15:51.297",
      "lastModified" : "2026-01-28T15:52:39.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.10.0, a critical Path Traversal vulnerability in the DrupalWiki integration allows a malicious admin (or an attacker who can convince an admin to configure a malicious DrupalWiki URL) to write arbitrary files to the server. This can lead to Remote Code Execution (RCE) by overwriting configuration files or writing executable scripts. Version 1.10.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "AnythingLLM es una aplicación que convierte piezas de contenido en contexto que cualquier LLM puede usar como referencias durante el chat. Antes de la versión 1.10.0, una vulnerabilidad crítica de salto de ruta en la integración de DrupalWiki permite a un administrador malicioso (o un atacante que pueda convencer a un administrador para que configure una URL maliciosa de DrupalWiki) escribir archivos arbitrarios en el servidor. Esto puede conducir a la ejecución remota de código (RCE) sobrescribiendo archivos de configuración o escribiendo scripts ejecutables. La versión 1.10.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.0",
            "matchCriteriaId" : "8DEA04F2-1EE6-4943-B989-76CB56A33BC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-jp2f-99h9-7vjv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23683",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-01-27T01:16:01.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "SAP Fiori App Intercompany Balance Reconciliation no realiza las comprobaciones de autorización necesarias para un usuario autenticado, lo que resulta en una escalada de privilegios. Esto tiene un bajo impacto en la confidencialidad, la integridad y la disponibilidad no se ven impactadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3122486",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24479",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T01:16:02.017",
      "lastModified" : "2026-03-02T21:32:57.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.01.24, the problem_import_qduoj.php and problem_import_hoj.php modules fail to properly sanitize filenames within uploaded ZIP archives. Attackers can craft a malicious ZIP file containing files with path traversal sequences (e.g., ../../shell.php). When extracted by the server, this allows writing files to arbitrary locations in the web root, leading to Remote Code Execution (RCE). Version 26.01.24 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "HUSTOF es un juez en línea de código abierto basado en PHP/C++/MySQL/Linux para entrenamiento de ACM/ICPC y NOIP. Antes de la versión 26.01.24, los módulos problem_import_qduoj.php y problem_import_hoj.php no logran sanear correctamente los nombres de archivo dentro de los archivos ZIP subidos. Los atacantes pueden crear un archivo ZIP malicioso que contenga archivos con secuencias de salto de ruta (p. ej., ../../shell.php). Cuando es extraído por el servidor, esto permite escribir archivos en ubicaciones arbitrarias en la raíz web, lo que lleva a la Ejecución Remota de Código (RCE). La versión 26.01.24 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hustoj:hustoj:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.01.24",
            "matchCriteriaId" : "3C2DFB45-A477-4B77-A437-C7F3C810B8B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhblue/hustoj/commit/902bd09e6d0011fe89cd84d4236899314b33101f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zhblue/hustoj/security/advisories/GHSA-xmgg-2rw4-7fxj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24480",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T01:16:02.160",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QGIS is a free, open source, cross platform geographical information system (GIS) The repository contains a GitHub Actions workflow called \"pre-commit checks\" that, before commit 76a693cd91650f9b4e83edac525e5e4f90d954e9, was vulnerable to remote code execution and repository compromise because it used the `pull_request_target` trigger and then checked out and executed untrusted pull request code in a privileged context. Workflows triggered by `pull_request_target` ran with the base repository's credentials and access to secrets. If these workflows then checked out and executed code from the head of an external pull request (which could have been attacker controlled), the attacker could have executed arbitrary commands with elevated privileges. This insecure pattern has been documented as a security risk by GitHub and security researchers. Commit 76a693cd91650f9b4e83edac525e5e4f90d954e9 removed the vulnerable code."
      }, {
        "lang" : "es",
        "value" : "QGIS es un sistema de información geográfica (SIG) gratuito, de código abierto y multiplataforma. El repositorio contiene un flujo de trabajo de GitHub Actions llamado 'pre-commit checks' que, antes del commit 76a693cd91650f9b4e83edac525e5e4f90d954e9, era vulnerable a la ejecución remota de código y al compromiso del repositorio porque utilizaba el disparador 'pull_request_target' y luego extraía y ejecutaba código de solicitud de extracción no confiable en un contexto privilegiado. Los flujos de trabajo disparados por 'pull_request_target' se ejecutaban con las credenciales del repositorio base y acceso a los secretos. Si estos flujos de trabajo luego extraían y ejecutaban código de la cabecera de una solicitud de extracción externa (que podría haber sido controlado por el atacante), el atacante podría haber ejecutado comandos arbitrarios con privilegios elevados. Este patrón inseguro ha sido documentado como un riesgo de seguridad por GitHub y los investigadores de seguridad. El commit 76a693cd91650f9b4e83edac525e5e4f90d954e9 eliminó el código vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qgis/QGIS/commit/76a693cd91650f9b4e83edac525e5e4f90d954e9",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/qgis/QGIS/security/advisories/GHSA-7h99-4f97-h6rw",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T01:16:02.303",
      "lastModified" : "2026-02-17T20:44:50.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations."
      }, {
        "lang" : "es",
        "value" : "Python-Multipart es un analizador multipart en streaming para Python. Antes de la versión 0.0.22, existe una vulnerabilidad de salto de ruta al usar opciones de configuración no predeterminadas 'UPLOAD_DIR' y 'UPLOAD_KEEP_FILENAME=True'. Un atacante puede escribir archivos subidos en ubicaciones arbitrarias del sistema de archivos al crear un nombre de archivo malicioso. Los usuarios deben actualizar a la versión 0.0.22 para recibir un parche o, como solución alternativa, evitar usar 'UPLOAD_KEEP_FILENAME=True' en las configuraciones del proyecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastapiexpert:python-multipart:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.0.22",
            "matchCriteriaId" : "858D1FA3-E02B-4DED-8E4F-C4553224CB80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kludex/python-multipart/commit/9433f4bbc9652bdde82bbe380984e32f8cfc89c4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Kludex/python-multipart/releases/tag/0.0.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Kludex/python-multipart/security/advisories/GHSA-wp53-j4wj-2cfg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T01:16:02.453",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gakido is a Python HTTP client focused on browser impersonation and anti-bot evasion. A vulnerability was discovered in Gakido prior to version 0.1.1 that allowed HTTP header injection through CRLF (Carriage Return Line Feed) sequences in user-supplied header values and names. When making HTTP requests with user-controlled header values containing `\\r\\n` (CRLF), `\\n` (LF), or `\\x00` (null byte) characters, an attacker could inject arbitrary HTTP headers into the request. The fix in version 0.1.1 adds a `_sanitize_header()` function that strips `\\r`, `\\n`, and `\\x00` characters from both header names and values before they are included in HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Gakido es un cliente HTTP de Python centrado en la suplantación de navegadores y la evasión de bots. Se descubrió una vulnerabilidad en Gakido anterior a la versión 0.1.1 que permitía la inyección de encabezados HTTP a través de secuencias CRLF (retorno de carro y salto de línea) en los valores y nombres de los encabezados proporcionados por el usuario. Al realizar solicitudes HTTP con valores de encabezado controlados por el usuario que contienen caracteres `\\r\\n` (CRLF), `\\n` (LF) o `\\x00` (byte nulo), un atacante podía inyectar encabezados HTTP arbitrarios en la solicitud. La corrección en la versión 0.1.1 añade una función `_sanitize_header()` que elimina los caracteres `\\r`, `\\n` y `\\x00` tanto de los nombres como de los valores de los encabezados antes de que se incluyan en las solicitudes HTTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        }, {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HappyHackingSpace/gakido/commit/369c67e67c63da510c8a9ab021e54a92ccf1f788",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/HappyHackingSpace/gakido/releases/tag/v0.1.1-1bc6019",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/HappyHackingSpace/gakido/security/advisories/GHSA-gcgx-chcp-hxp9",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T01:16:02.610",
      "lastModified" : "2026-02-17T20:36:16.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting (XSS) vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The `android:host` attribute from `<data android:scheme=\"android_secret_code\">` elements is rendered in HTML reports without sanitization, enabling session hijacking and account takeover. Version 4.4.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "MobSF es una herramienta de prueba de seguridad de aplicaciones móviles. Antes de la versión 4.4.5, una vulnerabilidad de Cross-site Scripting (XSS) Almacenado en el análisis del manifiesto de Android de MobSF permite a un atacante ejecutar JavaScript arbitrario en el contexto de la sesión del navegador de una víctima al subir un APK malicioso. El atributo `android:host` de los elementos `` se renderiza en informes HTML sin sanitización, permitiendo el secuestro de sesión y la toma de control de cuentas. La versión 4.4.5 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensecurity:mobile_security_framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "04FAB846-35D5-4AFD-9F72-AF1DFC072EA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/2b08dd050e7685ee2a14fdbb454affab94129eae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MobSF/Mobile-Security-Framework-MobSF/releases/tag/v4.4.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8hf7-h89p-3pqj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24686",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T01:16:02.790",
      "lastModified" : "2026-02-24T19:08:46.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-tuf is a Go implementation of The Update Framework (TUF). go-tuf's TAP 4 Multirepo Client uses the map file repository name string (`repoName`) as a filesystem path component when selecting the local metadata cache directory. Starting in version 2.0.0 and prior to version 2.4.1, if an application accepts a map file from an untrusted source, an attacker can supply a `repoName` containing traversal (e.g., `../escaped-repo`) and cause go-tuf to create directories and write the root metadata file outside the intended `LocalMetadataDir` cache base, within the running process's filesystem permissions. Version 2.4.1 contains a patch."
      }, {
        "lang" : "es",
        "value" : "go-tuf es una implementación en Go de The Update Framework (TUF). El cliente Multirepo TAP 4 de go-tuf utiliza la cadena del nombre del repositorio del archivo de mapa ('repoName') como un componente de ruta del sistema de archivos al seleccionar el directorio de caché de metadatos local. A partir de la versión 2.0.0 y antes de la versión 2.4.1, si una aplicación acepta un archivo de mapa de una fuente no confiable, un atacante puede proporcionar un 'repoName' que contenga recorrido (p. ej., '../escaped-repo') y hacer que go-tuf cree directorios y escriba el archivo de metadatos raíz fuera de la base de caché 'LocalMetadataDir' prevista, dentro de los permisos del sistema de archivos del proceso en ejecución. La versión 2.4.1 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theupdateframework:go-tuf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "18AEE62D-019F-48BA-ADF7-C7F5C1C72E9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theupdateframework/go-tuf/commit/d361e2ea24e427581343dee5c7a32b485d79fcc0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-jqc5-w2xx-5vq4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1361",
      "sourceIdentifier" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
      "published" : "2026-01-27T04:16:03.580",
      "lastModified" : "2026-02-17T20:12:13.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASDA-Soft Stack-based Buffer Overflow Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basado en pila de ASDA-Soft."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:asda_soft:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.2.0",
            "matchCriteriaId" : "483DA02E-356F-4801-9394-4B7617CDAA69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00003_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-1361).pdf",
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21408",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-27T06:15:59.583",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "beat-access para Windows versión 3.0.3 y anteriores contiene un problema con la ruta de búsqueda de DLL, lo que puede llevar a la carga insegura de librerías de Enlace Dinámico. Como resultado, se puede ejecutar código arbitrario con privilegios de SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN03776126/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2026/0127_announce.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1464",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:48.080",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager (app/src/main/java/org/apache/commons/compress/archivers/tar modules). This vulnerability is associated with program files TarUtils.Java.\n\nThis issue affects AppManager: before 4.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de entero o ajuste circular en MuntashirAkon AppManager (módulos app/src/main/java/org/apache/commons/compress/archivers/tar). Esta vulnerabilidad está asociada con los archivos de programa TarUtils.Java. Este problema afecta a AppManager: antes de la 4.0.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuntashirAkon/AppManager/pull/1598",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1465",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:48.330",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in anyrtcIO-Community anyRTC-RTMP-OpenSource (third_party/faad2-2.7/libfaad modules). This vulnerability is associated with program files bits.C, syntax.C.\n\nThis issue affects anyRTC-RTMP-OpenSource: before 1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Restricción Inadecuada de Operaciones dentro de los Límites de un Búfer de Memoria en anyrtcIO-Community anyRTC-RTMP-OpenSource (módulos third_party/faad2-2.7/libfaad). Esta vulnerabilidad está asociada con los archivos de programa bits.C, syntax.C.\n\nEste problema afecta a anyRTC-RTMP-OpenSource: antes de 1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Amber",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anyrtcIO-Community/anyRTC-RTMP-OpenSource/pull/166",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21720",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2026-01-27T09:15:48.490",
      "lastModified" : "2026-02-17T20:06:27.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems."
      }, {
        "lang" : "es",
        "value" : "Cada solicitud sin caché a /avatar/:hash lanza una goroutine que actualiza la imagen de Gravatar. Si la actualización permanece en la cola de trabajadores de 10 ranuras por más de tres segundos, el manejador agota el tiempo de espera y deja de escuchar el resultado, de modo que esa goroutine se bloquea para siempre intentando enviar en un canal sin búfer. El tráfico sostenido con hashes aleatorios sigue activando este tiempo de espera, por lo que el recuento de goroutines crece linealmente, agotando la memoria con el tiempo y provocando que Grafana falle en algunos sistemas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "11.6.9",
            "matchCriteriaId" : "215EC0E7-BF4E-460F-893F-3D5E56692D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "11.6.9",
            "matchCriteriaId" : "4D528EF4-2414-4A32-BA0E-16FA15EE1D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.8",
            "matchCriteriaId" : "C3E78D4A-A206-4BD4-BBE5-F8BE832B4A07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.8",
            "matchCriteriaId" : "C0821B6B-AC98-4A9D-973D-12E2063DF866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "993757EB-FCCD-4B3B-B23A-00EA8B1AFF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "FB947690-25AC-4597-80B3-9034CE94B8C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndExcluding" : "12.2.3",
            "matchCriteriaId" : "A87029A0-871D-4130-A240-7A64990573F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndExcluding" : "12.2.3",
            "matchCriteriaId" : "B3E99C8B-08A8-4672-8ED2-E8CE2F3DCD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.3.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "9BE4EE19-92B3-4B1D-97BE-76194B38DA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EB9EC106-6F33-4834-B59D-6633BB83B6A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://grafana.com/security/security-advisories/CVE-2026-21720",
        "source" : "security@grafana.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21721",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2026-01-27T09:15:48.640",
      "lastModified" : "2026-04-20T17:28:19.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation."
      }, {
        "lang" : "es",
        "value" : "La API de permisos del panel no verifica el alcance del panel de destino y solo comprueba la acción dashboards.permissions:*. Como resultado, un usuario que tiene derechos de gestión de permisos en un panel puede leer y modificar permisos en otros paneles. Esto es una escalada de privilegios interna de la organización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "11.6.9",
            "matchCriteriaId" : "6F6E2185-5D9B-4519-BFE1-363489FDE5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.8",
            "matchCriteriaId" : "0800CF3F-6B22-4AC9-B7A5-88F00162D7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "B74E6E97-D985-4F8E-BFE9-DD40D99995D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndExcluding" : "12.2.3",
            "matchCriteriaId" : "FCC333B0-9BDE-4A2D-9648-C8017242DDC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:11.6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "75C49C18-902A-447E-97F3-2679BD19B517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.0.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "63A1D7CB-4839-4706-AB16-0D1609B62C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.1.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEFE43C-35EA-4163-A184-6FE2FF14B2BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.2.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D5613D06-3180-477D-9272-CAF86A6D764D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0226F9E-7B57-4F41-BC7D-234F17628970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B29640-D0AE-4B99-95F8-B1D84E3A17AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://grafana.com/security/security-advisories/cve-2026-21721",
        "source" : "security@grafana.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24344",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-01-27T09:15:48.767",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution"
      }, {
        "lang" : "es",
        "value" : "Múltiples desbordamientos de búfer en la UI de administración de EZCast Pro II versión 1.17478.146 permiten a los atacantes causar un fallo del programa y potencial ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ntc.swiss/ntcf-2025-68873",
        "source" : "vulnerability@ncsc.ch"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24793",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:48.940",
      "lastModified" : "2026-02-17T20:01:06.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in azerothcore azerothcore-wotlk (deps/zlib modules). This vulnerability is associated with program files inflate.C.\n\nThis issue affects azerothcore-wotlk: through v4.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites, copia del búfer sin verificar el tamaño de la entrada ('Desbordamiento de búfer clásico') en azerothcore azerothcore-wotlk (módulos deps/zlib). Esta vulnerabilidad está asociada con los archivos de programa inflate.C.\n\nEste problema afecta a azerothcore-wotlk: hasta la v4.0.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azerothcore:azerothcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "AE036358-4563-4293-A68F-F65968D7E29B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/azerothcore/azerothcore-wotlk/pull/21599",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/azerothcore/azerothcore-wotlk/pull/21599",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24794",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.090",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src/main/java/org/cardboardpowered/impl/world modules). This vulnerability is associated with program files WorldImpl.Java.\n\nThis issue affects cardboard: before 1.21.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Restricción Inadecuada de Operaciones dentro de los Límites de un Búfer de Memoria en CardboardPowered cardboard (módulos src/main/java/org/cardboardpowered/impl/world). Esta vulnerabilidad está asociada con los archivos de programa WorldImpl.Java.\n\nEste problema afecta a cardboard: antes de 1.21.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Red",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CardboardPowered/cardboard/pull/506",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24795",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.233",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regcomp.C.\n\nThis issue affects CloverBootloader: before 5162."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en CloverHackyColor CloverBootloader (módulos MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma). Esta vulnerabilidad está asociada con los archivos de programa regcomp.C.\n\nEste problema afecta a CloverBootloader: anterior a 5162."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CloverHackyColor/CloverBootloader/pull/733",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24796",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.370",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules). This vulnerability is associated with program files regparse.C.\n\nThis issue affects CloverBootloader: before 5162."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en CloverHackyColor CloverBootloader (módulos MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma). Esta vulnerabilidad está asociada con los archivos de programa regparse.C.\n\nEste problema afecta a CloverBootloader: anterior a 5162."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CloverHackyColor/CloverBootloader/pull/732",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24797",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.510",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write vulnerability in neka-nat cupoch (third_party/libjpeg-turbo/libjpeg-turbo modules). This vulnerability is associated with program files tjbench.C.\n\nThis issue affects cupoch."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en neka-nat cupoch (módulos de terceros/libjpeg-turbo/libjpeg-turbo). Esta vulnerabilidad está asociada con los archivos de programa tjbench.C.\n\nEste problema afecta a cupoch."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:Amber",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/neka-nat/cupoch/pull/138",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24798",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.643",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules). This vulnerability is associated with program files upnpreplyparse.C.\n\nThis issue affects DagorEngine: through dagor_2025_01_15."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Restricción Inadecuada de Operaciones dentro de los Límites de un Búfer de Memoria en GaijinEntertainment DagorEngine (módulos prog/3rdPartyLibs/miniupnpc). Esta vulnerabilidad está asociada con los archivos de programa upnpreplyparse.C.\n\nEste problema afecta a DagorEngine: hasta dagor_2025_01_15."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Amber",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GaijinEntertainment/DagorEngine/pull/136",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24799",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.787",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking dlib (dlib/external/zlib modules). This vulnerability is associated with program files inflate.C.\n\nThis issue affects dlib: before v19.24.9."
      }, {
        "lang" : "es",
        "value" : "Escritura fuera de límites, Copia de búfer sin verificar el tamaño de la entrada ('Desbordamiento de búfer clásico') vulnerabilidad en davisking dlib (módulos dlib/external/zlib). Esta vulnerabilidad está asociada con los archivos de programa inflate.C.\n\nEste problema afecta a dlib: antes de la v19.24.9."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/davisking/dlib/pull/3063",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24800",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:49.920",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C."
      }, {
        "lang" : "es",
        "value" : "Escritura fuera de límites, Copia de búfer sin verificar el tamaño de la entrada ('Desbordamiento de búfer clásico') vulnerabilidad en tildearrow furnace (módulos extern/zlib). Esta vulnerabilidad está asociada con los archivos de programa inflate.C."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tildearrow/furnace/pull/2471",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24801",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.057",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source modules). This vulnerability is associated with program files ecc_dsa.C.\n\nThis issue affects IronOS: before v2.23-rc3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Ralim IronOS (módulos source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source). Esta vulnerabilidad está asociada con los archivos de programa ecc_dsa.C.\n\nEste problema afecta a IronOS: antes de la v2.23-rc3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:M/U:Red",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ralim/IronOS/pull/2087",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24802",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.187",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). This vulnerability is associated with program files NoCloseOutputStream.Java.\n\nThis issue affects jsonrpc4j: through 1.6.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de bucle con condición de salida inalcanzable ('Bucle infinito') en briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). Esta vulnerabilidad está asociada con los archivos de programa NoCloseOutputStream.Java.\n\nEste problema afecta a jsonrpc4j: hasta la versión 1.6.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:M/U:Amber",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/briandilley/jsonrpc4j/pull/333",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24803",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.337",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt7615d/src/mt_wifi/embedded/security modules). This vulnerability is associated with program files bn_lib.C.\n\nThis issue affects lede: through r25.10.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de 'Bucle con condición de salida inalcanzable' ('Bucle Infinito') en coolsnowwolf lede (módulos de seguridad incrustados en package/lean/mt/drivers/mt7615d/src/mt_wifi). Esta vulnerabilidad está asociada con los archivos de programa bn_lib.C.\n\nEste problema afecta a lede: hasta r25.10.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coolsnowwolf/lede/pull/13346",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24804",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.470",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt7603e/src/mt7603_wifi/common modules). This vulnerability is associated with program files bn_lib.C.\n\nThis issue affects lede: through r25.10.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de bucle con condición de salida inalcanzable ('bucle infinito') en coolsnowwolf lede (módulos comunes de package/lean/mt/drivers/mt7603e/src/mt7603_wifi). Esta vulnerabilidad está asociada con los archivos de programa bn_lib.C.\n\nEste problema afecta a lede: hasta r25.10.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coolsnowwolf/lede/pull/13368",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24805",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.607",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Dereference vulnerability in visualfc liteide (liteidex/src/3rdparty/libvterm/src modules). This vulnerability is associated with program files screen.C, state.C, vterm.C.\n\nThis issue affects liteide: before x38.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desreferencia de puntero NULL en visualfc liteide (módulos liteidex/src/3rdparty/libvterm/src). Esta vulnerabilidad está asociada con los archivos de programa screen.C, state.C, vterm.C.\n\nEste problema afecta a liteide: antes de x38.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Amber",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/visualfc/liteide/pull/1326",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24806",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.743",
      "lastModified" : "2026-05-06T17:16:22.180",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules). This vulnerability is associated with program files PNGImageEncoder.Java.\n\nThis issue affects quick-media: before v1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control Inadecuado de Generación de Código ('Inyección de Código') en liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png módulos). Esta vulnerabilidad está asociada con los archivos de programa PNGImageEncoder.Java.\n\nEste problema afecta a quick-media: antes de la v1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liuyueyi/quick-media/pull/122",
        "source" : "cve_disclosure@tech.gov.sg"
      }, {
        "url" : "https://github.com/css4j/echosvg/discussions/137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/github/advisory-database/pull/7437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/liuyueyi/quick-media/pull/122#issuecomment-4305453193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24807",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:50.890",
      "lastModified" : "2026-05-06T17:16:22.340",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules). This vulnerability is associated with program files SeekableOutputStream.Java.\n\nThis issue affects quick-media: before v1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Verificación Incorrecta de Firma Criptográfica en liuyueyi quick-media (módulos plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util). Esta vulnerabilidad está asociada con los archivos de programa SeekableOutputStream.Java.\n\nEste problema afecta a quick-media: antes de la v1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liuyueyi/quick-media/pull/123",
        "source" : "cve_disclosure@tech.gov.sg"
      }, {
        "url" : "https://github.com/css4j/echosvg/discussions/137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/github/advisory-database/pull/7438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/liuyueyi/quick-media/pull/123#issuecomment-4305589308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24808",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.023",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc.\n\nThis issue affects RawTherapee: through 5.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de entero o ajuste en RawTherapee (módulos rtengine). Esta vulnerabilidad está asociada con los archivos de programa dcraw.Cc.\n\nEste problema afecta a RawTherapee: hasta la versión 5.11."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Amber",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RawTherapee/RawTherapee/pull/7359",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24809",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.160",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue from the component luaG_runerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs."
      }, {
        "lang" : "es",
        "value" : "Un problema en el componente luaG_runerror en dependencies/lua/src/ldebug.c en praydog/REFramework versión anterior a la 1.5.5 provoca un desbordamiento de búfer en el heap cuando ocurre un error recursivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:D/RE:M/U:Amber",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/praydog/REFramework/pull/1320",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24810",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb (src/cjson modules). This vulnerability is associated with program files cJSON.Cc.\n\nThis issue affects rethinkdb: through v2.4.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de copia de búfer sin verificar el tamaño de la entrada ('Desbordamiento de búfer clásico') en rethinkdb (módulos src/cjson). Esta vulnerabilidad está asociada con los archivos de programa cJSON.Cc.\n\nEste problema afecta a rethinkdb: hasta la v2.4.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rethinkdb/rethinkdb/pull/7163",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24811",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.440",
      "lastModified" : "2026-02-19T17:24:49.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C.\n\nThis issue affects root."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en root-project root (módulos builtins/zlib). Esta vulnerabilidad está asociada con los archivos de programa inffast.C.\n\nEste problema afecta a root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:root:root:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.34.08",
            "matchCriteriaId" : "52EE8BDB-DA0A-4337-B6D9-D997B89D998E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/root-project/root/pull/18526",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://root.cern/blog/recent-common-vulnerabilities-when-does-ROOT-need-to-be-updated/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24812",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.567",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inftrees.C.\n\nThis issue affects root: through 6.36.00-rc1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en proyecto raíz root (módulos builtins/zlib). Esta vulnerabilidad está asociada con los archivos de programa inftrees.C.\n\nEste problema afecta a root: hasta 6.36.00-rc1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/root-project/root/pull/18527",
        "source" : "cve_disclosure@tech.gov.sg"
      }, {
        "url" : "https://root.cern/blog/recent-common-vulnerabilities-when-does-ROOT-need-to-be-updated/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24813",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.680",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Dereference vulnerability in abcz316 SKRoot-linuxKernelRoot (testRoot/jni/utils modules). This vulnerability is associated with program files cJSON.Cpp.\n\nThis issue affects SKRoot-linuxKernelRoot."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desreferencia de puntero NULL en abcz316 SKRoot-linuxKernelRoot (módulos testRoot/jni/utils). Esta vulnerabilidad está asociada con los archivos de programa cJSON.Cpp.\n\nEste problema afecta a SKRoot-linuxKernelRoot."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Amber",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/abcz316/SKRoot-linuxKernelRoot/pull/116",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24814",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.830",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer Overflow or Wraparound vulnerability in swoole swoole-src (thirdparty/hiredis modules). This vulnerability is associated with program files sds.C.\n\nThis issue affects swoole-src: before 6.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de entero o ajuste en swoole swoole-src (módulos thirdparty/hiredis). Esta vulnerabilidad está asociada con los archivos de programa sds.C.\n\nEste problema afecta a swoole-src: anterior a la 6.0.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swoole/swoole-src/pull/5698",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24815",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:51.967",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules). This vulnerability is associated with program files XmlFile.Java.\n\nThis issue affects tis: before v4.3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga sin restricciones de archivo con tipo peligroso, deserialización de datos no confiables en datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl módulos). Esta vulnerabilidad está asociada con los archivos de programa XmlFile.Java.\n\nEste problema afecta a tis: antes de la v4.3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datavane/tis/pull/443",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24816",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.110",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in datavane tis (tis-console/src/main/java/com/qlangtech/tis/runtime/module/action modules). This vulnerability is associated with program files ChangeDomainAction.Java.\n\nThis issue affects tis: before v4.3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de bucle con condición de salida inalcanzable ('Bucle Infinito') en datavane tis (módulos tis-console/src/main/java/com/qlangtech/tis/runtime/module/action). Esta vulnerabilidad está asociada con los archivos de programa ChangeDomainAction.Java.\n\nEste problema afecta a tis: antes de la v4.3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datavane/tis/pull/444",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24817",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.247",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write vulnerability in praydog UEVR (dependencies/lua/src modules). This vulnerability is associated with program files ldebug.C, lvm.C.\n\nThis issue affects UEVR: before 1.05."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en praydog UEVR (módulos dependencies/lua/src). Esta vulnerabilidad está asociada con los archivos de programa ldebug.C, lvm.C.\n\nEste problema afecta a UEVR: anterior a 1.05."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/praydog/UEVR/pull/336",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24818",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.383",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in praydog UEVR (dependencies/lua/src modules). This vulnerability is associated with program files lparser.C.\n\nThis issue affects UEVR: before 1.05."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en praydog UEVR (módulos dependencies/lua/src). Esta vulnerabilidad está asociada con los archivos de programa lparser.C.\n\nEste problema afecta a UEVR: antes de la versión 1.05."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Amber",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/praydog/UEVR/pull/337",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24819",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.520",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects weixin4j."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de asignación de memoria secuencial controlada de forma inadecuada en foxinmy weixin4j (módulos weixin4j-base/src/main/java/com/foxinmy/weixin4j/util). Esta vulnerabilidad está asociada con los archivos de programa CharArrayBuffer.Java, ClassUtil.Java.\n\nEste problema afecta a weixin4j."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:M/U:Amber",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1325"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/foxinmy/weixin4j/pull/229",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24820",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.663",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEngine/LUA modules). This vulnerability is associated with program files ldebug.C.\n\nThis issue affects WickedEngine: before 0.71.705."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en turanszkij WickedEngine (módulos WickedEngine/LUA). Esta vulnerabilidad está asociada con los archivos de programa ldebug.C.\n\nEste problema afecta a WickedEngine: anterior a 0.71.705."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/turanszkij/WickedEngine/pull/1054",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24821",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEngine/LUA modules). This vulnerability is associated with program files lparser.C.\n\nThis issue affects WickedEngine: through 0.71.727."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en turanszkij WickedEngine (módulos de WickedEngine/LUA). Esta vulnerabilidad está asociada con los archivos de programa lparser.C.\n\nEste problema afecta a WickedEngine: hasta la versión 0.71.727."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/turanszkij/WickedEngine/pull/1095",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24822",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:52.937",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper (src modules). This vulnerability is associated with program files mongoose.C.\n\nThis issue affects wxhelper: through 3.9.10.19-v1."
      }, {
        "lang" : "es",
        "value" : "Escritura fuera de límites, vulnerabilidad de desbordamiento de búfer basado en montículo en ttttupup wxhelper (módulos src). Esta vulnerabilidad está asociada con los archivos de programa mongoose.C.\n\nEste problema afecta a wxhelper: hasta la 3.9.10.19-v1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ttttupup/wxhelper/pull/515",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24823",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:53.067",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src modules). This vulnerability is associated with program files inflate.C.\n\nThis issue affects X-TRACK: through v2.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites, copia de búfer sin verificar el tamaño de la entrada ('desbordamiento de búfer clásico') en FASTSHIFT X-TRACK (módulos Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src). Esta vulnerabilidad está asociada con los archivos de programa inflate.C.\n\nEste problema afecta a X-TRACK: hasta la v2.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Red",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FASTSHIFT/X-TRACK/pull/120",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24824",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:53.203",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in yacy yacy_search_server (source/net/yacy/http/servlets modules). This vulnerability is associated with program files YaCyDefaultServlet.Java.\n\nThis issue affects yacy_search_server."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización Inadecuada de Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') en yacy yacy_search_server (módulos source/net/yacy/HTTP/servlets). Esta vulnerabilidad está asociada con los archivos de programa YaCyDefaultServlet.Java.\n\nEste problema afecta a yacy_search_server."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yacy/yacy_search_server/pull/722",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24825",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T09:15:53.347",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C.\n\nThis issue affects ydb: through 24.4.4.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de liberación de memoria después de la vida útil efectiva en ydb-platform ydb (módulos contrib/libs/yajl). Esta vulnerabilidad está asociada con los archivos de programa yail_tree.C.\n\nEste problema afecta a ydb: hasta 24.4.4.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Amber",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ydb-platform/ydb/pull/17570",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-27T10:15:48.597",
      "lastModified" : "2026-03-25T14:20:18.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit this by providing a specially crafted URL containing CRLF sequences, allowing them to inject additional HTTP headers or complete HTTP request bodies. This can lead to unintended or unauthorized HTTP requests being forwarded by the proxy, potentially impacting downstream services."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en libsoup, una biblioteca cliente HTTP. Esta vulnerabilidad, conocida como inyección CRLF (Carriage Return Line Feed), ocurre cuando se configura un proxy HTTP y la biblioteca maneja incorrectamente la entrada decodificada de URL utilizada para crear el encabezado Host. Un atacante remoto puede explotar esto al proporcionar una URL especialmente diseñada que contiene secuencias CRLF, permitiéndoles inyectar encabezados HTTP adicionales o cuerpos completos de solicitudes HTTP. Esto puede llevar a que solicitudes HTTP no intencionadas o no autorizadas sean reenviadas por el proxy, afectando potencialmente a los servicios posteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BAC4F4-3ACD-4F4D-920C-F920FD2C5472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1467",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433174",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/488",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21417",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-27T10:15:48.763",
      "lastModified" : "2026-02-06T20:07:51.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell CloudBoost Virtual Appliance, versiones anteriores a la 19.14.0.0, contiene una vulnerabilidad de Almacenamiento de Contraseña en Texto Plano. Un atacante con altos privilegios y acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:cloudboost_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.14.0.0",
            "matchCriteriaId" : "91B0DB8F-173A-47CD-98C9-88C5CC837A6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000419894/dsa-2026-025-security-update-for-dell-cloudboost-virtual-appliance-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24345",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-01-27T10:15:48.937",
      "lastModified" : "2026-02-05T17:32:34.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI"
      }, {
        "lang" : "es",
        "value" : "Falsificación de petición en sitios cruzados en la interfaz de usuario de administración de EZCast Pro II versión 1.17478.146 permite a los atacantes eludir las comprobaciones de autorización y obtener acceso total a la interfaz de usuario de administración."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:L/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:1.17478.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C1B80A-D748-40B9-B2FB-476107B3D705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nimbletech:ezcast_pro_dongle_ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0621F0E0-6ABB-46E2-8E85-22C8695ACE87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ntc.swiss/ntcf-2025-32832",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24346",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-01-27T10:15:49.073",
      "lastModified" : "2026-02-05T17:32:26.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application"
      }, {
        "lang" : "es",
        "value" : "Uso de credenciales predeterminadas bien conocidas en la interfaz de administración (UI) de EZCast Pro II versión 1.17478.146 permite a los atacantes acceder a áreas protegidas en la aplicación web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:1.17478.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C1B80A-D748-40B9-B2FB-476107B3D705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nimbletech:ezcast_pro_dongle_ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0621F0E0-6ABB-46E2-8E85-22C8695ACE87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ntc.swiss/ntcf-2025-13993",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24347",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-01-27T10:15:49.220",
      "lastModified" : "2026-02-05T17:31:57.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory"
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en la interfaz de usuario de administración de EZCast Pro II versión 1.17478.146 permite a los atacantes manipular archivos en el directorio /tmp"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:1.17478.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C1B80A-D748-40B9-B2FB-476107B3D705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nimbletech:ezcast_pro_dongle_ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0621F0E0-6ABB-46E2-8E85-22C8695ACE87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ntc.swiss/ntcf-2025-32806",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24348",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-01-27T10:15:49.360",
      "lastModified" : "2026-02-05T17:24:11.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de cross-site scripting en la Admin UI de EZCast Pro II versión 1.17478.146 permiten a los atacantes ejecutar código JavaScript arbitrario en el navegador de otros usuarios de la Admin UI."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:1.17478.146:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C1B80A-D748-40B9-B2FB-476107B3D705"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nimbletech:ezcast_pro_dongle_ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0621F0E0-6ABB-46E2-8E85-22C8695ACE87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ntc.swiss/ntcf-2025-145332",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24826",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T10:15:49.507",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects ."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Escritura fuera de límites, División por cero, Desreferencia de puntero NULL, Uso de recurso no inicializado, Lectura fuera de límites y Aserción alcanzable en cadaver turso3d. Este problema afecta a ."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        }, {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cadaver/turso3d/pull/11",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24827",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T10:15:49.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en gerstrong Commander-Genius. Este problema afecta a Commander-Genius: antes de Release refs/pull/358/merge."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gerstrong/Commander-Genius/pull/379",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24828",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T10:15:49.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Release of Memory after Effective Lifetime vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: before 3.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de liberación de memoria después de la vida útil efectiva en Is-Daouda is-Engine. Este problema afecta a is-Engine: antes de 3.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Is-Daouda/is-Engine/pull/6",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24829",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T10:15:49.917",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: before 3.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites y desbordamiento de búfer basado en montículo en Is-Daouda is-Engine. Este problema afecta a is-Engine: antes de 3.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Is-Daouda/is-Engine/pull/7",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24830",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T10:15:50.053",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de entero o desbordamiento circular en Ralim IronOS. Este problema afecta a IronOS: anterior a la v2.23-rc2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ralim/IronOS/pull/2083",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1213",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2026-01-27T14:15:55.887",
      "lastModified" : "2026-04-14T14:58:57.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de askbot anteriores e incluyendo la 0.12.2 permiten a un atacante autenticado con permisos de usuario normal modificar la imagen de perfil de otros usuarios de la aplicación. Este problema afecta a askbot: 0.12.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "help@fluidattacks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:askbot:askbot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.12.2",
            "matchCriteriaId" : "67474713-5CD3-4B3D-A29F-F4EF40B3A67F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://askbot.com/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/ghost",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ASKBOT/askbot-devel/commit/3da3d75f35204aa71633c7a315327ba39cb6295d",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1484",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-27T14:15:56.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en la rutina de codificación Base64 de GLib al procesar datos de entrada muy grandes. Debido al uso incorrecto de tipos de enteros durante el cálculo de la longitud, la librería puede calcular erróneamente los límites del búfer. Esto puede causar escrituras en memoria fuera del búfer asignado. Las aplicaciones que procesan entrada Base64 no confiable o extremadamente grande usando GLib pueden fallar o comportarse de manera impredecible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1484",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433259",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/3870",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1485",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-27T14:15:56.223",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en la lógica de análisis de tipos de contenido de Glib. Esta vulnerabilidad de desbordamiento negativo de búfer ocurre porque la longitud de una línea de encabezado se almacena en un entero con signo, lo que puede llevar a un desbordamiento de entero para entradas muy grandes. Esto resulta en un desbordamiento negativo de puntero y acceso a memoria fuera de límites. La explotación requiere que un usuario local instale o procese un archivo treemagic especialmente diseñado, lo que puede llevar a una denegación de servicio local o inestabilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-124"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1485",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433325",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/3871",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1470",
      "sourceIdentifier" : "reefs@jfrog.com",
      "published" : "2026-01-27T15:15:57.143",
      "lastModified" : "2026-02-20T13:44:27.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime.\n\nAn authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations."
      }, {
        "lang" : "es",
        "value" : "n8n contiene una crítica vulnerabilidad de ejecución remota de código (RCE) en su sistema de evaluación de expresiones de flujo de trabajo. Las expresiones proporcionadas por usuarios autenticados durante la configuración del flujo de trabajo pueden ser evaluadas en un contexto de ejecución que no está suficientemente aislado del tiempo de ejecución subyacente.\n\nUn atacante autenticado podría abusar de este comportamiento para ejecutar código arbitrario con los privilegios del proceso de n8n. La explotación exitosa puede llevar al compromiso total de la instancia afectada, incluyendo el acceso no autorizado a datos sensibles, la modificación de flujos de trabajo y la ejecución de operaciones a nivel de sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "reefs@jfrog.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "reefs@jfrog.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.17",
            "matchCriteriaId" : "8FB57226-E06A-4156-9A24-C320BCA37EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.5",
            "matchCriteriaId" : "52026A74-2A68-453E-B465-A30DD1819C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:2.5.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2BBB681B-B071-4A5B-90C0-EA5625C3D5FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/aa4d1e5825829182afa0ad5b81f602638f55fa04",
        "source" : "reefs@jfrog.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://research.jfrog.com/vulnerabilities/n8n-expression-node-rce/",
        "source" : "reefs@jfrog.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1489",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-27T15:15:57.370",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en GLib. Una vulnerabilidad de desbordamiento de entero en su implementación de conversión de mayúsculas y minúsculas Unicode puede llevar a corrupción de memoria. Al procesar cadenas Unicode especialmente diseñadas y extremadamente grandes, un atacante podría desencadenar una asignación de memoria de tamaño insuficiente, lo que resultaría en escrituras fuera de límites. Esto podría causar que las aplicaciones que utilizan GLib para la conversión de cadenas se bloqueen o se vuelvan inestables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1489",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433348",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/3872",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0648",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-01-27T16:16:35.107",
      "lastModified" : "2026-04-02T20:30:57.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_counter(). Specifically, the current code checks if cntr_id equals 0u to determine failure, but @osek_get_counter() actually returns E_OS_SYS_STACK (defined as 12U) when it fails. This mismatch causes the error branch to never execute even when the counter pool is exhausted.\n\nAs a result, when the counter pool is depleted, the code proceeds to cast the error code (12U) to a pointer (OSEK_COUNTER *), creating a wild pointer. Subsequent writes to members of this pointer lead to writes to illegal memory addresses (e.g., 0x0000000C), which can trigger immediate HardFaults or silent memory corruption.\n\nThis vulnerability poses significant risks, including potential denial-of-service attacks (via repeated calls to exhaust the counter pool) and unauthorized memory access."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad se deriva de una lógica incorrecta de comprobación de errores en la función CreateCounter() (en threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) al manejar el valor de retorno de osek_get_counter(). Específicamente, el código actual comprueba si cntr_id es igual a 0u para determinar un fallo, pero @osek_get_counter() en realidad devuelve E_OS_SYS_STACK (definido como 12U) cuando falla. Esta discrepancia hace que la rama de error nunca se ejecute, incluso cuando el pool de contadores está agotado.\n\nComo resultado, cuando el pool de contadores se agota, el código procede a convertir el código de error (12U) a un puntero (OSEK_COUNTER *), creando un puntero salvaje. Las escrituras posteriores a miembros de este puntero conducen a escrituras en direcciones de memoria ilegales (por ejemplo, 0x0000000C), lo que puede desencadenar HardFaults inmediatos o corrupción de memoria silenciosa.\n\nEsta vulnerabilidad plantea riesgos significativos, incluyendo posibles ataques de denegación de servicio (mediante llamadas repetidas para agotar el pool de contadores) y acceso no autorizado a la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-253"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.7",
            "versionEndExcluding" : "6.4.5",
            "matchCriteriaId" : "77069C96-3BA5-4AC9-92D4-6753DE8FC8A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-xj75-fc68-h4rw",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22795",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2026-01-27T16:16:35.430",
      "lastModified" : "2026-02-02T18:41:14.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Resumen del problema: Puede producirse una desreferencia de puntero inválido o NULL en una aplicación que procesa un archivo PKCS#12 malformado.\n\nResumen del impacto: Una aplicación que procesa un archivo PKCS#12 malformado puede ser inducida a desreferenciar un puntero inválido o NULL en una lectura de memoria, resultando en una denegación de servicio.\n\nExiste una vulnerabilidad de confusión de tipos en el código de análisis de PKCS#12 donde se accede a un miembro de la unión ASN1_TYPE sin validar primero el tipo, causando una lectura de puntero inválido.\n\nLa ubicación está restringida a un espacio de direcciones de 1 byte, lo que significa que cualquier intento de manipulación de puntero solo puede apuntar a direcciones entre 0x00 y 0xFF. Este rango corresponde a la página cero, que no está mapeada en la mayoría de los sistemas operativos modernos y resultará de forma fiable en un fallo, lo que lleva solo a una denegación de servicio. Para explotar este problema también es preciso que un usuario o aplicación procese un archivo PKCS#12 creado maliciosamente. Es poco común aceptar archivos PKCS#12 no confiables en aplicaciones, ya que generalmente se utilizan para almacenar claves privadas que son confiables por definición. Por estas razones, el problema fue evaluado como de baja severidad.\n\nLos módulos FIPS en 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de PKCS12 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 y 1.1.1 son vulnerables a este problema.\n\nOpenSSL 1.0.2 no se ve afectado por este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "openssl-security@openssl.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1ze",
            "matchCriteriaId" : "E000B986-6A31-468F-9EA3-B9D16DB16FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.19",
            "matchCriteriaId" : "C76C5F55-5243-4461-82F5-2FEBFF4D59FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.6",
            "matchCriteriaId" : "F5292E9E-6B50-409F-9219-7B0A04047AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.4",
            "matchCriteriaId" : "B9D3DCAE-317D-4DFB-93F0-7A235A229619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.5",
            "matchCriteriaId" : "1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.1",
            "matchCriteriaId" : "68352537-5E99-4F4D-B78A-BCF0353A70A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://openssl-library.org/news/secadv/20260127.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22796",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2026-01-27T16:16:35.543",
      "lastModified" : "2026-02-02T18:40:27.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."
      }, {
        "lang" : "es",
        "value" : "Resumen del problema: Existe una vulnerabilidad de confusión de tipos en la verificación de firma de datos PKCS#7 firmados, donde se accede a un miembro de la unión ASN1_TYPE sin validar primero el tipo, causando una desreferencia de puntero inválido o NULL al procesar datos PKCS#7 malformados.\n\nResumen del impacto: Una aplicación que realiza la verificación de firma de datos PKCS#7 o que llama directamente a la función PKCS7_digest_from_attributes() puede ser inducida a desreferenciar un puntero inválido o NULL al leer, resultando en una denegación de servicio.\n\nLa función PKCS7_digest_from_attributes() accede al valor del atributo de resumen del mensaje sin validar su tipo. Cuando el tipo no es V_ASN1_OCTET_STRING, esto resulta en el acceso a memoria inválida a través de la unión ASN1_TYPE, causando un fallo.\n\nExplotar esta vulnerabilidad requiere que un atacante proporcione un PKCS#7 firmado malformado a una aplicación que lo verifica. El impacto del exploit es solo una denegación de servicio, la API PKCS7 es heredada y las aplicaciones deberían usar la API CMS en su lugar. Por estas razones, el problema fue evaluado como de baja severidad.\n\nLos módulos FIPS en 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de análisis de PKCS#7 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 y 1.0.2 son vulnerables a este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "openssl-security@openssl.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2zn",
            "matchCriteriaId" : "6A8EC60C-05EC-4886-8C82-63AEF4BDA8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1ze",
            "matchCriteriaId" : "E000B986-6A31-468F-9EA3-B9D16DB16FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.19",
            "matchCriteriaId" : "C76C5F55-5243-4461-82F5-2FEBFF4D59FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.6",
            "matchCriteriaId" : "F5292E9E-6B50-409F-9219-7B0A04047AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.4",
            "matchCriteriaId" : "B9D3DCAE-317D-4DFB-93F0-7A235A229619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.5",
            "matchCriteriaId" : "1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.1",
            "matchCriteriaId" : "68352537-5E99-4F4D-B78A-BCF0353A70A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://openssl-library.org/news/secadv/20260127.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24831",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:35.903",
      "lastModified" : "2026-02-05T17:02:35.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de bucle con condición de salida inalcanzable ('Bucle Infinito') en ixray-team ixray-1.6-stcop. Este problema afecta a ixray-1.6-stcop: antes de 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ixray-team:ix-ray_engine_1.6:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "33DE6259-5807-46DF-AB3C-8A8271716001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ixray-team/ixray-1.6-stcop/pull/248",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24832",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:36.033",
      "lastModified" : "2026-02-05T17:02:11.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en ixray-team ixray-1.6-stcop. Este problema afecta a ixray-1.6-stcop: anterior a 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ixray-team:ix-ray_engine_1.6:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "33DE6259-5807-46DF-AB3C-8A8271716001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ixray-team/ixray-1.6-stcop/pull/257",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24868",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-27T16:16:36.173",
      "lastModified" : "2026-04-13T15:17:19.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2."
      }, {
        "lang" : "es",
        "value" : "Omisión de mitigación en el componente de Privacidad: Anti-Rastreo. Esta vulnerabilidad afecta a Firefox &lt; 147.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0.2",
            "matchCriteriaId" : "21090562-C94F-4894-A700-FD3BDEE56713"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2007302",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24869",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-27T16:16:36.283",
      "lastModified" : "2026-04-13T15:17:19.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente de Diseño: Desplazamiento y Desbordamiento. Esta vulnerabilidad afecta a Firefox &lt; 147.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0.2",
            "matchCriteriaId" : "21090562-C94F-4894-A700-FD3BDEE56713"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2008698",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-06/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24870",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:36.377",
      "lastModified" : "2026-02-05T17:02:00.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Exposición de Información Sensible a un Actor No Autorizado en ixray-team ixray-1.6-stcop. Este problema afecta a ixray-1.6-stcop: anterior a 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ixray-team:ix-ray_engine_1.6:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "33DE6259-5807-46DF-AB3C-8A8271716001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ixray-team/ixray-1.6-stcop/pull/258",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24871",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:36.507",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in pilgrimage233 Minecraft-Rcon-Manage.This issue affects Minecraft-Rcon-Manage: before 3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado de la generación de código ('Inyección de código') en pilgrimage233 Minecraft-Rcon-Manage. Este problema afecta a Minecraft-Rcon-Manage: antes de 3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pilgrimage233/Minecraft-Rcon-Manage/pull/13",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24872",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:36.640",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "improper pointer arithmetic\n\n vulnerability in ProjectSkyfire SkyFire_548.This issue affects SkyFire_548: before 5.4.8-stable5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de aritmética de punteros incorrecta en ProjectSkyfire SkyFire_548. Este problema afecta a SkyFire_548: antes de 5.4.8-stable5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-468"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cadaver/turso3d/pull/11",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24873",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:36.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in Rinnegatamante lpp-vita.This issue affects lpp-vita: before lpp-vita r6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en Rinnegatamante lpp-vita. Este problema afecta a lpp-vita: antes de lpp-vita r6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Rinnegatamante/lpp-vita/pull/82",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24874",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:36.880",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in themrdemonized xray-monolith.This issue affects xray-monolith: before 2025.12.30."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Acceso a Recurso Usando Tipo Incompatible ('Confusión de Tipos') en themrdemonized xray-monolith. Este problema afecta a xray-monolith: antes de 2025.12.30."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/themrdemonized/xray-monolith/pull/399",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24875",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2026-01-27T16:16:37.013",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer Overflow or Wraparound vulnerability in yoyofr modizer.This issue affects modizer: before 4.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de entero o ajuste circular en yoyofr modizer. Este problema afecta a modizer: antes de 4.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve_disclosure@tech.gov.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yoyofr/modizer/pull/133",
        "source" : "cve_disclosure@tech.gov.sg"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0705",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-01-27T17:16:10.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.4.25342.354."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido a permisos de carpeta inseguros. Los siguientes productos están afectados: Acronis Cloud Manager (Windows) anterior a la compilación 6.4.25342.354."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-7316",
        "source" : "security@acronis.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1472",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:10.400",
      "lastModified" : "2026-02-10T20:21:09.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'txAny' in '/evaluacion_competencias_autoeval_list.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'txAny' en '/evaluacion_competencias_autoeval_list.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1473",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:10.547",
      "lastModified" : "2026-02-10T20:20:56.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario’ in '/evaluacion_competencias_evalua.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'Id_usuario' en '/evaluacion_competencias_evalua.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1474",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:10.697",
      "lastModified" : "2026-02-10T20:20:43.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion' en ‘/evaluacion_inicio.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en los parámetros 'Id_usuario' e 'Id_evaluacion' en '/evaluacion_inicio.aspx', podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1475",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:10.840",
      "lastModified" : "2026-02-10T20:20:35.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter ‘Id_usuario' in ‘/evaluacion_acciones_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. Explotar esta vulnerabilidad en el parámetro 'Id_usuario' en '/evaluacion_acciones_evalua.aspx', podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1476",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:10.980",
      "lastModified" : "2026-02-10T20:20:00.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in ‘/evaluacion_acciones_ver_auto.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'Id_usuario' en '/evaluacion_acciones_ver_auto.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1477",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.137",
      "lastModified" : "2026-02-10T20:16:26.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluacion_competencias_evalua_old.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en los parámetros 'Id_usuario' e 'Id_evaluacion' en '/evaluacion_competencias_evalua_old.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1478",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.277",
      "lastModified" : "2026-02-10T20:21:25.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en los parámetros 'Id_usuario' e 'Id_evaluacion' en '/evaluacion_hca_evalua.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1479",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.413",
      "lastModified" : "2026-02-10T20:19:49.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameters 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluacion_hca_ver_auto.asp', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en los parámetros 'Id_usuario' e 'Id_evaluacion' en '/evaluacion_hca_ver_auto.asp' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1480",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.550",
      "lastModified" : "2026-02-10T20:19:24.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in '/evaluacion_objetivos_anyo_sig_evalua.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'Id_usuario' en '/evaluacion_objetivos_anyo_sig_evalua.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1481",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.687",
      "lastModified" : "2026-02-10T20:19:16.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in '/evaluacion_objetivos_anyo_sig_ver_auto.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'Id_usuario' en '/evaluacion_objetivos_anyo_sig_ver_auto.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1482",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.817",
      "lastModified" : "2026-02-10T20:19:32.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_evaluacion' in '/evaluacion_objetivos_evalua_definido.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'Id_evaluacion' en '/evaluacion_objetivos_evalua_definido.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1483",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-27T17:16:11.963",
      "lastModified" : "2026-02-10T20:21:17.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in '/evaluacion_objetivos_ver_auto.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL fuera de banda (OOB SQLi) ha sido detectada en la aplicación de Evaluación del Desempeño (EDD) desarrollada por Gabinete Técnico de Programación. La explotación de esta vulnerabilidad en el parámetro 'Id_usuario' en '/evaluacion_objetivos_ver_auto.aspx' podría permitir a un atacante extraer información sensible de la base de datos a través de canales externos, sin que la aplicación afectada devuelva los datos directamente, comprometiendo la confidencialidad de la información almacenada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66ECBB1A-4822-4186-9C8B-49740C8B52A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22039",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T17:16:12.097",
      "lastModified" : "2026-02-02T15:13:57.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have a critical authorization boundary bypass in namespaced Kyverno Policy apiCall. The resolved `urlPath` is executed using the Kyverno admission controller ServiceAccount, with no enforcement that the request is limited to the policy’s namespace. As a result, any authenticated user with permission to create a namespaced Policy can cause Kyverno to perform Kubernetes API requests using Kyverno’s admission controller identity, targeting any API path allowed by that ServiceAccount’s RBAC. This breaks namespace isolation by enabling cross-namespace reads (for example, ConfigMaps and, where permitted, Secrets) and allows cluster-scoped or cross-namespace writes (for example, creating ClusterPolicies) by controlling the urlPath through context variable substitution. Versions 1.16.3 and 1.15.3 contain a patch for the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Kyverno es un motor de políticas diseñado para equipos de ingeniería de plataformas nativas de la nube. Las versiones anteriores a la 1.16.3 y 1.15.3 tienen un bypass crítico de límite de autorización en la llamada a la API de política de Kyverno con espacio de nombres. La 'urlPath' resuelta se ejecuta utilizando la ServiceAccount del controlador de admisión de Kyverno, sin que se aplique que la solicitud esté limitada al espacio de nombres de la política. Como resultado, cualquier usuario autenticado con permiso para crear una política con espacio de nombres puede hacer que Kyverno realice solicitudes a la API de Kubernetes utilizando la identidad del controlador de admisión de Kyverno, apuntando a cualquier ruta de API permitida por el RBAC de esa ServiceAccount. Esto rompe el aislamiento de espacios de nombres al permitir lecturas entre espacios de nombres (por ejemplo, ConfigMaps y, donde esté permitido, Secrets) y permite escrituras a nivel de clúster o entre espacios de nombres (por ejemplo, la creación de ClusterPolicies) controlando la 'urlPath' mediante la sustitución de variables de contexto. Las versiones 1.16.3 y 1.15.3 contienen un parche para la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15.3",
            "matchCriteriaId" : "EC83E83A-2BA5-4A52-AF06-06E67CA03749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.16.0",
            "versionEndExcluding" : "1.16.3",
            "matchCriteriaId" : "AFFC15A4-197B-44FB-985A-BDDE22679655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kyverno/kyverno/commit/e0ba4de4f1e0ca325066d5095db51aec45b1407b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kyverno/kyverno/commit/eba60fa856c781bcb9c3be066061a3df03ae4e3e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-8p9x-46gm-qfx2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22258",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T17:16:12.253",
      "lastModified" : "2026-01-30T20:09:24.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, crafted DCERPC traffic can cause Suricata to expand a buffer w/o limits, leading to memory exhaustion and the process getting killed. While reported for DCERPC over UDP, it is believed that DCERPC over TCP and SMB are also vulnerable. DCERPC/TCP in the default configuration should not be vulnerable as the default stream depth is limited to 1MiB. Versions 8.0.3 and 7.0.14 contain a patch. Some workarounds are available. For DCERPC/UDP, disable the parser. For DCERPC/TCP, the `stream.reassembly.depth` setting will limit the amount of data that can be buffered. For DCERPC/SMB, the `stream.reassembly.depth` can be used as well, but is set to unlimited by default. Imposing a limit here may lead to loss of visibility in SMB."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor de IDS, IPS y NSM de red. Antes de las versiones 8.0.3 y 7.0.14, el tráfico DCERPC manipulado puede hacer que Suricata expanda un búfer sin límites, lo que lleva al agotamiento de la memoria y a la terminación del proceso. Aunque se informó para DCERPC sobre UDP, se cree que DCERPC sobre TCP y SMB también son vulnerables. DCERPC/TCP en la configuración predeterminada no debería ser vulnerable, ya que la profundidad de flujo predeterminada está limitada a 1 MiB. Las versiones 8.0.3 y 7.0.14 contienen un parche. Algunas soluciones alternativas están disponibles. Para DCERPC/UDP, deshabilite el analizador. Para DCERPC/TCP, la configuración 'stream.reassembly.depth' limitará la cantidad de datos que se pueden almacenar en búfer. Para DCERPC/SMB, también se puede usar 'stream.reassembly.depth', pero está configurado como ilimitado por defecto. Imponer un límite aquí puede llevar a la pérdida de visibilidad en SMB."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.14",
            "matchCriteriaId" : "5302B0F0-AF2D-4140-BC66-9186EF7E455D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/39d8c302af3422a096b75474a4f295a754ec6a74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/f82a388d0283725cb76782cf64e8341cab370830",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-289c-h599-3xcx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8182",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22259",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T17:16:12.407",
      "lastModified" : "2026-01-30T20:01:49.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing down and running out of memory, potentially leading to it getting killed by the OOM killer. Versions 8.0.3 or 7.0.14 contain a patch. As a workaround, disable the DNP3 parser in the suricata yaml (disabled by default)."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor IDS, IPS y NSM de red. Antes de las versiones 8.0.3 y 7.0.14, el tráfico especialmente diseñado puede hacer que Suricata consuma grandes cantidades de memoria mientras analiza el tráfico DNP3. Esto puede provocar que el proceso se ralentice y se quede sin memoria, lo que podría llevar a que sea terminado por el OOM killer. Las versiones 8.0.3 o 7.0.14 contienen un parche. Como solución alternativa, deshabilite el analizador DNP3 en el suricata yaml (deshabilitado por defecto)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.14",
            "matchCriteriaId" : "5302B0F0-AF2D-4140-BC66-9186EF7E455D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8181",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23881",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T17:16:12.733",
      "lastModified" : "2026-02-02T15:20:13.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have unbounded memory consumption in Kyverno's policy engine that allows users with policy creation privileges to cause denial of service by crafting policies that exponentially amplify string data through context variables. Versions 1.16.3 and 1.15.3 contain a patch for the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Kyverno es un motor de políticas diseñado para equipos de ingeniería de plataformas nativas de la nube. Las versiones anteriores a la 1.16.3 y 1.15.3 tienen un consumo de memoria ilimitado en el motor de políticas de Kyverno que permite a los usuarios con privilegios de creación de políticas causar una denegación de servicio mediante la elaboración de políticas que amplifican exponencialmente los datos de cadena a través de variables de contexto. Las versiones 1.16.3 y 1.15.3 contienen un parche para la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15.3",
            "matchCriteriaId" : "EC83E83A-2BA5-4A52-AF06-06E67CA03749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.16.0",
            "versionEndExcluding" : "1.16.3",
            "matchCriteriaId" : "AFFC15A4-197B-44FB-985A-BDDE22679655"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kyverno/kyverno/commit/7a651be3a8c78dcabfbf4178b8d89026bf3b850f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kyverno/kyverno/commit/f5617f60920568a301740485472bf704892175b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-r2rj-wwm5-x6mq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0918",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-01-27T18:15:54.973",
      "lastModified" : "2026-04-29T01:16:02.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The resulting failed memory allocation triggers a NULL pointer dereference, causing the main service process to crash. An unauthenticated attacker can repeatedly crash the service, causing temporary denial of service. The device restarts automatically, and repeated requests can keep it unavailable."
      }, {
        "lang" : "es",
        "value" : "El servicio HTTP de las cámaras Tapo C220 v1 y C520WS v2 no maneja de forma segura las solicitudes POST que contienen una cabecera Content-Length excesivamente grande. La asignación de memoria fallida resultante desencadena una desreferenciación de puntero NULL, provocando la caída del proceso del servicio principal. Un atacante no autenticado puede provocar la caída repetida del servicio, causando una denegación de servicio temporal. El dispositivo se reinicia automáticamente, y las solicitudes repetidas pueden mantenerlo no disponible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "F337B275-4344-4B21-9C3F-5E01F56C8015"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c220:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671BCAEE-4AA0-4924-88E2-3B3C9087D171"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c520ws_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "65DE4797-2C90-4C4A-BCA1-41F514F8153D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c520ws:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6B561-8739-4823-9226-82FE5084EE01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.crac-learning.com/post/smart-home-security-research-cve-2026-0918-assigned",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c220/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c520ws/v2/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c100/v5/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c220/v1.60/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c520ws/v2/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4923/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0919",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-01-27T18:15:55.120",
      "lastModified" : "2026-04-29T17:16:40.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service restart. An unauthenticated attacker can force repeated service crashes or device reboots, causing denial of service."
      }, {
        "lang" : "es",
        "value" : "El analizador HTTP de las cámaras Tapo C220 v1 y C520WS v2 maneja incorrectamente las solicitudes que contienen una ruta URL excesivamente larga. Una ruta de error de URL no válida continúa hacia el código de limpieza que asume la existencia de búferes asignados, lo que provoca un fallo y un reinicio del servicio. Un atacante no autenticado puede forzar repetidos fallos del servicio o reinicios del dispositivo, causando denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "F337B275-4344-4B21-9C3F-5E01F56C8015"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c220:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671BCAEE-4AA0-4924-88E2-3B3C9087D171"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c520ws_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "65DE4797-2C90-4C4A-BCA1-41F514F8153D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c520ws:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6B561-8739-4823-9226-82FE5084EE01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c210/v3/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c220/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c520ws/v2/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c210/v3/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c220/v1.60/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c520ws/v2/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4923/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1315",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-01-27T18:15:55.257",
      "lastModified" : "2026-03-11T22:19:43.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, requiring a manual reboot or application initiated restart to restore normal device operation."
      }, {
        "lang" : "es",
        "value" : "Al enviar archivos manipulados al punto final de actualización de firmware de Tapo C220 v1 y C520WS v2, el dispositivo termina los servicios centrales del sistema antes de verificar la autenticación o la integridad del firmware. Un atacante no autenticado puede desencadenar una denegación de servicio persistente, que requiere un reinicio manual o un reinicio iniciado por la aplicación para restaurar el funcionamiento normal del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "F337B275-4344-4B21-9C3F-5E01F56C8015"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c220:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671BCAEE-4AA0-4924-88E2-3B3C9087D171"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c520ws_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "65DE4797-2C90-4C4A-BCA1-41F514F8153D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c520ws:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E6B561-8739-4823-9226-82FE5084EE01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c220/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c520ws/v2/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c220/v1.60/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c520ws/v2/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4923/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22260",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T18:15:55.383",
      "lastModified" : "2026-01-29T21:03:54.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values for `request-body-limit` and `response-body-limit`."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor IDS, IPS y NSM de red. A partir de la versión 8.0.0 y antes de la versión 8.0.3, Suricata puede fallar con un desbordamiento de pila. La versión 8.0.3 corrige el problema. Como solución alternativa, use los valores predeterminados para 'request-body-limit' y 'response-body-limit'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/0dddac7278c8b9cf3c1e4c1c71e620a78ec1c185",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-3gm8-84cm-5x22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8185",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23592",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-01-27T18:15:56.383",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure file operations in HPE Aruba Networking Fabric Composerâ€™s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Operaciones de archivo inseguras en la funcionalidad de copia de seguridad de HPE Aruba Networking Fabric Composer podrían permitir a atacantes autenticados lograr la ejecución remota de código. La explotación exitosa podría permitir a un atacante ejecutar comandos arbitrarios en el sistema operativo subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23593",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-01-27T18:15:56.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de HPE Aruba Networking Fabric Composer podría permitir a un atacante remoto no autenticado ver algunos archivos del sistema. La explotación exitosa podría permitir a un atacante leer archivos dentro del directorio afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0746",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-27T19:16:13.460",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'get_audio' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services, if \"Public API\" is enabled in the plugin settings, and 'allow_url_fopen' is set to 'On' on the server."
      }, {
        "lang" : "es",
        "value" : "El plugin AI Engine para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 3.3.2, inclusive, a través de la función 'get_audio'. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, realicen peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede usarse para consultar y modificar información de servicios internos, si la 'API Pública' está habilitada en la configuración del plugin, y 'allow_url_fopen' está configurado en 'On' en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.3.1/classes/engines/chatml.php#L946",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3447500/ai-engine/trunk/classes/engines/chatml.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cbba866d-93dd-4ef5-9670-ab958f61f06e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22261",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:14.173",
      "lastModified" : "2026-01-29T21:02:34.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, disable XFF support in the eve configuration. The setting is disabled by default."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor de red IDS, IPS y NSM. Antes de las versiones 8.0.3 y 7.0.14, varias ineficiencias en el manejo de xff, especialmente para alertas no activadas en una tx, pueden provocar ralentizaciones graves. Las versiones 8.0.3 y 7.0.14 contienen un parche. Como solución alternativa, deshabilite el soporte XFF en la configuración de eve. La configuración está deshabilitada por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1050"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.14",
            "matchCriteriaId" : "5302B0F0-AF2D-4140-BC66-9186EF7E455D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/3f0725b34c7871c2de4346c8af872f10f4501e44",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/af246ae7ab1b70c09f83c0619b253095ccc18667",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-5jvg-5j3p-34cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8156",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22262",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:14.340",
      "lastModified" : "2026-01-29T21:01:55.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. While saving a dataset a stack buffer is used to prepare the data. Prior to versions 8.0.3 and 7.0.14, if the data in the dataset is too large, this can result in a stack overflow. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not use rules with datasets `save` nor `state` options."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor IDS, IPS y NSM de red. Mientras se guarda un conjunto de datos, se utiliza un búfer de pila para preparar los datos. Antes de las versiones 8.0.3 y 7.0.14, si los datos en el conjunto de datos son demasiado grandes, esto puede resultar en un desbordamiento de pila. Las versiones 8.0.3 y 7.0.14 contienen un parche. Como solución alternativa, no utilice reglas con las opciones 'save' ni 'state' de los conjuntos de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.14",
            "matchCriteriaId" : "5302B0F0-AF2D-4140-BC66-9186EF7E455D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/0eff24213763c2aa2bb0957901d5dc1e18414dbf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/27a2180bceaa3477419c78c54fce364398d011f1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/32609e6896f9079c175665a94005417cec7637eb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/32a1b9ae6aa80a60c073897e38a2ac6ea0f64521",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/d6bc718e303ecbec5999066b8bc88eeeca743658",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/d767dfadcd166f82683757818b9e46943326ac90",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-9qg5-2gwh-xp86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8110",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22263",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:14.490",
      "lastModified" : "2026-01-29T21:00:55.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor de IDS, IPS y NSM de red. A partir de la versión 8.0.0 y antes de la versión 8.0.3, una ineficiencia en el análisis de cabeceras http1 puede provocar una ralentización a lo largo de múltiples paquetes. La versión 8.0.3 corrige el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1050"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8201",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22264",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:14.640",
      "lastModified" : "2026-01-29T20:58:58.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run untrusted rulesets or run with less than 65536 signatures that can match on the same packet."
      }, {
        "lang" : "es",
        "value" : "Suricata es un motor IDS, IPS y NSM de red. Antes de las versiones 8.0.3 y 7.0.14, un desbordamiento de entero sin signo puede conducir a una condición de uso después de liberación en el heap al generar una cantidad excesiva de alertas para un solo paquete. Las versiones 8.0.3 y 7.0.14 contienen un parche. Como solución alternativa, no ejecute conjuntos de reglas no confiables o ejecute con menos de 65536 firmas que puedan coincidir en el mismo paquete."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.14",
            "matchCriteriaId" : "5302B0F0-AF2D-4140-BC66-9186EF7E455D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "E7DA8362-52A2-4ACC-83F7-CA2E77AE89C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OISF/suricata/commit/549d7bf60616de8e54686a188196453b5b22f715",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/5789a3d3760dbf33d93fc56c27bd9529e5bdc8f2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/commit/ac1eb394181530430fb7262969f423a1bf8f209b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OISF/suricata/security/advisories/GHSA-mqr8-m3m4-2hw5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.openinfosecfoundation.org/issues/8190",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23892",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:16.027",
      "lastModified" : "2026-02-02T14:39:36.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and including 1.11.5 are affected by a (theoretical) timing attack vulnerability that allows API key extraction over the network. Due to using character based comparison that short-circuits on the first mismatched character during API key validation, rather than a cryptographical method with static runtime regardless of the point of mismatch, an attacker with network based access to an affected OctoPrint could extract API keys valid on the instance by measuring the response times of the denied access responses and guess an API key character by character. The vulnerability is patched in version 1.11.6. The likelihood of this attack actually working is highly dependent on the network's latency, noise and similar parameters. An actual proof of concept was not achieved so far. Still, as always administrators are advised to not expose their OctoPrint instance on hostile networks, especially not on the public Internet."
      }, {
        "lang" : "es",
        "value" : "OctoPrint proporciona una interfaz web para controlar impresoras 3D de consumo. Las versiones de OctoPrint hasta la 1.11.5 inclusive están afectadas por una vulnerabilidad (teórica) de ataque de temporización que permite la extracción de claves API a través de la red. Debido al uso de una comparación basada en caracteres que se interrumpe en el primer carácter no coincidente durante la validación de la clave API, en lugar de un método criptográfico con tiempo de ejecución estático independientemente del punto de no coincidencia, un atacante con acceso basado en red a una instancia de OctoPrint afectada podría extraer claves API válidas en la instancia midiendo los tiempos de respuesta de las respuestas de acceso denegado y adivinar una clave API carácter por carácter. La vulnerabilidad está parcheada en la versión 1.11.6. La probabilidad de que este ataque funcione realmente depende en gran medida de la latencia, el ruido y parámetros similares de la red. Una prueba de concepto real no se ha logrado hasta ahora. Aun así, como siempre, se aconseja a los administradores que no expongan su instancia de OctoPrint en redes hostiles, especialmente no en la Internet pública."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octoprint:octoprint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.6",
            "matchCriteriaId" : "4936F1B5-7DD9-449F-AB98-64CDF0719211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctoPrint/OctoPrint/commit/249fd80ab01bc4b7dabedff768230a0fb5d01a8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-xg4x-w2j3-57h6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24116",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:16.180",
      "lastModified" : "2026-02-12T21:36:55.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wasmtime is a runtime for WebAssembly. Starting in version 29.0.0 and prior to version 36.0.5, 40.0.3, and 41.0.1, on x86-64 platforms with AVX, Wasmtime's compilation of the `f64.copysign` WebAssembly instruction with Cranelift may load 8 more bytes than is necessary. When signals-based-traps are disabled this can result in a uncaught segfault due to loading from unmapped guard pages. With guard pages disabled it's possible for out-of-sandbox data to be loaded, but unless there is another bug in Cranelift this data is not visible to WebAssembly guests. Wasmtime 36.0.5, 40.0.3, and 41.0.1 have been released to fix this issue. Users are recommended to upgrade to the patched versions of Wasmtime. Other affected versions are not patched and users should updated to supported major version instead. This bug can be worked around by enabling signals-based-traps. While disabling guard pages can be a quick fix in some situations, it's not recommended to disabled guard pages as it is a key defense-in-depth measure of Wasmtime."
      }, {
        "lang" : "es",
        "value" : "Wasmtime es un entorno de ejecución para WebAssembly. A partir de la versión 29.0.0 y antes de las versiones 36.0.5, 40.0.3 y 41.0.1, en plataformas x86-64 con AVX, la compilación de Wasmtime de la instrucción WebAssembly f64.copysign con Cranelift puede cargar 8 bytes más de los necesarios. Cuando las trampas basadas en señales están deshabilitadas, esto puede resultar en un segfault no detectado debido a la carga desde páginas de guardia no mapeadas. Con las páginas de guardia deshabilitadas, es posible que se carguen datos fuera de la sandbox, pero a menos que haya otro error en Cranelift, estos datos no son visibles para los invitados de WebAssembly. Wasmtime 36.0.5, 40.0.3 y 41.0.1 han sido lanzadas para solucionar este problema. Se recomienda a los usuarios actualizar a las versiones parcheadas de Wasmtime. Otras versiones afectadas no están parcheadas y los usuarios deberían actualizar a una versión principal compatible en su lugar. Este error se puede eludir habilitando las trampas basadas en señales. Si bien deshabilitar las páginas de guardia puede ser una solución rápida en algunas situaciones, no se recomienda deshabilitar las páginas de guardia, ya que es una medida clave de defensa en profundidad de Wasmtime."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "29.0.0",
            "versionEndExcluding" : "36.0.5",
            "matchCriteriaId" : "BF63410F-0A9C-4D54-B8C1-0C45DE6CAD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "40.0.0",
            "versionEndExcluding" : "40.0.3",
            "matchCriteriaId" : "AE2A659B-DE7A-4A50-AD38-4CD5127E735D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "41.0.0",
            "versionEndExcluding" : "41.0.1",
            "matchCriteriaId" : "6E5187FA-AD56-42FE-9264-169D3FED568A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.memory_guard_size",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.signals_based_traps",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.wasmtime.dev/stability-release.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/728fa07184f8da2a046f48ef9b61f869dce133a6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/799585fc362fcb991de147dd1a9f2ba0861ed440",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/ac92d9bb729ad3a6d93f0724c4c33a0c4a9c0227",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vc8c-j3xm-xj73",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2026-0006.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24398",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T19:16:16.363",
      "lastModified" : "2026-02-04T15:34:58.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, IP Restriction Middleware in Hono is vulnerable to an IP address validation bypass. The `IPV4_REGEX` pattern and `convertIPv4ToBinary` function in `src/utils/ipaddr.ts` do not properly validate that IPv4 octet values are within the valid range of 0-255, allowing attackers to craft malformed IP addresses that bypass IP-based access controls. Version 4.11.7 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.11.7, el Middleware de Restricción de IP en Hono es vulnerable a una omisión de validación de dirección IP. El patrón 'IPV4_REGEX' y la función 'convertIPv4ToBinary' en 'src/utils/ipaddr.ts' no validan correctamente que los valores de octeto IPv4 estén dentro del rango válido de 0-255, permitiendo a los atacantes crear direcciones IP malformadas que eluden los controles de acceso basados en IP. La versión 4.11.7 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-185"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.11.7",
            "matchCriteriaId" : "D0406A9F-E15B-452E-940A-ABF25EEAA871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/edbf6eea8e6c26a3937518d4ed91d8666edeec37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/releases/tag/v4.11.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-r354-f388-2fhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24881",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-27T19:16:16.517",
      "lastModified" : "2026-02-12T18:15:38.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "En GnuPG anterior a 2.5.17, un mensaje CMS (S/MIME) EnvelopedData manipulado que transporta una clave de sesión envuelta de tamaño excesivo puede causar un desbordamiento de búfer basado en pila en gpg-agent durante el manejo de PKDECRYPT--kem=CMS. Esto puede ser fácilmente aprovechado para una denegación de servicio; sin embargo, también hay corrupción de memoria que podría conducir a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "2.5.13",
            "versionEndExcluding" : "2.5.17",
            "matchCriteriaId" : "B85633E2-C26B-4A9C-8277-84071984B915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpg4win:gpg4win:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.1",
            "matchCriteriaId" : "731095A1-2A2B-4441-B76D-CD78119D7E0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.gnupg.org/T8044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/27/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-27T19:16:16.670",
      "lastModified" : "2026-02-06T17:50:53.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys."
      }, {
        "lang" : "es",
        "value" : "En GnuPG anterior a 2.5.17, existe un desbordamiento de búfer basado en pila en tpm2daemon durante el manejo del comando PKDECRYPT para claves RSA y ECC respaldadas por TPM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "2.5.13",
            "versionEndExcluding" : "2.5.17",
            "matchCriteriaId" : "B85633E2-C26B-4A9C-8277-84071984B915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpg4win:gpg4win:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.1",
            "matchCriteriaId" : "731095A1-2A2B-4441-B76D-CD78119D7E0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.gnupg.org/T8045",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/27/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-27T19:16:16.823",
      "lastModified" : "2026-02-06T18:06:07.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash)."
      }, {
        "lang" : "es",
        "value" : "En GnuPG anterior a 2.5.17, una longitud de paquete de firma larga hace que parse_signature devuelva éxito con sig-&gt;data[] establecido a un valor NULL, lo que lleva a una denegación de servicio (caída de la aplicación)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "2.5.13",
            "versionEndExcluding" : "2.5.17",
            "matchCriteriaId" : "B85633E2-C26B-4A9C-8277-84071984B915"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpg4win:gpg4win:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.1",
            "matchCriteriaId" : "731095A1-2A2B-4441-B76D-CD78119D7E0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.gnupg.org/T8049",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/01/27/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24472",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T20:16:22.950",
      "lastModified" : "2026-02-04T15:32:14.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Cache Middleware contains an information disclosure vulnerability caused by improper handling of HTTP cache control directives. The middleware does not respect standard cache control headers such as `Cache-Control: private` or `Cache-Control: no-store`, which may result in private or authenticated responses being cached and subsequently exposed to unauthorized users. Version 4.11.7 has a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.11.7, el Middleware de Caché contiene una vulnerabilidad de revelación de información causada por un manejo inadecuado de las directivas de control de caché HTTP. El middleware no respeta los encabezados de control de caché estándar como 'Cache-Control: private' o 'Cache-Control: no-store', lo que puede resultar en que respuestas privadas o autenticadas sean almacenadas en caché y posteriormente expuestas a usuarios no autorizados. La versión 4.11.7 tiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-524"
        }, {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.11.7",
            "matchCriteriaId" : "D0406A9F-E15B-452E-940A-ABF25EEAA871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/12c511745b3f1e7a3f863a23ce5f921c7fa805d1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/releases/tag/v4.11.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-6wqw-2p9w-4vw4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24473",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T20:16:23.107",
      "lastModified" : "2026-02-04T15:30:35.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulnerability that may allow attackers to read arbitrary keys from the Workers environment. Improper validation of user-controlled paths can result in unintended access to internal asset keys. Version 4.11.7 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.11.7, el middleware Serve static para el adaptador de Cloudflare Workers contiene una vulnerabilidad de revelación de información que puede permitir a los atacantes leer claves arbitrarias del entorno de Workers. La validación incorrecta de rutas controladas por el usuario puede resultar en acceso no intencionado a claves de activos internos. La versión 4.11.7 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.11.7",
            "matchCriteriaId" : "D0406A9F-E15B-452E-940A-ABF25EEAA871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/cf9a78db4d0a19b117aee399cbe9d3a6d9bfd817",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/releases/tag/v4.11.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-w332-q679-j88p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24688",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T20:16:24.193",
      "lastModified" : "2026-02-25T17:40:23.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects cannot upgrade yet, consider applying the changes from PR #3610 manually."
      }, {
        "lang" : "es",
        "value" : "pypdf es una librería PDF de Python puro, gratuita y de código abierto. Un atacante que utiliza una vulnerabilidad de bucle infinito presente en versiones anteriores a la 6.6.2 puede crear un PDF que conduce a un bucle infinito. Esto requiere acceder a los esquemas/marcadores. Esto ha sido corregido en pypdf 6.6.2. Si los proyectos aún no pueden actualizar, considere aplicar los cambios de la PR #3610 manualmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.2",
            "matchCriteriaId" : "67388CD0-8AB1-4C56-B456-7359D857C2A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/b1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3610",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-2q4j-m29v-hq73",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24771",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T20:16:24.337",
      "lastModified" : "2026-02-04T15:28:20.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, a Cross-Site Scripting (XSS) vulnerability exists in the `ErrorBoundary` component of the hono/jsx library. Under certain usage patterns, untrusted user-controlled strings may be rendered as raw HTML, allowing arbitrary script execution in the victim's browser. Version 4.11.7 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier tiempo de ejecución de JavaScript. Antes de la versión 4.11.7, existe una vulnerabilidad de Cross-Site Scripting (XSS) en el componente `ErrorBoundary` de la librería hono/jsx. Bajo ciertos patrones de uso, las cadenas no confiables controladas por el usuario pueden ser renderizadas como HTML sin procesar, permitiendo la ejecución arbitraria de scripts en el navegador de la víctima. La versión 4.11.7 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.11.7",
            "matchCriteriaId" : "D0406A9F-E15B-452E-940A-ABF25EEAA871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/2cf60046d730df9fd0aba85178f3ecfe8212d990",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-9r54-q6cx-xmh5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24858",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-27T20:16:24.477",
      "lastModified" : "2026-01-29T13:16:51.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación usando una ruta o canal alternativo [CWE-288] en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.5, FortiAnalyzer 7.4.0 hasta 7.4.9, FortiAnalyzer 7.2.0 hasta 7.2.11, FortiAnalyzer 7.0.0 hasta 7.0.15, FortiManager 7.6.0 hasta 7.6.5, FortiManager 7.4.0 hasta 7.4.9, FortiManager 7.2.0 hasta 7.2.11, FortiManager 7.0.0 hasta 7.0.15, FortiOS 7.6.0 hasta 7.6.5, FortiOS 7.4.0 hasta 7.4.10, FortiOS 7.2.0 hasta 7.2.12, FortiOS 7.0.0 hasta 7.0.18, FortiProxy 7.6.0 hasta 7.6.4, FortiProxy 7.4.0 hasta 7.4.12, FortiProxy 7.2.0 hasta 7.2.15, FortiProxy 7.0.0 hasta 7.0.22, FortiWeb 8.0.0 hasta 8.0.3, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4.0 hasta 7.4.11 puede permitir a un atacante con una cuenta de FortiCloud y un dispositivo registrado iniciar sesión en otros dispositivos registrados en otras cuentas, si la autenticación SSO de FortiCloud está habilitada en esos dispositivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-01-27",
      "cisaActionDue" : "2026-01-30",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.15",
            "matchCriteriaId" : "F2B61F1F-19A9-4BA6-B12A-ECA95C5634A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndIncluding" : "7.2.11",
            "matchCriteriaId" : "D467D1D8-1BCF-4A88-8EEE-0D8092C3AE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.10",
            "matchCriteriaId" : "BD96750D-104E-4DAE-A19E-8C92E85429F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.6",
            "matchCriteriaId" : "BDF7BF56-B998-4AAE-9B6D-C6F009F8B807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.15",
            "matchCriteriaId" : "651E452B-3C1D-4738-BDFF-7234B19C63F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndIncluding" : "7.2.11",
            "matchCriteriaId" : "36D9D75F-B292-4651-8BF0-20AFE2C016C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.10",
            "matchCriteriaId" : "3AF70FA9-34D3-4ADF-B87C-A9C31D4DC174"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.6",
            "matchCriteriaId" : "357DA889-E7C0-42B6-96A5-83C0D9E6CC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.22",
            "matchCriteriaId" : "63D22275-D430-4F99-9170-C8378FF80242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndIncluding" : "7.2.15",
            "matchCriteriaId" : "33FE9C6F-F5A1-43E4-917E-32497D6CC5A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.4.12",
            "matchCriteriaId" : "DA34D10C-0B80-4A37-94D2-CD05E865E149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndIncluding" : "7.6.4",
            "matchCriteriaId" : "A26D8D81-00EE-4A11-B693-DE85B912F267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.4.11",
            "matchCriteriaId" : "64C16483-DF84-43AA-B5D4-FA8939E4F387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndIncluding" : "7.6.6",
            "matchCriteriaId" : "B40750AD-AE67-42C3-89A5-E64F3D7F0431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.3",
            "matchCriteriaId" : "EDCDD451-D984-4EC9-AB30-42D553FF0BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.18",
            "matchCriteriaId" : "6A0CDFB7-0B78-4B3E-9E19-34E5F2479271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndIncluding" : "7.2.12",
            "matchCriteriaId" : "25DF0315-DF9C-4C51-9902-ED607B049152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.11",
            "matchCriteriaId" : "2ADAF67E-132B-4810-8919-38AC80BF59F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.6",
            "matchCriteriaId" : "96C45B06-625A-4EFE-A720-242E33611B50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-060",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24858",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1504",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-01-27T21:16:00.480",
      "lastModified" : "2026-02-06T17:45:56.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en la API Background Fetch en Google Chrome anterior a 144.0.7559.110 permitió a un atacante remoto filtrar datos de origen cruzado a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.110",
            "matchCriteriaId" : "C3E547F7-E289-4BCF-8788-32ACFE165948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_27.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/474435504",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24736",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T21:16:02.967",
      "lastModified" : "2026-02-12T21:30:02.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to define \"Webhooks\" as actions within the Rules engine. The url parameter in the webhook configuration does not appear to validate or restrict destination IP addresses. It accepts local addresses such as 127.0.0.1 or localhost. When a rule is triggered (Either manual trigger by manually calling the trigger endpoint or by a content update or any other triggers), the backend server executes an HTTP request to the user-supplied URL. Crucially, the server logs the full HTTP response in the rule execution log (lastDump field), which is accessible via the API. Which turns a \"Blind\" SSRF into a \"Full Read\" SSRF. As of time of publication, no patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Squidex es un sistema de gestión de contenido sin cabeza de código abierto y un centro de gestión de contenido. Las versiones de la aplicación hasta la 7.21.0 inclusive permiten a los usuarios definir 'Webhooks' como acciones dentro del motor de Reglas. El parámetro url en la configuración del webhook no parece validar ni restringir las direcciones IP de destino. Acepta direcciones locales como 127.0.0.1 o localhost. Cuando se activa una regla (Ya sea por activación manual llamando manualmente al endpoint de activación o por una actualización de contenido o cualquier otra activación), el servidor backend ejecuta una solicitud HTTP a la URL proporcionada por el usuario. Fundamentalmente, el servidor registra la respuesta HTTP completa en el registro de ejecución de la regla (campo lastDump), que es accesible a través de la API. Lo que convierte un SSRF 'Ciego' en un SSRF de 'Lectura Completa'. Al momento de la publicación, no hay versiones parcheadas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidex.io:squidex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.21.0",
            "matchCriteriaId" : "AB9DAE12-3516-4E2E-8CFE-D464ACDD44C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Squidex/squidex/security/advisories/GHSA-wxg2-953m-fg2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24738",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T21:16:03.117",
      "lastModified" : "2026-03-04T16:20:10.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gmrtd is a Go library for reading Machine Readable Travel Documents (MRTDs). Prior to version 0.17.2, ReadFile accepts TLVs with lengths that can range up to 4GB, which can cause unconstrained resource consumption in both memory and cpu cycles. ReadFile can consume an extended TLV with lengths well outside what would be available in ICs. It can accept something all the way up to 4GB which would take too many iterations in 256 byte chunks, and would also try to allocate memory that might not be available in constrained environments like phones. Or if an API sends data  to ReadFile, the same problem applies. The very small chunked read also locks the goroutine in  accepting data for a very large number of iterations.  projects using the gmrtd library to read files from NFCs can experience extreme slowdowns or memory consumption. A malicious NFC can just behave like the mock transceiver described above and by just sending dummy bytes as each chunk to be read, can make the receiving thread unresponsive and fill up memory on the host system. Version 0.17.2 patches the issue."
      }, {
        "lang" : "es",
        "value" : "gmrtd es una librería Go para leer Documentos de Viaje de Lectura Mecánica (MRTDs). Antes de la versión 0.17.2, ReadFile acepta TLVs con longitudes que pueden oscilar hasta 4GB, lo que puede causar un consumo de recursos sin restricciones tanto en memoria como en ciclos de CPU. ReadFile puede consumir un TLV extendido con longitudes muy superiores a lo que estaría disponible en los ICs. Puede aceptar algo de hasta 4GB, lo que requeriría demasiadas iteraciones en bloques de 256 bytes, y también intentaría asignar memoria que podría no estar disponible en entornos restringidos como los teléfonos. O si una API envía datos a ReadFile, el mismo problema se aplica. La lectura en bloques muy pequeños también bloquea la goroutine al aceptar datos durante un número muy grande de iteraciones. Los proyectos que utilizan la librería gmrtd para leer archivos de NFCs pueden experimentar ralentizaciones extremas o consumo de memoria. Un NFC malicioso puede simplemente comportarse como el transceptor simulado descrito anteriormente y, simplemente enviando bytes ficticios como cada bloque a leer, puede hacer que el hilo receptor no responda y llenar la memoria del sistema anfitrión. La versión 0.17.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmrtd:gmrtd:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.17.2",
            "matchCriteriaId" : "BE705F0C-A471-470A-95EC-5C516461B97C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gmrtd/gmrtd/commit/54469a95e5a20a8602ac1457b2110bfeb80c8891",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gmrtd/gmrtd/releases/tag/v0.17.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/gmrtd/gmrtd/security/advisories/GHSA-j49h-6577-5xwq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24740",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T21:16:03.277",
      "lastModified" : "2026-02-19T21:30:24.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dozzle is a realtime log viewer for docker containers. Prior to version 9.0.3, a flaw in Dozzle’s agent-backed shell endpoints allows a user restricted by label filters (for example, `label=env=dev`) to obtain an interactive root shell in out‑of‑scope containers (for example, `env=prod`) on the same agent host by directly targeting their container IDs. Version 9.0.3 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Dozzle es un visor de logs en tiempo real para contenedores Docker. Antes de la versión 9.0.3, una falla en los puntos finales de shell respaldados por agente de Dozzle permite a un usuario restringido por filtros de etiquetas (por ejemplo, 'label=env=dev') obtener un shell root interactivo en contenedores fuera de alcance (por ejemplo, 'env=prod') en el mismo host de agente al apuntar directamente a sus IDs de contenedor. La versión 9.0.3 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amirraminfar:dozzle:*:*:*:*:*:docker:*:*",
            "versionEndExcluding" : "9.0.3",
            "matchCriteriaId" : "A95FD36E-EB83-4D34-9E97-94EA954B4AAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/amir20/dozzle/commit/620e59aa246347ba8a27e68c532853b8a5137bc1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/amir20/dozzle/releases/tag/v9.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/amir20/dozzle/security/advisories/GHSA-m855-r557-5rc5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24741",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:56.303",
      "lastModified" : "2026-02-12T21:08:24.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ConvertXis a self-hosted online file converter. In versions prior to 0.17.0, the `POST /delete` endpoint uses a user-controlled `filename` value to construct a filesystem path and deletes it via `unlink` without sufficient validation. By supplying path traversal sequences (e.g., `../`), an attacker can delete arbitrary files outside the intended uploads directory, limited only by the permissions of the server process. Version 0.17.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "ConvertX es un conversor de archivos en línea autoalojado. En versiones anteriores a la 0.17.0, el endpoint 'POST /delete' utiliza un valor 'filename' controlado por el usuario para construir una ruta del sistema de archivos y lo elimina mediante 'unlink' sin validación suficiente. Al proporcionar secuencias de salto de ruta (por ejemplo, '../'), un atacante puede eliminar archivos arbitrarios fuera del directorio de cargas previsto, limitado únicamente por los permisos del proceso del servidor. La versión 0.17.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c4illin:convertx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.17.0",
            "matchCriteriaId" : "A579687A-7D3D-4486-8E38-458C0272DB33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/C4illin/ConvertX/commit/7a936bdc0463936463616381ca257b13babc5e77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/C4illin/ConvertX/security/advisories/GHSA-w372-w6cr-45jp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24747",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:56.470",
      "lastModified" : "2026-01-30T21:51:55.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "PyTorch es un paquete de Python que proporciona computación de tensores. Antes de la versión 2.10.0, una vulnerabilidad en el des-serializador 'weights_only' de PyTorch permite a un atacante crear un archivo de punto de control malicioso ('.pth') que, cuando se carga con 'torch.load(..., weights_only=True)', puede corromper la memoria y potencialmente conducir a ejecución de código arbitrario. La versión 2.10.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:pytorch:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2.10.0",
            "matchCriteriaId" : "A0FD31BC-C8CC-47C0-B39B-CD8BFDFE8F97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pytorch/pytorch/163122/commit/954dc5183ee9205cbe79876ad05dd2d9ae752139",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/pytorch/pytorch/issues/163105",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/pytorch/pytorch/releases/tag/v2.10.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pytorch/pytorch/security/advisories/GHSA-63cw-57p8-fm3p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24748",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:56.630",
      "lastModified" : "2026-02-25T17:59:22.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kargo manages and automates the promotion of software artifacts. Prior to versions 1.8.7, 1.7.7, and 1.6.3, a bug was found with authentication checks on the `GetConfig()` API endpoint. This allowed unauthenticated users to access this endpoint by specifying an `Authorization` header with any non-empty `Bearer` token value, regardless of validity.  This vulnerability did allow for exfiltration of configuration data such as endpoints for connected Argo CD clusters. This data could allow an attacker to enumerate cluster URLs and namespaces for use in subsequent attacks. Additionally, the same bug affected the `RefreshResource` endpoint. This endpoint does not lead to any information disclosure, but could be used by an unauthenticated attacker to perform a denial-of-service style attack against the Kargo API. `RefreshResource` sets an annotation on specific Kubernetes resources to trigger reconciliations. If run on a constant loop, this could also slow down legitimate requests to the Kubernetes API server. This problem has been patched in Kargo versiosn 1.8.7, 1.7.7, and 1.6.3. There are no workarounds for this issue."
      }, {
        "lang" : "es",
        "value" : "Kargo gestiona y automatiza la promoción de artefactos de software. Antes de las versiones 1.8.7, 1.7.7 y 1.6.3, se encontró un error con las comprobaciones de autenticación en el endpoint de la API 'GetConfig()'. Esto permitía a usuarios no autenticados acceder a este endpoint especificando una cabecera 'Authorization' con cualquier valor de token 'Bearer' no vacío, independientemente de su validez. Esta vulnerabilidad permitía la exfiltración de datos de configuración, como endpoints para clústeres de Argo CD conectados. Estos datos podrían permitir a un atacante enumerar URLs de clúster y espacios de nombres para su uso en ataques posteriores. Además, el mismo error afectaba al endpoint 'RefreshResource'. Este endpoint no conduce a ninguna revelación de información, pero podría ser utilizado por un atacante no autenticado para realizar un ataque de estilo denegación de servicio contra la API de Kargo. 'RefreshResource' establece una anotación en recursos específicos de Kubernetes para activar reconciliaciones. Si se ejecuta en un bucle constante, esto también podría ralentizar las solicitudes legítimas al servidor de la API de Kubernetes. Este problema ha sido parcheado en las versiones de Kargo 1.8.7, 1.7.7 y 1.6.3. No hay soluciones alternativas para este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "E523C042-4A9D-4F89-8D9D-AAA82F28239C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.7",
            "matchCriteriaId" : "199BD7B6-D9D9-4E14-A47F-54E8EDA91D42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.7",
            "matchCriteriaId" : "87AFF1D2-3872-463C-BA4C-D6C31C3B9EBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuity/kargo/commit/23646eaefb449a6cc2e76a8033e8a57f71369772",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akuity/kargo/commit/aa28f81ac15ad871c6eba329fc2f0417a08c39d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akuity/kargo/commit/b3297ace0d3b9e7f7128858c5c4288d77f072b8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akuity/kargo/security/advisories/GHSA-w5wv-wvrp-v5m5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24765",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:56.790",
      "lastModified" : "2026-03-03T15:25:01.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the `cleanupForCoverage()` method, which deserializes code coverage files without validation, potentially allowing remote code execution if malicious `.coverage` files are present prior to the execution of the PHPT test. The vulnerability occurs when a `.coverage` file, which should not exist before test execution, is deserialized without the `allowed_classes` parameter restriction. An attacker with local file write access can place a malicious serialized object with a `__wakeup()` method into the file system, leading to arbitrary code execution during test runs with code coverage instrumentation enabled. This vulnerability requires local file write access to the location where PHPUnit stores or expects code coverage files for PHPT tests. This can occur through CI/CD pipeline attacks, the local development environment, and/or compromised dependencies. Rather than just silently sanitizing the input via `['allowed_classes' => false]`, the maintainer has chosen to make the anomalous state explicit by treating pre-existing `.coverage` files for PHPT tests as an error condition. Starting in versions  in versions 12.5.8, 11.5.50, 10.5.62, 9.6.33, when a `.coverage` file is detected for a PHPT test prior to execution, PHPUnit will emit a clear error message identifying the anomalous state. Organizations can reduce the effective risk of this vulnerability through proper CI/CD configuration, including ephemeral runners, code review enforcement, branch protection, artifact isolation, and access control."
      }, {
        "lang" : "es",
        "value" : "PHPUnit es un framework de pruebas para PHP. Se ha descubierto una vulnerabilidad en versiones anteriores a 12.5.8, 11.5.50, 10.5.62, 9.6.33 y 8.5.52 que involucra la deserialización insegura de datos de cobertura de código en la ejecución de pruebas PHPT. La vulnerabilidad existe en el método `cleanupForCoverage()`, que deserializa archivos de cobertura de código sin validación, lo que podría permitir la ejecución remota de código si archivos `.coverage` maliciosos están presentes antes de la ejecución de la prueba PHPT. La vulnerabilidad ocurre cuando un archivo `.coverage`, que no debería existir antes de la ejecución de la prueba, es deserializado sin la restricción del parámetro `allowed_classes`. Un atacante con acceso de escritura de archivos local puede colocar un objeto serializado malicioso con un método `__wakeup()` en el sistema de archivos, lo que lleva a la ejecución de código arbitrario durante las ejecuciones de pruebas con la instrumentación de cobertura de código habilitada. Esta vulnerabilidad requiere acceso de escritura de archivos local a la ubicación donde PHPUnit almacena o espera archivos de cobertura de código para las pruebas PHPT. Esto puede ocurrir a través de ataques a la cadena de CI/CD, el entorno de desarrollo local y/o dependencias comprometidas. En lugar de simplemente sanear silenciosamente la entrada a través de `['allowed_classes' =&gt; false]`, el mantenedor ha optado por hacer explícito el estado anómalo tratando los archivos `.coverage` preexistentes para las pruebas PHPT como una condición de error. A partir de las versiones 12.5.8, 11.5.50, 10.5.62, 9.6.33, cuando se detecta un archivo `.coverage` para una prueba PHPT antes de la ejecución, PHPUnit emitirá un mensaje de error claro que identifique el estado anómalo. Las organizaciones pueden reducir el riesgo efectivo de esta vulnerabilidad a través de una configuración adecuada de CI/CD, incluyendo ejecutores efímeros, aplicación de revisión de código, protección de ramas, aislamiento de artefactos y control de acceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "8.5.52",
            "matchCriteriaId" : "5D9FEAE5-A87C-4075-B6DC-891777C96DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.6.33",
            "matchCriteriaId" : "640B3B46-B435-42D9-9CD4-8FF9F0AF3B9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.5.62",
            "matchCriteriaId" : "4C8CECCD-A520-48D3-9813-596887E7B75A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.5.50",
            "matchCriteriaId" : "8F2BC1CB-876F-443C-8B49-6B2900165493"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.5.8",
            "matchCriteriaId" : "B2941A20-1ADB-41E7-B171-C138FC2612BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sebastianbergmann/phpunit/commit/3141742e00620e2968d3d2e732d320de76685fda",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/releases/tag/10.5.63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/releases/tag/11.5.50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/releases/tag/12.5.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/releases/tag/8.5.52",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/releases/tag/9.6.33",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sebastianbergmann/phpunit/security/advisories/GHSA-vvj3-c3rp-c85p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24770",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:56.947",
      "lastModified" : "2026-01-30T21:53:46.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser contains a \"Zip Slip\" vulnerability, allowing an attacker to overwrite arbitrary files on the server (leading to Remote Code Execution) via a malicious ZIP archive. The MinerUParser class retrieves and extracts ZIP files from an external source (mineru_server_url). The extraction logic in `_extract_zip_no_root` fails to sanitize filenames within the ZIP archive. Commit 64c75d558e4a17a4a48953b4c201526431d8338f contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "RAGFlow es un motor RAG (Generación Aumentada por Recuperación) de código abierto. En la versión 0.23.1 y posiblemente versiones anteriores, el analizador MinerU contiene una vulnerabilidad 'Zip Slip', permitiendo a un atacante sobrescribir archivos arbitrarios en el servidor (lo que lleva a la ejecución remota de código) a través de un archivo ZIP malicioso. La clase MinerUParser recupera y extrae archivos ZIP de una fuente externa (mineru_server_url). La lógica de extracción en '_extract_zip_no_root' no logra sanear los nombres de archivo dentro del archivo ZIP. El commit 64c75d558e4a17a4a48953b4c201526431d8338f contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.23.1",
            "matchCriteriaId" : "E677B058-D37C-41A8-936A-FA5B83521ECF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/infiniflow/ragflow/commit/64c75d558e4a17a4a48953b4c201526431d8338f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/infiniflow/ragflow/security/advisories/GHSA-v7cf-w7gj-pgf4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24778",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:57.097",
      "lastModified" : "2026-02-02T15:21:41.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is an open source content management system. In Ghost versions 5.43.0 through 5.12.04 and 6.0.0 through 6.14.0, an attacker was able to craft a malicious link that, when accessed by an authenticated staff user or member, would execute JavaScript with the victim's permissions, potentially leading to account takeover. Ghost Portal versions 2.29.1 through 2.51.4 and 2.52.0 through 2.57.0 were vulnerable to this issue. Ghost automatically loads the latest patch of the members Portal component via CDN. For Ghost 5.x users, upgrading to v5.121.0 or later fixes the vulnerability. v5.121.0 loads Portal v2.51.5, which contains the patch. For Ghost 6.x users, upgrading to v6.15.0 or later fixes the vulnerability. v6.15.0 loads Portal v2.57.1, which contains the patch. For Ghost installations using a customized or self-hosted version of Portal, it will be necessary to manually rebuild from or update to the latest patch version."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido de código abierto. En las versiones de Ghost 5.43.0 a 5.12.04 y 6.0.0 a 6.14.0, un atacante pudo crear un enlace malicioso que, cuando era accedido por un usuario de personal o miembro autenticado, ejecutaría JavaScript con los permisos de la víctima, lo que podría llevar a la toma de control de la cuenta. Las versiones de Ghost Portal 2.29.1 a 2.51.4 y 2.52.0 a 2.57.0 eran vulnerables a este problema. Ghost carga automáticamente el último parche del componente Portal de miembros a través de CDN. Para los usuarios de Ghost 5.x, actualizar a la v5.121.0 o posterior corrige la vulnerabilidad. La v5.121.0 carga Portal v2.51.5, que contiene el parche. Para los usuarios de Ghost 6.x, actualizar a la v6.15.0 o posterior corrige la vulnerabilidad. La v6.15.0 carga Portal v2.57.1, que contiene el parche. Para las instalaciones de Ghost que utilizan una versión personalizada o autoalojada de Portal, será necesario reconstruir manualmente desde o actualizar a la última versión del parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.43.0",
            "versionEndExcluding" : "5.121.0",
            "matchCriteriaId" : "3A161191-AE97-4B51-B99C-C5E3AE212FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.15.0",
            "matchCriteriaId" : "20D558C0-11D9-467C-9D0B-0FA15D19637E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:portal:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.29.1",
            "versionEndExcluding" : "2.51.5",
            "matchCriteriaId" : "30E5D4C3-A2BD-4816-AFAB-187DB71D3FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:portal:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.52.0",
            "versionEndExcluding" : "2.57.1",
            "matchCriteriaId" : "4B387332-AE38-4C8E-BCBE-DD669474AA9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/da858e640e88e69c1773a7b7ecdc2008fa143849",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-gv6q-2m97-882h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24779",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:57.280",
      "lastModified" : "2026-01-30T14:41:25.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.14.1, a Server-Side Request Forgery (SSRF) vulnerability exists in the `MediaConnector` class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods obtain and process media from URLs provided by users, using different Python parsing libraries when restricting the target host. These two parsing libraries have different interpretations of backslashes, which allows the host name restriction to be bypassed. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources. This vulnerability is particularly critical in containerized environments like `llm-d`, where a compromised vLLM pod could be used to scan the internal network, interact with other pods, and potentially cause denial of service or access sensitive data. For example, an attacker could make the vLLM pod send malicious requests to an internal `llm-d` management endpoint, leading to system instability by falsely reporting metrics like the KV cache state. Version 0.14.1 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "vLLM es un motor de inferencia y servicio para modelos de lenguaje grandes (LLM). Antes de la versión 0.14.1, existe una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en la clase 'MediaConnector' dentro del conjunto de características multimodales del proyecto vLLM. Los métodos load_from_url y load_from_url_async obtienen y procesan medios de URLs proporcionadas por los usuarios, utilizando diferentes librerías de análisis de Python al restringir el host de destino. Estas dos librerías de análisis tienen diferentes interpretaciones de las barras invertidas, lo que permite eludir la restricción del nombre de host. Esto permite a un atacante coaccionar al servidor vLLM para que realice peticiones arbitrarias a recursos de red internos. Esta vulnerabilidad es particularmente crítica en entornos contenerizados como 'llm-d', donde un pod vLLM comprometido podría usarse para escanear la red interna, interactuar con otros pods y potencialmente causar denegación de servicio o acceder a datos sensibles. Por ejemplo, un atacante podría hacer que el pod vLLM envíe peticiones maliciosas a un endpoint de gestión interno de 'llm-d', lo que llevaría a la inestabilidad del sistema al informar falsamente métricas como el estado de la caché KV. La versión 0.14.1 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.1",
            "matchCriteriaId" : "CCFA39AA-12B5-495B-8184-4B4136B710F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/pull/32746",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24783",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-27T22:15:57.433",
      "lastModified" : "2026-03-02T21:16:22.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "soroban-fixed-point-math is a fixed-point math library for Soroban smart contacts. In versions 1.3.0 and 1.4.0, the `mulDiv(x, y, z)` function incorrectly handled cases where both the intermediate product $x * y$ and the divisor $z$ were negative. The logic assumed that if the intermediate product was negative, the final result must also be negative, neglecting the sign of $z$. This resulted in rounding being applied in the wrong direction for cases where both $x * y$ and $z$ were negative. The functions most at risk are `fixed_div_floor` and `fixed_div_ceil`, as they often use non-constant numbers as the divisor $z$ in `mulDiv`.  This error is present in all signed `FixedPoint` and `SorobanFixedPoint` implementations, including `i64`, `i128`, and `I256`. Versions 1.3.1 and 1.4.1 contain a patch. No known workarounds for this issue are available."
      }, {
        "lang" : "es",
        "value" : "soroban-fixed-point-math es una librería de matemáticas de punto fijo para contratos inteligentes de Soroban. En las versiones 1.3.0 y 1.4.0, la función 'mulDiv(x, y, z)' manejó incorrectamente los casos en que tanto el producto intermedio $x * y$ como el divisor $z$ eran negativos. La lógica asumía que si el producto intermedio era negativo, el resultado final también debía ser negativo, ignorando el signo de $z$. Esto resultó en que el redondeo se aplicara en la dirección incorrecta para los casos en que tanto $x * y$ como $z$ eran negativos. Las funciones con mayor riesgo son 'fixed_div_floor' y 'fixed_div_ceil', ya que a menudo usan números no constantes como el divisor $z$ en 'mulDiv'. Este error está presente en todas las implementaciones firmadas de 'FixedPoint' y 'SorobanFixedPoint', incluyendo 'i64', 'i128' e 'I256'. Las versiones 1.3.1 y 1.4.1 contienen un parche. No se conocen soluciones alternativas disponibles para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:script3:soroban-fixed-point-math:1.3.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFBA3A8B-B607-418C-86A3-15AFD0F3A903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:script3:soroban-fixed-point-math:1.4.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "48B58A8B-A909-4A41-B0F3-0E9CD0824255"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/script3/soroban-fixed-point-math/commit/c9233f7094198a49ed66a4d75786a8a3755c936a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/script3/soroban-fixed-point-math/releases/tag/v1.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/script3/soroban-fixed-point-math/releases/tag/v1.4.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/script3/soroban-fixed-point-math/security/advisories/GHSA-x5m4-43jf-hh65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-27T23:15:50.680",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction."
      }, {
        "lang" : "es",
        "value" : "vlt anterior a 1.0.0-rc.10 maneja incorrectamente la sanitización de rutas para tar, lo que lleva a un salto de ruta durante la extracción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vltpkg/vltpkg/pull/1334",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/vltpkg/vltpkg/releases/tag/v1.0.0-rc.10",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.koi.ai/blog/packagegate-6-zero-days-in-js-package-managers-but-npm-wont-act",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.scworld.com/news/six-javascript-zero-day-bugs-lead-to-fears-of-supply-chain-attack",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-27T23:15:50.860",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed by a non-npm package in the case of a matching name (for file, link, git, or github)."
      }, {
        "lang" : "es",
        "value" : "En Bun antes de 1.3.5, la lista predeterminada de dependencias de confianza (también conocida como lista de permisos de confianza) puede ser suplantada por un paquete que no es de npm en caso de coincidencia de nombre (para archivo, enlace, git o github)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-348"
        } ]
      } ],
      "references" : [ {
        "url" : "https://bun.com/blog/bun-v1.3.5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.koi.ai/blog/packagegate-6-zero-days-in-js-package-managers-but-npm-wont-act",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.scworld.com/news/six-javascript-zero-day-bugs-lead-to-fears-of-supply-chain-attack",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23830",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:50.170",
      "lastModified" : "2026-02-12T20:47:16.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Versions prior to 0.8.26 have a sandbox escape vulnerability due to `AsyncFunction` not being isolated in `SandboxFunction`. The library attempts to sandbox code execution by replacing the global `Function` constructor with a safe, sandboxed version (`SandboxFunction`). This is handled in `utils.ts` by mapping `Function` to `sandboxFunction` within a map used for lookups. However, before version 0.8.26, the library did not include mappings for `AsyncFunction`, `GeneratorFunction`, and `AsyncGeneratorFunction`. These constructors are not global properties but can be accessed via the `.constructor` property of an instance (e.g., `(async () => {}).constructor`). In `executor.ts`, property access is handled. When code running inside the sandbox accesses `.constructor` on an async function (which the sandbox allows creating), the `executor` retrieves the property value. Since `AsyncFunction` was not in the safe-replacement map, the `executor` returns the actual native host `AsyncFunction` constructor. Constructors for functions in JavaScript (like `Function`, `AsyncFunction`) create functions that execute in the global scope. By obtaining the host `AsyncFunction` constructor, an attacker can create a new async function that executes entirely outside the sandbox context, bypassing all restrictions and gaining full access to the host environment (Remote Code Execution). Version 0.8.26 patches this vulnerability."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una librería de sandboxing de JavaScript. Las versiones anteriores a la 0.8.26 tienen una vulnerabilidad de escape de sandbox debido a que `AsyncFunction` no está aislada en `SandboxFunction`. La librería intenta aplicar un sandbox a la ejecución de código reemplazando el constructor global `Function` con una versión segura y con sandbox (`SandboxFunction`). Esto se maneja en `utils.ts` mapeando `Function` a `sandboxFunction` dentro de un mapa utilizado para búsquedas. Sin embargo, antes de la versión 0.8.26, la librería no incluía mapeos para `AsyncFunction`, `GeneratorFunction` y `AsyncGeneratorFunction`. Estos constructores no son propiedades globales, pero se puede acceder a ellos a través de la propiedad `.constructor` de una instancia (por ejemplo, `(async () =&gt; {}).constructor`). En `executor.ts`, se maneja el acceso a propiedades. Cuando el código que se ejecuta dentro del sandbox accede a `.constructor` en una función asíncrona (que el sandbox permite crear), el `executor` recupera el valor de la propiedad. Dado que `AsyncFunction` no estaba en el mapa de reemplazo seguro, el `executor` devuelve el constructor `AsyncFunction` nativo real del host. Los constructores para funciones en JavaScript (como `Function`, `AsyncFunction`) crean funciones que se ejecutan en el ámbito global. Al obtener el constructor `AsyncFunction` del host, un atacante puede crear una nueva función asíncrona que se ejecuta completamente fuera del contexto del sandbox, eludiendo todas las restricciones y obteniendo acceso total al entorno del host (ejecución remota de código). La versión 0.8.26 corrige esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        }, {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.26",
            "matchCriteriaId" : "39569A92-6C8F-4E00-8280-F8AA92EA4150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/commit/345aee6566e47979dee5c337b925b141e7f78ccd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-wxhw-j4hc-fmq6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24134",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:50.330",
      "lastModified" : "2026-03-17T15:39:51.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StudioCMS is a server-side-rendered, Astro native, headless content management system. Versions prior to 0.2.0 contain a Broken Object Level Authorization (BOLA) vulnerability in the Content Management feature that allows users with the \"Visitor\" role to access draft content created by Editor/Admin/Owner users. Version 0.2.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "StudioCMS es un sistema de gestión de contenido sin cabeza, nativo de Astro, renderizado en el lado del servidor. Las versiones anteriores a la 0.2.0 contienen una vulnerabilidad de Autorización de Nivel de Objeto Rota (BOLA) en la función de Gestión de Contenido que permite a los usuarios con el rol de 'Visitante' acceder a contenido borrador creado por usuarios Editor/Administrador/Propietario. La versión 0.2.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:studiocms:studiocms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.0",
            "matchCriteriaId" : "74E3AF07-66A8-49C1-9B3B-8D0786185FC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/withstudiocms/studiocms/commit/efc10bee20db090fdd75463622c30dda390c50ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/withstudiocms/studiocms/releases/tag/studiocms%400.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/withstudiocms/studiocms/security/advisories/GHSA-8cw6-53m5-4932",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24784",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:50.480",
      "lastModified" : "2026-02-04T20:13:46.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a content editor could inject scripts in module headers/footers that would run for other users. Versions 9.13.10 and 10.2.0 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "DNN (anteriormente DotNetNuke) es una plataforma de gestión de contenido web (CMS) de código abierto en el ecosistema de Microsoft. A partir de la versión 9.0.0 y anterior a las versiones 9.13.10 y 10.2.0, un editor de contenido podría inyectar scripts en los encabezados/pies de página de los módulos que se ejecutarían para otros usuarios. Las versiones 9.13.10 y 10.2.0 contienen una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.13.10",
            "matchCriteriaId" : "702DB18F-9415-4782-97AD-BE8BB66C7D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.0",
            "matchCriteriaId" : "183DA3B3-D5F9-4C05-93A3-4B17DE048679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-jjwg-4948-6wxp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24785",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:50.623",
      "lastModified" : "2026-02-27T21:39:21.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clatter is a no_std compatible, pure Rust implementation of the Noise protocol framework with post-quantum support. Versiosn prior to2.2.0 have a protocol compliance vulnerability. The library allowed post-quantum handshake patterns that violated the PSK validity rule (Noise Protocol Framework Section 9.3). This could allow PSK-derived keys to be used for encryption without proper randomization by self-chosen ephemeral randomness, weakening security guarantees and potentially allowing catastrophic key reuse. Affected default patterns include `noise_pqkk_psk0`, `noise_pqkn_psk0`, `noise_pqnk_psk0`, `noise_pqnn_psk0``, and some hybrid variants. Users of these patterns may have been using handshakes that do not meet the intended security properties. The issue is fully patched and released in Clatter v2.2.0. The fixed version includes runtime checks to detect offending handshake patterns. As a workaround, avoid using offending `*_psk0` variants of post-quantum patterns. Review custom handshake patterns carefully."
      }, {
        "lang" : "es",
        "value" : "Clatter es una implementación pura de Rust, compatible con no_std, del framework del protocolo Noise con soporte post-cuántico. Las versiones anteriores a 2.2.0 tienen una vulnerabilidad de cumplimiento del protocolo. La librería permitía patrones de handshake post-cuánticos que violaban la regla de validez de PSK (Framework del Protocolo Noise Sección 9.3). Esto podría permitir que las claves derivadas de PSK se usaran para cifrado sin una aleatorización adecuada por aleatoriedad efímera auto-elegida, debilitando las garantías de seguridad y potencialmente permitiendo la reutilización catastrófica de claves. Los patrones predeterminados afectados incluyen 'noise_pqkk_psk0', 'noise_pqkn_psk0', 'noise_pqnk_psk0', 'noise_pqnn_psk0', y algunas variantes híbridas. Los usuarios de estos patrones pueden haber estado utilizando handshakes que no cumplen con las propiedades de seguridad previstas. El problema está completamente parcheado y lanzado en Clatter v2.2.0. La versión corregida incluye comprobaciones en tiempo de ejecución para detectar patrones de handshake ofensivos. Como solución alternativa, evite usar las variantes ofensivas '*_psk0' de patrones post-cuánticos. Revise cuidadosamente los patrones de handshake personalizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmlepisto:clatter:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "F10608C7-D4BE-4334-9389-2ACE5BBA204D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jmlepisto/clatter/commit/b65ae6e9b8019bed5407771e21f89ddff17c5a71",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jmlepisto/clatter/security/advisories/GHSA-253q-9q78-63x4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://noiseprotocol.org/noise.html#validity-rule",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24833",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:50.773",
      "lastModified" : "2026-02-04T20:12:35.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, a module could install with richtext in its description field which could contain scripts that will run for user in the Persona Bar. Versions 9.13.10 and 10.2.0 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "DNN (anteriormente DotNetNuke) es una plataforma de gestión de contenido web (CMS) de código abierto en el ecosistema de Microsoft. Antes de las versiones 9.13.10 y 10.2.0, un módulo podía instalarse con texto enriquecido en su campo de descripción, el cual podía contener scripts que se ejecutarían para el usuario en la Barra Persona. Las versiones 9.13.10 y 10.2.0 contienen una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.13.10",
            "matchCriteriaId" : "44A2C358-234E-40C4-BC42-942B1E8CB6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.0",
            "matchCriteriaId" : "183DA3B3-D5F9-4C05-93A3-4B17DE048679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-9r3h-mpf8-25gj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24836",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:50.910",
      "lastModified" : "2026-02-04T20:11:52.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, extensions could write richtext in log notes which can include scripts that would run in the PersonaBar when displayed. Versions 9.13.10 and 10.2.0 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "DNN (anteriormente DotNetNuke) es una plataforma de gestión de contenido web de código abierto (CMS) en el ecosistema de Microsoft. A partir de la versión 9.0.0 y anterior a las versiones 9.13.10 y 10.2.0, las extensiones podían escribir texto enriquecido en las notas de registro, que pueden incluir scripts que se ejecutarían en la PersonaBar al mostrarse. Las versiones 9.13.10 y 10.2.0 contienen una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.13.10",
            "matchCriteriaId" : "702DB18F-9415-4782-97AD-BE8BB66C7D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.0",
            "matchCriteriaId" : "183DA3B3-D5F9-4C05-93A3-4B17DE048679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2g5g-hcgh-q3rp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24837",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T00:15:51.050",
      "lastModified" : "2026-02-04T20:11:09.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 9.0.0 and prior to versions 9.13.10 and 10.2.0, a module friendly name could include scripts that will run during some module operations in the Persona Bar. Versions 9.13.10 and 10.2.0 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "DNN (anteriormente DotNetNuke) es una plataforma de gestión de contenido web de código abierto (CMS) en el ecosistema de Microsoft. A partir de la versión 9.0.0 y antes de las versiones 9.13.10 y 10.2.0, un nombre descriptivo de módulo podría incluir scripts que se ejecutarán durante algunas operaciones del módulo en la Persona Bar. Las versiones 9.13.10 y 10.2.0 contienen una corrección para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.13.10",
            "matchCriteriaId" : "702DB18F-9415-4782-97AD-BE8BB66C7D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.0",
            "matchCriteriaId" : "183DA3B3-D5F9-4C05-93A3-4B17DE048679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vm5q-8qww-h238",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21569",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2026-01-28T01:16:14.187",
      "lastModified" : "2026-02-02T13:22:24.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. \n\t\n\tThis XXE (XML External Entity Injection) vulnerability, with a CVSS Score of 7.9, allows an authenticated attacker to access local and remote content which has high impact to confidentiality, low impact to integrity, high impact to availability, and requires no user interaction. \n\t\n\tAtlassian recommends that Crowd Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:\n\t\t\n\t\t* Crowd Data Center and Server 7.1: Upgrade to a release greater than or equal to 7.1.3\n\t\t\n\t\t\n\t\n\tSee the release notes (https://confluence.atlassian.com/crowd/crowd-release-notes-199094.html). You can download the latest version of Crowd Data Center and Server from the download center (https://www.atlassian.com/software/crowd/download-archive). \n\t\n\tThis vulnerability was reported via our Atlassian (Internal) program."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad XXE (inyección de entidad externa XML) de alta gravedad fue introducida en la versión 7.1.0 de Crowd Data Center y Server.\n\nEsta vulnerabilidad XXE (inyección de entidad externa XML), con una puntuación CVSS de 7.9, permite a un atacante autenticado acceder a contenido local y remoto, lo que tiene un alto impacto en la confidencialidad, bajo impacto en la integridad, alto impacto en la disponibilidad y no requiere interacción del usuario.\n\nAtlassian recomienda que los clientes de Crowd Data Center y Server actualicen a la última versión; si no puede hacerlo, actualice su instancia a una de las versiones fijas compatibles especificadas:\n\n* Crowd Data Center y Server 7.1: Actualice a una versión mayor o igual a 7.1.3\n\nConsulte las notas de la versión (https://confluence.atlassian.com/crowd/crowd-release-notes-199094.html). Puede descargar la última versión de Crowd Data Center y Server desde el centro de descargas (https://www.atlassian.com/software/crowd/download-archive).\n\nEsta vulnerabilidad fue reportada a través de nuestro programa Atlassian (Interno)."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@atlassian.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.3",
            "matchCriteriaId" : "1D58C58C-051C-4A3E-BEC8-296F8086DDF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://confluence.atlassian.com/pages/viewpage.action?pageId=1712324819",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CWD-6453",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24838",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:14.350",
      "lastModified" : "2026-02-04T20:10:41.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0,  module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.13.10 and 10.2.0 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "DNN (anteriormente DotNetNuke) es una plataforma de gestión de contenido web de código abierto (CMS) en el ecosistema de Microsoft. Antes de las versiones 9.13.10 y 10.2.0, el título del módulo admitía texto enriquecido que podría incluir scripts que se ejecutarían en ciertos escenarios. Las versiones 9.13.10 y 10.2.0 contienen una corrección para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.13.10",
            "matchCriteriaId" : "44A2C358-234E-40C4-BC42-942B1E8CB6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.0",
            "matchCriteriaId" : "183DA3B3-D5F9-4C05-93A3-4B17DE048679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-w9pf-h6m6-v89h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24839",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:14.490",
      "lastModified" : "2026-02-04T17:58:11.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into performing unintended actions. Version 0.26.6 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Dokploy es una Plataforma como Servicio (PaaS) gratuita y autoalojable. En versiones anteriores a la 0.26.6, la interfaz web de Dokploy es vulnerable a ataques de clickjacking debido a la ausencia de encabezados anti-frame. Esto permite a los atacantes incrustar páginas de Dokploy en iframes maliciosos y engañar a los usuarios autenticados para que realicen acciones no deseadas. La versión 0.26.6 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokploy:dokploy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.26.6",
            "matchCriteriaId" : "D811B470-39CF-4FCD-A0A6-77EBBE229498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dokploy/dokploy/commit/9714695d5a78fe24496f989ab81807ba04699df8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Dokploy/dokploy/pull/3500",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Dokploy/dokploy/security/advisories/GHSA-c94j-8wgf-2q9q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24840",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:14.647",
      "lastModified" : "2026-02-04T17:55:14.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, a hardcoded credential in the provided installation script (located at https://dokploy.com/install.sh, line 154) uses a hardcoded password when creating the database container. This means that nearly all Dokploy installations use the same database credentials and could be compromised. Version 0.26.6 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Dokploy es una Plataforma como Servicio (PaaS) gratuita y autoalojable. En versiones anteriores a la 0.26.6, una credencial codificada en el script de instalación proporcionado (ubicado en HTTPS://dokploy.com/install.sh, línea 154) utiliza una contraseña codificada al crear el contenedor de la base de datos. Esto significa que casi todas las instalaciones de Dokploy utilizan las mismas credenciales de la base de datos y podrían verse comprometidas. La versión 0.26.6 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokploy:dokploy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.26.6",
            "matchCriteriaId" : "D811B470-39CF-4FCD-A0A6-77EBBE229498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dokploy/dokploy/commit/b902c160a256ad345ac687c87eb092f1fab2c64d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Dokploy/dokploy/security/advisories/GHSA-jr65-3j3w-gjmc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24841",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:14.797",
      "lastModified" : "2026-02-04T17:37:04.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, a critical command injection vulnerability exists in Dokploy's WebSocket endpoint `/docker-container-terminal`. The `containerId` and `activeWay` parameters are directly interpolated into shell commands without sanitization, allowing authenticated attackers to execute arbitrary commands on the host server. Version 0.26.6 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Dokploy es una Plataforma como Servicio (PaaS) gratuita y autoalojable. En versiones anteriores a la 0.26.6, existe una vulnerabilidad crítica de inyección de comandos en el endpoint WebSocket de Dokploy `/docker-container-terminal`. Los parámetros `containerId` y `activeWay` se interpolan directamente en comandos de shell sin sanitización, permitiendo a atacantes autenticados ejecutar comandos arbitrarios en el servidor anfitrión. La versión 0.26.6 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dokploy:dokploy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.26.6",
            "matchCriteriaId" : "D811B470-39CF-4FCD-A0A6-77EBBE229498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dokploy/dokploy/blob/canary/apps/dokploy/server/wss/docker-container-terminal.ts",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Dokploy/dokploy/commit/74e0bd5fe3ef7199f44fcd19c6f5a2f09b806d6f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Dokploy/dokploy/security/advisories/GHSA-vx6x-6559-x35r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24842",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:14.947",
      "lastModified" : "2026-02-02T14:30:10.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "node-tar, un Tar para Node.js, contiene una vulnerabilidad en versiones anteriores a la 7.5.7 donde la comprobación de seguridad para las entradas de enlaces duros utiliza semánticas de resolución de rutas diferentes a la lógica real de creación de enlaces duros. Esta discrepancia permite a un atacante crear un archivo TAR malicioso que omite las protecciones de salto de ruta y crea enlaces duros a archivos arbitrarios fuera del directorio de extracción. La versión 7.5.7 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isaacs:tar:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.5.7",
            "matchCriteriaId" : "BE6D2DB4-4688-4527-B851-2AEAB030313F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24850",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:15.097",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto `ml-dsa` crate incorrectly accepts signatures with repeated (duplicate) hint indices. According to the ML-DSA specification (FIPS 204 / RFC 9881), hint indices within each polynomial must be **strictly increasing**. The current implementation uses a non-strict monotonic check (`<=` instead of `<`), allowing duplicate indices. This is a regression bug. The original implementation was correct, but a commit in version 0.0.4 inadvertently changed the strict `<` comparison to `<=`, introducing the vulnerability. Version 0.1.0-rc.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "El *crate* ML-DSA es una implementación en Rust del Estándar de Firma Digital Basado en Módulos de Retículos (ML-DSA). A partir de la versión 0.0.4 y antes de la versión 0.1.0-rc.4, la implementación de verificación de firma ML-DSA en el *crate* 'ml-dsa' de RustCrypto acepta incorrectamente firmas con índices de pista repetidos (duplicados). Según la especificación ML-DSA (FIPS 204 / RFC 9881), los índices de pista dentro de cada polinomio deben ser estrictamente crecientes. La implementación actual utiliza una comprobación monótona no estricta ('&lt;=' en lugar de '&lt;'), permitiendo índices duplicados. Esto es un error de regresión. La implementación original era correcta, pero un *commit* en la versión 0.0.4 cambió inadvertidamente la comparación estricta '&lt;' a '&lt;=', introduciendo la vulnerabilidad. La versión 0.1.0-rc.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://csrc.nist.gov/pubs/fips/204/final",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://datatracker.ietf.org/doc/html/rfc9881",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/C2SP/wycheproof",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_44_verify_test.json",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_65_verify_test.json",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/C2SP/wycheproof/blob/master/testvectors_v1/mldsa_87_verify_test.json",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/commit/400961412be2e2ab787942cf30e0a9b66b37a54a",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/commit/b01c3b73dd08d0094e089aa234f78b6089ec1f38",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/issues/894",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/pull/895",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/RustCrypto/signatures/security/advisories/GHSA-5x2r-hc65-25f9",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T01:16:15.260",
      "lastModified" : "2026-02-03T14:26:13.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, a heap buffer over-read when the strlen() function attempts to read a non-null-terminated buffer potentially leaking heap memory contents and causing application termination. This vulnerability affects users of the iccDEV library who process ICC color profiles. ICC Profile Injection vulnerabilities arise when user-controllable input is incorporated into ICC profile data or other structured binary blobs in an unsafe manner. Version 2.3.1.2 contains a fix for the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, una lectura excesiva del búfer de pila cuando la función strlen() intenta leer un búfer no terminado en nulo potencialmente filtra el contenido de la memoria de pila y causa la terminación de la aplicación. Esta vulnerabilidad afecta a los usuarios de la librería iccDEV que procesan perfiles de color ICC. Las vulnerabilidades de inyección de perfiles ICC surgen cuando la entrada controlable por el usuario se incorpora en los datos del perfil ICC u otros blobs binarios estructurados de manera insegura. La versión 2.3.1.2 contiene una corrección para el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/3092499cd4d0775f4a716b999899f9c26f9bc614",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/540",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-q8g2-mp32-3j7f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1505",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T02:16:00.083",
      "lastModified" : "2026-01-30T21:47:30.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DIR-615 4.10. Este problema afecta un procesamiento desconocido del archivo /set_temp_nodes.php del componente Filtro de URL. La manipulación resulta en inyección de comandos del sistema operativo. El ataque puede ser ejecutado remotamente. El exploit se ha hecho público y podría ser usado. Esta vulnerabilidad solo afecta a productos que ya no cuentan con soporte por parte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615_firmware:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C17E5F0-B947-4C63-922B-27EA638A4682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6E083-26F4-4D0C-AE4A-C836E4DE7C4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pentagonal-time-3a7.notion.site/D-Link-DIR-615-2e7e5dd4c5a580109a14fdeb6f105cd6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.737061",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1513",
      "sourceIdentifier" : "cve@navercorp.com",
      "published" : "2026-01-28T02:16:00.310",
      "lastModified" : "2026-02-02T15:52:36.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding."
      }, {
        "lang" : "es",
        "value" : "billboard.js anterior a la versión 3.18.0 permite a un atacante ejecutar JavaScript malicioso debido a una sanitización incorrecta durante la vinculación de opciones de gráfico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@navercorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naver:billboard.js:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.18.0",
            "matchCriteriaId" : "37EE82A8-0A1B-4082-9C82-4653E6B987AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.naver.com/detail/cve-2026-1513.html",
        "source" : "cve@navercorp.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1506",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T03:15:50.367",
      "lastModified" : "2026-01-30T21:46:35.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DIR-615 4.10. Impacted is an unknown function of the file /adv_mac_filter.php of the component MAC Filter Configuration. This manipulation of the argument mac causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en D-Link DIR-615 4.10. Afectada es una función desconocida del archivo /adv_mac_filter.PHP del componente Configuración de Filtro MAC. Esta manipulación del argumento mac causa inyección de comandos del sistema operativo. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no son soportados por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615_firmware:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C17E5F0-B947-4C63-922B-27EA638A4682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB6E083-26F4-4D0C-AE4A-C836E4DE7C4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pentagonal-time-3a7.notion.site/DIR-615-MAC_FILTER-2e7e5dd4c5a58091b027f50271cc7c6a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343118",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343118",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.737078",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1514",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-01-28T04:15:59.880",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Official Document Management System developed by 2100 Technology has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to modify front-end code to read all official documents."
      }, {
        "lang" : "es",
        "value" : "Sistema de Gestión de Documentos Oficiales desarrollado por 2100 Technology tiene una vulnerabilidad de Autorización Incorrecta, permitiendo a atacantes remotos autenticados modificar el código de front-end para leer todos los documentos oficiales."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10659-264cd-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10658-c5a07-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24859",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.090",
      "lastModified" : "2026-01-28T04:16:00.090",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24860",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.177",
      "lastModified" : "2026-01-28T04:16:00.177",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24861",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.237",
      "lastModified" : "2026-01-28T04:16:00.237",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24862",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.300",
      "lastModified" : "2026-01-28T04:16:00.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24863",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.353",
      "lastModified" : "2026-01-28T04:16:00.353",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24864",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.413",
      "lastModified" : "2026-01-28T04:16:00.413",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24865",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.470",
      "lastModified" : "2026-01-28T04:16:00.470",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24866",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.527",
      "lastModified" : "2026-01-28T04:16:00.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24867",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-28T04:16:00.587",
      "lastModified" : "2026-01-28T04:16:00.587",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1083",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T06:15:49.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form field configuration parameters in all versions up to, and including, 1.5.60 due to insufficient input sanitization and output escaping on the 'Min length/characters' and 'Max length/characters' field configuration values. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the form builder interface. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Appointment Hour Booking – Booking Calendar para WordPress es vulnerable a cross-site scripting almacenado a través de parámetros de configuración de campos de formulario en todas las versiones hasta la 1.5.60, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los valores de configuración de campo 'Min length/characters' y 'Max length/characters'. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a la interfaz del constructor de formularios. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/appointment-hour-booking/tags/1.5.57/js/fields-admin/01_fbuilder.ftext.js#L64",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/appointment-hour-booking/trunk/js/fields-admin/01_fbuilder.ftext.js#L64",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3442650%40appointment-hour-booking&new=3442650%40appointment-hour-booking&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a5cb1fea-134f-4c81-8f2f-76ee42df7f77?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1298",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T06:15:49.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Replace Image plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.5.2. This is due to missing capability checks on the `image_replacement_from_url` function that is hooked to the `eri_from_url` AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to replace arbitrary image attachments on the site with images from external URLs, potentially enabling site defacement, phishing attacks, or content manipulation."
      }, {
        "lang" : "es",
        "value" : "El plugin Easy Replace Image para WordPress es vulnerable a la falta de autorización en todas las versiones hasta la 3.5.2, inclusive. Esto se debe a la falta de comprobaciones de capacidad en la función 'image_replacement_from_url' que está enganchada a la acción AJAX 'eri_from_url'. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, reemplacen archivos adjuntos de imagen arbitrarios en el sitio con imágenes de URLs externas, lo que podría permitir la desfiguración del sitio, ataques de phishing o manipulación de contenido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-replace-image/tags/3.5.2/easy-replace-image.php#L961",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-replace-image/trunk/easy-replace-image.php#L961",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3447984%40easy-replace-image&new=3447984%40easy-replace-image&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/27332c13-c25f-47ec-980d-035fc35ce553?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0825",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T07:16:00.133",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to download sensitive form submission data containing personally identifiable information (PII) by accessing the CSV export endpoint with an export key that is exposed in publicly accessible page source code. The vulnerability is created because while the shortcode properly filters displayed entries by user, the CSV export handler completely bypasses this filtering and exports all entries regardless of user permissions."
      }, {
        "lang" : "es",
        "value" : "El plugin Database para Contact Form 7, WPforms, formularios de Elementor para WordPress es vulnerable a una elusión de autorización debido a la falta de comprobaciones de capacidad en la funcionalidad de exportación CSV en todas las versiones hasta la 1.4.5, ambas inclusive. Esto hace posible que atacantes no autenticados descarguen datos sensibles de envío de formularios que contienen información de identificación personal (PII) al acceder al endpoint de exportación CSV con una clave de exportación que está expuesta en el código fuente de la página accesible públicamente. La vulnerabilidad se crea porque, mientras que el shortcode filtra correctamente las entradas mostradas por usuario, el manejador de exportación CSV elude completamente este filtrado y exporta todas las entradas independientemente de los permisos del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/contact-form-entries/tags/1.4.5/contact-form-entries.php#L76",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contact-form-entries/trunk/contact-form-entries.php#L301",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contact-form-entries/trunk/contact-form-entries.php#L76",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contact-form-entries/trunk/templates/leads-table.php#L10",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3442962%40contact-form-entries&new=3442962%40contact-form-entries&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4048ae11-fece-42aa-baf3-c636c4875635?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0832",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T07:16:00.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The New User Approve plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to approve or deny user accounts, retrieve sensitive user information including emails and roles, and force logout of privileged users."
      }, {
        "lang" : "es",
        "value" : "El plugin New User Approve para WordPress es vulnerable a acceso no autorizado a datos y modificación de datos debido a una comprobación de capacidad faltante en múltiples endpoints de la API REST en todas las versiones hasta la 3.2.2, inclusive. Esto hace posible que atacantes no autenticados aprueben o denieguen cuentas de usuario, recuperen información sensible del usuario, incluyendo correos electrónicos y roles, y fuercen el cierre de sesión de usuarios privilegiados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/new-user-approve/tags/3.2.1/includes/end-points/mobile-api.php#L24",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/new-user-approve/tags/3.2.1/includes/end-points/mobile-api.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/new-user-approve/trunk/includes/end-points/mobile-api.php#L24",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/new-user-approve/trunk/includes/end-points/mobile-api.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3425140%40new-user-approve&new=3425140%40new-user-approve&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3442291%40new-user-approve&new=3442291%40new-user-approve&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f86a69ab-2fc5-4c84-872b-929dbec429cd?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1244",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T07:16:00.513",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoop_campaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the user-supplied 'id' parameter in the forms_bridge_financoop_shortcode_error function. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Forms Bridge – Infinite integrations para WordPress es vulnerable a cross-site scripting almacenado a través del atributo de shortcode 'id' en el shortcode 'financoop_campaign' en todas las versiones hasta la 4.2.5, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en el parámetro 'id' proporcionado por el usuario en la función forms_bridge_financoop_shortcode_error. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/forms-bridge/tags/4.2.3/addons/financoop/shortcodes.php#L389",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/forms-bridge/trunk/addons/financoop/shortcodes.php#L389",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3446693%40forms-bridge&new=3446693%40forms-bridge&sfp_email=&sfph_mail=#file1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3e047822-5766-4e7f-be89-f4a15f0e6d51?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1295",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T07:16:00.693",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Buy Now Plus – Buy Now buttons for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buynowplus' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on shortcode attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Buy Now Plus – Buy Now buttons para Stripe para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'buynowplus' en todas las versiones hasta la 1.0.2, inclusive, debido a una sanitización de entrada y escape de salida insuficientes en los atributos del shortcode. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/buy-now-plus/tags/1.0.2/class-bnp-buttons.php#L17",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/buy-now-plus/tags/1.0.2/class-bnp-buttons.php#L36",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3444416%40buy-now-plus&new=3444416%40buy-now-plus&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/87d228bb-eb5b-44ca-91f7-ada730635a3f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1310",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T07:16:00.900",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple calendar for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.6.6. This is due to missing capability checks on the `miga_ajax_editor_cal_delete` function that is hooked to the `miga_editor_cal_delete` AJAX action with both authenticated and unauthenticated access enabled. This makes it possible for unauthenticated attackers to delete arbitrary calendar entries by sending a request with a valid nonce and the calendar entry ID."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple calendar para Elementor para WordPress es vulnerable a Falta de Autorización en todas las versiones hasta la 1.6.6, inclusive. Esto se debe a la falta de comprobaciones de capacidad en la función `miga_ajax_editor_cal_delete` que está enganchada a la acción AJAX `miga_editor_cal_delete` con acceso autenticado y no autenticado habilitado. Esto hace posible que atacantes no autenticados eliminen entradas de calendario arbitrarias enviando una solicitud con un nonce válido y el ID de la entrada del calendario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-calendar-for-elementor/tags/1.6.6/widget/includes/backend_functions.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-calendar-for-elementor/trunk/widget/includes/backend_functions.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3444617%40simple-calendar-for-elementor&new=3444617%40simple-calendar-for-elementor&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e537c56d-7c5e-4f21-b266-ef3d1a87caf2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1466",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-28T07:16:01.087",
      "lastModified" : "2026-02-12T20:43:24.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image (except for image/svg+xml, see CVE-2022-30110, CVE-2024-12326 and CVE-2025-7066), video and audio. However, it was possible to bypass this check by sending a manipulated HTTP request with an invalid MIME type like image. When doing the preview, the browser tries to automatically detect the MIME type resulting in detecting SVG and possibly executing JavaScript code. To prevent this, MIME sniffing is disabled by sending the HTTP header X-Content-Type-Options: nosniff."
      }, {
        "lang" : "es",
        "value" : "Jirafeau normalmente impide la previsualización del navegador para archivos de texto debido a la posibilidad de que, por ejemplo, documentos SVG y HTML pudieran ser explotados para cross-site scripting. Esto se hacía almacenando el tipo MIME de un archivo y permitiendo solo la previsualización del navegador para tipos MIME que comienzan con 'image' (excepto para 'image/svg+xml', ver CVE-2022-30110, CVE-2024-12326 y CVE-2025-7066), video y audio. Sin embargo, era posible eludir esta comprobación enviando una solicitud HTTP manipulada con un tipo MIME inválido como 'image'. Al realizar la previsualización, el navegador intenta detectar automáticamente el tipo MIME, lo que resulta en la detección de SVG y posiblemente la ejecución de código JavaScript. Para evitar esto, el MIME sniffing está deshabilitado enviando la cabecera HTTP X-Content-Type-Options: nosniff."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jirafeau:jirafeau:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.1",
            "matchCriteriaId" : "91A060C5-0315-4252-B822-BDA2D030277B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/jirafeau/Jirafeau/-/commit/747afb20bfcff14bb67e40e7035d47a6311ba3e1",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2022-30110",
        "source" : "cve@gitlab.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2024-12326",
        "source" : "cve@gitlab.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2025-7066",
        "source" : "cve@gitlab.com",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0818",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-01-28T08:16:03.113",
      "lastModified" : "2026-04-13T15:17:15.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email. This vulnerability was fixed in Thunderbird 147.0.1 and Thunderbird 140.7.1."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario solicitó explícitamente a Thunderbird que descifrara un mensaje OpenPGP en línea que estaba incrustado en una sección de texto de un correo electrónico que estaba formateado y estilizado con HTML y CSS, entonces el contenido descifrado se renderizaba en un contexto en el que los estilos CSS de los mensajes externos estaban activos. Si el usuario había permitido adicionalmente la carga del contenido remoto referenciado por el mensaje de correo electrónico externo, y el correo electrónico fue diseñado por el remitente utilizando una combinación de reglas CSS, fuentes y animaciones, entonces era posible extraer el contenido secreto del correo electrónico. Esta vulnerabilidad afecta a Thunderbird &lt; 147.0.1 y Thunderbird &lt; 140.7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.7.1",
            "matchCriteriaId" : "43089B19-3EF8-471F-9D20-3ACD1D15A8FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0.1",
            "matchCriteriaId" : "AC3CE289-5785-45C3-90D4-8B4F4416BD36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1881530",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-08/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1054",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T08:16:03.230",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RegistrationMagic plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.0.7.4. This is due to missing nonce verification and capability checks on the rm_set_otp AJAX action handler. This makes it possible for unauthenticated attackers to modify arbitrary plugin settings, including reCAPTCHA keys, security settings, and frontend menu titles."
      }, {
        "lang" : "es",
        "value" : "El plugin RegistrationMagic para WordPress es vulnerable a la falta de autorización en versiones hasta la 6.0.7.4, inclusive. Esto se debe a la falta de verificación de nonce y de comprobaciones de capacidad en el manejador de acciones AJAX rm_set_otp. Esto permite a atacantes no autenticados modificar configuraciones arbitrarias del plugin, incluyendo claves de reCAPTCHA, configuraciones de seguridad y títulos de menú de frontend."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.6.9/admin/controllers/class_rm_options_controller.php#L209",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3444777/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/daf4d246-85f3-48b3-985f-982fea4772f1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1389",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T08:16:03.400",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.4. This is due to the plugin not verifying that a user has permission to access the requested resource in the 'bplde_save_document_library', 'bplde_get_single', and 'bplde_delete_document_library' AJAX actions. This makes it possible for authenticated attackers, with Author-level access and above, to read, modify, and delete Document Library entries created by other users, including administrators, via the 'id' parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Document Embedder – Embed PDFs, Word, Excel, and Other Files para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 2.0.4, inclusive. Esto se debe a que el plugin no verifica que un usuario tenga permiso para acceder al recurso solicitado en las acciones AJAX 'bplde_save_document_library', 'bplde_get_single' y 'bplde_delete_document_library'. Esto hace posible que atacantes autenticados, con acceso de nivel Autor y superior, lean, modifiquen y eliminen entradas de la librería de documentos creadas por otros usuarios, incluidos los administradores, a través del parámetro 'id'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/document-emberdder/tags/2.0.3/includes/DocumentLibrary/Init-DocumentLibrary.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/document-emberdder/tags/2.0.3/includes/DocumentLibrary/Init-DocumentLibrary.php#L159",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/document-emberdder/tags/2.0.3/includes/DocumentLibrary/Init-DocumentLibrary.php#L66",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/document-emberdder/tags/2.0.5/includes/DocumentLibrary/Init-DocumentLibrary.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/59d14f6c-6286-454c-8629-96a0c2de943c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0702",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T09:15:48.820",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VidShop – Shoppable Videos for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin VidShop – Shoppable Videos para WooCommerce para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'fields' en todas las versiones hasta la 1.1.4, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto permite que atacantes no autenticados añadan consultas SQL adicionales a consultas ya existentes que pueden utilizarse para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/vidshop-for-woocommerce/trunk/includes/rest-api/v1/class-videos-controller.php#L224",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/vidshop-for-woocommerce/trunk/includes/rest-api/v1/class-videos-controller.php#L297",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/vidshop-for-woocommerce/trunk/includes/utils/class-query-builder.php#L778",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3441106/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a61d8d2a-742f-45f1-9146-f733b80ef195?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1053",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T09:15:48.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Ivory Search – WordPress Search Plugin para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 5.5.13, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.svn.wordpress.org/add-search-to-menu/tags/5.5.13/public/class-is-public.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/add-search-to-menu/tags/5.5.13/public/class-is-public.php#L204",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/add-search-to-menu/tags/5.5.13/public/class-is-public.php#L249",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/add-search-to-menu/tags/5.5.13/public/partials/is-ajax-results.php#L148",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3444659%40add-search-to-menu&new=3444659%40add-search-to-menu&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc5ef6a-32d8-4c4b-b459-d9b543b56898?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1381",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T09:15:49.147",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Order Minimum/Maximum Amount Limits for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 4.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Shop Manager-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Order Minimum/Maximum Amount Limits para WooCommerce para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración en todas las versiones hasta la 4.6.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de Shop Manager y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde unfiltered_html ha sido deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/order-minimum-amount-for-woocommerce/tags/4.6.8/includes/class-alg-wc-oma-core.php#L86",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/order-minimum-amount-for-woocommerce/trunk/includes/class-alg-wc-oma-core.php#L86",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/order-minimum-amount-for-woocommerce/trunk/includes/settings/class-alg-wc-oma-settings-general.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3447432%40order-minimum-amount-for-woocommerce&new=3447432%40order-minimum-amount-for-woocommerce&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3f54f117-0dde-49f9-8014-7650bc1a00ac?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1400",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T09:15:49.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AI Engine – The Chatbot and AI Framework for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `rest_helpers_update_media_metadata` function in all versions up to, and including, 3.3.2. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The attacker can upload a benign image file, then use the `update_media_metadata` endpoint to rename it to a PHP file, creating an executable PHP file in the uploads directory."
      }, {
        "lang" : "es",
        "value" : "El plugin AI Engine – The Chatbot and AI Framework para WordPress es vulnerable a cargas de archivos arbitrarias debido a la falta de validación del tipo de archivo en la función 'rest_helpers_update_media_metadata' en todas las versiones hasta, e incluyendo, 3.3.2. Esto hace posible que atacantes autenticados, con acceso de nivel Editor y superior, carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecución remota de código. El atacante puede cargar un archivo de imagen benigno, luego usar el endpoint 'update_media_metadata' para renombrarlo a un archivo PHP, creando un archivo PHP ejecutable en el directorio de cargas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.3.0/classes/rest.php#L1104",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.3.0/classes/rest.php#L1141",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3447500/ai-engine/trunk/classes/rest.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d5227269-4406-4fcf-af37-f1db0af857d6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0483",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-28T12:15:52.297",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) vulnerability in the PDF file upload functionality of Live Helper Chat, versions prior to 4.72. An attacker can upload a malicious PDF file containing an XSS payload, which will be executed in the user's context when they download and open the file via the link generated by the application. The vulnerability allows arbitrary JavaScript code to be executed in the user's local context."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) almacenada en la funcionalidad de carga de archivos PDF de Live Helper Chat, versiones anteriores a la 4.72. Un atacante puede cargar un archivo PDF malicioso que contiene una carga útil de XSS, que se ejecutará en el contexto del usuario cuando descarguen y abran el archivo a través del enlace generado por la aplicación. La vulnerabilidad permite que se ejecute código JavaScript arbitrario en el contexto local del usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-vulnerability-livehelperchat",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0844",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:52.437",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the 'profile_save_field' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_capabilities' parameter during a profile update."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple User Registration para WordPress es vulnerable a escalada de privilegios en versiones hasta la 6.7, inclusive, debido a una restricción insuficiente en la función 'profile_save_field'. Esto permite a atacantes autenticados, con permisos mínimos como un suscriptor, modificar su rol de usuario al proporcionar el parámetro 'wp_capabilities' durante una actualización de perfil."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-registration/tags/6.7/inc/classes/class.profile.php#L401",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-registration/tags/6.7/inc/classes/class.user.php#L305",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-registration/tags/6.8/inc/classes/class.profile.php#L401",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb0e77e1-7e9f-4f7e-8953-c86ab0e5ae7a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1280",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:52.593",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfm_send_file_in_email' AJAX action in all versions up to, and including, 23.5. This makes it possible for unauthenticated attackers to share arbitrary uploaded files via email by supplying a file ID. Since file IDs are sequential integers, attackers can enumerate all uploaded files on the site and exfiltrate sensitive data that was intended to be restricted to administrators only."
      }, {
        "lang" : "es",
        "value" : "El plugin Frontend File Manager para WordPress es vulnerable al uso compartido de archivos no autorizado debido a una comprobación de capacidad faltante en la acción AJAX 'wpfm_send_file_in_email' en todas las versiones hasta la 23.5, inclusive. Esto permite a atacantes no autenticados compartir archivos subidos arbitrarios por correo electrónico al proporcionar un ID de archivo. Dado que los ID de archivo son enteros secuenciales, los atacantes pueden enumerar todos los archivos subidos en el sitio y exfiltrar datos sensibles que estaban destinados a ser restringidos solo a los administradores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/nmedia-user-file-uploader/tags/23.5/inc/callback-functions.php#L98",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/nmedia-user-file-uploader/trunk/inc/callback-functions.php#L98",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e739e7d3-756a-4c93-9ca7-f7b9f9657033?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1377",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:52.740",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The imwptip plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin imwptip para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.1, ambas inclusive. Esto se debe a la falta de validación de nonce en la funcionalidad de actualización de ajustes. Esto hace posible que atacantes no autenticados actualicen los ajustes del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/imwptip/tags/1.1/classes/imwptipadmin.php#L11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/imwptip/trunk/classes/imwptipadmin.php#L11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0fe987f0-6887-4ad1-a748-eb987bb574fa?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1380",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:52.887",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bitcoin Donate Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the settings page. This makes it possible for unauthenticated attackers to modify the plugin's settings, including donation addresses and display configurations, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Bitcoin Donate Button para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0, inclusive. Esto se debe a la falta o validación incorrecta de nonce en la página de configuración. Esto hace posible que atacantes no autenticados modifiquen la configuración del plugin, incluyendo direcciones de donación y configuraciones de visualización, a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/bitcoin-donate-button/tags/1.0/btcbutton.php#L1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/bitcoin-donate-button/trunk/btcbutton.php#L1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c973dd9-cfa3-4f06-a25a-c2786e3dca4d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1391",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:53.033",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Vzaar Media Management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on the $_SERVER['PHP_SELF'] variable. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Vzaar Media Management para WordPress es vulnerable a Cross-Site Scripting Reflejado en todas las versiones hasta la 1.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en la variable $_SERVER['PHP_SELF']. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/vzaar-media-management/tags/1.2/admin/vzaar-media-upload.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/vzaar-media-management/trunk/admin/vzaar-media-upload.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/398a75b1-6470-44b3-aaea-d5e8b10db115?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1398",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:53.180",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Change WP URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'change-wp-url' page. This makes it possible for unauthenticated attackers to change the WP Login URL via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Change WP URL para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0, inclusive. Esto se debe a la validación de nonce ausente o incorrecta en la página 'change-wp-url'. Esto hace posible que atacantes no autenticados cambien la URL de inicio de sesión de WP a través de una petición falsificada siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/change-wp-url/tags/1.0/change-wp-url.php#L18",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/change-wp-url/tags/1.0/change-wp-url.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/change-wp-url/trunk/change-wp-url.php#L18",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/change-wp-url/trunk/change-wp-url.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f5dead05-5960-4ccb-89c2-c8bb0cd9c9e9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1399",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T12:15:53.330",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Google Ad Manager Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Google Ad Manager Plugin para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-google-ad-manager-plugin/tags/1.1.0/WP-Google-Ad-Manager.php#L194",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-google-ad-manager-plugin/trunk/WP-Google-Ad-Manager.php#L194",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3185d82-a785-4165-8469-abc0be38f852?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1056",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T13:15:53.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php)."
      }, {
        "lang" : "es",
        "value" : "El plugin Snow Monkey Forms para WordPress es vulnerable a la eliminación arbitraria de archivos debido a una validación insuficiente de la ruta de archivo en la función 'generate_user_dirpath' en todas las versiones hasta la 12.0.3, inclusive. Esto permite que atacantes no autenticados eliminen archivos arbitrarios en el servidor, lo que puede conducir fácilmente a la ejecución remota de código cuando se elimina el archivo correcto (como wp-config.php)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/snow-monkey-forms/tags/12.0.3/App/Model/Directory.php#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/snow-monkey-forms/tags/12.0.3/App/Rest/Route/View.php#L189",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/snow-monkey-forms/tags/12.0.3/snow-monkey-forms.php#L186",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3448278/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/37a8642d-07f5-4b1b-8419-e30589089162?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1060",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-28T15:16:16.200",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Adminify plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.7.7 via the /wp-json/adminify/v1/get-addons-list REST API endpoint. The endpoint is registered with permission_callback set to __return_true, allowing unauthenticated attackers to retrieve the complete list of available addons, their installation status, version numbers, and download URLs."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Adminify para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta, e incluyendo, la 4.0.7.7 a través del endpoint de la API REST /wp-json/adminify/v1/get-addons-list. El endpoint está registrado con permission_callback establecido en __return_true, permitiendo a atacantes no autenticados recuperar la lista completa de addons disponibles, su estado de instalación, números de versión y URLs de descarga."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/adminify/tags/4.0.6.1/Libs/Addons.php#L54",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3442928/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ecb4f95-346e-49b3-859f-44f28a72f065?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1237",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2026-01-28T15:16:16.363",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that is incorrectly validated by the juju controller, enabling a charm to maintain otherwise revoked or expired permissions. This allows a charm to continue relating to another charm in a cross-model relation, and use their workload without their permission. No fix is available as of the time of writing."
      }, {
        "lang" : "es",
        "value" : "Autorización entre modelos vulnerable en juju. Si los permisos entre modelos de un charm son revocados o expiran, un usuario malintencionado que es capaz de actualizar registros de la base de datos puede acuñar un macaroon inválido que es validado incorrectamente por el controlador de juju, permitiendo que un charm mantenga permisos que de otro modo estarían revocados o expirados. Esto permite a un charm continuar relacionándose con otro charm en una relación entre modelos, y usar su carga de trabajo sin su permiso. No hay solución disponible al momento de escribir."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        }, {
          "lang" : "en",
          "value" : "CWE-672"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/juju/juju/security/advisories/GHSA-j477-6vpg-6c8x",
        "source" : "security@ubuntu.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1520",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T15:16:17.303",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in rethinkdb up to 2.4.3. Affected by this issue is some unknown functionality of the component Secondary Index Handler. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en rethinkdb hasta 2.4.3. Afectada por este problema es alguna funcionalidad desconocida del componente Secondary Index Handler. Dicha manipulación conduce a cross-site scripting. Es posible lanzar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md#poc",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.343191",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.343191",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.738312",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1521",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T15:16:17.493",
      "lastModified" : "2026-02-23T09:16:56.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_failure_indication of the file src/sgwc/s5c-handler.c of the component SGWC. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 69b53add90a9479d7960b822fc60601d659c328b. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Open5GS hasta la versión 2.7.6. Esto afecta a la función sgwc_s5c_handle_bearer_resource_failure_indication del archivo src/sgwc/s5c-handler.c del componente SGWC. Realizar una manipulación resulta en denegación de servicio. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser utilizado para ataques. El parche se llama 69b53add90a9479d7960b822fc60601d659c328b. Se recomienda aplicar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/open5gs/open5gs/commit/69b53add90a9479d7960b822fc60601d659c328b",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4268#event-21989483261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4268#issue-3795012861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343192",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343192",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738370",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23014",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-28T15:16:17.833",
      "lastModified" : "2026-04-27T14:16:29.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Ensure swevent hrtimer is properly destroyed\n\nWith the change to hrtimer_try_to_cancel() in\nperf_swevent_cancel_hrtimer() it appears possible for the hrtimer to\nstill be active by the time the event gets freed.\n\nMake sure the event does a full hrtimer_cancel() on the free path by\ninstalling a perf_event::destroy handler."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nperf: Asegurar que el hrtimer de swevent se destruya correctamente\n\nCon el cambio a hrtimer_try_to_cancel() en perf_swevent_cancel_hrtimer(), parece posible que el hrtimer siga activo para cuando el evento es liberado.\n\nAsegurarse de que el evento realice un hrtimer_cancel() completo en la ruta de liberación mediante la instalación de un controlador perf_event::destroy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.8",
            "versionEndExcluding" : "6.18",
            "matchCriteriaId" : "57D56998-E0C3-4F58-BBF0-B20D1B4322C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "244757F1-F957-45E1-ADDD-D008246BCF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.18:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE57113-2223-4308-A0F2-5E6ECFBB3C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/deee9dfb111ab00f9dfd46c0c7e36656b80f5235",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ff5860f5088e9076ebcccf05a6ca709d5935cfa9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1536",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-28T16:16:16.540",
      "lastModified" : "2026-03-25T14:14:38.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (Carriage Return Line Feed) sequences into the header value. These sequences are then interpreted verbatim when the HTTP request or response is constructed, allowing arbitrary HTTP headers to be injected. This vulnerability can lead to HTTP header injection or HTTP response splitting without requiring authentication or user interaction."
      }, {
        "lang" : "es",
        "value" : "Se encontró un defecto en libsoup. Un atacante que puede controlar la entrada para el encabezado Content-Disposition puede inyectar secuencias CRLF (retorno de carro y salto de línea) en el valor del encabezado. Estas secuencias se interpretan luego literalmente cuando se construye la solicitud o respuesta HTTP, permitiendo la inyección de encabezados HTTP arbitrarios. Esta vulnerabilidad puede conducir a la inyección de encabezados HTTP o a la división de respuesta HTTP sin requerir autenticación ni interacción del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BAC4F4-3ACD-4F4D-920C-F920FD2C5472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1536",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433834",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/486",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1539",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-01-28T16:16:16.687",
      "lastModified" : "2026-03-25T14:08:59.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en la librería HTTP libsoup que puede causar que las credenciales de autenticación de proxy se envíen a destinos no deseados. Al manejar redirecciones HTTP, libsoup elimina el encabezado Authorization pero no elimina el encabezado Proxy-Authorization si la solicitud es redirigida a un host diferente. Como resultado, las credenciales de proxy sensibles pueden filtrarse a servidores de terceros. Las aplicaciones que usan libsoup para comunicación HTTP pueden exponer involuntariamente datos de autenticación de proxy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BAC4F4-3ACD-4F4D-920C-F920FD2C5472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1539",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/489",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23553",
      "sourceIdentifier" : "security@xen.org",
      "published" : "2026-01-28T16:16:16.853",
      "lastModified" : "2026-02-09T18:46:17.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the context switch logic Xen attempts to skip an IBPB in the case of\na vCPU returning to a CPU on which it was the previous vCPU to run.\nWhile safe for Xen's isolation between vCPUs, this prevents the guest\nkernel correctly isolating between tasks.  Consider:\n\n 1) vCPU runs on CPU A, running task 1.\n 2) vCPU moves to CPU B, idle gets scheduled on A.  Xen skips IBPB.\n 3) On CPU B, guest kernel switches from task 1 to 2, issuing IBPB.\n 4) vCPU moves back to CPU A.  Xen skips IBPB again.\n\nNow, task 2 is running on CPU A with task 1's training still in the BTB."
      }, {
        "lang" : "es",
        "value" : "En la lógica de conmutación de contexto, Xen intenta omitir un IBPB en el caso de que una vCPU regrese a una CPU en la que fue la vCPU anterior en ejecutarse. Si bien es seguro para el aislamiento de Xen entre vCPUs, esto impide que el kernel invitado aísle correctamente entre tareas. Considere:\n\n1) La vCPU se ejecuta en la CPU A, ejecutando la tarea 1.\n2) La vCPU se mueve a la CPU B, el proceso inactivo se programa en A. Xen omite el IBPB.\n3) En la CPU B, el kernel invitado cambia de la tarea 1 a la 2, emitiendo un IBPB.\n4) La vCPU regresa a la CPU A. Xen omite el IBPB de nuevo.\n\nAhora, la tarea 2 se está ejecutando en la CPU A con el entrenamiento de la tarea 1 todavía en el BTB."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*",
            "versionStartIncluding" : "4.6.0",
            "matchCriteriaId" : "4B8D71AF-016B-49EF-AE2B-95DEDE3BE3C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://xenbits.xenproject.org/xsa/advisory-479.html",
        "source" : "security@xen.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/01/27/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-479.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1522",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T17:16:15.330",
      "lastModified" : "2026-02-23T09:16:57.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Open5GS up to 2.7.6. This vulnerability affects the function sgwc_s5c_handle_modify_bearer_response of the file src/sgwc/s5c-handler.c of the component SGWC. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called b19cf6a. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Open5GS hasta la versión 2.7.6. Esta vulnerabilidad afecta a la función sgwc_s5c_handle_modify_bearer_response del archivo src/sgwc/s5c-handler.c del componente SGWC. La ejecución de una manipulación puede llevar a una denegación de servicio. El ataque puede ser lanzado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Este parche se llama b19cf6a. Se aconseja aplicar un parche para resolver este problema. El informe del problema está marcado como ya solucionado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/open5gs/open5gs/commit/b19cf6a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4266",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4266#event-21968568116",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4266#issue-3794991595",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343193",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343193",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738371",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22243",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T17:16:15.663",
      "lastModified" : "2026-02-19T21:21:44.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EGroupware is a Web based groupware server written in PHP. A SQL Injection vulnerability exists in the core components of EGroupware prior to versions 23.1.20260113 and 26.0.20260113, specifically in the `Nextmatch` filter processing. The flaw allows authenticated attackers to inject arbitrary SQL commands into the `WHERE` clause of database queries. This is achieved by exploiting a PHP type juggling issue where JSON decoding converts numeric strings into integers, bypassing the `is_int()` security check used by the application. Versions 23.1.20260113 and 26.0.20260113 patch the vulnerability."
      }, {
        "lang" : "es",
        "value" : "EGroupware es un servidor de groupware basado en web escrito en PHP. Existe una vulnerabilidad de inyección SQL en los componentes centrales de EGroupware anteriores a las versiones 23.1.20260113 y 26.0.20260113, específicamente en el procesamiento del filtro 'Nextmatch'. La falla permite a atacantes autenticados inyectar comandos SQL arbitrarios en la cláusula 'WHERE' de las consultas de la base de datos. Esto se logra explotando un problema de manipulación de tipos (type juggling) de PHP donde la decodificación JSON convierte cadenas numéricas en enteros, eludiendo la verificación de seguridad 'is_int()' utilizada por la aplicación. Las versiones 23.1.20260113 y 26.0.20260113 parchean la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "23.1.20260113",
            "matchCriteriaId" : "9F79AA23-D51B-4881-92E1-7AD58066F134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egroupware:egroupware:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "26.0.20251208",
            "versionEndExcluding" : "26.0.20260113",
            "matchCriteriaId" : "B539FA17-54C7-40C4-A4B2-AF8CF7BE9705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/EGroupware/egroupware/releases/tag/23.1.20260113",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/EGroupware/egroupware/releases/tag/26.0.20260113",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/EGroupware/egroupware/security/advisories/GHSA-rvxj-7f72-mhrx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24685",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T17:16:16.147",
      "lastModified" : "2026-02-09T18:24:51.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Versions prior to 16.6.6 and 17.0.2 have an arbitrary file write vulnerability in OpenProject’s repository diff download endpoint (`/projects/:project_id/repository/diff.diff`) when rendering a single revision via git show. By supplying a specially crafted rev value (for example, `rev=--output=/tmp/poc.txt)`, an attacker can inject git show command-line options. When OpenProject executes the SCM command, Git interprets the attacker-controlled rev as an option and writes the output to an attacker-chosen path. As a result, any user with the `:browse_repository` permission on the project can create or overwrite arbitrary files that the OpenProject process user is permitted to write. The written contents consist of git show output (commit metadata and patch), but overwriting application or configuration files still leads to data loss and denial of service, impacting integrity and availability. The issue has been fixed in OpenProject 17.0.2 and 16.6.6."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Las versiones anteriores a la 16.6.6 y 17.0.2 tienen una vulnerabilidad de escritura de archivos arbitraria en el endpoint de descarga de diferencias del repositorio de OpenProject (`/projects/:project_id/repository/diff.diff`) al renderizar una única revisión a través de git show. Al proporcionar un valor de rev especialmente diseñado (por ejemplo, `rev=--output=/tmp/poc.txt)`), un atacante puede inyectar opciones de línea de comandos de git show. Cuando OpenProject ejecuta el comando SCM, Git interpreta el rev controlado por el atacante como una opción y escribe la salida en una ruta elegida por el atacante. Como resultado, cualquier usuario con el permiso :browse_repository en el proyecto puede crear o sobrescribir archivos arbitrarios que el usuario del proceso de OpenProject tiene permiso para escribir. El contenido escrito consiste en la salida de git show (metadatos de commit y parche), pero sobrescribir archivos de aplicación o configuración aún conduce a la pérdida de datos y a la denegación de servicio, afectando la integridad y la disponibilidad. El problema ha sido solucionado en OpenProject 17.0.2 y 16.6.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.6",
            "matchCriteriaId" : "E81C004B-7B0F-4ED7-ACBB-DCC3D055B6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "A4530571-3A78-40BB-9B33-880974D8C7CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-74p5-9pr3-r6pw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0749",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-01-28T19:16:24.453",
      "lastModified" : "2026-03-09T14:39:22.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Form Builder allows Cross-Site Scripting (XSS).This issue affects Drupal: from 7.X-1.0 through 7.X-1.22."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Drupal Form Builder permite cross-site scripting (XSS).Este problema afecta a Drupal: desde 7.X-1.0 hasta 7.X-1.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mlhess@drupal.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silence:form_builder:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "7.x-1.0",
            "versionEndIncluding" : "7.x-1.22",
            "matchCriteriaId" : "DEA5783B-D89C-4DFB-9B1D-729B058DCDF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://d7es.tag1.com/security-advisories/form-builder-less-critical-cross-site-scripting",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.herodevs.com/vulnerability-directory/cve-2026-0749",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0750",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-01-28T19:16:24.620",
      "lastModified" : "2026-03-09T14:38:54.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de verificación incorrecta de firma criptográfica en Drupal Commerce Paybox en Drupal 7.X permite la omisión de autenticación. Este problema afecta a Drupal Commerce Paybox: desde 7-x-1.0 hasta 7.X-1.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mlhess@drupal.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:verifone:commerce_paybox:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "7-x-1.0",
            "versionEndIncluding" : "7.x-1.5",
            "matchCriteriaId" : "A6D94C51-6FD8-421F-97A8-5308BF1503FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://d7es.tag1.com/security-advisories/commerce-paybox-moderately-critical-payment-bypass-vulnerability",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.herodevs.com/vulnerability-directory/cve-2026-0750",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24772",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T19:16:24.763",
      "lastModified" : "2026-02-12T20:41:11.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. To enable the real time collaboration on documents, OpenProject 17.0 introduced a synchronization server. The OpenPrioject backend generates an authentication token that is currently valid for 24 hours, encrypts it with a shared secret only known to the synchronization server. The frontend hands this encrypted token and the backend URL over to the synchronization server to check user's ability to work on the document and perform intermittent saves while editing. The synchronization server does not properly validate the backend URL and sends a request with the decrypted authentication token to the endpoint that was given to the server. An attacker could use this vulnerability to decrypt a token that he intercepted by other means to gain an access token to interact with OpenProject on the victim's behalf. This vulnerability was introduced with OpenProject 17.0.0 and was fixed in 17.0.2. As a workaround, disable the collaboration feature via Settings -> Documents -> Real time collaboration -> Disable. Additionally the `hocuspocus` container should also be disabled."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Para habilitar la colaboración en tiempo real en documentos, OpenProject 17.0 introdujo un servidor de sincronización. El backend de OpenProject genera un token de autenticación que actualmente es válido por 24 horas, lo cifra con un secreto compartido conocido solo por el servidor de sincronización. El frontend entrega este token cifrado y la URL del backend al servidor de sincronización para verificar la capacidad del usuario para trabajar en el documento y realizar guardados intermitentes durante la edición. El servidor de sincronización no valida correctamente la URL del backend y envía una solicitud con el token de autenticación descifrado al endpoint que se le dio al servidor. Un atacante podría usar esta vulnerabilidad para descifrar un token que interceptó por otros medios para obtener un token de acceso para interactuar con OpenProject en nombre de la víctima. Esta vulnerabilidad fue introducida con OpenProject 17.0.0 y fue corregida en 17.0.2. Como solución alternativa, deshabilite la función de colaboración a través de Configuración -&gt; Documentos -&gt; Colaboración en tiempo real -&gt; Deshabilitar. Además, el contenedor 'hocuspocus' también debería deshabilitarse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "A4530571-3A78-40BB-9B33-880974D8C7CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-r854-p5qj-x974",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24775",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T19:16:24.927",
      "lastModified" : "2026-02-12T20:36:00.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. In the new editor for collaborative documents based on BlockNote, OpenProject maintainers added a custom extension in OpenProject version 17.0.0 that allows to mention OpenProject work packages in the document. To show work package details, the editor loads details about the work package via the OpenProject API. For this API call, the extension to the BlockNote editor did not properly validate the given work package ID to be only a number. This allowed an attacker to generate a document with relative links that upon opening could make arbitrary `GET` requests to any URL within the OpenProject instance. This issue was patched in version version 0.0.22 of op-blocknote-extensions, which was shipped with OpenProject 17.0.2. If users cannot update immediately to version 17.0.2 of OpenProject, administrators can disable collaborative document editing in Settings -> Documents -> Real time collaboration -> Disable."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. En el nuevo editor para documentos colaborativos basado en BlockNote, los mantenedores de OpenProject añadieron una extensión personalizada en la versión 17.0.0 de OpenProject que permite mencionar paquetes de trabajo de OpenProject en el documento. Para mostrar los detalles del paquete de trabajo, el editor carga los detalles sobre el paquete de trabajo a través de la API de OpenProject. Para esta llamada a la API, la extensión del editor BlockNote no validó correctamente que el ID del paquete de trabajo dado fuera solo un número. Esto permitió a un atacante generar un documento con enlaces relativos que, al abrirse, podía realizar solicitudes 'GET' arbitrarias a cualquier URL dentro de la instancia de OpenProject. Este problema fue parcheado en la versión 0.0.22 de op-blocknote-extensions, que se envió con OpenProject 17.0.2. Si los usuarios no pueden actualizar inmediatamente a la versión 17.0.2 de OpenProject, los administradores pueden deshabilitar la edición colaborativa de documentos en Ajustes -&gt; Documentos -&gt; Colaboración en tiempo real -&gt; Deshabilitar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "A4530571-3A78-40BB-9B33-880974D8C7CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/op-blocknote-extensions/releases/tag/v0.0.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-35c6-x276-2pvc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21865",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T20:16:14.530",
      "lastModified" : "2026-01-30T20:30:18.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can convert some personal messages to public topics when they shouldn't have access. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. As a workaround, site admin can temporarily revoke the moderation role from untrusted moderators or remove the moderator group from the \"personal message enabled groups\" site setting until the Discourse instance has been upgraded to a version that has been patched."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. En versiones anteriores a 3.5.4, 2025.11.2, 2025.12.1 y 2026.1.0, los moderadores pueden convertir algunos mensajes personales en temas públicos cuando no deberían tener acceso. Este problema está parcheado en las versiones 3.5.4, 2025.11.2, 2025.12.1 y 2026.1.0. Como solución alternativa, el administrador del sitio puede revocar temporalmente el rol de moderación a los moderadores no confiables o eliminar el grupo de moderadores de la configuración del sitio 'grupos con mensajes personales habilitados' hasta que la instancia de Discourse haya sido actualizada a una versión que haya sido parcheada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "FDBF21E2-1191-4020-A17A-0702DE4E6451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionStartIncluding" : "2025.11.0",
            "versionEndExcluding" : "2025.11.2",
            "matchCriteriaId" : "539B5B85-44F0-408E-B994-08BB20EA9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2025.12.0:*:*:*:stable:*:*:*",
            "matchCriteriaId" : "CCBF47A8-0D3F-4174-8084-CD3517BF272A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.1.0:*:*:*:stable:*:*:*",
            "matchCriteriaId" : "F6CF5F98-F08F-4B28-BBE2-8296760A547E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-4777-wrv5-3g39",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1532",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T21:16:10.703",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en D-Link DCS-700L 1.03.09. El elemento afectado es la función uploadmusic del archivo /setUploadMusic del componente Music File Upload Service. La manipulación del argumento UploadMusic conduce a salto de ruta. El ataque solo puede ser iniciado dentro de la red local. El exploit está disponible públicamente y podría ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no son soportados por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:M/C:P/I:N/A:N",
            "baseScore" : 2.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-700l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.03.09",
            "matchCriteriaId" : "58F157C1-4C27-4AFB-B127-0C3AE339BFF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-700l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E798414C-1A95-42CE-8B31-A3401A172F74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/D-Link-DCS700l-v1-03-09-Path-Traversal-Vulnerability-in-Music-File-Upload-2e8b5c52018a80369553f07ab91aabe2?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738693",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1533",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T21:16:10.927",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminAddCategory.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en code-projects Online Music Site 1.0. El elemento afectado es una función desconocida del archivo /Administrator/PHP/AdminAddCategory.php. La manipulación resulta en inyección SQL. El ataque puede realizarse desde remoto. El exploit ha sido liberado al público y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1534",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T21:16:11.140",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en code-projects Online Music Site 1.0. Esto afecta una función desconocida del archivo /Administrator/PHP/AdminEditUser.php. Esta manipulación del argumento ID causa inyección SQL. Es posible iniciar el ataque remotamente. El exploit se ha hecho público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738705",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1535",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T21:16:11.333",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Administrator/PHP/AdminReply.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en code-projects Online Music Site 1.0. Esto afecta una función desconocida del archivo /Administrator/PHP/AdminReply.php. Dicha manipulación del argumento ID conduce a inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738706",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23743",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:11.597",
      "lastModified" : "2026-01-30T20:31:49.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, permalinks pointing to access-restricted resources (private topics, categories, posts, or hidden tags) were redirecting users to URLs containing the resource slug, even when the user didn't have access to view the resource. This leaked potentially sensitive information (e.g., private topic titles) via the redirect Location header and the 404 page's search box. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. En versiones anteriores a la 3.5.4, 2025.11.2, 2025.12.1 y 2026.1.0, los enlaces permanentes que apuntaban a recursos de acceso restringido (temas privados, categorías, publicaciones o etiquetas ocultas) redirigían a los usuarios a URLs que contenían el slug del recurso, incluso cuando el usuario no tenía acceso para ver el recurso. Esto filtraba información potencialmente sensible (p. ej., títulos de temas privados) a través del encabezado Location de la redirección y el cuadro de búsqueda de la página 404. Este problema está parcheado en las versiones 3.5.4, 2025.11.2, 2025.12.1 y 2026.1.0. No hay soluciones alternativas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "FDBF21E2-1191-4020-A17A-0702DE4E6451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionStartIncluding" : "2025.11.0",
            "versionEndExcluding" : "2025.11.2",
            "matchCriteriaId" : "539B5B85-44F0-408E-B994-08BB20EA9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2025.12.0:*:*:*:stable:*:*:*",
            "matchCriteriaId" : "CCBF47A8-0D3F-4174-8084-CD3517BF272A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.1.0:*:*:*:stable:*:*:*",
            "matchCriteriaId" : "F6CF5F98-F08F-4B28-BBE2-8296760A547E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-v5jw-rxc6-4cvv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24739",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:11.750",
      "lastModified" : "2026-02-02T14:24:27.267",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.51, 6.4.33, 7.3.11, 7.4.5, and 8.0.5, the Symfony Process component did not correctly treat some characters (notably `=`) as “special” when escaping arguments on Windows. When PHP is executed from an MSYS2-based environment (e.g. Git Bash) and Symfony Process spawns native Windows executables, MSYS2’s argument/path conversion can mis-handle unquoted arguments containing these characters. This can cause the spawned process to receive corrupted/truncated arguments compared to what Symfony intended. If an application (or tooling such as Composer scripts) uses Symfony Process to invoke file-management commands (e.g. `rmdir`, `del`, etc.) with a path argument containing `=`, the MSYS2 conversion layer may alter the argument at runtime. In affected setups this can result in operations being performed on an unintended path, up to and including deletion of the contents of a broader directory or drive. The issue is particularly relevant when untrusted input can influence process arguments (directly or indirectly, e.g. via repository paths, extracted archive paths, temporary directories, or user-controlled configuration). Versions 5.4.51, 6.4.33, 7.3.11, 7.4.5, and 8.0.5 contains a patch for the issue. Some workarounds are available. Avoid running PHP/one's own tooling from MSYS2-based shells on Windows; prefer cmd.exe or PowerShell for workflows that spawn native executables. Avoid passing paths containing `=` (and similar MSYS2-sensitive characters) to Symfony Process when operating under Git Bash/MSYS2. Where applicable, configure MSYS2 to disable or restrict argument conversion (e.g. via `MSYS2_ARG_CONV_EXCL`), understanding this may affect other tooling behavior."
      }, {
        "lang" : "es",
        "value" : "Symfony es un framework PHP para aplicaciones web y de consola y un conjunto de componentes PHP reutilizables. Antes de las versiones 5.4.51, 6.4.33, 7.3.11, 7.4.5 y 8.0.5, el componente Symfony Process no trataba correctamente algunos caracteres (especialmente '=') como 'especiales' al escapar argumentos en Windows. Cuando PHP se ejecuta desde un entorno basado en MSYS2 (por ejemplo, Git Bash) y Symfony Process genera ejecutables nativos de Windows, la conversión de argumentos/rutas de MSYS2 puede manejar incorrectamente los argumentos sin comillas que contienen estos caracteres. Esto puede hacer que el proceso generado reciba argumentos corruptos/truncados en comparación con lo que Symfony pretendía. Si una aplicación (o herramientas como los scripts de Composer) utiliza Symfony Process para invocar comandos de gestión de archivos (por ejemplo, 'rmdir', 'del', etc.) con un argumento de ruta que contiene '=', la capa de conversión de MSYS2 puede alterar el argumento en tiempo de ejecución. En configuraciones afectadas, esto puede resultar en operaciones realizadas en una ruta no deseada, incluyendo la eliminación del contenido de un directorio o unidad más amplio. El problema es particularmente relevante cuando una entrada no confiable puede influir en los argumentos del proceso (directa o indirectamente, por ejemplo, a través de rutas de repositorio, rutas de archivo extraídas, directorios temporales o configuración controlada por el usuario). Las versiones 5.4.51, 6.4.33, 7.3.11, 7.4.5 y 8.0.5 contienen un parche para el problema. Algunas soluciones alternativas están disponibles. Evite ejecutar PHP/sus propias herramientas desde shells basados en MSYS2 en Windows; prefiera cmd.exe o PowerShell para flujos de trabajo que generen ejecutables nativos. Evite pasar rutas que contengan '=' (y caracteres similares sensibles a MSYS2) a Symfony Process cuando opere bajo Git Bash/MSYS2. Cuando sea aplicable, configure MSYS2 para deshabilitar o restringir la conversión de argumentos (por ejemplo, a través de 'MSYS2_ARG_CONV_EXCL'), entendiendo que esto puede afectar el comportamiento de otras herramientas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.51",
            "matchCriteriaId" : "3AB662E6-D816-4609-94FE-AC66C88F4CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.33",
            "matchCriteriaId" : "3DF56A29-B4F5-4931-870C-3A53C2250637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.11",
            "matchCriteriaId" : "C8C97EDA-436F-4135-97BD-99738291537F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "387DBEE9-CCE6-4E97-82D6-1CDDB3120BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.5",
            "matchCriteriaId" : "894753D7-0758-4279-A5A9-2992F8551228"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/symfony/symfony/commit/35203939050e5abd3caf2202113b00cab5d379b3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/symfony/symfony/commit/ec154f6f95f8c60f831998ec4d246a857e9d179b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/symfony/symfony/issues/62921",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/symfony/symfony/pull/63164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/symfony/symfony/security/advisories/GHSA-r39x-jcww-82v6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24742",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:11.913",
      "lastModified" : "2026-01-30T20:31:42.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-admin moderators can view sensitive information in staff action logs that should be restricted to administrators only. The exposed information includes webhook payload URLs and secrets, API key details, site setting changes, private message content, restricted category names and structures, and private chat channel titles. This allows moderators to bypass intended access controls and extract confidential data by monitoring the staff action logs. With leaked webhook secrets, an attacker could potentially spoof webhook events to integrated services. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. As a workaround, site administrators should review and limit moderator appointments to fully trusted users. There is no configuration-based workaround to prevent this access."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. En versiones anteriores a 3.5.4, 2025.11.2, 2025.12.1 y 2026.1.0, los moderadores no administradores pueden ver información sensible en los registros de acciones del personal que debería estar restringida solo a los administradores. La información expuesta incluye URL y secretos de carga útil de webhook, detalles de claves API, cambios en la configuración del sitio, contenido de mensajes privados, nombres y estructuras de categorías restringidas, y títulos de canales de chat privados. Esto permite a los moderadores eludir los controles de acceso previstos y extraer datos confidenciales al monitorear los registros de acciones del personal. Con secretos de webhook filtrados, un atacante podría potencialmente falsificar eventos de webhook a servicios integrados. Este problema está parcheado en las versiones 3.5.4, 2025.11.2, 2025.12.1 y 2026.1.0. Como solución alternativa, los administradores del sitio deben revisar y limitar los nombramientos de moderadores a usuarios de plena confianza. No existe una solución alternativa basada en la configuración para evitar este acceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "FDBF21E2-1191-4020-A17A-0702DE4E6451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionStartIncluding" : "2025.11.0",
            "versionEndExcluding" : "2025.11.2",
            "matchCriteriaId" : "539B5B85-44F0-408E-B994-08BB20EA9C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2025.12.0:*:*:*:stable:*:*:*",
            "matchCriteriaId" : "CCBF47A8-0D3F-4174-8084-CD3517BF272A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.1.0:*:*:*:stable:*:*:*",
            "matchCriteriaId" : "F6CF5F98-F08F-4B28-BBE2-8296760A547E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-hwjv-9gqj-m7h6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24766",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:12.103",
      "lastModified" : "2026-02-04T20:06:08.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the `/api/v2/meta/connection/test` endpoint, causing all database write operations to fail application-wide until server restart. While the pollution technically bypasses SUPER_ADMIN authorization checks, no practical privileged actions can be performed because database operations fail immediately after pollution. Version 0.301.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.0, un usuario autenticado con permisos de creador a nivel de organización puede explotar la contaminación de prototipos en el endpoint '/api/v2/meta/connection/test', provocando que todas las operaciones de escritura de la base de datos fallen en toda la aplicación hasta el reinicio del servidor. Aunque la contaminación técnicamente elude las comprobaciones de autorización de SUPER_ADMIN, no se pueden realizar acciones privilegiadas prácticas porque las operaciones de la base de datos fallan inmediatamente después de la contaminación. La versión 0.301.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.0",
            "matchCriteriaId" : "5E17808E-7686-4232-8ADC-D8C548B7F9F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-95ff-46g6-6gw9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24767",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:12.270",
      "lastModified" : "2026-02-04T20:05:20.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a blind Server-Side Request Forgery (SSRF) vulnerability exists in the `uploadViaURL` functionality due to an unprotected `HEAD` request. While the subsequent file retrieval logic correctly enforces SSRF protections, the initial metadata request executes without validation. This allows limited outbound requests to arbitrary URLs before SSRF controls are applied. Version 0.301.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.0, existe una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) ciega en la funcionalidad 'uploadViaURL' debido a una petición 'HEAD' desprotegida. Si bien la lógica de recuperación de archivos posterior aplica correctamente las protecciones SSRF, la petición de metadatos inicial se ejecuta sin validación. Esto permite peticiones salientes limitadas a URLs arbitrarias antes de que se apliquen los controles SSRF. La versión 0.301.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.0",
            "matchCriteriaId" : "5E17808E-7686-4232-8ADC-D8C548B7F9F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-xr7v-j379-34v9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-xr7v-j379-34v9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24768",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:12.430",
      "lastModified" : "2026-02-04T20:04:07.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect (open redirect) vulnerability exists in NocoDB’s login flow due to missing validation of the `continueAfterSignIn` parameter. During authentication, NocoDB processes a user-controlled redirect value and conditionally performs client-side navigation without enforcing any restrictions on the destination’s origin, domain or protocol. This allows attackers to redirect authenticated users to arbitrary external websites after login. This vulnerability enables phishing attacks by leveraging user trust in the legitimate NocoDB login flow. While it does not directly expose credentials or bypass authentication, it increases the likelihood of credential theft through social engineering. The issue does not allow arbitrary code execution or privilege escalation, but it undermines authentication integrity. Version 0.301.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.0, existe una vulnerabilidad de redirección no validada (redirección abierta) en el flujo de inicio de sesión de NocoDB debido a la falta de validación del parámetro `continueAfterSignIn`. Durante la autenticación, NocoDB procesa un valor de redirección controlado por el usuario y realiza condicionalmente una navegación del lado del cliente sin aplicar ninguna restricción sobre el origen, dominio o protocolo del destino. Esto permite a los atacantes redirigir a usuarios autenticados a sitios web externos arbitrarios después del inicio de sesión. Esta vulnerabilidad permite ataques de phishing aprovechando la confianza del usuario en el flujo de inicio de sesión legítimo de NocoDB. Si bien no expone directamente credenciales ni omite la autenticación, aumenta la probabilidad de robo de credenciales a través de ingeniería social. El problema no permite la ejecución de código arbitrario ni la escalada de privilegios, pero socava la integridad de la autenticación. La versión 0.301.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.0",
            "matchCriteriaId" : "5E17808E-7686-4232-8ADC-D8C548B7F9F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-3hmw-8mw3-rmpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24769",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:12.587",
      "lastModified" : "2026-02-04T20:01:56.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a stored cross-site scripting (XSS) vulnerability exists in NocoDB’s attachment handling mechanism. Authenticated users can upload malicious SVG files containing embedded JavaScript, which are later rendered inline and executed in the browsers of other users who view the attachment. Because the malicious payload is stored server-side and executed under the application’s origin, successful exploitation can lead to account compromise, data exfiltration and unauthorized actions performed on behalf of affected users. Version 0.301.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.0, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el mecanismo de manejo de archivos adjuntos de NocoDB. Usuarios autenticados pueden subir archivos SVG maliciosos que contienen JavaScript incrustado, los cuales son posteriormente renderizados en línea y ejecutados en los navegadores de otros usuarios que ven el archivo adjunto. Debido a que la carga útil maliciosa se almacena en el lado del servidor y se ejecuta bajo el origen de la aplicación, la explotación exitosa puede llevar a compromiso de la cuenta, exfiltración de datos y acciones no autorizadas realizadas en nombre de los usuarios afectados. La versión 0.301.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.0",
            "matchCriteriaId" : "5E17808E-7686-4232-8ADC-D8C548B7F9F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-q5c6-h22r-qpwr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24835",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:12.947",
      "lastModified" : "2026-03-02T18:27:31.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The `isAccessAllowed()` function unconditionally returns `true`, enabling malicious extensions to impersonate any user, hijack authentication sessions, and access sensitive resources without authorization. This vulnerability affects all versions of Podman Desktop. Version 1.25.1 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Podman Desktop es una herramienta gráfica para desarrollar en contenedores y Kubernetes. Una vulnerabilidad crítica de omisión de autenticación en Podman Desktop anterior a la versión 1.25.1 permite a cualquier extensión eludir completamente las comprobaciones de permisos y obtener acceso no autorizado a todas las sesiones de autenticación. La función 'isAccessAllowed()' devuelve incondicionalmente 'true', lo que permite a las extensiones maliciosas suplantar a cualquier usuario, secuestrar sesiones de autenticación y acceder a recursos sensibles sin autorización. Esta vulnerabilidad afecta a todas las versiones de Podman Desktop. La versión 1.25.1 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:podman_desktop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.25.1",
            "matchCriteriaId" : "6E8A8FE8-FF23-40F4-A6E8-E118CD12F2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1ib4RG34mGHDlXeyib8L2j9L5rEDxuDM5/view?usp=sharing",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/podman-desktop/podman-desktop/security/advisories/GHSA-v3fx-qg34-6g9m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24856",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T21:16:13.247",
      "lastModified" : "2026-02-03T14:07:59.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile XML parsing potentially corrupting memory structures and enabling arbitrary code execution. This vulnerability affects users of the iccDEV library who process ICC color profiles. ICC Profile Injection vulnerabilities arise when user-controllable input is incorporated into ICC profile data or other structured binary blobs in an unsafe manner. Version 2.3.1.2 contains a fix for the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Las versiones anteriores a la 2.3.1.2 tienen un problema de comportamiento indefinido cuando los valores NaN de punto flotante se convierten a tipos de enteros cortos sin signo durante el análisis XML de perfiles ICC, lo que podría corromper las estructuras de memoria y permitir la ejecución de código arbitrario. Esta vulnerabilidad afecta a los usuarios de la librería iccDEV que procesan perfiles de color ICC. Las vulnerabilidades de inyección de perfiles ICC surgen cuando la entrada controlable por el usuario se incorpora a los datos del perfil ICC u otros blobs binarios estructurados de manera insegura. La versión 2.3.1.2 contiene una solución para el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        }, {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/5e53a5d25923b7794ba44e390e9b35d391f2b9c1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/532",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/541",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-w585-cv3v-c396",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1544",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T22:15:55.277",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub_41E2A0 of the file /goform/set_mode. Performing a manipulation of the argument lan_gateway results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en D-Link DIR-823X 250416. La función afectada es sub_41E2A0 del archivo /goform/set_mode. Al manipular el argumento lan_gateway se produce una inyección de comandos del sistema operativo. El ataque puede llevarse a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. Esta vulnerabilidad solo afecta a productos que ya no cuentan con soporte por parte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343228",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343228",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739155",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/master-abc/cve/issues/16",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1545",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T22:15:55.470",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode School Management System 1.0. El elemento afectado es una función desconocida del archivo /course/index.PHP. La ejecución de una manipulación del argumento ID puede conducir a una inyección SQL. El ataque puede realizarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F4BF37-5700-4E36-BB76-DB8A8DC79E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/33",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343229",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343229",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ltranquility/CVE/issues/33",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1546",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T22:15:55.660",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en jishenghua jshERP hasta 3.6. El elemento afectado es la función getBillItemByParam del archivo /jshERP-boot/depotItem/importItemExcel del componente com.jsh.erp.datasource.mappers.DepotItemMapperEx. La manipulación del argumento barCodes conduce a inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "2371BC75-D648-47F9-8B86-49CD53FB4DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jishenghua/jshERP/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/145",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/145#issue-3816930151",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343230",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343230",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739688",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/145",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/145#issue-3816930151",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1547",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T22:15:55.853",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Totolink A7000R 4.1cu.4154. Esto afecta a la función setUnloadUserData del archivo /cgi-bin/cstecgi.cgi. La manipulación del argumento plugin_name resulta en inyección de comandos. Es posible lanzar el ataque remotamente. El exploit ya es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7000r_firmware:4.1cu.4154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89D712B-BA6A-4B24-AD53-20D4E9003143"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603DA206-05D4-48FD-A506-F3BD8B4383B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343231",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343231",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739713",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md#poc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24857",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T22:15:56.350",
      "lastModified" : "2026-02-09T16:47:23.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in `Unpack::CopyString`, leading to a crash under ASAN (and likely a crash or memory corruption in production builds). There's potential for using this for RCE. As of time of publication, no known patches are available."
      }, {
        "lang" : "es",
        "value" : "'bulk_extractor' es una herramienta de explotación forense digital. A partir de la versión 1.4, el código unrar incrustado de 'bulk_extractor' tiene un desbordamiento de búfer de montón en la ruta de decodificación RAR PPM LZ. Un RAR manipulado dentro de una imagen de disco causa una escritura fuera de límites en 'Unpack::CopyString', lo que lleva a un fallo bajo ASAN (y probablemente un fallo o corrupción de memoria en compilaciones de producción). Existe el potencial de usar esto para RCE. Al momento de la publicación, no hay parches conocidos disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simsong:bulk_extractor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4",
            "matchCriteriaId" : "37E01344-F9C6-472A-B1D4-E30BFA2A549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/simsong/bulk_extractor/security/advisories/GHSA-rh8m-9xrx-q64q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/simsong/bulk_extractor/security/advisories/GHSA-rh8m-9xrx-q64q",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24888",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T22:15:56.517",
      "lastModified" : "2026-02-09T16:37:29.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.1, the `makerjs.extendObject` function copies properties from source objects without proper validation, potentially exposing applications to security risks. The function lacks `hasOwnProperty()` checks and does not filter dangerous keys, allowing inherited properties and potentially malicious properties to be copied to target objects. A patch is available in commit 85e0f12bd868974b891601a141974f929dec36b8, which is expected to be part of version 0.19.2."
      }, {
        "lang" : "es",
        "value" : "Maker.js es un dibujo de líneas vectoriales 2D y modelado de formas para cortadoras CNC y láser. En versiones hasta la 0.19.1 inclusive, la función 'makerjs.extendObject' copia propiedades de objetos de origen sin una validación adecuada, exponiendo potencialmente las aplicaciones a riesgos de seguridad. La función carece de comprobaciones de 'hasOwnProperty()' y no filtra claves peligrosas, permitiendo que propiedades heredadas y propiedades potencialmente maliciosas sean copiadas a objetos de destino. Un parche está disponible en el commit 85e0f12bd868974b891601a141974f929dec36b8, el cual se espera que sea parte de la versión 0.19.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:maker.js:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.19.1",
            "matchCriteriaId" : "1DB78CEE-2892-487A-B7BA-076AF9E75CF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microsoft/maker.js/blob/98cffa82a372ff942194c925a12a311253587167/packages/maker.js/src/core/maker.ts#L232-L241",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/microsoft/maker.js/commit/85e0f12bd868974b891601a141974f929dec36b8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/microsoft/maker.js/security/advisories/GHSA-2cp6-34r9-54xx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/microsoft/maker.js/security/advisories/GHSA-2cp6-34r9-54xx",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24889",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T22:15:56.700",
      "lastModified" : "2026-03-02T18:28:26.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice`, and `Prng::gen_range` (for `u64`) methods in the `soroban-sdk` in versions up to and including `25.0.1`, `23.5.1`, and `25.0.2`. Contracts that pass user-controlled or computed range bounds to `Bytes::slice`, `Vec::slice`, or `Prng::gen_range` may silently operate on incorrect data ranges or generate random numbers from an unintended range, potentially resulting in corrupted contract state. Note that the best practice when using the `soroban-sdk` and building Soroban contracts is to always enable `overflow-checks = true`. The `stellar contract init` tool that prepares the boiler plate for a Soroban contract, as well as all examples and docs, encourage the use of configuring `overflow-checks = true` on `release` profiles so that these arithmetic operations fail rather than silently wrap. Contracts are only impacted if they use `overflow-checks = false` either explicitly or implicitly. It is anticipated the majority of contracts could not be impacted because the best practice encouraged by tooling is to enable `overflow-checks`. The fix available in `25.0.1`, `23.5.1`, and `25.0.2` replaces bare arithmetic with `checked_add` / `checked_sub`, ensuring overflow traps regardless of the `overflow-checks` profile setting. As a workaround, contract workspaces can be configured with a profile available in the GitHub Securtity Advisory to enable overflow checks on the arithmetic operations. This is the best practice when developing Soroban contracts, and the default if using the contract boilerplate generated using `stellar contract init`. Alternatively, contracts can validate range bounds before passing them to `slice` or `gen_range` to ensure the conversions cannot overflow."
      }, {
        "lang" : "es",
        "value" : "`soroban-sdk` es un SDK de Rust para contratos Soroban. El desbordamiento aritmético puede activarse en los métodos `Bytes::slice`, `Vec::slice` y `Prng::gen_range` (para `u64`) en el `soroban-sdk` en versiones hasta la `25.0.1`, `23.5.1` y `25.0.2` inclusive. Los contratos que pasan límites de rango controlados por el usuario o calculados a `Bytes::slice`, `Vec::slice` o `Prng::gen_range` pueden operar silenciosamente en rangos de datos incorrectos o generar números aleatorios de un rango no deseado, lo que podría resultar en un estado de contrato corrupto. Tenga en cuenta que la mejor práctica al usar el `soroban-sdk` y construir contratos Soroban es habilitar siempre `overflow-checks = true`. La herramienta `stellar contract init` que prepara el código base para un contrato Soroban, así como todos los ejemplos y la documentación, fomentan el uso de configurar `overflow-checks = true` en perfiles de `release` para que estas operaciones aritméticas fallen en lugar de envolverse silenciosamente. Los contratos solo se ven afectados si usan `overflow-checks = false` ya sea explícita o implícitamente. Se anticipa que la mayoría de los contratos no se verían afectados porque la mejor práctica fomentada por las herramientas es habilitar `overflow-checks`. La corrección disponible en `25.0.1`, `23.5.1` y `25.0.2` reemplaza la aritmética básica con `checked_add` / `checked_sub`, asegurando que los desbordamientos se intercepten independientemente de la configuración del perfil `overflow-checks`. Como solución alternativa, los espacios de trabajo de contratos pueden configurarse con un perfil disponible en el Aviso de Seguridad de GitHub para habilitar las comprobaciones de desbordamiento en las operaciones aritméticas. Esta es la mejor práctica al desarrollar contratos Soroban, y el valor predeterminado si se utiliza el código base del contrato generado con `stellar contract init`. Alternativamente, los contratos pueden validar los límites de rango antes de pasarlos a `slice` o `gen_range` para asegurar que las conversiones no puedan desbordarse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:rs-soroban-sdk:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "22.0.9",
            "matchCriteriaId" : "A32F427A-2783-4BC4-8179-FA068687C74E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:rs-soroban-sdk:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.1",
            "matchCriteriaId" : "007E2769-15DD-4508-90C5-B1FB89034D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:rs-soroban-sdk:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.2",
            "matchCriteriaId" : "FE6977E5-17FB-4A06-BCF5-5ED52DFA5522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stellar/rs-soroban-sdk/commit/3890521426d71bb4d892b21f5a283a1e836cfa38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/commit/59fcef437260ed4da42d1efb357137a5c166c02e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/commit/c2757c6d774dbb28b34a0b77ffe282e59f0f8462",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/pull/1703",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/releases/tag/v22.0.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/releases/tag/v23.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/releases/tag/v25.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/security/advisories/GHSA-96xm-fv9w-pf3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1548",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T23:15:50.670",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument url causes command injection. The attack can be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Totolink A7000R 4.1cu.4154. Esto afecta a la función CloudACMunualUpdateUserdata del archivo /cgi-bin/cstecgi.cgi. Esta manipulación del argumento url provoca inyección de comandos. El ataque puede iniciarse remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7000r_firmware:4.1cu.4154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89D712B-BA6A-4B24-AD53-20D4E9003143"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603DA206-05D4-48FD-A506-F3BD8B4383B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/02_RCE_CloudACMunualUpdateUserdata_RCE.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/02_RCE_CloudACMunualUpdateUserdata_RCE.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343232",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343232",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/02_RCE_CloudACMunualUpdateUserdata_RCE.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1549",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T23:15:50.870",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en jishenghua jshERP hasta la versión 3.6. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /jshERP-boot/plugin/uploadPluginConfigFile del componente PluginController. Dicha manipulación del argumento configFile conduce a un salto de ruta. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "2371BC75-D648-47F9-8B86-49CD53FB4DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jishenghua/jshERP/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/146",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/146#issue-3817997461",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343245",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343245",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739805",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/146",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/146#issue-3817997461",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1550",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-28T23:15:51.067",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en PHPGurukul Hospital Management System 1.0. Este problema afecta a alguna funcionalidad desconocida del archivo /hms/hospital/docappsystem/adminviews.py del componente Página del Panel de Administración. Realizar una manipulación resulta en una autorización indebida. Es posible la explotación remota del ataque. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:hospital_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D7CB92F-609E-4807-A613-7AA413460314"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rsecroot/Hospital-Management-System/blob/main/Broken%20Access%20Control.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343246",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343246",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739837",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24897",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-28T23:15:51.270",
      "lastModified" : "2026-02-09T15:32:42.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged user can upload arbitrary files to any specified location due to insufficient validation of user‑supplied paths when creating shares.\nBy specifying a writable path within the public web root, an attacker can upload and execute arbitrary code on the server, resulting in remote code execution (RCE). This vulnerability allows a low-privileged user to fully compromise the affected Erugo instance. Version 0.2.15 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Erugo es una plataforma de intercambio de archivos autoalojada. En versiones hasta la 0.2.14 inclusive, un usuario autenticado con bajos privilegios puede cargar archivos arbitrarios a cualquier ubicación especificada debido a una validación insuficiente de las rutas proporcionadas por el usuario al crear comparticiones.\nAl especificar una ruta escribible dentro de la raíz web pública, un atacante puede cargar y ejecutar código arbitrario en el servidor, lo que resulta en ejecución remota de código (RCE). Esta vulnerabilidad permite a un usuario con bajos privilegios comprometer completamente la instancia de Erugo afectada. La versión 0.2.15 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erugo:erugo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.14",
            "matchCriteriaId" : "C29B289E-C12B-4F99-9844-9DF9CAB57CAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ErugoOSS/Erugo/commit/256bc63831a0b5e9a94cb024a0724e0cd5fa5e38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ErugoOSS/Erugo/releases/tag/v0.2.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ErugoOSS/Erugo/security/advisories/GHSA-336w-hgpq-6369",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ErugoOSS/Erugo/security/advisories/GHSA-336w-hgpq-6369",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1551",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T00:16:08.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode School Management System 1.0, la cual afecta a una parte desconocida del archivo /ramonsys/course/controller.PHP. Si se manipula el argumento ID se puede provocar una inyección SQL. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F4BF37-5700-4E36-BB76-DB8A8DC79E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://mega.nz/file/6cVwiA5A#BVwaxWlfeQCkkpHnuxPiMDZVb5qcYrsI6ftqdm_8mGk",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343247",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343247",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740680",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1552",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T01:16:09.390",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de seguridad ha en SEMCMS 5.0. La cual afecta a código desconocido del archivo /SEMCMS_Info.php. Si se manipula el argumento searchml se puede provoca una inyección SQL. Es posible lanzar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sem-cms:semcms:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D8A074-F467-47F7-9157-E175C9F2AF9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Sqli22/Sqli/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343248",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343248",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740549",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25067",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-29T05:16:13.157",
      "lastModified" : "2026-03-09T14:29:14.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmarterTools SmarterMail versions prior to build 9518  contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. The application base64-decodes attacker-supplied input and uses it as a filesystem path without validation. On Windows systems, this allows UNC paths to be resolved, causing the SmarterMail service to initiate outbound SMB authentication attempts to attacker-controlled hosts. This can be abused for credential coercion, NTLM relay attacks, and unauthorized network authentication."
      }, {
        "lang" : "es",
        "value" : "Las versiones de SmarterTools SmarterMail anteriores a la compilación 9518 contienen una vulnerabilidad de coerción de ruta no autenticada en el endpoint de vista previa del fondo del día. La aplicación decodifica en base64 la entrada suministrada por el atacante y la utiliza como una ruta del sistema de archivos sin validación. En sistemas Windows, esto permite que las rutas UNC se resuelvan, haciendo que el servicio SmarterMail inicie intentos de autenticación SMB salientes a hosts controlados por el atacante. Esto puede ser abusado para la coerción de credenciales, ataques de retransmisión NTLM y autenticación de red no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "100.0.9518",
            "matchCriteriaId" : "706FA98E-A250-42DD-A418-7506F77A6E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.smartertools.com/smartermail/release-notes/current",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/smartertools-smartermail-unauthenticated-background-of-the-day-path-coercion",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1188",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-01-29T09:16:03.560",
      "lastModified" : "2026-02-09T15:20:46.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0."
      }, {
        "lang" : "es",
        "value" : "En el componente de la librería de puertos de Eclipse OMR desde la versión 0.2.0, una función API para devolver los nombres textuales de todas las características de procesador compatibles no estaba teniendo en cuenta el separador insertado entre las características del procesador. Si el búfer de salida suministrado a esta función tenía un tamaño incorrecto, no tener en cuenta el separador al determinar cuándo una escritura en el búfer era segura podría conducir a un desbordamiento de búfer. Este problema está corregido en la versión 0.8.0 de Eclipse OMR."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:omr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "6A12DEA6-8CCB-4FD4-B35D-F36499A744ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse-omr/omr/pull/8082",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23563",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:03.793",
      "lastModified" : "2026-02-11T19:20:41.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes."
      }, {
        "lang" : "es",
        "value" : "Resolución de Enlace Incorrecta Antes del Acceso a Archivos (invocado por la instrucción 1E?Explorer?TachyonCore?DeleteFileByPath) en TeamViewer DEX - 1E Cliente antes de la versión 26.1 en Windows permite a un atacante local con pocos privilegios eliminar archivos de sistema protegidos a través de una unión de control RPC o un enlace simbólico manipulado que se sigue cuando se ejecuta la instrucción de eliminación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23564",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:03.950",
      "lastModified" : "2026-02-11T19:24:41.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en TeamViewer DEX Client (anteriormente 1E Client) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante en la red adyacente provocar que el tráfico UDP normalmente cifrado se envíe en texto claro. Esto puede resultar en la divulgación de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23565",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.083",
      "lastModified" : "2026-02-11T19:25:35.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted requests. This can result in a denial-of-service condition of the Content Distribution Service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en TeamViewer DEX Client (anteriormente 1E Client) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante en la red adyacente provocar la terminación del proceso NomadBranch.exe mediante solicitudes manipuladas. Esto puede resultar en una condición de denegación de servicio del Servicio de Distribución de Contenido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23566",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.217",
      "lastModified" : "2026-02-11T19:42:27.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \\Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en TeamViewer DEX Client (anteriormente 1E Client) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante en la red adyacente inyectar, manipular o falsificar entradas de registro en \\Nomad Branch.log a través de datos manipulados enviados al manejador de red UDP. Esto puede impactar la integridad del registro y la no repudiación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23567",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.340",
      "lastModified" : "2026-02-11T20:08:43.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflow and cause a denial-of-service (service crash) via specially crafted UDP packets."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento inferior de entero en el manejador de comandos UDP del Cliente TeamViewer DEX (anteriormente Cliente 1E) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante de red adyacente activar un desbordamiento de búfer basado en montículo y causar una denegación de servicio (caída del servicio) mediante paquetes UDP especialmente diseñados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23568",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.473",
      "lastModified" : "2026-02-11T20:09:18.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lectura fuera de límites en el Cliente TeamViewer DEX (anteriormente Cliente 1E) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante en la red adyacente causar revelación de información o denegación de servicio a través de un paquete especialmente diseñado. La memoria filtrada podría usarse para eludir ASLR y facilitar una explotación posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23569",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.603",
      "lastModified" : "2026-02-11T20:10:07.267",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lectura fuera de límites en el Cliente TeamViewer DEX (anteriormente Cliente 1E) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante remoto filtrar memoria de pila y causar una denegación de servicio a través de una solicitud manipulada. La memoria de pila filtrada podría usarse para eludir ASLR remotamente y facilitar la explotación de otras vulnerabilidades en el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23570",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.737",
      "lastModified" : "2026-02-11T20:17:17.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation."
      }, {
        "lang" : "es",
        "value" : "La falta de validación de un valor controlado por el usuario en el cliente TeamViewer DEX (anteriormente cliente 1E) - Servicio de Distribución de Contenido (NomadBranch.exe) anterior a la versión 26.1 para Windows permite a un atacante de red adyacente manipular las marcas de tiempo de los registros a través de un comando UDP Sync manipulado. Esto podría resultar en prefijos de fecha y hora falsificados o sin sentido y comprometer la integridad de los registros y la correlación forense."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23571",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-01-29T09:16:04.867",
      "lastModified" : "2026-02-11T20:22:07.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos fue descubierta en TeamViewer DEX (anteriormente 1E DEX), específicamente dentro de la instrucción 1E-Nomad-RunPkgStatusRequest. Una validación de entrada inadecuada permite a atacantes autenticados con privilegio de actioner ejecutar comandos arbitrarios elevados en hosts conectados a través de comandos maliciosos inyectados en el campo de entrada de la instrucción. Los usuarios de 1E Cliente versión 24.5 o superior no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "8E2A5CE4-D147-45E1-8D16-3257B6E79E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1002/",
        "source" : "psirt@teamviewer.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22764",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-29T11:15:53.250",
      "lastModified" : "2026-02-13T20:37:26.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure."
      }, {
        "lang" : "es",
        "value" : "Dell OpenManage Network Integration, versiones anteriores a la 3.9, contiene una vulnerabilidad de autenticación incorrecta. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a la exposición de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:openmanage_network_integration:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9",
            "matchCriteriaId" : "C2F5C689-E881-4830-BAC8-B8827BFC3532"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000420893/dsa-2026-045-security-update-for-dell-openmanage-network-integration-omni-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1469",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-01-29T12:16:30.643",
      "lastModified" : "2026-03-09T14:16:41.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cve-coordination@incibe.es",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting malicious payload through the ‘comment’ and ‘brand’ parameters in ‘/index.php’. The payload is stored by the application and subsequently displayed without proper sanitization when other users access it. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) Almacenado en el PlanManager de RLE NOVA. Esta vulnerabilidad permite a un atacante ejecutar código JavaScript en el navegador de la víctima inyectando una carga útil maliciosa a través de los parámetros 'comment' y 'brand' en '/index.PHP'. La carga útil es almacenada por la aplicación y posteriormente mostrada sin la sanitización adecuada cuando otros usuarios acceden a ella. Esta vulnerabilidad puede ser explotada para robar datos sensibles del usuario, como cookies de sesión, o para realizar acciones en nombre del usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nova-a:planmanager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A1A2F5-E1F5-4588-A055-16D203EF4F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-rle-novas-planmanager",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1586",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T13:15:53.113",
      "lastModified" : "2026-02-23T09:16:59.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handler.c of the component SGWC. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been published and may be used. It is advisable to implement a patch to correct this issue. The issue report is flagged as already-fixed."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Open5GS hasta la versión 2.7.5. La función impactada es ogs_gtp2_f_teid_to_ip del archivo /sgwc/s11-handler.c del componente SGWC. La ejecución de una manipulación puede llevar a una denegación de servicio. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Es aconsejable implementar un parche para corregir este problema. El informe del problema está marcado como ya corregido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.6",
            "matchCriteriaId" : "F4733D6E-5B99-4217-96BA-533B220A1FDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4273#event-21968643659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4273#issue-3796030721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343349",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343349",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738375",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1587",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T13:15:53.717",
      "lastModified" : "2026-02-23T09:16:59.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Open5GS up to 2.7.6. The affected element is the function sgwc_s11_handle_modify_bearer_request of the file /sgwc/s11-handler.c of the component SGWC. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Applying a patch is the recommended action to fix this issue. The issue report is flagged as already-fixed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Open5GS hasta la versión 2.7.6. El elemento afectado es la función sgwc_s11_handle_modify_bearer_request del archivo /sgwc/s11-handler.c del componente SGWC. La manipulación conduce a denegación de servicio. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado al público y puede ser utilizado. Aplicar un parche es la acción recomendada para solucionar este problema. El informe del problema está marcado como ya solucionado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4272#event-21968635948",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4272#issue-3795156752",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343350",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343350",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1588",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T14:16:13.260",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en jishenghua jshERP hasta 3.6. El elemento afectado es la función install del archivo /jshERP-boot/plugin/installByPath del componente com.gitee.starblues.integration.operator.DefaultPluginOperator. La manipulación del argumento path resulta en salto de ruta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y podría ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "2371BC75-D648-47F9-8B86-49CD53FB4DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jishenghua/jshERP/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jishenghua/jshERP/issues/147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343351",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343351",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1616",
      "sourceIdentifier" : "74b3a70d-cca6-4d34-9789-e83b222ae3be",
      "published" : "2026-01-29T14:16:13.457",
      "lastModified" : "2026-03-10T17:45:05.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters."
      }, {
        "lang" : "es",
        "value" : "La concatenación de $uri$args en el archivo de configuración de nginx presente en Open Security Issue Management (OSIM) anterior a la v2025.9.0 permite ataques de salto de ruta a través de parámetros de consulta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "74b3a70d-cca6-4d34-9789-e83b222ae3be",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "74b3a70d-cca6-4d34-9789-e83b222ae3be",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:open_security_issue_management:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.9.0",
            "matchCriteriaId" : "891D63F8-6798-45A9-9967-84E124DCAEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RedHatProductSecurity/osim/pull/615",
        "source" : "74b3a70d-cca6-4d34-9789-e83b222ae3be",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1589",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T15:16:13.050",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en itsourcecode School Management System 1.0. Esto afecta a una función desconocida del archivo /ramonsys/inquiry/index.php. Esta manipulación del argumento txtsearch causa inyección SQL. El ataque puede iniciarse remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F4BF37-5700-4E36-BB76-DB8A8DC79E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://mega.nz/file/DQUWSY7Y#CLcuhD1KE2s0VtEvYqH_PDCyhpGS0HDo_MKj9sheUPA",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343352",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343352",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740686",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1590",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T15:16:13.350",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en itsourcecode School Management System 1.0. Esto impacta una función desconocida del archivo /ramonsys/faculty/index.php. Tal manipulación del argumento ID lleva a inyección SQL. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F4BF37-5700-4E36-BB76-DB8A8DC79E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://mega.nz/file/GYsm2Q7K#B7NUGX5Fy9iLYssM474U3zFsmZp_14v0n5Sp-5N95yI",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343353",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343353",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740687",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1593",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T15:16:13.797",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_expenses_query.php. Executing a manipulation of the argument detail can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una debilidad ha sido identificada en itsourcecode Society Management System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /admin/edit_expenses_query.php. La ejecución de una manipulación del argumento detail puede llevar a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido puesto a disposición del público y podría ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yyzq-wsx/for_cve/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343355",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343355",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740689",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/yyzq-wsx/for_cve/issues/3",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1594",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T15:16:13.993",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_expenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en itsourcecode Society Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /admin/add_expenses.PHP. La manipulación del argumento detail conduce a inyección SQL. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yyzq-wsx/for_cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343356",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343356",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740691",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/yyzq-wsx/for_cve/issues/2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0936",
      "sourceIdentifier" : "cybersecurity@ch.abb.com",
      "published" : "2026-01-29T16:16:14.327",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disabled by default and must be explicitly enabled by the user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Inserción de Información Sensible en Archivo de Registro en versiones del cliente B&amp;R PVI anteriores a la 6.5 puede ser explotada por un atacante local autenticado para recopilar información de credenciales que es procesada por la aplicación cliente PVI. La función de registro de la aplicación cliente PVI está deshabilitada por defecto y debe ser habilitada explícitamente por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@ch.abb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@ch.abb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@ch.abb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.br-automation.com/fileadmin/SA26P001-2862434c.pdf",
        "source" : "cybersecurity@ch.abb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1595",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T16:16:14.807",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. The manipulation of the argument student_id results in sql injection. The attack can be executed remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en itsourcecode Society Management System 1.0. Esto afecta una parte desconocida del archivo /admin/edit_student_query.PHP. La manipulación del argumento student_id resulta en inyección SQL. El ataque puede ser ejecutado remotamente. El exploit ahora es público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yyzq-wsx/for_cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343357",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343357",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740692",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1596",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T16:16:14.990",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en D-Link DWR-M961 1.1.47. Esta vulnerabilidad afecta la función sub_419920 del archivo /boafrm/formLtefotaUpgradeQuectel. Esta manipulación del argumento fota_url causa inyección de comandos. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m961_firmware:1.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB11C83-1AC4-402C-871A-A37460D8946D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17ACD8A6-3395-458B-B5C1-F8B6526D5A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/CVE/issues/48",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343358",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343358",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740693",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1597",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T17:16:24.473",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the component Administrative Endpoint. Such manipulation of the argument ci_session leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Bdtask SalesERP hasta 20260116. Este problema afecta a algún procesamiento desconocido del componente Administrative Endpoint. Tal manipulación del argumento ci_session lleva a una autorización impropia. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdtask:saleserp:2026-01-16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B40DCFA-F9AC-4ADB-8F4C-D9F507E2C2F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/4m3rr0r/PoCVulDb/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=KSducixS3pk",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1598",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T18:16:10.160",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Bdtask Bhojon All-In-One Restaurant Management System hasta 20260116. Afectada es una función desconocida del archivo /dashboard/home/profile del componente Módulo de Información de Usuario. Realizar una manipulación del argumento fullname resulta en cross site scripting. Es posible iniciar el ataque de forma remota. El exploit ha sido hecho público y podría ser utilizado. Se contactó al proveedor temprano sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdtask:bhojon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-01-16",
            "matchCriteriaId" : "CEAEEF25-6D2D-421C-9F85-0FA09FA60717"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/4m3rr0r/PoCVulDb/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1599",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T18:16:14.570",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/service_charge/grandtotal can lead to business logic errors. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Bdtask Bhojon All-In-One Restaurant Management System hasta 20260116. El elemento afectado es una función desconocida del archivo /hungry/placeorder del componente Checkout. La ejecución de una manipulación del argumento orggrandTotal/vat/service_charge/grandtotal puede conducir a errores de lógica de negocio. Es posible lanzar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdtask:bhojon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-01-16",
            "matchCriteriaId" : "CEAEEF25-6D2D-421C-9F85-0FA09FA60717"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/4m3rr0r/PoCVulDb/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=n7xLBAOrKAU",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1600",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T18:16:14.773",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business logic errors. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en el sistema de gestión de restaurantes todo en uno Bdtask Bhojon hasta el 20260116. El elemento afectado es una función desconocida del archivo /hungry/addtocart del componente Add-to-Cart Submission Endpoint. La manipulación del argumento price/allprice conduce a errores de lógica de negocio. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bdtask:bhojon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-01-16",
            "matchCriteriaId" : "CEAEEF25-6D2D-421C-9F85-0FA09FA60717"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/4m3rr0r/PoCVulDb/issues/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=UESZTjVS4Fs",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23896",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T18:16:14.970",
      "lastModified" : "2026-04-15T18:55:12.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys can escalate their own permissions by calling the update endpoint, allowing a low-privilege API key to grant itself full administrative access to the system. Version 2.5.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "immich es una solución de gestión de fotos y videos autoalojada de alto rendimiento. Antes de la versión 2.5.0, las claves API pueden escalar sus propios permisos al llamar al endpoint de actualización, permitiendo que una clave API de bajo privilegio se otorgue acceso administrativo completo al sistema. La versión 2.5.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:futo:immich:*:*:*:*:*:docker:*:*",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "6A876FF0-015E-48C7-8319-4E23ACC5F6F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/immich-app/immich/security/advisories/GHSA-237r-x578-h5mv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24054",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T18:16:15.270",
      "lastModified" : "2026-02-24T18:20:17.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 3.26.0, when a container image is malformed or contains no layers, containerd falls back to bind-mounting an empty snapshotter directory for the container rootfs. When the Kata runtime attempts to mount the container rootfs, the bind mount causes the rootfs to be detected as a block device, leading to the underlying device being hotplugged to the guest. This can cause filesystem-level errors on the host due to double inode allocation, and may lead to the host's block device being mounted as read-only. Version 3.26.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Kata Containers es un proyecto de código abierto centrado en una implementación estándar de Máquinas Virtuales (VMs) ligeras que se comportan como contenedores. En versiones anteriores a la 3.26.0, cuando una imagen de contenedor está malformada o no contiene capas, containerd recurre a montar mediante bind-mount un directorio snapshotter vacío para el rootfs del contenedor. Cuando el tiempo de ejecución de Kata intenta montar el rootfs del contenedor, el bind mount provoca que el rootfs sea detectado como un dispositivo de bloque, lo que lleva a que el dispositivo subyacente sea conectado en caliente (hotplugged) al invitado. Esto puede causar errores a nivel de sistema de archivos en el host debido a la doble asignación de inodos, y puede llevar a que el dispositivo de bloque del host sea montado como de solo lectura. La versión 3.26.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katacontainers:kata_containers:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.26.0",
            "matchCriteriaId" : "83FC9E90-1A39-4F26-8F79-3324F03EF0DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/containerd/containerd/blob/d939b6af5f8536c2cae85e919e7c40070557df0e/plugins/snapshots/overlay/overlay.go#L564-L581",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kata-containers/kata-containers/blob/a164693e1afead84cd01d5bc3575e2cbfe64ce35/src/runtime/virtcontainers/container.go#L1122-L1126",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kata-containers/kata-containers/blob/c7d0c270ee7dfaa6d978e6e07b99dabdaf2b9fda/src/runtime/virtcontainers/container.go#L1616-L1623",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kata-containers/kata-containers/commit/20ca4d2d79aa5bf63aa1254f08915da84f19e92a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-5fc8-gg7w-3g5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24413",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T18:16:15.450",
      "lastModified" : "2026-02-19T20:56:00.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the `%ProgramData%\\icinga2\\var` folder on Windows. This resulted in the its contents - including the private key of the user and synced configuration - being readable by all local users. All installations on Windows are affected. Versions 2.13.14, 2.14.8, and 2.15.2 contains a fix. There are two possibilities to work around the issue without upgrading Icinga 2. Upgrade Icinga for Windows to at least version v1.13.4, v1.12.4, or v1.11.2. These version will automatically fix the ACLs for the Icinga 2 agent as well. Alternatively, manually update the ACL for the given folder `C:\\ProgramData\\icinga2\\var` (and `C:\\Program Files\\WindowsPowerShell\\modules\\icinga-powershell-framework\\certificate` to fix the issue for the Icinga for Windows as well) including every sub-folder and item to restrict access for general users, only allowing the Icinga service user and administrators access."
      }, {
        "lang" : "es",
        "value" : "Icinga 2 es un sistema de monitoreo de código abierto. A partir de la versión 2.3.0 y antes de las versiones 2.13.14, 2.14.8 y 2.15.2, el MSI de Icinga 2 no configuraba los permisos adecuados para la carpeta '%ProgramData%\\icinga2\\var' en Windows. Esto resultaba en que su contenido - incluyendo la clave privada del usuario y la configuración sincronizada - fuera legible por todos los usuarios locales. Todas las instalaciones en Windows están afectadas. Las versiones 2.13.14, 2.14.8 y 2.15.2 contienen una solución. Existen dos posibilidades para solucionar el problema sin actualizar Icinga 2. Actualice Icinga para Windows a al menos la versión v1.13.4, v1.12.4 o v1.11.2. Estas versiones corregirán automáticamente las ACL para el agente de Icinga 2 también. Alternativamente, actualice manualmente la ACL para la carpeta dada 'C:\\ProgramData\\icinga2\\var' (y 'C:\\Program Files\\WindowsPowerShell\\modules\\icinga-powershell-framework\\certificate' para solucionar el problema también para Icinga para Windows) incluyendo cada subcarpeta y elemento para restringir el acceso a los usuarios generales, permitiendo el acceso solo al usuario de servicio de Icinga y a los administradores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.13.14",
            "matchCriteriaId" : "EF4A8D01-2AF4-42AB-BD24-FFFBA30B2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.14.0",
            "versionEndExcluding" : "2.14.8",
            "matchCriteriaId" : "EF121DB1-2B90-40BB-ACC2-A4E15D48DA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.15.0",
            "versionEndExcluding" : "2.15.2",
            "matchCriteriaId" : "0C5F1C29-FC79-492C-A2A9-1DA4E65268F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Press/Media Coverage" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24414",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T18:16:15.610",
      "lastModified" : "2026-03-10T18:14:53.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior to 1.13.4, 1.12.4, and 1.11.2, permissions of the Icinga for Windows `certificate` directory grant every user read access, which results in the exposure of private key of the Icinga certificate for the given host. All installations are affected. Versions 1.13.4, 1.12.4, and 1.11.2 contains a patch. Please note that upgrading to a fixed version of Icinga for Windows will also automatically fix a similar issue present in Icinga 2, CVE-2026-24413. As a workaround, the permissions can be restricted manually by updating the ACL for the given folder `C:\\Program Files\\WindowsPowerShell\\modules\\icinga-powershell-framework\\certificate` (and `C:\\ProgramData\\icinga2\\var` to fix the issue for the Icinga 2 agent as well) including every sub-folder and item to restrict access for general users, only allowing the Icinga service user and administrators access."
      }, {
        "lang" : "es",
        "value" : "El Icinga PowerShell Framework proporciona posibilidades de configuración y verificación para asegurar la integración y el monitoreo de entornos Windows. En versiones anteriores a la 1.13.4, 1.12.4 y 1.11.2, los permisos del directorio 'certificate' de Icinga para Windows otorgan a cada usuario acceso de lectura, lo que resulta en la exposición de la clave privada del certificado de Icinga para el host dado. Todas las instalaciones están afectadas. Las versiones 1.13.4, 1.12.4 y 1.11.2 contienen un parche. Tenga en cuenta que la actualización a una versión corregida de Icinga para Windows también solucionará automáticamente un problema similar presente en Icinga 2, CVE-2026-24413. Como solución alternativa, los permisos pueden restringirse manualmente actualizando la ACL para la carpeta dada 'C:\\Program Files\\WindowsPowerShell\\modules\\icinga-powershell-framework\\certificate' (y 'C:\\ProgramData\\icinga2\\var' para solucionar también el problema del agente de Icinga 2) incluyendo cada subcarpeta y elemento para restringir el acceso a los usuarios generales, permitiendo el acceso únicamente al usuario de servicio de Icinga y a los administradores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga_powershell_framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "E045C345-4479-474A-AA06-3FEDE0D4383F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga_powershell_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.4",
            "matchCriteriaId" : "515303B5-27A9-4C6D-8563-6D137F4CFF9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icinga:icinga_powershell_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.4",
            "matchCriteriaId" : "A2D58C69-B71C-40EA-89DB-122C7254BC97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Icinga/icinga-powershell-framework/security/advisories/GHSA-88h5-rrm6-5973",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Icinga/icinga2/security/advisories/GHSA-vfjg-6fpv-4mmr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://icinga.com/blog/releasing-icinga-2-v2-15-2-v2-14-8-v2-13-14-and-icinga-for-windows-v1-13-4-v1-12-4-v1-11-2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24780",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T18:16:17.080",
      "lastModified" : "2026-02-17T16:04:36.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform's block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account. autogpt-platform-beta-v0.6.44 contains a fix."
      }, {
        "lang" : "es",
        "value" : "AutoGPT es una plataforma que permite a los usuarios crear, desplegar y gestionar agentes de inteligencia artificial continuos que automatizan flujos de trabajo complejos. Antes de autogpt-platform-beta-v0.6.44, los puntos finales de ejecución de bloques de la Plataforma AutoGPT (tanto la API web principal como la API externa) permiten ejecutar bloques por UUID sin verificar la bandera 'disabled'. Cualquier usuario autenticado puede ejecutar el 'BlockInstallationBlock' deshabilitado, que escribe código Python arbitrario en el sistema de archivos del servidor y lo ejecuta a través de '__import__()', logrando Ejecución Remota de Código. En despliegues autoalojados predeterminados donde el registro de Supabase está habilitado, un atacante puede autorregistrarse; si el registro está deshabilitado (por ejemplo, alojado), el atacante necesita una cuenta existente. autogpt-platform-beta-v0.6.44 contiene una corrección."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-276"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agpt:autogpt_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "0.6.44",
            "matchCriteriaId" : "B2E8CB18-A957-485E-B5E5-3A4F61B3A98D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/external/v1/routes.py#L79-L93",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L1408-L1424",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L355-L395",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/blocks/block.py#L15-L78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/data/block.py#L459",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-r277-3xc5-c79v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1453",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-01-29T19:16:18.987",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ausencia de autenticación para función crítica en la serie de codificadores KiloView podría permitir a un atacante no autenticado crear o eliminar cuentas de administrador. Esta vulnerabilidad puede otorgar al atacante control administrativo total sobre el producto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-029-01.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1457",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-01-29T19:16:19.160",
      "lastModified" : "2026-03-09T17:36:37.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Una falla autenticada en el manejo de búfer en la API web de TP-Link VIGI C385 V1 que carece de saneamiento de entrada, puede permitir la corrupción de memoria lo que lleva a la ejecución remota de código. Atacantes autenticados pueden desencadenar un desbordamiento de búfer y potencialmente ejecutar código arbitrario con privilegios elevados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:vigi_c385_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "11807C33-1B2F-4AB8-99A0-DE2C970B84DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:vigi_c385:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16D189-938C-46FF-B66A-1F41CC3BDEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/vigi-c385/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/kr/support/download/vigi-c385/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4931/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1601",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T19:16:19.290",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument FileName can lead to command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Totolink A7000R 4.1cu.4154. El elemento afectado es la función setUploadUserData del archivo /cgi-bin/cstecgi.cgi. La ejecución de una manipulación del argumento FileName puede llevar a inyección de comandos. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7000r_firmware:4.1cu.4154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89D712B-BA6A-4B24-AD53-20D4E9003143"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603DA206-05D4-48FD-A506-F3BD8B4383B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/03_RCE_setUploadUserData_RCE.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/03_RCE_setUploadUserData_RCE.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343373",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343373",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740760",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/03_RCE_setUploadUserData_RCE.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1610",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T19:16:19.483",
      "lastModified" : "2026-02-27T13:56:43.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Tenda AX12 Pro V2 16.03.49.24_cn. Afectada por este problema es alguna funcionalidad desconocida del componente Servicio Telnet. Realizar una manipulación resulta en credenciales codificadas de forma rígida. El ataque es posible de ser llevado a cabo remotamente. Un alto grado de complejidad es necesario para el ataque. La explotación se sabe que es difícil. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ax12_pro_firmware:16.03.49.24_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187E6AE9-103B-4DC2-982B-D37AAFC6BFEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ax12_pro:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4018DDD5-2D46-4EBA-8014-100CBD55E9CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/CVE/issues/49",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22806",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T20:16:10.277",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prior to versions 4.6.0, 4.5.4, 4.4.2, and 4.3.10, when an access key is created with a limited scope, the scope can be bypassed to access resources outside of it. However, the user still cannot access resources beyond what is accessible to the owner of the access key. Versions 4.6.0, 4.5.4, 4.4.2, and 4.3.10 fix the vulnerability. Some other mitigations are available. Users can limit exposure by reviewing access keys which are scoped and ensuring any users with access to them have appropriate permissions set. Creating automation users with very limited permissions and using access keys for these automation users can be used as a temporary workaround where upgrading is not immediately possible but scoped access keys are needed."
      }, {
        "lang" : "es",
        "value" : "vCluster Platform proporciona una plataforma Kubernetes para la gestión de clústeres virtuales, multitenencia y el uso compartido de clústeres. Antes de las versiones 4.6.0, 4.5.4, 4.4.2 y 4.3.10, cuando se crea una clave de acceso con un alcance limitado, el alcance puede ser eludido para acceder a recursos fuera de este. Sin embargo, el usuario aún no puede acceder a recursos más allá de lo que es accesible para el propietario de la clave de acceso. Las versiones 4.6.0, 4.5.4, 4.4.2 y 4.3.10 corrigen la vulnerabilidad. Algunas otras mitigaciones están disponibles. Los usuarios pueden limitar la exposición revisando las claves de acceso que tienen un alcance definido y asegurándose de que cualquier usuario con acceso a ellas tenga los permisos apropiados configurados. La creación de usuarios de automatización con permisos muy limitados y el uso de claves de acceso para estos usuarios de automatización puede utilizarse como una solución alternativa temporal donde la actualización no es posible de inmediato pero se necesitan claves de acceso con alcance definido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/loft-sh/loft/security/advisories/GHSA-c539-w4ch-7wxq",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24687",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T20:16:10.430",
      "lastModified" : "2026-03-02T18:34:37.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authenticated backoffice-user to enumerate and traverse paths/files on the systems filesystem and read their contents, on Mac/Linux Umbraco installations using Forms. As Umbraco Cloud runs in a Windows environment, Cloud users aren't affected. This issue affects versions 16 and 17 of Umbraco Forms and is patched in 16.4.1 and 17.1.1. If upgrading is not immediately possible, users can mitigate this vulnerability by configuring a WAF or reverse proxy to block requests containing path traversal sequences (`../`, `..\\`) in the `fileName` parameter of the export endpoint, restricting network access to the Umbraco backoffice to trusted IP ranges, and/or blocking the `/umbraco/forms/api/v1/export` endpoint entirely if the export feature is not required. However, upgrading to the patched version is strongly recommended."
      }, {
        "lang" : "es",
        "value" : "Umbraco Forms es un constructor de formularios que se integra con el sistema de gestión de contenidos Umbraco. Es posible que un usuario autenticado del backoffice enumere y recorra rutas/archivos en el sistema de archivos del sistema y lea su contenido, en instalaciones de Umbraco con Forms en Mac/Linux. Dado que Umbraco Cloud se ejecuta en un entorno Windows, los usuarios de Cloud no se ven afectados. Este problema afecta a las versiones 16 y 17 de Umbraco Forms y está parcheado en las versiones 16.4.1 y 17.1.1. Si la actualización no es posible de inmediato, los usuarios pueden mitigar esta vulnerabilidad configurando un WAF o un proxy inverso para bloquear las solicitudes que contengan secuencias de salto de ruta ('../', '..\\') en el parámetro 'fileName' del endpoint de exportación, restringiendo el acceso a la red del backoffice de Umbraco a rangos de IP de confianza, y/o bloqueando completamente el endpoint '/umbraco/forms/API/v1/export' si la función de exportación no es necesaria. Sin embargo, la actualización a la versión parcheada es muy recomendable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umbraco:umbraco_forms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.4.1",
            "matchCriteriaId" : "9D0D409A-3CBC-4832-8AE6-CF2FB7E7F63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:umbraco:umbraco_forms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.1.1",
            "matchCriteriaId" : "AC3914CD-68D6-429E-8DCB-9C354BE94533"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-hm5p-82g6-m3xh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25068",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-01-29T20:16:10.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash."
      }, {
        "lang" : "es",
        "value" : "Las versiones de alsa-lib 1.2.2 hasta la 1.2.15.2 inclusive, anteriores al commit 5f7fe33, contienen un desbordamiento de búfer basado en montículo en el decodificador de control del mezclador de topología. La función tplg_decode_control_mixer1() lee el campo num_channels de datos .tplg no confiables y lo utiliza como límite de bucle sin validarlo contra el array de canales de tamaño fijo (SND_TPLG_MAX_CHAN). Un archivo de topología manipulado con un valor excesivo de num_channels puede causar escrituras fuera de límites en el montículo, lo que lleva a un fallo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alsa-project/alsa-lib/commit/5f7fe33002d2d98d84f72e381ec2cccc0d5d3d40",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/alsa-lib-topology-decoder-heap-based-buffer-overflow",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1623",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T21:15:53.427",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Totolink A7000R 4.1cu.4154. La función afectada es setUpgradeFW del archivo /cgi-bin/cstecgi.cgi. Esta manipulación del argumento FileName causa inyección de comandos. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposición del público y podría ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7000r_firmware:4.1cu.4154:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89D712B-BA6A-4B24-AD53-20D4E9003143"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "603DA206-05D4-48FD-A506-F3BD8B4383B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/04_RCE_setUpgradeFW_RCE.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/04_RCE_setUpgradeFW_RCE.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1281",
      "sourceIdentifier" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "published" : "2026-01-29T22:15:53.140",
      "lastModified" : "2026-01-30T13:28:18.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una inyección de código en Ivanti Endpoint Manager Mobile que permite a los atacantes lograr ejecución remota de código no autenticada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-01-29",
      "cisaActionDue" : "2026-02-01",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.5.0.0",
            "matchCriteriaId" : "1E4CDBD6-451C-4F5F-B40A-05AEF284FB9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager_mobile:12.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F18E48-8F45-480C-AD0D-D6A615FD6157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager_mobile:12.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B3B9E5-6206-41C3-BC9E-A5AAEBA88A96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager_mobile:12.6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E44BEF4-A032-4D05-83AA-AFD52C56EA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager_mobile:12.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79879C08-959D-49BD-947C-914F82B564E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340",
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1281",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1340",
      "sourceIdentifier" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "published" : "2026-01-29T22:15:53.313",
      "lastModified" : "2026-04-09T14:03:31.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una inyección de código en Ivanti Endpoint Manager Mobile que permite a los atacantes lograr ejecución remota de código no autenticada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-04-08",
      "cisaActionDue" : "2026-04-11",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.7.0.0",
            "matchCriteriaId" : "C6499D2A-3DC7-4120-ADBB-36DA63D9C95C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340",
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1340",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1624",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T22:15:53.913",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en D-Link DWR-M961 1.1.47. El elemento afectado es una función desconocida del archivo /boafrm/formLtefotaUpgradeFibocom. Dicha manipulación del argumento fota_url conduce a inyección de comandos. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m961_firmware:1.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB11C83-1AC4-402C-871A-A37460D8946D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17ACD8A6-3395-458B-B5C1-F8B6526D5A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/CVE/issues/50",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1625",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T22:15:54.103",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument action_value results in command injection. The attack may be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en D-Link DWR-M961 1.1.47. El elemento afectado es la función sub_4250E0 del archivo /boafrm/formSmsManage del componente SMS Message. Realizar una manipulación del argumento action_value resulta en inyección de comandos. El ataque puede iniciarse de forma remota. El exploit ya es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m961_firmware:1.1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB11C83-1AC4-402C-871A-A37460D8946D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17ACD8A6-3395-458B-B5C1-F8B6526D5A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/CVE/issues/51",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740792",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24845",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:54.583",
      "lastModified" : "2026-02-20T20:24:15.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference. malcontent uses google/go-containerregistry for OCI image pulls, which by default uses the Docker credential keychain. A malicious registry could return a `WWW-Authenticate` header redirecting token authentication to an attacker-controlled endpoint, causing credentials to be sent to that endpoint. Version 1.20.3 fixes the issue by defaulting to anonymous auth for OCI pulls."
      }, {
        "lang" : "es",
        "value" : "malcontent descubre compromisos en la cadena de suministro a través de contexto, análisis diferencial y YARA. A partir de la versión 0.10.0 y antes de la versión 1.20.3, malcontent podría ser forzado a exponer credenciales del registro de Docker si escaneaba una referencia de imagen OCI especialmente diseñada. malcontent utiliza google/go-containerregistry para extracciones de imágenes OCI, que por defecto usa el llavero de credenciales de Docker. Un registro malicioso podría devolver un encabezado 'WWW-Authenticate' redirigiendo la autenticación de tokens a un punto final controlado por el atacante, lo que provocaría que las credenciales se enviaran a ese punto final. La versión 1.20.3 soluciona el problema al establecer la autenticación anónima por defecto para las extracciones OCI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:malcontent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "B26FE904-C57A-4E90-AF6C-21261E98B0F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/malcontent/commit/538ed00cdc639d687a4bd1e843a2be0428a3b3e7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/malcontent/security/advisories/GHSA-9m43-p3cx-w8j5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24846",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:54.740",
      "lastModified" : "2026-02-24T19:51:41.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to version 1.20.3, malcontent could be made to create symlinks outside the intended extraction directory when scanning a specially crafted tar or deb archive. The `handleSymlink` function received arguments in the wrong order, causing the symlink target to be used as the symlink location. Additionally, symlink targets were not validated to ensure they resolved within the extraction directory. Version 1.20.3 introduces fixes that swap handleSymlink arguments, validate symlink location, and validate symlink targets that resolve within an extraction directory."
      }, {
        "lang" : "es",
        "value" : "malcontent descubre compromisos en la cadena de suministro a través de contexto, análisis diferencial y YARA. A partir de la versión 1.8.0 y antes de la versión 1.20.3, se podía hacer que malcontent creara enlaces simbólicos fuera del directorio de extracción previsto al escanear un archivo tar o deb especialmente diseñado. La función 'handleSymlink' recibió argumentos en el orden incorrecto, lo que provocaba que el destino del enlace simbólico se utilizara como la ubicación del enlace simbólico. Además, los destinos de los enlaces simbólicos no se validaban para asegurar que se resolvieran dentro del directorio de extracción. La versión 1.20.3 introduce correcciones que intercambian los argumentos de 'handleSymlink', validan la ubicación del enlace simbólico y validan los destinos de los enlaces simbólicos que se resuelven dentro de un directorio de extracción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-683"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:malcontent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "07A5D3A2-09F1-44A0-AF84-E943CF3DC18C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/malcontent/commit/259fca5abc004f3ab238895463ef280a87f30e96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/malcontent/commit/a7dd8a5328ddbaf235568437813efa7591e00017",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/malcontent/security/advisories/GHSA-923j-vrcg-hxwh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24902",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:54.893",
      "lastModified" : "2026-02-20T20:57:04.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In `tcp_forwarder.rs`, SSRF protection for `allow_private_network_connections = false` was only applied in the `TcpDestination::HostName(peer)` path. The `TcpDestination::Address(peer) => peer` path proceeded to `TcpStream::connect()` without equivalent checks (for example `is_global_ip`, `is_loopback`), allowing loopback/private targets to be reached by supplying a numeric IP. The vulnerability is fixed in version 0.9.114."
      }, {
        "lang" : "es",
        "value" : "TrustTunnel es un protocolo VPN de código abierto con una falsificación de petición del lado del servidor y una omisión de restricción de red privada en versiones anteriores a la 0.9.114. En 'tcp_forwarder.rs', la protección SSRF para 'allow_private_network_connections = false' solo se aplicó en la ruta 'TcpDestination::HostName(peer)'. La ruta 'TcpDestination::Address(peer) =&gt; peer' procedió a 'TcpStream::connect()' sin comprobaciones equivalentes (por ejemplo, 'is_global_ip', 'is_loopback'), permitiendo que se alcanzaran objetivos de bucle invertido/privados al proporcionar una IP numérica. La vulnerabilidad está corregida en la versión 0.9.114."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adguard:trusttunnel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.114",
            "matchCriteriaId" : "643A4E8A-36C5-4726-83D6-983E7AF83AFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TrustTunnel/TrustTunnel/commit/734bb5cf103b72390a95c853cbf91e699cc01bc0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TrustTunnel/TrustTunnel/security/advisories/GHSA-hgr9-frvw-5r76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24904",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.047",
      "lastModified" : "2026-02-20T20:58:09.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, `TlsListener::listen()` peeks 1024 bytes and calls `extract_client_random(...)`. If `parse_tls_plaintext` fails (for example, a fragmented/partial ClientHello split across TCP writes), `extract_client_random` returns `None`. In `rules.rs`, `RulesEngine::evaluate` only evaluates `client_random_prefix` when `client_random` is `Some(...)`. As a result, when extraction fails (`client_random == None`), any rule that relies on `client_random_prefix` matching is skipped and evaluation falls through to later rules. As an important semantics note: `client_random_prefix` is a match condition only. It does not mean \"block non-matching prefixes\" by itself. A rule with `client_random_prefix = ...` triggers its `action` only when the prefix matches (and the field is available to evaluate). Non-matches (or `None`) simply do not match that rule and continue to fall through. The vulnerability is fixed in version 0.9.115."
      }, {
        "lang" : "es",
        "value" : "TrustTunnel es un protocolo VPN de código abierto con un problema de omisión de reglas en versiones anteriores a la 0.9.115. En `tls_listener.rs`, `TlsListener::listen()` examina 1024 bytes y llama a `extract_client_random(...)`. Si `parse_tls_plaintext` falla (por ejemplo, un ClientHello fragmentado/parcial dividido en varias escrituras TCP), `extract_client_random` devuelve `None`. En `rules.rs`, `RulesEngine::evaluate` solo evalúa `client_random_prefix` cuando `client_random` es `Some(...)`. Como resultado, cuando la extracción falla (`client_random == None`), cualquier regla que dependa de la coincidencia de `client_random_prefix` se omite y la evaluación pasa a reglas posteriores. Como una nota semántica importante: `client_random_prefix` es solo una condición de coincidencia. No significa 'bloquear prefijos no coincidentes' por sí mismo. Una regla con `client_random_prefix = ...` activa su `acción` solo cuando el prefijo coincide (y el campo está disponible para evaluar). Las no-coincidencias (o `None`) simplemente no coinciden con esa regla y continúan pasando. La vulnerabilidad está corregida en la versión 0.9.115."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adguard:trusttunnel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.115",
            "matchCriteriaId" : "08F7E28C-244F-4FAE-9EDF-127191A1FED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TrustTunnel/TrustTunnel/commit/aa5060145506952b9431b0ed3edb52bb6c08d9a6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TrustTunnel/TrustTunnel/security/advisories/GHSA-fqh7-r5gf-3r87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24905",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.200",
      "lastModified" : "2026-04-30T20:16:23.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. The `ig` binary provides a subcommand for image building, used to generate custom gadget OCI images. A part of this functionality is implemented in the file `inspektor-gadget/cmd/common/image/build.go`. The `Makefile.build` file is the Makefile template employed during the building process. This file includes user-controlled data in an unsafe fashion, specifically some parameters are embedded without an adequate escaping in the commands inside the Makefile. Prior to version 0.48.1, this implementation is vulnerable to command injection: an attacker able to control values in the `buildOptions` structure would be able to execute arbitrary commands during the building process. An attacker able to exploit this vulnerability would be able to execute arbitrary command on the Linux host where the `ig` command is launched, if images are built with the `--local` flag or on the build container invoked by `ig`, if the `--local` flag is not provided. The `buildOptions` structure is extracted from the YAML gadget manifest passed to the `ig image build` command. Therefore, the attacker would need a way to control either the full `build.yml` file passed to the `ig image build` command, or one of its options. Typically, this could happen in a CI/CD scenario that builds untrusted gadgets to verify correctness. Version 0.51.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Inspektor Gadget es un conjunto de herramientas y un framework para la recopilación de datos e inspección de sistemas en clústeres de Kubernetes y hosts Linux usando eBPF. El binario `ig` proporciona un subcomando para la construcción de imágenes, utilizado para generar imágenes OCI de gadgets personalizadas. Una parte de esta funcionalidad está implementada en el archivo `inspektor-gadget/cmd/common/image/build.go`. El archivo `Makefile.build` es la plantilla de Makefile empleada durante el proceso de construcción. Este archivo incluye datos controlados por el usuario de manera insegura; específicamente, algunos parámetros se incrustan sin un escape adecuado en los comandos dentro del Makefile. Antes de la versión 0.48.1, esta implementación es vulnerable a inyección de comandos: un atacante capaz de controlar valores en la estructura `buildOptions` podría ejecutar comandos arbitrarios durante el proceso de construcción. Un atacante capaz de explotar esta vulnerabilidad podría ejecutar comandos arbitrarios en el host Linux donde se lanza el comando `ig`, si las imágenes se construyen con la bandera `--local` o en el contenedor de construcción invocado por `ig`, si la bandera `--local` no se proporciona. La estructura `buildOptions` se extrae del manifiesto YAML del gadget pasado al comando `ig image build`. Por lo tanto, el atacante necesitaría una forma de controlar el archivo `build.yml` completo pasado al comando `ig image build`, o una de sus opciones. Típicamente, esto podría ocurrir en un escenario de CI/CD que construye gadgets no confiables para verificar su corrección. La versión 0.48.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:inspektor_gadget:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.48.1",
            "matchCriteriaId" : "E272F62E-031B-473B-8843-90C5168F15E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/inspektor-gadget/inspektor-gadget/commit/7c83ad84ff7a68565655253e2cf1c5d2da695c1a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/inspektor-gadget/inspektor-gadget/commit/d9bf2fe4a180dad33ce57ca793ff4799ee7b8320",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/inspektor-gadget/inspektor-gadget/security/advisories/GHSA-79qw-g77v-2vfh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25040",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.347",
      "lastModified" : "2026-03-03T15:19:21.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. In versions up to and including 3.26.3, a Creator-level user, who normally has no UI permission to invite users, can manipulate API requests to invite new users with any role, including Admin, Creator, or App Viewer, and assign them to any group in the organization. This allows full privilege escalation, bypassing UI restrictions, and can lead to complete takeover of the workspace or organization. As of time of publication, no known fixed versions are available."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. En versiones hasta la 3.26.3 inclusive, un usuario con nivel de Creador, quien normalmente no tiene permiso en la interfaz de usuario (UI) para invitar usuarios, puede manipular solicitudes de API para invitar a nuevos usuarios con cualquier rol, incluyendo Administrador, Creador o Visor de Aplicaciones, y asignarlos a cualquier grupo de la organización. Esto permite una escalada de privilegios completa, eludiendo las restricciones de la interfaz de usuario (UI), y puede llevar a una toma de control completa del espacio de trabajo o la organización. Al momento de la publicación, no hay versiones corregidas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.26.3",
            "matchCriteriaId" : "55D46D1F-18F1-4AD2-8D5C-874D064B2950"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1Dtn1WLJILRYUeoMjEbUfCbqQ3g2AW2Qz/view?usp=sharing",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-4wfw-r86x-qxrm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/22066135/budibase-privileged-esc-poc.txt",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25046",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.493",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to execSync() as shell command strings. Prior to version 0.1.6, filenames containing shell metacharacters like $(cmd) could execute arbitrary commands. Note: This vulnerability exists only in the repository's development scripts. The published VSCode extension does not include these files and end users are not affected. This is fixed in version 0.1.6 by replacing execSync with execFileSync using array arguments. As a workaround, ensure .vsix files in the project directory have safe filenames before running publish scripts."
      }, {
        "lang" : "es",
        "value" : "Kimi Agent SDK es un conjunto de librerías que exponen el tiempo de ejecución del agente Kimi Code (Kimi CLI) en aplicaciones. Los scripts vsix-publish.js y ovsx-publish.js pasan nombres de archivo a execSync() como cadenas de comandos de shell. Antes de la versión 0.1.6, los nombres de archivo que contenían metacaracteres de shell como $(cmd) podían ejecutar comandos arbitrarios. Nota: Esta vulnerabilidad existe solo en los scripts de desarrollo del repositorio. La extensión de VSCode publicada no incluye estos archivos y los usuarios finales no se ven afectados. Esto se corrige en la versión 0.1.6 reemplazando execSync por execFileSync usando argumentos de matriz. Como solución alternativa, asegúrese de que los archivos .vsix en el directorio del proyecto tengan nombres de archivo seguros antes de ejecutar los scripts de publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MoonshotAI/kimi-agent-sdk/security/advisories/GHSA-mv58-gxx5-8hj3",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25047",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.647",
      "lastModified" : "2026-02-25T15:13:28.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8."
      }, {
        "lang" : "es",
        "value" : "deepHas proporciona una prueba para la existencia de una clave de objeto anidado y opcionalmente devuelve esa clave. Existe una vulnerabilidad de contaminación de prototipos en la versión 1.0.7 del paquete npm deephas que permite a un atacante modificar el comportamiento de objetos globales. Este problema fue solucionado en la versión 1.0.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sharpred:deephas:1.0.7:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0D998147-9A29-4864-97BD-88D814F73D54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sharpred/deepHas/commit/8097fafd3776c613d8066546653e0d2c7b5fc465",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sharpred/deepHas/security/advisories/GHSA-2733-6c58-pf27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25061",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.797",
      "lastModified" : "2026-02-25T15:24:30.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past `tim.bitmap[251]`. The overflow is small and DoS is the likely impact; code execution is potential, but still up in the air. The affected structure is stack-allocated in `handle_beacon()` and related handlers. As of time of publication, no known patches are available."
      }, {
        "lang" : "es",
        "value" : "tcpflow es un demultiplexador de paquetes TCP/IP. En versiones hasta la 1.61 inclusive, wifipcap analiza los elementos de tramas de gestión 802.11 y realiza una comprobación de longitud en el campo incorrecto al manejar el elemento TIM. Una trama manipulada con una longitud TIM grande puede causar una escritura fuera de límites de 1 byte más allá de 'tim.bitmap[251]'. El desbordamiento es pequeño y DoS es el impacto probable; la ejecución de código es potencial, pero aún está en el aire. La estructura afectada está asignada en la pila en 'handle_beacon()' y controladores relacionados. En el momento de la publicación, no hay parches conocidos disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitalcorpora:tcpflow:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "E2DE3D04-62BF-4CE6-BB8C-2AD5BFDFABAD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/simsong/tcpflow/security/advisories/GHSA-q5q6-frrv-9rj6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25063",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:55.947",
      "lastModified" : "2026-03-12T18:46:12.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary code execution when a user triggers Bash tab completion in a project containing a malicious Gradle build file. The `gradle-completion` script for Bash fails to adequately sanitize Gradle task names and task descriptions, allowing command injection via a malicious Gradle build file when the user completes a command in Bash (without them explicitly running any task in the build). For example, given a task description that includes a string between backticks, then that string would be evaluated as a command when presenting the task description in the completion list. While task execution is the core feature of Gradle, this inherent execution may lead to unexpected outcomes. The vulnerability does not affect zsh completion. The first patched version is 9.3.1. As a workaround, it is possible and effective to temporarily disable bash completion for Gradle by removing `gradle-completion` from `.bashrc` or `.bash_profile`."
      }, {
        "lang" : "es",
        "value" : "gradle-completion proporciona soporte de autocompletado para Bash y Zsh para Gradle. Una vulnerabilidad de inyección de comandos fue encontrada en gradle-completion hasta la versión 9.3.0 inclusive que permite la ejecución de código arbitrario cuando un usuario activa el autocompletado de tabulación de Bash en un proyecto que contiene un archivo de compilación Gradle malicioso. El script 'gradle-completion' para Bash no logra sanitizar adecuadamente los nombres y descripciones de las tareas de Gradle, permitiendo la inyección de comandos a través de un archivo de compilación Gradle malicioso cuando el usuario completa un comando en Bash (sin que ejecuten explícitamente ninguna tarea en la compilación). Por ejemplo, dada una descripción de tarea que incluye una cadena entre comillas invertidas, entonces esa cadena sería evaluada como un comando al presentar la descripción de la tarea en la lista de autocompletado. Si bien la ejecución de tareas es la característica principal de Gradle, esta ejecución inherente puede llevar a resultados inesperados. La vulnerabilidad no afecta al autocompletado de zsh. La primera versión parcheada es la 9.3.1. Como solución alternativa, es posible y efectivo deshabilitar temporalmente el autocompletado de Bash para Gradle eliminando 'gradle-completion' de '.bashrc' o '.bash_profile'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-157"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle-completion:*:*:*:*:*:gradle:*:*",
            "versionEndIncluding" : "9.3.0",
            "matchCriteriaId" : "57C27003-D475-42F3-982B-89A8FDA9E529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradle/gradle-completion/commit/ecacc32bb882210e5d37cd79a74de1af0d0ccad7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gradle/gradle-completion/security/advisories/GHSA-qggc-44r3-cjgv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-25063-detection-script-command-injection-vulnerability-in-bash-completion-component",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-25063-mitigation-script-command-injection-vulnerability-in-bash-completion-component",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25116",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:56.110",
      "lastModified" : "2026-02-26T21:36:19.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the `UserConfigController` allows any remote user to overwrite the system's `docker-compose.yml` configuration file. By exploiting insecure URN parsing, an attacker can replace the primary stack configuration with a malicious one, resulting in full Remote Code Execution (RCE) and host filesystem compromise the next time the instance is restarted by the operator. Version 4.7.2 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Runtipi es un orquestador personal de servidor doméstico. A partir de la versión 4.5.0 y antes de la versión 4.7.2, una vulnerabilidad de salto de ruta no autenticada en el 'UserConfigController' permite a cualquier usuario remoto sobrescribir el archivo de configuración 'docker-compose.yml' del sistema. Al explotar el análisis URN inseguro, un atacante puede reemplazar la configuración de pila principal con una maliciosa, lo que resulta en una ejecución remota de código (RCE) completa y compromiso del sistema de archivos del host la próxima vez que el operador reinicie la instancia. La versión 4.7.2 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:runtipi:runtipi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.7.2",
            "matchCriteriaId" : "5DE14B0D-E9DF-4F18-BEC4-6603D6B645A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/runtipi/runtipi/releases/tag/v4.7.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/runtipi/runtipi/security/advisories/GHSA-mwg8-x997-cqw6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25117",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:56.270",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit e33da14449a5abcff507e554f66e2141d6683b0a, missing sandboxing on `/workspace/*` routes allows challenge authors to inject arbitrary javascript which runs on the same origin as `http[:]//dojo[.]website`. This is a sandbox escape leading to arbitrary javascript execution as the dojo's origin. A challenge author can craft a page that executes any dangerous actions that the user could. Version e33da14449a5abcff507e554f66e2141d6683b0a patches the issue."
      }, {
        "lang" : "es",
        "value" : "pwn.college DOJO es una plataforma educativa para aprender ciberseguridad. Antes del commit e33da14449a5abcff507e554f66e2141d6683b0a, la falta de sandboxing en las rutas `/workspace/*` permite a los autores de desafíos inyectar javascript arbitrario que se ejecuta en el mismo origen que 'http[:]//dojo[.]website'. Esto es un escape de sandbox que lleva a la ejecución arbitraria de javascript como el origen del dojo. Un autor de desafíos puede crear una página que ejecute cualquier acción peligrosa que el usuario podría. La versión e33da14449a5abcff507e554f66e2141d6683b0a soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pwncollege/dojo/commit/e33da14449a5abcff507e554f66e2141d6683b0a",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/pwncollege/dojo/security/advisories/GHSA-wvcf-9xm8-7mrg",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25126",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-29T22:15:56.423",
      "lastModified" : "2026-02-20T20:46:35.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PolarLearn is a free and open-source learning program. Prior to version 0-PRERELEASE-15, the vote API route (`POST /api/v1/forum/vote`) trusts the JSON body’s `direction` value without runtime validation. TypeScript types are not enforced at runtime, so an attacker can send arbitrary strings (e.g., `\"x\"`) as `direction`. Downstream (`VoteServer`) treats any non-`\"up\"` and non-`null` value as a downvote and persists the invalid value in `votes_data`. This can be exploited to bypass intended business logic. Version 0-PRERELEASE-15 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "PolarLearn es un programa de aprendizaje gratuito y de código abierto. Antes de la versión 0-PRERELEASE-15, la ruta de la API de votación ('POST /api/v1/forum/vote') confía en el valor 'direction' del cuerpo JSON sin validación en tiempo de ejecución. Los tipos de TypeScript no se aplican en tiempo de ejecución, por lo que un atacante puede enviar cadenas arbitrarias (por ejemplo, 'x') como 'direction'. En el flujo descendente ('VoteServer') trata cualquier valor que no sea 'up' y no sea 'null' como un voto negativo y persiste el valor inválido en 'votes_data'. Esto puede ser explotado para eludir la lógica de negocio prevista. La versión 0-PRERELEASE-15 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polarlearn:polarlearn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DA1036-1EFB-46E7-9C83-425B1C6E6F23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/polarnl/PolarLearn/commit/e6227d94d0e53e854f6a46480db8cd1051184d41",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/polarnl/PolarLearn/security/advisories/GHSA-ghpx-5w2p-p3qp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1637",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-29T23:16:11.473",
      "lastModified" : "2026-02-10T15:13:38.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda AC21 16.03.08.16. El elemento afectado es la función fromAdvSetMacMtuWan del archivo /goform/AdvSetMacMtuWan. La manipulación conduce a un desbordamiento de búfer basado en pila. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089AC516-5475-4725-B348-832A00ED0CC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B05222-6E83-487C-A083-CED82D803330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343416",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343416",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740865",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LX-LX88/cve/issues/25",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1665",
      "sourceIdentifier" : "ce714d77-add3-4f53-aff5-83d477b104bb",
      "published" : "2026-01-29T23:16:11.707",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability exists in nvm (Node Version Manager) versions 0.40.3 and below. The nvm_download() function uses eval to execute wget commands, and the NVM_AUTH_HEADER environment variable was not sanitized in the wget code path (though it was sanitized in the curl code path). An attacker who can set environment variables in a victim's shell environment (e.g., via malicious CI/CD configurations, compromised dotfiles, or Docker images) can inject arbitrary shell commands that execute when the victim runs nvm commands that trigger downloads, such as 'nvm install' or 'nvm ls-remote'."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos existe en nvm (Node Version Manager) versiones 0.40.3 e inferiores. La función nvm_download() utiliza eval para ejecutar comandos wget, y la variable de entorno NVM_AUTH_HEADER no fue saneada en la ruta de código de wget (aunque sí fue saneada en la ruta de código de curl). Un atacante que puede establecer variables de entorno en el entorno de shell de una víctima (por ejemplo, a través de configuraciones maliciosas de CI/CD, dotfiles comprometidos o imágenes de Docker) puede inyectar comandos de shell arbitrarios que se ejecutan cuando la víctima ejecuta comandos nvm que activan descargas, como 'nvm install' o 'nvm ls-remote'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nvm-sh/nvm",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb"
      }, {
        "url" : "https://github.com/nvm-sh/nvm/commit/44e2590cdf257faf7d885e4470be8dc66cec9506",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb"
      }, {
        "url" : "https://github.com/nvm-sh/nvm/pull/3380",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb"
      }, {
        "url" : "https://github.com/nvm-sh/nvm/releases/tag/v0.40.4",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1638",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T00:15:57.563",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg. The manipulation of the argument dmzIp results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. El elemento afectado es la función mDMZSetCfg del archivo /goform/mDMZSetCfg. La manipulación del argumento dmzIp resulta en inyección de comandos. El ataque puede ser ejecutado remotamente. El exploit ha sido publicado y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089AC516-5475-4725-B348-832A00ED0CC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B05222-6E83-487C-A083-CED82D803330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/26",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343417",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343417",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740871",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24714",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-01-30T05:16:33.093",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some end of service NETGEAR products provide \"TelnetEnable\" functionality, which allows a magic packet to activate telnet service on the box."
      }, {
        "lang" : "es",
        "value" : "Algunos productos NETGEAR con fin de servicio proporcionan la funcionalidad 'TelnetEnable', lo que permite que un paquete mágico active el servicio telnet en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1242"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN46722282/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.netgear.com/about/eos/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24728",
      "sourceIdentifier" : "ART@zuso.ai",
      "published" : "2026-01-30T05:16:33.347",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falta de autenticación para función crítica en el endpoint /servlet/baServer3 de las versiones de Interinfo DreamMaker anteriores al 22/10/2025 permite a atacantes remotos acceder a la funcionalidad administrativa expuesta sin autenticación previa."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ART@zuso.ai",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ART@zuso.ai",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://zuso.ai/advisory/za-2026-01",
        "source" : "ART@zuso.ai"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24729",
      "sourceIdentifier" : "ART@zuso.ai",
      "published" : "2026-01-30T05:16:33.490",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga irrestricta de archivos de tipo peligroso en la función de carga de archivos de las versiones de Interinfo DreamMaker anteriores al 22/10/2025 permite a atacantes remotos ejecutar comandos de sistema arbitrarios a través de un archivo de clase malicioso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ART@zuso.ai",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ART@zuso.ai",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://zuso.ai/advisory/za-2026-02",
        "source" : "ART@zuso.ai"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25090",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:33.630",
      "lastModified" : "2026-01-30T05:16:33.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25091",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:33.747",
      "lastModified" : "2026-01-30T05:16:33.747",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25092",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:33.820",
      "lastModified" : "2026-01-30T05:16:33.820",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25093",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:33.900",
      "lastModified" : "2026-01-30T05:16:33.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25094",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:33.977",
      "lastModified" : "2026-01-30T05:16:33.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25095",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:34.043",
      "lastModified" : "2026-01-30T05:16:34.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25096",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:34.120",
      "lastModified" : "2026-01-30T05:16:34.120",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25097",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-01-30T05:16:34.187",
      "lastModified" : "2026-01-30T05:16:34.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0805",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-30T07:16:14.917",
      "lastModified" : "2026-02-26T19:57:06.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de neutralización de entrada en el componente de Configuración de Copia de Seguridad de Crafty Controller permite a un atacante remoto y autenticado realizar manipulación de archivos y ejecución remota de código mediante salto de ruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftycontrol:crafty_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.8.0",
            "matchCriteriaId" : "EC9CF8B6-B2D9-4993-853D-F6E257FEE316"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/crafty-controller/crafty-4/-/issues/650",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0963",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-01-30T07:16:15.173",
      "lastModified" : "2026-02-26T19:54:36.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de neutralización de entrada en el componente de punto final de la API de operaciones de archivo de Crafty Controller permite a un atacante remoto y autenticado realizar manipulación de archivos y ejecución remota de código a través de salto de ruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftycontrol:crafty_controller:4.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E37C1841-65A3-4553-82DA-8E1B7051DF1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/crafty-controller/crafty-4/-/issues/660",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1680",
      "sourceIdentifier" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
      "published" : "2026-01-30T07:16:15.350",
      "lastModified" : "2026-03-03T15:06:54.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via direct communication with the LocalAdminService.exe named pipe, bypassing client-side group membership restrictions."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en el endpoint WCF en Edgemo (ahora propiedad de Danoffice IT) Servicio de Administrador Local 1.2.7.23180 en Windows permite a un usuario local escalar sus privilegios a administrador local mediante comunicación directa con la tubería con nombre LocalAdminService.exe, eludiendo las restricciones de membresía de grupo del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:danofficeit:local_admin_service:1.2.7.23180:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "6D35C301-C544-4630-8256-0CE50BE3AC4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://retest.dk/local-privilege-escalation-vulnerability-found-in-local-admin-service/",
        "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.danofficeit.com/howwedoit/workplace/management/",
        "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://retest.dk/local-privilege-escalation-vulnerability-found-in-local-admin-service/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-30T07:16:15.570",
      "lastModified" : "2026-03-10T18:17:12.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation."
      }, {
        "lang" : "es",
        "value" : "En libexpat antes de 2.7.4, la función doContent no determina correctamente el tamaño del búfer bufSize porque no hay una comprobación de desbordamiento de entero para la reasignación del búfer de etiquetas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.4",
            "matchCriteriaId" : "8506CE35-F4E2-420E-99FB-FC24254BF7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libexpat/libexpat/pull/1075",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/libexpat/libexpat/pull/1075/commits/9c2d990389e6abe2e44527eeaa8b39f16fe859c7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-01-30T08:16:02.563",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log."
      }, {
        "lang" : "es",
        "value" : "Llama Stack (también conocido como llama-stack) antes de 0.4.0rc3 no censura la contraseña de pgvector en el registro de inicialización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/llamastack/llama-stack/compare/v0.4.0rc2...v0.4.0rc3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/llamastack/llama-stack/pull/4439",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21418",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-30T09:15:50.920",
      "lastModified" : "2026-03-10T18:21:28.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges."
      }, {
        "lang" : "es",
        "value" : "Dell Unity, versión(es) 5.5.2 y anteriores, contiene una vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando de SO (inyección de comandos de SO). Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la ejecución arbitraria de comandos con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.3.0",
            "matchCriteriaId" : "ED4C4D95-DC2F-47F0-AC47-25C0418E601C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000421197/dsa-2026-054-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22277",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-01-30T09:15:51.090",
      "lastModified" : "2026-03-10T18:21:46.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges."
      }, {
        "lang" : "es",
        "value" : "Dell UnityVSA, versión(es) 5.4 y anteriores, contiene una vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando de SO ('inyección de comandos de SO'). Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que lleva a la ejecución arbitraria de comandos con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.3.0",
            "matchCriteriaId" : "ED4C4D95-DC2F-47F0-AC47-25C0418E601C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000421197/dsa-2026-054-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1699",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-01-30T10:15:56.617",
      "lastModified" : "2026-03-10T18:23:17.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to repository secrets and a GITHUB_TOKEN with extensive write permissions (contents:write, packages:write, pages:write, actions:write). An attacker could exfiltrate secrets, publish malicious packages to the eclipse-theia organization, modify the official Theia website, and push malicious code to the repository."
      }, {
        "lang" : "es",
        "value" : "En el repositorio de Eclipse Theia Website, el flujo de trabajo de GitHub Actions .github/workflows/preview.yml utilizó el disparador pull_request_target mientras extraía y ejecutaba código de solicitud de extracción no confiable. Esto permitió a cualquier usuario de GitHub ejecutar código arbitrario en el entorno de CI del repositorio con acceso a secretos del repositorio y un GITHUB_TOKEN con amplios permisos de escritura (contents:write, packages:write, pages:write, actions:write). Un atacante podría exfiltrar secretos, publicar paquetes maliciosos en la organización eclipse-theia, modificar el sitio web oficial de Theia y enviar código malicioso al repositorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:theia_website:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-01-22",
            "matchCriteriaId" : "9712F17D-952F-44AE-931E-8C2491E4C1C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/332",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0709",
      "sourceIdentifier" : "hsrc@hikvision.com",
      "published" : "2026-01-30T11:15:55.530",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."
      }, {
        "lang" : "es",
        "value" : "Algunos Puntos de Acceso Inalámbricos Hikvision son vulnerables a la ejecución de comandos autenticada debido a una validación de entrada insuficiente. Atacantes con credenciales válidas pueden exploit esta falla enviando paquetes manipulados que contienen comandos maliciosos a los dispositivos afectados, lo que lleva a la ejecución arbitraria de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "hsrc@hikvision.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-wireless-access-point-products/",
        "source" : "hsrc@hikvision.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22623",
      "sourceIdentifier" : "hsrc@hikvision.com",
      "published" : "2026-01-30T11:15:55.663",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages."
      }, {
        "lang" : "es",
        "value" : "Debido a la validación insuficiente de parámetros de entrada en la interfaz, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden ejecutar comandos arbitrarios en el dispositivo mediante la creación de mensajes específicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "hsrc@hikvision.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html",
        "source" : "hsrc@hikvision.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22624",
      "sourceIdentifier" : "hsrc@hikvision.com",
      "published" : "2026-01-30T11:15:55.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization."
      }, {
        "lang" : "es",
        "value" : "Debido a un control de acceso inadecuado, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden manipular los recursos de archivo de otros usuarios sin la debida autorización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "hsrc@hikvision.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html",
        "source" : "hsrc@hikvision.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22625",
      "sourceIdentifier" : "hsrc@hikvision.com",
      "published" : "2026-01-30T11:15:55.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de nombres de archivo en ciertos productos NAS de HIKSEMI puede llevar a la exposición de archivos de sistema sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "hsrc@hikvision.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html",
        "source" : "hsrc@hikvision.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22626",
      "sourceIdentifier" : "hsrc@hikvision.com",
      "published" : "2026-01-30T11:15:56.010",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages."
      }, {
        "lang" : "es",
        "value" : "Debido a la validación insuficiente de parámetros de entrada en la interfaz, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden causar un comportamiento anómalo del dispositivo mediante la elaboración de mensajes específicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "hsrc@hikvision.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-233"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html",
        "source" : "hsrc@hikvision.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1498",
      "sourceIdentifier" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "published" : "2026-01-30T13:15:54.560",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.This issue affects Fireware OS: from 12.0 through 12.11.6, from 12.5 through 12.5.15, from 2025.1 through 2026.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección LDAP en WatchGuard Fireware OS puede permitir a un atacante remoto no autenticado recuperar información sensible de un servidor de autenticación LDAP conectado a través de una interfaz web de autenticación o gestión expuesta. Esta vulnerabilidad también puede permitir a un atacante remoto autenticarse como un usuario LDAP con un identificador parcial si adicionalmente tienen la frase de contraseña válida de ese usuario. Este problema afecta a Fireware OS: desde 12.0 hasta 12.11.6, desde 12.5 hasta 12.5.15, desde 2025.1 hasta 2026.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00001",
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1682",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T14:16:07.100",
      "lastModified" : "2026-02-23T10:16:18.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of the component PFCP UDP Endpoint. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been published and may be used. A patch should be applied to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Free5GC SMF hasta la versión 4.1.0. Afectada es la función HandlePfcpAssociationReleaseRequest del archivo internal/pfcp/handler/handler.go del componente PFCP UDP Endpoint. La ejecución de una manipulación puede llevar a una desreferencia de puntero nulo. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Un parche debería aplicarse para remediar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/794",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/794#issue-3811888505",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/794#issuecomment-3761063382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/free5gc/smf/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/free5gc/smf/pull/188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739508",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1683",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T14:16:07.323",
      "lastModified" : "2026-02-23T10:16:18.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Free5GC SMF hasta la versión 4.1.0. Afectada por esta vulnerabilidad es la función HandlePfcpSessionReportRequest del archivo internal/pfcp/handler/handler.go del componente PFCP. La manipulación conduce a denegación de servicio. La explotación remota del ataque es posible. El exploit ha sido divulgado al público y puede ser utilizado. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/804#issue-3816086696",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/smf/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/free5gc/smf/pull/188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1684",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T15:16:08.790",
      "lastModified" : "2026-02-23T10:16:18.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function HandleReports of the file /internal/context/pfcp_reports.go of the component PFCP UDP Endpoint. The manipulation results in denial of service. The attack can be executed remotely. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Free5GC SMF hasta la versión 4.1.0. Este problema afecta a la función HandleReports del archivo /internal/context/pfcp_reports.go del componente PFCP UDP Endpoint. La manipulación resulta en denegación de servicio. El ataque puede ejecutarse remotamente. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/smf/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/free5gc/smf/pull/188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343477",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343477",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739656",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1685",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T15:16:08.973",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en D-Link DIR-823X 250416. Esta vulnerabilidad afecta a la función sub_40AC74 del componente Login. Dicha manipulación conduce a una restricción inadecuada de intentos excesivos de autenticación. El ataque puede ser realizado de forma remota. Este ataque se caracteriza por una alta complejidad. Se afirma que la explotabilidad es difícil. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-799"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343479",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343479",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740886",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1686",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T16:16:12.633",
      "lastModified" : "2026-02-10T14:43:24.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Totolink A3600R 5.9c.4959. Este problema afecta a la función setAppEasyWizardConfig en la librería /lib/cste_modules/app.so. Realizar una manipulación del argumento apcliSsid resulta en desbordamiento de búfer. Es posible iniciar el ataque remotamente. El exploit ha sido liberado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a3600r_firmware:5.9c.4959:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C87B960-EFA4-440B-B1A6-B3FDE8A0BD3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a3600r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10B282D-E388-4A52-B7F8-D08C83CF0D62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3600R/4959-apcliSsid-setAppEasyWizardConfig.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3600R/4959-apcliSsid-setAppEasyWizardConfig.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343480",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343480",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.740888",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1687",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T16:16:12.833",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a manipulation of the argument serverString can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Está afectada una función desconocida del archivo /boaform/formSamba del componente Boa Webserver. La ejecución de una manipulación del argumento serverString puede llevar a inyección de comandos. Es posible lanzar el ataque de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg10_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26016BC5-6C38-4C34-9E32-96860AF28D14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69F22BC-43E3-4D4C-ABB5-33F681B8B569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSamba-serverString-command.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSamba-serverString-command.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343481",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343481",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741281",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1688",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T16:16:13.023",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en itsourcecode Directory Management System 1.0. El elemento afectado es una función desconocida del archivo /admin/index.PHP. La manipulación del argumento Username conduce a inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:directory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2C6D1C-BDB9-462E-A977-E1A5F39EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jackhong1236/CVE_1/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24854",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T16:16:13.620",
      "lastModified" : "2026-02-17T14:33:24.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in endpoint `/PaddleNumEditor.php` in ChurchCRM prior to version 6.7.2. Any authenticated user, including one with zero assigned permissions, can exploit SQL injection through the `PerID` parameter. Version 6.7.2 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "ChurchCRM es un sistema de gestión de iglesias de código abierto. Una vulnerabilidad de inyección SQL existe en el endpoint '/PaddleNumEditor.php' en ChurchCRM anterior a la versión 6.7.2. Cualquier usuario autenticado, incluido uno con cero permisos asignados, puede explotar la inyección SQL a través del parámetro 'PerID'. La versión 6.7.2 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.2",
            "matchCriteriaId" : "161E79F7-BCB4-4899-A126-EDBC227BE903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/ChurchCRM/CRM/commit/748f5084fc06c5e12463dc7fdd62d1d31fc08d38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-p3q7-q68q-h2gr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24855",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T16:16:13.790",
      "lastModified" : "2026-02-17T14:32:44.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM is an open-source church management system. Versions prior to 6.7.2 have a Stored Cross-Site Scripting (XSS) vulnerability occurs in Create Events in Church Calendar. Users with low privileges can create XSS payloads in the Description field. This payload is stored in the database, and when other users view that event (including the admin), the payload is triggered, leading to account takeover. Version 6.7.2 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "ChurchCRM es un sistema de gestión de iglesias de código abierto. Las versiones anteriores a la 6.7.2 tienen una vulnerabilidad de cross-site scripting (XSS) almacenado que se produce en Crear Eventos en el Calendario de la Iglesia. Los usuarios con pocos privilegios pueden crear cargas útiles XSS en el campo Descripción. Esta carga útil se almacena en la base de datos, y cuando otros usuarios ven ese evento (incluido el administrador), la carga útil se activa, lo que lleva a la toma de control de la cuenta. La versión 6.7.2 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.2",
            "matchCriteriaId" : "161E79F7-BCB4-4899-A126-EDBC227BE903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChurchCRM/CRM/commit/0cd0d211459b8c19509d36b3c1dfcd7f8c10d914",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/commit/ec4b16e9a3ca09c8a01a712bcb90579c42f2ba28",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-49qp-cfqx-c767",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25050",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T16:16:13.967",
      "lastModified" : "2026-02-26T21:59:27.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vendure is an open-source headless commerce platform. Prior to version 3.5.3, the `NativeAuthenticationStrategy.authenticate()` method is vulnerable to a timing attack that allows attackers to enumerate valid usernames (email addresses). In `packages/core/src/config/auth/native-authentication-strategy.ts`, the authenticate method returns immediately if a user is not found. The significant timing difference (~200-400ms for bcrypt vs ~1-5ms for DB miss) allows attackers to reliably distinguish between existing and non-existing accounts. Version 3.5.3 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vendure es una plataforma de comercio headless de código abierto. Antes de la versión 3.5.3, el método 'NativeAuthenticationStrategy.authenticate()' es vulnerable a un ataque de temporización que permite a los atacantes enumerar nombres de usuario válidos (direcciones de correo electrónico). En 'packages/core/src/config/auth/native-authentication-strategy.ts', el método authenticate devuelve inmediatamente si no se encuentra un usuario. La diferencia de temporización significativa (~200-400ms para bcrypt frente a ~1-5ms para una falla de DB) permite a los atacantes distinguir de forma fiable entre cuentas existentes y no existentes. La versión 3.5.3 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-202"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vendure:vendure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.3",
            "matchCriteriaId" : "0DA0FC83-F3D8-4C6F-AB3F-95B66304DF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vendurehq/vendure/releases/tag/v3.5.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/vendurehq/vendure/security/advisories/GHSA-6f65-4fv2-wwch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25128",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T16:16:14.123",
      "lastModified" : "2026-02-27T20:22:44.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 5.0.9 through 5.3.3, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `&#9999999;` or `&#xFFFFFF;`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input. Version 5.3.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "fast-xml-parser permite a los usuarios validar XML, analizar XML a objeto JS o construir XML desde objeto JS sin librerías basadas en C/C++ y sin callback. En las versiones 4.3.6 a la 5.3.3, existe una vulnerabilidad de tipo RangeError en el procesamiento de entidades numéricas de fast-xml-parser al analizar XML con puntos de código de entidad fuera de rango (p. ej., '?' o '?'). Esto provoca que el analizador lance una excepción no capturada, lo que bloquea cualquier aplicación que procesa entrada XML no confiable. La versión 5.3.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naturalintelligence:fast-xml-parser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.9",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "98ED3450-6A9F-46D1-9619-2EB783A43FBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1689",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T17:16:13.783",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login Interface. The manipulation of the argument Host results in command injection. The attack can be launched remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. El elemento afectado es la función checkUserFromLanOrWan del archivo /boaform/admin/formLogin del componente Interfaz de inicio de sesión. La manipulación del argumento Host resulta en inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg10_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26016BC5-6C38-4C34-9E32-96860AF28D14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69F22BC-43E3-4D4C-ABB5-33F681B8B569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formLogin-Host-command.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formLogin-Host-command.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343483",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343483",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741411",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1690",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T17:16:13.970",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of the argument sysCmd causes command injection. The attack may be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Esto afecta la función del sistema del archivo /boaform/formSysCmd. Esta manipulación del argumento sysCmd provoca inyección de comandos. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg10_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26016BC5-6C38-4C34-9E32-96860AF28D14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69F22BC-43E3-4D4C-ABB5-33F681B8B569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSysCmd-sysCmd-command.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSysCmd-sysCmd-command.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343484",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343484",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741425",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1691",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T17:16:14.150",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component SnakeYAML. Such manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en bolo-solo hasta 2.6.4. Esto afecta a la función importMarkdownsSync del archivo src/main/java/org/b3log/solo/bolo/prop/BackupService.java del componente SnakeYAML. Dicha manipulación conduce a la deserialización. El ataque puede ser lanzado en remoto. El exploit ha sido puesto a disposición del público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adlered:bolo-solo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "C5BC7EFC-81E9-4AD5-A024-C3C2AAFC80F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bolo-blog/bolo-solo/issues/325",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bolo-blog/bolo-solo/issues/325#issue-3828755519",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343485",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343485",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741899",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1700",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T17:16:14.340",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This manipulation of the argument Message causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en projectworlds House Rental and Property Listing 1.0. Esta vulnerabilidad afecta código desconocido del archivo /app/sms.php. Esta manipulación del argumento Message provoca cross site scripting. Es posible iniciar el ataque de forma remota. El exploit ha sido puesto a disposición del público y podría ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:house_rental_and_property_listing_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B12B9A-7696-42F8-9D49-6182D542787C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jiahao412/CVE/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1701",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T18:15:59.727",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/index.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Due to contradicting product definitions in the original disclosure, this CVE was initially incorrectly assigned to the Student Management System."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en itsourcecode Student Management System 1.0. Este problema afecta a un procesamiento desconocido del archivo /enrollment/index.php. Dicha manipulación del argumento ID conduce a una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/34",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742024",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1702",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T18:15:59.930",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument group_id results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en SourceCodester Pet Grooming Management Software 1.0 que afecta a una función desconocida del archivo /admin/operation/user.php del componente Gestión de Usuarios. Al realizar una manipulación del argumento group_id se produce una autorización indebida. El ataque puede iniciarse de forma remota. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88D324D-B780-4D8D-BE43-829227D2808F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Asim-QAZi/Improper-Access-Control---in-Pet-Grooming-Management-Software",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23835",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T20:16:41.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Base > File Upload` does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitrary files in abnormal or unintended paths. In addition, since `lobechat.com` relies on the size parameter from the request to calculate file usage, an attacker can manipulate this value to misrepresent the actual file size, such as uploading a `1 GB` file while reporting it as `10 MB`, or falsely declaring a `10 MB` file as a `1 GB` file. By manipulating the size value provided in the client upload request, it is possible to bypass the monthly upload quota enforced by the server and continuously upload files beyond the intended storage and traffic limits. This abuse can result in a discrepancy between actual resource consumption and billing calculations, causing direct financial impact to the service operator. Additionally, exhaustion of storage or related resources may lead to degraded service availability, including failed uploads, delayed content delivery, or temporary suspension of upload functionality for legitimate users. A single malicious user can also negatively affect other users or projects sharing the same subscription plan, effectively causing an indirect denial of service (DoS). Furthermore, excessive and unaccounted-for uploads can distort monitoring metrics and overload downstream systems such as backup processes, malware scanning, and media processing pipelines, ultimately undermining overall operational stability and service reliability. Version 1.143.3 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "LobeHub es una red de agentes humanos y de IA de código abierto. Antes de la versión 1.143.3, la función de carga de archivos en 'Knowledge Base &gt; File Upload' no valida la integridad de la solicitud de carga, lo que permite a los usuarios interceptar y modificar los parámetros de la solicitud. Como resultado, es posible crear archivos arbitrarios en rutas anormales o no intencionadas. Además, dado que 'lobechat.com' se basa en el parámetro de tamaño de la solicitud para calcular el uso del archivo, un atacante puede manipular este valor para tergiversar el tamaño real del archivo, como cargar un archivo de '1 GB' mientras lo reporta como '10 MB', o declarar falsamente un archivo de '10 MB' como un archivo de '1 GB'. Al manipular el valor de tamaño proporcionado en la solicitud de carga del cliente, es posible eludir la cuota de carga mensual impuesta por el servidor y cargar continuamente archivos más allá de los límites de almacenamiento y tráfico previstos. Este abuso puede resultar en una discrepancia entre el consumo real de recursos y los cálculos de facturación, causando un impacto financiero directo al operador del servicio. Además, el agotamiento del almacenamiento o de los recursos relacionados puede provocar una disponibilidad degradada del servicio, incluyendo cargas fallidas, entrega de contenido retrasada o suspensión temporal de la funcionalidad de carga para usuarios legítimos. Un único usuario malicioso también puede afectar negativamente a otros usuarios o proyectos que comparten el mismo plan de suscripción, causando efectivamente una denegación de servicio (DoS) indirecta. Además, las cargas excesivas y no contabilizadas pueden distorsionar las métricas de monitoreo y sobrecargar los sistemas posteriores, como los procesos de copia de seguridad, el escaneo de malware y las tuberías de procesamiento de medios, socavando en última instancia la estabilidad operativa general y la fiabilidad del servicio. La versión 1.143.3 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1723",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2026-01-30T21:15:57.853",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo (vulnerabilidad de 'inyección de comandos del sistema operativo') en TOTOLINK X6000R permite la inyección de comandos del sistema operativo. Este problema afecta a X6000R: hasta la versión V9.4.0cu.1498_B20250826."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2026-0001/PANW-2026-0001.md",
        "source" : "psirt@paloaltonetworks.com"
      }, {
        "url" : "https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html",
        "source" : "psirt@paloaltonetworks.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25129",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T21:15:58.260",
      "lastModified" : "2026-02-27T20:36:55.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup. If an attacker can write to a directory that a victim later uses as their CWD when launching PsySH, the attacker can trigger arbitrary code execution in the victim's context. When the victim runs PsySH with elevated privileges (e.g., root), this results in local privilege escalation. This is a CWD configuration poisoning issue leading to arbitrary code execution in the victim user’s context. If a privileged user (e.g., root, a CI runner, or an ops/debug account) launches PsySH with CWD set to an attacker-writable directory containing a malicious `.psysh.php`, the attacker can execute commands with that privileged user’s permissions, resulting in local privilege escalation. Downstream consumers that embed PsySH inherit this risk. For example, Laravel Tinker (`php artisan tinker`) uses PsySH. If a privileged user runs Tinker while their shell is in an attacker-writable directory, the `.psysh.php` auto-load behavior can be abused in the same way to execute attacker-controlled code under the victim’s privileges. Versions 0.11.23 and 0.12.19 patch the issue."
      }, {
        "lang" : "es",
        "value" : "PsySH es una consola de desarrollador en tiempo de ejecución, depurador interactivo y REPL para PHP. Antes de las versiones 0.11.23 y 0.12.19, PsySH carga y ejecuta automáticamente un archivo '.psysh.php' desde el Directorio de Trabajo Actual (CWD) al inicio. Si un atacante puede escribir en un directorio que una víctima usa posteriormente como su CWD al iniciar PsySH, el atacante puede desencadenar la ejecución de código arbitrario en el contexto de la víctima. Cuando la víctima ejecuta PsySH con grandes privilegios (por ejemplo, root), esto resulta en una escalada de privilegios local. Este es un problema de envenenamiento de la configuración del CWD que conduce a la ejecución de código arbitrario en el contexto del usuario víctima. Si un usuario privilegiado (por ejemplo, root, un ejecutor de CI o una cuenta de operaciones/depuración) inicia PsySH con el CWD configurado en un directorio escribible por el atacante que contiene un '.psysh.php' malicioso, el atacante puede ejecutar comandos con los permisos de ese usuario privilegiado, lo que resulta en una escalada de privilegios local. Los consumidores posteriores que incrustan PsySH heredan este riesgo. Por ejemplo, Laravel Tinker (php artisan tinker) usa PsySH. Si un usuario privilegiado ejecuta Tinker mientras su shell está en un directorio escribible por el atacante, el comportamiento de carga automática del '.psysh.php' puede ser abusado de la misma manera para ejecutar código controlado por el atacante bajo los privilegios de la víctima. Las versiones 0.11.23 y 0.12.19 resuelven el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psysh:psysh:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.11.23",
            "matchCriteriaId" : "DC5AF0E5-64F3-41E5-9702-1F5A6EF1E022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psysh:psysh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.12.0",
            "versionEndExcluding" : "0.12.19",
            "matchCriteriaId" : "767A36BE-AA1A-4E8D-B292-32B8250DCC9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bobthecow/psysh/releases/tag/v0.11.23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bobthecow/psysh/releases/tag/v0.12.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bobthecow/psysh/security/advisories/GHSA-4486-gxhx-5mg7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25130",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T21:15:58.443",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via `subprocess.Popen()` with `shell=True`, allowing attackers to execute arbitrary commands on the host system. The `find_file()` tool executes without requiring user approval because find is considered a \"safe\" pre-approved command. This means an attacker can achieve Remote Code Execution (RCE) by injecting malicious arguments (like -exec) into the args parameter, completely bypassing any human-in-the-loop safety mechanisms. Commit e22a1220f764e2d7cf9da6d6144926f53ca01cde contains a fix."
      }, {
        "lang" : "es",
        "value" : "Ciberseguridad AI (CAI) es un framework para la seguridad de la IA. En versiones hasta la 0.5.10 inclusive, el framework CAI (Ciberseguridad AI) contiene múltiples vulnerabilidades de inyección de argumentos en sus herramientas de función. La entrada controlada por el usuario se pasa directamente a comandos de shell a través de `subprocess.Popen()` con `shell=True`, permitiendo a los atacantes ejecutar comandos arbitrarios en el sistema anfitrión. La herramienta `find_file()` se ejecuta sin requerir aprobación del usuario porque find se considera un comando 'seguro' preaprobado. Esto significa que un atacante puede lograr Ejecución Remota de Código (RCE) inyectando argumentos maliciosos (como -exec) en el parámetro args, eludiendo completamente cualquier mecanismo de seguridad de intervención humana. El commit e22a1220f764e2d7cf9da6d6144926f53ca01cde contiene una solución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aliasrobotics/cai/blob/559de8fcbc2b44f3b0360f35ffdc2bb975e7d7e4/src/cai/tools/reconnaissance/filesystem.py#L60",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/aliasrobotics/cai/commit/e22a1220f764e2d7cf9da6d6144926f53ca01cde",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/aliasrobotics/cai/security/advisories/GHSA-jfpc-wj3m-qw2m",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25141",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T21:15:58.603",
      "lastModified" : "2026-02-27T18:21:56.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions starting with 7.19.0 and prior to 7.21.0 and 8.2.0 have an incomplete fix for CVE-2026-23947. While the jsStringEscape function properly handles single quotes ('), double quotes (\") and so on, it is still possible to achieve code injection using only a limited set of characters that are currently not escaped. The vulnerability lies in the fact that the application can be forced to execute arbitrary JavaScript using characters such as []()!+. By using a technique known as JSFuck, an attacker can bypass the current sanitization logic and run arbitrary code without needing any alphanumeric characters or quotes. Version 7.21.0 and 8.2.0 contain an updated fix."
      }, {
        "lang" : "es",
        "value" : "Orval genera clientes JS con seguridad de tipos (TypeScript) a partir de cualquier especificación OpenAPI v3 o Swagger v2 válida. Las versiones a partir de la 7.19.0 y anteriores a la 7.21.0 y 8.2.0 tienen una corrección incompleta para CVE-2026-23947. Si bien la función jsStringEscape maneja correctamente las comillas simples ('), las comillas dobles (\") y demás, aún es posible lograr la inyección de código utilizando solo un conjunto limitado de caracteres que actualmente no están escapados. La vulnerabilidad reside en el hecho de que la aplicación puede ser forzada a ejecutar JavaScript arbitrario utilizando caracteres como []()!+. Al utilizar una técnica conocida como JSFuck, un atacante puede eludir la lógica de saneamiento actual y ejecutar código arbitrario sin necesidad de caracteres alfanuméricos o comillas. Las versiones 7.21.0 y 8.2.0 contienen una corrección actualizada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.19.0",
            "versionEndExcluding" : "7.21.0",
            "matchCriteriaId" : "5556B1C2-D618-454E-A218-A1C555204D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.2.0",
            "matchCriteriaId" : "B4295F68-11B1-4DC8-AF44-570321BD85B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orval-labs/orval/blob/02211fc413524be340ba9ace866a2ef68845ca7c/packages/core/src/utils/string.ts#L227",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/releases/tag/v7.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/releases/tag/v8.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/security/advisories/GHSA-gch2-phqh-fg9q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1705",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-01-30T22:15:55.950",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_server_vdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en D-Link DSL-6641K N8.TR069.20131126. Afectada por este problema es la función ad_virtual_server_vdsl del componente Interfaz Web. Realizar una manipulación del argumento Name resulta en cross site scripting. Es posible iniciar el ataque remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-ad_virtual_server_vdsl-Configuration-2eeb5c52018a805d97adfb23dfec39c9?source=copy_link",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.343510",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.343510",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.742421",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25152",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T22:15:56.190",
      "lastModified" : "2026-02-19T15:37:56.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allows attackers to read arbitrary files from the host filesystem when Backstage is configured with `techdocs.generator.runIn: local`. When processing documentation from untrusted sources, symlinks within the docs directory are followed by MkDocs during the build process. File contents are embedded into generated HTML and exposed to users who can view the documentation. This vulnerability is fixed in` @backstage/plugin-techdocs-node` versions 1.13.11 and 1.14.1. Some workarounds are available. Switch to `runIn: docker` in `app-config.yaml` and/or restrict write access to TechDocs source repositories to trusted users only."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores, y @backstage/plugin-techdocs-node proporciona funcionalidades comunes de node.js para TechDocs. En versiones de @backstage/plugin-techdocs-node anteriores a la 1.13.11 y 1.14.1, una vulnerabilidad de salto de ruta en el generador local de TechDocs permite a los atacantes leer archivos arbitrarios del sistema de archivos del host cuando Backstage está configurado con 'techdocs.generator.runIn: local'. Al procesar documentación de fuentes no confiables, los enlaces simbólicos dentro del directorio docs son seguidos por MkDocs durante el proceso de construcción. El contenido de los archivos se incrusta en el HTML generado y se expone a los usuarios que pueden ver la documentación. Esta vulnerabilidad está corregida en las versiones 1.13.11 y 1.14.1 de '@backstage/plugin-techdocs-node'. Algunas soluciones alternativas están disponibles. Cambie a 'runIn: docker' en 'app-config.yaml' y/o restrinja el acceso de escritura a los repositorios de origen de TechDocs solo a usuarios de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.11",
            "matchCriteriaId" : "086F7DE4-8356-4AE3-9E29-B852A5C4B2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.14.0",
            "versionEndExcluding" : "1.14.1",
            "matchCriteriaId" : "0393AC7C-1889-4869-ABAF-1C5D96CA2C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-w669-jj7h-88m9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25153",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T22:15:56.343",
      "lastModified" : "2026-02-19T15:26:37.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, when TechDocs is configured with `runIn: local`, a malicious actor who can submit or modify a repository's `mkdocs.yml` file can execute arbitrary Python code on the TechDocs build server via MkDocs hooks configuration. @backstage/plugin-techdocs-node versions 1.13.11 and 1.14.1 contain a fix. The fix introduces an allowlist of supported MkDocs configuration keys. Unsupported configuration keys (including `hooks`) are now removed from `mkdocs.yml` before running the generator, with a warning logged to indicate which keys were removed. Users of `@techdocs/cli` should also upgrade to the latest version, which includes the fixed `@backstage/plugin-techdocs-node` dependency. Some workarounds are available. Configure TechDocs with `runIn: docker` instead of `runIn: local` to provide container isolation, though it does not fully mitigate the risk. Limit who can modify `mkdocs.yml` files in repositories that TechDocs processes; only allow trusted contributors. Implement PR review requirements for changes to `mkdocs.yml` files to detect malicious `hooks` configurations before they are merged. Use MkDocs < 1.4.0 (e.g., 1.3.1) which does not support hooks. Note: This may limit access to newer MkDocs features. Building documentation in CI/CD pipelines using `@techdocs/cli` does not mitigate this vulnerability, as the CLI uses the same vulnerable `@backstage/plugin-techdocs-node` package."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores, y @backstage/plugin-techdocs-node proporciona funcionalidades comunes de node.js para TechDocs. En versiones de @backstage/plugin-techdocs-node anteriores a 1.13.11 y 1.14.1, cuando TechDocs está configurado con 'runIn: local', un actor malicioso que puede enviar o modificar el archivo 'mkdocs.yml' de un repositorio puede ejecutar código Python arbitrario en el server de compilación de TechDocs a través de la configuración de hooks de MkDocs. Las versiones 1.13.11 y 1.14.1 de @backstage/plugin-techdocs-node contienen una corrección. La corrección introduce una lista de permitidos (allowlist) de claves de configuración de MkDocs compatibles. Las claves de configuración no compatibles (incluyendo 'hooks') ahora se eliminan de 'mkdocs.yml' antes de ejecutar el generador, con una advertencia registrada para indicar qué claves se eliminaron. Los usuarios de '@techdocs/cli' también deben actualizar a la última versión, que incluye la dependencia corregida de '@backstage/plugin-techdocs-node'. Algunas soluciones alternativas están disponibles. Configure TechDocs con 'runIn: docker' en lugar de 'runIn: local' para proporcionar aislamiento de contenedor, aunque no mitiga completamente el riesgo. Limite quién puede modificar los archivos 'mkdocs.yml' en los repositorios que TechDocs procesa; solo permita colaboradores de confianza. Implemente requisitos de revisión de PR para cambios en los archivos 'mkdocs.yml' para detectar configuraciones maliciosas de 'hooks' antes de que se fusionen. Use MkDocs &lt; 1.4.0 (por ejemplo, 1.3.1) que no soporta hooks. Nota: Esto puede limitar el acceso a características más nuevas de MkDocs. La compilación de documentación en pipelines de CI/CD usando '@techdocs/cli' no mitiga esta vulnerabilidad, ya que la CLI utiliza el mismo paquete vulnerable de '@backstage/plugin-techdocs-node'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.11",
            "matchCriteriaId" : "086F7DE4-8356-4AE3-9E29-B852A5C4B2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.14.0",
            "versionEndExcluding" : "1.14.1",
            "matchCriteriaId" : "0393AC7C-1889-4869-ABAF-1C5D96CA2C06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-6jr7-99pf-8vgf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25154",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T22:15:56.490",
      "lastModified" : "2026-02-19T15:15:33.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a \"Share via Link\" session, the LocalSend application starts a local HTTP server to host the selected files. The client-side logic for this web interface is contained in `app/assets/web/main.js`. Note that at [0], the `handleFilesDisplay` function constructs the HTML for the file list by iterating over the files received from the server. Commit 8f3cec85aa29b2b13fed9b2f8e499e1ac9b0504c contains a patch."
      }, {
        "lang" : "es",
        "value" : "LocalSend es una aplicación gratuita y de código abierto que permite a los usuarios compartir archivos y mensajes con dispositivos cercanos a través de su red local sin necesidad de una conexión a internet. En versiones hasta la 1.17.0 inclusive, cuando un usuario inicia una sesión de 'Compartir mediante enlace', la aplicación LocalSend inicia un servidor HTTP local para alojar los archivos seleccionados. La lógica del lado del cliente para esta interfaz web está contenida en `app/assets/web/main.js`. Tenga en cuenta que en [0], la función `handleFilesDisplay` construye el HTML para la lista de archivos al iterar sobre los archivos recibidos del servidor. El commit 8f3cec85aa29b2b13fed9b2f8e499e1ac9b0504c contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:localsend:localsend:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17.0",
            "matchCriteriaId" : "CC589644-2FC6-4C09-AC73-266AB31A7E1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/localsend/localsend/commit/8f3cec85aa29b2b13fed9b2f8e499e1ac9b0504c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/localsend/localsend/security/advisories/GHSA-34v6-52hh-x4r4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25156",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-01-30T23:16:12.333",
      "lastModified" : "2026-02-19T15:10:01.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HotCRP is conference review software. HotCRP versions from October 2025 through January 2026 delivered documents of all types with inline Content-Disposition, causing them to be rendered in the user’s browser rather than downloaded. (The intended behavior was for only `text/plain`, `application/pdf`, `image/gif`, `image/jpeg`, and `image/png` to be delivered inline, though adding `save=0` to the document URL could request inline delivery for any document.) This made users who clicked a document link vulnerable to cross-site scripting attacks. An uploaded HTML or SVG document would run in the viewer’s browser with access to their HotCRP credentials, and Javascript in that document could eventually make arbitrary calls to HotCRP’s API. Malicious documents could be uploaded to submission fields with “file upload” or “attachment” type, or as attachments to comments. PDF upload fields were not vulnerable. A search of documents uploaded to hotcrp.com found no evidence of exploitation. The vulnerability was introduced in commit aa20ef288828b04550950cf67c831af8a525f508 (11 October 2025), present in development versions and v3.2, and fixed in commit 8933e86c9f384b356dc4c6e9e2814dee1074b323 and v3.2.1. Additionally, c3d88a7e18d52119c65df31c2cc994edd2beccc5 and v3.2.1 remove support for `save=0`."
      }, {
        "lang" : "es",
        "value" : "HotCRP es un software de revisión de conferencias. Las versiones de HotCRP desde octubre de 2025 hasta enero de 2026 entregaron documentos de todo tipo con Content-Disposition en línea, haciendo que se renderizaran en el navegador del usuario en lugar de descargarse. (El comportamiento previsto era que solo 'text/plain', 'application/pdf', 'image/gif', 'image/jpeg' e 'image/png' se entregaran en línea, aunque añadir 'save=0' a la URL del documento podía solicitar la entrega en línea para cualquier documento.) Esto hizo que los usuarios que hacían clic en un enlace de documento fueran vulnerables a ataques de cross-site scripting. Un documento HTML o SVG subido se ejecutaría en el navegador del visor con acceso a sus credenciales de HotCRP, y Javascript en ese documento podría eventualmente hacer llamadas arbitrarias a la API de HotCRP. Los documentos maliciosos podían subirse a campos de envío con tipo 'carga de archivo' o 'adjunto', o como adjuntos a comentarios. Los campos de carga de PDF no eran vulnerables. Una búsqueda de documentos subidos a hotcrp.com no encontró evidencia de explotación. La vulnerabilidad fue introducida en el commit aa20ef288828b04550950cf67c831af8a525f508 (11 de octubre de 2025), presente en versiones de desarrollo y v3.2, y corregida en el commit 8933e86c9f384b356dc4c6e9e2814dee1074b323 y v3.2.1. Además, c3d88a7e18d52119c65df31c2cc994edd2beccc5 y v3.2.1 eliminan el soporte para 'save=0'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hotcrp:hotcrp:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951E87E4-238E-4EE1-8FA7-8FDD84D94F85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kohler/hotcrp/commit/8933e86c9f384b356dc4c6e9e2814dee1074b323",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/commit/aa20ef288828b04550950cf67c831af8a525f508",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/commit/c3d88a7e18d52119c65df31c2cc994edd2beccc5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kohler/hotcrp/security/advisories/GHSA-p88p-2f2p-2476",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1431",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-31T05:16:32.423",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Booking Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpbc_ajax_WPBC_FLEXTIMELINE_NAV() function in all versions up to, and including, 10.14.13. This makes it possible for unauthenticated attackers to retrieve booking information including customer names, phones and emails."
      }, {
        "lang" : "es",
        "value" : "El plugin Booking Calendar para WordPress es vulnerable a acceso no autorizado de datos debido a una comprobación de capacidad faltante en la función wpbc_ajax_WPBC_FLEXTIMELINE_NAV() en todas las versiones hasta e incluyendo la 10.14.13. Esto hace posible que atacantes no autenticados recuperen información de reserva, incluyendo nombres de clientes, teléfonos y correos electrónicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/booking/tags/10.14.13/core/lib/wpbc-ajax.php#L25",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0bd92f91-d9b1-4f6f-ac1a-477950ea2e80?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0683",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-31T06:16:03.610",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all versions up to, and including, 3.4.4. This is due to insufficient escaping on the user-supplied operand value when using the equals operator and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above (customers), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin SupportCandy – Helpdesk &amp; Customer Support Ticket System para WordPress es vulnerable a inyección SQL a través del filtro de campo personalizado de tipo numérico en todas las versiones hasta la 3.4.4, inclusive. Esto se debe a un escape insuficiente en el valor del operando proporcionado por el usuario al usar el operador de igualdad y a la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior (clientes), añadan consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/supportcandy/tags/3.4.4/includes/admin/tickets/class-wpsc-ticket-list.php#L1265",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/supportcandy/tags/3.4.4/includes/admin/tickets/class-wpsc-ticket-list.php#L1288",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/supportcandy/tags/3.4.4/includes/custom-field-types/class-wpsc-cf-number.php#L371",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3448376/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a7856d0f-bc7d-436c-968c-631fd6a686ab?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1251",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-31T07:16:02.273",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.4 via the 'add_reply' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to steal file attachments uploaded by other users by specifying arbitrary attachment IDs in the 'description_attachments' parameter, re-associating those files to their own tickets and removing access from the original owners."
      }, {
        "lang" : "es",
        "value" : "El plugin SupportCandy – Helpdesk &amp; Customer Support Ticket System para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 3.4.4, inclusive, a través de la función 'add_reply' debido a la falta de validación en una clave controlada por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, roben archivos adjuntos cargados por otros usuarios al especificar IDs de adjuntos arbitrarios en el parámetro 'description_attachments', re-asociando esos archivos a sus propios tickets y eliminando el acceso de los propietarios originales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/supportcandy/trunk/includes/admin/tickets/class-wpsc-individual-ticket.php#L1603",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3448376/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/89df3005-0967-474f-8a4e-3b23273dd1a2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23015",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:04.797",
      "lastModified" : "2026-03-25T18:11:59.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths\n\nThe reference obtained by calling usb_get_dev() is not released in the\ngpio_mpsse_probe() error paths. Fix that by using device managed helper\nfunctions. Also remove the usb_put_dev() call in the disconnect function\nsince now it will be released automatically."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngpio: mpsse: corregir fuga de referencia en las rutas de error de gpio_mpsse_probe()\n\nLa referencia obtenida al llamar a usb_get_dev() no se libera en las rutas de error de gpio_mpsse_probe(). Corregir eso utilizando funciones auxiliares gestionadas por el dispositivo. También eliminar la llamada a usb_put_dev() en la función de desconexión ya que ahora se liberará automáticamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "8D6ADF96-8AFA-4C09-9113-77886A8371EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3F9505-6B98-4269-8B81-127E55A1BF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1e876e5a0875e71e34148c9feb2eedd3bf6b2b43",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7ea26e6dcabc270433b6ded2a1aee85b215d1b28",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23016",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:04.900",
      "lastModified" : "2026-03-25T18:09:38.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: frags: drop fraglist conntrack references\n\nJakub added a warning in nf_conntrack_cleanup_net_list() to make debugging\nleaked skbs/conntrack references more obvious.\n\nsyzbot reports this as triggering, and I can also reproduce this via\nip_defrag.sh selftest:\n\n conntrack cleanup blocked for 60s\n WARNING: net/netfilter/nf_conntrack_core.c:2512\n [..]\n\nconntrack clenups gets stuck because there are skbs with still hold nf_conn\nreferences via their frag_list.\n\n   net.core.skb_defer_max=0 makes the hang disappear.\n\nEric Dumazet points out that skb_release_head_state() doesn't follow the\nfraglist.\n\nip_defrag.sh can only reproduce this problem since\ncommit 6471658dc66c (\"udp: use skb_attempt_defer_free()\"), but AFAICS this\nproblem could happen with TCP as well if pmtu discovery is off.\n\nThe relevant problem path for udp is:\n1. netns emits fragmented packets\n2. nf_defrag_v6_hook reassembles them (in output hook)\n3. reassembled skb is tracked (skb owns nf_conn reference)\n4. ip6_output refragments\n5. refragmented packets also own nf_conn reference (ip6_fragment\n   calls ip6_copy_metadata())\n6. on input path, nf_defrag_v6_hook skips defragmentation: the\n   fragments already have skb->nf_conn attached\n7. skbs are reassembled via ipv6_frag_rcv()\n8. skb_consume_udp -> skb_attempt_defer_free() -> skb ends up\n   in pcpu freelist, but still has nf_conn reference.\n\nPossible solutions:\n 1 let defrag engine drop nf_conn entry, OR\n 2 export kick_defer_list_purge() and call it from the conntrack\n   netns exit callback, OR\n 3 add skb_has_frag_list() check to skb_attempt_defer_free()\n\n2 & 3 also solve ip_defrag.sh hang but share same drawback:\n\nSuch reassembled skbs, queued to socket, can prevent conntrack module\nremoval until userspace has consumed the packet. While both tcp and udp\nstack do call nf_reset_ct() before placing skb on socket queue, that\nfunction doesn't iterate frag_list skbs.\n\nTherefore drop nf_conn entries when they are placed in defrag queue.\nKeep the nf_conn entry of the first (offset 0) skb so that reassembled\nskb retains nf_conn entry for sake of TX path.\n\nNote that fixes tag is incorrect; it points to the commit introducing the\n'ip_defrag.sh reproducible problem': no need to backport this patch to\nevery stable kernel."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ninet: frags: eliminar referencias de conntrack de fraglist\n\nJakub añadió una advertencia en nf_conntrack_cleanup_net_list() para hacer más obvia la depuración de skbs/referencias de conntrack filtradas.\n\nsyzbot informa que esto se activa, y también puedo reproducirlo a través de la autoprueba ip_defrag.sh:\n\nlimpieza de conntrack bloqueada durante 60s\nADVERTENCIA: net/netfilter/nf_conntrack_core.c:2512\n[..]\n\nLas limpiezas de conntrack se atascan porque hay skbs que aún mantienen referencias nf_conn a través de su frag_list.\n\nnet.core.skb_defer_max=0 hace que el cuelgue desaparezca.\n\nEric Dumazet señala que skb_release_head_state() no sigue la fraglist.\n\nip_defrag.sh solo puede reproducir este problema desde el commit 6471658dc66c ('udp: use skb_attempt_defer_free()'), pero AFAICS este problema también podría ocurrir con TCP si el descubrimiento de pmtu está desactivado.\n\nLa ruta del problema relevante para udp es:\n1. netns emite paquetes fragmentados\n2. nf_defrag_v6_hook los reensambla (en el hook de salida)\n3. el skb reensamblado es rastreado (skb posee la referencia nf_conn)\n4. ip6_output refragmenta\n5. los paquetes refragmentados también poseen la referencia nf_conn (ip6_fragment llama a ip6_copy_metadata())\n6. en la ruta de entrada, nf_defrag_v6_hook omite la desfragmentación: los fragmentos ya tienen skb-&gt;nf_conn adjunto\n7. los skbs son reensamblados a través de ipv6_frag_rcv()\n8. skb_consume_udp -&gt; skb_attempt_defer_free() -&gt; skb termina en la freelist de pcpu, pero aún tiene la referencia nf_conn.\n\nPosibles soluciones:\n1 dejar que el motor de desfragmentación elimine la entrada nf_conn, O\n2 exportar kick_defer_list_purge() y llamarlo desde la devolución de llamada de salida de netns de conntrack, O\n3 añadir una comprobación skb_has_frag_list() a skb_attempt_defer_free()\n\n2 y 3 también resuelven el cuelgue de ip_defrag.sh pero comparten el mismo inconveniente:\n\nTales skbs reensamblados, encolados al socket, pueden impedir la eliminación del módulo conntrack hasta que el espacio de usuario haya consumido el paquete. Si bien tanto la pila tcp como udp llaman a nf_reset_ct() antes de colocar el skb en la cola del socket, esa función no itera los skbs de frag_list.\n\nPor lo tanto, eliminar las entradas nf_conn cuando se colocan en la cola de desfragmentación.\nMantener la entrada nf_conn del primer skb (offset 0) para que el skb reensamblado retenga la entrada nf_conn para la ruta TX.\n\nTenga en cuenta que la etiqueta de correcciones es incorrecta; apunta al commit que introdujo el 'problema reproducible de ip_defrag.sh': no es necesario hacer un backport de este parche a cada kernel estable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "244757F1-F957-45E1-ADDD-D008246BCF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.18:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE57113-2223-4308-A0F2-5E6ECFBB3C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/088ca99dbb039c444c3ff987c5412a73f4f0cbf8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2ef02ac38d3c17f34a00c4b267d961a8d4b45d1a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23017",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.000",
      "lastModified" : "2026-03-25T18:03:35.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix error handling in the init_task on load\n\nIf the init_task fails during a driver load, we end up without vports and\nnetdevs, effectively failing the entire process. In that state a\nsubsequent reset will result in a crash as the service task attempts to\naccess uninitialized resources. Following trace is from an error in the\ninit_task where the CREATE_VPORT (op 501) is rejected by the FW:\n\n[40922.763136] idpf 0000:83:00.0: Device HW Reset initiated\n[40924.449797] idpf 0000:83:00.0: Transaction failed (op 501)\n[40958.148190] idpf 0000:83:00.0: HW reset detected\n[40958.161202] BUG: kernel NULL pointer dereference, address: 00000000000000a8\n...\n[40958.168094] Workqueue: idpf-0000:83:00.0-vc_event idpf_vc_event_task [idpf]\n[40958.168865] RIP: 0010:idpf_vc_event_task+0x9b/0x350 [idpf]\n...\n[40958.177932] Call Trace:\n[40958.178491]  <TASK>\n[40958.179040]  process_one_work+0x226/0x6d0\n[40958.179609]  worker_thread+0x19e/0x340\n[40958.180158]  ? __pfx_worker_thread+0x10/0x10\n[40958.180702]  kthread+0x10f/0x250\n[40958.181238]  ? __pfx_kthread+0x10/0x10\n[40958.181774]  ret_from_fork+0x251/0x2b0\n[40958.182307]  ? __pfx_kthread+0x10/0x10\n[40958.182834]  ret_from_fork_asm+0x1a/0x30\n[40958.183370]  </TASK>\n\nFix the error handling in the init_task to make sure the service and\nmailbox tasks are disabled if the error happens during load. These are\nstarted in idpf_vc_core_init(), which spawns the init_task and has no way\nof knowing if it failed. If the error happens on reset, following\nsuccessful driver load, the tasks can still run, as that will allow the\nnetdevs to attempt recovery through another reset. Stop the PTP callbacks\neither way as those will be restarted by the call to idpf_vc_core_init()\nduring a successful reset."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: corrige el manejo de errores en la init_task durante la carga\n\nSi la init_task falla durante la carga de un controlador, terminamos sin vports y netdevs, lo que provoca el fallo de todo el proceso. En ese estado, un reinicio posterior resultará en un fallo ya que la tarea de servicio intenta acceder a recursos no inicializados. La siguiente traza es de un error en la init_task donde el CREATE_VPORT (op 501) es rechazado por el FW:\n\n[40922.763136] idpf 0000:83:00.0: Device HW Reset initiated\n[40924.449797] idpf 0000:83:00.0: Transaction failed (op 501)\n[40958.148190] idpf 0000:83:00.0: HW reset detected\n[40958.161202] BUG: kernel NULL pointer dereference, address: 00000000000000a8\n...\n[40958.168094] Workqueue: idpf-0000:83:00.0-vc_event idpf_vc_event_task [idpf]\n[40958.168865] RIP: 0010:idpf_vc_event_task+0x9b/0x350 [idpf]\n...\n[40958.177932] Call Trace:\n[40958.178491]  \n[40958.179040]  process_one_work+0x226/0x6d0\n[40958.179609]  worker_thread+0x19e/0x340\n[40958.180158]  ? __pfx_worker_thread+0x10/0x10\n[40958.180702]  kthread+0x10f/0x250\n[40958.181238]  ? __pfx_kthread+0x10/0x10\n[40958.181774]  ret_from_fork+0x251/0x2b0\n[40958.182307]  ? __pfx_kthread+0x10/0x10\n[40958.182834]  ret_from_fork_asm+0x1a/0x30\n[40958.183370]  \n\nCorrige el manejo de errores en la init_task para asegurar que las tareas de servicio y de buzón estén deshabilitadas si el error ocurre durante la carga. Estas se inician en idpf_vc_core_init(), que genera la init_task y no tiene forma de saber si falló. Si el error ocurre en el reinicio, después de una carga exitosa del controlador, las tareas aún pueden ejecutarse, ya que eso permitirá a los netdevs intentar la recuperación a través de otro reinicio. Detén las devoluciones de llamada de PTP de cualquier manera, ya que estas se reiniciarán con la llamada a idpf_vc_core_init() durante un reinicio exitoso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "9B2950B8-6A42-43B4-85D8-25F244158168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "62B55B1B-7D3E-499B-9C42-E9F1EF05A54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4d792219fe6f891b5b557a607ac8a0a14eda6e38",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a514c374edcd33581cdcccf8faa7cc606a600319",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23018",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.100",
      "lastModified" : "2026-03-25T18:02:15.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: release path before initializing extent tree in btrfs_read_locked_inode()\n\nIn btrfs_read_locked_inode() we are calling btrfs_init_file_extent_tree()\nwhile holding a path with a read locked leaf from a subvolume tree, and\nbtrfs_init_file_extent_tree() may do a GFP_KERNEL allocation, which can\ntrigger reclaim.\n\nThis can create a circular lock dependency which lockdep warns about with\nthe following splat:\n\n   [6.1433] ======================================================\n   [6.1574] WARNING: possible circular locking dependency detected\n   [6.1583] 6.18.0+ #4 Tainted: G     U\n   [6.1591] ------------------------------------------------------\n   [6.1599] kswapd0/117 is trying to acquire lock:\n   [6.1606] ffff8d9b6333c5b8 (&delayed_node->mutex){+.+.}-{3:3}, at: __btrfs_release_delayed_node.part.0+0x39/0x2f0\n   [6.1625]\n            but task is already holding lock:\n   [6.1633] ffffffffa4ab8ce0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x195/0xc60\n   [6.1646]\n            which lock already depends on the new lock.\n\n   [6.1657]\n            the existing dependency chain (in reverse order) is:\n   [6.1667]\n            -> #2 (fs_reclaim){+.+.}-{0:0}:\n   [6.1677]        fs_reclaim_acquire+0x9d/0xd0\n   [6.1685]        __kmalloc_cache_noprof+0x59/0x750\n   [6.1694]        btrfs_init_file_extent_tree+0x90/0x100\n   [6.1702]        btrfs_read_locked_inode+0xc3/0x6b0\n   [6.1710]        btrfs_iget+0xbb/0xf0\n   [6.1716]        btrfs_lookup_dentry+0x3c5/0x8e0\n   [6.1724]        btrfs_lookup+0x12/0x30\n   [6.1731]        lookup_open.isra.0+0x1aa/0x6a0\n   [6.1739]        path_openat+0x5f7/0xc60\n   [6.1746]        do_filp_open+0xd6/0x180\n   [6.1753]        do_sys_openat2+0x8b/0xe0\n   [6.1760]        __x64_sys_openat+0x54/0xa0\n   [6.1768]        do_syscall_64+0x97/0x3e0\n   [6.1776]        entry_SYSCALL_64_after_hwframe+0x76/0x7e\n   [6.1784]\n            -> #1 (btrfs-tree-00){++++}-{3:3}:\n   [6.1794]        lock_release+0x127/0x2a0\n   [6.1801]        up_read+0x1b/0x30\n   [6.1808]        btrfs_search_slot+0x8e0/0xff0\n   [6.1817]        btrfs_lookup_inode+0x52/0xd0\n   [6.1825]        __btrfs_update_delayed_inode+0x73/0x520\n   [6.1833]        btrfs_commit_inode_delayed_inode+0x11a/0x120\n   [6.1842]        btrfs_log_inode+0x608/0x1aa0\n   [6.1849]        btrfs_log_inode_parent+0x249/0xf80\n   [6.1857]        btrfs_log_dentry_safe+0x3e/0x60\n   [6.1865]        btrfs_sync_file+0x431/0x690\n   [6.1872]        do_fsync+0x39/0x80\n   [6.1879]        __x64_sys_fsync+0x13/0x20\n   [6.1887]        do_syscall_64+0x97/0x3e0\n   [6.1894]        entry_SYSCALL_64_after_hwframe+0x76/0x7e\n   [6.1903]\n            -> #0 (&delayed_node->mutex){+.+.}-{3:3}:\n   [6.1913]        __lock_acquire+0x15e9/0x2820\n   [6.1920]        lock_acquire+0xc9/0x2d0\n   [6.1927]        __mutex_lock+0xcc/0x10a0\n   [6.1934]        __btrfs_release_delayed_node.part.0+0x39/0x2f0\n   [6.1944]        btrfs_evict_inode+0x20b/0x4b0\n   [6.1952]        evict+0x15a/0x2f0\n   [6.1958]        prune_icache_sb+0x91/0xd0\n   [6.1966]        super_cache_scan+0x150/0x1d0\n   [6.1974]        do_shrink_slab+0x155/0x6f0\n   [6.1981]        shrink_slab+0x48e/0x890\n   [6.1988]        shrink_one+0x11a/0x1f0\n   [6.1995]        shrink_node+0xbfd/0x1320\n   [6.1002]        balance_pgdat+0x67f/0xc60\n   [6.1321]        kswapd+0x1dc/0x3e0\n   [6.1643]        kthread+0xff/0x240\n   [6.1965]        ret_from_fork+0x223/0x280\n   [6.1287]        ret_from_fork_asm+0x1a/0x30\n   [6.1616]\n            other info that might help us debug this:\n\n   [6.1561] Chain exists of:\n              &delayed_node->mutex --> btrfs-tree-00 --> fs_reclaim\n\n   [6.1503]  Possible unsafe locking scenario:\n\n   [6.1110]        CPU0                    CPU1\n   [6.1411]        ----                    ----\n   [6.1707]   lock(fs_reclaim);\n   [6.1998]                                lock(btrfs-tree-00);\n   [6.1291]                                lock(fs_reclaim);\n   [6.1581]   lock(&del\n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  btrfs: liberar ruta antes de inicializar el árbol de extensiones en btrfs_read_locked_inode()  En btrfs_read_locked_inode() estamos llamando a btrfs_init_file_extent_tree() mientras mantenemos una ruta con una hoja bloqueada para lectura de un árbol de subvolumen, y btrfs_init_file_extent_tree() puede realizar una asignación GFP_KERNEL, lo que puede activar la recuperación.  Esto puede crear una dependencia de bloqueo circular sobre la cual lockdep advierte con el siguiente splat:     [6.1433] [6.1574] WARNING: posible dependencia de bloqueo circular detectada    [6.1583] 6.18.0+ #4 Tainted: G     U    [6.1591] [6.1599] kswapd0/117 está intentando adquirir el bloqueo:    [6.1606] ffff8d9b6333c5b8 (&amp;delayed_node-&gt;mutex){+.+.}-{3:3}, en: __btrfs_release_delayed_node.part.0+0x39/0x2f0 [6.1625] pero la tarea ya está manteniendo el bloqueo: [6.1633] ffffffffa4ab8ce0 (fs_reclaim){+.+.}-{0:0}, en: balance_pgdat+0x195/0xc60    [6.1646] cuyo bloqueo ya depende del nuevo bloqueo. [6.1657] la cadena de dependencia existente (en orden inverso) es:    [6.1667] -&gt; #2 (fs_reclaim){+.+.}-{0:0}:    [6.1677] fs_reclaim_acquire+0x9d/0xd0    [6.1685] __kmalloc_cache_noprof+0x59/0x750    [6.1694] btrfs_init_file_extent_tree+0x90/0x100    [6.1702] btrfs_read_locked_inode+0xc3/0x6b0    [6.1710] btrfs_iget+0xbb/0xf0    [6.1716] btrfs_lookup_dentry+0x3c5/0x8e0    [6.1724] btrfs_lookup+0x12/0x30    [6.1731] lookup_open.isra.0+0x1aa/0x6a0    [6.1739] path_openat+0x5f7/0xc60    [6.1746] do_filp_open+0xd6/0x180    [6.1753] do_sys_openat2+0x8b/0xe0    [6.1760] __x64_sys_openat+0x54/0xa0    [6.1768] do_syscall_64+0x97/0x3e0    [6.1776] entry_SYSCALL_64_after_hwframe+0x76/0x7e    [6.1784]      -&gt; #1 (btrfs-tree-00){++++}-{3:3}:    [6.1794] lock_release+0x127/0x2a0    [6.1801] up_read+0x1b/0x30    [6.1808] btrfs_search_slot+0x8e0/0xff0    [6.1817] btrfs_lookup_inode+0x52/0xd0    [6.1825] __btrfs_update_delayed_inode+0x73/0x520    [6.1833] btrfs_commit_inode_delayed_inode+0x11a/0x120    [6.1842] btrfs_log_inode+0x608/0x1aa0    [6.1849] btrfs_log_inode_parent+0x249/0xf80    [6.1857] btrfs_log_dentry_safe+0x3e/0x60    [6.1865] btrfs_sync_file+0x431/0x690    [6.1872] do_fsync+0x39/0x80    [6.1879] __x64_sys_fsync+0x13/0x20    [6.1887] do_syscall_64+0x97/0x3e0    [6.1894] entry_SYSCALL_64_after_hwframe+0x76/0x7e    [6.1903]      -&gt; #0 (&amp;delayed_node-&gt;mutex){+.+.}-{3:3}:    [6.1913] __lock_acquire+0x15e9/0x2820    [6.1920] lock_acquire+0xc9/0x2d0    [6.1927] __mutex_lock+0xcc/0x10a0    [6.1934] __btrfs_release_delayed_node.part.0+0x39/0x2f0    [6.1944] btrfs_evict_inode+0x20b/0x4b0    [6.1952] evict+0x15a/0x2f0    [6.1958] prune_icache_sb+0x91/0xd0    [6.1966] super_cache_scan+0x150/0x1d0    [6.1974] do_shrink_slab+0x155/0x6f0    [6.1981] shrink_slab+0x48e/0x890    [6.1988] shrink_one+0x11a/0x1f0    [6.1995] shrink_node+0xbfd/0x1320    [6.1002] balance_pgdat+0x67f/0xc60    [6.1321] kswapd+0x1dc/0x3e0    [6.1643] kthread+0xff/0x240    [6.1965] ret_from_fork+0x223/0x280    [6.1287] ret_from_fork_asm+0x1a/0x30    [6.1616]      otra información que podría ayudarnos a depurar esto:     [6.1561] La cadena existe de:        &amp;delayed_node-&gt;mutex --&gt; btrfs-tree-00 --&gt; fs_reclaim     [6.1503]  Posible escenario de bloqueo inseguro:     [6.1110] CPU0 CPU1 [6.1411] [6.1707]   lock(fs_reclaim);    [6.1998] lock(btrfs-tree-00);    [6.1291] lock(fs_reclaim);    [6.1581]   lock(&amp;del ---truncado---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16.9",
            "versionEndExcluding" : "6.17",
            "matchCriteriaId" : "98F094CD-A7F6-4BEA-8870-C45B63E05825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "8F0BAC72-4991-44BB-A7D4-90D634550955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC8B11D-82DC-4958-8DC7-BF5CC829A5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8731f2c50b0b1d2b58ed5b9671ef2c4bdc2f8347",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/92a5590851144f034adc51fee55e6878ccac716e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23019",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.207",
      "lastModified" : "2026-03-25T15:55:44.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: marvell: prestera: fix NULL dereference on devlink_alloc() failure\n\ndevlink_alloc() may return NULL on allocation failure, but\nprestera_devlink_alloc() unconditionally calls devlink_priv() on\nthe returned pointer.\n\nThis leads to a NULL pointer dereference if devlink allocation fails.\nAdd a check for a NULL devlink pointer and return NULL early to avoid\nthe crash."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: marvell: prestera: corregir desreferencia NULL en caso de fallo de devlink_alloc()\n\ndevlink_alloc() puede devolver NULL en caso de fallo de asignación, pero prestera_devlink_alloc() llama incondicionalmente a devlink_priv() sobre el puntero devuelto.\n\nEsto conduce a una desreferencia de puntero NULL si la asignación de devlink falla.\nAñadir una comprobación para un puntero devlink NULL y devolver NULL anticipadamente para evitar el fallo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.1",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "514008AF-BA30-436D-B5A2-440E66D7CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B29EBB93-107F-4ED6-8DE3-C2732BC659C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23020",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.310",
      "lastModified" : "2026-03-25T15:56:02.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: 3com: 3c59x: fix possible null dereference in vortex_probe1()\n\npdev can be null and free_ring: can be called in 1297 with a null\npdev."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: 3com: 3c59x: corrección de posible desreferencia nula en vortex_probe1()\n\npdev puede ser nulo y free_ring: puede ser llamado en 1297 con un pdev nulo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16.12",
            "versionEndExcluding" : "4.17",
            "matchCriteriaId" : "1E372F14-2300-4733-AA3A-B7DD0540E9B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17.1",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "6BAACA77-52C1-4896-B775-A42AF0D39893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3F438846-FE97-43DC-A655-B5EF8DED552E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/053ac9e37eee435e999277c0f1ef890dad6064bf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/28b2a805609699be7b90020ae7dccfb234be1ceb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2f05f7737e16d9a40038cc1c38a96a3f7964898b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/606872c8e8bf96066730f6a2317502c5633c37f1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6cff14b831dbdb32675b4c7904dcc3eeeaf47e9d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a4e305ed60f7c41bbf9aabc16dd75267194e0de3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d82796a57cc0dac1dbef19d913c8f02a8cc7b1a7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23021",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.413",
      "lastModified" : "2026-03-25T15:56:19.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: pegasus: fix memory leak in update_eth_regs_async()\n\nWhen asynchronously writing to the device registers and if usb_submit_urb()\nfail, the code fail to release allocated to this point resources."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: usb: pegasus: corregir fuga de memoria en update_eth_regs_async()\n\nCuando se escribe asincrónicamente en los registros del dispositivo y si usb_submit_urb() falla, el código falla en liberar los recursos asignados hasta este punto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.1",
            "versionEndExcluding" : "5.10.248",
            "matchCriteriaId" : "EF50C87B-4799-493D-B6D4-1222ADF5285D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.198",
            "matchCriteriaId" : "82159CAA-B6BA-43C6-85D8-65BDBC175A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "E135B7E2-61FC-4DC1-8570-ABD67894FFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:3.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "82D28405-E1F2-43CF-AA38-B228805AFFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/471dfb97599eec74e0476046b3ef8e7037f27b34",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5397ea6d21c35a17707e201a60761bdee00bcc4e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/93f18eaa190374e0f2d253e3b1a65cee19a7abe6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a40af9a2904a1ab8ce61866ebe2a894ef30754ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ac5d92d2826dec51e5d4c6854865bc5817277452",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/afa27621a28af317523e0836dad430bec551eb54",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ce6eef731aba23a988decea1df3b08cf978f7b01",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23022",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.517",
      "lastModified" : "2026-03-25T15:56:44.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix memory leak in idpf_vc_core_deinit()\n\nMake sure to free hw->lan_regs. Reported by kmemleak during reset:\n\nunreferenced object 0xff1b913d02a936c0 (size 96):\n  comm \"kworker/u258:14\", pid 2174, jiffies 4294958305\n  hex dump (first 32 bytes):\n    00 00 00 c0 a8 ba 2d ff 00 00 00 00 00 00 00 00  ......-.........\n    00 00 40 08 00 00 00 00 00 00 25 b3 a8 ba 2d ff  ..@.......%...-.\n  backtrace (crc 36063c4f):\n    __kmalloc_noprof+0x48f/0x890\n    idpf_vc_core_init+0x6ce/0x9b0 [idpf]\n    idpf_vc_event_task+0x1fb/0x350 [idpf]\n    process_one_work+0x226/0x6d0\n    worker_thread+0x19e/0x340\n    kthread+0x10f/0x250\n    ret_from_fork+0x251/0x2b0\n    ret_from_fork_asm+0x1a/0x30"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: corrige fuga de memoria en idpf_vc_core_deinit()\n\nAsegúrate de liberar hw-&gt;lan_regs. Reportado por kmemleak durante el reinicio:\n\nobjeto sin referencia 0xff1b913d02a936c0 (tamaño 96):\n  comm kworker/u258:14, pid 2174, jiffies 4294958305\n  volcado hexadecimal (primeros 32 bytes):\n    00 00 00 c0 a8 ba 2d ff 00 00 00 00 00 00 00 00  ......-.........\n    00 00 40 08 00 00 00 00 00 00 25 b3 a8 ba 2d ff  ..@.......%...-.\n  rastreo (crc 36063c4f):\n    __kmalloc_noprof+0x48f/0x890\n    idpf_vc_core_init+0x6ce/0x9b0 [idpf]\n    idpf_vc_event_task+0x1fb/0x350 [idpf]\n    process_one_work+0x226/0x6d0\n    worker_thread+0x19e/0x340\n    kthread+0x10f/0x250\n    ret_from_fork+0x251/0x2b0\n    ret_from_fork_asm+0x1a/0x30"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "8F0BAC72-4991-44BB-A7D4-90D634550955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC8B11D-82DC-4958-8DC7-BF5CC829A5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/23391db8a00c23854915b8b72ec1aa10080aa540",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e111cbc4adf9f9974eed040aeece7e17460f6bff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23023",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.617",
      "lastModified" : "2026-03-25T15:57:49.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix memory leak in idpf_vport_rel()\n\nFree vport->rx_ptype_lkup in idpf_vport_rel() to avoid leaking memory\nduring a reset. Reported by kmemleak:\n\nunreferenced object 0xff450acac838a000 (size 4096):\n  comm \"kworker/u258:5\", pid 7732, jiffies 4296830044\n  hex dump (first 32 bytes):\n    00 00 00 00 00 10 00 00 00 10 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00  ................\n  backtrace (crc 3da81902):\n    __kmalloc_cache_noprof+0x469/0x7a0\n    idpf_send_get_rx_ptype_msg+0x90/0x570 [idpf]\n    idpf_init_task+0x1ec/0x8d0 [idpf]\n    process_one_work+0x226/0x6d0\n    worker_thread+0x19e/0x340\n    kthread+0x10f/0x250\n    ret_from_fork+0x251/0x2b0\n    ret_from_fork_asm+0x1a/0x30"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: corrección de fuga de memoria en idpf_vport_rel()\n\nLibera vport-&gt;rx_ptype_lkup en idpf_vport_rel() para evitar la fuga de memoria durante un reinicio. Reportado por kmemleak:\n\nobjeto sin referencia 0xff450acac838a000 (tamaño 4096):\n  comm 'kworker/u258:5', pid 7732, jiffies 4296830044\n  volcado hexadecimal (primeros 32 bytes):\n    00 00 00 00 00 10 00 00 00 10 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00  ................\n  rastreo (crc 3da81902):\n    __kmalloc_cache_noprof+0x469/0x7a0\n    idpf_send_get_rx_ptype_msg+0x90/0x570 [idpf]\n    idpf_init_task+0x1ec/0x8d0 [idpf]\n    process_one_work+0x226/0x6d0\n    worker_thread+0x19e/0x340\n    kthread+0x10f/0x250\n    ret_from_fork+0x251/0x2b0\n    ret_from_fork_asm+0x1a/0x30"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.1",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "2E2B7263-9D5B-469F-9346-50005F22DAD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "62B55B1B-7D3E-499B-9C42-E9F1EF05A54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/a4212d6732e3f674c6cc7d0b642f276d827e8f94",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ec602a2a4071eb956d656ba968c58fee09f0622d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f6242b354605faff263ca45882b148200915a3f6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23024",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.720",
      "lastModified" : "2026-03-25T15:57:34.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix memory leak of flow steer list on rmmod\n\nThe flow steering list maintains entries that are added and removed as\nethtool creates and deletes flow steering rules. Module removal with active\nentries causes memory leak as the list is not properly cleaned up.\n\nPrevent this by iterating through the remaining entries in the list and\nfreeing the associated memory during module removal. Add a spinlock\n(flow_steer_list_lock) to protect the list access from multiple threads."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: corrige una fuga de memoria de la lista de dirección de flujo al desinstalar el módulo\n\nLa lista de dirección de flujo mantiene entradas que se añaden y eliminan a medida que ethtool crea y elimina reglas de dirección de flujo. La eliminación del módulo con entradas activas provoca una fuga de memoria ya que la lista no se limpia correctamente.\n\nEsto se evita iterando a través de las entradas restantes en la lista y liberando la memoria asociada durante la eliminación del módulo. Se añade un spinlock (flow_steer_list_lock) para proteger el acceso a la lista de múltiples hilos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.1",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "8F0BAC72-4991-44BB-A7D4-90D634550955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC8B11D-82DC-4958-8DC7-BF5CC829A5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1aedff70a5e97628eaaf17b169774cb6a45a1dc5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f9841bd28b600526ca4f6713b0ca49bf7bb98452",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23025",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.820",
      "lastModified" : "2026-03-25T16:04:16.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/page_alloc: prevent pcp corruption with SMP=n\n\nThe kernel test robot has reported:\n\n BUG: spinlock trylock failure on UP on CPU#0, kcompactd0/28\n  lock: 0xffff888807e35ef0, .magic: dead4ead, .owner: kcompactd0/28, .owner_cpu: 0\n CPU: 0 UID: 0 PID: 28 Comm: kcompactd0 Not tainted 6.18.0-rc5-00127-ga06157804399 #1 PREEMPT  8cc09ef94dcec767faa911515ce9e609c45db470\n Call Trace:\n  <IRQ>\n  __dump_stack (lib/dump_stack.c:95)\n  dump_stack_lvl (lib/dump_stack.c:123)\n  dump_stack (lib/dump_stack.c:130)\n  spin_dump (kernel/locking/spinlock_debug.c:71)\n  do_raw_spin_trylock (kernel/locking/spinlock_debug.c:?)\n  _raw_spin_trylock (include/linux/spinlock_api_smp.h:89 kernel/locking/spinlock.c:138)\n  __free_frozen_pages (mm/page_alloc.c:2973)\n  ___free_pages (mm/page_alloc.c:5295)\n  __free_pages (mm/page_alloc.c:5334)\n  tlb_remove_table_rcu (include/linux/mm.h:? include/linux/mm.h:3122 include/asm-generic/tlb.h:220 mm/mmu_gather.c:227 mm/mmu_gather.c:290)\n  ? __cfi_tlb_remove_table_rcu (mm/mmu_gather.c:289)\n  ? rcu_core (kernel/rcu/tree.c:?)\n  rcu_core (include/linux/rcupdate.h:341 kernel/rcu/tree.c:2607 kernel/rcu/tree.c:2861)\n  rcu_core_si (kernel/rcu/tree.c:2879)\n  handle_softirqs (arch/x86/include/asm/jump_label.h:36 include/trace/events/irq.h:142 kernel/softirq.c:623)\n  __irq_exit_rcu (arch/x86/include/asm/jump_label.h:36 kernel/softirq.c:725)\n  irq_exit_rcu (kernel/softirq.c:741)\n  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1052)\n  </IRQ>\n  <TASK>\n RIP: 0010:_raw_spin_unlock_irqrestore (arch/x86/include/asm/preempt.h:95 include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194)\n  free_pcppages_bulk (mm/page_alloc.c:1494)\n  drain_pages_zone (include/linux/spinlock.h:391 mm/page_alloc.c:2632)\n  __drain_all_pages (mm/page_alloc.c:2731)\n  drain_all_pages (mm/page_alloc.c:2747)\n  kcompactd (mm/compaction.c:3115)\n  kthread (kernel/kthread.c:465)\n  ? __cfi_kcompactd (mm/compaction.c:3166)\n  ? __cfi_kthread (kernel/kthread.c:412)\n  ret_from_fork (arch/x86/kernel/process.c:164)\n  ? __cfi_kthread (kernel/kthread.c:412)\n  ret_from_fork_asm (arch/x86/entry/entry_64.S:255)\n  </TASK>\n\nMatthew has analyzed the report and identified that in drain_page_zone()\nwe are in a section protected by spin_lock(&pcp->lock) and then get an\ninterrupt that attempts spin_trylock() on the same lock.  The code is\ndesigned to work this way without disabling IRQs and occasionally fail the\ntrylock with a fallback.  However, the SMP=n spinlock implementation\nassumes spin_trylock() will always succeed, and thus it's normally a\nno-op.  Here the enabled lock debugging catches the problem, but otherwise\nit could cause a corruption of the pcp structure.\n\nThe problem has been introduced by commit 574907741599 (\"mm/page_alloc:\nleave IRQs enabled for per-cpu page allocations\").  The pcp locking scheme\nrecognizes the need for disabling IRQs to prevent nesting spin_trylock()\nsections on SMP=n, but the need to prevent the nesting in spin_lock() has\nnot been recognized.  Fix it by introducing local wrappers that change the\nspin_lock() to spin_lock_iqsave() with SMP=n and use them in all places\nthat do spin_lock(&pcp->lock).\n\n[vbabka@suse.cz: add pcp_ prefix to the spin_lock_irqsave wrappers, per Steven]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm/page_alloc: evitar la corrupción de pcp con SMP=n\n\nEl robot de pruebas del kernel ha informado:\n\n BUG: spinlock trylock failure on UP on CPU#0, kcompactd0/28\n  lock: 0xffff888807e35ef0, .magic: dead4ead, .owner: kcompactd0/28, .owner_cpu: 0\n CPU: 0 UID: 0 PID: 28 Comm: kcompactd0 Not tainted 6.18.0-rc5-00127-ga06157804399 #1 PREEMPT  8cc09ef94dcec767faa911515ce9e609c45db470\n Call Trace:\n  \n  __dump_stack (lib/dump_stack.c:95)\n  dump_stack_lvl (lib/dump_stack.c:123)\n  dump_stack (lib/dump_stack.c:130)\n  spin_dump (kernel/locking/spinlock_debug.c:71)\n  do_raw_spin_trylock (kernel/locking/spinlock_debug.c:?)\n  _raw_spin_trylock (include/linux/spinlock_api_smp.h:89 kernel/locking/spinlock.c:138)\n  __free_frozen_pages (mm/page_alloc.c:2973)\n  ___free_pages (mm/page_alloc.c:5295)\n  __free_pages (mm/page_alloc.c:5334)\n  tlb_remove_table_rcu (include/linux/mm.h:? include/linux/mm.h:3122 include/asm-generic/tlb.h:220 mm/mmu_gather.c:227 mm/mmu_gather.c:290)\n  ? __cfi_tlb_remove_table_rcu (mm/mmu_gather.c:289)\n  ? rcu_core (kernel/rcu/tree.c:?)\n  rcu_core (include/linux/rcupdate.h:341 kernel/rcu/tree.c:2607 kernel/rcu/tree.c:2861)\n  rcu_core_si (kernel/rcu/tree.c:2879)\n  handle_softirqs (arch/x86/include/asm/jump_label.h:36 include/trace/events/irq.h:142 kernel/softirq.c:623)\n  __irq_exit_rcu (arch/x86/include/asm/jump_label.h:36 kernel/softirq.c:725)\n  irq_exit_rcu (kernel/softirq.c:741)\n  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1052)\n  \n  \n RIP: 0010:_raw_spin_unlock_irqrestore (arch/x86/include/asm/preempt.h:95 include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194)\n  free_pcppages_bulk (mm/page_alloc.c:1494)\n  drain_pages_zone (include/linux/spinlock.h:391 mm/page_alloc.c:2632)\n  __drain_all_pages (mm/page_alloc.c:2731)\n  drain_all_pages (mm/page_alloc.c:2747)\n  kcompactd (mm/compaction.c:3115)\n  kthread (kernel/kthread.c:465)\n  ? __cfi_kcompactd (mm/compaction.c:3166)\n  ? __cfi_kthread (kernel/kthread.c:412)\n  ret_from_fork (arch/x86/kernel/process.c:164)\n  ? __cfi_kthread (kernel/kthread.c:412)\n  ret_from_fork_asm (arch/x86/entry/entry_64.S:255)\n  \n\nMatthew ha analizado el informe y ha identificado que en drain_page_zone() estamos en una sección protegida por spin_lock(&amp;pcp-&gt;lock) y luego recibimos una interrupción que intenta spin_trylock() en el mismo bloqueo. El código está diseñado para funcionar de esta manera sin deshabilitar las IRQ y ocasionalmente fallar el trylock con un mecanismo de respaldo. Sin embargo, la implementación de spinlock con SMP=n asume que spin_trylock() siempre tendrá éxito, y por lo tanto, normalmente es una operación nula. Aquí, la depuración de bloqueo habilitada detecta el problema, pero de lo contrario podría causar una corrupción de la estructura pcp.\n\nEl problema ha sido introducido por el commit 574907741599 ('mm/page_alloc: dejar las IRQ habilitadas para las asignaciones de páginas por CPU'). El esquema de bloqueo de pcp reconoce la necesidad de deshabilitar las IRQ para evitar el anidamiento de secciones spin_trylock() en SMP=n, pero la necesidad de evitar el anidamiento en spin_lock() no ha sido reconocida. Solucionarlo introduciendo envoltorios locales que cambian el spin_lock() a spin_lock_iqsave() con SMP=n y usándolos en todos los lugares que realizan spin_lock(&amp;pcp-&gt;lock).\n\n[vbabka@suse.cz: añadir el prefijo pcp_ a los envoltorios spin_lock_irqsave, según Steven]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.57",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "91818618-A454-44A2-8AC3-1EA930B1D7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.1",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "C6294D7D-A6FB-4780-9265-FCCFB16573A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/038a102535eb49e10e93eafac54352fcc5d78847",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3098f8f7c7b0686c74827aec42a2c45e69801ff8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4a04ff9cd816e7346fcc8126f00ed80481f6569d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/68688fc4eab007834b4c2d740214423ba2a335a8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/df63d31e9ae02e2f6cd96147779e4ed7cd0e75f6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23026",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:05.920",
      "lastModified" : "2026-03-25T16:08:24.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()\n\nFix a memory leak in gpi_peripheral_config() where the original memory\npointed to by gchan->config could be lost if krealloc() fails.\n\nThe issue occurs when:\n1. gchan->config points to previously allocated memory\n2. krealloc() fails and returns NULL\n3. The function directly assigns NULL to gchan->config, losing the\n   reference to the original memory\n4. The original memory becomes unreachable and cannot be freed\n\nFix this by using a temporary variable to hold the krealloc() result\nand only updating gchan->config when the allocation succeeds.\n\nFound via static analysis and code review."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndmaengine: qcom: gpi: Corrección de fuga de memoria en gpi_peripheral_config()\n\nCorrige una fuga de memoria en gpi_peripheral_config() donde la memoria original apuntada por gchan-&gt;config podría perderse si krealloc() falla.\n\nEl problema ocurre cuando:\n1. gchan-&gt;config apunta a memoria previamente asignada\n2. krealloc() falla y devuelve NULL\n3. La función asigna directamente NULL a gchan-&gt;config, perdiendo la referencia a la memoria original\n4. La memoria original se vuelve inalcanzable y no puede ser liberada\n\nCorrige esto utilizando una variable temporal para contener el resultado de krealloc() y actualizando gchan-&gt;config solo cuando la asignación tiene éxito.\n\nEncontrado mediante análisis estático y revisión de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11.1",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "2D0D0FEC-32F3-49FC-BFEB-406F957C786F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD3510E-E8FA-47F3-9AD5-D8EA4A2719D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/01b1d781394fc9b83015e3a3cd46b17bda842bd8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3f747004bbd641131d9396d87b5d2d3d1e182728",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4532f18e4ab36def1f55cd936d0fc002b2ce34c2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6bf4ef078fd11910988889a6c0b3698d2e0c89af",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23027",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()\n\nIn kvm_ioctl_create_device(), kvm_device has allocated memory,\nkvm_device->destroy() seems to be supposed to free its kvm_device\nstruct, but kvm_pch_pic_destroy() is not currently doing this, that\nwould lead to a memory leak.\n\nSo, fix it."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nLoongArch: KVM: Corrección de la fuga de kvm_device en kvm_pch_pic_destroy()\n\nEn kvm_ioctl_create_device(), kvm_device ha asignado memoria,\nkvm_device-&gt;destroy() parece que debería liberar su estructura kvm_device, pero kvm_pch_pic_destroy() no está haciendo esto actualmente, lo que llevaría a una fuga de memoria.\n\nPor lo tanto, se corrige."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1cf342a7c3adc5877837b53bbceb5cc9eff60bbf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/fc53a66227af08d868face4b33fa8b2e1ba187ed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23028",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.120",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()\n\nIn kvm_ioctl_create_device(), kvm_device has allocated memory,\nkvm_device->destroy() seems to be supposed to free its kvm_device\nstruct, but kvm_ipi_destroy() is not currently doing this, that\nwould lead to a memory leak.\n\nSo, fix it."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nLoongArch: KVM: Corrección de fuga de kvm_device en kvm_ipi_destroy()\n\nEn kvm_ioctl_create_device(), kvm_device ha asignado memoria,\nkvm_device-&gt;destroy() parece que debería liberar su estructura kvm_device,\npero kvm_ipi_destroy() no está haciendo esto actualmente, lo que\nllevaría a una fuga de memoria.\n\nAsí que, corrígelo."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/5defcc2f9c22e6e09b5be68234ad10f4ba0292b7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23029",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.217",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()\n\nIn kvm_ioctl_create_device(), kvm_device has allocated memory,\nkvm_device->destroy() seems to be supposed to free its kvm_device\nstruct, but kvm_eiointc_destroy() is not currently doing this, that\nwould lead to a memory leak.\n\nSo, fix it."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nLoongArch: KVM: Corrección de fuga de kvm_device en kvm_eiointc_destroy()\n\nEn kvm_ioctl_create_device(), kvm_device ha asignado memoria, kvm_device-&gt;destroy() parece que debería liberar su estructura kvm_device, pero kvm_eiointc_destroy() no está haciendo esto actualmente, lo que llevaría a una fuga de memoria.\n\nPor lo tanto, se corrige."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/7d8553fc75aefa7ec936af0cf8443ff90b51732e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e94ec9661c5820d157d2cc4b6cf4a6ab656a7b4d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23030",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.313",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()\n\nThe for_each_available_child_of_node() calls of_node_put() to\nrelease child_np in each success loop. After breaking from the\nloop with the child_np has been released, the code will jump to\nthe put_child label and will call the of_node_put() again if the\ndevm_request_threaded_irq() fails. These cause a double free bug.\n\nFix by returning directly to avoid the duplicate of_node_put()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nphy: rockchip: inno-usb2: Corrección de un error de doble liberación en rockchip_usb2phy_probe()\n\nLa función for_each_available_child_of_node() llama a of_node_put() para liberar child_np en cada bucle exitoso. Después de salir del bucle, una vez que child_np ha sido liberado, el código saltará a la etiqueta put_child y llamará a of_node_put() de nuevo si devm_request_threaded_irq() falla. Esto causa un error de doble liberación.\n\nSe corrige regresando directamente para evitar la llamada duplicada a of_node_put()."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/027d42b97e6eb827c3438ebc09bab7efaee9270d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/b97b2c9808c9a97e0ce30216fa12096d8b0eaa75",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e07dea3de508cd6950c937cec42de7603190e1ca",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ebae26dd15140b840cf65be5e1c0daee949ba70b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/efe92ee7a111fe0f4d75f3ed6b7e3f86322279d5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23031",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.413",
      "lastModified" : "2026-04-18T09:16:13.360",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak\n\nIn gs_can_open(), the URBs for USB-in transfers are allocated, added to the\nparent->rx_submitted anchor and submitted. In the complete callback\ngs_usb_receive_bulk_callback(), the URB is processed and resubmitted. In\ngs_can_close() the URBs are freed by calling\nusb_kill_anchored_urbs(parent->rx_submitted).\n\nHowever, this does not take into account that the USB framework unanchors\nthe URB before the complete function is called. This means that once an\nin-URB has been completed, it is no longer anchored and is ultimately not\nreleased in gs_can_close().\n\nFix the memory leak by anchoring the URB in the\ngs_usb_receive_bulk_callback() to the parent->rx_submitted anchor."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: gs_usb: gs_usb_receive_bulk_callback(): corregir fuga de memoria de URB\n\nEn gs_can_open(), los URB para transferencias USB de entrada son asignados, añadidos al ancla parent-&gt;rx_submitted y enviados. En la función de devolución de llamada completa gs_usb_receive_bulk_callback(), el URB es procesado y reenviado. En gs_can_close(), los URB son liberados llamando a usb_kill_anchored_urbs(parent-&gt;rx_submitted).\n\nSin embargo, esto no tiene en cuenta que el framework USB desancla el URB antes de que se llame a la función completa. Esto significa que una vez que un URB de entrada ha sido completado, ya no está anclado y finalmente no es liberado en gs_can_close().\n\nCorregir la fuga de memoria anclando el URB en gs_usb_receive_bulk_callback() al ancla parent-&gt;rx_submitted."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/08624b7206ddb9148eeffc2384ebda2c47b6d1e9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/7352e1d5932a0e777e39fa4b619801191f57e603",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/9c151898cc259a7784be60ba38664f42ede39b31",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/9f669a38ca70839229b7ba0f851820850a2fe1f7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ec5ccc2af9e5b045671f3f604b57512feda8bcc5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f905bcfa971edb89e398c98957838d8c6381c0c7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23032",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.513",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnull_blk: fix kmemleak by releasing references to fault configfs items\n\nWhen CONFIG_BLK_DEV_NULL_BLK_FAULT_INJECTION is enabled, the null-blk\ndriver sets up fault injection support by creating the timeout_inject,\nrequeue_inject, and init_hctx_fault_inject configfs items as children\nof the top-level nullbX configfs group.\n\nHowever, when the nullbX device is removed, the references taken to\nthese fault-config configfs items are not released. As a result,\nkmemleak reports a memory leak, for example:\n\nunreferenced object 0xc00000021ff25c40 (size 32):\n  comm \"mkdir\", pid 10665, jiffies 4322121578\n  hex dump (first 32 bytes):\n    69 6e 69 74 5f 68 63 74 78 5f 66 61 75 6c 74 5f  init_hctx_fault_\n    69 6e 6a 65 63 74 00 88 00 00 00 00 00 00 00 00  inject..........\n  backtrace (crc 1a018c86):\n    __kmalloc_node_track_caller_noprof+0x494/0xbd8\n    kvasprintf+0x74/0xf4\n    config_item_set_name+0xf0/0x104\n    config_group_init_type_name+0x48/0xfc\n    fault_config_init+0x48/0xf0\n    0xc0080000180559e4\n    configfs_mkdir+0x304/0x814\n    vfs_mkdir+0x49c/0x604\n    do_mkdirat+0x314/0x3d0\n    sys_mkdir+0xa0/0xd8\n    system_call_exception+0x1b0/0x4f0\n    system_call_vectored_common+0x15c/0x2ec\n\nFix this by explicitly releasing the references to the fault-config\nconfigfs items when dropping the reference to the top-level nullbX\nconfigfs group."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnull_blk: corrige kmemleak al liberar referencias a elementos configfs de fallo\n\nCuando CONFIG_BLK_DEV_NULL_BLK_FAULT_INJECTION está habilitado, el controlador null-blk configura el soporte de inyección de fallos al crear los elementos configfs timeout_inject, requeue_inject e init_hctx_fault_inject como hijos del grupo configfs nullbX de nivel superior.\n\nSin embargo, cuando se elimina el dispositivo nullbX, las referencias tomadas a estos elementos configfs de configuración de fallos no se liberan. Como resultado, kmemleak informa de una fuga de memoria, por ejemplo:\n\nobjeto sin referencia 0xc00000021ff25c40 (tamaño 32):\n  comm 'mkdir', pid 10665, jiffies 4322121578\n  volcado hexadecimal (primeros 32 bytes):\n    69 6e 69 74 5f 68 63 74 78 5f 66 61 75 6c 74 5f  init_hctx_fault_\n    69 6e 6a 65 63 74 00 88 00 00 00 00 00 00 00 00  inject..........\n  rastreo (crc 1a018c86):\n    __kmalloc_node_track_caller_noprof+0x494/0xbd8\n    kvasprintf+0x74/0xf4\n    config_item_set_name+0xf0/0x104\n    config_group_init_type_name+0x48/0xfc\n    fault_config_init+0x48/0xf0\n    0xc0080000180559e4\n    configfs_mkdir+0x304/0x814\n    vfs_mkdir+0x49c/0x604\n    do_mkdirat+0x314/0x3d0\n    sys_mkdir+0xa0/0xd8\n    system_call_exception+0x1b0/0x4f0\n    system_call_vectored_common+0x15c/0x2ec\n\nSolucione esto liberando explícitamente las referencias a los elementos configfs de configuración de fallos al eliminar la referencia al grupo configfs nullbX de nivel superior."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1a3286edf4d48ce37f8982ff3c3b65159a5ecbb2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/40b94ec7edbbb867c4e26a1a43d2b898f04b93c5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/d59ba448ccd595d5d65e197216cf781a87db2b28",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f1718da051282698aa8fa150bebb9724f6389fda",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23033",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.613",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: omap-dma: fix dma_pool resource leak in error paths\n\nThe dma_pool created by dma_pool_create() is not destroyed when\ndma_async_device_register() or of_dma_controller_register() fails,\ncausing a resource leak in the probe error paths.\n\nAdd dma_pool_destroy() in both error paths to properly release the\nallocated dma_pool resource."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndmaengine: omap-dma: corrección de fuga de recursos de dma_pool en las rutas de error\n\nEl dma_pool creado por dma_pool_create() no se destruye cuando dma_async_device_register() o of_dma_controller_register() fallan, causando una fuga de recursos en las rutas de error de sondeo.\n\nAñadir dma_pool_destroy() en ambas rutas de error para liberar correctamente el recurso dma_pool asignado."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2b29f38f4f9660595e8272b8e8b82ffcca7ce592",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/2e1136acf8a8887c29f52e35a77b537309af321f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4b93712e96be17029bd22787f2e39feb0e73272c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6b867a98699657c2a698bbc9e60656349b39b905",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/829b00481734dd54e72f755fd6584bce6fbffbb0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/88a9483f093bbb9263dcf21bc7fdb5132e5de88d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/8d66cb05b8b76396387a7b3a91f9284225c87f04",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23034",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.710",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/userq: Fix fence reference leak on queue teardown v2\n\nThe user mode queue keeps a pointer to the most recent fence in\nuserq->last_fence. This pointer holds an extra dma_fence reference.\n\nWhen the queue is destroyed, we free the fence driver and its xarray,\nbut we forgot to drop the last_fence reference.\n\nBecause of the missing dma_fence_put(), the last fence object can stay\nalive when the driver unloads. This leaves an allocated object in the\namdgpu_userq_fence slab cache and triggers\n\nThis is visible during driver unload as:\n\n  BUG amdgpu_userq_fence: Objects remaining on __kmem_cache_shutdown()\n  kmem_cache_destroy amdgpu_userq_fence: Slab cache still has objects\n  Call Trace:\n    kmem_cache_destroy\n    amdgpu_userq_fence_slab_fini\n    amdgpu_exit\n    __do_sys_delete_module\n\nFix this by putting userq->last_fence and clearing the pointer during\namdgpu_userq_fence_driver_free().\n\nThis makes sure the fence reference is released and the slab cache is\nempty when the module exits.\n\nv2: Update to only release userq->last_fence with dma_fence_put()\n    (Christian)\n\n(cherry picked from commit 8e051e38a8d45caf6a866d4ff842105b577953bb)"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amdgpu/userq: Solución a la fuga de referencia de 'fence' durante el desmontaje de la cola v2\n\nLa cola en modo usuario mantiene un puntero al 'fence' más reciente en userq-&gt;last_fence. Este puntero mantiene una referencia extra de dma_fence.\n\nCuando la cola es destruida, liberamos el controlador de 'fence' y su xarray, pero olvidamos liberar la referencia de last_fence.\n\nDebido a la ausencia de dma_fence_put(), el último objeto 'fence' puede permanecer activo cuando el controlador se descarga. Esto deja un objeto asignado en la caché de 'slab' amdgpu_userq_fence y desencadena\n\nEsto es visible durante la descarga del controlador como:\n\n  BUG amdgpu_userq_fence: Objetos restantes en __kmem_cache_shutdown()\n  kmem_cache_destroy amdgpu_userq_fence: La caché de 'slab' todavía tiene objetos\n  Traza de Llamada:\n    kmem_cache_destroy\n    amdgpu_userq_fence_slab_fini\n    amdgpu_exit\n    __do_sys_delete_module\n\nSolucione esto liberando userq-&gt;last_fence y limpiando el puntero durante amdgpu_userq_fence_driver_free().\n\nEsto asegura que la referencia de 'fence' sea liberada y que la caché de 'slab' esté vacía cuando el módulo sale.\n\nv2: Actualización para liberar solo userq-&gt;last_fence con dma_fence_put() (Christian)\n\n(seleccionado del commit 8e051e38a8d45caf6a866d4ff842105b577953bb)"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/b2426a211dba6432e32a2e70e9183c6e134475c6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e1a30e1ab33fc522785d04bbf7e1b13a5c5c9175",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23035",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.807",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv\n\nmlx5e_priv is an unstable structure that can be memset(0) if profile\nattaching fails.\n\nPass netdev to mlx5e_destroy_netdev() to guarantee it will work on a\nvalid netdev.\n\nOn mlx5e_remove: Check validity of priv->profile, before attempting\nto cleanup any resources that might be not there.\n\nThis fixes a kernel oops in mlx5e_remove when switchdev mode fails due\nto change profile failure.\n\n$ devlink dev eswitch set pci/0000:00:03.0 mode switchdev\nError: mlx5_core: Failed setting eswitch to offloads.\ndmesg:\nworkqueue: Failed to create a rescuer kthread for wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12\nworkqueue: Failed to create a rescuer kthread for wq \"mlx5e\": -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12\n\n$ devlink dev reload pci/0000:00:03.0 ==> oops\n\nBUG: kernel NULL pointer dereference, address: 0000000000000370\nPGD 0 P4D 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 15 UID: 0 PID: 520 Comm: devlink Not tainted 6.18.0-rc5+ #115 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\nRIP: 0010:mlx5e_dcbnl_dscp_app+0x23/0x100\nRSP: 0018:ffffc9000083f8b8 EFLAGS: 00010286\nRAX: ffff8881126fc380 RBX: ffff8881015ac400 RCX: ffffffff826ffc45\nRDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881035109c0\nRBP: ffff8881035109c0 R08: ffff888101e3e838 R09: ffff888100264e10\nR10: ffffc9000083f898 R11: ffffc9000083f8a0 R12: ffff888101b921a0\nR13: ffff888101b921a0 R14: ffff8881015ac9a0 R15: ffff8881015ac400\nFS:  00007f789a3c8740(0000) GS:ffff88856aa59000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000370 CR3: 000000010b6c0001 CR4: 0000000000370ef0\nCall Trace:\n <TASK>\n mlx5e_remove+0x57/0x110\n device_release_driver_internal+0x19c/0x200\n bus_remove_device+0xc6/0x130\n device_del+0x160/0x3d0\n ? devl_param_driverinit_value_get+0x2d/0x90\n mlx5_detach_device+0x89/0xe0\n mlx5_unload_one_devl_locked+0x3a/0x70\n mlx5_devlink_reload_down+0xc8/0x220\n devlink_reload+0x7d/0x260\n devlink_nl_reload_doit+0x45b/0x5a0\n genl_family_rcv_msg_doit+0xe8/0x140"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/mlx5e: Pasar netdev a mlx5e_destroy_netdev en lugar de priv\n\nmlx5e_priv es una estructura inestable que puede ser memset(0) si la asociación de perfil falla.\n\nPasar netdev a mlx5e_destroy_netdev() para garantizar que funcionará en un netdev válido.\n\nEn mlx5e_remove: Verificar la validez de priv-&gt;profile, antes de intentar limpiar cualquier recurso que podría no estar allí.\n\nEsto corrige un kernel oops en mlx5e_remove cuando el modo switchdev falla debido a un fallo en el cambio de perfil.\n\n$ devlink dev eswitch set pci/0000:00:03.0 mode switchdev\nError: mlx5_core: Falló al establecer eswitch en offloads.\ndmesg:\nworkqueue: Falló al crear un kthread de rescate para wq 'mlx5e': -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init falló, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: la inicialización del nuevo perfil falló, -12\nworkqueue: Falló al crear un kthread de rescate para wq 'mlx5e': -EINTR\nmlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init falló, err=-12\nmlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: falló al revertir al perfil original, -12\n\n$ devlink dev reload pci/0000:00:03.0 ==&gt; oops\n\nBUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000370\nPGD 0 P4D 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 15 UID: 0 PID: 520 Comm: devlink Not tainted 6.18.0-rc5+ #115 PREEMPT(voluntary)\nNombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\nRIP: 0010:mlx5e_dcbnl_dscp_app+0x23/0x100\nRSP: 0018:ffffc9000083f8b8 EFLAGS: 00010286\nRAX: ffff8881126fc380 RBX: ffff8881015ac400 RCX: ffffffff826ffc45\nRDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881035109c0\nRBP: ffff8881035109c0 R08: ffff888101e3e838 R09: ffff888100264e10\nR10: ffffc9000083f898 R11: ffffc9000083f8a0 R12: ffff888101b921a0\nR13: ffff888101b921a0 R14: ffff8881015ac9a0 R15: ffff8881015ac400\nFS:  00007f789a3c8740(0000) GS:ffff88856aa59000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000370 CR3: 000000010b6c0001 CR4: 0000000000370ef0\nTraza de Llamada:\n \n mlx5e_remove+0x57/0x110\n device_release_driver_internal+0x19c/0x200\n bus_remove_device+0xc6/0x130\n device_del+0x160/0x3d0\n ? devl_param_driverinit_value_get+0x2d/0x90\n mlx5_detach_device+0x89/0xe0\n mlx5_unload_one_devl_locked+0x3a/0x70\n mlx5_devlink_reload_down+0xc8/0x220\n devlink_reload+0x7d/0x260\n devlink_nl_reload_doit+0x45b/0x5a0\n genl_family_rcv_msg_doit+0xe8/0x140"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4ef8512e1427111f7ba92b4a847d181ff0aeec42",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/66a25f6b7c0bfd84e6d27b536f5d24116dbd52da",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a7625bacaa8c8c2bfcde6dd6d1397bd63ad82b02",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23036",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:06.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: release path before iget_failed() in btrfs_read_locked_inode()\n\nIn btrfs_read_locked_inode() if we fail to lookup the inode, we jump to\nthe 'out' label with a path that has a read locked leaf and then we call\niget_failed(). This can result in a ABBA deadlock, since iget_failed()\ntriggers inode eviction and that causes the release of the delayed inode,\nwhich must lock the delayed inode's mutex, and a task updating a delayed\ninode starts by taking the node's mutex and then modifying the inode's\nsubvolume btree.\n\nSyzbot reported the following lockdep splat for this:\n\n   ======================================================\n   WARNING: possible circular locking dependency detected\n   syzkaller #0 Not tainted\n   ------------------------------------------------------\n   btrfs-cleaner/8725 is trying to acquire lock:\n   ffff0000d6826a48 (&delayed_node->mutex){+.+.}-{4:4}, at: __btrfs_release_delayed_node+0xa0/0x9b0 fs/btrfs/delayed-inode.c:290\n\n   but task is already holding lock:\n   ffff0000dbeba878 (btrfs-tree-00){++++}-{4:4}, at: btrfs_tree_read_lock_nested+0x44/0x2ec fs/btrfs/locking.c:145\n\n   which lock already depends on the new lock.\n\n   the existing dependency chain (in reverse order) is:\n\n   -> #1 (btrfs-tree-00){++++}-{4:4}:\n          __lock_release kernel/locking/lockdep.c:5574 [inline]\n          lock_release+0x198/0x39c kernel/locking/lockdep.c:5889\n          up_read+0x24/0x3c kernel/locking/rwsem.c:1632\n          btrfs_tree_read_unlock+0xdc/0x298 fs/btrfs/locking.c:169\n          btrfs_tree_unlock_rw fs/btrfs/locking.h:218 [inline]\n          btrfs_search_slot+0xa6c/0x223c fs/btrfs/ctree.c:2133\n          btrfs_lookup_inode+0xd8/0x38c fs/btrfs/inode-item.c:395\n          __btrfs_update_delayed_inode+0x124/0xed0 fs/btrfs/delayed-inode.c:1032\n          btrfs_update_delayed_inode fs/btrfs/delayed-inode.c:1118 [inline]\n          __btrfs_commit_inode_delayed_items+0x15f8/0x1748 fs/btrfs/delayed-inode.c:1141\n          __btrfs_run_delayed_items+0x1ac/0x514 fs/btrfs/delayed-inode.c:1176\n          btrfs_run_delayed_items_nr+0x28/0x38 fs/btrfs/delayed-inode.c:1219\n          flush_space+0x26c/0xb68 fs/btrfs/space-info.c:828\n          do_async_reclaim_metadata_space+0x110/0x364 fs/btrfs/space-info.c:1158\n          btrfs_async_reclaim_metadata_space+0x90/0xd8 fs/btrfs/space-info.c:1226\n          process_one_work+0x7e8/0x155c kernel/workqueue.c:3263\n          process_scheduled_works kernel/workqueue.c:3346 [inline]\n          worker_thread+0x958/0xed8 kernel/workqueue.c:3427\n          kthread+0x5fc/0x75c kernel/kthread.c:463\n          ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844\n\n   -> #0 (&delayed_node->mutex){+.+.}-{4:4}:\n          check_prev_add kernel/locking/lockdep.c:3165 [inline]\n          check_prevs_add kernel/locking/lockdep.c:3284 [inline]\n          validate_chain kernel/locking/lockdep.c:3908 [inline]\n          __lock_acquire+0x1774/0x30a4 kernel/locking/lockdep.c:5237\n          lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5868\n          __mutex_lock_common+0x1d0/0x2678 kernel/locking/mutex.c:598\n          __mutex_lock kernel/locking/mutex.c:760 [inline]\n          mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812\n          __btrfs_release_delayed_node+0xa0/0x9b0 fs/btrfs/delayed-inode.c:290\n          btrfs_release_delayed_node fs/btrfs/delayed-inode.c:315 [inline]\n          btrfs_remove_delayed_node+0x68/0x84 fs/btrfs/delayed-inode.c:1326\n          btrfs_evict_inode+0x578/0xe28 fs/btrfs/inode.c:5587\n          evict+0x414/0x928 fs/inode.c:810\n          iput_final fs/inode.c:1914 [inline]\n          iput+0x95c/0xad4 fs/inode.c:1966\n          iget_failed+0xec/0x134 fs/bad_inode.c:248\n          btrfs_read_locked_inode+0xe1c/0x1234 fs/btrfs/inode.c:4101\n          btrfs_iget+0x1b0/0x264 fs/btrfs/inode.c:5837\n          btrfs_run_defrag_inode fs/btrfs/defrag.c:237 [inline]\n          btrfs_run_defrag_inodes+0x520/0xdc4 fs/btrf\n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  btrfs: liberar la ruta antes de iget_failed() en btrfs_read_locked_inode()  En btrfs_read_locked_inode() si no logramos buscar el inodo, saltamos a la etiqueta 'out' con una ruta que tiene una hoja bloqueada para lectura y luego llamamos a iget_failed(). Esto puede resultar en un interbloqueo ABBA, ya que iget_failed() activa el desalojo del inodo y eso causa la liberación del inodo retrasado, el cual debe bloquear el mutex del inodo retrasado, y una tarea que actualiza un inodo retrasado comienza tomando el mutex del nodo y luego modificando el btree del subvolumen del inodo.  Syzbot informó el siguiente splat de lockdep para esto: ADVERTENCIA: posible dependencia de bloqueo circular detectada    syzkaller #0 No contaminado btrfs-cleaner/8725 está intentando adquirir el bloqueo: ffff0000d6826a48 (&amp;delayed_node-&gt;mutex){+.+.}-{4:4}, en: __btrfs_release_delayed_node+0xa0/0x9b0 fs/btrfs/delayed-inode.c:290 pero la tarea ya tiene el bloqueo: ffff0000dbeba878 (btrfs-tree-00){++++}-{4:4}, en: btrfs_tree_read_lock_nested+0x44/0x2ec fs/btrfs/locking.c:145     cuyo bloqueo ya depende del nuevo bloqueo.     la cadena de dependencia existente (en orden inverso) es:     -&gt; #1 (btrfs-tree-00){++++}-{4:4}:           __lock_release kernel/locking/lockdep.c:5574 [en línea]           lock_release+0x198/0x39c kernel/locking/lockdep.c:5889           up_read+0x24/0x3c kernel/locking/rwsem.c:1632           btrfs_tree_read_unlock+0xdc/0x298 fs/btrfs/locking.c:169           btrfs_tree_unlock_rw fs/btrfs/locking.h:218 [en línea]           btrfs_search_slot+0xa6c/0x223c fs/btrfs/ctree.c:2133           btrfs_lookup_inode+0xd8/0x38c fs/btrfs/inode-item.c:395           __btrfs_update_delayed_inode+0x124/0xed0 fs/btrfs/delayed-inode.c:1032           btrfs_update_delayed_inode fs/btrfs/delayed-inode.c:1118 [en línea]           __btrfs_commit_inode_delayed_items+0x15f8/0x1748 fs/btrfs/delayed-inode.c:1141           __btrfs_run_delayed_items+0x1ac/0x514 fs/btrfs/delayed-inode.c:1176           btrfs_run_delayed_items_nr+0x28/0x38 fs/btrfs/delayed-inode.c:1219           flush_space+0x26c/0xb68 fs/btrfs/space-info.c:828           do_async_reclaim_metadata_space+0x110/0x364 fs/btrfs/space-info.c:1158           btrfs_async_reclaim_metadata_space+0x90/0xd8 fs/btrfs/space-info.c:1226           process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [en línea] worker_thread+0x958/0xed8 kernel/workqueue.c:3427           kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 -&gt; #0 (&amp;delayed_node-&gt;mutex){+.+.}-{4:4}: check_prev_add kernel/locking/lockdep.c:3165 [en línea] check_prevs_add kernel/locking/lockdep.c:3284 [en línea] validate_chain kernel/locking/lockdep.c:3908 [en línea] __lock_acquire+0x1774/0x30a4 kernel/locking/lockdep.c:5237 lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5868 __mutex_lock_common+0x1d0/0x2678 kernel/locking/mutex.c:598 __mutex_lock kernel/locking/mutex.c:760 [en línea] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 __btrfs_release_delayed_node+0xa0/0x9b0 fs/btrfs/delayed-inode.c:290 btrfs_release_delayed_node fs/btrfs/delayed-inode.c:315 [en línea] btrfs_remove_delayed_node+0x68/0x84 fs/btrfs/delayed-inode.c:1326 btrfs_evict_inode+0x578/0xe28 fs/btrfs/inode.c:5587 evict+0x414/0x928 fs/inode.c:810 iput_final fs/inode.c:1914 [en línea] iput+0x95c/0xad4 fs/inode.c:1966 iget_failed+0xec/0x134 fs/bad_inode.c:248 btrfs_read_locked_inode+0xe1c/0x1234 fs/btrfs/inode.c:4101 btrfs_iget+0x1b0/0x264 fs/btrfs/inode.c:5837 trfs_run_defrag_inode fs/btrfs/defrag.c:237 [en línea] btrfs_run_defrag_inodes+0x520/0xdc4 fs/btrf ---truncado---"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1e1f2055ad5a7a5d548789b334a4473a7665c418",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/65241e3ddda60b53a4ee3ae12721fc9ee21d5827",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23037",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:07.010",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: etas_es58x: allow partial RX URB allocation to succeed\n\nWhen es58x_alloc_rx_urbs() fails to allocate the requested number of\nURBs but succeeds in allocating some, it returns an error code.\nThis causes es58x_open() to return early, skipping the cleanup label\n'free_urbs', which leads to the anchored URBs being leaked.\n\nAs pointed out by maintainer Vincent Mailhol, the driver is designed\nto handle partial URB allocation gracefully. Therefore, partial\nallocation should not be treated as a fatal error.\n\nModify es58x_alloc_rx_urbs() to return 0 if at least one URB has been\nallocated, restoring the intended behavior and preventing the leak\nin es58x_open()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: etas_es58x: permitir que la asignación parcial de URB RX tenga éxito\n\nCuando es58x_alloc_rx_urbs() falla al asignar el número solicitado de URBs pero logra asignar algunos, devuelve un código de error. Esto hace que es58x_open() retorne prematuramente, saltándose la etiqueta de limpieza 'free_urbs', lo que lleva a la fuga de los URBs anclados.\n\nComo señaló el mantenedor Vincent Mailhol, el controlador está diseñado para manejar la asignación parcial de URB de manera elegante. Por lo tanto, la asignación parcial no debe ser tratada como un error fatal.\n\nModificar es58x_alloc_rx_urbs() para que devuelva 0 si al menos un URB ha sido asignado, restaurando el comportamiento previsto y previniendo la fuga en es58x_open()."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/611e839d2d552416b498ed5593e10670f61fcd4d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6c5124a60989051799037834f0a1a4b428718157",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/97250eb05e4b6afe787290e8fd97d0675116c61b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/aec888f44853584b5a7cd01249806030cf94a73d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/b1979778e98569c1e78c2c7f16bb24d76541ab00",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ba45e3d6b02c97dbb4578fbae7027fd66f3caa10",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23038",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:07.110",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\npnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()\n\nIn nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails,\nthe function jumps to the out_scratch label without freeing the already\nallocated dsaddrs list, leading to a memory leak.\n\nFix this by jumping to the out_err_drain_dsaddrs label, which properly\nfrees the dsaddrs list before cleaning up other resources."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\npnfs/flexfiles: Corrección de fuga de memoria en nfs4_ff_alloc_deviceid_node()\n\nEn nfs4_ff_alloc_deviceid_node(), si la asignación para ds_versions falla, la función salta a la etiqueta out_scratch sin liberar la lista dsaddrs ya asignada, lo que lleva a una fuga de memoria.\n\nCorrija esto al saltar a la etiqueta out_err_drain_dsaddrs, que libera correctamente la lista dsaddrs antes de limpiar otros recursos."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0c728083654f0066f5e10a1d2b0bd0907af19a58",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/27c90d8ed81e7a289c9fe41b5e31d8bb609a3385",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/34b9dd179818ff7af2b36410985fd8166573c62d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/869862056e100973e76ce9f5f1b01837771b7722",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/86da7efd12295a7e2b4abde5e5984c821edd938f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e2dde5dafb80f1af4028ed10ad255f42af71c784",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23039",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-01-31T12:16:07.213",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gud: fix NULL fb and crtc dereferences on USB disconnect\n\nOn disconnect drm_atomic_helper_disable_all() is called which\nsets both the fb and crtc for a plane to NULL before invoking a commit.\n\nThis causes a kernel oops on every display disconnect.\n\nAdd guards for those dereferences."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/gud: corrige desreferencias NULL de fb y crtc al desconectar el USB\n\nAl desconectar, se llama a drm_atomic_helper_disable_all() que establece tanto el fb como el crtc para un plano a NULL antes de invocar un commit.\n\nEsto causa un kernel oops en cada desconexión de pantalla.\n\nAñadir protecciones para esas desreferencias."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/a255ec07f91d4c73a361a28b7a3d82f5710245f1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/dc2d5ddb193e363187bae2ad358245642d2721fb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1165",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-01-31T15:15:50.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Popup Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.1.1. This is due to a flawed nonce implementation in the 'publish_unpublish_popupbox' function that verifies a self-created nonce rather than one submitted in the request. This makes it possible for unauthenticated attackers to change the publish status of popups via a forged request, granted they can trick a site administrator into performing an action such as clicking a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Popup Box para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 6.1.1, inclusive. Esto se debe a una implementación de nonce defectuosa en la función 'publish_unpublish_popupbox' que verifica un nonce autocreado en lugar de uno enviado en la petición. Esto hace posible que atacantes no autenticados cambien el estado de publicación de los popups a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.1.0/admin/partials/ays-pb-admin-display.php#L22",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.1.0/includes/lists/class-ays-pb-list-table.php#L701",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3439514@ays-popup-box/tags/6.1.1/&new=3444612@ays-popup-box/tags/6.1.2/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/585a9eb4-f394-4cb2-9050-659171a994d9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25069",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-01T00:16:19.107",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service."
      }, {
        "lang" : "es",
        "value" : "SunFounder Pironman Dashboard (pm_dashboard) versión 1.3.13 y anteriores contienen una vulnerabilidad de salto de ruta en los endpoints de la API de archivos de registro. Un atacante remoto no autenticado puede suministrar secuencias de salto de ruta a través del parámetro filename para leer y eliminar archivos arbitrarios. La explotación exitosa puede divulgar información sensible y eliminar archivos críticos del sistema, lo que resulta en pérdida de datos y posible compromiso del sistema o denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/chapochapo/5db8702ede862af5c59a28b5d5a0aba3",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/sunfounder/pm_dashboard",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L440",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L62",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/sunfounder-pironman-dashboard-path-traversal-arbitrary-file-read-deletion",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1733",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-01T23:15:49.483",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /api/store_integral/order/detail/:uni. The manipulation of the argument order_id leads to improper authorization. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Zhong Bang CRMEB hasta 5.6.3. Esto afecta la función detail/tidyOrder del archivo /api/store_integral/order/detail/:uni. La manipulación del argumento order_id conduce a una autorización indebida. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no hubo respuesta alguna."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.3",
            "matchCriteriaId" : "F4890E95-8C9F-4E12-B5A2-72AF73C7F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/integral_order_detail_idor.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/integral_order_detail_idor.md#%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736558",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/integral_order_detail_idor.md#%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-01T23:15:49.717",
      "lastModified" : "2026-02-13T17:41:02.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value."
      }, {
        "lang" : "es",
        "value" : "OpenClaw (también conocido como clawdbot o Moltbot) antes de 2026.1.29 obtiene un valor gatewayUrl de una cadena de consulta y automáticamente establece una conexión WebSocket sin solicitarlo, enviando un valor de token."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.1.29",
            "matchCriteriaId" : "4801AF60-B3F7-4C05-A4A1-F8443F445ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://depthfirst.com/post/1-click-rce-to-steal-your-moltbot-data-and-keys",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ethiack.com/news/blog/one-click-rce-moltbot",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-g8p2-7wf7-98mq",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://openclaw.ai/blog",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://x.com/0xacb/status/2016913750557651228",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://depthfirst.com/post/1-click-rce-to-steal-your-moltbot-data-and-keys",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1734",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T00:15:52.260",
      "lastModified" : "2026-02-11T19:33:06.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3. This vulnerability affects unknown code of the file crmeb/app/api/controller/v1/CrontabController.php of the component crontab Endpoint. The manipulation results in missing authorization. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Zhong Bang CRMEB hasta 5.6.3. Esta vulnerabilidad afecta a código desconocido del archivo crmeb/app/API/controller/v1/CrontabController.PHP del componente crontab Endpoint. La manipulación resulta en falta de autorización. El ataque puede lanzarse remotamente. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.6.3",
            "matchCriteriaId" : "F4890E95-8C9F-4E12-B5A2-72AF73C7F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/crontab_unauthorized_access.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/foeCat/CVE/blob/main/CRMEB/crontab_unauthorized_access.md#proof-of-concept",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.736619",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1735",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T01:15:51.697",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This manipulation causes command injection. It is feasible to perform the attack on the physical device. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una debilidad ha sido identificada en Yealink MeetingBar A30 133.321.0.3. Este problema afecta algún procesamiento desconocido del componente Diagnostic Handler. Esta manipulación causa inyección de comandos. Es factible realizar el ataque en el dispositivo físico. El exploit ha sido puesto a disposición del público y podría ser usado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 0.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1Uf46ihr8UmeXsFfkcvAeOtF1TkvGjozy/view?usp=sharing",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.343634",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.343634",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.736622",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1736",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T01:15:51.940",
      "lastModified" : "2026-02-11T19:34:35.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11-handler.c of the component SGWC. Such manipulation leads to reachable assertion. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. A patch should be applied to remediate this issue. The issue report is flagged as already-fixed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Open5GS hasta 2.7.6. Impactada es la función sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request del archivo /src/sgwc/s11-handler.c del componente SGWC. Dicha manipulación conduce a una aserción alcanzable. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Un parche debería ser aplicado para remediar este problema. El informe del problema está marcado como ya solucionado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4270#event-21968624624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4270#issue-3795141303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741191",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1737",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T02:16:10.457",
      "lastModified" : "2026-02-11T19:34:45.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function sgwc_s5c_handle_create_bearer_request of the file /src/sgwc/s5c-handler.c of the component CreateBearerRequest Handler. Performing a manipulation results in reachable assertion. Remote exploitation of the attack is possible. The exploit is now public and may be used. To fix this issue, it is recommended to deploy a patch. The issue report is flagged as already-fixed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Open5GS hasta la versión 2.7.6. El elemento afectado es la función sgwc_s5c_handle_create_bearer_request del archivo /src/sgwc/s5c-handler.c del componente CreateBearerRequest Handler. Realizar una manipulación resulta en una aserción alcanzable. La explotación remota del ataque es posible. El exploit ahora es público y puede ser utilizado. Para solucionar este problema, se recomienda desplegar un parche. El informe del problema está marcado como ya solucionado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4271",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4271#event-21968630023",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4271#issue-3795147720",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343636",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343636",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741192",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1738",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T02:16:10.643",
      "lastModified" : "2026-02-11T19:34:54.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Open5GS up to 2.7.6. The impacted element is the function sgwc_tunnel_add of the file /src/sgwc/context.c of the component SGWC. Executing a manipulation of the argument pdr can lead to reachable assertion. The attack can be executed remotely. The exploit has been published and may be used. It is advisable to implement a patch to correct this issue. The issue report is flagged as already-fixed."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Open5GS hasta la versión 2.7.6. El elemento afectado es la función sgwc_tunnel_add del archivo /src/sgwc/context.c del componente SGWC. La ejecución de una manipulación del argumento pdr puede llevar a una aserción alcanzable. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Es aconsejable implementar un parche para corregir este problema. El informe del problema está marcado como ya corregido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4261#event-21968563677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4261#issue-3787803578",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343637",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343637",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741193",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1739",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T02:16:10.823",
      "lastModified" : "2026-02-11T19:35:36.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is df535f5524314620715e842baf9723efbeb481a7. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Free5GC pcf hasta la versión 1.4.1. Esto afecta a la función HandleCreateSmPolicyRequest del archivo internal/sbi/processor/smpolicy.go. La manipulación conduce a una desreferencia de puntero nulo. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El identificador del parche es df535f5524314620715e842baf9723efbeb481a7. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:pcf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "60C50F9C-B876-435E-A6AE-F9EC1C32F7C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/803",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/803#issue-3815770007",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/pcf/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/free5gc/pcf/commit/df535f5524314620715e842baf9723efbeb481a7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/free5gc/pcf/pull/62",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343638",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343638",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741194",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1740",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T04:15:54.963",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file /cgi/timepro.cgi of the component Hidden Hiddenloginsetup Interface. The manipulation results in improper authentication. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en EFM ipTIME A8004T 14.18.2. Esto afecta a la función httpcon_check_session_url del archivo /cgi/timepro.cgi del componente Hidden Hiddenloginsetup Interface. La manipulación resulta en una autenticación impropia. El ataque puede realizarse de forma remota. El exploit se ha hecho público y podría ser utilizado. Se contactó con antelación al proveedor sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:a8004t_firmware:14.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C875D1A0-3D66-4DAB-BD93-3ADECE43F457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:a8004t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842D759D-9279-4ED9-B4DA-86493E25DE17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741422",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1741",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T04:15:55.170",
      "lastModified" : "2026-03-10T18:26:24.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the file /sess-bin/d.cgi of the component Debug Interface. This manipulation of the argument cmd causes backdoor. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en EFM ipTIME A8004T 14.18.2. Se ve afectada la función httpcon_check_session_url del archivo /sess-bin/d.cgi del componente Debug Interface. Esta manipulación del argumento cmd provoca una puerta trasera. Es posible iniciar el ataque remotamente. La complejidad de un ataque es bastante alta. Se dice que la explotabilidad es difícil. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:M/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.2,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:a8004t_firmware:14.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C875D1A0-3D66-4DAB-BD93-3ADECE43F457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:a8004t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842D759D-9279-4ED9-B4DA-86493E25DE17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/28",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741423",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1742",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T04:15:55.357",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component VPN Service. Such manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en EFM ipTIME A8004T 14.18.2. Afectada por esta vulnerabilidad es la función commit_vpncli_file_upload del archivo /cgi/timepro.cgi del componente Servicio VPN. Dicha manipulación conduce a una carga sin restricciones. Es posible lanzar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:a8004t_firmware:14.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C875D1A0-3D66-4DAB-BD93-3ADECE43F457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:a8004t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842D759D-9279-4ED9-B4DA-86493E25DE17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve/issues/29",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741450",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1743",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T04:15:55.547",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. Affected by this vulnerability is an unknown functionality of the component Enhanced Wi-Fi Pairing. The manipulation leads to authentication bypass by capture-replay. The attack must be carried out from within the local network. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en DJI Mavic Mini, Air, Spark y Mini SE hasta 01.00.0500. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente Enhanced Wi-Fi Pairing. La manipulación conduce a una omisión de autenticación mediante captura-repetición. El ataque debe llevarse a cabo desde dentro de la red local. Un alto grado de complejidad es necesario para el ataque. La explotación parece ser difícil. El exploit ha sido revelado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta revelación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.2,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ByteMe1001/DJI-CatNect",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/ByteMe1001/DJI-CatNect/blob/main/exploit.c",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.343674",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.343674",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.741323",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1744",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T05:15:59.233",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DSL-6641K N8.TR069.20131126. Afectada por este problema es la función doSubmitPPP del archivo sp_pppoe_user.js. La manipulación del argumento Username resulta en cross site scripting. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado. Esta vulnerabilidad solo afecta a productos que ya no son soportados por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dsl-6641k_firmware:n8.tr069.20131126:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05E08C5F-D951-46E8-B63E-55DD38F30538"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dsl-6641k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31A4FE9D-D14B-44B1-993A-9CE12CEDD7E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-sp_pppoe_user-js-Configuration-2eeb5c52018a80d083aaf19efbaa9130?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742439",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-sp_pppoe_user-js-Configuration-2eeb5c52018a80d083aaf19efbaa9130?source=copy_link",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24788",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-02T05:16:03.940",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product."
      }, {
        "lang" : "es",
        "value" : "Las versiones de RaspAP raspap-webgui anteriores a la 3.3.6 contienen una vulnerabilidad de inyección de comandos del sistema operativo. Si se explota, un usuario que puede iniciar sesión en el producto puede ejecutar un comando arbitrario del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RaspAP/raspap-webgui/releases",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN27202136/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25200",
      "sourceIdentifier" : "PSIRT@samsung.com",
      "published" : "2026-02-02T05:16:05.770",
      "lastModified" : "2026-03-10T18:43:02.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover\n\n\nThis issue affects MagicINFO 9 Server: less than 21.1090.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en MagicInfo9 Server permite a usuarios autorizados subir archivos HTML sin autenticación, lo que lleva a XSS Almacenado, que puede resultar en la toma de control de la cuenta.\n\nEste problema afecta a MagicINFO 9 Server: versiones anteriores a 21.1090.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1090.1",
            "matchCriteriaId" : "72138C44-D3F0-4373-967F-831861E19195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungtv.com/securityUpdates",
        "source" : "PSIRT@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25201",
      "sourceIdentifier" : "PSIRT@samsung.com",
      "published" : "2026-02-02T05:16:06.697",
      "lastModified" : "2026-03-10T18:44:05.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.\nThis issue affects MagicINFO 9 Server: less than 21.1090.1."
      }, {
        "lang" : "es",
        "value" : "Un usuario no autenticado puede cargar archivos arbitrarios para ejecutar código remoto, lo que lleva a una escalada de privilegios en el servidor MagicInfo9.\nEste problema afecta a MagicINFO 9 Server: versiones anteriores a 21.1090.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1090.1",
            "matchCriteriaId" : "72138C44-D3F0-4373-967F-831861E19195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungtv.com/securityUpdates",
        "source" : "PSIRT@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25202",
      "sourceIdentifier" : "PSIRT@samsung.com",
      "published" : "2026-02-02T05:16:07.280",
      "lastModified" : "2026-03-10T18:44:22.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1."
      }, {
        "lang" : "es",
        "value" : "La cuenta y la contraseña de la base de datos están codificadas de forma rígida, permitiendo el inicio de sesión con la cuenta para manipular la base de datos en el servidor MagicInfo9. Este problema afecta a MagicINFO 9 Server: versiones inferiores a 21.1090.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1090.1",
            "matchCriteriaId" : "72138C44-D3F0-4373-967F-831861E19195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungtv.com/securityUpdates",
        "source" : "PSIRT@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1530",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-02T06:16:20.620",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en fog-kubevirt. Esta vulnerabilidad permite a un atacante remoto realizar un ataque Man-in-the-Middle (MitM) debido a la validación de certificados deshabilitada. Esto permite al atacante interceptar y potencialmente alterar comunicaciones sensibles entre Satellite y OpenShift, lo que resulta en revelación de información y compromiso de la integridad de los datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5970",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5971",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1530",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433784",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1531",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-02T06:16:20.790",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en foreman_kubevirt. Al configurar la conexión a OpenShift, el sistema deshabilita la verificación SSL si no se establece explícitamente un certificado de Autoridad de Certificación (CA). Este valor predeterminado inseguro permite a un atacante remoto, capaz de interceptar el tráfico de red entre Satellite y OpenShift, realizar un ataque man-in-the-middle (MitM). Dicho ataque podría conducir a la divulgación o alteración de información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5968",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5970",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5971",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1531",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433786",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1745",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T06:16:20.947",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en la aplicación SourceCodester Medical Certificate Generator App 1.0. Esto afecta una parte desconocida. Esta manipulación causa falsificación de petición en sitios cruzados. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B30879-9A3B-4AF4-B249-1984FC227BF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion#proof-of-concept-csrf-exploit",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1746",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-02T06:16:21.160",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of the component Online Report API. Such manipulation of the argument keyword leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en JeecgBoot 3.9.0. Esta vulnerabilidad afecta código desconocido del archivo /JeecgBoot/sys/api/loadDictItemByKeyword del componente API de Informes en Línea. Dicha manipulación del argumento keyword conduce a inyección SQL. El ataque puede ser ejecutado remotamente. El exploit está disponible públicamente y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B329440-4111-4105-B5B7-74EED287D54D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.343677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.741647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/meizhiyuwai/sks4nu/clircmda9b8q66lo?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0658",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-02T07:16:44.803",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Five Star Restaurant Reservations  WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting bookings via CSRF attacks."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Five Star Restaurant Reservations anterior a la versión 2.7.9 no tiene comprobaciones CSRF en algunas acciones masivas, lo que podría permitir a los atacantes hacer que los administradores que han iniciado sesión realicen acciones no deseadas, como eliminar reservas a través de ataques CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6e39090e-a4b2-4c16-806f-e2b1c456fb00/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20711",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-02T07:16:45.100",
      "lastModified" : "2026-02-19T15:06:02.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting existe en la función de correo electrónico de Cybozu Garoon 5.0.0 a 6.0.3, lo que puede permitir a un atacante restablecer las contraseñas de usuarios arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "562B8A87-363B-4C9D-BB9A-62F2C70AD1C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35265756/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/39081/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22881",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-02T07:16:45.337",
      "lastModified" : "2026-02-19T15:00:54.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-Site Scripting existe en la función Mensaje de Cybozu Garoon 5.15.0 a 6.0.3, lo que podría permitir a un atacante restablecer las contraseñas de usuarios arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "A7B1171A-2A25-4F4C-9B65-7881B8DE761F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35265756/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/39084/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22888",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-02T07:16:45.523",
      "lastModified" : "2026-02-19T14:53:03.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product."
      }, {
        "lang" : "es",
        "value" : "Existe un problema de verificación de entrada incorrecta en Cybozu Garoon 5.0.0 a 6.0.3, lo que puede llevar a la alteración no autorizada de la configuración del portal, bloqueando potencialmente el acceso al producto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-231"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:garoon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "562B8A87-363B-4C9D-BB9A-62F2C70AD1C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35265756/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/39083/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1518",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-02T08:16:06.217",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak’s CIBA feature where insufficient validation of client-configured backchannel notification endpoints could allow blind server-side requests to internal services."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la característica CIBA de Keycloak donde una validación insuficiente de los puntos finales de notificación de canal de retorno configurados por el cliente podría permitir solicitudes ciegas del lado del servidor a servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1518",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433727",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20401",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:54.663",
      "lastModified" : "2026-02-17T15:16:20.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738310; Issue ID: MSV-5933."
      }, {
        "lang" : "es",
        "value" : "En el Módem, hay una posible caída del sistema debido a una excepción no capturada. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID del parche: MOLY01738310; ID del problema: MSV-5933."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20402",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:54.830",
      "lastModified" : "2026-02-17T15:16:20.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00693083; Issue ID: MSV-5928."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una validación de entrada incorrecta. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY00693083; ID del problema: MSV-5928."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20403",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:54.963",
      "lastModified" : "2026-02-17T15:16:21.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689254 (Note: For N15 and NR16) / MOLY01689259 (Note: For NR17 and NR17R); Issue ID: MSV-4843."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una comprobación de límites faltante. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY01689254 (Nota: Para N15 y NR16) / MOLY01689259 (Nota: Para NR17 y NR17R); ID del problema: MSV-4843."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20404",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.097",
      "lastModified" : "2026-02-17T15:16:21.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689248; Issue ID: MSV-4837."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una validación de entrada incorrecta. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY01689248; ID del problema: MSV-4837."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61AD730-66FE-4605-A89B-3B8D6526D612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF88096-5CBD-4A4B-8F47-33D38985956F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0D738-F0B9-468F-8A10-204F498320BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20405",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.237",
      "lastModified" : "2026-02-17T15:16:21.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01688495; Issue ID: MSV-4818."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una comprobación de límites faltante. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY01688495; ID del problema: MSV-4818."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61AD730-66FE-4605-A89B-3B8D6526D612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF88096-5CBD-4A4B-8F47-33D38985956F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0D738-F0B9-468F-8A10-204F498320BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20406",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.370",
      "lastModified" : "2026-02-17T15:16:21.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una excepción no capturada. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY01726634; ID del problema: MSV-5728."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61AD730-66FE-4605-A89B-3B8D6526D612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF88096-5CBD-4A4B-8F47-33D38985956F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0D738-F0B9-468F-8A10-204F498320BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20407",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.520",
      "lastModified" : "2026-02-04T13:50:50.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905."
      }, {
        "lang" : "es",
        "value" : "En el controlador STA de WLAN, existe una posible escalada de privilegios debido a una falta de verificación de límites. Esto podría llevar a una escalada de privilegios local con privilegios de ejecución de usuario necesarios. No se necesita interacción del usuario para la explotación. ID del parche: WCNCR00464377; ID del problema: MSV-4905."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "513F2D0C-0D1C-4C90-AA0F-4F43BF08EB0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140DAC08-96E9-47D3-BC2E-65E999DCFD50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2A6813-7138-441E-A9E4-FF62FCBD797A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CFC9DF-2F4C-469A-8A19-A260B1134CFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05525018-AFE0-415C-A71C-A77922C7D637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20408",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.657",
      "lastModified" : "2026-02-04T13:48:41.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758."
      }, {
        "lang" : "es",
        "value" : "En WLAN, existe una posible escritura fuera de límites debido a un desbordamiento de búfer en el heap. Esto podría conducir a una escalada de privilegios remota (próxima/adyacente) sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para la explotación. ID del parche: WCNCR00461651; ID del problema: MSV-4758."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.7.2",
            "matchCriteriaId" : "0DD86CC1-BD46-42D2-9112-190CCAC96B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA469E2-9E63-4C9A-8EBA-10C8C870063A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F0133207-2EED-4625-854F-8DB7770D5BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:23.05.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00113669-2850-4F0C-913A-92CA5290746E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05748BB1-0D48-4097-932E-E8E2E574FD8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB22996-9C22-4B6C-9E94-E4C055D16335"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5AA441-5381-4179-89EB-1642120F72B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490CD97B-021F-4350-AEE7-A2FA866D5889"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9E917-4B34-403F-B512-09EEBEA46811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20409",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.790",
      "lastModified" : "2026-02-04T13:47:37.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363246; Issue ID: MSV-5779."
      }, {
        "lang" : "es",
        "value" : "En imgsys, existe una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría llevar a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10363246; ID del problema: MSV-5779."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20410",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:55.913",
      "lastModified" : "2026-02-04T13:46:35.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362552; Issue ID: MSV-5760."
      }, {
        "lang" : "es",
        "value" : "En imgsys, hay una posible escritura fuera de límites debido a una verificación de límites faltante. Esto podría llevar a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10362552; ID del problema: MSV-5760."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2B6BB9-7544-41A7-BF3A-344AA4CC4B31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774B7D7-B7DD-43A0-833F-7E39DF82CA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20411",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.040",
      "lastModified" : "2026-02-04T13:45:57.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5737."
      }, {
        "lang" : "es",
        "value" : "En cameraisp, existe una posible escalada de privilegios debido a un uso después de liberación. Esto podría conducir a una denegación de servicio local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10351676; ID del problema: MSV-5737."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6881:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C1B31-4E33-4939-A926-79FE401368CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2B6BB9-7544-41A7-BF3A-344AA4CC4B31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774B7D7-B7DD-43A0-833F-7E39DF82CA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20412",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.187",
      "lastModified" : "2026-02-04T13:44:58.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5733."
      }, {
        "lang" : "es",
        "value" : "En cameraisp, hay una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría llevar a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID de parche: ALPS10351676; ID de problema: MSV-5733."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6881:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C1B31-4E33-4939-A926-79FE401368CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774B7D7-B7DD-43A0-833F-7E39DF82CA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20413",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.317",
      "lastModified" : "2026-02-03T21:55:23.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694."
      }, {
        "lang" : "es",
        "value" : "En imgsys, existe una posible escritura fuera de límites debido a una falta de verificación de límites. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10362725; ID del problema: MSV-5694."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20414",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.457",
      "lastModified" : "2026-02-03T21:54:32.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362999; Issue ID: MSV-5625."
      }, {
        "lang" : "es",
        "value" : "En imgsys, existe una posible escalada de privilegios debido a un uso después de la liberación. Esto podría conducir a una escalada de privilegios local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10362999; ID del problema: MSV-5625."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20415",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.590",
      "lastModified" : "2026-02-03T21:53:59.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617."
      }, {
        "lang" : "es",
        "value" : "En imgsys, existe una posible corrupción de memoria debido a un bloqueo inadecuado. Esto podría llevar a una denegación de servicio local si un actor malintencionado ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10363254; ID del problema: MSV-5617."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20417",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.723",
      "lastModified" : "2026-02-03T21:52:14.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10314946 / ALPS10340155; Issue ID: MSV-5154."
      }, {
        "lang" : "es",
        "value" : "En PCIe, existe una posible escritura fuera de límites debido a una falta de verificación de límites. Esto podría llevar a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se requiere interacción del usuario para la explotación. ID de parche: ALPS10314946 / ALPS10340155; ID de problema: MSV-5154."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20418",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.853",
      "lastModified" : "2026-02-03T21:51:35.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465153; Issue ID: MSV-4927."
      }, {
        "lang" : "es",
        "value" : "En Thread, hay una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría llevar a una escalada remota de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID del parche: WCNCR00465153; ID del problema: MSV-4927."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:matter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "0F9A93E8-E013-4822-A6FC-A116C1DD8161"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDCA338-7A89-49FA-9F78-5FA6D69D1FC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727F29FD-E8DA-46F1-9C98-9D194E981E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20419",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:56.990",
      "lastModified" : "2026-02-05T17:16:13.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 /  WCNCR00463309; Issue ID: MSV-4852."
      }, {
        "lang" : "es",
        "value" : "En el firmware de AP/STA de WLAN, existe una posible falta de respuesta del sistema debido a una excepción no capturada. Esto podría llevar a una denegación de servicio remota (proximal/adyacente) sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID de parche: WCNCR00461663 / WCNCR00463309; ID de problema: MSV-4852."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6",
            "matchCriteriaId" : "4926CFD0-C88C-4A5A-8396-A719C52818B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.7.2",
            "matchCriteriaId" : "0DD86CC1-BD46-42D2-9112-190CCAC96B30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989tb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8824BD65-5AB4-4D5F-94C3-3CEA09D0A497"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB22996-9C22-4B6C-9E94-E4C055D16335"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5AA441-5381-4179-89EB-1642120F72B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140DAC08-96E9-47D3-BC2E-65E999DCFD50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2A6813-7138-441E-A9E4-FF62FCBD797A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CFC9DF-2F4C-469A-8A19-A260B1134CFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05525018-AFE0-415C-A71C-A77922C7D637"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490CD97B-021F-4350-AEE7-A2FA866D5889"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9E917-4B34-403F-B512-09EEBEA46811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5FB550-7264-4879-BAF9-6798949113AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C81BC81-1358-4005-8D35-92428D052A65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA469E2-9E63-4C9A-8EBA-10C8C870063A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F0133207-2EED-4625-854F-8DB7770D5BF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20420",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:57.123",
      "lastModified" : "2026-02-17T15:16:21.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738313; Issue ID: MSV-5935."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a un manejo de errores incorrecto. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para la explotación. ID del parche: MOLY01738313; ID del problema: MSV-5935."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61AD730-66FE-4605-A89B-3B8D6526D612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20421",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:57.257",
      "lastModified" : "2026-02-17T15:16:21.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738293; Issue ID: MSV-5922."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una validación de entrada incorrecta. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY01738293; ID del problema: MSV-5922."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20422",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-02-02T09:15:57.387",
      "lastModified" : "2026-02-17T15:16:22.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible caída del sistema debido a una validación de entrada incorrecta. Esto podría llevar a una denegación de servicio remota, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: MOLY00827332; ID del problema: MSV-5919."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61AD730-66FE-4605-A89B-3B8D6526D612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF88096-5CBD-4A4B-8F47-33D38985956F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5FB550-7264-4879-BAF9-6798949113AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0D738-F0B9-468F-8A10-204F498320BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1117",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2026-02-02T10:16:06.500",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the `lollms_generation_events.py` component of parisneo/lollms version 5.9.0 allows unauthenticated access to sensitive Socket.IO events. The `add_events` function registers event handlers such as `generate_text`, `cancel_generation`, `generate_msg`, and `generate_msg_from` without implementing authentication or authorization checks. This allows unauthenticated clients to execute resource-intensive or state-altering operations, leading to potential denial of service, state corruption, and race conditions. Additionally, the use of global flags (`lollmsElfServer.busy`, `lollmsElfServer.cancel_gen`) for state management in a multi-client environment introduces further vulnerabilities, enabling one client's actions to affect the server's state and other clients' operations. The lack of proper access control and reliance on insecure global state management significantly impacts the availability and integrity of the service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente 'lollms_generation_events.py' de parisneo/lollms versión 5.9.0 permite acceso no autenticado a eventos sensibles de Socket.IO. La función 'add_events' registra manejadores de eventos como 'generate_text', 'cancel_generation', 'generate_msg' y 'generate_msg_from' sin implementar comprobaciones de autenticación o autorización. Esto permite a clientes no autenticados ejecutar operaciones que consumen muchos recursos o que alteran el estado, lo que lleva a una potencial denegación de servicio, corrupción de estado y condiciones de carrera. Además, el uso de indicadores globales ('lollmsElfServer.busy', 'lollmsElfServer.cancel_gen') para la gestión de estado en un entorno multi-cliente introduce vulnerabilidades adicionales, permitiendo que las acciones de un cliente afecten el estado del servidor y las operaciones de otros clientes. La falta de un control de acceso adecuado y la dependencia de una gestión de estado global insegura impacta significativamente la disponibilidad y la integridad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parisneo/lollms/commit/36a5b513dfefe9c2913bf9b618457b4fea603e3b",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://huntr.com/bounties/d2846a7f-0140-4105-b1bb-5ef64ec8b829",
        "source" : "security@huntr.dev"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1751",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-02T10:16:06.693",
      "lastModified" : "2026-02-04T14:34:06.983",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en GitLab CE/EE que afecta a todas las versiones a partir de la 16.8 y anteriores a la 18.5.0 que podría haber permitido ediciones no autorizadas en las reglas de aprobación de solicitudes de fusión bajo ciertas condiciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "16.8.0",
            "versionEndExcluding" : "18.5.0",
            "matchCriteriaId" : "B89CF163-DA6E-40E4-9D46-FE5B05B208A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "16.8.0",
            "versionEndExcluding" : "18.5.0",
            "matchCriteriaId" : "1BF55EB1-AFA1-45BD-B17B-127F49377C54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/519340",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/2980839",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0599",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2026-02-02T11:16:17.773",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation in VLM mode. The issue arises when the router scans inputs for Markdown image links and performs a blocking HTTP GET request, reading the entire response body into memory and cloning it before decoding. This behavior can lead to resource exhaustion, including network bandwidth saturation, memory inflation, and CPU overutilization. The vulnerability is triggered even if the request is later rejected for exceeding token limits. The default deployment configuration, which lacks memory usage limits and authentication, exacerbates the impact, potentially crashing the host machine. The issue is resolved in version 3.3.7."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en huggingface/text-generation-inference versión 3.3.6 permite a atacantes remotos no autenticados explotar la obtención ilimitada de imágenes externas durante la validación de entrada en modo VLM. El problema surge cuando el router escanea las entradas en busca de enlaces de imagen Markdown y realiza una solicitud HTTP GET bloqueante, leyendo todo el cuerpo de la respuesta en la memoria y clonándolo antes de decodificar. Este comportamiento puede llevar al agotamiento de recursos, incluyendo la saturación del ancho de banda de la red, la inflación de memoria y la sobreutilización de la CPU. La vulnerabilidad se activa incluso si la solicitud es posteriormente rechazada por exceder los límites de tokens. La configuración de despliegue predeterminada, que carece de límites de uso de memoria y autenticación, exacerba el impacto, pudiendo provocar el bloqueo de la máquina anfitriona. El problema está resuelto en la versión 3.3.7."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/huggingface/text-generation-inference/commit/24ee40d143d8d046039f12f76940a85886cbe152",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://huntr.com/bounties/1d3f2085-666c-4441-b265-22f6f7d8d9cd",
        "source" : "security@huntr.dev"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1757",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-02T13:15:58.580",
      "lastModified" : "2026-04-22T10:16:50.683",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system."
      }, {
        "lang" : "es",
        "value" : "Se identificó una falla en la shell interactiva de la utilidad xmllint, parte del proyecto libxml2, donde la memoria asignada para la entrada del usuario no se libera correctamente bajo ciertas condiciones. Cuando un usuario envía una entrada que consiste únicamente en espacios en blanco, el programa omite la ejecución del comando pero no libera el búfer asignado. Repetir esta acción provoca que la memoria se acumule continuamente. Con el tiempo, esto puede agotar la memoria del sistema y terminar el proceso xmllint, creando una condición de denegación de servicio en el sistema local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:7519",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1757",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2435940",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1009",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1186",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-02T14:16:34.210",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EAP Legislator is vulnerable to Path Traversal in file extraction functionality. Attacker can prepare zipx archive (default file type used by the Legislator application) and choose arbitrary path outside the intended directory (e.x. system startup) where files will be extracted by the victim upon opening the file.\nThis issue was fixed in version 2.25a."
      }, {
        "lang" : "es",
        "value" : "EAP Legislator es vulnerable a salto de ruta en la funcionalidad de extracción de archivos. El atacante puede preparar un archivo zipx (tipo de archivo predeterminado utilizado por la aplicación Legislator) y elegir una ruta arbitraria fuera del directorio previsto (p. ej., inicio del sistema) donde los archivos serán extraídos por la víctima al abrir el archivo.\nEste problema fue solucionado en la versión 2.25a."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://abcpro.pl/eap-legislator",
        "source" : "cvd@cert.pl"
      }, {
        "url" : "https://cert.pl/posts/2026/02/CVE-2026-1186",
        "source" : "cvd@cert.pl"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1760",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-02T14:16:34.483",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests, causing SoupServer to fail to close the connection as required by RFC 9112. This allows the attacker to smuggle additional requests over the persistent connection, leading to unintended request processing and potential denial-of-service (DoS) conditions."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en SoupServer. Esta vulnerabilidad de contrabando de solicitudes HTTP ocurre porque SoupServer maneja incorrectamente las solicitudes que combinan los encabezados Transfer-Encoding: chunked y Connection: keep-alive. Un cliente remoto no autenticado puede explotar esto enviando solicitudes especialmente diseñadas, lo que provoca que SoupServer no cierre la conexión según lo requerido por RFC 9112. Esto permite al atacante contrabandear solicitudes adicionales a través de la conexión persistente, lo que lleva a un procesamiento de solicitudes no intencionado y a posibles condiciones de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1760",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2435951",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/475",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1761",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-02T14:16:34.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may result in application crashes or arbitrary code execution in applications that process untrusted server responses, and it does not require authentication or user interaction."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en libsoup. Esta vulnerabilidad de desbordamiento de búfer basado en pila ocurre durante el análisis de respuestas HTTP multipart debido a un cálculo de longitud incorrecto. Un atacante remoto puede explotar esto enviando una respuesta HTTP multipart especialmente diseñada, lo que puede llevar a corrupción de memoria. Este problema puede resultar en fallos de aplicación o ejecución de código arbitrario en aplicaciones que procesan respuestas de servidor no confiables, y no requiere autenticación ni interacción del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:1948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2005",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2006",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2007",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2008",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2049",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2182",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2214",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2215",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2216",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2396",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2402",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2410",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2512",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2513",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2514",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2528",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2628",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1761",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2435961",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/493",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24070",
      "sourceIdentifier" : "551230f0-3615-47bd-b7cc-93e92e730bbf",
      "published" : "2026-02-02T14:16:35.613",
      "lastModified" : "2026-04-29T09:16:23.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC service of the privileged helper is only allowed if the client process is signed with the corresponding certificate and fulfills the following code signing requirement:\n\"anchor trusted and certificate leaf[subject.CN] = \\\"Developer ID Application: Native Instruments GmbH (83K5EG6Z9V)\\\"\"\n\nThe Native Access application was found to be signed with the `com.apple.security.cs.allow-dyld-environment-variables` and `com.apple.security.cs.disable-library-validation` entitlements leading to DYLIB injection and therefore command execution in the context of this application. A low privileged user can exploit the DYLIB injection to trigger functions of the privileged helper XPC service resulting in privilege escalation by first deleting the /etc/sudoers file and then copying a malicious version of that file to /etc/sudoers."
      }, {
        "lang" : "es",
        "value" : "Durante la instalación de la aplicación Native Access, también se despliega un ayudante privilegiado 'com.native-instruments.NativeAccess.Helper2', que es utilizado por Native Access para activar funciones a través de comunicación XPC como copiar-archivo, eliminar o establecer-permisos. La comunicación con el servicio XPC del ayudante privilegiado solo está permitida si el proceso cliente está firmado con el certificado correspondiente y cumple con el siguiente requisito de firma de código:\n'anchor trusted and certificate leaf[subject.CN] = 'Developer ID Application: Native Instruments GmbH (83K5EG6Z9V)''\n\nSe descubrió que la aplicación Native Access estaba firmada con los derechos 'com.apple.security.cs.allow-dyld-environment-variables' y 'com.apple.security.cs.disable-library-validation', lo que lleva a la inyección de DYLIB y, por lo tanto, a la ejecución de comandos en el contexto de esta aplicación. Un usuario con bajos privilegios puede explotar la inyección de DYLIB para activar funciones del servicio XPC del ayudante privilegiado, lo que resulta en escalada de privilegios al primero eliminar el archivo /etc/sudoers y luego copiar una versión maliciosa de ese archivo a /etc/sudoers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "551230f0-3615-47bd-b7cc-93e92e730bbf",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:native-instruments:native_access:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.22.0",
            "matchCriteriaId" : "2D0299D5-FF09-4EE2-8F1D-E2FC624D27DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-native-instruments-native-access-macos/",
        "source" : "551230f0-3615-47bd-b7cc-93e92e730bbf",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.native-instruments.com/en/specials/native-access/",
        "source" : "551230f0-3615-47bd-b7cc-93e92e730bbf"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24071",
      "sourceIdentifier" : "551230f0-3615-47bd-b7cc-93e92e730bbf",
      "published" : "2026-02-02T14:16:35.753",
      "lastModified" : "2026-02-11T20:39:27.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found that the XPC service offered by the privileged helper of Native Access  uses the PID of the connecting client to verify its code signature. This is considered insecure and can be exploited by PID reuse attacks. The connection handler function uses _xpc_connection_get_pid(arg2) as argument for the hasValidSignature function. This value can not be trusted since it is vulnerable to PID reuse attacks."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que el servicio XPC ofrecido por el asistente privilegiado de Native Access utiliza el PID del cliente que se conecta para verificar su firma de código. Esto se considera inseguro y puede ser explotado por ataques de reutilización de PID. La función manejadora de conexión utiliza _xpc_connection_get_pid(arg2) como argumento para la función hasValidSignature. Este valor no es de confianza ya que es vulnerable a ataques de reutilización de PID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "551230f0-3615-47bd-b7cc-93e92e730bbf",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:native-instruments:native_access:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.22.0",
            "matchCriteriaId" : "2D0299D5-FF09-4EE2-8F1D-E2FC624D27DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-native-instruments-native-access-macos/",
        "source" : "551230f0-3615-47bd-b7cc-93e92e730bbf",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1703",
      "sourceIdentifier" : "cna@python.org",
      "published" : "2026-02-02T15:16:30.510",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations."
      }, {
        "lang" : "es",
        "value" : "Cuando pip está instalando y extrayendo un archivo wheel creado maliciosamente, los archivos pueden ser extraídos fuera del directorio de instalación. El salto de ruta está limitado a prefijos del directorio de instalación, por lo tanto, no es capaz de inyectar o sobrescribir archivos ejecutables en situaciones típicas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@python.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@python.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/pypa/pip/pull/13777",
        "source" : "cna@python.org"
      }, {
        "url" : "https://mail.python.org/archives/list/security-announce@python.org/thread/WIEA34D4TABF2UNQJAOMXKCICSPBE2DJ/",
        "source" : "cna@python.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0921",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-02T17:16:16.583",
      "lastModified" : "2026-02-02T17:16:16.583",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1232",
      "sourceIdentifier" : "13061848-ea10-403d-bd75-c83a022c2891",
      "published" : "2026-02-02T17:16:16.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, which could allow access to protected application components and the ability to modify product configuration."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de gravedad media ha sido identificada en BeyondTrust Privilege Management para Windows versiones &lt;=25.7. Bajo ciertas condiciones, un usuario local autenticado con privilegios elevados podría eludir las protecciones antimanipulación del producto, lo que podría permitir el acceso a componentes de aplicación protegidos y la capacidad de modificar la configuración del producto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "13061848-ea10-403d-bd75-c83a022c2891",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "13061848-ea10-403d-bd75-c83a022c2891",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "references" : [ {
        "url" : "https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0023100",
        "source" : "13061848-ea10-403d-bd75-c83a022c2891"
      }, {
        "url" : "https://www.beyondtrust.com/trust-center/security-advisories/bt26-01",
        "source" : "13061848-ea10-403d-bd75-c83a022c2891"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1770",
      "sourceIdentifier" : "security@craftersoftware.com",
      "published" : "2026-02-02T17:16:17.643",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE (Remote Code Execution)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control Inadecuado de Recursos de Código Gestionados Dinámicamente en Crafter Studio de Crafter CMS permite a desarrolladores autenticados ejecutar comandos del sistema operativo a través de una Omisión de Sandbox de Groovy. Al insertar elementos Groovy maliciosos, un atacante puede omitir las restricciones de la sandbox y obtener RCE (Ejecución Remota de Código)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@craftersoftware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@craftersoftware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.craftercms.org/current/security/advisory.html#cv-2026020201",
        "source" : "security@craftersoftware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0630",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:13.403",
      "lastModified" : "2026-03-19T23:16:40.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent \n\nauthenticated \n\nattacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AXE v1.0 <\n1.5.3 Build 20260209 rel. 71108."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo en TP-Link Archer BE230 v1.2 (módulos web) permite a un atacante autenticado adyacente ejecutar código arbitrario. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resulta en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de múltiples problemas distintos de inyección de comandos del sistema operativo identificados a través de rutas de código separadas. Aunque de naturaleza similar, cada instancia es seguida bajo una ID de CVE única. Este problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-axe75/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-axe75/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0631",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:13.620",
      "lastModified" : "2026-02-06T18:36:44.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows an adjacent \n\nauthenticated \n\nattacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo (OS) en TP-Link Archer BE230 v1.2 (módulos vpn) permite a un atacante autenticado adyacente ejecutar código arbitrario. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resultaría en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de múltiples problemas distintos de inyección de comandos del sistema operativo (OS) identificados en rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo una ID de CVE única. Este problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22221",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:14.740",
      "lastModified" : "2026-02-06T18:36:03.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows adjacent \n\nauthenticated \n\nattacker \n\nexecute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo en TP-Link Archer BE230 v1.2 (módulos vpn) permite a un atacante autenticado adyacente ejecutar código arbitrario. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resulta en un compromiso severo de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de múltiples problemas distintos de inyección de comandos del sistema operativo identificados a través de rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único. Este problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22222",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:14.870",
      "lastModified" : "2026-02-06T18:35:31.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) allows adjacent \n\nauthenticated \n\nattacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo en TP-Link Archer BE230 v1.2 (módulos web) permite a un atacante autenticado adyacente ejecutar código arbitrario. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resultaría en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de varios problemas distintos de inyección de comandos del sistema operativo identificados en rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único. Este problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22223",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:15.007",
      "lastModified" : "2026-02-06T18:34:34.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows adjacent \n\nauthenticated \n\nattacker \n\nexecute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo en TP-Link Archer BE230 v1.2 (módulos vpn) permite a un atacante autenticado adyacente ejecutar código arbitrario. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, resultando en un compromiso severo de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de múltiples problemas distintos de inyección de comandos del sistema operativo identificados a través de rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único. Este problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22224",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:15.137",
      "lastModified" : "2026-02-06T18:31:56.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability may be exploited after the admin's authentication in the cloud communication interface on the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos puede ser explotada después de la autenticación del administrador en la interfaz de comunicación en la nube en el TP-Link Archer BE230 v1.2. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resultaría en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de varios problemas distintos de inyección de comandos del sistema operativo identificados en rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único.\n\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22225",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:15.273",
      "lastModified" : "2026-03-19T23:16:40.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 \nand Archer AXE75 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\n\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AXE v1.0 < 1.5.3 Build 20260209 rel. 71108."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos puede ser explotada después de la autenticación del administrador en el Servicio de Conexión VPN en el Archer BE230 v1.2. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resultaría en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de varios problemas distintos de inyección de comandos del sistema operativo identificados en rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único.\n\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-axe75/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-axe75/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22226",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:15.407",
      "lastModified" : "2026-02-06T18:27:15.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos puede ser explotada después de la autenticación del administrador en el módulo de configuración del servidor VPN en el TP-Link Archer BE230 v1.2. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, resultando en un compromiso severo de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de múltiples problemas distintos de inyección de comandos del sistema operativo identificados a través de rutas de código separadas. Aunque de naturaleza similar, cada instancia es rastreada bajo una ID de CVE única.\n\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22227",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:15.540",
      "lastModified" : "2026-02-06T18:30:59.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos puede ser explotada después de la autenticación del administrador a través de la función de restauración de copia de seguridad de la configuración del TP-Link Archer BE230 v1.2. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resultaría en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\n\nEste CVE cubre uno de varios problemas distintos de inyección de comandos del sistema operativo identificados en rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único.\n\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22229",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-02T18:16:15.673",
      "lastModified" : "2026-03-02T18:16:26.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID. \nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Deco BE25 v1.0: through 1.1.1 Build 20250822."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos puede ser explotada después de la autenticación del administrador mediante la importación de un archivo de configuración de cliente VPN manipulado en el TP-Link Archer BE230 v1.2. La explotación exitosa podría permitir a un atacante obtener control administrativo total del dispositivo, lo que resultaría en un compromiso grave de la integridad de la configuración, la seguridad de la red y la disponibilidad del servicio.\nEste CVE cubre uno de varios problemas distintos de inyección de comandos del sistema operativo identificados en rutas de código separadas. Aunque de naturaleza similar, cada instancia se rastrea bajo un ID de CVE único.\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/deco-be25/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/deco-be25/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/deco-be25/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4935/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0924",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2026-02-02T23:16:03.683",
      "lastModified" : "2026-04-20T16:16:40.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2."
      }, {
        "lang" : "es",
        "value" : "BuhoCleaner contiene un servicio XPC inseguro que permite a usuarios locales y sin privilegios escalar sus privilegios a root a través de funciones inseguras. Este problema afecta a BuhoCleaner: 1.15.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "help@fluidattacks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drbuho:buhocleaner:1.15.2:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "9A2DE65B-B60F-406D-B50E-0B4F4BC91F5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/solstafir",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.drbuho.com/buhocleaner",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.drbuho.com/buhocleaner/download",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1777",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-02-02T23:16:04.097",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output location may have the ability to upload arbitrary artifacts which are executed the next time the Training Job is invoked."
      }, {
        "lang" : "es",
        "value" : "El SDK de Python de Amazon SageMaker anterior a las versiones v3.2.0 y v2.256.0 incluye la clave de firma HMAC de ModelBuilder en los elementos de respuesta en texto claro de la función DescribeTrainingJob. Un tercero con permisos tanto para llamar a esta API como para modificar objetos en la ubicación de salida S3 de los trabajos de entrenamiento podría tener la capacidad de cargar artefactos arbitrarios que se ejecutan la próxima vez que se invoca el trabajo de entrenamiento."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-004-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.256.0",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.2.0",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-rjrp-m2jw-pv9c",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1778",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-02-02T23:16:04.283",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed."
      }, {
        "lang" : "es",
        "value" : "El SDK de Python de Amazon SageMaker anterior a la v3.1.1 o v2.256.0 deshabilita la verificación de certificados TLS para las conexiones HTTPS realizadas por el servicio cuando se importa un modelo de Python de Triton, permitiendo incorrectamente que las solicitudes con certificados no válidos y autofirmados tengan éxito."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-004-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/sagemaker-python-sdk/releases/tag/v2.256.0",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/sagemaker-python-sdk/releases/tag/v3.1.1",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-62rc-f4v9-h543",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22778",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:06.700",
      "lastModified" : "2026-02-23T18:19:12.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this leak, we reduce ASLR from 4 billion guesses to ~8 guesses. This vulnerability can be chained a heap overflow with JPEG2000 decoder in OpenCV/FFmpeg to achieve remote code execution. This vulnerability is fixed in 0.14.1."
      }, {
        "lang" : "es",
        "value" : "vLLM es un motor de inferencia y servicio para modelos de lenguaje grandes (LLM). Desde la versión 0.8.3 hasta antes de la 0.14.1, cuando se envía una imagen inválida al endpoint multimodal de vLLM, PIL lanza un error. vLLM devuelve este error al cliente, filtrando una dirección de montículo. Con esta fuga, reducimos ASLR de 4 mil millones de intentos a ~8 intentos. Esta vulnerabilidad puede encadenarse a un desbordamiento de montículo con el decodificador JPEG2000 en OpenCV/FFmpeg para lograr ejecución remota de código. Esta vulnerabilidad está corregida en la versión 0.14.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.8.3",
            "versionEndExcluding" : "0.14.1",
            "matchCriteriaId" : "6EBA2094-B756-41D7-A899-8C028DF95FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vllm-project/vllm/pull/31987",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/pull/32319",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/releases/tag/v0.14.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22780",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:06.870",
      "lastModified" : "2026-02-20T21:12:28.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2."
      }, {
        "lang" : "es",
        "value" : "Rizin es un framework de ingeniería inversa y conjunto de herramientas de línea de comandos similar a UNIX. Antes de la 0.8.2, se puede explotar un desbordamiento de montículo cuando un archivo mach0 malicioso, que contiene entradas falsas para los segmentos encadenados de dyld, es analizado por rizin. Esta vulnerabilidad está corregida en la 0.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rizin:rizin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.2",
            "matchCriteriaId" : "E00A5664-A784-4C49-9A16-7DC39DE648E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rizinorg/rizin/blob/6dd0dba9ff4dc706f549d0cdcd93856b49e59aa0/librz/bin/format/mach0/mach0_chained_fixups.c#L200",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/commit/41ea75d5b07d9b41b27ae80675cdda65f1b1c989",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/issues/5768",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/pull/5770",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/releases/tag/v0.8.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/security/advisories/GHSA-f3v7-xhmj-9cjj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.030",
      "lastModified" : "2026-02-23T15:32:54.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected XSS bug in FacturaScripts. The problem is in how error messages get displayed. Twig's | raw filter is used, which skips HTML escaping. When triggering a database error (like passing a string where an integer is expected), the error message includes the input and gets rendered without sanitization. This vulnerability is fixed in 2025.8."
      }, {
        "lang" : "es",
        "value" : "FacturaScripts es un software de planificación de recursos empresariales y contabilidad de código abierto. Antes de la versión 2025.8, existía un fallo de XSS reflejado en FacturaScripts. El problema radica en cómo se muestran los mensajes de error. Se utiliza el filtro |raw de Twig, lo que omite el escape de HTML. Al activar un error de base de datos (como pasar una cadena donde se espera un número entero), el mensaje de error incluye la entrada y se renderiza sin sanitización. Esta vulnerabilidad se ha corregido en la versión 2025.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facturascripts:facturascripts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.8",
            "matchCriteriaId" : "258F0619-F363-4A25-9BA2-18D2FA4C8576"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NeoRazorX/facturascripts/commit/2afd98cecd26c5f8357e0e321d86063ad1012fc3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NeoRazorX/facturascripts/releases/tag/v2025.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-g6w2-q45f-xrp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23515",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.190",
      "lastModified" : "2026-02-27T13:46:54.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated users can also exploit this vulnerability if security is disabled on the Signal K server. This occurs due to unsafe construction of shell commands when processing navigation.datetime values received via WebSocket delta messages. This vulnerability is fixed in 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Signal K Server es una aplicación de servidor que se ejecuta en un concentrador central en una embarcación. Previo a 1.5.0, una vulnerabilidad de inyección de comandos permite a usuarios autenticados con permisos de escritura ejecutar comandos de shell arbitrarios en el servidor Signal K cuando el plugin set-system-time está habilitado. Usuarios no autenticados también pueden explotar esta vulnerabilidad si la seguridad está deshabilitada en el servidor Signal K. Esto ocurre debido a una construcción insegura de comandos de shell al procesar valores de navigation.datetime recibidos a través de mensajes delta de WebSocket. Esta vulnerabilidad está corregida en 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:signalk:signal_k_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "DDF10E0C-7592-4369-B442-85E6DE5945C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SignalK/set-system-time/commit/75b11eae2de528bf89ede3fb1f7ed057ddbb4d24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/SignalK/signalk-server/security/advisories/GHSA-p8gp-2w28-mhwg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23997",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.347",
      "lastModified" : "2026-02-23T15:07:15.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Observations field. The flaw occurs in the History view, where historical data is rendered without proper HTML entity encoding. This allows an attacker to execute arbitrary JavaScript in the browser of viewing the history by administrators."
      }, {
        "lang" : "es",
        "value" : "FacturaScripts es un software de planificación de recursos empresariales y contabilidad de código abierto. En la versión 2025.71 y anteriores, se descubrió una vulnerabilidad de cross-site scripting (XSS) almacenado en el campo Observaciones. La falla ocurre en la vista Historial, donde los datos históricos se renderizan sin la codificación adecuada de entidades HTML. Esto permite a un atacante ejecutar JavaScript arbitrario en el navegador de los administradores que visualizan el historial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facturascripts:facturascripts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.71",
            "matchCriteriaId" : "B4341C53-B996-439F-AE9E-42249F2A0D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-4v7v-7v7r-3r5h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24007",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.500",
      "lastModified" : "2026-02-23T20:29:40.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims into repairing inconsistent items (creating artifact links from the release). This vulnerability is fixed in Tuleap Community Edition 17.0.99.1768924735 and Tuleap Enterprise Edition 17.2-5, 17.1-6, and 17.0-9."
      }, {
        "lang" : "es",
        "value" : "Tuleap es una suite de código abierto para la gestión de desarrollo de software y colaboración. Tuleap carece de protección CSRF en los elementos inconsistentes de la Vista general. Un atacante podría usar esta vulnerabilidad para engañar a las víctimas para que reparen elementos inconsistentes (creando enlaces de artefactos desde la versión). Esta vulnerabilidad está corregida en Tuleap Community Edition 17.0.99.1768924735 y Tuleap Enterprise Edition 17.2-5, 17.1-6 y 17.0-9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "17.0-9",
            "matchCriteriaId" : "72563F4A-1F81-4973-A289-F0F6E8E7CBF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "17.0.99.1768924735",
            "matchCriteriaId" : "7ABF04A7-567F-45EB-BBC6-6A8AAB31DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.1-6",
            "matchCriteriaId" : "F6DEB940-5662-4074-AC3E-237C357E0418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2-5",
            "matchCriteriaId" : "C108E674-7031-46E8-A3E0-9378CEE62A17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Enalean/tuleap/commit/5ec5e81e409892fe0e41f11d5d36ee6c85a6fbb5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Enalean/tuleap/security/advisories/GHSA-7g48-rwqj-ffxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=5ec5e81e409892fe0e41f11d5d36ee6c85a6fbb5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=46389",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24040",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.660",
      "lastModified" : "2026-02-18T14:42:05.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, the addJS method in the jspdf Node.js build utilizes a shared module-scoped variable (text) to store JavaScript content. When used in a concurrent environment (e.g., a Node.js web server), this variable is shared across all requests. If multiple requests generate PDFs simultaneously, the JavaScript content intended for one user may be overwritten by a subsequent request before the document is generated. This results in Cross-User Data Leakage, where the PDF generated for User A contains the JavaScript payload (and any embedded sensitive data) intended for User B. Typically, this only affects server-side environments, although the same race conditions might occur if jsPDF runs client-side. The vulnerability has been fixed in jsPDF@4.1.0."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una biblioteca para generar PDFs en JavaScript. Antes de la versión 4.1.0, el método addJS en la compilación de Node.js de jspdf utiliza una variable compartida con ámbito de módulo (text) para almacenar contenido JavaScript. Cuando se utiliza en un entorno concurrente (por ejemplo, un servidor web Node.js), esta variable se comparte entre todas las solicitudes. Si múltiples solicitudes generan PDFs simultáneamente, el contenido JavaScript destinado a un usuario puede ser sobrescrito por una solicitud subsiguiente antes de que se genere el documento. Esto resulta en una Fuga de Datos entre Usuarios (Cross-User Data Leakage), donde el PDF generado para el Usuario A contiene la carga útil de JavaScript (y cualquier dato sensible incrustado) destinada al Usuario B. Típicamente, esto solo afecta a entornos del lado del servidor, aunque las mismas condiciones de carrera podrían ocurrir si jsPDF se ejecuta del lado del cliente. La vulnerabilidad ha sido corregida en jsPDF@4.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "46B1DFBD-B23A-484B-B9EC-39B983D89431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parallax/jsPDF/commit/2863e5c26afef211a545e8c174ab4d5fce3b8c0e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-cjw8-79x6-5cj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24043",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.813",
      "lastModified" : "2026-02-18T14:43:08.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inject arbitrary XML. If given the possibility to pass unsanitized input to the addMetadata method, a user can inject arbitrary XMP metadata into the generated PDF. If the generated PDF is signed, stored or otherwise processed after, the integrity of the PDF can no longer be guaranteed. The vulnerability has been fixed in jsPDF@4.1.0."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una biblioteca para generar PDFs en JavaScript. Anteriormente a la versión 4.1.0, el control del usuario sobre el primer argumento de la función addMetadata permite a los usuarios inyectar XML arbitrario. Si se le ofrece la posibilidad de pasar entrada no saneada al método addMetadata, un usuario puede inyectar metadatos XMP arbitrarios en el PDF generado. Si el PDF generado es firmado, almacenado o procesado de alguna otra manera posteriormente, la integridad del PDF ya no puede garantizarse. La vulnerabilidad ha sido corregida en jsPDF@4.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "46B1DFBD-B23A-484B-B9EC-39B983D89431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parallax/jsPDF/commit/efe54bf50f3f5e5416b2495e3c24624fc80b6cff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-vm32-vv63-w422",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24051",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:07.963",
      "lastModified" : "2026-02-27T20:32:10.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems. The resource detection code in sdk/resource/host_id.go executes the ioreg system command using a search path. An attacker with the ability to locally modify the PATH environment variable can achieve Arbitrary Code Execution (ACE) within the context of the application. A fix was released with v1.40.0."
      }, {
        "lang" : "es",
        "value" : "OpenTelemetry-Go es la implementación de Go de OpenTelemetry. El SDK de Go de OpenTelemetry en la versión v1.20.0-1.39.0 es vulnerable a Secuestro de Ruta (Rutas de Búsqueda No Confiables) en sistemas macOS/Darwin. El código de detección de recursos en sdk/resource/host_id.go ejecuta el comando de sistema ioreg utilizando una ruta de búsqueda. Un atacante con la capacidad de modificar localmente la variable de entorno PATH puede lograr Ejecución de Código Arbitrario (ACE) dentro del contexto de la aplicación. Una corrección fue lanzada con la v1.40.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:opentelemetry-go:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "1.21.0",
            "versionEndExcluding" : "1.40.0",
            "matchCriteriaId" : "D2F3A3DE-73A9-48D9-B3CB-4DE1FB82314B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-telemetry/opentelemetry-go/commit/d45961bcda453fcbdb6469c22d6e88a1f9970a53",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-9h8m-3fm2-qjrq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24133",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:08.123",
      "lastModified" : "2026-02-18T14:41:29.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addImage method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful BMP file that results in out of memory errors and denial of service. Harmful BMP files have large width and/or height entries in their headers, which lead to excessive memory allocation. The html method is also affected. The vulnerability has been fixed in jsPDF@4.1.0."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una biblioteca para generar PDFs en JavaScript. Anterior a la 4.1.0, el control del usuario sobre el primer argumento del método addImage resulta en denegación de servicio. Si se le da la posibilidad de pasar datos de imagen o URLs no saneados al método addImage, un usuario puede proporcionar un archivo BMP malicioso que resulta en errores de falta de memoria y denegación de servicio. Los archivos BMP maliciosos tienen entradas grandes de ancho y/o alto en sus cabeceras, lo que lleva a una asignación de memoria excesiva. El método html también se ve afectado. La vulnerabilidad ha sido corregida en jsPDF@4.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "46B1DFBD-B23A-484B-B9EC-39B983D89431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parallax/jsPDF/commit/ae4b93f76d8fc1baa5614bd5fdb5d174c3b85f0d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-95fx-jjr5-f39c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24471",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:08.270",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room (rejecting an invite), joining a room or knocking on a room, the victim server may ask a remote server for assistance. If the victim asks the attacker server for assistance the attacker is able to provide an arbitrary event, which the victim will sign and return to the attacker. For the /leave endpoint, this works for any event with a supported room version, where the origin and origin_server_ts is set by the victim. For the /join endpoint, an additionally victim-set content field in the format of a join membership is needed. For the /knock endpoint, an additional victim-set content field in the format of a knock membership and a room version not between 1 and 6 is needed. This was exploited as a part of a larger chain against the continuwuity.org homeserver. This vulnerability affects all Conduit-derived servers. This vulnerability is fixed in Continuwuity 0.5.1, Conduit 0.10.11, Grapevine 0aae932b, and Tuwunel 1.4.9."
      }, {
        "lang" : "es",
        "value" : "continuwuity es un homeserver de Matrix escrito en Rust. Esta vulnerabilidad permite a un atacante con un servidor remoto malicioso hacer que el servidor local firme un evento arbitrario tras la interacción del usuario. Cuando una cuenta de usuario abandona una sala (rechazando una invitación), se une a una sala o llama a la puerta de una sala, el servidor víctima puede pedir asistencia a un servidor remoto. Si la víctima pide asistencia al servidor atacante, el atacante puede proporcionar un evento arbitrario, que la víctima firmará y devolverá al atacante. Para el endpoint /leave, esto funciona para cualquier evento con una versión de sala compatible, donde el origen y origin_server_ts son establecidos por la víctima. Para el endpoint /join, se necesita un campo de contenido adicionalmente establecido por la víctima en el formato de una membresía de unión. Para el endpoint /knock, se necesita un campo de contenido adicional establecido por la víctima en el formato de una membresía de knock y una versión de sala que no esté entre 1 y 6. Esto fue explotado como parte de una cadena más grande contra el homeserver continuwuity.org. Esta vulnerabilidad afecta a todos los servidores derivados de Conduit. Esta vulnerabilidad está corregida en Continuwuity 0.5.1, Conduit 0.10.11, Grapevine 0aae932b y Tuwunel 1.4.9."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "references" : [ {
        "url" : "https://forgejo.ellis.link/continuwuation/continuwuity/commit/12aecf809172205436c852a1eaf268c1a2c3a900",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/continuwuity/continuwuity/security/advisories/GHSA-m5p2-vccg-8c9v",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24737",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:08.443",
      "lastModified" : "2026-02-18T15:02:20.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following methods or properties, a user can inject arbitrary PDF objects, such as JavaScript actions, which are executed when the victim opens the document. The vulnerable API members are AcroformChoiceField.addOption, AcroformChoiceField.setOptions, AcroFormCheckBox.appearanceState, and AcroFormRadioButton.appearanceState. The vulnerability has been fixed in jsPDF@4.1.0."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una biblioteca para generar PDFs en JavaScript. Antes de 4.1.0, el control del usuario sobre las propiedades y métodos del módulo Acroform permite a los usuarios inyectar objetos PDF arbitrarios, como acciones JavaScript. Si se da la posibilidad de pasar entrada no saneada a uno de los siguientes métodos o propiedades, un usuario puede inyectar objetos PDF arbitrarios, como acciones JavaScript, que se ejecutan cuando la víctima abre el documento. Los miembros de la API vulnerables son AcroformChoiceField.addOption, AcroformChoiceField.setOptions, AcroFormCheckBox.appearanceState y AcroFormRadioButton.appearanceState. La vulnerabilidad ha sido corregida en jsPDF@4.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "46B1DFBD-B23A-484B-B9EC-39B983D89431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parallax/jsPDF/commit/da291a5f01b96282545c9391996702cdb8879f79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-pqxr-3g65-p328",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24763",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:08.593",
      "lastModified" : "2026-02-13T14:28:51.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw (formerly  Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands. An authenticated user able to control environment variables could influence command execution within the container context. This vulnerability is fixed in 2026.1.29."
      }, {
        "lang" : "es",
        "value" : "OpenClaw (anteriormente Clawdbot) es un asistente de IA personal que ejecutas en tus propios dispositivos. Antes de 2026.1.29, existía una vulnerabilidad de inyección de comandos en el mecanismo de ejecución de sandbox de Docker de OpenClaw debido a un manejo inseguro de la variable de entorno PATH al construir comandos de shell. Un usuario autenticado capaz de controlar variables de entorno podría influir en la ejecución de comandos dentro del contexto del contenedor. Esta vulnerabilidad está corregida en 2026.1.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.1.29",
            "matchCriteriaId" : "4801AF60-B3F7-4C05-A4A1-F8443F445ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/771f23d36b95ec2204cc9a0054045f5d8439ea75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.1.29",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-mc68-q9jw-2h3v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25059",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:08.753",
      "lastModified" : "2026-02-23T17:35:20.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in server/handles/fsmanage.go. Filename components in req.Names are directly concatenated with validated directories using stdpath.Join. This allows \"..\" sequences to bypass path restrictions, enabling users to access other users' files within the same storage mount and perform unauthorized actions such as deletion, renaming, or copying of files. An authenticated attacker can bypass directory-level authorisation by injecting traversal sequences into filename components, enabling unauthorised file removal and copying across user boundaries within the same storage mount. This vulnerability is fixed in 4.1.10."
      }, {
        "lang" : "es",
        "value" : "OpenList Frontend es un componente de UI para OpenList. Antes de la 4.1.10, la aplicación contiene una vulnerabilidad de salto de ruta en múltiples manejadores de operaciones de archivo en server/handles/fsmanage.go. Los componentes de nombre de archivo en req.Names se concatenan directamente con directorios validados usando stdpath.Join. Esto permite que las secuencias '..' evadan las restricciones de ruta, permitiendo a los usuarios acceder a los archivos de otros usuarios dentro del mismo montaje de almacenamiento y realizar acciones no autorizadas como la eliminación, el cambio de nombre o la copia de archivos. Un atacante autenticado puede evadir la autorización a nivel de directorio inyectando secuencias de salto de ruta en los componentes de nombre de archivo, permitiendo la eliminación y copia de archivos no autorizadas entre límites de usuario dentro del mismo montaje de almacenamiento. Esta vulnerabilidad está corregida en la 4.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oplist:openlist:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.10",
            "matchCriteriaId" : "8A540671-DE84-45FD-A087-21A565765CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenListTeam/OpenList/commit/7b78fed106382430c69ef351d43f5d09928fff14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-qmj2-8r24-xxcq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25060",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:08.913",
      "lastModified" : "2026-02-23T17:35:00.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, certificate verification is disabled by default for all storage driver communications. The TlsInsecureSkipVerify setting is default to true in the DefaultConfig() function in internal/conf/config.go. This vulnerability enables Man-in-the-Middle (MitM) attacks by disabling TLS certificate verification, allowing attackers to intercept and manipulate all storage communications. Attackers can exploit this through network-level attacks like ARP spoofing, rogue Wi-Fi access points, or compromised internal network equipment to redirect traffic to malicious endpoints. Since certificate validation is skipped, the system will unknowingly establish encrypted connections with attacker-controlled servers, enabling full decryption, data theft, and manipulation of all storage operations without triggering any security warnings. This vulnerability is fixed in 4.1.10."
      }, {
        "lang" : "es",
        "value" : "OpenList Frontend es un componente de interfaz de usuario para OpenList. Antes de la versión 4.1.10, la verificación de certificados está deshabilitada por defecto para todas las comunicaciones del controlador de almacenamiento. La configuración TlsInsecureSkipVerify está establecida en true por defecto en la función DefaultConfig() en internal/conf/config.go. Esta vulnerabilidad permite ataques de man-in-the-middle (MitM) al deshabilitar la verificación de certificados TLS, lo que permite a los atacantes interceptar y manipular todas las comunicaciones de almacenamiento. Los atacantes pueden explotar esto a través de ataques a nivel de red como suplantación de ARP, puntos de acceso Wi-Fi no autorizados o equipos de red internos comprometidos para redirigir el tráfico a puntos finales maliciosos. Dado que la validación de certificados se omite, el sistema establecerá conexiones cifradas sin saberlo con servidores controlados por el atacante, lo que permite el descifrado completo, el robo de datos y la manipulación de todas las operaciones de almacenamiento sin activar ninguna advertencia de seguridad. Esta vulnerabilidad se corrige en la versión 4.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-599"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oplist:openlist:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.10",
            "matchCriteriaId" : "8A540671-DE84-45FD-A087-21A565765CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenListTeam/OpenList/commit/e3c664f81d0584fbbdb86ffe6644be16259371c1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-wf93-3ghh-h389",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25134",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:09.120",
      "lastModified" : "2026-02-18T17:35:28.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via exec(). This can be combined with uploading a crafted zip file to achieve remote code execution. This vulnerability is fixed in 6.8.150, 25.0.82, and 26.0.5."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta empresarial de gestión de relaciones con clientes y groupware. Antes de las versiones 6.8.150, 25.0.82 y 26.0.5, el MaintenanceController expone una acción zipLanguage que toma un parámetro lang y lo pasa directamente a un comando zip del sistema a través de exec(). Esto puede combinarse con la carga de un archivo zip manipulado para lograr la ejecución remota de código. Esta vulnerabilidad está corregida en las versiones 6.8.150, 25.0.82 y 26.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.150",
            "matchCriteriaId" : "97DDA2DE-263C-4AB0-BA43-6AD9D0CAF599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.82",
            "matchCriteriaId" : "39BE8337-170B-4895-A5AA-B27AFB64E418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0.1",
            "versionEndExcluding" : "26.0.5",
            "matchCriteriaId" : "FB489F3F-5EA4-4DFD-9F70-9AD862D7401A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/commit/d28490a6a29936db7888aa841ab8ade88800540b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-v39j-549w-8849",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25137",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:09.280",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NixOs Odoo package is an open source ERP and CRM system. From 21.11 to before 25.11 and 26.05, every NixOS based Odoo setup publicly exposes the database manager without any authentication. This allows unauthorized actors to delete and download the entire database, including Odoos file store. Unauthorized access is evident from http requests. If kept, searching access logs and/or Odoos log for requests to /web/database can give indicators, if this has been actively exploited. The database manager is a featured intended for development and not meant to be publicly reachable. On other setups, a master password acts as 2nd line of defence. However, due to the nature of NixOS, Odoo is not able to modify its own configuration file and thus unable to persist the auto-generated password. This also applies when manually setting a master password in the web-UI. This means, the password is lost when restarting Odoo. When no password is set, the user is prompted to set one directly via the database manager. This requires no authentication or action by any authorized user or the system administrator. Thus, the database is effectively world readable by anyone able to reach Odoo. This vulnerability is fixed in 25.11 and 26.05."
      }, {
        "lang" : "es",
        "value" : "El paquete NixOs Odoo es un sistema ERP y CRM de código abierto. Desde la versión 21.11 hasta antes de la 25.11 y la 26.05, cada configuración de Odoo basada en NixOS expone públicamente el gestor de la base de datos sin ninguna autenticación. Esto permite a actores no autorizados eliminar y descargar la base de datos completa, incluyendo el almacén de archivos de Odoo. El acceso no autorizado es evidente a partir de las solicitudes HTTP. Si se mantienen, la búsqueda en los registros de acceso y/o el registro de Odoo de solicitudes a /web/database puede dar indicadores, si esto ha sido explotado activamente. El gestor de la base de datos es una característica destinada al desarrollo y no está pensado para ser accesible públicamente. En otras configuraciones, una contraseña maestra actúa como segunda línea de defensa. Sin embargo, debido a la naturaleza de NixOS, Odoo no puede modificar su propio archivo de configuración y, por lo tanto, no puede persistir la contraseña autogenerada. Esto también se aplica al establecer manualmente una contraseña maestra en la interfaz de usuario web (web-UI). Esto significa que la contraseña se pierde al reiniciar Odoo. Cuando no se establece ninguna contraseña, se le pide al usuario que establezca una directamente a través del gestor de la base de datos. Esto no requiere autenticación ni acción por parte de ningún usuario autorizado o del administrador del sistema. Por lo tanto, la base de datos es efectivamente legible por cualquier persona capaz de alcanzar Odoo. Esta vulnerabilidad está corregida en las versiones 25.11 y 26.05."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NixOS/nixpkgs/pull/485310",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/pull/485454",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/security/advisories/GHSA-cwmq-6wv5-f3px",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25142",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:09.440",
      "lastModified" : "2026-02-18T14:34:30.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Prior to 0.8.27, SanboxJS does not properly restrict __lookupGetter__ which can be used to obtain prototypes, which can be used for escaping the sandbox / remote code execution. This vulnerability is fixed in 0.8.27."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una biblioteca de sandboxing de JavaScript. Antes de la versión 0.8.27, SandboxJS no restringe adecuadamente __lookupGetter__, que puede usarse para obtener prototipos, lo que puede usarse para escapar del sandbox / ejecución remota de código. Esta vulnerabilidad está corregida en la versión 0.8.27."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.27",
            "matchCriteriaId" : "0B7FD7B0-0F36-4201-9F29-513F12B3DC25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/blob/f212a38fb5a6d4bc2bc2e2466c0c011ce8d41072/src/executor.ts#L368-L398",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/commit/75c8009db32e6829b0ad92ca13bf458178442bd3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-9p4w-fq8m-2hp7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25144",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:09.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Talishar is a fan-made Flesh and Blood project. A Stored XSS exists in the chat in-game system. The playerID parameter in SubmitChat.php and is saved without sanitization and executed whenever a user view the current page game. This vulnerability is fixed by 09dd00e5452e3cd998eb1406a88e5b0fa868e6b4."
      }, {
        "lang" : "es",
        "value" : "Talishar es un proyecto de Flesh and Blood creado por fans. Existe una XSS Almacenada en el sistema de chat del juego. El parámetro playerID en SubmitChat.PHP se guarda sin sanitización y se ejecuta cada vez que un usuario ve la página actual del juego. Esta vulnerabilidad se corrige con 09dd00e5452e3cd998eb1406a88e5b0fa868e6b4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Talishar/Talishar/commit/09dd00e5452e3cd998eb1406a88e5b0fa868e6b4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Talishar/Talishar/security/advisories/GHSA-rrr4-h2pc-57g6",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25221",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:09.757",
      "lastModified" : "2026-02-20T20:45:57.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, the OAuth 2.0 implementation for GitHub and Google login providers is vulnerable to Login Cross-Site Request Forgery (CSRF). The application fails to implement and verify the state parameter during the authentication flow. This allows an attacker to pre-authenticate a session and trick a victim into logging into the attacker's account. Any data the victim then enters or academic progress they make is stored on the attacker's account, leading to data loss for the victim and information disclosure to the attacker."
      }, {
        "lang" : "es",
        "value" : "PolarLearn es un programa de aprendizaje gratuito y de código abierto. En 0-PRERELEASE-15 y versiones anteriores, la implementación de OAuth 2.0 para los proveedores de inicio de sesión de GitHub y Google es vulnerable a la falsificación de petición en sitios cruzados (CSRF) de inicio de sesión. La aplicación no implementa ni verifica el parámetro state durante el flujo de autenticación. Esto permite a un atacante preautenticar una sesión y engañar a una víctima para que inicie sesión en la cuenta del atacante. Cualquier dato que la víctima introduzca o progreso académico que realice se almacena en la cuenta del atacante, lo que provoca la pérdida de datos para la víctima y la revelación de información al atacante."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polarlearn:polarlearn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DA1036-1EFB-46E7-9C83-425B1C6E6F23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/polarnl/PolarLearn/commit/44669bbb5b647c7625f22dd82f3121c7d7bfbe19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/polarnl/PolarLearn/security/advisories/GHSA-fhhm-574m-7rpw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25222",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:09.923",
      "lastModified" : "2026-02-20T20:48:00.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, a timing attack vulnerability in the sign-in process allows unauthenticated attackers to determine if a specific email address is registered on the platform. By measuring the response time of the login endpoint, an attacker can distinguish between valid and invalid email addresses. This occurs because the server only performs the computationally expensive Argon2 password hashing if the user exists in the database. Requests for existing users take significantly longer (~650ms) than requests for non-existent users (~160ms)."
      }, {
        "lang" : "es",
        "value" : "PolarLearn es un programa de aprendizaje gratuito y de código abierto. En 0-PRERELEASE-15 y versiones anteriores, una vulnerabilidad de ataque de temporización en el proceso de inicio de sesión permite a atacantes no autenticados determinar si una dirección de correo electrónico específica está registrada en la plataforma. Al medir el tiempo de respuesta del endpoint de inicio de sesión, un atacante puede distinguir entre direcciones de correo electrónico válidas e inválidas. Esto ocurre porque el servidor solo realiza el hash de contraseña Argon2, que es computacionalmente costoso, si el usuario existe en la base de datos. Las solicitudes para usuarios existentes tardan significativamente más tiempo (~650ms) que las solicitudes para usuarios no existentes (~160ms)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polarlearn:polarlearn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DA1036-1EFB-46E7-9C83-425B1C6E6F23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/polarnl/PolarLearn/commit/6c276855172c7310cce0df996cb47ffe0d886741",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/polarnl/PolarLearn/security/advisories/GHSA-wcr9-mvr9-4qh5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25228",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-02T23:16:10.080",
      "lastModified" : "2026-02-20T15:13:59.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.20.3, a path traversal vulnerability in SignalK Server's applicationData API allows authenticated users on Windows systems to read, write, and list arbitrary files and directories on the filesystem. The validateAppId() function blocks forward slashes (/) but not backslashes (\\), which are treated as directory separators by path.join() on Windows. This enables attackers to escape the intended applicationData directory. This vulnerability is fixed in 2.20.3."
      }, {
        "lang" : "es",
        "value" : "Signal K Server es una aplicación de servidor que se ejecuta en un concentrador central en un barco. Antes de la versión 2.20.3, una vulnerabilidad de salto de ruta en la API applicationData de SignalK Server permite a los usuarios autenticados en sistemas Windows leer, escribir y listar archivos y directorios arbitrarios en el sistema de archivos. La función validateAppId() bloquea las barras diagonales (/) pero no las barras invertidas (\\), que son tratadas como separadores de directorio por path.join() en Windows. Esto permite a los atacantes escapar del directorio applicationData previsto. Esta vulnerabilidad está corregida en la versión 2.20.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:signalk:signal_k_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.20.3",
            "matchCriteriaId" : "A3B62A9F-E2CD-4CFB-9505-2D5F92A206AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SignalK/signalk-server/commit/9bcf61c8fe2cb8a40998b913a02fb64dff9e86c7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/SignalK/signalk-server/security/advisories/GHSA-vrhw-v2hw-jffx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24932",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-03T03:15:53.080",
      "lastModified" : "2026-02-19T18:16:57.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle (MitM) attack, which may obtain the sensitive information of DDNS updating process, including the user's account email, MD5 hashed password, and device serial number.This issue affects ADM: from 4.1.0 through 4.3.3.ROF1, from 5.0.0 through 5.1.1.RCI1."
      }, {
        "lang" : "es",
        "value" : "La función de actualización de DDNS en ADM no valida correctamente el nombre de host del certificado TLS/SSL del servidor DDNS. Aunque la conexión utiliza HTTPS, un certificado TLS/SSL incorrectamente validado permite a un atacante remoto interceptar la comunicación para realizar un ataque man-in-the-middle (MitM), lo que puede obtener la información sensible del proceso de actualización de DDNS, incluyendo el correo electrónico de la cuenta del usuario, la contraseña con hash MD5 y el número de serie del dispositivo. Este problema afecta a ADM: desde 4.1.0 hasta 4.3.3.ROF1, desde 5.0.0 hasta 5.1.1.RCI1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.re51",
            "matchCriteriaId" : "7FC466AD-33C6-4F5C-A679-C5100B0B9B32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=50",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24933",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-03T03:15:53.240",
      "lastModified" : "2026-02-19T18:17:38.983",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability allows an unauthenticated remote attacker can perform a Man-in-the-Middle (MitM) attack to intercept the cleartext communication, potentially leading to the exposure of sensitive user information, including account emails, MD5 hashed passwords, and device serial numbers.\n\n\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1."
      }, {
        "lang" : "es",
        "value" : "El componente de comunicación de la API no valida el certificado SSL/TLS al enviar solicitudes HTTPS al servidor. Una vulnerabilidad de validación de certificados incorrecta permite que un atacante remoto no autenticado realice un ataque man-in-the-middle (MitM) para interceptar la comunicación en texto claro, lo que podría llevar a la exposición de información sensible del usuario, incluyendo correos electrónicos de cuentas, contraseñas con hash MD5 y números de serie de dispositivos.\n\nLos productos y versiones afectados incluyen: desde ADM 4.1.0 hasta ADM 4.3.3.ROF1, así como desde ADM 5.0.0 hasta ADM 5.1.1.RCI1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.re51",
            "matchCriteriaId" : "7FC466AD-33C6-4F5C-A679-C5100B0B9B32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=50",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24934",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-03T03:15:53.383",
      "lastModified" : "2026-02-19T18:18:18.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address. An unauthenticated remote attacker can perform a Man-in-the-Middle (MitM) attack to spoof the response, leading the device to update its DDNS record with an incorrect IP address.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1."
      }, {
        "lang" : "es",
        "value" : "La función DDNS utiliza una conexión HTTP insegura o no valida el certificado SSL/TLS al consultar un servidor externo para la dirección IP WAN del dispositivo. Un atacante remoto no autenticado puede realizar un ataque man-in-the-middle (MitM) para falsificar la respuesta, lo que lleva al dispositivo a actualizar su registro DDNS con una dirección IP incorrecta.\nLos productos y versiones afectados incluyen: desde ADM 4.1.0 hasta ADM 4.3.3.ROF1, así como desde ADM 5.0.0 hasta ADM 5.1.1.RCI1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.re51",
            "matchCriteriaId" : "7FC466AD-33C6-4F5C-A679-C5100B0B9B32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=50",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24935",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-03T03:15:53.507",
      "lastModified" : "2026-02-19T18:19:51.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle (MitM) attacker can intercept or redirect the NAT tunnel establishment. This could allow an attacker to disrupt service availability or facilitate further targeted attacks by acting as a proxy between the user and the device services.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1."
      }, {
        "lang" : "es",
        "value" : "Un módulo de recorrido NAT de terceros no valida los certificados SSL/TLS al conectarse al servidor de señalización. Si bien el acceso posterior a los servicios del dispositivo requiere autenticación adicional, un atacante man-in-the-middle (MitM) puede interceptar o redirigir el establecimiento del túnel NAT. Esto podría permitir a un atacante interrumpir la disponibilidad del servicio o facilitar ataques dirigidos adicionales actuando como un proxy entre el usuario y los servicios del dispositivo.\nLos productos y versiones afectados incluyen: desde ADM 4.1.0 hasta ADM 4.3.3.ROF1, así como desde ADM 5.0.0 hasta ADM 5.1.1.RCI1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.re51",
            "matchCriteriaId" : "7FC466AD-33C6-4F5C-A679-C5100B0B9B32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=50",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0383",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2026-02-03T04:15:55.840",
      "lastModified" : "2026-02-06T20:52:11.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Brocade Fabric OS podría permitir a un atacante local autenticado con privilegios acceder al shell de Bash para acceder a contenidos de archivos almacenados de forma insegura, incluyendo el comando history."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@brocade.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@brocade.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.1c2",
            "matchCriteriaId" : "4BF33AB1-6140-4551-B845-D2C371194733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.2",
            "versionEndExcluding" : "9.2.2b",
            "matchCriteriaId" : "09017732-F244-40E7-A4F5-DF63D9C2B3C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C27B0CC-10A7-4263-BC54-782D5E7EA2AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36851",
        "source" : "sirt@brocade.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0909",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T04:15:56.013",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP ULike plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.8.3.1. This is due to the `wp_ulike_delete_history_api` AJAX action not verifying that the log entry being deleted belongs to the current user. This makes it possible for authenticated attackers, with Subscriber-level access and above (granted the 'stats' capability is assigned to their role), to delete arbitrary log entries belonging to other users via the 'id' parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin WP ULike para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta e incluyendo la 4.8.3.1. Esto se debe a que la acción AJAX 'wp_ulike_delete_history_api' no verifica que la entrada de registro que se está eliminando pertenezca al usuario actual. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior (siempre que la capacidad 'stats' esté asignada a su rol), eliminen entradas de registro arbitrarias pertenecientes a otros usuarios a través del parámetro 'id'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-ulike/tags/4.8.3.1/admin/admin-ajax.php#L94",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-ulike/trunk/admin/admin-ajax.php#L94",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3451296/wp-ulike/trunk/admin/admin-ajax.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bee2e520-46cc-4b54-9849-fafb9b37ba19?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1788",
      "sourceIdentifier" : "alibaba-cna@list.alibaba-inc.com",
      "published" : "2026-02-03T04:15:56.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ": Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffer Manipulation.This issue affects Xquic Server: through 1.8.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en Xquic Project Servidor Xquic xquic en Linux (implementación del protocolo QUIC, módulo de procesamiento de paquetes) permite: Manipulación de Búfer. Este problema afecta a Servidor Xquic: hasta 1.8.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "alibaba-cna@list.alibaba-inc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Amber",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "alibaba-cna@list.alibaba-inc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alibaba/xquic",
        "source" : "alibaba-cna@list.alibaba-inc.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24936",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-03T04:15:56.357",
      "lastModified" : "2026-02-19T17:39:07.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data to any file on the system. By exploiting this vulnerability, attackers can overwrite critical system files, leading to a complete system compromise.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1."
      }, {
        "lang" : "es",
        "value" : "Cuando una función específica está habilitada al unirse a un Dominio AD desde ADM, una vulnerabilidad de validación de parámetros de entrada incorrecta en un programa CGI específico permite a un atacante remoto no autenticado escribir datos arbitrarios en cualquier archivo del sistema. Al explotar esta vulnerabilidad, los atacantes pueden sobrescribir archivos críticos del sistema, lo que lleva a un compromiso completo del sistema.\nLos productos y versiones afectados incluyen: desde ADM 4.1.0 hasta ADM 4.3.3.ROF1, así como desde ADM 5.0.0 hasta ADM 5.1.1.RCI1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.re51",
            "matchCriteriaId" : "7FC466AD-33C6-4F5C-A679-C5100B0B9B32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=51",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0950",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T06:15:53.387",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.19.17. This is due to the plugin failing to check `post_password_required()` before rendering post excerpts in the `render_excerpt()` function and the `uagb_get_excerpt()` helper function. This makes it possible for unauthenticated attackers to read excerpts of password-protected posts by simply viewing any page that contains a Spectra Post Grid, Post Masonry, Post Carousel, or Post Timeline block."
      }, {
        "lang" : "es",
        "value" : "El plugin Spectra Gutenberg Blocks – Website Builder para el Editor de Bloques para WordPress es vulnerable a revelación de información en todas las versiones hasta e incluyendo la 2.19.17. Esto se debe a que el plugin no verifica `post_password_required()` antes de renderizar extractos de publicaciones en la función `render_excerpt()` y la función auxiliar `uagb_get_excerpt()`. Esto hace posible que atacantes no autenticados lean extractos de publicaciones protegidas con contraseña simplemente viendo cualquier página que contenga un bloque Spectra Post Grid, Post Masonry, Post Carousel o Post Timeline."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/tags/2.19.17/blocks-config/post/class-uagb-post.php#L1303",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/tags/2.19.17/blocks-config/post/class-uagb-post.php#L1621",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/tags/2.19.17/blocks-config/post/class-uagb-post.php#L2196",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/tags/2.19.17/classes/class-uagb-helper.php#L1403",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/trunk/blocks-config/post/class-uagb-post.php#L1303",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/trunk/blocks-config/post/class-uagb-post.php#L1621",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/trunk/blocks-config/post/class-uagb-post.php#L2196",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/trunk/classes/class-uagb-helper.php#L1403",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3443216%40ultimate-addons-for-gutenberg%2Ftrunk&old=3410395%40ultimate-addons-for-gutenberg%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ccaccf03-4162-4365-9f12-0363a78e91d4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24694",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-03T06:15:53.547",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with the privileges of the application."
      }, {
        "lang" : "es",
        "value" : "El instalador de Roland Cloud Manager ver.3.1.19 y versiones anteriores carga de forma insegura Bibliotecas de Enlace Dinámico (DLL), lo que podría permitir a un atacante ejecutar código arbitrario con los privilegios de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN89992160/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.roland.com/global/products/rc_roland_cloud_manager/support/#dl-support_documents",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0617",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T07:16:11.390",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer profile fields in all versions up to, and including, 5.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrator views the customer's activity history."
      }, {
        "lang" : "es",
        "value" : "El plugin LatePoint – Calendar Booking Plugin for Appointments and Events para WordPress es vulnerable a cross-site scripting almacenado a través de los campos del perfil del cliente en todas las versiones hasta la 5.2.5, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto posibilita que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un administrador vea el historial de actividad del cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.2.5/lib/controllers/activities_controller.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.2.5/lib/models/activity_model.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.2.5/lib/views/activities/view.php#L27",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3449263%40latepoint%2Ftrunk&old=3408660%40latepoint%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/22bcfd36-ecf9-4d2c-ac94-94ffa0340c4c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1058",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T07:16:11.690",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Form Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via hidden field values in all versions up to, and including, 1.15.35. This is due to insufficient output escaping when displaying hidden field values in the admin submissions list. The plugin uses html_entity_decode() on user-supplied hidden field values without subsequent escaping before output, which converts HTML entity-encoded payloads back into executable JavaScript. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in the admin submissions view that will execute whenever an administrator accesses the submissions list."
      }, {
        "lang" : "es",
        "value" : "El plugin Form Maker para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de valores de campos ocultos en todas las versiones hasta la 1.15.35, inclusive. Esto se debe a un escape de salida insuficiente al mostrar los valores de los campos ocultos en la lista de envíos del administrador. El plugin utiliza html_entity_decode() en valores de campos ocultos proporcionados por el usuario sin un escape posterior antes de la salida, lo que convierte las cargas útiles codificadas como entidades HTML de nuevo en JavaScript ejecutable. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en la vista de envíos del administrador que se ejecutarán cada vez que un administrador acceda a la lista de envíos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.34/admin/views/Submissions_fm.php#L759",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3447011%40form-maker%2Ftrunk&old=3440395%40form-maker%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e0ec0027-2792-4069-b413-8fdd951f5fe7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1065",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T07:16:11.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.15.35. This is due to the plugin's default file upload allowlist including SVG files combined with weak substring-based extension validation. This makes it possible for unauthenticated attackers to upload malicious SVG files containing JavaScript code that will execute when viewed by administrators or site visitors via file upload fields in forms granted they can submit forms."
      }, {
        "lang" : "es",
        "value" : "El plugin Form Maker by 10Web para WordPress es vulnerable a cross-site scripting almacenado en todas las versiones hasta e incluyendo la 1.15.35. Esto se debe a que la lista de permitidos predeterminada de carga de archivos del plugin incluye archivos SVG, combinado con una validación de extensión débil basada en subcadenas. Esto hace posible que atacantes no autenticados carguen archivos SVG maliciosos que contienen código JavaScript que se ejecutará cuando sea visto por administradores o visitantes del sitio a través de campos de carga de archivos en formularios, siempre que puedan enviar formularios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.34/frontend/models/form_maker.php#L1744",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.34/frontend/models/form_maker.php#L1855",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.34/js/add_field.js#L2364",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3447011%40form-maker%2Ftrunk&old=3440395%40form-maker%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8230d5f8-01d9-465a-8a43-e9852248bb3d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1210",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T07:16:12.097",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_elementor_data' meta field in all versions up to, and including, 3.20.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Happy Addons para Elementor para WordPress es vulnerable a cross-site scripting almacenado a través del campo meta '_elementor_data' en todas las versiones hasta e incluyendo la 3.20.7 debido a una sanitización de entrada y escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/happy-elementor-addons/tags/3.20.4/widgets/age-gate/widget.php#L2055",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/happy-elementor-addons/tags/3.20.4/widgets/age-gate/widget.php#L2120",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/happy-elementor-addons/tags/3.20.4/widgets/svg-draw/widget.php#L732",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/widgets/age-gate/widget.php#L2055",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/widgets/age-gate/widget.php#L2120",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/widgets/svg-draw/widget.php#L732",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3451894/happy-elementor-addons/trunk/widgets/svg-draw/widget.php?old=3312461&old_path=happy-elementor-addons%2Ftrunk%2Fwidgets%2Fsvg-draw%2Fwidget.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/df4b554a-0336-404c-b06c-2bc98c99997d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1447",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T07:16:12.307",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.2. This is due to missing nonce validation on the create_or_update_note function. This makes it possible for unauthenticated attackers to create or update contact notes via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Due to missing sanitization and escaping this can lead to stored Cross-Site Scripting."
      }, {
        "lang" : "es",
        "value" : "El plugin Mail Mint para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.19.2, inclusive. Esto se debe a la falta de validación de nonce en la función create_or_update_note. Esto hace posible que atacantes no autenticados creen o actualicen notas de contacto a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace. Debido a la falta de saneamiento y escape, esto puede conducir a cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.19.2/app/API/Actions/Admin/Contact/ContactProfileAction.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.19.2/app/API/Routes/Admin/Contact/ContactProfileRoute.php#L105",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mail-mint/trunk/app/API/Actions/Admin/Contact/ContactProfileAction.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mail-mint/trunk/app/API/Routes/Admin/Contact/ContactProfileRoute.php#L105",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449536/mail-mint/trunk/app/API/Actions/Admin/Contact/ContactProfileAction.php?old=3032077&old_path=mail-mint%2Ftrunk%2Fapp%2FAPI%2FActions%2FAdmin%2FContact%2FContactProfileAction.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e67ae204-2848-4389-a78d-7b3798e4ee54?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20704",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-03T07:16:12.503",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery vulnerability exists in WRC-X1500GS-B and WRC-X1500GSA-B. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de falsificación de petición en sitios cruzados en WRC-X1500GS-B y WRC-X1500GSA-B. Si un usuario accede a una página maliciosa mientras está conectado al producto afectado, se pueden realizar operaciones no deseadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN94012927/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20260203-01/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22550",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-03T07:16:12.713",
      "lastModified" : "2026-04-10T14:35:37.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS command injection vulnerability exists in WRC-X1500GS-B and WRC-X1500GSA-B. A crafted request from a logged-in user may lead to an arbitrary OS command execution."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos del sistema operativo en WRC-X1500GS-B y WRC-X1500GSA-B. Una solicitud manipulada de un usuario autenticado puede conducir a la ejecución arbitraria de comandos del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13",
            "matchCriteriaId" : "24696238-F8E0-4F08-B295-B258B03DDC9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-x1500gsa-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8909C3-AE13-4F0F-8036-FBF586D554E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-x1500gs-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13",
            "matchCriteriaId" : "56372728-41BD-48DD-BB47-049DDC2A15E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-x1500gs-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18945200-2A5D-4ED1-AEBF-8351FED54B5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN94012927/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20260203-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24449",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-03T07:16:12.907",
      "lastModified" : "2026-04-10T14:51:44.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information."
      }, {
        "lang" : "es",
        "value" : "Para WRC-X1500GS-B y WRC-X1500GSA-B, las contraseñas iniciales se pueden calcular fácilmente a partir de la información del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1391"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9250B0-9FE6-40B6-9FFB-33CAA055952F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-x1500gsa-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8909C3-AE13-4F0F-8036-FBF586D554E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-x1500gs-b_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C7534A1-EF08-45B9-9A74-46F97CAFE979"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-x1500gs-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18945200-2A5D-4ED1-AEBF-8351FED54B5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN94012927/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20260203-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24465",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-03T07:16:13.127",
      "lastModified" : "2026-04-14T12:59:18.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basado en pila existe en dispositivos de punto de acceso LAN inalámbrica ELECOM. Un paquete manipulado puede conducir a ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wab-s300iw-pd_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB3E813-C4C3-485D-BF61-3F9DBEB0D680"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wab-s300iw-pd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83425C57-2BCD-4F46-83AC-B9EE0007C3E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wab-s733iw-pd_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E1B3D9-E890-4419-BBC7-D4AE7E178A91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wab-s733iw-pd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB88F5CF-8DD1-4311-91FB-2993DC49D806"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13",
            "matchCriteriaId" : "C0B498FF-5614-4DE4-83E8-383B56015CAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-x1500gsa-b:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D198866F-7CB3-4EA0-86EA-345CF65E116F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-x1500gs-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13",
            "matchCriteriaId" : "DD09C01F-808C-441E-87E7-EDFFDEC28F32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-x1500gs-b:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B13224-1E88-4415-8B8E-979D00BD68F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wab-s300iw2-pd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.02",
            "matchCriteriaId" : "1981D6C7-925C-48D5-AC62-7EA49A6ADDF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wab-s300iw2-pd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49761255-54A8-4EA6-815B-0101CB3B3654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wab-s300iw-ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.02",
            "matchCriteriaId" : "3AC64B10-064A-4257-84B7-ED787A781D05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wab-s300iw-ac:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "384B87CA-AC9B-45FC-8A5A-0DBE85EF4672"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wab-s733iw2-pd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.02",
            "matchCriteriaId" : "137542E3-E35A-402B-B639-B981B1EF6B95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wab-s733iw2-pd:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3B4CD1-2386-43BA-BAEC-4E1656EA3B1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wab-s733iw-ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.02",
            "matchCriteriaId" : "CF85D5B3-2B0E-4B0A-BA5A-8BAFBA7DB05B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wab-s733iw-ac:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A73628CA-FF19-47C7-B096-E4312D52A120"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN94012927/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20260203-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20260203-02/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1371",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T08:16:14.560",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.5. This is due to missing authorization checks in the `ajax_coupon_details()` function, which only validates nonces but does not verify user capabilities. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive coupon information including coupon codes, discount amounts, usage statistics, and course/bundle applications."
      }, {
        "lang" : "es",
        "value" : "El plugin Tutor LMS – solución de eLearning y cursos en línea para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta la 3.9.5, inclusive. Esto se debe a la falta de comprobaciones de autorización en la función 'ajax_coupon_details()', que solo valida nonces pero no verifica las capacidades del usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, recuperen información sensible de cupones, incluyendo códigos de cupón, montos de descuento, estadísticas de uso y aplicaciones de cursos/paquetes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.5/ecommerce/CouponController.php#L106",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.5/ecommerce/CouponController.php#L658",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3448615/tutor/trunk/ecommerce/CouponController.php?contextall=1&old=3422766&old_path=%2Ftutor%2Ftrunk%2Fecommerce%2FCouponController.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7f5c5f64-a864-4ce1-9080-19f7c4418307?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1375",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T08:16:14.733",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object References (IDOR) in all versions up to, and including, 3.9.5. This is due to missing object-level authorization checks in the `course_list_bulk_action()`, `bulk_delete_course()`, and `update_course_status()` functions. This makes it possible for authenticated attackers, with Tutor Instructor-level access and above, to modify or delete arbitrary courses they do not own by manipulating course IDs in bulk action requests."
      }, {
        "lang" : "es",
        "value" : "El plugin Tutor LMS – solución de eLearning y cursos en línea para WordPress es vulnerable a Referencias Directas Inseguras a Objetos (IDOR) en todas las versiones hasta la 3.9.5, inclusive. Esto se debe a la falta de comprobaciones de autorización a nivel de objeto en las funciones `course_list_bulk_action()`, `bulk_delete_course()` y `update_course_status()`. Esto hace posible que atacantes autenticados, con acceso de nivel de Instructor de Tutor o superior, modifiquen o eliminen cursos arbitrarios que no les pertenecen manipulando los ID de los cursos en solicitudes de acciones masivas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.5/classes/Course_List.php#L289",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.5/classes/Course_List.php#L437",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tutor/tags/3.9.5/classes/Course_List.php#L463",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3448615/tutor/trunk/classes/Course_List.php?contextall=1&old=3339576&old_path=%2Ftutor%2Ftrunk%2Fclasses%2FCourse_List.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e95b32b-c050-41eb-8fce-461257420eb6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1591",
      "sourceIdentifier" : "14984358-7092-470d-8f34-ade47a7658a2",
      "published" : "2026-02-03T08:16:14.900",
      "lastModified" : "2026-02-18T16:08:22.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list without proper escaping, allowing arbitrary JavaScript execution when the list is displayed.\n\nThis issue affects pdfonline.foxit.com: before 2026‑02‑03."
      }, {
        "lang" : "es",
        "value" : "Foxit PDF Editor Cloud (pdfonline) contiene una vulnerabilidad de cross-site scripting almacenado en la función de carga de archivos. Un nombre de usuario malicioso se incrusta en la lista de archivos cargados sin el escape adecuado, permitiendo la ejecución arbitraria de JavaScript cuando se muestra la lista.\n\nEste problema afecta a pdfonline.foxit.com: antes del 03-02-2026."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "14984358-7092-470d-8f34-ade47a7658a2",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "14984358-7092-470d-8f34-ade47a7658a2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-02-03",
            "matchCriteriaId" : "C22F83B5-EAE7-4F85-A1DA-48617FB7E718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxit.com/support/security-bulletins.html",
        "source" : "14984358-7092-470d-8f34-ade47a7658a2",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1592",
      "sourceIdentifier" : "14984358-7092-470d-8f34-ade47a7658a2",
      "published" : "2026-02-03T08:16:15.043",
      "lastModified" : "2026-02-18T16:08:28.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, allowing arbitrary JavaScript execution when the layer is referenced.\n\nThis issue affects pdfonline.foxit.com: before 2026‑02‑03."
      }, {
        "lang" : "es",
        "value" : "Foxit PDF Editor Cloud (pdfonline) contiene una vulnerabilidad de cross-site scripting almacenada en la función 'Crear nueva capa'. La entrada de usuario no saneada se incrusta en la salida HTML, permitiendo la ejecución arbitraria de JavaScript cuando se hace referencia a la capa.\n\nEste problema afecta a pdfonline.foxit.com: antes del 2026?02?03."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "14984358-7092-470d-8f34-ade47a7658a2",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "14984358-7092-470d-8f34-ade47a7658a2",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-02-03",
            "matchCriteriaId" : "C22F83B5-EAE7-4F85-A1DA-48617FB7E718"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxit.com/support/security-bulletins.html",
        "source" : "14984358-7092-470d-8f34-ade47a7658a2",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1730",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T08:16:15.180",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OS_DataHub_Maps_Admin::add_file_and_ext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
      }, {
        "lang" : "es",
        "value" : "El plugin OS DataHub Maps para WordPress es vulnerable a cargas de archivos arbitrarias debido a una validación incorrecta del tipo de archivo en la función 'OS_DataHub_Maps_Admin::add_file_and_ext' en todas las versiones hasta la 1.8.3, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel de Autor y superior, carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/os-datahub-maps/trunk/include/osmap-admin.php?rev=3449192#L51",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/os-datahub-maps/trunk/include/osmap-admin.php?rev=3449192#L67",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/os-datahub-maps/trunk/os-datahub-maps.php?rev=3449192#L87",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3452323/os-datahub-maps",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c32ba2a0-a9a7-4f17-8169-912cecc40b7b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1432",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-03T12:16:11.777",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APP_CODE=STA&PAGE_CODE=TABLON'. Exploiting this vulnerability could allow an attacker to execute queries on the database and gain access to confidential information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en la plataforma Buroweb versión 2505.0.12, específicamente en el componente 'tablon'. Esta vulnerabilidad está presente en varios parámetros que no sanean correctamente la entrada del usuario en el endpoint '/sta/CarpetaPublic/doEvent?APP_CODE=STA&amp;PAGE_CODE=TABLON'. Explotar esta vulnerabilidad podría permitir a un atacante ejecutar consultas en la base de datos y obtener acceso a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-sqli-buroweb-platform",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1664",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-02-03T12:16:11.953",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Summary\n\nAn Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function within the Cloudflare Agents SDK. The issue occurs because the `Message-ID` and `References` headers are parsed to derive the target agentName and agentId without proper validation or origin checks, allowing an external attacker with control of these headers to route inbound mail to arbitrary Durable Object instances and namespaces .\n\n\n\n\nRoot cause\n\nThe `createHeaderBasedEmailResolver()` function lacks cryptographic verification or origin validation for the headers used in the routing logic, effectively allowing external input to dictate internal object routing.\n\n\n\n\nImpact\n\nInsecure Direct Object Reference (IDOR) in email routing lets an attacker steer inbound mail to arbitrary Agent instances via spoofed Message-ID.\n\n\n\n\n\nMitigation:\n\n  *  PR:  https://github.com/cloudflare/agents/blob/main/docs/email.md ] provides the necessary architectural context for coding agents to mitigate the issue by refactoring the resolver to enforce strict identity boundaries.\n  *  Agents-sdk users should  upgrade to agents@0.3.7"
      }, {
        "lang" : "es",
        "value" : "Resumen\n\nSe ha encontrado una Referencia Directa Insegura a Objeto que existe en la función 'createHeaderBasedEmailResolver()' dentro del SDK de Cloudflare Agents. El problema ocurre porque los encabezados 'Message-ID' y 'References' se analizan para derivar el agentName y el agentId de destino sin la validación adecuada o comprobaciones de origen, permitiendo a un atacante externo con control de estos encabezados enrutar el correo entrante a instancias y espacios de nombres arbitrarios de Durable Object.\n\nCausa raíz\n\nLa función 'createHeaderBasedEmailResolver()' carece de verificación criptográfica o validación de origen para los encabezados utilizados en la lógica de enrutamiento, permitiendo efectivamente que la entrada externa dicte el enrutamiento interno de objetos.\n\nImpacto\n\nLa Referencia Directa Insegura a Objeto (IDOR) en el enrutamiento de correo electrónico permite a un atacante dirigir el correo entrante a instancias arbitrarias de Agent a través de un Message-ID falsificado.\n\nMitigación:\n\n  * PR: https://github.com/cloudflare/agents/blob/main/docs/email.md ] proporciona el contexto arquitectónico necesario para que los agentes de codificación mitiguen el problema refactorizando el resolvedor para hacer cumplir límites de identidad estrictos.\n  * Los usuarios del SDK de Agents deben actualizar a agents@0.3.7"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/agents",
        "source" : "cna@cloudflare.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1207",
      "sourceIdentifier" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
      "published" : "2026-02-03T15:16:13.433",
      "lastModified" : "2026-02-04T17:34:46.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\nRaster lookups on ``RasterField`` (only implemented on PostGIS) allows remote attackers to inject SQL via the band index parameter.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Tarek Nakkouch for reporting this issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en 6.0 antes de 6.0.2, 5.2 antes de 5.2.11 y 4.2 antes de 4.2.28.\nLas búsquedas de ráster en 'RasterField' (solo implementado en PostGIS) permiten a atacantes remotos inyectar SQL a través del parámetro de índice de banda.\nSeries de Django anteriores no soportadas (como 5.0.x, 4.1.x y 3.2.x) no fueron evaluadas y también pueden estar afectadas.\nDjango desea agradecer a Tarek Nakkouch por reportar este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.28",
            "matchCriteriaId" : "59566A1F-D2C5-43D6-97AA-258EFD90B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2.11",
            "matchCriteriaId" : "845BC013-1341-4D81-A5F1-507C814ABA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "4ACBCB7B-B8F4-4EEF-842D-0CCB8674BCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/dev/releases/security/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1285",
      "sourceIdentifier" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
      "published" : "2026-02-03T15:16:13.570",
      "lastModified" : "2026-02-04T17:09:01.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`django.utils.text.Truncator.chars()` and `Truncator.words()` methods (with `html=True`) and the `truncatechars_html` and `truncatewords_html` template filters allow a remote attacker to cause a potential denial-of-service via crafted inputs containing a large number of unmatched HTML end tags.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Seokchan Yoon for reporting this issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en 6.0 anterior a 6.0.2, 5.2 anterior a 5.2.11 y 4.2 anterior a 4.2.28.\nLos métodos 'django.utils.text.Truncator.chars()' y 'Truncator.words()' (con 'html=True') y los filtros de plantilla 'truncatechars_html' y 'truncatewords_html' permiten a un atacante remoto causar una potencial denegación de servicio mediante entradas manipuladas que contienen un gran número de etiquetas de cierre HTML no coincidentes.\nSeries de Django anteriores y sin soporte (como 5.0.x, 4.1.x y 3.2.x) no fueron evaluadas y también pueden verse afectadas.\nDjango desea agradecer a Seokchan Yoon por informar de este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.28",
            "matchCriteriaId" : "59566A1F-D2C5-43D6-97AA-258EFD90B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2.11",
            "matchCriteriaId" : "845BC013-1341-4D81-A5F1-507C814ABA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "4ACBCB7B-B8F4-4EEF-842D-0CCB8674BCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/dev/releases/security/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1287",
      "sourceIdentifier" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
      "published" : "2026-02-03T15:16:13.703",
      "lastModified" : "2026-02-04T17:35:11.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`FilteredRelation` is subject to SQL injection in column aliases via control characters, using a suitably crafted dictionary, with dictionary expansion, as the `**kwargs` passed to `QuerySet` methods `annotate()`, `aggregate()`, `extra()`, `values()`, `values_list()`, and `alias()`.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Solomon Kebede for reporting this issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en 6.0 anterior a 6.0.2, 5.2 anterior a 5.2.11 y 4.2 anterior a 4.2.28.\n'FilteredRelation' está sujeta a inyección SQL en alias de columna mediante caracteres de control, utilizando un diccionario adecuadamente elaborado, con expansión de diccionario, como los '**kwargs' pasados a los métodos de 'QuerySet' 'annotate()', 'aggregate()', 'extra()', 'values()', 'values_list()' y 'alias()'.\nSeries de Django anteriores y no compatibles (como 5.0.x, 4.1.x y 3.2.x) no fueron evaluadas y también pueden estar afectadas.\nDjango desea agradecer a Solomon Kebede por informar sobre este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.28",
            "matchCriteriaId" : "59566A1F-D2C5-43D6-97AA-258EFD90B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2.11",
            "matchCriteriaId" : "845BC013-1341-4D81-A5F1-507C814ABA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "4ACBCB7B-B8F4-4EEF-842D-0CCB8674BCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/dev/releases/security/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1312",
      "sourceIdentifier" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
      "published" : "2026-02-03T15:16:13.833",
      "lastModified" : "2026-02-04T17:35:02.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`.QuerySet.order_by()` is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in `FilteredRelation`.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Solomon Kebede for reporting this issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en 6.0 anterior a 6.0.2, 5.2 anterior a 5.2.11 y 4.2 anterior a 4.2.28.\n.QuerySet.order_by() está sujeto a inyección SQL en alias de columna que contienen puntos cuando el mismo alias es, utilizando un diccionario adecuadamente diseñado, con expansión de diccionario, usado en FilteredRelation.\nSeries de Django anteriores y no compatibles (como 5.0.x, 4.1.x y 3.2.x) no fueron evaluadas y también pueden verse afectadas.\nDjango desea agradecer a Solomon Kebede por informar de este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.28",
            "matchCriteriaId" : "59566A1F-D2C5-43D6-97AA-258EFD90B937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2.11",
            "matchCriteriaId" : "845BC013-1341-4D81-A5F1-507C814ABA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "4ACBCB7B-B8F4-4EEF-842D-0CCB8674BCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/dev/releases/security/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1814",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2026-02-03T15:16:14.137",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Nexpose versions 6.4.50 and later are vulnerable to an insufficient entropy issue in the CredentialsKeyStorePassword.generateRandomPassword() method. When updating legacy keystore passwords, the application generates a new password with insufficient length (7-12 characters) and a static prefix 'p', resulting in a weak keyspace. An attacker with access to the nsc.ks file can brute-force this password using consumer-grade hardware to decrypt stored credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido identificada en Rapid7 Nexpose. La remediación está en progreso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.atredis.com/disclosure",
        "source" : "cve@rapid7.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24938",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:15.130",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better Search: from n/a through <= 4.2.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Ajay Better Search better-search permite XSS Almacenado. Este problema afecta a Better Search: desde n/a hasta &lt;= 4.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/better-search/vulnerability/wordpress-better-search-plugin-4-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24939",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:15.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through <= 2.13.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en WP Chill Modula Image Gallery modula-best-grid-gallery permite explotar niveles de seguridad de control de acceso mal configurados. Este problema afecta a Modula Image Gallery: desde n/a hasta &lt;= 2.13.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/modula-best-grid-gallery/vulnerability/wordpress-modula-image-gallery-plugin-2-13-6-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24940",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:15.477",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Themefic Travelfic Toolkit travelfic-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelfic Toolkit: from n/a through <= 1.3.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Themefic Travelfic Toolkit travelfic-toolkit permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Travelfic Toolkit: desde n/a hasta &lt;= 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/travelfic-toolkit/vulnerability/wordpress-travelfic-toolkit-plugin-1-3-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24942",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:15.613",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1.1."
      }, {
        "lang" : "es",
        "value" : "Falsificación de petición en sitios cruzados (CSRF) vulnerabilidad en magepeopleteam WpEvently mage-eventpress permite la falsificación de petición en sitios cruzados. Este problema afecta a WpEvently: desde n/a hasta &lt;= 5.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-5-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24945",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:15.750",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a through <= 3.5.34."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en Themefic Ultimate Addons para Contact Form 7 ultimate-addons-for-contact-form-7 permite Explotar Niveles de Seguridad de Control de Acceso Configurados Incorrectamente. Este problema afecta a Ultimate Addons para Contact Form 7: desde n/a hasta &lt;= 3.5.34."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ultimate-addons-for-contact-form-7/vulnerability/wordpress-ultimate-addons-for-contact-form-7-plugin-3-5-34-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24947",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:15.880",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through < 1.5.6.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en LA-Studio LA-Studio Element Kit para Elementor lastudio-element-kit permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a LA-Studio Element Kit para Elementor: desde n/a hasta &lt; 1.5.6.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/lastudio-element-kit/vulnerability/wordpress-la-studio-element-kit-for-elementor-plugin-1-5-6-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24951",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en Saad Iqbal myCred mycred permite la explotación de niveles de seguridad de Control de acceso configurados incorrectamente. Este problema afecta a myCred: desde n/a hasta &lt;= 2.9.7.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mycred/vulnerability/wordpress-mycred-plugin-2-9-7-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24952",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.153",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting permite XSS Almacenado. Este problema afecta a Seriously Simple Podcasting: desde n/a hasta &lt;= 3.14.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-14-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24954",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.280",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.0.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en magepeopleteam WpEvently mage-eventpress permite la inyección de objetos. Este problema afecta a WpEvently: desde n/a hasta &lt;= 5.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-5-0-8-deserialization-of-untrusted-data-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24957",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.423",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through <= 3.2.20."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en WP Chill Strong Testimonials strong-testimonials permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Strong Testimonials: desde n/a hasta &lt;= 3.2.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/strong-testimonials/vulnerability/wordpress-strong-testimonials-plugin-3-2-20-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24958",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.550",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.12.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Crocoblock JetElements For Elementor jet-elements permite XSS basado en DOM. Este problema afecta a JetElements For Elementor: desde n/a hasta &lt;= 2.7.12.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-7-12-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24961",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.683",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Server Side Request Forgery.This issue affects Grand Blog: from n/a through < 3.1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en ThemeGoods Grand Blog grandblog permite la falsificación de petición del lado del servidor. Este problema afecta a Grand Blog: desde n/a hasta &lt; 3.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/grandblog/vulnerability/wordpress-grand-blog-theme-3-1-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24962",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.820",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Sigmize sigmize allows Cross Site Request Forgery.This issue affects Sigmize: from n/a through <= 0.0.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Brainstorm Force Sigmize sigmize permite la falsificación de petición en sitios cruzados. Este problema afecta a Sigmize: desde n/a hasta &lt;= 0.0.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sigmize/vulnerability/wordpress-sigmize-plugin-0-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24965",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:16.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through <= 28.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Wasiliy Strecker / desarrollador de ContestGallery Contest Gallery contest-gallery permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Contest Gallery: desde n/a hasta &lt;= 28.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/contest-gallery/vulnerability/wordpress-contest-gallery-plugin-28-1-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24966",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.100",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Copyscape Copyscape Premium copyscape-premium allows Cross Site Request Forgery.This issue affects Copyscape Premium: from n/a through <= 1.4.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Copyscape Copyscape Premium copyscape-premium permite la falsificación de petición en sitios cruzados. Este problema afecta a Copyscape Premium: desde n/a hasta &lt;= 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/copyscape-premium/vulnerability/wordpress-copyscape-premium-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24967",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.233",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ameliabooking Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through <= 1.2.38."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en ameliabooking Amelia ameliabooking permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Amelia: desde n/a hasta &lt;= 1.2.38."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-1-2-38-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24982",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.373",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through <= 2.19.17."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Brainstorm Force Spectra ultimate-addons-for-gutenberg permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Spectra: desde n/d hasta &lt;= 2.19.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-19-17-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24984",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Link Preview: from n/a through <= 2.2.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Brecht Visual Link Preview visual-link-preview permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Visual Link Preview: desde n/a hasta &lt;= 2.2.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/visual-link-preview/vulnerability/wordpress-visual-link-preview-plugin-2-2-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24985",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.653",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Forms Signature Contract Add-On: from n/a through <= 1.8.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Forms Signature Contract Add-On: desde n/a hasta &lt;= 1.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-forms-signature-contract-add-on/vulnerability/wordpress-wp-forms-signature-contract-add-on-plugin-1-8-2-broken-access-control-to-notice-dismissal-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24986",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through <= 1.9.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en wp.insider Simple Membership WP user Import simple-membership-wp-user-import permite la falsificación de petición en sitios cruzados. Este problema afecta a Simple Membership WP user Import: desde n/a hasta &lt;= 1.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/simple-membership-wp-user-import/vulnerability/wordpress-simple-membership-wp-user-import-plugin-1-9-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24988",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:17.957",
      "lastModified" : "2026-04-28T19:36:56.387",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Events Calendar Shortcode & Block the-events-calendar-shortcode allows Stored XSS.This issue affects The Events Calendar Shortcode & Block: from n/a through <= 3.1.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Brian Hogg The Events Calendar Shortcode &amp; Block the-events-calendar-shortcode permite XSS Almacenado. Este problema afecta a The Events Calendar Shortcode &amp; Block: desde n/a hasta &lt;= 3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/the-events-calendar-shortcode/vulnerability/wordpress-the-events-calendar-shortcode-block-plugin-3-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24990",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.107",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through <= 2.2.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Fahad Mahmood WP Docs wp-docs permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Docs: desde n/a hasta &lt;= 2.2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-docs/vulnerability/wordpress-wp-docs-plugin-2-2-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24991",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.237",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extensions For CF7: from n/a through <= 3.4.0."
      }, {
        "lang" : "es",
        "value" : "Omisión de autorización a través de clave controlada por el usuario vulnerabilidad en HT Plugins Extensions For CF7 extensions-for-cf7 permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Extensions For CF7: desde n/a hasta &lt;= 3.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/extensions-for-cf7/vulnerability/wordpress-extensions-for-cf7-plugin-3-4-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24992",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.367",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Retrieve Embedded Sensitive Data.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through <= 4.1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inserción de Información Sensible en Datos Enviados en WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Advanced WooCommerce Product Sales Reporting: desde n/a hasta &lt;= 4.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/webd-woocommerce-advanced-reporting-statistics/vulnerability/wordpress-advanced-woocommerce-product-sales-reporting-plugin-4-1-2-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24994",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.510",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por Autorización Ausente en sunshinephotocart Sunshine Photo Cart sunshine-photo-cart permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Sunshine Photo Cart: desde n/a hasta &lt;= 3.5.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sunshine-photo-cart/vulnerability/wordpress-sunshine-photo-cart-plugin-3-5-7-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24995",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.643",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Latest Post Shortcode: from n/a through <= 14.2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Iulia Cazan Latest Post Shortcode latest-post-shortcode permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Latest Post Shortcode: desde n/a hasta &lt;= 14.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/latest-post-shortcode/vulnerability/wordpress-latest-post-shortcode-plugin-14-2-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24996",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wpelemento WPElemento Importer wpelemento-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPElemento Importer: from n/a through <= 0.6.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en wpelemento WPElemento Importer wpelemento-importer permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WPElemento Importer: desde n/a hasta &lt;= 0.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpelemento-importer/vulnerability/wordpress-wpelemento-importer-plugin-0-6-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24997",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:18.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Wired Impact Wired Impact Volunteer Management wired-impact-volunteer-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wired Impact Volunteer Management: from n/a through <= 2.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en Wired Impact Wired Impact Volunteer Management wired-impact-volunteer-management permite Explotar Niveles de Seguridad de Control de Acceso Mal Configurados. Este problema afecta a Wired Impact Volunteer Management: desde n/a hasta &lt;= 2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wired-impact-volunteer-management/vulnerability/wordpress-wired-impact-volunteer-management-plugin-2-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24998",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.043",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through <= 7.8.9.2."
      }, {
        "lang" : "es",
        "value" : "Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada vulnerabilidad en WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Hustle: desde n/a hasta &lt;= 7.8.9.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wordpress-popup/vulnerability/wordpress-hustle-plugin-7-8-9-2-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25010",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.180",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through <= 2.09."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en ILLID Share This Image share-this-image permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Share This Image: desde n/a hasta &lt;= 2.09."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/share-this-image/vulnerability/wordpress-share-this-image-plugin-2-09-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25011",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.323",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through <= 7.41."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Custom Admin Interface: desde n/a hasta &lt;= 7.41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-custom-admin-interface/vulnerability/wordpress-wp-custom-admin-interface-plugin-7-41-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25012",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.470",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bannerize Pro: from n/a through <= 1.11.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en gfazioli WP Bannerize Pro wp-bannerize-pro permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a WP Bannerize Pro: desde n/a hasta &lt;= 1.11.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-bannerize-pro/vulnerability/wordpress-wp-bannerize-pro-plugin-1-11-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25014",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.607",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery.This issue affects Enter Addons: from n/a through <= 2.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en themelooks Enter Addons enteraddons permite la falsificación de petición en sitios cruzados. Este problema afecta a Enter Addons: desde n/a hasta &lt;= 2.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/enteraddons/vulnerability/wordpress-enter-addons-plugin-2-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25015",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.737",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.53."
      }, {
        "lang" : "es",
        "value" : "Falsificación de petición en sitios cruzados (CSRF) vulnerabilidad en Stiofan UsersWP userswp permite falsificación de petición en sitios cruzados. Este problema afecta a UsersWP: desde n/a hasta &lt;= 1.2.53."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/userswp/vulnerability/wordpress-userswp-plugin-1-2-53-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25016",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:19.877",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through <= 1.3.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Nelio Software Nelio Popups nelio-popups permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Nelio Popups: desde n/a hasta &lt;= 1.3.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/nelio-popups/vulnerability/wordpress-nelio-popups-plugin-1-3-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25019",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:20.063",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through <= 4.3.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Vito Peleg Atarim atarim-visual-collaboration permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Atarim: desde n/a hasta &lt;= 4.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-3-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25020",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:20.197",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through <= 1.7.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP connect WP Sync for Notion wp-sync-for-notion permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Sync for Notion: desde n/a hasta &lt;= 1.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-sync-for-notion/vulnerability/wordpress-wp-sync-for-notion-plugin-1-7-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25021",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:20.380",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Mizan Themes Mizan Demo Importer mizan-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mizan Demo Importer: from n/a through <= 0.1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en Mizan Themes Mizan Demo Importer mizan-demo-importer permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Mizan Demo Importer: desde n/a hasta &lt;= 0.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mizan-demo-importer/vulnerability/wordpress-mizan-demo-importer-plugin-0-1-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25022",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:20.523",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Blind SQL Injection.This issue affects KiviCare: from n/a through <= 3.6.16."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Inadecuada de Elementos Especiales utilizados en un Comando SQL ('inyección SQL') en Iqonic Design KiviCare kivicare-clinic-management-system permite inyección SQL ciega. Este problema afecta a KiviCare: desde n/d hasta &lt;= 3.6.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/kivicare-clinic-management-system/vulnerability/wordpress-kivicare-plugin-3-6-16-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25023",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:20.710",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Retrieve Embedded Sensitive Data.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through <= 2.0.7."
      }, {
        "lang" : "es",
        "value" : "Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada vulnerabilidad en mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Run Contests, Raffles, y Giveaways con ContestsWP: desde n/a hasta &lt;= 2.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/contest-code-checker/vulnerability/wordpress-run-contests-raffles-and-giveaways-with-contestswp-plugin-2-0-7-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25024",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:20.847",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Blair Williams ThirstyAffiliates thirstyaffiliates allows Cross Site Request Forgery.This issue affects ThirstyAffiliates: from n/a through <= 3.11.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Blair Williams ThirstyAffiliates thirstyaffiliates permite la falsificación de petición en sitios cruzados. Este problema afecta a ThirstyAffiliates: desde n/a hasta &lt;= 3.11.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/thirstyaffiliates/vulnerability/wordpress-thirstyaffiliates-plugin-3-11-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25027",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:21.030",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP Local File Inclusion.This issue affects Unicamp: from n/a through <= 2.7.1."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en ThemeMove Unicamp unicamp permite la inclusión local de ficheros PHP. Este problema afecta a Unicamp: desde n/a hasta &lt;= 2.7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/unicamp/vulnerability/wordpress-unicamp-theme-2-7-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25028",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:21.163",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por Autorización Faltante en Element Invader ElementInvader Addons para Elementor elementinvader-addons-for-elementor permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a ElementInvader Addons para Elementor: desde n/a hasta &lt;= 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/elementinvader-addons-for-elementor/vulnerability/wordpress-elementinvader-addons-for-elementor-plugin-1-4-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25036",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-03T15:16:21.293",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through <= 4.2.25."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en el protector de contenido WP Chill Passster permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Passster: desde n/a hasta &lt;= 4.2.25."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/content-protector/vulnerability/wordpress-passster-plugin-4-2-25-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21862",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T16:16:12.753",
      "lastModified" : "2026-02-23T20:26:41.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: get_condition_values trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy IP-allowlist policies. This issue has been patched in version alpha.78."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. Antes de la versión alpha.78, el control de acceso basado en IP puede ser eludido: get_condition_values confía en X-Forwarded-For/X-Real-Ip suministrados por el cliente sin verificar un proxy de confianza, por lo que cualquier cliente accesible puede falsificar aws:SourceIp y satisfacer las políticas de lista de permitidos de IP. Este problema ha sido parcheado en la versión alpha.78."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha1:*:*:*:rust:*:*",
            "matchCriteriaId" : "454A2F3A-76CF-4F2D-97FE-AEDEBE8FF1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha10:*:*:*:rust:*:*",
            "matchCriteriaId" : "32B2D146-7920-4C6D-B42F-1BDDF5193394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha11:*:*:*:rust:*:*",
            "matchCriteriaId" : "B25BC365-35BA-438A-B5B1-3FA696767821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha12:*:*:*:rust:*:*",
            "matchCriteriaId" : "B69213F1-7D94-4185-9309-FF3140733550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD2476D6-257C-4A96-BED4-D8B002402242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*",
            "matchCriteriaId" : "774EC64C-73ED-4D6B-893B-30A066DA934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B567F4F-131F-4D4B-8C0C-9212F22F2BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*",
            "matchCriteriaId" : "711F7641-A2B2-410B-B05D-6656F9A1798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB79AC62-2B79-441C-BC09-4C834C32EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*",
            "matchCriteriaId" : "62DE84EE-9F3B-460A-AC13-D2B8CCBC5B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*",
            "matchCriteriaId" : "DEF70599-6550-49D2-9800-FE3249A66568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha2:*:*:*:rust:*:*",
            "matchCriteriaId" : "550786BD-A6A4-454B-BDAB-67AE64DABCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDFE93A5-B6D7-482A-A891-4D8844604C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*",
            "matchCriteriaId" : "79AC4F00-B006-46C2-863F-2946BB02B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*",
            "matchCriteriaId" : "E313A243-ED56-498D-988F-E088693EBB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*",
            "matchCriteriaId" : "D3A60CB7-1F01-4A60-8555-C225AC89B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*",
            "matchCriteriaId" : "1C98618D-CF5D-406B-8AA5-34B412F3D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*",
            "matchCriteriaId" : "98373960-FEDB-4933-92D5-2A597045DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*",
            "matchCriteriaId" : "83E0E1A5-3C07-45FF-80FD-0DB375E1575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*",
            "matchCriteriaId" : "C2D66076-4005-4F58-A8E2-69062053D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*",
            "matchCriteriaId" : "1D8CB0F5-299F-4BB0-B264-F5642DD991C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*",
            "matchCriteriaId" : "96E20418-FE0C-4202-8771-FFF8EBB1B62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha3:*:*:*:rust:*:*",
            "matchCriteriaId" : "C16A625B-3FC4-48EB-9107-6E7585080D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*",
            "matchCriteriaId" : "810A17F9-AEEA-4396-B437-120789BBE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*",
            "matchCriteriaId" : "7B1FECD4-E993-417D-AEA7-F8E97DC6A5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*",
            "matchCriteriaId" : "3839F299-E0E7-4994-A8AC-B67A534C9847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*",
            "matchCriteriaId" : "46CAEA4E-5DFD-4668-ABF0-DC53EB04EE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*",
            "matchCriteriaId" : "591075AB-81EF-4D42-A2A0-FA28BC6B78CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*",
            "matchCriteriaId" : "FD46ED07-6DCC-4BF8-A4E8-78B2FF6DCE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*",
            "matchCriteriaId" : "6DF15533-D6E1-49B0-B30A-6FEECC7AE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*",
            "matchCriteriaId" : "EC68F03A-D299-4BFB-A99E-4B08E4E0848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*",
            "matchCriteriaId" : "0DD60024-CAB2-4DA6-A9CA-503D2631E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*",
            "matchCriteriaId" : "32470ED0-7873-41A3-B2D5-7CD444ED0A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha4:*:*:*:rust:*:*",
            "matchCriteriaId" : "A88E9293-4B7C-4C52-9943-47197DB55D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*",
            "matchCriteriaId" : "E2EFC74D-40E7-426C-9F7B-3B654F2B940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*",
            "matchCriteriaId" : "EAAF504E-51A5-492B-887E-BB67788B899C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*",
            "matchCriteriaId" : "35C83244-D2C7-4D70-9C0B-D0590B00C608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*",
            "matchCriteriaId" : "429E4ECD-997A-4D3B-9DE2-60835AE14473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*",
            "matchCriteriaId" : "5DDDBAA5-D207-498C-A6F0-79F07806C511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*",
            "matchCriteriaId" : "81758B85-6D2B-4914-96EC-E4CCDE2F9A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*",
            "matchCriteriaId" : "D439B484-E32D-4A6A-84EE-9307A028F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDA137F7-DC8A-44F4-8061-F502AC8DD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*",
            "matchCriteriaId" : "AE3EF7B3-E8C0-4844-9165-3A26EB426615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB40D926-AE20-46A7-9B6E-ED1BADB9A08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha5:*:*:*:rust:*:*",
            "matchCriteriaId" : "7F5E8DE5-ABB0-4884-B473-07FA596A8707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*",
            "matchCriteriaId" : "3A43A950-59A6-4343-815A-953C11DC3F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B36190-C30B-45BC-9738-BE0B3321025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*",
            "matchCriteriaId" : "86A2967C-E2C6-4C73-9BDE-CCECACDB2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*",
            "matchCriteriaId" : "5E10A654-E265-4469-8099-ABBB1F5D8BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*",
            "matchCriteriaId" : "762591A8-A0A2-45D2-B15F-1E85DFC5CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*",
            "matchCriteriaId" : "53DE196C-1914-40AE-854D-4988073D57C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha6:*:*:*:rust:*:*",
            "matchCriteriaId" : "2B55C391-0232-4F06-A9D8-3663FA564E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha7:*:*:*:rust:*:*",
            "matchCriteriaId" : "54AB158B-F536-4627-8C6B-65AEE112FDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha8:*:*:*:rust:*:*",
            "matchCriteriaId" : "F800AEB3-3AD7-42D8-BC3A-23703851435B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha9:*:*:*:rust:*:*",
            "matchCriteriaId" : "5821FADC-CF73-4639-911A-F3302D239B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-fc6g-2gcp-2qrq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23794",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-03T16:16:13.183",
      "lastModified" : "2026-02-06T14:44:43.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS in Apache Syncope's Enduser Login page.\nAn attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user's credentials.\n\nThis issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.\n\nUsers are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue."
      }, {
        "lang" : "es",
        "value" : "XSS Reflejado en la página de inicio de sesión de usuario final de Apache Syncope.\nUn atacante que engaña a un usuario legítimo para que haga clic en un enlace malicioso y se conecte a Syncope Enduser podría robar las credenciales de ese usuario.\n\nEste problema afecta a Apache Syncope: desde la 3.0 hasta la 3.0.15, desde la 4.0 hasta la 4.0.3.\n\nSe recomienda a los usuarios actualizar a la versión 3.0.16 / 4.0.4, que corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:syncope:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "E48D90FB-E49B-4FD5-B184-3049D3087635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:syncope:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "877C8861-D17C-4BBE-A0C0-E3FDACB7CF9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/7h30ghqdsf3spl3h7gdmscxofrm8ygjo",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23795",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-03T16:16:13.390",
      "lastModified" : "2026-02-06T14:43:16.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of XML External Entity Reference vulnerability in Apache Syncope Console.\nAn administrator with adequate entitlements to create or edit Keymaster parameters via Console can construct malicious XML text to launch an XXE attack, thereby causing sensitive data leakage occurs.\n\nThis issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.\n\nUsers are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de restricción indebida de referencia a entidad externa XML en la Consola de Apache Syncope.\nUn administrador con los permisos adecuados para crear o editar parámetros de Keymaster a través de la Consola puede construir texto XML malicioso para lanzar un ataque XXE, causando así una fuga de datos sensibles.\n\nEste problema afecta a Apache Syncope: desde la 3.0 hasta la 3.0.15, desde la 4.0 hasta la 4.0.3.\n\nSe recomienda a los usuarios actualizar a la versión 3.0.16 / 4.0.4, que solucionan este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:syncope:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "E48D90FB-E49B-4FD5-B184-3049D3087635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:syncope:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "877C8861-D17C-4BBE-A0C0-E3FDACB7CF9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/mzgbdn8hzk8vr94o660njcc7w62c2pos",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/02/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24762",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T16:16:14.057",
      "lastModified" : "2026-02-23T18:18:34.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. From versions alpha.13 to alpha.81, RustFS logs sensitive credential material (access key, secret key, session token) to application logs at INFO level. This results in credentials being recorded in plaintext in log output, which may be accessible to internal or external log consumers and could lead to compromise of sensitive credentials. This issue has been patched in version alpha.82."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. Desde las versiones alpha.13 hasta alpha.81, RustFS registra material de credenciales sensible (clave de acceso, clave secreta, token de sesión) en los logs de la aplicación a nivel INFO. Esto resulta en que las credenciales se registren en texto plano en la salida de los logs, lo cual puede ser accesible para consumidores de logs internos o externos y podría llevar al compromiso de credenciales sensibles. Este problema ha sido parcheado en la versión alpha.82."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD2476D6-257C-4A96-BED4-D8B002402242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*",
            "matchCriteriaId" : "774EC64C-73ED-4D6B-893B-30A066DA934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B567F4F-131F-4D4B-8C0C-9212F22F2BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*",
            "matchCriteriaId" : "711F7641-A2B2-410B-B05D-6656F9A1798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB79AC62-2B79-441C-BC09-4C834C32EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*",
            "matchCriteriaId" : "62DE84EE-9F3B-460A-AC13-D2B8CCBC5B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*",
            "matchCriteriaId" : "DEF70599-6550-49D2-9800-FE3249A66568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDFE93A5-B6D7-482A-A891-4D8844604C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*",
            "matchCriteriaId" : "79AC4F00-B006-46C2-863F-2946BB02B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*",
            "matchCriteriaId" : "E313A243-ED56-498D-988F-E088693EBB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*",
            "matchCriteriaId" : "D3A60CB7-1F01-4A60-8555-C225AC89B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*",
            "matchCriteriaId" : "1C98618D-CF5D-406B-8AA5-34B412F3D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*",
            "matchCriteriaId" : "98373960-FEDB-4933-92D5-2A597045DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*",
            "matchCriteriaId" : "83E0E1A5-3C07-45FF-80FD-0DB375E1575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*",
            "matchCriteriaId" : "C2D66076-4005-4F58-A8E2-69062053D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*",
            "matchCriteriaId" : "1D8CB0F5-299F-4BB0-B264-F5642DD991C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*",
            "matchCriteriaId" : "96E20418-FE0C-4202-8771-FFF8EBB1B62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*",
            "matchCriteriaId" : "810A17F9-AEEA-4396-B437-120789BBE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*",
            "matchCriteriaId" : "7B1FECD4-E993-417D-AEA7-F8E97DC6A5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*",
            "matchCriteriaId" : "3839F299-E0E7-4994-A8AC-B67A534C9847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*",
            "matchCriteriaId" : "46CAEA4E-5DFD-4668-ABF0-DC53EB04EE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*",
            "matchCriteriaId" : "591075AB-81EF-4D42-A2A0-FA28BC6B78CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*",
            "matchCriteriaId" : "FD46ED07-6DCC-4BF8-A4E8-78B2FF6DCE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*",
            "matchCriteriaId" : "6DF15533-D6E1-49B0-B30A-6FEECC7AE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*",
            "matchCriteriaId" : "EC68F03A-D299-4BFB-A99E-4B08E4E0848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*",
            "matchCriteriaId" : "0DD60024-CAB2-4DA6-A9CA-503D2631E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*",
            "matchCriteriaId" : "32470ED0-7873-41A3-B2D5-7CD444ED0A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*",
            "matchCriteriaId" : "E2EFC74D-40E7-426C-9F7B-3B654F2B940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*",
            "matchCriteriaId" : "EAAF504E-51A5-492B-887E-BB67788B899C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*",
            "matchCriteriaId" : "35C83244-D2C7-4D70-9C0B-D0590B00C608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*",
            "matchCriteriaId" : "429E4ECD-997A-4D3B-9DE2-60835AE14473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*",
            "matchCriteriaId" : "5DDDBAA5-D207-498C-A6F0-79F07806C511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*",
            "matchCriteriaId" : "81758B85-6D2B-4914-96EC-E4CCDE2F9A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*",
            "matchCriteriaId" : "D439B484-E32D-4A6A-84EE-9307A028F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDA137F7-DC8A-44F4-8061-F502AC8DD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*",
            "matchCriteriaId" : "AE3EF7B3-E8C0-4844-9165-3A26EB426615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB40D926-AE20-46A7-9B6E-ED1BADB9A08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*",
            "matchCriteriaId" : "3A43A950-59A6-4343-815A-953C11DC3F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B36190-C30B-45BC-9738-BE0B3321025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*",
            "matchCriteriaId" : "86A2967C-E2C6-4C73-9BDE-CCECACDB2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*",
            "matchCriteriaId" : "5E10A654-E265-4469-8099-ABBB1F5D8BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*",
            "matchCriteriaId" : "762591A8-A0A2-45D2-B15F-1E85DFC5CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*",
            "matchCriteriaId" : "53DE196C-1914-40AE-854D-4988073D57C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*",
            "matchCriteriaId" : "96461CC0-012C-40D7-B1CB-FF9A6B7EB644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha79:*:*:*:rust:*:*",
            "matchCriteriaId" : "9AA7AE2E-83E3-4796-8569-16030DB2CF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha80:*:*:*:rust:*:*",
            "matchCriteriaId" : "73638EAF-BCA6-4BD8-90E5-3A53EFD0FD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha81:*:*:*:rust:*:*",
            "matchCriteriaId" : "48BCB4A7-57C5-4FAA-860D-B862947EE352"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-r54g-49rx-98cr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1568",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2026-02-03T17:15:59.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 InsightVM versions before 8.34.0 contain a signature verification issue on the Assertion Consumer Service (ACS) cloud endpoint that could allow an attacker to gain unauthorized access to InsightVM accounts setup\nvia \"Security Console\" installations, resulting in full account takeover. The issue occurs due to the application processing these unsigned assertions and issuing session cookies that granted access to the\ntargeted user accounts. This has been fixed in version 8.34.0 of InsightVM."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Rapid7 InsightVM anteriores a la 8.34.0 contienen un problema de verificación de firma en el endpoint en la nube del Servicio de Consumidor de Aserciones (ACS) que podría permitir a un atacante obtener acceso no autorizado a cuentas de InsightVM configuradas a través de instalaciones de 'Security Console', lo que resulta en una toma de control total de la cuenta. El problema ocurre debido a que la aplicación procesa estas aserciones sin firmar y emite cookies de sesión que otorgaban acceso a las cuentas de usuario objetivo. Esto ha sido corregido en la versión 8.34.0 de InsightVM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rapid7.com/insight/command-platform-release-notes/",
        "source" : "cve@rapid7.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22220",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-03T18:16:19.077",
      "lastModified" : "2026-02-13T19:26:51.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A lack of proper input validation in the HTTP processing path in TP-Link Archer BE230 v1.2 (web modules) may allow a crafted request to cause the device’s web service to become unresponsive, resulting in a denial of service condition. A network adjacent attacker with high privileges could cause the device’s web interface to temporarily stop responding until it recovers or is rebooted.\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Una falta de validación de entrada adecuada en la ruta de procesamiento HTTP en TP-Link Archer BE230 v1.2 (módulos web) puede permitir que una solicitud manipulada cause que el servicio web del dispositivo deje de responder, lo que resulta en una condición de denegación de servicio. Un atacante adyacente a la red con privilegios elevados podría causar que la interfaz web del dispositivo deje de responder temporalmente hasta que se recupere o se reinicie.\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4941/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22228",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-03T18:16:19.227",
      "lastModified" : "2026-02-13T19:25:43.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated user with high privileges may trigger a denial‑of‑service condition in TP-Link Archer BE230 v1.2 by restoring a crafted configuration file containing an excessively long parameter. Restoring such a file can cause the device to become unresponsive, requiring a reboot to restore normal operation.\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420."
      }, {
        "lang" : "es",
        "value" : "Un usuario autenticado con privilegios elevados puede desencadenar una condición de denegación de servicio en el TP-Link Archer BE230 v1.2 al restaurar un archivo de configuración manipulado que contiene un parámetro excesivamente largo. La restauración de dicho archivo puede hacer que el dispositivo deje de responder, lo que requiere un reinicio para restaurar el funcionamiento normal.\nEste problema afecta a Archer BE230 v1.2 &lt; 1.2.4 Build 20251218 rel.70420."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "F5BA03F6-BE09-4124-9B70-32BE881EDB09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2619D728-00BA-47E8-AC08-F682A7E82578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4941/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24664",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:19.377",
      "lastModified" : "2026-02-10T18:49:05.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a username enumeration vulnerability allows unauthenticated attackers to identify valid user accounts by analyzing differences in the login response behavior. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de enumeración de nombres de usuario permite a atacantes no autenticados identificar cuentas de usuario válidas analizando diferencias en el comportamiento de la respuesta de inicio de sesión. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-c3wq-m629-5h2j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24665",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:19.543",
      "lastModified" : "2026-02-10T18:48:23.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting (XSS) vulnerability allows authenticated students to inject malicious JavaScript into uploaded assignment files, which is executed when instructors view the submission. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de cross-site scripting (XSS) almacenado permite a los estudiantes autenticados inyectar JavaScript malicioso en los archivos de tareas subidos, que se ejecuta cuando los instructores ven la entrega. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-2qgm-m7fm-m888",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24666",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:19.690",
      "lastModified" : "2026-02-10T18:47:52.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery (CSRF) vulnerability in multiple teacher-restricted endpoints allows attackers to induce authenticated teachers to perform unintended actions, such as modifying assignment grades, via crafted requests. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en múltiples puntos finales restringidos para profesores permite a los atacantes inducir a profesores autenticados a realizar acciones no intencionadas, como modificar las calificaciones de las tareas, a través de peticiones manipuladas. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-cgmh-73qg-28fm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24667",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:19.917",
      "lastModified" : "2026-02-10T18:35:19.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to invalidate active user sessions after a password change allows existing session tokens to remain valid, potentially enabling unauthorized continued access to user accounts. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, la falta de invalidación de las sesiones de usuario activas después de un cambio de contraseña permite que los tokens de sesión existentes sigan siendo válidos, lo que podría permitir el acceso continuado no autorizado a las cuentas de usuario. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-5h73-53mh-m224",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24668",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:21.610",
      "lastModified" : "2026-02-10T18:32:55.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated students to add content to existing course units, an action normally restricted to higher-privileged roles. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de control de acceso roto permite a los estudiantes autenticados añadir contenido a unidades de curso existentes, una acción normalmente restringida a roles con mayores privilegios. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-22cq-9fr7-fq6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24669",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:21.820",
      "lastModified" : "2026-02-10T18:31:05.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecure password reset mechanism allows local attackers to reuse a valid password reset token after it has already been used, enabling unauthorized password changes and potential account takeover. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, un mecanismo inseguro de restablecimiento de contraseña permite a atacantes locales reutilizar un token válido de restablecimiento de contraseña después de que ya ha sido utilizado, posibilitando cambios de contraseña no autorizados y una posible toma de control de la cuenta. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-gcqq-fxw6-f866",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24670",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:22.067",
      "lastModified" : "2026-02-10T18:22:04.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated students to create new course units, an action normally restricted to higher-privileged roles. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de control de acceso roto permite a los estudiantes autenticados crear nuevas unidades de curso, una acción normalmente restringida a roles con mayores privilegios. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-4jf5-636r-hv9v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24671",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:23.720",
      "lastModified" : "2026-02-10T18:21:25.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated high-privileged users (teachers or administrators) to inject malicious JavaScript into multiple user-controllable input fields across the application, which is executed when other users access affected pages. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de cross-site scripting almacenado (XSS) permite a usuarios autenticados con altos privilegios (profesores o administradores) inyectar JavaScript malicioso en múltiples campos de entrada controlables por el usuario en toda la aplicación, que se ejecuta cuando otros usuarios acceden a las páginas afectadas. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-2x83-4fh2-fcw7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24672",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:23.870",
      "lastModified" : "2026-02-10T18:20:55.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated students to inject malicious JavaScript into user profile fields, which is executed when users with viewing privileges access affected application pages. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de cross-site scripting (XSS) almacenado permite a estudiantes autenticados inyectar JavaScript malicioso en campos de perfil de usuario, que se ejecuta cuando usuarios con privilegios de visualización acceden a páginas afectadas de la aplicación. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-3p2x-qgxw-qvxh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24673",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:24.023",
      "lastModified" : "2026-02-10T17:32:26.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the application’s built-in decompression functionality. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de omisión de validación de carga de archivos permite a los atacantes cargar archivos con extensiones prohibidas incrustándolos dentro de archivos ZIP y extrayéndolos usando la funcionalidad de descompresión incorporada de la aplicación. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-3g4j-56gp-v6wv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24674",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:24.173",
      "lastModified" : "2026-02-10T17:26:57.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Scripting (XSS) vulnerability allows remote attackers to execute arbitrary JavaScript in the context of authenticated users by crafting malicious URLs and tricking victims into visiting them. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de cross-site scripting (XSS) reflejado permite a atacantes remotos ejecutar JavaScript arbitrario en el contexto de usuarios autenticados mediante la creación de URL maliciosas y engañando a las víctimas para que las visiten. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-gqvp-w22w-w99r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24773",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:24.373",
      "lastModified" : "2026-02-10T17:25:21.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Reference (IDOR) vulnerability allows unauthenticated remote attackers to access personal files of other users by directly requesting predictable user identifiers. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de Referencia Directa Insegura a Objeto (IDOR) permite a atacantes remotos no autenticados acceder a archivos personales de otros usuarios solicitando directamente identificadores de usuario predecibles. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-63pm-pff4-xc9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24774",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T18:16:24.520",
      "lastModified" : "2026-02-10T17:24:23.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by directly accessing a crafted URL. This issue has been patched in version 4.2."
      }, {
        "lang" : "es",
        "value" : "La plataforma Open eClass (anteriormente conocida como GUnet eClass) es un sistema completo de gestión de cursos. Antes de la versión 4.2, una vulnerabilidad de lógica de negocio permite a los estudiantes autenticados marcarse indebidamente como presentes en actividades de asistencia, incluyendo actividades que ya han caducado, al acceder directamente a una URL manipulada. Este problema ha sido parcheado en la versión 4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-841"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "62F1C084-2C90-4AB3-A13E-28323DC385C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gunet/openeclass/security/advisories/GHSA-rv2x-4rc8-93jh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0620",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-03T19:16:15.580",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without IPSec protection, even when IPSec is enabled.  This allows VPN sessions without encryption, exposing data in transit and compromising confidentiality."
      }, {
        "lang" : "es",
        "value" : "Cuando se configura como servidor VPN L2TP/IPSec, el Archer AXE75 V1 puede aceptar conexiones usando L2TP sin protección IPSec, incluso cuando IPSec está habilitado. Esto permite sesiones VPN sin cifrado, exponiendo datos en tránsito y comprometiendo la confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-axe75/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/archer-axe75/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4942/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1802",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-03T19:16:16.170",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the file luci\\controller\\api\\zrMacClone.lua. The manipulation of the argument macType results in command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Ziroom ZHOME A0101 1.0.1.0. Este problema afecta la función macAddrClone del archivo luci\\controller\\API\\zrMacClone.lua. La manipulación del argumento macType resulta en inyección de comandos. El ataque puede ser lanzado de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/ziru_router_command_injection.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.343975",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.343975",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.741842",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24426",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-03T19:16:16.390",
      "lastModified" : "2026-02-10T14:13:03.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the web management interface. User-supplied input is reflected in HTTP responses without adequate escaping, allowing injection of arbitrary HTML or JavaScript in a victim’s browser context."
      }, {
        "lang" : "es",
        "value" : "El firmware Shenzhen Tenda AC7 versión V03.03.03.01_cn y anteriores contienen una vulnerabilidad de codificación de salida inadecuada en la interfaz de gestión web. La entrada proporcionada por el usuario se refleja en las respuestas HTTP sin un escape adecuado, permitiendo la inyección de HTML o JavaScript arbitrario en el contexto del navegador de una víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "03.03.03.01",
            "matchCriteriaId" : "D9BC9B36-63C4-4254-B395-925376EEDBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BEE979-5BF3-48ED-AF42-0546D4F896E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/AC7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-ac7-reflected-xss-via-web-interface-output-encoding",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24427",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-03T19:16:16.577",
      "lastModified" : "2026-02-10T14:12:30.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profile."
      }, {
        "lang" : "es",
        "value" : "La versión V03.03.03.01_cn y anteriores del firmware de Shenzhen Tenda AC7 exponen información sensible en las respuestas de la gestión web. Las credenciales administrativas, incluyendo la contraseña del router y/o del panel de administración, se incluyen en texto plano dentro de los cuerpos de respuesta de configuración. Además, las respuestas carecen de directivas Cache-Control apropiadas, lo que puede permitir a los navegadores web almacenar en caché páginas que contienen estas credenciales y permitir la divulgación posterior a un atacante con acceso al sistema del cliente o al perfil del navegador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "03.03.03.01",
            "matchCriteriaId" : "D9BC9B36-63C4-4254-B395-925376EEDBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BEE979-5BF3-48ED-AF42-0546D4F896E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/AC7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-ac7-exposes-admin-credentials-in-configuration-responses",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25233",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:22.980",
      "lastModified" : "2026-02-05T18:09:05.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, un error lógico en la verificación de rol de hoja de ruta permite a los mantenedores no líderes crear, actualizar o eliminar hojas de ruta. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-783"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-p92v-9j73-fxx3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25234",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:23.203",
      "lastModified" : "2026-02-05T18:08:05.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in category deletion can allow an attacker with access to the category manager workflow to inject SQL via a category id. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, una vulnerabilidad de inyección SQL en la eliminación de categorías puede permitir a un atacante con acceso al flujo de trabajo del gestor de categorías inyectar SQL a través de un ID de categoría. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-q28j-3p7r-6722",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25235",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:24.210",
      "lastModified" : "2026-02-05T18:07:35.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verification hashes may allow attackers to guess verification tokens and potentially verify election account requests without authorization. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, los hashes de verificación predecibles podrían permitir a los atacantes adivinar tokens de verificación y potencialmente verificar solicitudes de cuentas de elección sin autorización. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-337"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-477r-4cmw-3cgf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25236",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:24.730",
      "lastModified" : "2026-02-05T18:06:21.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN (...) list. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y un sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, existe un riesgo de inyección SQL en las consultas de karma debido a la sustitución literal insegura para una lista IN (...). Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-95mc-p966-c29f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25237",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:24.867",
      "lastModified" : "2026-02-05T18:05:46.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, el uso de preg_replace() con el modificador /e en el manejo de correos electrónicos de actualización de errores puede permitir la ejecución de código PHP si contenido controlado por el atacante llega al reemplazo evaluado. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-624"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-vhw6-hqh9-8r23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25238",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.010",
      "lastModified" : "2026-02-05T18:01:30.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, una vulnerabilidad de inyección SQL en la eliminación de suscripciones de errores podría permitir a los atacantes inyectar SQL a través de un valor de correo electrónico manipulado. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-cv3c-27h5-7gmv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25239",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.157",
      "lastModified" : "2026-02-05T18:00:51.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in apidoc queue insertion can allow query manipulation if an attacker can influence the inserted filename value. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, una vulnerabilidad de inyección SQL en la inserción de la cola de apidoc puede permitir la manipulación de consultas si un atacante puede influir en el valor del nombre de archivo insertado. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-f9mg-x463-3vxg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25240",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.300",
      "lastModified" : "2026-02-05T17:56:13.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN (...) clause. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, una vulnerabilidad de inyección SQL puede ocurrir en user::maintains() cuando los filtros de rol se proporcionan como un array e interpolados en una cláusula IN (...). Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-xw9g-5gr2-c44f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25241",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.430",
      "lastModified" : "2026-02-05T17:55:10.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, an unauthenticated SQL injection in the /get/<package>/<version> endpoint allows remote attackers to execute arbitrary SQL via a crafted package version. This issue has been patched in version 1.33.0."
      }, {
        "lang" : "es",
        "value" : "PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, una inyección SQL no autenticada en el endpoint /get// permite a atacantes remotos ejecutar SQL arbitrario a través de una versión de paquete manipulada. Este problema ha sido parcheado en la versión 1.33.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.33.0",
            "matchCriteriaId" : "9C609AFE-4E3A-4103-9AA0-9CEA5D0D87AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pear/pearweb/security/advisories/GHSA-63fv-vpq5-gv8p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25482",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.563",
      "lastModified" : "2026-02-10T18:13:27.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored DOM XSS vulnerability exists in the \"Recent Orders\" dashboard widget. The Order Status Name is rendered via JavaScript string concatenation without proper escaping, allowing script execution when any admin visits the dashboard. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, existe una vulnerabilidad de XSS DOM almacenado en el widget del panel de control 'Pedidos Recientes'. El Nombre del Estado del Pedido se renderiza mediante concatenación de cadenas de JavaScript sin el escape adecuado, lo que permite la ejecución de scripts cuando cualquier administrador visita el panel de control. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/d94d1c9832a47a1c383e375ae87c46c13935ba65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-frj9-9rwc-pw9j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.717",
      "lastModified" : "2026-02-10T17:52:55.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability exists in Craft Commerce’s Order Status History Message. The message is rendered using the |md filter, which permits raw HTML, enabling malicious script execution. If a user has database backup utility permissions (which do not require an elevated session), an attacker can exfiltrate the entire database, including all user credentials, customer PII, order history, and 2FA recovery codes. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, existe una vulnerabilidad de XSS almacenado en el Mensaje de Historial de Estado de Pedido de Craft Commerce. El mensaje se renderiza usando el filtro |md, que permite HTML sin procesar, posibilitando la ejecución de scripts maliciosos. Si un usuario tiene permisos de utilidad de copia de seguridad de la base de datos (que no requieren una sesión elevada), un atacante puede exfiltrar la base de datos completa, incluyendo todas las credenciales de usuario, PII del cliente, historial de pedidos y códigos de recuperación 2FA. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/4665a47c0961aee311a42af2ff94a7c470f0ad8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-8478-rmjg-mjj5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:25.877",
      "lastModified" : "2026-02-10T18:13:04.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, there is a Stored XSS via Product Type names. The name is not sanitized when displayed in user permissions settings. The vulnerable input (source) is in Commerce (Product Type settings), but the sink is in CMS user permissions settings. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, existe un XSS Almacenado a través de los nombres de los Tipos de Producto. El nombre no se sanea cuando se muestra en la configuración de permisos de usuario. La entrada vulnerable (fuente) está en Commerce (configuración de Tipos de Producto), pero el sumidero está en la configuración de permisos de usuario de CMS. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/7e1dedf06038c8e70dce0187b7048d4ab8ffb75c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-2h2m-v2mg-656c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.040",
      "lastModified" : "2026-02-10T18:12:38.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Shipping Categories (Name & Description) fields in the Store Management section are not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, una vulnerabilidad de XSS almacenado en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque los campos de Categorías de Envío (Nombre y Descripción) en la sección de Gestión de Tienda no se sanean correctamente antes de ser mostrados en el panel de administración. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-w8gw-qm8p-j9j3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.210",
      "lastModified" : "2026-02-10T18:12:08.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. From version 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Shipping Methods Name field in the Store Management section is not properly sanitized before being displayed in the admin panel. This issue has been patched in version 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. Desde la versión 5.0.0 hasta la 5.5.1, una vulnerabilidad XSS almacenada en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque el campo Nombre de métodos de envío en la sección Gestión de la tienda no se sanea correctamente antes de ser mostrado en el panel de administración. Este problema ha sido parcheado en la versión 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-g92v-wpv7-6w22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.360",
      "lastModified" : "2026-02-10T18:10:55.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator's browser. This occurs because the Tax Rates 'Name' field in the Store Management section is not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, una vulnerabilidad de XSS almacenado en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque el campo 'Name' de las Tasas de Impuestos en la sección de Gestión de la Tienda no se sanea correctamente antes de mostrarse en el panel de administración. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-wqc5-485v-3hqh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.517",
      "lastModified" : "2026-02-10T18:10:27.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Tax Categories (Name & Description) fields in the Store Management section are not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, una vulnerabilidad de XSS almacenado en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque los campos de Categorías de Impuestos (Nombre y Descripción) en la sección de Gestión de la Tienda no se sanean correctamente antes de ser mostrados en el panel de administración. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-p6w8-q63m-72c8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.667",
      "lastModified" : "2026-02-10T18:08:57.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Name & Description fields in Tax Zones are not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, una vulnerabilidad XSS almacenada en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque los campos Nombre y Descripción en las Zonas de Impuestos no se sanean correctamente antes de mostrarse en el panel de administración. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-v585-mf6r-rqrc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.817",
      "lastModified" : "2026-02-10T18:08:32.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the 'Address Line 1' field in Inventory Locations is not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, una vulnerabilidad XSS almacenada en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque el campo 'Línea de dirección 1' en Ubicaciones de inventario no se sanea correctamente antes de ser mostrado en el panel de administración. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.1",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "6EFA9347-254D-4D9E-84B1-8C0FFCC377F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "2B409639-1C00-4E9C-950E-77058C40A5F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*",
            "matchCriteriaId" : "E4B4BB43-0D60-4F6F-9F6F-1F7B3AF75EBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-wq2m-r96q-crrf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25502",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:26.963",
      "lastModified" : "2026-02-10T16:18:43.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, stack-based buffer overflow in icFixXml() function when processing malformed ICC profiles, allows potential arbitrary code execution through crafted NamedColor2 tags. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, un desbordamiento de búfer basado en pila en la función icFixXml() al procesar perfiles ICC malformados, permite la posible ejecución de código arbitrario a través de etiquetas NamedColor2 manipuladas. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/be5d7ec5cc137c084c08006aee8cd3ed378c7ac2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/537",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/545",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-c2qq-jf7w-rm27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/537",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25503",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:27.127",
      "lastModified" : "2026-02-10T16:18:55.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, type confusion allowed malformed ICC profiles to trigger undefined behavior when loading invalid icImageEncodingType values causing denial of service. This issue has been patched in version 2.3.1.2."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.2, una confusión de tipos permitía a perfiles ICC malformados desencadenar un comportamiento indefinido al cargar valores de icImageEncodingType no válidos, causando una denegación de servicio. Este problema ha sido parcheado en la versión 2.3.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.2",
            "matchCriteriaId" : "D34CF745-E75A-4F1C-AD7B-9AC1A2E9F680"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/353e6517a31cb6ac9fdd44ac0103bc2fadb25175",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/539",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/547",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-pf84-4c7q-x764",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/539",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25522",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T19:16:27.290",
      "lastModified" : "2026-02-18T16:14:46.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Shipping Zone (Name & Description) fields in the Store Management section are not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2."
      }, {
        "lang" : "es",
        "value" : "Craft Commerce es una plataforma de comercio electrónico para Craft CMS. En las versiones desde la 4.0.0-RC1 hasta la 4.10.0 y desde la 5.0.0 hasta la 5.5.1, una vulnerabilidad XSS almacenada en Craft Commerce permite a los atacantes ejecutar JavaScript malicioso en el navegador de un administrador. Esto ocurre porque los campos de Zona de Envío (Nombre y Descripción) en la sección de Gestión de la Tienda no se sanean correctamente antes de ser mostrados en el panel de administración. Este problema ha sido parcheado en las versiones 4.10.1 y 5.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "113421CD-F418-48BB-9617-1BEB006D8609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "65ADAE4B-A19C-4FB1-AE39-8CF4AF57499B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/4.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/releases/tag/5.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/commerce/security/advisories/GHSA-h9r9-2pxg-cx9m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1803",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-03T20:15:57.973",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the component Dropbear SSH Service. This manipulation causes use of default credentials. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Ziroom ZHOME A0101 1.0.1.0. Afectada es una función desconocida del componente Servicio SSH Dropbear. Esta manipulación causa el uso de credenciales predeterminadas. La explotación remota del ataque es posible. La complejidad de un ataque es bastante alta. La explotabilidad se considera difícil. El exploit se ha puesto a disposición del público y podría ser usado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Blackhole23-Lab/-/blob/main/vulns/ssh-backdoor.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Blackhole23-Lab/-/blob/main/vulns/ssh-backdoor.md#proof-of-concept",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.343976",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.343976",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.745497",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.745529",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1846",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T20:15:58.167",
      "lastModified" : "2026-02-03T20:15:58.167",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: loading template..."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24149",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2026-02-03T20:15:58.243",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Megatron-LM para todas las plataformas contiene una vulnerabilidad en un script, donde datos maliciosos creados por un atacante pueden causar un problema de inyección de código. Un exploit exitoso de esta vulnerabilidad puede conducir a la ejecución de código, escalada de privilegios, revelación de información, manipulación de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-24149",
        "source" : "psirt@nvidia.com"
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-24149",
        "source" : "psirt@nvidia.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24434",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-03T20:15:58.520",
      "lastModified" : "2026-02-10T14:11:25.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative functions in the web management interface. The interface does not enforce anti-CSRF tokens or robust origin validation, which can allow an attacker to induce a logged-in administrator to perform unintended state-changing requests and modify router settings."
      }, {
        "lang" : "es",
        "value" : "La versión de firmware V03.03.03.01_cn y anteriores de Shenzhen Tenda AC7 no implementa protecciones CSRF para funciones administrativas en la interfaz de gestión web. La interfaz no aplica tokens anti-CSRF ni una validación de origen robusta, lo que puede permitir a un atacante inducir a un administrador con sesión iniciada a realizar solicitudes de cambio de estado no intencionadas y modificar la configuración del router."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "03.03.03.01",
            "matchCriteriaId" : "D9BC9B36-63C4-4254-B395-925376EEDBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BEE979-5BF3-48ED-AF42-0546D4F896E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/AC7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-ac7-web-interface-lacks-csrf-protections-for-admin-actions",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24441",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-03T20:15:58.663",
      "lastModified" : "2026-02-10T14:10:35.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material."
      }, {
        "lang" : "es",
        "value" : "Las versiones V03.03.03.01_cn y anteriores del firmware de Shenzhen Tenda AC7 exponen las credenciales de cuenta en texto plano dentro de las respuestas HTTP, permitiendo a un atacante en la ruta obtener material de autenticación sensible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "03.03.03.01",
            "matchCriteriaId" : "D9BC9B36-63C4-4254-B395-925376EEDBA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BEE979-5BF3-48ED-AF42-0546D4F896E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/AC7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-ac7-transmits-admin-credentials-without-https-protection",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-03T20:15:58.913",
      "lastModified" : "2026-02-13T21:27:41.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680."
      }, {
        "lang" : "es",
        "value" : "Blesta 3.x hasta 5.x antes de 5.13.3 permite la inyección de objetos, también conocido como CORE-5680."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phillipsdata:blesta:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "5.13.2",
            "matchCriteriaId" : "9853B7D0-989D-4D86-8098-5A6D479BA9C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.blesta.com/2026/01/28/security-advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2026/Feb/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-03T20:15:59.077",
      "lastModified" : "2026-02-13T21:26:32.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668."
      }, {
        "lang" : "es",
        "value" : "Blesta 3.x hasta 5.x antes de 5.13.3 permite la inyección de objetos, también conocido como CORE-5668."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phillipsdata:blesta:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "5.13.3",
            "matchCriteriaId" : "30701A29-97E4-4250-AEDA-442915CC0F42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.blesta.com/2026/01/28/security-advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2026/Feb/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-03T20:15:59.240",
      "lastModified" : "2026-02-18T18:44:31.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665."
      }, {
        "lang" : "es",
        "value" : "Blesta 3.x hasta 5.x anterior a 5.13.3 maneja incorrectamente la validación de entrada, también conocido como CORE-5665."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phillipsdata:blesta:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "5.13.2",
            "matchCriteriaId" : "A3CF9CFF-01DA-4E16-8570-58E83F6C0EA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.blesta.com/2026/01/28/security-advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2026/Feb/0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1801",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-03T21:16:12.390",
      "lastModified" : "2026-03-26T18:02:05.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_line() logic, where libsoup accepts malformed chunk headers, such as lone line feed (LF) characters instead of the required carriage return and line feed (CRLF). A remote attacker can exploit this without authentication or user interaction by sending specially crafted chunked requests. This allows libsoup to parse and process multiple HTTP requests from a single network message, potentially leading to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en libsoup, una librería cliente/servidor HTTP. Esta vulnerabilidad de contrabando de solicitudes HTTP surge de un análisis no conforme con RFC en la lógica de soup_filter_input_stream_read_line(), donde libsoup acepta encabezados de fragmentos malformados, como caracteres de avance de línea (LF) solitarios en lugar del retorno de carro y avance de línea (CRLF) requeridos. Un atacante remoto puede explotar esto sin autenticación ni interacción del usuario enviando solicitudes fragmentadas especialmente diseñadas. Esto permite a libsoup analizar y procesar múltiples solicitudes HTTP desde un único mensaje de red, lo que podría llevar a la revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BAC4F4-3ACD-4F4D-920C-F920FD2C5472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1801",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2436315",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/481",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1810",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-03T21:16:12.617",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component ZIP File Handler. Performing a manipulation of the argument File results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en bolo-blog bolo-solo hasta la versión 2.6.4. El elemento afectado es la función unpackFilteredZip del archivo src/main/java/org/b3log/solo/bolo/prop/BackupService.java del componente 'ZIP File Handler'. Realizar una manipulación del argumento File resulta en salto de ruta. El ataque puede ser llevado a cabo de forma remota. El exploit ahora es público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adlered:bolo-solo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "C5BC7EFC-81E9-4AD5-A024-C3C2AAFC80F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bolo-blog/bolo-solo/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bolo-blog/bolo-solo/issues/326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742422",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1861",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-03T21:16:12.807",
      "lastModified" : "2026-02-11T18:32:11.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de montón en libvpx en Google Chrome anterior a 144.0.7559.132 permitió a un atacante remoto potencialmente explotar la corrupción del montón a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.132",
            "matchCriteriaId" : "79AA1F6A-5CFF-4F19-AF14-2D79D8327564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/478942410",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1862",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-03T21:16:12.943",
      "lastModified" : "2026-02-11T18:48:26.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Confusión de tipos en V8 en Google Chrome anterior a 144.0.7559.132 permitió a un atacante remoto explotar potencialmente la corrupción de pila a través de una página HTML diseñada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "144.0.7559.132",
            "matchCriteriaId" : "79AA1F6A-5CFF-4F19-AF14-2D79D8327564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/479726070",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24052",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T21:16:13.073",
      "lastModified" : "2026-02-06T20:28:53.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a startsWith() function to validate trusted domains (e.g., docs.python.org, modelcontextprotocol.io), this could have enabled attackers to register domains like modelcontextprotocol.io.example.com that would pass validation. This could enable automatic requests to attacker-controlled domains without user consent, potentially leading to data exfiltration. This issue has been patched in version 1.0.111."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 1.0.111, Claude Code contenía una validación de URL insuficiente en su mecanismo de verificación de dominio de confianza para solicitudes WebFetch. La aplicación utilizaba una función startsWith() para validar dominios de confianza (p. ej., docs.python.org, modelcontextprotocol.io), esto podría haber permitido a los atacantes registrar dominios como modelcontextprotocol.io.example.com que pasarían la validación. Esto podría permitir solicitudes automáticas a dominios controlados por el atacante sin el consentimiento del usuario, lo que podría llevar a la exfiltración de datos. Este problema ha sido parcheado en la versión 1.0.111."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.111",
            "matchCriteriaId" : "F3228CCD-772D-459F-ACFD-0230FD8AB721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-vhw5-3g5m-8ggf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24053",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T21:16:13.220",
      "lastModified" : "2026-02-06T20:24:38.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clobber syntax, it was possible to bypass directory restrictions and write files outside the current working directory without user permission prompts. Exploiting this required the user to use ZSH and the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.74."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.0.74, debido a una falla de validación de comandos Bash al analizar la sintaxis de sobrescritura de ZSH, era posible eludir las restricciones de directorio y escribir archivos fuera del directorio de trabajo actual sin avisos de permiso del usuario. Explotar esto requería que el usuario utilizara ZSH y la capacidad de añadir contenido no confiable en una ventana de contexto de Claude Code. Este problema ha sido parcheado en la versión 2.0.74."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.74",
            "matchCriteriaId" : "FA3D1A9F-D160-49C8-99DF-683EAE2D6CF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-q728-gf8j-w49r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24887",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T21:16:13.433",
      "lastModified" : "2026-02-06T20:19:47.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of untrusted commands through the find command. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.72."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.0.72, debido a un error en el análisis de comandos, era posible eludir la solicitud de confirmación de Claude Code para desencadenar la ejecución de comandos no confiables a través del comando find. Explotar esto de forma fiable requería la capacidad de añadir contenido no confiable en una ventana de contexto de Claude Code. Este problema ha sido parcheado en la versión 2.0.72."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.72",
            "matchCriteriaId" : "EFDC3320-FFEE-434D-AD4D-BBEF2EAC2639"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-qgqw-h4xq-7w8w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1341",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-03T22:16:29.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control."
      }, {
        "lang" : "es",
        "value" : "Avation Light Engine Pro expone su interfaz de configuración y control sin ninguna autenticación o control de acceso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-02",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1811",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-03T22:16:29.673",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in bolo-blog bolo-solo up to 2.6.4. This affects the function importFromMarkdown of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. Executing a manipulation of the argument File can lead to path traversal. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en bolo-blog bolo-solo hasta la versión 2.6.4. Esto afecta a la función importFromMarkdown del archivo src/main/java/org/b3log/solo/bolo/prop/BackupService.java del componente Filename Handler. La ejecución de una manipulación del argumento File puede conducir a un salto de ruta. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adlered:bolo-solo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "C5BC7EFC-81E9-4AD5-A024-C3C2AAFC80F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bolo-blog/bolo-solo/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bolo-blog/bolo-solo/issues/327",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742437",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25148",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:30.370",
      "lastModified" : "2026-02-10T20:12:16.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qwik is a performance focused javascript framework. Prior to version 1.19.0, a Cross-Site Scripting vulnerability in Qwik.js' server-side rendering virtual attribute serialization allows a remote attacker to inject arbitrary web scripts into server-rendered pages via virtual attributes. Successful exploitation permits script execution in a victim's browser in the context of the affected origin. This issue has been patched in version 1.19.0."
      }, {
        "lang" : "es",
        "value" : "Qwik es un framework de javascript enfocado en el rendimiento. Antes de la versión 1.19.0, una vulnerabilidad de cross-site scripting en la serialización de atributos virtuales de renderizado del lado del servidor de Qwik.js permite a un atacante remoto inyectar scripts web arbitrarios en páginas renderizadas por el servidor a través de atributos virtuales. La explotación exitosa permite la ejecución de scripts en el navegador de una víctima en el contexto del origen afectado. Este problema ha sido parcheado en la versión 1.19.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "8A329D09-A8EB-4297-8BD9-4E862179FE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QwikDev/qwik/commit/fe2d9232c0bcec99411d51a00dae29295871d094",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QwikDev/qwik/security/advisories/GHSA-m6jq-g7gq-5w3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25149",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:30.523",
      "lastModified" : "2026-02-10T20:11:36.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qwik is a performance focused javascript framework. Prior to version 1.19.0, an Open Redirect vulnerability in Qwik City's default request handler middleware allows a remote attacker to redirect users to arbitrary protocol-relative URLs. Successful exploitation permits attackers to craft convincing phishing links that appear to originate from the trusted domain but redirect the victim to an attacker-controlled site. This issue has been patched in version 1.19.0."
      }, {
        "lang" : "es",
        "value" : "Qwik es un framework JavaScript centrado en el rendimiento. Antes de la versión 1.19.0, una vulnerabilidad de redirección abierta en el middleware de controlador de solicitudes predeterminado de Qwik City permite a un atacante remoto redirigir a los usuarios a URLs relativas al protocolo arbitrarias. La explotación exitosa permite a los atacantes crear enlaces de phishing convincentes que parecen originarse del dominio de confianza pero redirigen a la víctima a un sitio controlado por el atacante. Este problema ha sido parcheado en la versión 1.19.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "8A329D09-A8EB-4297-8BD9-4E862179FE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QwikDev/qwik/commit/9959eab30a3ad9cc03689eaa080fcfbc33df71ed",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QwikDev/qwik/security/advisories/GHSA-92j7-wgmg-f32m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25150",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:30.690",
      "lastModified" : "2026-02-10T20:10:16.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qwik is a performance focused javascript framework. Prior to version 1.19.0, a prototype pollution vulnerability exists in the formToObj() function within @builder.io/qwik-city middleware. The function processes form field names with dot notation (e.g., user.name) to create nested objects, but fails to sanitize dangerous property names like __proto__, constructor, and prototype. This allows unauthenticated attackers to pollute Object.prototype by sending crafted HTTP POST requests, potentially leading to privilege escalation, authentication bypass, or denial of service. This issue has been patched in version 1.19.0."
      }, {
        "lang" : "es",
        "value" : "Qwik es un framework de javascript centrado en el rendimiento. Antes de la versión 1.19.0, existe una vulnerabilidad de contaminación de prototipos en la función formToObj() dentro del middleware @builder.io/qwik-city. La función procesa los nombres de los campos del formulario con notación de puntos (por ejemplo, user.name) para crear objetos anidados, pero no logra sanear nombres de propiedades peligrosos como __proto__, constructor y prototype. Esto permite a atacantes no autenticados contaminar Object.prototype enviando solicitudes HTTP POST manipuladas, lo que podría conducir a escalada de privilegios, omisión de autenticación o denegación de servicio. Este problema ha sido parcheado en la versión 1.19.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "8A329D09-A8EB-4297-8BD9-4E862179FE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QwikDev/qwik/commit/5f65bae2bc33e6ca0c21e4cfcf9eae05077716f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QwikDev/qwik/security/advisories/GHSA-xqg6-98cw-gxhq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25151",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:30.840",
      "lastModified" : "2026-02-10T20:08:58.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qwik is a performance focused javascript framework. Prior to version 1.19.0, Qwik City’s server-side request handler inconsistently interprets HTTP request headers, which can be abused by a remote attacker to circumvent form submission CSRF protections using specially crafted or multi-valued Content-Type headers. This issue has been patched in version 1.19.0."
      }, {
        "lang" : "es",
        "value" : "Qwik es un framework de JavaScript enfocado en el rendimiento. Antes de la versión 1.19.0, el manejador de solicitudes del lado del servidor de Qwik City interpreta de forma inconsistente los encabezados de solicitud HTTP, lo que puede ser explotado por un atacante remoto para eludir las protecciones CSRF de envío de formularios utilizando encabezados Content-Type especialmente diseñados o con múltiples valores. Este problema ha sido parcheado en la versión 1.19.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "8A329D09-A8EB-4297-8BD9-4E862179FE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QwikDev/qwik/commit/eebf610e04cc3a690f11e10191d09ff0fca1c7ed",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QwikDev/qwik/security/advisories/GHSA-r666-8gjf-4v5f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25155",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:30.987",
      "lastModified" : "2026-02-10T20:07:58.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isContentType causes incorrect parsing of certain Content-Type headers. This issue has been patched in version 1.12.0."
      }, {
        "lang" : "es",
        "value" : "Qwik es un framework de JavaScript centrado en el rendimiento. Antes de la versión 1.12.0, un error tipográfico en la expresión regular dentro de isContentType provoca un análisis incorrecto de ciertos encabezados Content-Type. Este problema ha sido parcheado en la versión 1.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.12.0",
            "matchCriteriaId" : "06AADB22-29A3-45E2-BB6A-2F770D4AEBC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QwikDev/qwik/commit/d70d7099b90b998f1aac7cedc21c67d87bac4c75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QwikDev/qwik/security/advisories/GHSA-vm6g-8r4h-22x8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25223",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:31.130",
      "lastModified" : "2026-02-10T20:05:15.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By appending a tab character (\\t) followed by arbitrary content to the Content-Type header, attackers can bypass body validation while the server still processes the body as the original content type. This issue has been patched in version 5.7.2."
      }, {
        "lang" : "es",
        "value" : "Fastify es un framework web rápido y de baja sobrecarga, para Node.js. Antes de la versión 5.7.2, existe una vulnerabilidad de omisión de validación en Fastify donde los esquemas de validación del cuerpo de la solicitud especificados por Content-Type pueden ser completamente eludidos. Al añadir un carácter de tabulación (\\t) seguido de contenido arbitrario al encabezado Content-Type, los atacantes pueden omitir la validación del cuerpo mientras el servidor sigue procesando el cuerpo como el tipo de contenido original. Este problema ha sido parcheado en la versión 5.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:fastify:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.7.2",
            "matchCriteriaId" : "51FAFCEB-4FBC-4777-BC6D-91713CA5828A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fastify.dev/docs/latest/Reference/Validation-and-Serialization",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Technical Description" ]
      }, {
        "url" : "https://github.com/fastify/fastify/blob/759e9787b5669abf953068e42a17bffba7521348/lib/content-type-parser.js#L125",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/fastify/fastify/blob/759e9787b5669abf953068e42a17bffba7521348/lib/validation.js#L272",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/fastify/fastify/commit/32d7b6add39ddf082d92579a58bea7018c5ac821",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify/security/advisories/GHSA-jx2c-rxcm-jvmq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      }, {
        "url" : "https://hackerone.com/reports/3464114",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25224",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:31.290",
      "lastModified" : "2026-02-10T19:24:48.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.3, a denial-of-service vulnerability in Fastify’s Web Streams response handling can allow a remote client to exhaust server memory. Applications that return a ReadableStream (or Response with a Web Stream body) via reply.send() are impacted. A slow or non-reading client can trigger unbounded buffering when backpressure is ignored, leading to process crashes or severe degradation. This issue has been patched in version 5.7.3."
      }, {
        "lang" : "es",
        "value" : "Fastify es un framework web rápido y de baja sobrecarga, para Node.js. Antes de la versión 5.7.3, una vulnerabilidad de denegación de servicio en el manejo de respuestas de Web Streams de Fastify puede permitir a un cliente remoto agotar la memoria del servidor. Las aplicaciones que devuelven un ReadableStream (o una Response con un cuerpo de Web Stream) a través de reply.send() se ven afectadas. Un cliente lento o que no lee puede desencadenar un almacenamiento en búfer ilimitado cuando se ignora la contrapresión, lo que lleva a caídas del proceso o una degradación severa. Este problema ha sido parcheado en la versión 5.7.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:fastify:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.7.3",
            "matchCriteriaId" : "70F0A157-C97E-4AB3-8B64-D6B21301B2DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/fastify/commit/eb11156396f6a5fedaceed0140aed2b7f026be37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify/security/advisories/GHSA-mrq3-vjjr-p77c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/3524779",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25509",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:31.433",
      "lastModified" : "2026-02-10T18:41:26.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, the authentication implementation in CI4MS is vulnerable to email enumeration. An unauthenticated attacker can determine whether an email address is registered in the system by analyzing the application's response during the password reset process. This issue has been patched in version 0.28.5.0."
      }, {
        "lang" : "es",
        "value" : "CI4MS es un esqueleto de CMS basado en CodeIgniter 4 que ofrece una arquitectura modular, lista para producción, con autorización RBAC y soporte de temas. Antes de la versión 0.28.5.0, la implementación de autenticación en CI4MS es vulnerable a la enumeración de correos electrónicos. Un atacante no autenticado puede determinar si una dirección de correo electrónico está registrada en el sistema analizando la respuesta de la aplicación durante el proceso de restablecimiento de contraseña. Este problema ha sido parcheado en la versión 0.28.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ci4-cms-erp:ci4ms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.28.5.0",
            "matchCriteriaId" : "AF5BFA71-5A9A-4ADF-ACD4-5E3B6FAB1DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ci4-cms-erp/ci4ms/commit/86be2930d1c54eb7575102563302b2f3bafcb653",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-654x-9q7r-g966",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25510",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-03T22:16:31.587",
      "lastModified" : "2026-02-10T18:41:41.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution (RCE) by leveraging the file creation and save endpoints, an attacker can upload and execute arbitrary PHP code on the server. This issue has been patched in version 0.28.5.0."
      }, {
        "lang" : "es",
        "value" : "CI4MS es un esqueleto de CMS basado en CodeIgniter 4 que ofrece una arquitectura modular, lista para producción, con autorización RBAC y soporte de temas. Antes de la versión 0.28.5.0, un usuario autenticado con permisos de editor de archivos puede lograr Ejecución Remota de Código (RCE) al aprovechar los puntos finales de creación y guardado de archivos; un atacante puede cargar y ejecutar código PHP arbitrario en el servidor. Este problema ha sido parcheado en la versión 0.28.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ci4-cms-erp:ci4ms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.28.5.0",
            "matchCriteriaId" : "AF5BFA71-5A9A-4ADF-ACD4-5E3B6FAB1DBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ci4-cms-erp/ci4ms/commit/86be2930d1c54eb7575102563302b2f3bafcb653",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-gp56-f67f-m4px",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1580",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2026-02-03T23:16:06.290",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)"
      }, {
        "lang" : "es",
        "value" : "Se descubrió una vulnerabilidad de seguridad en ingress-nginx donde la anotación de Ingress 'nginx.ingress.kubernetes.io/auth-method' puede ser utilizada para inyectar configuración en nginx. Esto puede llevar a la ejecución de código arbitrario en el contexto del controlador ingress-nginx, y a la divulgación de Secrets accesibles para el controlador. (Tenga en cuenta que, en la instalación predeterminada, el controlador puede acceder a todos los Secrets en todo el clúster)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "jordan@liggitt.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/136677",
        "source" : "jordan@liggitt.net"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1632",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-03T23:16:06.457",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requiring authentication, which could allow an unauthenticated attacker to modify configuration settings, acquire device data or remotely reset the device."
      }, {
        "lang" : "es",
        "value" : "La Estación Sísmica MOMA Versión v2.4.2520 y anteriores expone su interfaz de gestión web sin requerir autenticación, lo que podría permitir a un atacante no autenticado modificar la configuración, adquirir datos del dispositivo o reiniciar el dispositivo de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-034-03.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1755",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-03T23:16:06.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_wp_attachment_image_alt’ post meta in all versions up to, and including, 0.13.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Menu Icons by ThemeIsle para WordPress es vulnerable a cross-site scripting almacenado a través del metadato de publicación '_wp_attachment_image_alt' en todas las versiones hasta la 0.13.20, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con acceso de nivel de Autor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/menu-icons/tags/0.13.20/includes/front.php#L497",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3452685/menu-icons",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/30bfa616-c7f3-4ff0-85b3-468debc8a73e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1812",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-03T23:16:06.803",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en bolo-blog bolo-solo hasta la versión 2.6.4. Esto afecta a la función importFromCnblogs del archivo src/main/java/org/b3log/solo/bolo/prop/BackupService.java del componente Filename Handler. La manipulación del argumento File conduce a un salto de ruta. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adlered:bolo-solo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "C5BC7EFC-81E9-4AD5-A024-C3C2AAFC80F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bolo-blog/bolo-solo/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bolo-blog/bolo-solo/issues/328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742582",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24512",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2026-02-03T23:16:06.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)"
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de seguridad en ingress-nginx. El campo Ingress 'rules.http.paths.path' puede usarse para inyectar configuración en nginx. Esto puede llevar a la ejecución de código arbitrario en el contexto del controlador ingress-nginx, y a la divulgación de Secrets accesibles para el controlador. (Tenga en cuenta que, en la instalación predeterminada, el controlador puede acceder a todos los Secrets en todo el clúster.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "jordan@liggitt.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/136678",
        "source" : "jordan@liggitt.net"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24513",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2026-02-03T23:16:07.130",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in the presence of a specific misconfiguration.\n\nIf the ingress-nginx controller is configured with a default custom-errors configuration that includes HTTP errors 401 or 403, and if the configured default custom-errors backend is defective and fails to respect the X-Code HTTP header, then an Ingress with the `auth-url` annotation may be accessed even when authentication fails.\n\nNote that the built-in custom-errors backend works correctly. To trigger this issue requires an administrator to specifically configure ingress-nginx with a broken external component."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de seguridad en ingress-nginx donde la protección ofrecida por la anotación Ingress 'auth-url' podría no ser efectiva en presencia de una configuración errónea específica.\n\nSi el controlador ingress-nginx está configurado con una configuración predeterminada de errores personalizados que incluye errores HTTP 401 o 403, y si el backend predeterminado de errores personalizados configurado es defectuoso y no respeta el encabezado HTTP X-Code, entonces se podría acceder a un Ingress con la anotación 'auth-url' incluso cuando la autenticación falla.\n\nTenga en cuenta que el backend de errores personalizados integrado funciona correctamente. Para activar este problema se requiere que un administrador configure específicamente ingress-nginx con un componente externo defectuoso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "jordan@liggitt.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/136679",
        "source" : "jordan@liggitt.net"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24514",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2026-02-03T23:16:07.280",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx controller pod being killed or the node running out of memory."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de seguridad en ingress-nginx donde la característica del controlador de admisión validador está sujeta a una condición de denegación de servicio. Al enviar solicitudes grandes al controlador de admisión validador, un atacante puede causar consumo de memoria, lo que puede resultar en la terminación del pod del controlador ingress-nginx o en que el nodo se quede sin memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "jordan@liggitt.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/136680",
        "source" : "jordan@liggitt.net"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1633",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-04T00:16:08.557",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowing unauthenticated users to modify critical device settings or factory reset the device."
      }, {
        "lang" : "es",
        "value" : "El adaptador serie a ethernet Synectix LAN 232 TRIO de 3 puertos expone su interfaz de gestión web sin requerir autenticación, permitiendo a usuarios no autenticados modificar configuraciones críticas del dispositivo o restablecer el dispositivo a la configuración de fábrica."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-034-04.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-04",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1813",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-04T00:16:08.743",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in bolo-blog bolo-solo up to 2.6.4. Affected is an unknown function of the file src/main/java/org/b3log/solo/bolo/pic/PicUploadProcessor.java of the component FreeMarker Template Handler. The manipulation of the argument File results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en bolo-blog bolo-solo hasta la versión 2.6.4. Afecta a una función desconocida del archivo src/main/java/org/b3log/solo/bolo/pic/PicUploadProcessor.java del componente FreeMarker Template Handler. La manipulación del argumento File resulta en una carga sin restricciones. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y podría usarse. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adlered:bolo-solo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.4",
            "matchCriteriaId" : "C5BC7EFC-81E9-4AD5-A024-C3C2AAFC80F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bolo-blog/bolo-solo/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bolo-blog/bolo-solo/issues/329",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.343981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.343981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743402",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1835",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-04T01:15:56.100",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. This affects an unknown part. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en lcg0124 BootDo hasta e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Esto afecta una parte desconocida. La manipulación conduce a la falsificación de petición en sitios cruzados. El ataque puede llevarse a cabo remotamente. El exploit está disponible públicamente y podría ser utilizado. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden especificarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/webzzaa/CVE-/issues/6",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344028",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344028",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.742484",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1791",
      "sourceIdentifier" : "sec@hillstonenet.com",
      "published" : "2026-02-04T04:15:49.440",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security Gateway on Linux allows Upload a Web Shell to a Web Server.This issue affects Operation and Maintenance Security Gateway: V5.5ST00001B113."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga sin restricciones de archivo con tipo peligroso en Hillstone Networks Operation and Maintenance Security Gateway en Linux permite cargar un shell web a un servidor web. Este problema afecta a Operation and Maintenance Security Gateway: V5.5ST00001B113."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sec@hillstonenet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "sec@hillstonenet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hillstonenet.com.cn/security-notification/2025/12/08/wgscld/",
        "source" : "sec@hillstonenet.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1756",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T07:15:59.267",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP FOFT Loader plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WP_FOFT_Loader_Mimes::file_and_ext' function in all versions up to, and including, 2.1.39. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
      }, {
        "lang" : "es",
        "value" : "El plugin WP FOFT Loader para WordPress es vulnerable a la carga arbitraria de archivos debido a una validación incorrecta del tipo de archivo en la función 'WP_FOFT_Loader_Mimes::file_and_ext' en todas las versiones hasta la 2.1.39, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Autor o superior, cargar archivos arbitrarios en el servidor del sitio afectado, lo que podría posibilitar la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-foft-loader/trunk/includes/class-wp-foft-loader-mimes.php?rev=3449144#L31",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-foft-loader/trunk/includes/class-wp-foft-loader-mimes.php?rev=3449144#L45",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3453101/wp-foft-loader/trunk/includes/class-wp-foft-loader-mimes.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cede8ff5-f739-4eb3-9672-5adb5d2ae0a9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20977",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:15:59.510",
      "lastModified" : "2026-02-05T21:32:56.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Emergency Sharing anterior a SMR Feb-2026 Release 1 permite a atacantes locales interrumpir su funcionamiento."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20978",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:15:59.663",
      "lastModified" : "2026-02-05T21:31:23.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application."
      }, {
        "lang" : "es",
        "value" : "Autorización indebida en KnoxGuardManager anterior a SMR Feb-2026 Release 1 permite a atacantes locales eludir la configuración de persistencia de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE4D65E-8F9B-4810-AED6-95564A97D741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC42E785-02BF-4F27-B5CF-49572A2DBC8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6239D93F-CA0E-4120-96A1-FB63276EAEE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25F19D02-1FFC-48AF-9CB8-063C459E7A4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD382E2D-0B51-4908-989A-88E083FC85BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858B0736-2272-4D5A-A77F-47023D21F7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB730563-7C35-4384-89BD-6EE0C5C6126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D507C0-086B-4139-A560-126964DFA579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "952CA843-7CF0-4424-BDA4-3F2A93E077B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "39F64BAA-2E49-4919-A940-219391383D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "57B125ED-D939-4CBC-9E96-BBCF02402A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "07AC19C6-D245-4C3A-90CC-A931A901EA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA1685E-D101-46F6-8857-7F0894E07748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9DD2D12-8CD4-4BC6-9561-EAA852C3029C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B6871BC1-19F4-4F0C-88D8-4000590D8D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4684DF1E-B783-4C81-A3D0-D09AD2610866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA72654-2389-4709-BC70-59EC4349A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E346DCBD-7DEB-464F-B917-8624BE87D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C89A24-B07F-43D2-AE83-8F4F03D6C114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5697984D-08BA-412F-9BDF-26B658B0ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72B97155-E841-4267-9522-A81F8B139A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4187BA1-226E-4976-A642-2F6DAE85538E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "73F22C26-52FC-42A7-B263-0CC7770A8C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB2B338-5E04-4136-939F-749A3B163656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5CA412-BAAF-4378-8ECD-95A404D4E19B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2524BDEC-4BA1-4297-824F-B524C748D480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F104045-8DF7-4935-BB2C-0BBD60E66185"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C17A088-2CA1-4818-940F-2FEFA881D598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD187E2-2655-407D-87F9-135A9D45F783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3651863E-81D7-4079-A644-C3D834AF62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20979",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:15:59.840",
      "lastModified" : "2026-02-05T21:15:46.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege."
      }, {
        "lang" : "es",
        "value" : "Gestión inadecuada de privilegios en Ajustes anterior a la versión SMR Feb-2026 Release 1 permite a atacantes locales lanzar actividad arbitraria con privilegios de Ajustes."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20980",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:15:59.967",
      "lastModified" : "2026-02-05T21:14:30.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en PACM anterior a la versión 1 de SMR de febrero de 2026 permite a un atacante físico ejecutar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20981",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.113",
      "lastModified" : "2026-02-05T21:18:06.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en FacAtFunction anterior a SMR Feb-2026 Release 1 permite a un atacante físico privilegiado ejecutar comando arbitrario con privilegio de sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20982",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.240",
      "lastModified" : "2026-02-05T21:20:12.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege."
      }, {
        "lang" : "es",
        "value" : "Salto de ruta en ShortcutService anterior a la versión SMR Feb-2026 Release 1 permite a un atacante local privilegiado crear un archivo con privilegios de sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C86A3033-9DD1-47F9-B95D-10F82A31D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "98C26CF8-228F-4791-B5A3-B65DF709F402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C527C12-5480-4604-A480-1E540095EB5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79C71CA6-508E-4A19-9014-47FA1BD5A83C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20983",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.387",
      "lastModified" : "2026-02-05T21:21:13.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege."
      }, {
        "lang" : "es",
        "value" : "Exportación indebida de componentes de aplicación Android en Samsung Dialer anterior a la SMR de febrero de 2026, lanzamiento 1, permite a atacantes locales lanzar actividad arbitraria con privilegio de Samsung Dialer."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBFF102-91A9-4BCC-BB43-912896BFCCEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "401980A7-E64A-4773-83EB-C93B50AE0F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E12AB0B-728A-4478-B237-78CBAA2A44C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF3EC-643F-4A39-8F4C-11F0F534B589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0501033A-0D51-41E8-91A9-E72B6EE3F78D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B3213-520A-49F0-A183-C73A37A56854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB6398C-6A3E-4146-9A5C-595BE36047BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE2529-013A-4F73-8D86-BD1AD613028D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F706F3-34F6-4D43-AE5E-C202C700A333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8B9CD3-063E-481E-BE7C-1628ADA71849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12C17130-A0C0-49E1-8525-9D65F0275270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E010EDC6-D78E-4126-92B0-2F6A10DE76AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FAA7790-A323-4ECA-834E-F19E59C571F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE09EF7-B024-4D79-9400-C8223CDFBB86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C339A665-413D-443F-AD04-F71C161235D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47786E-68AB-4FF1-B9D9-925D65702E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "213AC4D5-3B95-4120-B72D-A9327BADE2BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7DCB465-A0F7-496E-BE45-0B5FA1508D93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D65C03E-7BC3-491A-8621-A8C93FBA0A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECB0B7A-590C-460C-878B-9A78CB37D259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D66CF415-6C4A-4AF3-B660-B2E9CF484B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "427A79D5-04E9-46BC-9D8C-471EBD28AAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "31B5B670-ACDE-4A64-97C5-358D79C65080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE015F-8130-4F10-A553-420F0BB2A132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "141E541B-8FA5-4829-A413-4F1DC19E9AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCA253F-EE13-4C52-8CB7-D72C117576D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "77CE3494-F7C0-497B-8491-107D31C9A91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ACEA385E-3931-4438-A2A9-0357651F9B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFE0612-FA2E-4629-AE05-33245F1282FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F3023F-E65C-4871-A65A-738EFF64D365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD1F78D-EA98-4825-A0EA-703196DDE5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDB3FBE-99EC-4763-961B-2C436D864A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B5746517-D8FF-4819-9B98-D06B475C6CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBFBC5D-9716-4F07-A9E6-D843AFA06871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1B02110E-71FB-495F-86CA-F2A4E55C0E42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "931CC6D7-A42D-4482-B901-B539DFF89C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC507C7-FB2C-4B74-B1AD-48F939D9C079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "852A1BEC-438F-4D1E-B361-87BD57D50157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1953308A-E266-4251-AB2F-C64C74BEC241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4207B265-009B-4FF8-85C5-01EBDB7701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE22F0-4B77-4034-8271-34A131B14D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F878069B-37C9-4636-8C31-526B610A0AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03A54EA0-3B86-4236-AA3C-840ACCD174A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BADD79-26FC-4498-AFEC-C79AF6B96924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6E2318-BD4E-4540-82C3-0D461C691119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFC99BC-87AC-43AC-B815-36B7960C39D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "65F036A0-874D-4607-833E-167753748DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "22E4BD84-802F-46CC-A86F-B6256F7915E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20984",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 allows local attackers to access sensitive information."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de permisos insuficientes en Galaxy Wearable instalado en dispositivos que no son Samsung anterior a la versión 2.2.68 permite a atacantes locales acceder a información sensible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20985",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.647",
      "lastModified" : "2026-02-25T18:51:29.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en Samsung Members anterior a la versión 5.6.00.11 permite a atacantes remotos conectar una URL arbitraria y lanzar una actividad arbitraria con privilegios de Samsung Members. Se requiere interacción del usuario para activar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.00.11",
            "matchCriteriaId" : "14D932E2-7CB8-477E-B265-E2D46166EF95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20986",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.770",
      "lastModified" : "2026-02-25T18:50:29.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Samsung Members."
      }, {
        "lang" : "es",
        "value" : "Salto de ruta en Samsung Members anterior a la versión china 15.5.05.4 permite a atacantes locales sobrescribir datos dentro de Samsung Members."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.5.05.4",
            "matchCriteriaId" : "D250C7BE-B384-493E-B173-E313F7C701C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20987",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2026-02-04T07:16:00.900",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada inadecuada en GalaxyDiagnostics anterior a la versión 3.5.050 permite a atacantes locales privilegiados ejecutar comandos privilegiados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=02",
        "source" : "mobile.security@samsung.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21393",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-04T07:16:01.027",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's web browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well."
      }, {
        "lang" : "es",
        "value" : "Movable Type contiene una vulnerabilidad de cross-site scripting almacenado en Edit Comment. Si una entrada manipulada es almacenada por un atacante, se puede ejecutar script arbitrario en el navegador web de un usuario que ha iniciado sesión. Tenga en cuenta que las series Movable Type 7 y 8.4, que están al final de su vida útil (EOL), también se ven afectadas por la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45405689/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://movabletype.org/news/2026/02/mt-906-released.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.sixapart.jp/movabletype/news/2026/02/04-1100.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22875",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-04T07:16:01.213",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an attacker, arbitrary script may be executed on a logged-in user's web browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well."
      }, {
        "lang" : "es",
        "value" : "Movable Type contiene una vulnerabilidad de cross-site scripting almacenado en Export Sites. Si una entrada manipulada es almacenada por un atacante, se puede ejecutar script arbitrario en el navegador web de un usuario que ha iniciado sesión. Tenga en cuenta que las series Movable Type 7 y 8.4, que están al final de su vida útil (EOL), también se ven afectadas por la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45405689/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://movabletype.org/news/2026/02/mt-906-released.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.sixapart.jp/movabletype/news/2026/02/04-1100.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23704",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-04T07:16:01.387",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbitrary script may be executed on the administrator's browser. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well."
      }, {
        "lang" : "es",
        "value" : "Un usuario no administrativo puede cargar archivos maliciosos. Cuando un administrador o el producto accede a ese archivo, un script arbitrario puede ejecutarse en el navegador del administrador. Tenga en cuenta que las series Movable Type 7 y 8.4, que están al final de su vida útil (EOL), también se ven afectadas por la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45405689/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://movabletype.org/news/2026/02/mt-906-released.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.sixapart.jp/movabletype/news/2026/02/04-1100.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24447",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-04T07:16:01.560",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such malformed data. When a victim user download and open such a CSV file, the embedded code may be executed in the user's environment. Note that Movable Type 7 series and 8.4 series, which are End-of-Life (EOL), are affected by the vulnerability as well."
      }, {
        "lang" : "es",
        "value" : "Si se introduce un dato malformado en el producto afectado, un archivo CSV descargado del producto afectado puede contener dicho dato malformado. Cuando un usuario víctima descarga y abre dicho archivo CSV, el código incrustado puede ejecutarse en el entorno del usuario. Tenga en cuenta que las series Movable Type 7 y 8.4, que están al final de su vida útil (EOL), también se ven afectadas por la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45405689/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://movabletype.org/news/2026/02/mt-906-released.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.sixapart.jp/movabletype/news/2026/02/04-1100.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1819",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2026-02-04T08:16:06.820",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS.This issue affects ViPort: through 23012026."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') vulnerabilidad en Karel Electronics Industry y Trade Inc. ViPort permite XSS Almacenado. Este problema afecta a ViPort: hasta el 23012026."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-26-0017",
        "source" : "iletisim@usom.gov.tr"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0572",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:51.970",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebPurify Profanity Filter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'webpurify_save_options' function in all versions up to, and including, 4.0.2. This makes it possible for unauthenticated attackers to change plugin settings."
      }, {
        "lang" : "es",
        "value" : "El plugin WebPurify Profanity Filter para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función 'webpurify_save_options' en todas las versiones hasta la 4.0.2, inclusive. Esto hace posible que atacantes no autenticados cambien la configuración del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/webpurifytextreplace/trunk/webpurifytextreplace-options.php?rev=2343695#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9283f6ea-8bc4-4fdd-a0b9-05de127f34e4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0679",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:52.143",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fortis for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to an inverted nonce check in the 'check_fortis_notify_response' function in all versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to update arbitrary WooCommerce order statuses to paid/processing/completed, effectively allowing them to mark orders as paid without payment."
      }, {
        "lang" : "es",
        "value" : "El plugin Fortis para WooCommerce para WordPress es vulnerable a la omisión de autorización debido a una verificación de nonce invertida en la función 'check_fortis_notify_response' en todas las versiones hasta la 1.2.0, inclusive. Esto permite a atacantes no autenticados actualizar estados de pedido arbitrarios de WooCommerce a pagado/en proceso/completado, lo que les permite efectivamente marcar pedidos como pagados sin realizar el pago."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/fortis-for-woocommerce/tags/1.2.0/classes/WC_Gateway_Fortis.php#L1674",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/fortis-for-woocommerce/trunk/classes/WC_Gateway_Fortis.php#L1674",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3457351%40fortis-for-woocommerce&new=3457351%40fortis-for-woocommerce&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9f16c098-3e99-4506-b517-ae4b838a0925?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0681",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:52.313",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Extended Random Number Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Extended Random Number Generator para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración del plugin en todas las versiones hasta la 1.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/extended-random-number-generator/tags/1.1/random_number_generator.php#L187",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/extended-random-number-generator/trunk/random_number_generator.php#L187",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/575c3329-8dbb-4d15-8e11-a86a01b96f50?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0742",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:52.477",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Smart Appointment & Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saab_save_form_data AJAX action in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Smart Appointment &amp; Booking para WordPress es vulnerable a cross-site scripting almacenado a través de la acción AJAX saab_save_form_data en todas las versiones hasta la 1.0.7, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/smart-appointment-booking/tags/1.0.7/inc/admin/class.saab.admin.action.php#L1203",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/smart-appointment-booking/tags/1.0.7/inc/front/class.saab.front.action.php#L2189",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/smart-appointment-booking/trunk/inc/admin/class.saab.admin.action.php#L1203",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/smart-appointment-booking/trunk/inc/front/class.saab.front.action.php#L2189",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3450387%40smart-appointment-booking&new=3450387%40smart-appointment-booking&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bf332c0d-5481-412d-b44a-b3de346d7b60?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0743",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:52.653",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ohmem-message' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP que contiene permisos para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'ohmem-message' en todas las versiones hasta la 1.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de Administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-content-permission/tags/1.2/admin/views/admin.php#L74",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-content-permission/trunk/admin/views/admin.php#L74",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e44403cd-1cee-43c4-aabc-3eaad433c020?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0816",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:52.810",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'delete_id' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "Todas las notificaciones push del plugin WP para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'delete_id' en todas las versiones hasta la 1.5.3, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superior, añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/all-push-notification/tags/1.5.3/pushnotification-admin/class-pushnotification-admin.php#L95",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-push-notification/trunk/pushnotification-admin/class-pushnotification-admin.php#L95",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fc1f36b1-cf28-472c-8a7a-f091ecb48c2d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1370",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-04T09:15:52.977",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin de pasarela de pago SIBS woocommerce para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'referencedId' en todas las versiones hasta la 2.2.0, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/sibs-woocommerce/tags/2.2.0/class-sibs-payment-gateway.php#L1855",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/eac8e81c-2f6f-4a4a-9678-f5d75f4954ae?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1622",
      "sourceIdentifier" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
      "published" : "2026-02-04T10:16:04.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a potential information disclosure by a user who has ability to access the local log files.\n\n\nThe \"obfuscate_literals\" option in the query logs does not redact error information, exposing unredacted data in the query log when a customer writes a query that fails. It can allow a user with legitimate access to the local log files to obtain information they are not authorised to see. If this user is also in a position to run queries and trigger errors, this vulnerability can potentially help them to infer information they are not authorised to see through their intended database access.\n\nWe recommend upgrading to versions 2026.01.3 (or 5.26.21) where the issue is fixed, and reviewing query log files permissions to ensure restricted access. If your configuration had db.logs.query.obfuscate_literals enabled, and you wish the obfuscation to cover the error messages as well, you need to enable the new configuration setting db.logs.query.obfuscate_errors once you have upgraded Neo4j."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Neo4j Enterprise y Community editions anteriores a 2026.01.3 y 5.26.21 son vulnerables a una potencial revelación de información por parte de un usuario que tiene la capacidad de acceder a los archivos de registro locales.\n\nLa opción 'obfuscate_literals' en los registros de consulta no redacta la información de error, exponiendo datos no redactados en el registro de consulta cuando un cliente escribe una consulta que falla. Puede permitir a un usuario con acceso legítimo a los archivos de registro locales obtener información que no está autorizado a ver. Si este usuario también está en posición de ejecutar consultas y activar errores, esta vulnerabilidad puede potencialmente ayudarles a inferir información que no están autorizados a ver a través de su acceso previsto a la base de datos.\n\nRecomendamos actualizar a las versiones 2026.01.3 (o 5.26.21) donde se soluciona el problema, y revisar los permisos de los archivos de registro de consulta para asegurar un acceso restringido. Si su configuración tenía 'db.logs.query.obfuscate_literals' habilitado, y desea que la ofuscación también cubra los mensajes de error, debe habilitar la nueva configuración 'db.logs.query.obfuscate_errors' una vez que haya actualizado Neo4j."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "references" : [ {
        "url" : "https://neo4j.com/security/CVE-2026-1622",
        "source" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0873",
      "sourceIdentifier" : "psirt@thalesgroup.com",
      "published" : "2026-02-04T11:16:02.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrator."
      }, {
        "lang" : "es",
        "value" : "En una plataforma Cryptobox donde se utiliza la segregación de administradores basada en entidades, algunas vulnerabilidades en la consola de administración Ercom Cryptobox permiten a un administrador de entidad autenticado con conocimiento elevar su cuenta a administrador global."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@thalesgroup.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@thalesgroup.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-1220"
        } ]
      } ],
      "references" : [ {
        "url" : "https://info.cryptobox.com/doc/v4.40/4.40.en/",
        "source" : "psirt@thalesgroup.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24735",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-04T11:16:03.130",
      "lastModified" : "2026-02-06T14:40:37.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 1.7.1.\n\nAn unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unauthorized user to retrieve restricted or sensitive information.\nUsers are recommended to upgrade to version 2.0.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de exposición de Información Personal Privada a un Actor No Autorizado en Apache Answer.\n\nEste problema afecta a Apache Answer: hasta la versión 1.7.1.\n\nUn endpoint de API no autenticado expone incorrectamente el historial completo de revisiones para contenido eliminado. Esto permite a usuarios no autorizados recuperar información restringida o sensible.\nSe recomienda a los usuarios actualizar a la versión 2.0.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "532DB4B7-06FB-4580-9FB7-3FF91958AC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/whxloom7mpxlyt5wzdskflsg5mzdzd60",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1642",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2026-02-04T15:16:14.190",
      "lastModified" : "2026-02-13T21:35:01.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad existe en NGINX OSS y NGINX Plus cuando está configurado para actuar como proxy hacia servidores upstream de Transport Layer Security (TLS). Un atacante con una posición de man-in-the-middle (MitM) en el lado del servidor upstream —junto con condiciones fuera del control del atacante— podría ser capaz de inyectar datos en texto plano en la respuesta de un servidor proxy upstream. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no son evaluadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-349"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "AE3A85CC-50DD-4BE7-A8BF-F2AA2744FCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_gateway_fabric:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "95483FC6-1850-4C56-95C6-D65AEF39C5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndIncluding" : "3.7.2",
            "matchCriteriaId" : "53459EB1-5EAE-4F38-86CC-303408A91124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "73A1CDBB-49F6-4AB6-AA67-542FD8017D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_ingress_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.3.3",
            "matchCriteriaId" : "48DC8DC2-497F-48F9-A68B-8EA8DAA507E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.15.1",
            "versionEndIncluding" : "2.21.0",
            "matchCriteriaId" : "05880D9D-7C68-42A8-9374-8BF4E6403757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.28.2",
            "matchCriteriaId" : "156F74E8-589F-43FC-AD64-74E2BFD11A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.29.0",
            "versionEndExcluding" : "1.29.5",
            "matchCriteriaId" : "6205FEE4-C23C-4FBA-953D-35E8B8644D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r33",
            "versionEndExcluding" : "r35",
            "matchCriteriaId" : "E7600A88-7651-4D8E-A04A-3AA81C850CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r32:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36C4308E-651E-437C-84E7-10C542E3ADC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r32:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "FA913184-EAAD-409E-99C6-AB979DAA93F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r32:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "782DF180-1101-4D6A-A1D7-8DADBAF6D9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r32:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0B11F2-4748-492B-9906-F8C4C5EAFF12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r33:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC49B8-7286-4867-9CDA-1C1B469CD304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r33:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "43477C2E-7485-4146-B25C-F58D632CD85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r33:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A25B9CF-02C0-42DE-9C70-F2AD3ACE3CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r34:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "7453D683-FCA7-46EE-BE49-5FD9A01D7F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r34:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "A977BF9F-D165-4B93-B4D2-A177883A5E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r35:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5FFD66-35C3-41AD-BD77-510E34A3AC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r36:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E5F940-048A-446F-9A1E-074612CEA1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_plus:r36:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "7993A0FB-BE7E-4634-BF7F-FDEE3582D3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000159824",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20730",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2026-02-04T15:16:14.570",
      "lastModified" : "2026-02-13T21:36:18.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad existe en BIG-IP Edge Client y clientes VPN de navegador en Windows que puede permitir a los atacantes obtener acceso a información sensible. Nota: Las versiones de software que han alcanzado el Fin de Soporte Técnico (EoTS) no son evaluadas"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "BD3A2286-B181-47DA-BCB3-A9D0E0B357AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "8AA506C6-269A-414F-8D9A-B14BB7557308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:17.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369D38E2-62B5-47C4-B606-7A2DD866133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:17.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF730186-19B8-4B5C-8CA1-75B600C2901D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager_client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.5",
            "versionEndExcluding" : "7.2.6.2",
            "matchCriteriaId" : "4052586B-8122-49FF-AC0C-7F4FB4663EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000158931",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20732",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2026-02-04T15:16:14.740",
      "lastModified" : "2026-02-13T21:44:33.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en una página no revelada de la utilidad de configuración de BIG-IP que podría permitir a un atacante suplantar mensajes de error. Nota: Las versiones de software que han alcanzado el Fin de Soporte Técnico (EoTS) no son evaluadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "BD3A2286-B181-47DA-BCB3-A9D0E0B357AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "004CBB88-E617-4A0A-BE42-E1E6BB52D736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "920FA89D-E154-4936-B88E-8B60D5B39B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "94ADD021-8229-4CDE-AE73-33FB1BD4A3C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "216A1ED3-D0CD-4A08-B9E8-A5B54942E831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "CA7B9727-7694-4D1B-8B48-175196544050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "5481F477-166F-4321-80A0-539095C6B829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "5462B02C-4414-4B14-A671-D8993BD9511D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "4A6B33EA-BD41-45A1-801F-BF2439E4F501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "972BEB00-AAC3-42F7-BB45-881E1A3D1131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "226B7285-7977-4BBC-947E-E9541E1AAB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "8B49FF41-861D-488F-94DC-DAE222A9BE0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "4962EDD5-384F-4ABC-8696-8C4AACEE19BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "CE7A5976-AAA0-4FF1-ADAC-4547F24765FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "5728B748-0795-4056-91E8-B3A0DB3A3081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "C453B7CE-FBA6-46E7-975D-61D7A18773F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "EC77DFC2-A3DC-46E6-9419-0ABA84CD275E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "25701935-02F5-4BD8-95F0-6693C6606558"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "AC71E265-C7B7-4A78-B73A-32B5FECE5D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "8B029869-31AB-4FE2-846E-FC6F7133ADF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.6",
            "matchCriteriaId" : "2760AEE2-DCA4-4ED8-92DE-F409EED1A7D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "8AA506C6-269A-414F-8D9A-B14BB7557308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "572D9204-F862-4D58-81F5-025EBC63C47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "06C03575-5FDA-45B9-B294-9994C083DFEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "A31FB687-E5D0-4895-9144-A56F5DD62762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "B248CFD1-7095-4E6F-A72A-23AA9C1A4615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "1A1E893E-2524-48FF-84B4-3BF607D30B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "9B2FBE19-2AE9-42E4-9F92-FA7436DB3ECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "AF3ABBAB-A921-419F-A0F6-2E0A134A3F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "8D03E914-1383-4950-BC80-811F3CDF2DF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "0CB6BCD4-9FCF-4D87-8F96-44197B2DA34D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "4FC4FD92-F496-46C7-A896-3C8F53F2D86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "BDEC2620-4C8A-4BBF-9DC9-8FE4BDB79068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "8E29086A-10D0-4C7F-AA61-4507AED2B7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "0756AA83-2271-475C-BE33-5DCDF49B6C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "72DBD6A8-D66E-413C-B0A8-03BB4A36EFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "6E9FECC2-B252-4324-8BA6-889FE3B19E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "342FB182-C969-4C10-B19A-B759DAD1A7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "390FCDB9-FEBB-4D6F-B54B-BE2FC5E3A376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "8606D37A-CA80-4D7B-880C-ADD39D2FE540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "6C086154-AA26-4EEE-983A-3320B6F6F4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "99B99D8B-A1CB-45B6-B9A2-E0414807A1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "8AE0F043-6356-426E-AA39-ABAFF736ECE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "100CEE47-7F09-48AF-A3BD-734E6E987790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "3D89B768-239D-4102-A5EA-8723019A4845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "743BE992-18D6-4C09-81FA-9EB497373D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "117BA660-28EE-4C98-BE9F-23A321620B38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "985D71E2-BBD4-4779-AB50-399BC40186B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "2D9CA9C1-B6D9-490F-82ED-0ECBC09C6A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "22EE0EEB-C4B7-4C93-B65F-0219098B75D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "39D1486B-F0D4-4D4C-A11B-E3E1E6F30162"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "2736B84F-D892-4602-8BE7-4329E36E3BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0.",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "44BA40A5-F1F9-416A-AF7A-7624A2620B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "C92E57FE-57F4-4FF5-A89C-FE4BDB804060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "83C8F4D3-FE1E-4BDC-AD32-BC570F325022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "A93E9509-2B18-49D1-9B78-CC49EACFA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "58006023-CFF1-41B3-9961-6D2728E45FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "68C52EBC-167C-4D46-93E1-0302860D42CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "27838D60-7CB2-464A-85CD-9F2BF94DED28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "0CCD0DDB-D6EA-47D1-9E90-90D194B981E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "D83813AD-9401-43F1-9C9A-A52F3334C05F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3.1",
            "matchCriteriaId" : "8229B10B-0902-4FAC-B31D-8DB9E0A3F348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1.4",
            "matchCriteriaId" : "95965E49-EC7F-4CBE-9E1C-B0A8E3057329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000156644",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22548",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2026-02-04T15:16:14.913",
      "lastModified" : "2026-02-13T21:44:47.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "Cuando una política de seguridad BIG-IP Advanced WAF o ASM está configurada en un servidor virtual, solicitudes no reveladas junto con condiciones fuera del control del atacante pueden causar la terminación del proceso bd. Nota: Las versiones de software que han alcanzado el Fin de Soporte Técnico (EoTS) no se evalúan."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3",
            "matchCriteriaId" : "0B24E3BE-8A62-4819-B63C-01EE10E6160F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.3",
            "matchCriteriaId" : "BF0F0A9D-1B7E-4271-B309-64399AC7DD89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000158072",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22549",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2026-02-04T16:16:19.290",
      "lastModified" : "2026-02-13T21:45:34.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad existe en los Servicios de Entrada de Contenedores F5 BIG-IP que puede permitir permisos excesivos para leer secretos del clúster. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no son evaluadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.14.0",
            "matchCriteriaId" : "360D0F1E-4A52-4104-BB5E-6195964CBD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.0.2",
            "matchCriteriaId" : "89E759D7-0A8D-40B0-8BAC-8DB2425765FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C32308-314D-4E0D-B15F-6A68DF21E9F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08E234C-BDCF-4B41-87B9-96BD5578CBBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000157960",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23040",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:19.460",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: fix typo in frequency notification\n\nThe NAN notification is for 5745 MHz which corresponds to channel 149\nand not 5475 which is not actually a valid channel. This could result in\na NULL pointer dereference in cfg80211_next_nan_dw_notif."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: mac80211_hwsim: corregir errata en la notificación de frecuencia\n\nLa notificación NAN es para 5745 MHz, que corresponde al canal 149 y no a 5475, que en realidad no es un canal válido. Esto podría resultar en una desreferencia de puntero NULL en cfg80211_next_nan_dw_notif."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1251bbdb8f5b2ea86ca9b4268a2e6aa34372ab33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/333418872bfecf4843f1ded7a4151685dfcf07d5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23041",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:19.563",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup\n\nWhen bnxt_init_one() fails during initialization (e.g.,\nbnxt_init_int_mode returns -ENODEV), the error path calls\nbnxt_free_hwrm_resources() which destroys the DMA pool and sets\nbp->hwrm_dma_pool to NULL. Subsequently, bnxt_ptp_clear() is called,\nwhich invokes ptp_clock_unregister().\n\nSince commit a60fc3294a37 (\"ptp: rework ptp_clock_unregister() to\ndisable events\"), ptp_clock_unregister() now calls\nptp_disable_all_events(), which in turn invokes the driver's .enable()\ncallback (bnxt_ptp_enable()) to disable PTP events before completing the\nunregistration.\n\nbnxt_ptp_enable() attempts to send HWRM commands via bnxt_ptp_cfg_pin()\nand bnxt_ptp_cfg_event(), both of which call hwrm_req_init(). This\nfunction tries to allocate from bp->hwrm_dma_pool, causing a NULL\npointer dereference:\n\n  bnxt_en 0000:01:00.0 (unnamed net_device) (uninitialized): bnxt_init_int_mode err: ffffffed\n  KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]\n  Call Trace:\n   __hwrm_req_init (drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.c:72)\n   bnxt_ptp_enable (drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c:323 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c:517)\n   ptp_disable_all_events (drivers/ptp/ptp_chardev.c:66)\n   ptp_clock_unregister (drivers/ptp/ptp_clock.c:518)\n   bnxt_ptp_clear (drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c:1134)\n   bnxt_init_one (drivers/net/ethernet/broadcom/bnxt/bnxt.c:16889)\n\nLines are against commit f8f9c1f4d0c7 (\"Linux 6.19-rc3\")\n\nFix this by clearing and unregistering ptp (bnxt_ptp_clear()) before\nfreeing HWRM resources."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbnxt_en: Corrección de un fallo por puntero NULL en bnxt_ptp_enable durante la limpieza de errores\n\nCuando bnxt_init_one() falla durante la inicialización (p. ej., bnxt_init_int_mode devuelve -ENODEV), la ruta de error llama a bnxt_free_hwrm_resources() que destruye el pool de DMA y establece bp-&gt;hwrm_dma_pool a NULL. Posteriormente, se llama a bnxt_ptp_clear(), que invoca a ptp_clock_unregister().\n\nDesde el commit a60fc3294a37 ('ptp: rework ptp_clock_unregister() to disable events'), ptp_clock_unregister() ahora llama a ptp_disable_all_events(), que a su vez invoca la función de callback .enable() del controlador (bnxt_ptp_enable()) para deshabilitar los eventos PTP antes de completar el desregistro.\n\nbnxt_ptp_enable() intenta enviar comandos HWRM a través de bnxt_ptp_cfg_pin() y bnxt_ptp_cfg_event(), ambas llaman a hwrm_req_init(). Esta función intenta asignar memoria de bp-&gt;hwrm_dma_pool, causando una desreferencia de puntero NULL:\n\n  bnxt_en 0000:01:00.0 (net_device sin nombre) (no inicializado): bnxt_init_int_mode err: ffffffed\n  KASAN: desreferencia de puntero nulo en el rango [0x0000000000000028-0x000000000000002f]\n  Traza de Llamadas:\n   __hwrm_req_init (drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.c:72)\n   bnxt_ptp_enable (drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c:323 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c:517)\n   ptp_disable_all_events (drivers/ptp/ptp_chardev.c:66)\n   ptp_clock_unregister (drivers/ptp/ptp_clock.c:518)\n   bnxt_ptp_clear (drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c:1134)\n   bnxt_init_one (drivers/net/ethernet/broadcom/bnxt/bnxt.c:16889)\n\nLas líneas son contra el commit f8f9c1f4d0c7 ('Linux 6.19-rc3')\n\nSolucione esto limpiando y desregistrando ptp (bnxt_ptp_clear()) antes de liberar los recursos HWRM."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0174d5466caefc22f03a36c43b2a3cce7e332627",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/3358995b1a7f9dcb52a56ec8251570d71024dad0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23042",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:19.680",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix aux device unplugging when rdma is not supported by vport\n\nIf vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not\nallocate vdev_info for this vport. This leads to kernel NULL pointer\ndereference in idpf_idc_vport_dev_down(), which references vdev_info for\nevery vport regardless.\n\nCheck, if vdev_info was ever allocated before unplugging aux device."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nidpf: corrección de la desconexión del dispositivo auxiliar cuando rdma no es compatible con el vport\n\nSi los flags del vport no contienen VIRTCHNL2_VPORT_ENABLE_RDMA, el controlador no asigna vdev_info para este vport. Esto lleva a una desreferencia de puntero NULL del kernel en idpf_idc_vport_dev_down(), que referencia vdev_info para cada vport independientemente.\n\nCompruebe si vdev_info fue alguna vez asignado antes de desconectar el dispositivo auxiliar."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0ad6d6e50e9d8bf596cfe77a882ddc20b29f525a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4648fb2f2e7210c53b85220ee07d42d1e4bae3f9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23043",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:19.793",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix NULL pointer dereference in do_abort_log_replay()\n\nCoverity reported a NULL pointer dereference issue (CID 1666756) in\ndo_abort_log_replay(). When btrfs_alloc_path() fails in\nreplay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay()\ncalls do_abort_log_replay() which unconditionally dereferences\nwc->subvol_path when attempting to print debug information. Fix this by\nadding a NULL check before dereferencing wc->subvol_path in\ndo_abort_log_replay()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbtrfs: corrige la desreferencia de puntero NULL en do_abort_log_replay()\n\nCoverity informó un problema de desreferencia de puntero NULL (CID 1666756) en do_abort_log_replay(). Cuando btrfs_alloc_path() falla en replay_one_buffer(), wc-&gt;subvol_path es NULL, pero btrfs_abort_log_replay() llama a do_abort_log_replay() que desreferencia incondicionalmente wc-&gt;subvol_path al intentar imprimir información de depuración. Esto se corrige añadiendo una comprobación de NULL antes de desreferenciar wc-&gt;subvol_path en do_abort_log_replay()."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/530e3d4af566ca44807d79359b90794dea24c4f3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6d1b61b8e1e44888c643d89225ab819b10649b2e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23044",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:19.897",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nPM: hibernate: Fix crash when freeing invalid crypto compressor\n\nWhen crypto_alloc_acomp() fails, it returns an ERR_PTR value, not NULL.\n\nThe cleanup code in save_compressed_image() and load_compressed_image()\nunconditionally calls crypto_free_acomp() without checking for ERR_PTR,\nwhich causes crypto_acomp_tfm() to dereference an invalid pointer and\ncrash the kernel.\n\nThis can be triggered when the compression algorithm is unavailable\n(e.g., CONFIG_CRYPTO_LZO not enabled).\n\nFix by adding IS_ERR_OR_NULL() checks before calling crypto_free_acomp()\nand acomp_request_free(), similar to the existing kthread_stop() check.\n\n[ rjw: Added 2 empty code lines ]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nPM: hibernate: Corrige un fallo al liberar un compresor criptográfico no válido\n\nCuando crypto_alloc_acomp() falla, devuelve un valor ERR_PTR, no NULL.\n\nEl código de limpieza en save_compressed_image() y load_compressed_image() llama incondicionalmente a crypto_free_acomp() sin comprobar si hay ERR_PTR, lo que provoca que crypto_acomp_tfm() desreferencie un puntero no válido y provoque un fallo en el kernel.\n\nEsto puede activarse cuando el algoritmo de compresión no está disponible (p. ej., CONFIG_CRYPTO_LZO no habilitado).\n\nSolución añadiendo comprobaciones IS_ERR_OR_NULL() antes de llamar a crypto_free_acomp() y acomp_request_free(), similar a la comprobación kthread_stop() existente.\n\n[ rjw: Added 2 empty code lines ]"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/7966cf0ebe32c981bfa3db252cb5fc3bb1bf2e77",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/b7a883b0135dbc6817e90a829421c9fc8cd94bad",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23045",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:20.007",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ena: fix missing lock when update devlink params\n\nFix assert lock warning while calling devl_param_driverinit_value_set()\nin ena.\n\nWARNING: net/devlink/core.c:261 at devl_assert_locked+0x62/0x90, CPU#0: kworker/0:0/9\nCPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.19.0-rc2+ #1 PREEMPT(lazy)\nHardware name: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017\nWorkqueue: events work_for_cpu_fn\nRIP: 0010:devl_assert_locked+0x62/0x90\n\nCall Trace:\n <TASK>\n devl_param_driverinit_value_set+0x15/0x1c0\n ena_devlink_alloc+0x18c/0x220 [ena]\n ? __pfx_ena_devlink_alloc+0x10/0x10 [ena]\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? devm_ioremap_wc+0x9a/0xd0\n ena_probe+0x4d2/0x1b20 [ena]\n ? __lock_acquire+0x56a/0xbd0\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ? local_clock+0x15/0x30\n ? __lock_release.isra.0+0x1c9/0x340\n ? mark_held_locks+0x40/0x70\n ? lockdep_hardirqs_on_prepare.part.0+0x92/0x170\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ......\n </TASK>"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/ena: corregir bloqueo faltante al actualizar los parámetros de devlink\n\nCorregir la advertencia de bloqueo de aserción al llamar a devl_param_driverinit_value_set() en ena.\n\nADVERTENCIA: net/devlink/core.c:261 at devl_assert_locked+0x62/0x90, CPU#0: kworker/0:0/9\nCPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 No contaminado 6.19.0-rc2+ #1 PREEMPT(lazy)\nNombre del hardware: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017\nCola de trabajo: events work_for_cpu_fn\nRIP: 0010:devl_assert_locked+0x62/0x90\n\nTraza de llamada:\n \n devl_param_driverinit_value_set+0x15/0x1c0\n ena_devlink_alloc+0x18c/0x220 [ena]\n ? __pfx_ena_devlink_alloc+0x10/0x10 [ena]\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? devm_ioremap_wc+0x9a/0xd0\n ena_probe+0x4d2/0x1b20 [ena]\n ? __lock_acquire+0x56a/0xbd0\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ? local_clock+0x15/0x30\n ? __lock_release.isra.0+0x1c9/0x340\n ? mark_held_locks+0x40/0x70\n ? lockdep_hardirqs_on_prepare.part.0+0x92/0x170\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ......\n "
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8da901ffe497a53fa4ecc3ceed0e6d771586f88e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f2c4bcfa193eef1b7457a56be9c47a8de015f225",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23046",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:20.110",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio_net: fix device mismatch in devm_kzalloc/devm_kfree\n\nInitial rss_hdr allocation uses virtio_device->device,\nbut virtnet_set_queues() frees using net_device->device.\nThis device mismatch causing below devres warning\n\n[ 3788.514041] ------------[ cut here ]------------\n[ 3788.514044] WARNING: drivers/base/devres.c:1095 at devm_kfree+0x84/0x98, CPU#16: vdpa/1463\n[ 3788.514054] Modules linked in: octep_vdpa virtio_net virtio_vdpa [last unloaded: virtio_vdpa]\n[ 3788.514064] CPU: 16 UID: 0 PID: 1463 Comm: vdpa Tainted: G        W           6.18.0 #10 PREEMPT\n[ 3788.514067] Tainted: [W]=WARN\n[ 3788.514069] Hardware name: Marvell CN106XX board (DT)\n[ 3788.514071] pstate: 63400009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n[ 3788.514074] pc : devm_kfree+0x84/0x98\n[ 3788.514076] lr : devm_kfree+0x54/0x98\n[ 3788.514079] sp : ffff800084e2f220\n[ 3788.514080] x29: ffff800084e2f220 x28: ffff0003b2366000 x27: 000000000000003f\n[ 3788.514085] x26: 000000000000003f x25: ffff000106f17c10 x24: 0000000000000080\n[ 3788.514089] x23: ffff00045bb8ab08 x22: ffff00045bb8a000 x21: 0000000000000018\n[ 3788.514093] x20: ffff0004355c3080 x19: ffff00045bb8aa00 x18: 0000000000080000\n[ 3788.514098] x17: 0000000000000040 x16: 000000000000001f x15: 000000000007ffff\n[ 3788.514102] x14: 0000000000000488 x13: 0000000000000005 x12: 00000000000fffff\n[ 3788.514106] x11: ffffffffffffffff x10: 0000000000000005 x9 : ffff800080c8c05c\n[ 3788.514110] x8 : ffff800084e2eeb8 x7 : 0000000000000000 x6 : 000000000000003f\n[ 3788.514115] x5 : ffff8000831bafe0 x4 : ffff800080c8b010 x3 : ffff0004355c3080\n[ 3788.514119] x2 : ffff0004355c3080 x1 : 0000000000000000 x0 : 0000000000000000\n[ 3788.514123] Call trace:\n[ 3788.514125]  devm_kfree+0x84/0x98 (P)\n[ 3788.514129]  virtnet_set_queues+0x134/0x2e8 [virtio_net]\n[ 3788.514135]  virtnet_probe+0x9c0/0xe00 [virtio_net]\n[ 3788.514139]  virtio_dev_probe+0x1e0/0x338\n[ 3788.514144]  really_probe+0xc8/0x3a0\n[ 3788.514149]  __driver_probe_device+0x84/0x170\n[ 3788.514152]  driver_probe_device+0x44/0x120\n[ 3788.514155]  __device_attach_driver+0xc4/0x168\n[ 3788.514158]  bus_for_each_drv+0x8c/0xf0\n[ 3788.514161]  __device_attach+0xa4/0x1c0\n[ 3788.514164]  device_initial_probe+0x1c/0x30\n[ 3788.514168]  bus_probe_device+0xb4/0xc0\n[ 3788.514170]  device_add+0x614/0x828\n[ 3788.514173]  register_virtio_device+0x214/0x258\n[ 3788.514175]  virtio_vdpa_probe+0xa0/0x110 [virtio_vdpa]\n[ 3788.514179]  vdpa_dev_probe+0xa8/0xd8\n[ 3788.514183]  really_probe+0xc8/0x3a0\n[ 3788.514186]  __driver_probe_device+0x84/0x170\n[ 3788.514189]  driver_probe_device+0x44/0x120\n[ 3788.514192]  __device_attach_driver+0xc4/0x168\n[ 3788.514195]  bus_for_each_drv+0x8c/0xf0\n[ 3788.514197]  __device_attach+0xa4/0x1c0\n[ 3788.514200]  device_initial_probe+0x1c/0x30\n[ 3788.514203]  bus_probe_device+0xb4/0xc0\n[ 3788.514206]  device_add+0x614/0x828\n[ 3788.514209]  _vdpa_register_device+0x58/0x88\n[ 3788.514211]  octep_vdpa_dev_add+0x104/0x228 [octep_vdpa]\n[ 3788.514215]  vdpa_nl_cmd_dev_add_set_doit+0x2d0/0x3c0\n[ 3788.514218]  genl_family_rcv_msg_doit+0xe4/0x158\n[ 3788.514222]  genl_rcv_msg+0x218/0x298\n[ 3788.514225]  netlink_rcv_skb+0x64/0x138\n[ 3788.514229]  genl_rcv+0x40/0x60\n[ 3788.514233]  netlink_unicast+0x32c/0x3b0\n[ 3788.514237]  netlink_sendmsg+0x170/0x3b8\n[ 3788.514241]  __sys_sendto+0x12c/0x1c0\n[ 3788.514246]  __arm64_sys_sendto+0x30/0x48\n[ 3788.514249]  invoke_syscall.constprop.0+0x58/0xf8\n[ 3788.514255]  do_el0_svc+0x48/0xd0\n[ 3788.514259]  el0_svc+0x48/0x210\n[ 3788.514264]  el0t_64_sync_handler+0xa0/0xe8\n[ 3788.514268]  el0t_64_sync+0x198/0x1a0\n[ 3788.514271] ---[ end trace 0000000000000000 ]---\n\nFix by using virtio_device->device consistently for\nallocation and deallocation"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvirtio_net: corrige la falta de coincidencia de dispositivo en devm_kzalloc/devm_kfree\n\nLa asignación inicial de rss_hdr utiliza virtio_device-&gt;device,\npero virtnet_set_queues() libera utilizando net_device-&gt;device.\nEsta falta de coincidencia de dispositivo causa la siguiente advertencia de devres\n\n[ 3788.514041] ------------[ cut here ]------------\n[ 3788.514044] WARNING: drivers/base/devres.c:1095 at devm_kfree+0x84/0x98, CPU#16: vdpa/1463\n[ 3788.514054] Modules linked in: octep_vdpa virtio_net virtio_vdpa [last unloaded: virtio_vdpa]\n[ 3788.514064] CPU: 16 UID: 0 PID: 1463 Comm: vdpa Tainted: G        W           6.18.0 #10 PREEMPT\n[ 3788.514067] Tainted: [W]=WARN\n[ 3788.514069] Hardware name: Marvell CN106XX board (DT)\n[ 3788.514071] pstate: 63400009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n[ 3788.514074] pc : devm_kfree+0x84/0x98\n[ 3788.514076] lr : devm_kfree+0x54/0x98\n[ 3788.514079] sp : ffff800084e2f220\n[ 3788.514080] x29: ffff800084e2f220 x28: ffff0003b2366000 x27: 000000000000003f\n[ 3788.514085] x26: 000000000000003f x25: ffff000106f17c10 x24: 0000000000000080\n[ 3788.514089] x23: ffff00045bb8ab08 x22: ffff00045bb8a000 x21: 0000000000000018\n[ 3788.514093] x20: ffff0004355c3080 x19: ffff00045bb8aa00 x18: 0000000000080000\n[ 3788.514098] x17: 0000000000000040 x16: 000000000000001f x15: 000000000007ffff\n[ 3788.514102] x14: 0000000000000488 x13: 0000000000000005 x12: 00000000000fffff\n[ 3788.514106] x11: ffffffffffffffff x10: 0000000000000005 x9 : ffff800080c8c05c\n[ 3788.514110] x8 : ffff800084e2eeb8 x7 : 0000000000000000 x6 : 000000000000003f\n[ 3788.514115] x5 : ffff8000831bafe0 x4 : ffff800080c8b010 x3 : ffff0004355c3080\n[ 3788.514119] x2 : ffff0004355c3080 x1 : 0000000000000000 x0 : 0000000000000000\n[ 3788.514123] Call trace:\n[ 3788.514125]  devm_kfree+0x84/0x98 (P)\n[ 3788.514129]  virtnet_set_queues+0x134/0x2e8 [virtio_net]\n[ 3788.514135]  virtnet_probe+0x9c0/0xe00 [virtio_net]\n[ 3788.514139]  virtio_dev_probe+0x1e0/0x338\n[ 3788.514144]  really_probe+0xc8/0x3a0\n[ 3788.514149]  __driver_probe_device+0x84/0x170\n[ 3788.514152]  driver_probe_device+0x44/0x120\n[ 3788.514155]  __device_attach_driver+0xc4/0x168\n[ 3788.514158]  bus_for_each_drv+0x8c/0xf0\n[ 3788.514161]  __device_attach+0xa4/0x1c0\n[ 3788.514164]  device_initial_probe+0x1c/0x30\n[ 3788.514168]  bus_probe_device+0xb4/0xc0\n[ 3788.514170]  device_add+0x614/0x828\n[ 3788.514173]  register_virtio_device+0x214/0x258\n[ 3788.514175]  virtio_vdpa_probe+0xa0/0x110 [virtio_vdpa]\n[ 3788.514179]  vdpa_dev_probe+0xa8/0xd8\n[ 3788.514183]  really_probe+0xc8/0x3a0\n[ 3788.514186]  __driver_probe_device+0x84/0x170\n[ 3788.514189]  driver_probe_device+0x44/0x120\n[ 3788.514192]  __device_attach_driver+0xc4/0x168\n[ 3788.514195]  bus_for_each_drv+0x8c/0xf0\n[ 3788.514197]  __device_attach+0xa4/0x1c0\n[ 3788.514200]  device_initial_probe+0x1c/0x30\n[ 3788.514203]  bus_probe_device+0xb4/0xc0\n[ 3788.514206]  device_add+0x614/0x828\n[ 3788.514209]  _vdpa_register_device+0x58/0x88\n[ 3788.514211]  octep_vdpa_dev_add+0x104/0x228 [octep_vdpa]\n[ 3788.514215]  vdpa_nl_cmd_dev_add_set_doit+0x2d0/0x3c0\n[ 3788.514218]  genl_family_rcv_msg_doit+0xe4/0x158\n[ 3788.514222]  genl_rcv_msg+0x218/0x298\n[ 3788.514225]  netlink_rcv_skb+0x64/0x138\n[ 3788.514229]  genl_rcv+0x40/0x60\n[ 3788.514233]  netlink_unicast+0x32c/0x3b0\n[ 3788.514237]  netlink_sendmsg+0x170/0x3b8\n[ 3788.514241]  __sys_sendto+0x12c/0x1c0\n[ 3788.514246]  __arm64_sys_sendto+0x30/0x48\n[ 3788.514249]  invoke_syscall.constprop.0+0x58/0xf8\n[ 3788.514255]  do_el0_svc+0x48/0xd0\n[ 3788.514259]  el0_svc+0x48/0x210\n[ 3788.514264]  el0t_64_sync_handler+0xa0/0xe8\n[ 3788.514268]  el0t_64_sync+0x198/0x1a0\n[ 3788.514271] ---[ end trace 0000000000000000 ]---\n\nSolución mediante el uso de virtio_device-&gt;device de forma consistente para la asignación y desasignación"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/a5e2d902f64c76169c771f584559c82b588090e3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/acb4bc6e1ba34ae1a34a9334a1ce8474c909466e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23047",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:20.227",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: make calc_target() set t->paused, not just clear it\n\nCurrently calc_target() clears t->paused if the request shouldn't be\npaused anymore, but doesn't ever set t->paused even though it's able to\ndetermine when the request should be paused.  Setting t->paused is left\nto __submit_request() which is fine for regular requests but doesn't\nwork for linger requests -- since __submit_request() doesn't operate\non linger requests, there is nowhere for lreq->t.paused to be set.\nOne consequence of this is that watches don't get reestablished on\npaused -> unpaused transitions in cases where requests have been paused\nlong enough for the (paused) unwatch request to time out and for the\nsubsequent (re)watch request to enter the paused state.  On top of the\nwatch not getting reestablished, rbd_reregister_watch() gets stuck with\nrbd_dev->watch_mutex held:\n\n  rbd_register_watch\n    __rbd_register_watch\n      ceph_osdc_watch\n        linger_reg_commit_wait\n\nIt's waiting for lreq->reg_commit_wait to be completed, but for that to\nhappen the respective request needs to end up on need_resend_linger list\nand be kicked when requests are unpaused.  There is no chance for that\nif the request in question is never marked paused in the first place.\n\nThe fact that rbd_dev->watch_mutex remains taken out forever then\nprevents the image from getting unmapped -- \"rbd unmap\" would inevitably\nhang in D state on an attempt to grab the mutex."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlibceph: hacer que calc_target() establezca t-&gt;paused, no solo lo borre\n\nActualmente, calc_target() borra t-&gt;paused si la solicitud ya no debería estar en pausa, pero nunca establece t-&gt;paused a pesar de que es capaz de determinar cuándo la solicitud debería estar en pausa. El establecimiento de t-&gt;paused se deja a __submit_request(), lo cual está bien para las solicitudes regulares pero no funciona para las solicitudes persistentes (linger requests) -- ya que __submit_request() no opera en solicitudes persistentes, no hay dónde establecer lreq-&gt;t.paused. Una consecuencia de esto es que las vigilancias no se restablecen en las transiciones de pausado -&gt; despausado en casos donde las solicitudes han estado en pausa el tiempo suficiente para que la solicitud de desvigilancia (unwatch) (pausada) expire y para que la solicitud de (re)vigilancia (re)watch subsiguiente entre en el estado de pausa. Además de que la vigilancia no se restablece, rbd_reregister_watch() se queda atascado con rbd_dev-&gt;watch_mutex retenido:\n\n  rbd_register_watch\n    __rbd_register_watch\n      ceph_osdc_watch\n        linger_reg_commit_wait\n\nEstá esperando que lreq-&gt;reg_commit_wait se complete, pero para que eso suceda la solicitud respectiva necesita terminar en la lista need_resend_linger y ser activada cuando las solicitudes se despausan. No hay posibilidad de eso si la solicitud en cuestión nunca se marca como pausada en primer lugar.\n\nEl hecho de que rbd_dev-&gt;watch_mutex permanezca retenido indefinidamente entonces evita que la imagen se desmapee -- 'rbd unmap' se colgaría inevitablemente en estado D en un intento de tomar el mutex."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2b3329b3c29d9e188e40d902d5230c2d5989b940",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4d3399c52e0e61720ae898f5a0b5b75d4460ae24",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4ebc711b738d139cabe2fc9e7e7749847676a342",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/5647d42c47b535573b63e073e91164d6a5bb058c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/5d0dc83cb9a69c1d0bea58f1c430199b05f6b021",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6f468f6ff233c6a81e0e761d9124e982903fe9a5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/c0fe2994f9a9d0a2ec9e42441ea5ba74b6a16176",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23048",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T16:16:20.343",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nudp: call skb_orphan() before skb_attempt_defer_free()\n\nStandard UDP receive path does not use skb->destructor.\n\nBut skmsg layer does use it, since it calls skb_set_owner_sk_safe()\nfrom udp_read_skb().\n\nThis then triggers this warning in skb_attempt_defer_free():\n\n    DEBUG_NET_WARN_ON_ONCE(skb->destructor);\n\nWe must call skb_orphan() to fix this issue."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nudp: llamar a skb_orphan() antes de skb_attempt_defer_free()\n\nLa ruta de recepción UDP estándar no utiliza skb-&gt;destructor.\n\nPero la capa skmsg sí lo utiliza, ya que llama a skb_set_owner_sk_safe() desde udp_read_skb().\n\nEsto entonces activa esta advertencia en skb_attempt_defer_free():\n\nDEBUG_NET_WARN_ON_ONCE(skb-&gt;destructor);\n\nDebemos llamar a skb_orphan() para solucionar este problema."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0c63d5683eae6a7b4d81382bcbecb2a19feff90d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e5c8eda39a9fc1547d1398d707aa06c1d080abdd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0537",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T17:16:12.237",
      "lastModified" : "2026-02-06T17:49:40.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo RGB creado maliciosamente, al ser procesado por Autodesk 3ds Max, puede forzar una vulnerabilidad de corrupción de memoria. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026",
            "versionEndExcluding" : "2026.3.2",
            "matchCriteriaId" : "CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0538",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T17:16:12.403",
      "lastModified" : "2026-02-06T17:49:06.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo GIF manipulado maliciosamente, al ser analizado por Autodesk 3ds Max, puede provocar una vulnerabilidad de escritura fuera de límites. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026",
            "versionEndExcluding" : "2026.3.2",
            "matchCriteriaId" : "CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0659",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T17:16:12.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo USD manipulado maliciosamente, cuando se carga o importa en Autodesk Arnold o Autodesk 3ds Max, puede forzar una vulnerabilidad de escritura fuera de límites. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Autodesk/arnold-usd",
        "source" : "psirt@autodesk.com"
      }, {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com"
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0003",
        "source" : "psirt@autodesk.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0660",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T17:16:12.790",
      "lastModified" : "2026-02-06T17:48:33.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo GIF diseñado maliciosamente, al ser analizado por Autodesk 3ds Max, puede causar una vulnerabilidad de desbordamiento de búfer basado en pila. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026",
            "versionEndExcluding" : "2026.3.2",
            "matchCriteriaId" : "CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0661",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T17:16:12.947",
      "lastModified" : "2026-02-06T16:26:55.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo RGB creado maliciosamente, al ser analizado por Autodesk 3ds Max, puede forzar una vulnerabilidad de corrupción de memoria. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026",
            "versionEndExcluding" : "2026.3.2",
            "matchCriteriaId" : "CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0662",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T17:16:13.100",
      "lastModified" : "2026-02-06T14:45:33.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized."
      }, {
        "lang" : "es",
        "value" : "Un directorio de proyecto creado maliciosamente, al abrir un archivo .max en Autodesk 3ds Max, podría llevar a la ejecución de código arbitrario en el contexto del proceso actual debido a la utilización de una Ruta de Búsqueda No Confiable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026",
            "versionEndExcluding" : "2026.3.2",
            "matchCriteriaId" : "CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20056",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-04T17:16:13.927",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Dynamic Vectoring and Streaming (DVS) Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded.\r\n\r\nThis vulnerability is due to improper handling of certain archive files. An attacker could exploit this vulnerability by sending a crafted archive file, which should be blocked, through an affected device. A successful exploit could allow the attacker to bypass the anti-malware scanner and download malware onto an end user workstation. The downloaded malware will not automatically execute unless the end user extracts and launches the malicious file.&nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del motor Dynamic Vectoring and Streaming (DVS) de Cisco AsyncOS Software para Cisco Secure Web Appliance podría permitir a un atacante remoto no autenticado eludir el escáner anti-malware, permitiendo la descarga de archivos comprimidos maliciosos.\n\nEsta vulnerabilidad se debe a un manejo inadecuado de ciertos archivos comprimidos. Un atacante podría explotar esta vulnerabilidad enviando un archivo comprimido manipulado, que debería ser bloqueado, a través de un dispositivo afectado. Un exploit exitoso podría permitir al atacante eludir el escáner anti-malware y descargar malware en una estación de trabajo de usuario final. El malware descargado no se ejecutará automáticamente a menos que el usuario final extraiga y ejecute el archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-archive-bypass-Scx2e8zF",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20098",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-04T17:16:14.107",
      "lastModified" : "2026-03-10T20:14:59.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system.\r\n\r\nThis vulnerability is due to improper input validation in certain sections of the web-based management interface. An attacker could exploit this vulnerability&nbsp;by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to upload arbitrary files to the affected system. The malicious files could overwrite system files that are processed by the&nbsp;root system account and allow arbitrary command execution with&nbsp;root privileges. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of video operator."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de Gestión de Certificados de Cisco Meeting Management podría permitir a un atacante remoto autenticado cargar archivos arbitrarios, ejecutar comandos arbitrarios y elevar privilegios a root en un sistema afectado.\n\nEsta vulnerabilidad se debe a una validación de entrada incorrecta en ciertas secciones de la interfaz de gestión basada en web. Un atacante podría explotar esta vulnerabilidad enviando una solicitud HTTP manipulada a un sistema afectado. Un exploit exitoso podría permitir al atacante cargar archivos arbitrarios en el sistema afectado. Los archivos maliciosos podrían sobrescribir archivos del sistema que son procesados por la cuenta de sistema root y permitir la ejecución de comandos arbitrarios con privilegios de root. Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas para una cuenta de usuario con al menos el rol de operador de video."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:meeting_management:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.12.1",
            "matchCriteriaId" : "697B0AD4-CC33-4DC8-B14B-5162C8230693"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-file-up-kY47n8kK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20111",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-04T17:16:14.273",
      "lastModified" : "2026-03-10T20:14:37.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system.\r\n\r\nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Prime Infrastructure podría permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) almacenado contra los usuarios de la interfaz de un sistema afectado.\n\nEsta vulnerabilidad existe porque la interfaz de gestión basada en web no valida correctamente la entrada proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad insertando código malicioso en campos de datos específicos en la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar esta vulnerabilidad, un atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9",
            "matchCriteriaId" : "7FE6C1B6-F6DE-45A5-908A-8ADA588DDA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndIncluding" : "3.10.6",
            "matchCriteriaId" : "4FBEDB40-E752-4649-8E93-1C281921581D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:update01:*:*:*:*:*:*",
            "matchCriteriaId" : "30799703-8281-4463-AD55-17A166C5640E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-xss-bYeVKCD",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20119",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-04T17:16:14.457",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of input received by an affected device. An attacker could exploit this vulnerability by getting the affected device to render crafted text, for example, a crafted meeting invitation. As indicated in the CVSS score, no user interaction is required, such as accepting the meeting invitation. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de renderizado de texto de Cisco TelePresence Collaboration Endpoint (CE) Software y Cisco RoomOS Software podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación insuficiente de la entrada recibida por un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad haciendo que el dispositivo afectado renderice texto manipulado, por ejemplo, una invitación a una reunión manipulada. Como se indica en la puntuación CVSS, no se requiere interacción del usuario, como aceptar la invitación a la reunión. Un exploit exitoso podría permitir al atacante hacer que el dispositivo afectado se recargue, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tce-roomos-dos-9V9jrC2q",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20123",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-04T17:16:14.627",
      "lastModified" : "2026-03-10T20:13:47.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.\r\n\r\nThis vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Evolved Programmable Network Manager (EPNM) y Cisco Prime Infrastructure podría permitir a un atacante remoto no autenticado redirigir a un usuario a una página web maliciosa.\n\nEsta vulnerabilidad se debe a una validación de entrada incorrecta de los parámetros en la solicitud HTTP. Un atacante podría explotar esta vulnerabilidad interceptando y modificando una solicitud HTTP de un usuario. Un exploit exitoso podría permitir al atacante redirigir al usuario a una página web maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "317FDB7B-04C7-4754-AC47-05012E5898FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9",
            "matchCriteriaId" : "7FE6C1B6-F6DE-45A5-908A-8ADA588DDA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndIncluding" : "3.10.6",
            "matchCriteriaId" : "4FBEDB40-E752-4649-8E93-1C281921581D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:update01:*:*:*:*:*:*",
            "matchCriteriaId" : "30799703-8281-4463-AD55-17A166C5640E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-redirect-6sX82dN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23049",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:15.557",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel\n\nThe connector type for the DataImage SCF0700C48GGU18 panel is missing and\ndevm_drm_panel_bridge_add() requires connector type to be set. This leads\nto a warning and a backtrace in the kernel log and panel does not work:\n\"\nWARNING: CPU: 3 PID: 38 at drivers/gpu/drm/bridge/panel.c:379 devm_drm_of_get_bridge+0xac/0xb8\n\"\nThe warning is triggered by a check for valid connector type in\ndevm_drm_panel_bridge_add(). If there is no valid connector type\nset for a panel, the warning is printed and panel is not added.\nFill in the missing connector type to fix the warning and make\nthe panel operational once again."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/panel-simple: corregir el tipo de conector para el panel DataImage SCF0700C48GGU18\n\nEl tipo de conector para el panel DataImage SCF0700C48GGU18 falta y devm_drm_panel_bridge_add() requiere que el tipo de conector esté configurado. Esto lleva a una advertencia y un backtrace en el registro del kernel y el panel no funciona:\n'WARNING: CPU: 3 PID: 38 at drivers/gpu/drm/bridge/panel.c:379 devm_drm_of_get_bridge+0xac/0xb8'\nLa advertencia es activada por una comprobación de tipo de conector válido en devm_drm_panel_bridge_add(). Si no hay un tipo de conector válido configurado para un panel, la advertencia se imprime y el panel no se añade.\nRellenar el tipo de conector que falta para corregir la advertencia y hacer que el panel vuelva a estar operativo."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/04218cd68d1502000823c8288f37b4f171dcdcae",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6ab3d4353bf75005eaa375677c9fed31148154d6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/83e0d8d22e7ee3151af1951595104887eebed6ab",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/bb309377eece5317207d71fd833f99cca4727fbd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/bc0b17bdba3838e9e17e7e9adc968384ac99938b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f4c330b4499e7334ec6fce535574e09d55843d71",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f7940d3ec1dc6bf719eddc69d4b8e52cc2201896",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23050",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:15.663",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\npNFS: Fix a deadlock when returning a delegation during open()\n\nBen Coddington reports seeing a hang in the following stack trace:\n  0 [ffffd0b50e1774e0] __schedule at ffffffff9ca05415\n  1 [ffffd0b50e177548] schedule at ffffffff9ca05717\n  2 [ffffd0b50e177558] bit_wait at ffffffff9ca061e1\n  3 [ffffd0b50e177568] __wait_on_bit at ffffffff9ca05cfb\n  4 [ffffd0b50e1775c8] out_of_line_wait_on_bit at ffffffff9ca05ea5\n  5 [ffffd0b50e177618] pnfs_roc at ffffffffc154207b [nfsv4]\n  6 [ffffd0b50e1776b8] _nfs4_proc_delegreturn at ffffffffc1506586 [nfsv4]\n  7 [ffffd0b50e177788] nfs4_proc_delegreturn at ffffffffc1507480 [nfsv4]\n  8 [ffffd0b50e1777f8] nfs_do_return_delegation at ffffffffc1523e41 [nfsv4]\n  9 [ffffd0b50e177838] nfs_inode_set_delegation at ffffffffc1524a75 [nfsv4]\n 10 [ffffd0b50e177888] nfs4_process_delegation at ffffffffc14f41dd [nfsv4]\n 11 [ffffd0b50e1778a0] _nfs4_opendata_to_nfs4_state at ffffffffc1503edf [nfsv4]\n 12 [ffffd0b50e1778c0] _nfs4_open_and_get_state at ffffffffc1504e56 [nfsv4]\n 13 [ffffd0b50e177978] _nfs4_do_open at ffffffffc15051b8 [nfsv4]\n 14 [ffffd0b50e1779f8] nfs4_do_open at ffffffffc150559c [nfsv4]\n 15 [ffffd0b50e177a80] nfs4_atomic_open at ffffffffc15057fb [nfsv4]\n 16 [ffffd0b50e177ad0] nfs4_file_open at ffffffffc15219be [nfsv4]\n 17 [ffffd0b50e177b78] do_dentry_open at ffffffff9c09e6ea\n 18 [ffffd0b50e177ba8] vfs_open at ffffffff9c0a082e\n 19 [ffffd0b50e177bd0] dentry_open at ffffffff9c0a0935\n\nThe issue is that the delegreturn is being asked to wait for a layout\nreturn that cannot complete because a state recovery was initiated. The\nstate recovery cannot complete until the open() finishes processing the\ndelegations it was given.\n\nThe solution is to propagate the existing flags that indicate a\nnon-blocking call to the function pnfs_roc(), so that it knows not to\nwait in this situation."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\npNFS: Soluciona un interbloqueo al devolver una delegación durante open()\n\nBen Coddington informa haber visto un cuelgue en el siguiente rastreo de pila:\n  0 [ffffd0b50e1774e0] __schedule at ffffffff9ca05415\n  1 [ffffd0b50e177548] schedule at ffffffff9ca05717\n  2 [ffffd0b50e177558] bit_wait at ffffffff9ca061e1\n  3 [ffffd0b50e177568] __wait_on_bit at ffffffff9ca05cfb\n  4 [ffffd0b50e1775c8] out_of_line_wait_on_bit at ffffffff9ca05ea5\n  5 [ffffd0b50e177618] pnfs_roc at ffffffffc154207b [nfsv4]\n  6 [ffffd0b50e1776b8] _nfs4_proc_delegreturn at ffffffffc1506586 [nfsv4]\n  7 [ffffd0b50e177788] nfs4_proc_delegreturn at ffffffffc1507480 [nfsv4]\n  8 [ffffd0b50e1777f8] nfs_do_return_delegation at ffffffffc1523e41 [nfsv4]\n  9 [ffffd0b50e177838] nfs_inode_set_delegation at ffffffffc1524a75 [nfsv4]\n 10 [ffffd0b50e177888] nfs4_process_delegation at ffffffffc14f41dd [nfsv4]\n 11 [ffffd0b50e1778a0] _nfs4_opendata_to_nfs4_state at ffffffffc1503edf [nfsv4]\n 12 [ffffd0b50e1778c0] _nfs4_open_and_get_state at ffffffffc1504e56 [nfsv4]\n 13 [ffffd0b50e177978] _nfs4_do_open at ffffffffc15051b8 [nfsv4]\n 14 [ffffd0b50e1779f8] nfs4_do_open at ffffffffc150559c [nfsv4]\n 15 [ffffd0b50e177a80] nfs4_atomic_open at ffffffffc15057fb [nfsv4]\n 16 [ffffd0b50e177ad0] nfs4_file_open at ffffffffc15219be [nfsv4]\n 17 [ffffd0b50e177b78] do_dentry_open at ffffffff9c09e6ea\n 18 [ffffd0b50e177ba8] vfs_open at ffffffff9c0a082e\n 19 [ffffd0b50e177bd0] dentry_open at ffffffff9c0a0935\n\nEl problema es que se le está pidiendo a delegreturn que espere por un retorno de diseño que no puede completarse porque se inició una recuperación de estado. La recuperación de estado no puede completarse hasta que open() termine de procesar las delegaciones que se le dieron.\n\nLa solución es propagar las banderas existentes que indican una llamada no bloqueante a la función pnfs_roc(), para que sepa no esperar en esta situación."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/857bf9056291a16785ae3be1d291026b2437fc48",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a316fd9d3065b753b03d802530004aea481512cc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/c57387d447a2bcbaea009ba5f9497adf3de5edeb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/d6c75aa9d607044d1e5c8498eff0259eed356c32",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23051",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:15.763",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix drm panic null pointer when driver not support atomic\n\nWhen driver not support atomic, fb using plane->fb rather than\nplane->state->fb.\n\n(cherry picked from commit 2f2a72de673513247cd6fae14e53f6c40c5841ef)"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amdgpu: corregir pánico de drm por puntero nulo cuando el controlador no soporta atómico\n\nCuando el controlador no soporta atómico, fb usa plane-&gt;fb en lugar de plane-&gt;state-&gt;fb.\n\n(extraído de la confirmación 2f2a72de673513247cd6fae14e53f6c40c5841ef)"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/9cb6278b44c38899961b36d303d7b18b38be2a6e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a1aedf4053af7dad3772b94b057a7d1f5473055f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23052",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:15.867",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Do not over-allocate ftrace memory\n\nThe pg_remaining calculation in ftrace_process_locs() assumes that\nENTRIES_PER_PAGE multiplied by 2^order equals the actual capacity of the\nallocated page group. However, ENTRIES_PER_PAGE is PAGE_SIZE / ENTRY_SIZE\n(integer division). When PAGE_SIZE is not a multiple of ENTRY_SIZE (e.g.\n4096 / 24 = 170 with remainder 16), high-order allocations (like 256 pages)\nhave significantly more capacity than 256 * 170. This leads to pg_remaining\nbeing underestimated, which in turn makes skip (derived from skipped -\npg_remaining) larger than expected, causing the WARN(skip != remaining)\nto trigger.\n\nExtra allocated pages for ftrace: 2 with 654 skipped\nWARNING: CPU: 0 PID: 0 at kernel/trace/ftrace.c:7295 ftrace_process_locs+0x5bf/0x5e0\n\nA similar problem in ftrace_allocate_records() can result in allocating\ntoo many pages. This can trigger the second warning in\nftrace_process_locs().\n\nExtra allocated pages for ftrace\nWARNING: CPU: 0 PID: 0 at kernel/trace/ftrace.c:7276 ftrace_process_locs+0x548/0x580\n\nUse the actual capacity of a page group to determine the number of pages\nto allocate. Have ftrace_allocate_pages() return the number of allocated\npages to avoid having to calculate it. Use the actual page group capacity\nwhen validating the number of unused pages due to skipped entries.\nDrop the definition of ENTRIES_PER_PAGE since it is no longer used."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nftrace: No sobreasignar memoria de ftrace\n\nEl cálculo de pg_remaining en ftrace_process_locs() asume que ENTRIES_PER_PAGE multiplicado por 2^order es igual a la capacidad real del grupo de páginas asignado. Sin embargo, ENTRIES_PER_PAGE es PAGE_SIZE / ENTRY_SIZE (división entera). Cuando PAGE_SIZE no es un múltiplo de ENTRY_SIZE (por ejemplo, 4096 / 24 = 170 con resto 16), las asignaciones de orden superior (como 256 páginas) tienen significativamente más capacidad que 256 * 170. Esto lleva a que pg_remaining sea subestimado, lo que a su vez hace que skip (derivado de skipped - pg_remaining) sea mayor de lo esperado, lo que provoca que se active el WARN(skip != remaining).\n\nPáginas extra asignadas para ftrace: 2 con 654 omitidas\nADVERTENCIA: CPU: 0 PID: 0 en kernel/trace/ftrace.c:7295 ftrace_process_locs+0x5bf/0x5e0\n\nUn problema similar en ftrace_allocate_records() puede resultar en la asignación de demasiadas páginas. Esto puede activar la segunda advertencia en ftrace_process_locs().\n\nPáginas extra asignadas para ftrace\nADVERTENCIA: CPU: 0 PID: 0 en kernel/trace/ftrace.c:7276 ftrace_process_locs+0x548/0x580\n\nUtilice la capacidad real de un grupo de páginas para determinar el número de páginas a asignar. Haga que ftrace_allocate_pages() devuelva el número de páginas asignadas para evitar tener que calcularlo. Utilice la capacidad real del grupo de páginas al validar el número de páginas no utilizadas debido a entradas omitidas. Elimine la definición de ENTRIES_PER_PAGE ya que ya no se utiliza."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/9aef476717994e96dadfb359641c4b82b521aa36",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/be55257fab181b93af38f8c4b1b3cb453a78d742",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23053",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:15.970",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix a deadlock involving nfs_release_folio()\n\nWang Zhaolong reports a deadlock involving NFSv4.1 state recovery\nwaiting on kthreadd, which is attempting to reclaim memory by calling\nnfs_release_folio(). The latter cannot make progress due to state\nrecovery being needed.\n\nIt seems that the only safe thing to do here is to kick off a writeback\nof the folio, without waiting for completion, or else kicking off an\nasynchronous commit."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nNFS: Corrección de un interbloqueo que involucra a nfs_release_folio()\n\nWang Zhaolong informa de un interbloqueo que involucra la recuperación de estado de NFSv4.1 esperando en kthreadd, que está intentando reclamar memoria llamando a nfs_release_folio(). Este último no puede avanzar debido a que se necesita la recuperación de estado.\n\nParece que lo único seguro que se puede hacer aquí es iniciar una escritura diferida del folio, sin esperar a que se complete, o bien iniciar una confirmación asíncrona."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/19b4d9ab5e77843eac0429c019470c02f8710b55",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/49d352bc263fe4a834233338bfaad31b3109addf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a4810f8beb0122f032f10735f98d257aa6064f4c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/cce0be6eb4971456b703aaeafd571650d314bcca",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23054",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.070",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hv_netvsc: reject RSS hash key programming without RX indirection table\n\nRSS configuration requires a valid RX indirection table. When the device\nreports a single receive queue, rndis_filter_device_add() does not\nallocate an indirection table, accepting RSS hash key updates in this\nstate leads to a hang.\n\nFix this by gating netvsc_set_rxfh() on ndc->rx_table_sz and return\n-EOPNOTSUPP when the table is absent. This aligns set_rxfh with the device\ncapabilities and prevents incorrect behavior."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: hv_netvsc: rechazar la programación de clave hash RSS sin tabla de indirección RX\n\nLa configuración de RSS requiere una tabla de indirección RX válida. Cuando el dispositivo informa una única cola de recepción, rndis_filter_device_add() no asigna una tabla de indirección; aceptar actualizaciones de clave hash RSS en este estado lleva a un cuelgue.\n\nSolucionar esto al restringir netvsc_set_rxfh() en ndc-&gt;rx_table_sz y devolver -EOPNOTSUPP cuando la tabla está ausente. Esto alinea set_rxfh con las capacidades del dispositivo y previene un comportamiento incorrecto."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4cd55c609e85ae2313248ef1a33619a3eef44a16",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/8288136f508e78eb3563e7073975999cf225a2f9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/82c9039c8ebb715753a40434df714f865a3aec9c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/d23564955811da493f34412d7de60fa268c8cb50",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23055",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: riic: Move suspend handling to NOIRQ phase\n\nCommit 53326135d0e0 (\"i2c: riic: Add suspend/resume support\") added\nsuspend support for the Renesas I2C driver and following this change\non RZ/G3E the following WARNING is seen on entering suspend ...\n\n[  134.275704] Freezing remaining freezable tasks completed (elapsed 0.001 seconds)\n[  134.285536] ------------[ cut here ]------------\n[  134.290298] i2c i2c-2: Transfer while suspended\n[  134.295174] WARNING: drivers/i2c/i2c-core.h:56 at __i2c_smbus_xfer+0x1e4/0x214, CPU#0: systemd-sleep/388\n[  134.365507] Tainted: [W]=WARN\n[  134.368485] Hardware name: Renesas SMARC EVK version 2 based on r9a09g047e57 (DT)\n[  134.375961] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[  134.382935] pc : __i2c_smbus_xfer+0x1e4/0x214\n[  134.387329] lr : __i2c_smbus_xfer+0x1e4/0x214\n[  134.391717] sp : ffff800083f23860\n[  134.395040] x29: ffff800083f23860 x28: 0000000000000000 x27: ffff800082ed5d60\n[  134.402226] x26: 0000001f4395fd74 x25: 0000000000000007 x24: 0000000000000001\n[  134.409408] x23: 0000000000000000 x22: 000000000000006f x21: ffff800083f23936\n[  134.416589] x20: ffff0000c090e140 x19: ffff0000c090e0d0 x18: 0000000000000006\n[  134.423771] x17: 6f63657320313030 x16: 2e30206465737061 x15: ffff800083f23280\n[  134.430953] x14: 0000000000000000 x13: ffff800082b16ce8 x12: 0000000000000f09\n[  134.438134] x11: 0000000000000503 x10: ffff800082b6ece8 x9 : ffff800082b16ce8\n[  134.445315] x8 : 00000000ffffefff x7 : ffff800082b6ece8 x6 : 80000000fffff000\n[  134.452495] x5 : 0000000000000504 x4 : 0000000000000000 x3 : 0000000000000000\n[  134.459672] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000c9ee9e80\n[  134.466851] Call trace:\n[  134.469311]  __i2c_smbus_xfer+0x1e4/0x214 (P)\n[  134.473715]  i2c_smbus_xfer+0xbc/0x120\n[  134.477507]  i2c_smbus_read_byte_data+0x4c/0x84\n[  134.482077]  isl1208_i2c_read_time+0x44/0x178 [rtc_isl1208]\n[  134.487703]  isl1208_rtc_read_time+0x14/0x20 [rtc_isl1208]\n[  134.493226]  __rtc_read_time+0x44/0x88\n[  134.497012]  rtc_read_time+0x3c/0x68\n[  134.500622]  rtc_suspend+0x9c/0x170\n\nThe warning is triggered because I2C transfers can still be attempted\nwhile the controller is already suspended, due to inappropriate ordering\nof the system sleep callbacks.\n\nIf the controller is autosuspended, there is no way to wake it up once\nruntime PM disabled (in suspend_late()). During system resume, the I2C\ncontroller will be available only after runtime PM is re-enabled\n(in resume_early()). However, this may be too late for some devices.\n\nWake up the controller in the suspend() callback while runtime PM is\nstill enabled. The I2C controller will remain available until the\nsuspend_noirq() callback (pm_runtime_force_suspend()) is called. During\nresume, the I2C controller can be restored by the resume_noirq() callback\n(pm_runtime_force_resume()). Finally, the resume() callback re-enables\nautosuspend. As a result, the I2C controller can remain available until\nthe system enters suspend_noirq() and from resume_noirq()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ni2c: riic: Mover el manejo de suspensión a la fase NOIRQ\n\nEl commit 53326135d0e0 ('i2c: riic: Añadir soporte de suspensión/reanudación') añadió soporte de suspensión para el controlador I2C de Renesas y, tras este cambio en RZ/G3E, se observa la siguiente ADVERTENCIA al entrar en suspensión...\n\n[  134.275704] Freezing remaining freezable tasks completed (elapsed 0.001 seconds)\n[  134.285536] ------------[ cut here ]------------\n[  134.290298] i2c i2c-2: Transfer while suspended\n[  134.295174] WARNING: drivers/i2c/i2c-core.h:56 at __i2c_smbus_xfer+0x1e4/0x214, CPU#0: systemd-sleep/388\n[  134.365507] Tainted: [W]=WARN\n[  134.368485] Hardware name: Renesas SMARC EVK version 2 based on r9a09g047e57 (DT)\n[  134.375961] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[  134.382935] pc : __i2c_smbus_xfer+0x1e4/0x214\n[  134.387329] lr : __i2c_smbus_xfer+0x1e4/0x214\n[  134.391717] sp : ffff800083f23860\n[  134.395040] x29: ffff800083f23860 x28: 0000000000000000 x27: ffff800082ed5d60\n[  134.402226] x26: 0000001f4395fd74 x25: 0000000000000007 x24: 0000000000000001\n[  134.409408] x23: 0000000000000000 x22: 000000000000006f x21: ffff800083f23936\n[  134.416589] x20: ffff0000c090e140 x19: ffff0000c090e0d0 x18: 0000000000000006\n[  134.423771] x17: 6f63657320313030 x16: 2e30206465737061 x15: ffff800083f23280\n[  134.430953] x14: 0000000000000000 x13: ffff800082b16ce8 x12: 0000000000000f09\n[  134.438134] x11: 0000000000000503 x10: ffff800082b6ece8 x9 : ffff800082b16ce8\n[  134.445315] x8 : 00000000ffffefff x7 : ffff800082b6ece8 x6 : 80000000fffff000\n[  134.452495] x5 : 0000000000000504 x4 : 0000000000000000 x3 : 0000000000000000\n[  134.459672] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000c9ee9e80\n[  134.466851] Call trace:\n[  134.469311]  __i2c_smbus_xfer+0x1e4/0x214 (P)\n[  134.473715]  i2c_smbus_xfer+0xbc/0x120\n[  134.477507]  i2c_smbus_read_byte_data+0x4c/0x84\n[  134.482077]  isl1208_i2c_read_time+0x44/0x178 [rtc_isl1208]\n[  134.487703]  isl1208_rtc_read_time+0x14/0x20 [rtc_isl1208]\n[  134.493226]  __rtc_read_time+0x44/0x88\n[  134.497012]  rtc_read_time+0x3c/0x68\n[  134.500622]  rtc_suspend+0x9c/0x170\n\nLa advertencia se activa porque aún se pueden intentar transferencias I2C mientras el controlador ya está suspendido, debido a un ordenamiento inapropiado de las retrollamadas de suspensión del sistema.\n\nSi el controlador está autosuspendido, no hay forma de despertarlo una vez que el PM en tiempo de ejecución está deshabilitado (en suspend_late()). Durante la reanudación del sistema, el controlador I2C estará disponible solo después de que el PM en tiempo de ejecución se vuelva a habilitar (en resume_early()). Sin embargo, esto puede ser demasiado tarde para algunos dispositivos.\n\nDespertar el controlador en la retrollamada suspend() mientras el PM en tiempo de ejecución aún está habilitado. El controlador I2C permanecerá disponible hasta que se llame a la retrollamada suspend_noirq() (pm_runtime_force_suspend()). Durante la reanudación, el controlador I2C puede ser restaurado por la retrollamada resume_noirq() (pm_runtime_force_resume()). Finalmente, la retrollamada resume() vuelve a habilitar la autosuspensión. Como resultado, el controlador I2C puede permanecer disponible hasta que el sistema entre en suspend_noirq() y desde resume_noirq()."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0b4c0fbbe00b7de76bdaea7fa771017d7a979b0d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/469f8fe4c87e43520f279e45b927c35d6fe99194",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e383f0961422f983451ac4dd6aed1a3d3311f2be",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23056",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.273",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nuacce: implement mremap in uacce_vm_ops to return -EPERM\n\nThe current uacce_vm_ops does not support the mremap operation of\nvm_operations_struct. Implement .mremap to return -EPERM to remind\nusers.\n\nThe reason we need to explicitly disable mremap is that when the\ndriver does not implement .mremap, it uses the default mremap\nmethod. This could lead to a risk scenario:\n\nAn application might first mmap address p1, then mremap to p2,\nfollowed by munmap(p1), and finally munmap(p2). Since the default\nmremap copies the original vma's vm_private_data (i.e., q) to the\nnew vma, both munmap operations would trigger vma_close, causing\nq->qfr to be freed twice(qfr will be set to null here, so repeated\nrelease is ok)."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nuacce: implementar mremap en uacce_vm_ops para devolver -EPERM\n\nEl uacce_vm_ops actual no soporta la operación mremap de vm_operations_struct. Implementar .mremap para devolver -EPERM para recordar a los usuarios.\n\nLa razón por la que necesitamos deshabilitar explícitamente mremap es que cuando el controlador no implementa .mremap, utiliza el método mremap predeterminado. Esto podría llevar a un escenario de riesgo:\n\nUna aplicación podría primero mmap la dirección p1, luego mremap a p2, seguido de munmap(p1), y finalmente munmap(p2). Dado que el mremap predeterminado copia el vm_private_data del vma original (es decir, q) al nuevo vma, ambas operaciones munmap activarían vma_close, causando que q-&gt;qfr se libere dos veces (qfr se establecerá en nulo aquí, por lo que la liberación repetida está bien)."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/02695347be532b628f22488300d40c4eba48b9b7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4c042bc71474dbe417c268f4bfb8ec196f802f07",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/75b29bdc935ff93b8e8bf6f6b4d8a4810b26e06f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/78d99f062d42e3af2ca46bde1a8e46e0dfd372e3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a407ddd61b3e6afc5ccfcd1478797171cf5686ee",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ba29b59d124e725e0377f09b2044909c91d657a1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ebfa85658a39b49ec3901ceea7535b73aa0429e6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23057",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.380",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: Coalesce only linear skb\n\nvsock/virtio common tries to coalesce buffers in rx queue: if a linear skb\n(with a spare tail room) is followed by a small skb (length limited by\nGOOD_COPY_LEN = 128), an attempt is made to join them.\n\nSince the introduction of MSG_ZEROCOPY support, assumption that a small skb\nwill always be linear is incorrect. In the zerocopy case, data is lost and\nthe linear skb is appended with uninitialized kernel memory.\n\nOf all 3 supported virtio-based transports, only loopback-transport is\naffected. G2H virtio-transport rx queue operates on explicitly linear skbs;\nsee virtio_vsock_alloc_linear_skb() in virtio_vsock_rx_fill(). H2G\nvhost-transport may allocate non-linear skbs, but only for sizes that are\nnot considered for coalescence; see PAGE_ALLOC_COSTLY_ORDER in\nvirtio_vsock_alloc_skb().\n\nEnsure only linear skbs are coalesced. Note that skb_tailroom(last_skb) > 0\nguarantees last_skb is linear."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvsock/virtio: Coalescer solo skb lineal\n\nEl común de vsock/virtio intenta coalescer búferes en la cola rx: si un skb lineal (con espacio de cola libre) es seguido por un skb pequeño (longitud limitada por GOOD_COPY_LEN = 128), se intenta unirlos.\n\nDesde la introducción del soporte MSG_ZEROCOPY, la suposición de que un skb pequeño siempre será lineal es incorrecta. En el caso de zerocopy, se pierden datos y el skb lineal es anexado con memoria del kernel no inicializada.\n\nDe todos los 3 transportes basados en virtio soportados, solo el transporte loopback se ve afectado. La cola rx del transporte virtio G2H opera con skbs explícitamente lineales; ver virtio_vsock_alloc_linear_skb() en virtio_vsock_rx_fill(). El transporte vhost H2G puede asignar skbs no lineales, pero solo para tamaños que no se consideran para la coalescencia; ver PAGE_ALLOC_COSTLY_ORDER en virtio_vsock_alloc_skb().\n\nAsegurar que solo los skbs lineales sean coalescidos. Tenga en cuenta que skb_tailroom(last_skb) &gt; 0 garantiza que last_skb es lineal."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0386bd321d0f95d041a7b3d7b07643411b044a96",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/568e9cd8ed7ca9bf748c7687ba6501f29d30e59f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/63ef9b300bd09e24c57050c5dbe68feedce42e72",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23058",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak\n\nFix similar memory leak as in commit 7352e1d5932a (\"can: gs_usb:\ngs_usb_receive_bulk_callback(): fix URB memory leak\").\n\nIn ems_usb_open(), the URBs for USB-in transfers are allocated, added to\nthe dev->rx_submitted anchor and submitted. In the complete callback\nems_usb_read_bulk_callback(), the URBs are processed and resubmitted. In\nems_usb_close() the URBs are freed by calling\nusb_kill_anchored_urbs(&dev->rx_submitted).\n\nHowever, this does not take into account that the USB framework unanchors\nthe URB before the complete function is called. This means that once an\nin-URB has been completed, it is no longer anchored and is ultimately not\nreleased in ems_usb_close().\n\nFix the memory leak by anchoring the URB in the\nems_usb_read_bulk_callback() to the dev->rx_submitted anchor."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: ems_usb: ems_usb_read_bulk_callback(): corregir fuga de memoria de URB\n\nCorregir fuga de memoria similar a la del commit 7352e1d5932a ('can: gs_usb: gs_usb_receive_bulk_callback(): corregir fuga de memoria de URB').\n\nEn ems_usb_open(), los URB para transferencias USB de entrada son asignados, añadidos al ancla dev-&gt;rx_submitted y enviados. En la función de devolución de llamada completa ems_usb_read_bulk_callback(), los URB son procesados y reenviados. En ems_usb_close() los URB son liberados llamando a usb_kill_anchored_urbs(&amp;dev-&gt;rx_submitted).\n\nSin embargo, esto no tiene en cuenta que el framework USB desancla el URB antes de que se llame a la función completa. Esto significa que una vez que un URB de entrada ha sido completado, ya no está anclado y finalmente no es liberado en ems_usb_close().\n\nCorregir la fuga de memoria anclando el URB en la ems_usb_read_bulk_callback() al ancla dev-&gt;rx_submitted."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0ce73a0eb5a27070957b67fd74059b6da89cc516",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/46a191ff7eeec33a2ccb2a1bfea34e18fbc5dc1a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/61e6d3674c3d1da1475dc207b3e75c55d678d18e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/68c62b3e53901846b5f68c5a8bade72a5d9c0b87",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e2c71030dc464d437110bcfb367c493fd402bddb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e9410fdd4d5f7eaa6526d8c80e83029d7c86a8e8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f48eabd15194b216030b32445f44230df95f5fe0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23059",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.583",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Sanitize payload size to prevent member overflow\n\nIn qla27xx_copy_fpin_pkt() and qla27xx_copy_multiple_pkt(), the frame_size\nreported by firmware is used to calculate the copy length into\nitem->iocb. However, the iocb member is defined as a fixed-size 64-byte\narray within struct purex_item.\n\nIf the reported frame_size exceeds 64 bytes, subsequent memcpy calls will\noverflow the iocb member boundary. While extra memory might be allocated,\nthis cross-member write is unsafe and triggers warnings under\nCONFIG_FORTIFY_SOURCE.\n\nFix this by capping total_bytes to the size of the iocb member (64 bytes)\nbefore allocation and copying. This ensures all copies remain within the\nbounds of the destination structure member."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nscsi: qla2xxx: Sanitizar el tamaño de la carga útil para prevenir el desbordamiento de miembro\n\nEn qla27xx_copy_fpin_pkt() y qla27xx_copy_multiple_pkt(), el frame_size reportado por el firmware se utiliza para calcular la longitud de la copia en item-&gt;iocb. Sin embargo, el miembro iocb se define como un array de tamaño fijo de 64 bytes dentro de la estructura purex_item.\n\nSi el frame_size reportado excede los 64 bytes, las llamadas subsiguientes a memcpy desbordarán el límite del miembro iocb. Aunque se podría asignar memoria adicional, esta escritura entre miembros es insegura y activa advertencias bajo CONFIG_FORTIFY_SOURCE.\n\nSolucione esto limitando total_bytes al tamaño del miembro iocb (64 bytes) antes de la asignación y la copia. Esto asegura que todas las copias permanezcan dentro de los límites del miembro de la estructura de destino."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1922468a4a80424e5a69f7ba50adcee37f4722e9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/19bc5f2a6962dfaa0e32d0e0bc2271993d85d414",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/408bfa8d70f79ac696cec1bdbdfb3bf43a02e6d0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/aa14451fa5d5f2de919384c637e2a8c604e1a1fe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23060",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.687",
      "lastModified" : "2026-03-13T21:28:47.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec\n\nauthencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than\nthe minimum expected length, crypto_authenc_esn_decrypt() can advance past\nthe end of the destination scatterlist and trigger a NULL pointer dereference\nin scatterwalk_map_and_copy(), leading to a kernel panic (DoS).\n\nAdd a minimum AAD length check to fail fast on invalid inputs."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncrypto: authencesn - rechazar AAD demasiado corto (assoclen&lt;8) para coincidir con la especificación ESP/ESN\n\nauthencesn asume un AAD con formato ESP/ESN. Cuando assoclen es más corto que la longitud mínima esperada, crypto_authenc_esn_decrypt() puede avanzar más allá del final de la scatterlist de destino y activar una desreferencia de puntero NULL en scatterwalk_map_and_copy(), lo que lleva a un pánico del kernel (DoS).\n\nAñadir una comprobación de longitud mínima de AAD para fallar rápidamente con entradas no válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "310EAF71-F6F8-4B31-8921-DF3E4773F0CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/161bdc90fce25bd9890adc67fa1c8563a7acbf40",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2397e9264676be7794f8f7f1e9763d90bd3c7335",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/767e8349f7e929b7dd95c08f0b4cb353459b365e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9532ff0d0e90ff78a214299f594ab9bac81defe4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b0a9609283a5c852addb513dafa655c61eebc1ef",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/df22c9a65e9a9daa368a72fed596af9d7d5876bb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fee86edf5803f1d1f19e3b4f2dacac241bddfa48",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23061",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.787",
      "lastModified" : "2026-03-13T21:28:28.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak\n\nFix similar memory leak as in commit 7352e1d5932a (\"can: gs_usb:\ngs_usb_receive_bulk_callback(): fix URB memory leak\").\n\nIn kvaser_usb_set_{,data_}bittiming() -> kvaser_usb_setup_rx_urbs(), the\nURBs for USB-in transfers are allocated, added to the dev->rx_submitted\nanchor and submitted. In the complete callback\nkvaser_usb_read_bulk_callback(), the URBs are processed and resubmitted. In\nkvaser_usb_remove_interfaces() the URBs are freed by calling\nusb_kill_anchored_urbs(&dev->rx_submitted).\n\nHowever, this does not take into account that the USB framework unanchors\nthe URB before the complete function is called. This means that once an\nin-URB has been completed, it is no longer anchored and is ultimately not\nreleased in usb_kill_anchored_urbs().\n\nFix the memory leak by anchoring the URB in the\nkvaser_usb_read_bulk_callback() to the dev->rx_submitted anchor."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: kvaser_usb: kvaser_usb_read_bulk_callback(): corregir fuga de memoria de URB\n\nCorregir fuga de memoria similar a la del commit 7352e1d5932a ('can: gs_usb: gs_usb_receive_bulk_callback(): corregir fuga de memoria de URB').\n\nEn kvaser_usb_set_{,data_}bittiming() -&gt; kvaser_usb_setup_rx_urbs(), los URB para transferencias USB de entrada se asignan, se añaden al ancla dev-&gt;rx_submitted y se envían. En la función de devolución de llamada completa kvaser_usb_read_bulk_callback(), los URB se procesan y se reenvían. En kvaser_usb_remove_interfaces(), los URB se liberan llamando a usb_kill_anchored_urbs(&amp;dev-&gt;rx_submitted).\n\nSin embargo, esto no tiene en cuenta que el framework USB desancla el URB antes de que se llame a la función completa. Esto significa que una vez que un URB de entrada ha sido completado, ya no está anclado y finalmente no se libera en usb_kill_anchored_urbs().\n\nCorregir la fuga de memoria anclando el URB en kvaser_usb_read_bulk_callback() al ancla dev-&gt;rx_submitted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C1D3B462-A229-4130-A191-F09550344C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/248e8e1a125fa875158df521b30f2cc7e27eeeaa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3b1a593eab941c3f32417896cc7df564191f2482",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/40a3334ffda479c63e416e61ff086485e24401f7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7c308f7530bffafa994e0aa8dc651a312f4b9ff4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/94a7fc42e21c7d9d1c49778cd1db52de5df52a01",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c1b39fa24c140bc616f51fef4175c1743e2bb132",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d9d824582f2ec76459ffab449e9b05c7bc49645c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23062",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.883",
      "lastModified" : "2026-03-13T21:28:23.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro\n\nThe GET_INSTANCE_ID macro that caused a kernel panic when accessing sysfs\nattributes:\n\n1. Off-by-one error: The loop condition used '<=' instead of '<',\n   causing access beyond array bounds. Since array indices are 0-based\n   and go from 0 to instances_count-1, the loop should use '<'.\n\n2. Missing NULL check: The code dereferenced attr_name_kobj->name\n   without checking if attr_name_kobj was NULL, causing a null pointer\n   dereference in min_length_show() and other attribute show functions.\n\nThe panic occurred when fwupd tried to read BIOS configuration attributes:\n\n  Oops: general protection fault [#1] SMP KASAN NOPTI\n  KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n  RIP: 0010:min_length_show+0xcf/0x1d0 [hp_bioscfg]\n\nAdd a NULL check for attr_name_kobj before dereferencing and corrects\nthe loop boundary to match the pattern used elsewhere in the driver."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nplatform/x86: hp-bioscfg: Corrección de pánico del kernel en la macro GET_INSTANCE_ID\n\nLa macro GET_INSTANCE_ID que causó un pánico del kernel al acceder a los atributos de sysfs:\n\n1. Error de uno: La condición del bucle usaba '&lt;=' en lugar de '&lt;', causando acceso más allá de los límites del array. Dado que los índices del array están basados en 0 y van de 0 a instances_count-1, el bucle debería usar '&lt;'.\n\n2. Falta de comprobación de NULL: El código desreferenció attr_name_kobj-&gt;name sin comprobar si attr_name_kobj era NULL, causando una desreferencia de puntero nulo en min_length_show() y otras funciones de visualización de atributos.\n\nEl pánico ocurrió cuando fwupd intentó leer atributos de configuración del BIOS:\n\n  Oops: general protection fault [#1] SMP KASAN NOPTI\n  KASAN: null-ptr-deref en el rango [0x0000000000000000-0x0000000000000007]\n  RIP: 0010:min_length_show+0xcf/0x1d0 [hp_bioscfg]\n\nAñade una comprobación de NULL para attr_name_kobj antes de desreferenciar y corrige el límite del bucle para que coincida con el patrón usado en otras partes del controlador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "5BC7DC6F-F752-49B5-82B2-A8F4BF9C3EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/193922a23d7294085a47d7719fdb7d66ad0a236f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/25150715e0b049b99df664daf05dab12f41c3e13",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eb5ff1025c92117d5d1cc728bcfa294abe484da1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eba49c1dee9c5e514ca18e52c545bba524e8a045",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23063",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:16.987",
      "lastModified" : "2026-03-13T21:28:17.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nuacce: ensure safe queue release with state management\n\nDirectly calling `put_queue` carries risks since it cannot\nguarantee that resources of `uacce_queue` have been fully released\nbeforehand. So adding a `stop_queue` operation for the\nUACCE_CMD_PUT_Q command and leaving the `put_queue` operation to\nthe final resource release ensures safety.\n\nQueue states are defined as follows:\n- UACCE_Q_ZOMBIE: Initial state\n- UACCE_Q_INIT: After opening `uacce`\n- UACCE_Q_STARTED: After `start` is issued via `ioctl`\n\nWhen executing `poweroff -f` in virt while accelerator are still\nworking, `uacce_fops_release` and `uacce_remove` may execute\nconcurrently. This can cause `uacce_put_queue` within\n`uacce_fops_release` to access a NULL `ops` pointer. Therefore, add\nstate checks to prevent accessing freed pointers."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nuacce: asegurar la liberación segura de la cola con gestión de estado\n\nLlamar directamente a 'put_queue' conlleva riesgos ya que no puede garantizar que los recursos de 'uacce_queue' hayan sido completamente liberados de antemano. Por lo tanto, añadir una operación 'stop_queue' para el comando UACCE_CMD_PUT_Q y dejar la operación 'put_queue' para la liberación final de recursos garantiza la seguridad.\n\nLos estados de la cola se definen de la siguiente manera:\n- UACCE_Q_ZOMBIE: Estado inicial\n- UACCE_Q_INIT: Después de abrir 'uacce'\n- UACCE_Q_STARTED: Después de que se emite 'start' a través de 'ioctl'\n\nAl ejecutar 'poweroff -f' en virt mientras el acelerador sigue funcionando, 'uacce_fops_release' y 'uacce_remove' pueden ejecutarse concurrentemente. Esto puede causar que 'uacce_put_queue' dentro de 'uacce_fops_release' acceda a un puntero 'ops' NULL. Por lo tanto, añadir comprobaciones de estado para evitar acceder a punteros liberados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "5B635197-F169-4155-A953-A712BDD15376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/26c08dabe5475d99a13f353d8dd70e518de45663",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/336fb41a186e7c0415ae94fec9e23d1f04b87483",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/43f233eb6e7b9d88536881a9bc43726d0e34800d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/47634d70073890c9c37e39ab4ff93d4b585b028a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8b57bf1d3b1db692f34bce694a03e41be79f6016",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/92e4f11e29b98ef424ff72d6371acac03e5d973c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b457abeb5d962db88aaf60e249402fd3073dbfab",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23064",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.093",
      "lastModified" : "2026-03-13T21:28:09.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ife: avoid possible NULL deref\n\ntcf_ife_encode() must make sure ife_encode() does not return NULL.\n\nsyzbot reported:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166\nCPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full)\nCall Trace:\n <TASK>\n  ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101\n  tcf_ife_encode net/sched/act_ife.c:841 [inline]\n  tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877\n  tc_act include/net/tc_wrapper.h:130 [inline]\n  tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152\n  tcf_exts_exec include/net/pkt_cls.h:349 [inline]\n  mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42\n  tc_classify include/net/tc_wrapper.h:197 [inline]\n  __tcf_classify net/sched/cls_api.c:1764 [inline]\n  tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860\n  multiq_classify net/sched/sch_multiq.c:39 [inline]\n  multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66\n  dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147\n  __dev_xmit_skb net/core/dev.c:4262 [inline]\n  __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: act_ife: evitar posible desreferencia de NULL\n\ntcf_ife_encode() debe asegurarse de que ife_encode() no devuelva NULL.\n\nsyzbot informó:\n\nOops: fallo de protección general, probablemente para dirección no canónica 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI\nKASAN: desreferencia de puntero nulo en el rango [0x0000000000000000-0x0000000000000007]\n RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166\nCPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 No contaminado syzkaller #0 PREEMPT(full)\nTraza de Llamada:\n \n  ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101\n  tcf_ife_encode net/sched/act_ife.c:841 [inline]\n  tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877\n  tc_act include/net/tc_wrapper.h:130 [inline]\n  tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152\n  tcf_exts_exec include/net/pkt_cls.h:349 [inline]\n  mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42\n  tc_classify include/net/tc_wrapper.h:197 [inline]\n  __tcf_classify net/sched/cls_api.c:1764 [inline]\n  tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860\n  multiq_classify net/sched/sch_multiq.c:39 [inline]\n  multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66\n  dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147\n  __dev_xmit_skb net/core/dev.c:4262 [inline]\n  __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "38F17895-900B-4922-A93D-6EAA1D14927A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/03710cebfc0bcfe247a9e04381e79ea33896e278",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1440d749fe49c8665da6f744323b1671d25a56a0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/27880b0b0d35ad1c98863d09788254e36f874968",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/374915dfc932adf57712df3be010667fd1190e3c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4ef2c77851676b7ed106f0c47755bee9eeec9a40",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6c75fed55080014545f262b7055081cec4768b20",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dd9442aedbeae87c44cc64c0ee41abd296dc008b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23065",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.207",
      "lastModified" : "2026-03-13T21:27:57.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd: Fix memory leak in wbrf_record()\n\nThe tmp buffer is allocated using kcalloc() but is not freed if\nacpi_evaluate_dsm() fails. This causes a memory leak in the error path.\n\nFix this by explicitly freeing the tmp buffer in the error handling\npath of acpi_evaluate_dsm()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nplatform/x86/amd: Corrección de fuga de memoria en wbrf_record()\n\nEl búfer tmp se asigna usando kcalloc() pero no se libera si acpi_evaluate_dsm() falla. Esto provoca una fuga de memoria en la ruta de error.\n\nEsto se soluciona liberando explícitamente el búfer tmp en la ruta de manejo de errores de acpi_evaluate_dsm()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "BDF8DE38-8295-4104-AC61-A15E697A9B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1152dffe01af86e42ce2b208b92ef7f8c275d130",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1a0072bd1f1e559eda3e91a24dbc51c9eb025c54",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2bf1877b7094c684e1d652cac6912cfbc507ad3e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23066",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.303",
      "lastModified" : "2026-04-03T14:16:22.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix recvmsg() unconditional requeue\n\nIf rxrpc_recvmsg() fails because MSG_DONTWAIT was specified but the call at\nthe front of the recvmsg queue already has its mutex locked, it requeues\nthe call - whether or not the call is already queued.  The call may be on\nthe queue because MSG_PEEK was also passed and so the call was not dequeued\nor because the I/O thread requeued it.\n\nThe unconditional requeue may then corrupt the recvmsg queue, leading to\nthings like UAFs or refcount underruns.\n\nFix this by only requeuing the call if it isn't already on the queue - and\nmoving it to the front if it is already queued.  If we don't queue it, we\nhave to put the ref we obtained by dequeuing it.\n\nAlso, MSG_PEEK doesn't dequeue the call so shouldn't call\nrxrpc_notify_socket() for the call if we didn't use up all the data on the\nqueue, so fix that also."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nrxrpc: Corrección del reenqueque incondicional de recvmsg()\n\nSi rxrpc_recvmsg() falla porque se especificó MSG_DONTWAIT pero la llamada al frente de la cola de recvmsg ya tiene su mutex bloqueado, reenquequea la llamada, esté o no la llamada ya en la cola. La llamada puede estar en la cola porque también se pasó MSG_PEEK y por lo tanto la llamada no fue desencolada o porque el hilo de E/S la reenquequeó.\n\nEl reenqueque incondicional puede entonces corromper la cola de recvmsg, lo que lleva a cosas como UAFs o subdesbordamientos de refcount.\n\nSolucione esto reenquequeando la llamada solo si no está ya en la cola, y moviéndola al frente si ya está en la cola. Si no la encolamos, tenemos que liberar la referencia que obtuvimos al desencolarla.\n\nAdemás, MSG_PEEK no desencola la llamada, por lo que no debería llamar a rxrpc_notify_socket() para la llamada si no consumimos todos los datos de la cola, así que corrija eso también."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "A85A6630-48F5-47FB-9871-DB4D2269F664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0464bf75590da75b8413c3e758c04647b4cdb3c6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/2c28769a51deb6022d7fbd499987e237a01dd63a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/930114425065f7ace6e0c0630fab4af75e059ea8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cf969bddd6e69c5777fa89dc88402204e72f312a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23067",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.403",
      "lastModified" : "2026-03-13T21:27:45.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/io-pgtable-arm: fix size_t signedness bug in unmap path\n\n__arm_lpae_unmap() returns size_t but was returning -ENOENT (negative\nerror code) when encountering an unmapped PTE. Since size_t is unsigned,\n-ENOENT (typically -2) becomes a huge positive value (0xFFFFFFFFFFFFFFFE\non 64-bit systems).\n\nThis corrupted value propagates through the call chain:\n  __arm_lpae_unmap() returns -ENOENT as size_t\n  -> arm_lpae_unmap_pages() returns it\n  -> __iommu_unmap() adds it to iova address\n  -> iommu_pgsize() triggers BUG_ON due to corrupted iova\n\nThis can cause IOVA address overflow in __iommu_unmap() loop and\ntrigger BUG_ON in iommu_pgsize() from invalid address alignment.\n\nFix by returning 0 instead of -ENOENT. The WARN_ON already signals\nthe error condition, and returning 0 (meaning \"nothing unmapped\")\nis the correct semantic for size_t return type. This matches the\nbehavior of other io-pgtable implementations (io-pgtable-arm-v7s,\nio-pgtable-dart) which return 0 on error conditions."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\niommu/io-pgtable-arm: corrección de error de signo de size_t en la ruta de desmapeo\n\n__arm_lpae_unmap() devuelve size_t pero estaba devolviendo -ENOENT (código de error negativo) al encontrar una PTE no mapeada. Dado que size_t no tiene signo, -ENOENT (típicamente -2) se convierte en un valor positivo enorme (0xFFFFFFFFFFFFFFFE en sistemas de 64 bits).\n\nEste valor corrupto se propaga a través de la cadena de llamadas:\n  __arm_lpae_unmap() devuelve -ENOENT como size_t\n  -&gt; arm_lpae_unmap_pages() lo devuelve\n  -&gt; __iommu_unmap() lo añade a la dirección iova\n  -&gt; iommu_pgsize() activa BUG_ON debido a iova corrupta\n\nEsto puede causar un desbordamiento de dirección IOVA en el bucle de __iommu_unmap() y activar BUG_ON en iommu_pgsize() por una alineación de dirección inválida.\n\nSe corrige devolviendo 0 en lugar de -ENOENT. El WARN_ON ya señala la condición de error, y devolver 0 (que significa 'nada desmapeado') es la semántica correcta para el tipo de retorno size_t. Esto coincide con el comportamiento de otras implementaciones de io-pgtable (io-pgtable-arm-v7s, io-pgtable-dart) que devuelven 0 en condiciones de error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "467E1359-7F6A-4790-AC45-172024944460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/374e7af67d9d9d6103c2cfc8eb32abfecf3a2fd8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/41ec6988547819756fb65e94fc24f3e0dddf84ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23068",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.500",
      "lastModified" : "2026-03-13T21:27:37.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-sprd-adi: Fix double free in probe error path\n\nThe driver currently uses spi_alloc_host() to allocate the controller\nbut registers it using devm_spi_register_controller().\n\nIf devm_register_restart_handler() fails, the code jumps to the\nput_ctlr label and calls spi_controller_put(). However, since the\ncontroller was registered via a devm function, the device core will\nautomatically call spi_controller_put() again when the probe fails.\nThis results in a double-free of the spi_controller structure.\n\nFix this by switching to devm_spi_alloc_host() and removing the\nmanual spi_controller_put() call."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nspi: spi-sprd-adi: Corregir doble liberación en la ruta de error de sondeo\n\nEl controlador actualmente usa spi_alloc_host() para asignar el controlador pero lo registra usando devm_spi_register_controller().\n\nSi devm_register_restart_handler() falla, el código salta a la etiqueta put_ctlr y llama a spi_controller_put(). Sin embargo, dado que el controlador fue registrado a través de una función devm, el núcleo del dispositivo llamará automáticamente a spi_controller_put() de nuevo cuando el sondeo falle. Esto resulta en una doble liberación de la estructura spi_controller.\n\nCorregir esto cambiando a devm_spi_alloc_host() y eliminando la llamada manual a spi_controller_put()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "73EF54A7-869E-4AD7-9BDE-8C935CABF254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/346775f2b4cf839177e8e86b94aa180a06dc15b0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/383d4f5cffcc8df930d95b06518a9d25a6d74aac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/417cdfd9b9f986e95bfcb1d68eb443e6e0a15f8c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bddd3d10d039729b81cfb0804520c8832a701a0e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f6d6b3f172df118db582fe5ec43ae223a55d99cf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23069",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.610",
      "lastModified" : "2026-03-13T21:27:26.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: fix potential underflow in virtio_transport_get_credit()\n\nThe credit calculation in virtio_transport_get_credit() uses unsigned\narithmetic:\n\n  ret = vvs->peer_buf_alloc - (vvs->tx_cnt - vvs->peer_fwd_cnt);\n\nIf the peer shrinks its advertised buffer (peer_buf_alloc) while bytes\nare in flight, the subtraction can underflow and produce a large\npositive value, potentially allowing more data to be queued than the\npeer can handle.\n\nReuse virtio_transport_has_space() which already handles this case and\nadd a comment to make it clear why we are doing that.\n\n[Stefano: use virtio_transport_has_space() instead of duplicating the code]\n[Stefano: tweak the commit message]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvsock/virtio: soluciona un posible desbordamiento negativo en virtio_transport_get_credit()\n\nEl cálculo de crédito en virtio_transport_get_credit() utiliza aritmética sin signo:\n\nret = vvs-&gt;peer_buf_alloc - (vvs-&gt;tx_cnt - vvs-&gt;peer_fwd_cnt);\n\nSi el par reduce su búfer anunciado (peer_buf_alloc) mientras hay bytes en tránsito, la resta puede sufrir un desbordamiento negativo y producir un valor positivo grande, lo que podría permitir que se pongan en cola más datos de los que el par puede manejar.\n\nReutilizar virtio_transport_has_space() que ya maneja este caso y añadir un comentario para dejar claro por qué lo estamos haciendo.\n\n[Stefano: usar virtio_transport_has_space() en lugar de duplicar el código]\n[Stefano: ajustar el mensaje de commit]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.8",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "68145F3E-ECEF-4C5B-95B5-996FCDAD1705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/02f9af192b98d15883c70dd41ac76d1b0217c899",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3ef3d52a1a9860d094395c7a3e593f3aa26ff012",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d05bc313788f0684b27f0f5b60c52a844669b542",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d96de882d6b99955604669d962ae14e94b66a551",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ec0f1b3da8061be3173d1c39faaf9504f91942c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23070",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.717",
      "lastModified" : "2026-03-25T11:16:18.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nOcteontx2-af: Add proper checks for fwdata\n\nfirmware populates MAC address, link modes (supported, advertised)\nand EEPROM data in shared firmware structure which kernel access\nvia MAC block(CGX/RPM).\n\nAccessing fwdata, on boards booted with out MAC block leading to\nkernel panics.\n\nInternal error: Oops: 0000000096000005 [#1]  SMP\n[   10.460721] Modules linked in:\n[   10.463779] CPU: 0 UID: 0 PID: 174 Comm: kworker/0:3 Not tainted 6.19.0-rc5-00154-g76ec646abdf7-dirty #3 PREEMPT\n[   10.474045] Hardware name: Marvell OcteonTX CN98XX board (DT)\n[   10.479793] Workqueue: events work_for_cpu_fn\n[   10.484159] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[   10.491124] pc : rvu_sdp_init+0x18/0x114\n[   10.495051] lr : rvu_probe+0xe58/0x1d18"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nOcteontx2-af: Añadir comprobaciones adecuadas para fwdata\n\nEl firmware rellena la dirección MAC, los modos de enlace (soportados, anunciados) y los datos de la EEPROM en una estructura de firmware compartida a la que el kernel accede a través del bloque MAC (CGX/RPM).\n\nAcceder a fwdata, en placas arrancadas sin bloque MAC, lleva a pánicos del kernel.\n\nError interno: Oops: 0000000096000005 [#1] SMP\n[   10.460721] Módulos enlazados:\n[   10.463779] CPU: 0 UID: 0 PID: 174 Comm: kworker/0:3 Not tainted 6.19.0-rc5-00154-g76ec646abdf7-dirty #3 PREEMPT\n[   10.474045] Nombre del hardware: Marvell OcteonTX CN98XX board (DT)\n[   10.479793] Cola de trabajo: events work_for_cpu_fn\n[   10.484159] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[   10.491124] pc : rvu_sdp_init+0x18/0x114\n[   10.495051] lr : rvu_probe+0xe58/0x1d18"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "240E945F-1F73-4084-A636-E697646B035B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/079050a23de6b7505595e4af75b36c34f0e9627e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4a3dba48188208e4f66822800e042686784d29d1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e343973fab43c266a40e4e0dabdc4216db6d5eff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23071",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.817",
      "lastModified" : "2026-03-18T17:29:14.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nregmap: Fix race condition in hwspinlock irqsave routine\n\nPreviously, the address of the shared member '&map->spinlock_flags' was\npassed directly to 'hwspin_lock_timeout_irqsave'. This creates a race\ncondition where multiple contexts contending for the lock could overwrite\nthe shared flags variable, potentially corrupting the state for the\ncurrent lock owner.\n\nFix this by using a local stack variable 'flags' to store the IRQ state\ntemporarily."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nregmap: Corrección de condición de carrera en la rutina hwspinlock irqsave\n\nAnteriormente, la dirección del miembro compartido '&amp;map-&gt;spinlock_flags' se pasaba directamente a 'hwspin_lock_timeout_irqsave'. Esto crea una condición de carrera donde múltiples contextos que compiten por el bloqueo podrían sobrescribir la variable de banderas compartida, potencialmente corrompiendo el estado para el propietario actual del bloqueo.\n\nEsto se soluciona usando una variable local de pila 'flags' para almacenar temporalmente el estado IRQ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "95549B78-E6A6-4A71-98AD-769FF0583875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/24f31be6ad70537fd7706269d99c92cade465a09",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4aab0ca0a0f7760e33edcb4e47576064d05128f5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4b58aac989c1e3fafb1c68a733811859df388250",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/766e243ae8c8b27087a4cc605752c0d5ee2daeab",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c2d2cf710dc3ee1a69e00b4ed8de607a92a07889",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e1a7072bc4f958c9e852dc7e57e39f12b0bb44b5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f1e2fe26a51eca95b41420af76d22c2e613efd5e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23072",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:17.923",
      "lastModified" : "2026-03-18T17:17:52.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nl2tp: Fix memleak in l2tp_udp_encap_recv().\n\nsyzbot reported memleak of struct l2tp_session, l2tp_tunnel,\nsock, etc. [0]\n\nThe cited commit moved down the validation of the protocol\nversion in l2tp_udp_encap_recv().\n\nThe new place requires an extra error handling to avoid the\nmemleak.\n\nLet's call l2tp_session_put() there.\n\n[0]:\nBUG: memory leak\nunreferenced object 0xffff88810a290200 (size 512):\n  comm \"syz.0.17\", pid 6086, jiffies 4294944299\n  hex dump (first 32 bytes):\n    7d eb 04 0c 00 00 00 00 01 00 00 00 00 00 00 00  }...............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace (crc babb6a4f):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4958 [inline]\n    slab_alloc_node mm/slub.c:5263 [inline]\n    __do_kmalloc_node mm/slub.c:5656 [inline]\n    __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669\n    kmalloc_noprof include/linux/slab.h:961 [inline]\n    kzalloc_noprof include/linux/slab.h:1094 [inline]\n    l2tp_session_create+0x3a/0x3b0 net/l2tp/l2tp_core.c:1778\n    pppol2tp_connect+0x48b/0x920 net/l2tp/l2tp_ppp.c:755\n    __sys_connect_file+0x7a/0xb0 net/socket.c:2089\n    __sys_connect+0xde/0x110 net/socket.c:2108\n    __do_sys_connect net/socket.c:2114 [inline]\n    __se_sys_connect net/socket.c:2111 [inline]\n    __x64_sys_connect+0x1c/0x30 net/socket.c:2111\n    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n    do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94\n    entry_SYSCALL_64_after_hwframe+0x77/0x7f"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nl2tp: Solucionar fuga de memoria en l2tp_udp_encap_recv().\n\nsyzbot informó una fuga de memoria de struct l2tp_session, l2tp_tunnel, sock, etc. [0]\n\nEl commit citado movió hacia abajo la validación de la versión del protocolo en l2tp_udp_encap_recv().\n\nEl nuevo lugar requiere un manejo de errores adicional para evitar la fuga de memoria.\n\nLlamemos a l2tp_session_put() allí.\n\n[0]:\nERROR: fuga de memoria\nobjeto sin referencia 0xffff88810a290200 (tamaño 512):\n  comm 'syz.0.17', pid 6086, jiffies 4294944299\n  volcado hexadecimal (primeros 32 bytes):\n    7d eb 04 0c 00 00 00 00 01 00 00 00 00 00 00 00  }...............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  rastreo de pila (crc babb6a4f):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4958 [inline]\n    slab_alloc_node mm/slub.c:5263 [inline]\n    __do_kmalloc_node mm/slub.c:5656 [inline]\n    __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669\n    kmalloc_noprof include/linux/slab.h:961 [inline]\n    kzalloc_noprof include/linux/slab.h:1094 [inline]\n    l2tp_session_create+0x3a/0x3b0 net/l2tp/l2tp_core.c:1778\n    pppol2tp_connect+0x48b/0x920 net/l2tp/l2tp_ppp.c:755\n    __sys_connect_file+0x7a/0xb0 net/socket.c:2089\n    __sys_connect+0xde/0x110 net/socket.c:2108\n    __do_sys_connect net/socket.c:2114 [inline]\n    __se_sys_connect net/socket.c:2111 [inline]\n    __x64_sys_connect+0x1c/0x30 net/socket.c:2111\n    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n    do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94\n    entry_SYSCALL_64_after_hwframe+0x77/0x7f"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "B360F4B3-2812-43A4-9C53-C15FABD0EBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4d10edfd1475b69dbd4c47f34b61a3772ece83ca",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5cd158a88eef34e7b100cd9b963873d3b4e41b35",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d4ce79e6dce2a4a49eebceea7b4caf5dc0f0ef3d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23073",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.027",
      "lastModified" : "2026-03-18T20:13:57.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: Fix memory corruption due to not set vif driver data size\n\nThe struct ieee80211_vif contains trailing space for vif driver data,\nwhen struct ieee80211_vif is allocated, the total memory size that is\nallocated is sizeof(struct ieee80211_vif) + size of vif driver data.\nThe size of vif driver data is set by each WiFi driver as needed.\n\nThe RSI911x driver does not set vif driver data size, no trailing space\nfor vif driver data is therefore allocated past struct ieee80211_vif .\nThe RSI911x driver does however use the vif driver data to store its\nvif driver data structure \"struct vif_priv\". An access to vif->drv_priv\nleads to access out of struct ieee80211_vif bounds and corruption of\nsome memory.\n\nIn case of the failure observed locally, rsi_mac80211_add_interface()\nwould write struct vif_priv *vif_info = (struct vif_priv *)vif->drv_priv;\nvif_info->vap_id = vap_idx. This write corrupts struct fq_tin member\nstruct list_head new_flows . The flow = list_first_entry(head, struct\nfq_flow, flowchain); in fq_tin_reset() then reports non-NULL bogus\naddress, which when accessed causes a crash.\n\nThe trigger is very simple, boot the machine with init=/bin/sh , mount\ndevtmpfs, sysfs, procfs, and then do \"ip link set wlan0 up\", \"sleep 1\",\n\"ip link set wlan0 down\" and the crash occurs.\n\nFix this by setting the correct size of vif driver data, which is the\nsize of \"struct vif_priv\", so that memory is allocated and the driver\ncan store its driver data in it, instead of corrupting memory around\nit."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: rsi: Corrección de corrupción de memoria debido a que no se estableció el tamaño de los datos del controlador vif\n\nLa estructura ieee80211_vif contiene espacio adicional para los datos del controlador vif, cuando se asigna la estructura ieee80211_vif, el tamaño total de memoria que se asigna es sizeof(struct ieee80211_vif) + tamaño de los datos del controlador vif. El tamaño de los datos del controlador vif es establecido por cada controlador WiFi según sea necesario.\n\nEl controlador RSI911x no establece el tamaño de los datos del controlador vif, por lo tanto, no se asigna espacio adicional para los datos del controlador vif más allá de la estructura ieee80211_vif. Sin embargo, el controlador RSI911x utiliza los datos del controlador vif para almacenar su estructura de datos del controlador vif 'struct vif_priv'. Un acceso a vif-&gt;drv_priv conduce a un acceso fuera de los límites de la estructura ieee80211_vif y a la corrupción de parte de la memoria.\n\nEn caso de la falla observada localmente, rsi_mac80211_add_interface() escribiría struct vif_priv *vif_info = (struct vif_priv *)vif-&gt;drv_priv; vif_info-&gt;vap_id = vap_idx. Esta escritura corrompe el miembro de la estructura fq_tin struct list_head new_flows. El flow = list_first_entry(head, struct fq_flow, flowchain); en fq_tin_reset() luego reporta una dirección falsa no-NULL, que al ser accedida causa un fallo.\n\nEl disparador es muy simple, arrancar la máquina con init=/bin/sh, montar devtmpfs, sysfs, procfs, y luego ejecutar 'ip link set wlan0 up', 'sleep 1', 'ip link set wlan0 down' y el fallo ocurre.\n\nSolucionar esto estableciendo el tamaño correcto de los datos del controlador vif, que es el tamaño de 'struct vif_priv', para que se asigne memoria y el controlador pueda almacenar sus datos de controlador en ella, en lugar de corromper la memoria a su alrededor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.15",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "FBA7C92F-EB94-40B7-ADBB-A0CE7539DACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0d7c9e793e351cbbe9e06a9ca47d77b6ad288fb0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/31efbcff90884ea5f65bf3d1de01267db51ee3d1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/49ef094fdbc3526e5db2aebb404b84f79c5603dc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4f431d88ea8093afc7ba55edf4652978c5a68f33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7761d7801f40e61069b4df3db88b36d80d089f8a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7c54d0c3e2cad4300be721ec2aecfcf8a63bc9f4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/99129d80a5d4989ef8566f434f3589f60f28042b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23074",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.127",
      "lastModified" : "2026-04-03T14:16:22.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Enforce that teql can only be used as root qdisc\n\nDesign intent of teql is that it is only supposed to be used as root qdisc.\nWe need to check for that constraint.\n\nAlthough not important, I will describe the scenario that unearthed this\nissue for the curious.\n\nGangMin Kim <km.kim1503@gmail.com> managed to concot a scenario as follows:\n\nROOT qdisc 1:0 (QFQ)\n  ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s\n  └── class 1:2 (weight=1, lmax=1514) teql\n\nGangMin sends a packet which is enqueued to 1:1 (netem).\nAny invocation of dequeue by QFQ from this class will not return a packet\nuntil after 6.4s. In the meantime, a second packet is sent and it lands on\n1:2. teql's enqueue will return success and this will activate class 1:2.\nMain issue is that teql only updates the parent visible qlen (sch->q.qlen)\nat dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's\npeek always returns NULL), dequeue will never be called and thus the qlen\nwill remain as 0. With that in mind, when GangMin updates 1:2's lmax value,\nthe qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's\nqlen was not incremented, qfq fails to deactivate the class, but still\nfrees its pointers from the aggregate. So when the first packet is\nrescheduled after 6.4 seconds (netem's delay), a dangling pointer is\naccessed causing GangMin's causing a UAF."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: Forzar que teql solo pueda ser usado como qdisc raíz\n\nLa intención del diseño de teql es que solo se supone que debe ser usado como qdisc raíz.\nNecesitamos verificar esa restricción.\n\nAunque no es importante, describiré el escenario que desenterró este problema para los curiosos.\n\nGangMin Kim  logró idear un escenario de la siguiente manera:\n\nqdisc RAÍZ 1:0 (QFQ)\n  ??? clase 1:1 (peso=15, lmax=16384) netem con retardo de 6.4s\n  ??? clase 1:2 (peso=1, lmax=1514) teql\n\nGangMin envía un paquete que es encolado a 1:1 (netem).\nCualquier invocación de desencolado por QFQ desde esta clase no devolverá un paquete hasta después de 6.4s. Mientras tanto, un segundo paquete es enviado y aterriza en 1:2. El encolado de teql devolverá éxito y esto activará la clase 1:2. El problema principal es que teql solo actualiza el qlen visible del padre (sch-&gt;q.qlen) al desencolar. Dado que QFQ solo llamará a desencolar si peek tiene éxito (y el peek de teql siempre devuelve NULL), desencolar nunca será llamado y, por lo tanto, el qlen permanecerá como 0. Con eso en mente, cuando GangMin actualiza el valor lmax de 1:2, qfq_change_class llama a qfq_deact_rm_from_agg. Dado que el qlen del qdisc hijo no fue incrementado, qfq falla al desactivar la clase, pero aún así libera sus punteros del agregado. Así, cuando el primer paquete es reprogramado después de 6.4 segundos (el retardo de netem), se accede a un puntero colgante causando un UAF de GangMin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12.1",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "09B85227-C981-41DD-9DA8-8AD2A9B88A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6F62EECE-8FB1-4D57-85D8-CB9E23CF313C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0686bedfed34155520f3f735cbf3210cb9044380",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/16ed73c1282d376b956bff23e5139add061767ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4c7e8aa71c9232cba84c289b4b56cba80b280841",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/50da4b9d07a7a463e2cfb738f3ad4cff6b2c9c3b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/73d970ff0eddd874a84c953387c7f4464b705fc6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ae810e6a8ac4fe25042e6825d2a401207a2e41fb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dad49a67c2d817bfec98e6e45121b351e3a0202c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23075",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.227",
      "lastModified" : "2026-03-18T17:16:12.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak\n\nFix similar memory leak as in commit 7352e1d5932a (\"can: gs_usb:\ngs_usb_receive_bulk_callback(): fix URB memory leak\").\n\nIn esd_usb_open(), the URBs for USB-in transfers are allocated, added to\nthe dev->rx_submitted anchor and submitted. In the complete callback\nesd_usb_read_bulk_callback(), the URBs are processed and resubmitted. In\nesd_usb_close() the URBs are freed by calling\nusb_kill_anchored_urbs(&dev->rx_submitted).\n\nHowever, this does not take into account that the USB framework unanchors\nthe URB before the complete function is called. This means that once an\nin-URB has been completed, it is no longer anchored and is ultimately not\nreleased in esd_usb_close().\n\nFix the memory leak by anchoring the URB in the\nesd_usb_read_bulk_callback() to the dev->rx_submitted anchor."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: esd_usb: esd_usb_read_bulk_callback(): corregir fuga de memoria de URB\n\nCorregir fuga de memoria similar a la del commit 7352e1d5932a ('can: gs_usb: gs_usb_receive_bulk_callback(): corregir fuga de memoria de URB').\n\nEn esd_usb_open(), los URB para transferencias USB de entrada son asignados, añadidos al ancla dev-&gt;rx_submitted y enviados. En la función de devolución de llamada completa esd_usb_read_bulk_callback(), los URB son procesados y reenviados. En esd_usb_close(), los URB son liberados llamando a usb_kill_anchored_urbs(&amp;dev-&gt;rx_submitted).\n\nSin embargo, esto no tiene en cuenta que el framework USB desancla el URB antes de que se llame a la función completa. Esto significa que una vez que un URB de entrada ha sido completado, ya no está anclado y finalmente no es liberado en esd_usb_close().\n\nCorregir la fuga de memoria anclando el URB en esd_usb_read_bulk_callback() al ancla dev-&gt;rx_submitted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.36",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "7C2DE327-F70B-4781-9BFB-65F2DF43660F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5a4391bdc6c8357242f62f22069c865b792406b3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/92d26ce07ac3b7a850dc68c8d73d487b39c39b33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/93b34d4ba7266030801a509c088ac77c0d7a12e9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9d1807b442fc3286b204f8e59981b10e743533ce",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a9503ae43256e80db5cba9d449b238607164c51d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/adec5e1f9c99fe079ec4c92cca3f1109a3e257c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dc934d96673992af8568664c1b58e13eb164010d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23076",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.340",
      "lastModified" : "2026-03-18T14:03:25.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ctxfi: Fix potential OOB access in audio mixer handling\n\nIn the audio mixer handling code of ctxfi driver, the conf field is\nused as a kind of loop index, and it's referred in the index callbacks\n(amixer_index() and sum_index()).\n\nAs spotted recently by fuzzers, the current code causes OOB access at\nthose functions.\n| UBSAN: array-index-out-of-bounds in /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48\n| index 8 is out of range for type 'unsigned char [8]'\n\nAfter the analysis, the cause was found to be the lack of the proper\n(re-)initialization of conj field.\n\nThis patch addresses those OOB accesses by adding the proper\ninitializations of the loop indices."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nALSA: ctxfi: Corrección de posible acceso OOB en el manejo del mezclador de audio\n\nEn el código de manejo del mezclador de audio del controlador ctxfi, el campo 'conf' se utiliza como una especie de índice de bucle, y se hace referencia a él en las retrollamadas de índice (amixer_index() y sum_index()).\n\nComo fue detectado recientemente por fuzzers, el código actual causa acceso OOB en esas funciones.\n| UBSAN: índice de array fuera de límites en /build/reproducible-path/linux-6.17.8/sound/pci/ctxfi/ctamixer.c:347:48\n| el índice 8 está fuera de rango para el tipo 'unsigned char [8]'\n\nDespués del análisis, se encontró que la causa era la falta de la inicialización (o reinicialización) adecuada del campo 'conj'.\n\nEste parche aborda esos accesos OOB añadiendo las inicializaciones adecuadas de los índices de bucle."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.31",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "16C29C42-76B1-4C84-A250-DE57F1D5FE82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/61006c540cbdedea83b05577dc7fb7fa18fe1276",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6524205326e0c1a21263b5c14e48e14ef7e449ae",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/873e2360d247eeee642878fcc3398babff7e387c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8c1d09806e1441bc6a54b9a4f2818918046d5174",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a8c42d11b0526a89192bd2f79facb4c60c8a1f38",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/afca7ff5d5d4d63a1acb95461f55ca9a729feedf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d77ba72558cd66704f0fb7e0969f697e87c0f71c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23077",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.443",
      "lastModified" : "2026-04-03T14:16:22.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge\n\nPatch series \"mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted\nmerge\", v2.\n\nCommit 879bca0a2c4f (\"mm/vma: fix incorrectly disallowed anonymous VMA\nmerges\") introduced the ability to merge previously unavailable VMA merge\nscenarios.\n\nHowever, it is handling merges incorrectly when it comes to mremap() of a\nfaulted VMA adjacent to an unfaulted VMA.  The issues arise in three\ncases:\n\n1. Previous VMA unfaulted:\n\n              copied -----|\n                          v\n\t|-----------|.............|\n\t| unfaulted |(faulted VMA)|\n\t|-----------|.............|\n\t     prev\n\n2. Next VMA unfaulted:\n\n              copied -----|\n                          v\n\t            |.............|-----------|\n\t            |(faulted VMA)| unfaulted |\n                    |.............|-----------|\n\t\t                      next\n\n3. Both adjacent VMAs unfaulted:\n\n              copied -----|\n                          v\n\t|-----------|.............|-----------|\n\t| unfaulted |(faulted VMA)| unfaulted |\n\t|-----------|.............|-----------|\n\t     prev                      next\n\nThis series fixes each of these cases, and introduces self tests to assert\nthat the issues are corrected.\n\nI also test a further case which was already handled, to assert that my\nchanges continues to correctly handle it:\n\n4. prev unfaulted, next faulted:\n\n              copied -----|\n                          v\n\t|-----------|.............|-----------|\n\t| unfaulted |(faulted VMA)|  faulted  |\n\t|-----------|.............|-----------|\n\t     prev                      next\n\nThis bug was discovered via a syzbot report, linked to in the first patch\nin the series, I confirmed that this series fixes the bug.\n\nI also discovered that we are failing to check that the faulted VMA was\nnot forked when merging a copied VMA in cases 1-3 above, an issue this\nseries also addresses.\n\nI also added self tests to assert that this is resolved (and confirmed\nthat the tests failed prior to this).\n\nI also cleaned up vma_expand() as part of this work, renamed\nvma_had_uncowed_parents() to vma_is_fork_child() as the previous name was\nunduly confusing, and simplified the comments around this function.\n\n\nThis patch (of 4):\n\nCommit 879bca0a2c4f (\"mm/vma: fix incorrectly disallowed anonymous VMA\nmerges\") introduced the ability to merge previously unavailable VMA merge\nscenarios.\n\nThe key piece of logic introduced was the ability to merge a faulted VMA\nimmediately next to an unfaulted VMA, which relies upon dup_anon_vma() to\ncorrectly handle anon_vma state.\n\nIn the case of the merge of an existing VMA (that is changing properties\nof a VMA and then merging if those properties are shared by adjacent\nVMAs), dup_anon_vma() is invoked correctly.\n\nHowever in the case of the merge of a new VMA, a corner case peculiar to\nmremap() was missed.\n\nThe issue is that vma_expand() only performs dup_anon_vma() if the target\n(the VMA that will ultimately become the merged VMA): is not the next VMA,\ni.e.  the one that appears after the range in which the new VMA is to be\nestablished.\n\nA key insight here is that in all other cases other than mremap(), a new\nVMA merge either expands an existing VMA, meaning that the target VMA will\nbe that VMA, or would have anon_vma be NULL.\n\nSpecifically:\n\n* __mmap_region() - no anon_vma in place, initial mapping.\n* do_brk_flags() - expanding an existing VMA.\n* vma_merge_extend() - expanding an existing VMA.\n* relocate_vma_down() - no anon_vma in place, initial mapping.\n\nIn addition, we are in the unique situation of needing to duplicate\nanon_vma state from a VMA that is neither the previous or next VMA being\nmerged with.\n\ndup_anon_vma() deals exclusively with the target=unfaulted, src=faulted\ncase.  This leaves four possibilities, in each case where the copied VMA\nis faulted:\n\n1. Previous VMA unfaulted:\n\n              copied -----|\n                       \n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  mm/vma: corrige UAF de anon_vma en mremap() con fusión de VMA faulted y unfaulted  Serie de parches \"mm/vma: corrige UAF de anon_vma en mremap() con fusión de VMA faulted y unfaulted\", v2.  El commit 879bca0a2c4f ('mm/vma: corrige fusiones de VMA anónimas incorrectamente denegadas') introdujo la capacidad de fusionar escenarios de fusión de VMA previamente no disponibles.  Sin embargo, está manejando las fusiones incorrectamente cuando se trata de mremap() de un VMA faulted adyacente a un VMA unfaulted. Los problemas surgen en tres casos:  1. VMA anterior unfaulted:copiado -----|           v  .............|  | unfaulted |(VMA faulted)|  .............|       anterior  2. Siguiente VMA unfaulted:copiado -----|           v                            |(VMA faulted)| unfaulted |              siguiente  3. Ambos VMA adyacentes unfaulted:copiado -----|           v  .............  | unfaulted |(VMA faulted)| unfaulted |  .............       anterior  siguiente  Esta serie corrige cada uno de estos casos e introduce auto-pruebas para afirmar que los problemas están corregidos.  También pruebo un caso adicional que ya estaba manejado, para afirmar que mis cambios continúan manejándolo correctamente:  4. anterior unfaulted, siguiente faulted:copiado -----| v  .............  | unfaulted |(VMA faulted)|  faulted  |  .............       anterior  siguiente  Este error fue descubierto a través de un informe de syzbot, enlazado en el primer parche de la serie, confirmé que esta serie corrige el error.  También descubrí que no estamos verificando que el VMA faulted no fue bifurcado al fusionar un VMA copiado en los casos 1-3 anteriores, un problema que esta serie también aborda.  También agregué auto-pruebas para afirmar que esto está resuelto (y confirmé que las pruebas fallaron antes de esto).  También limpié vma_expand() como parte de este trabajo, renombré vma_had_uncowed_parents() a vma_is_fork_child() ya que el nombre anterior era indebidamente confuso, y simplifiqué los comentarios alrededor de esta función.   Este parche (de 4):  El commit 879bca0a2c4f ('mm/vma: corrige fusiones de VMA anónimas incorrectamente denegadas') introdujo la capacidad de fusionar escenarios de fusión de VMA previamente no disponibles.  La pieza clave de lógica introducida fue la capacidad de fusionar un VMA faulted inmediatamente adyacente a un VMA unfaulted, lo cual se basa en dup_anon_vma() para manejar correctamente el estado de anon_vma.  En el caso de la fusión de un VMA existente (es decir, cambiando propiedades de un VMA y luego fusionando si esas propiedades son compartidas por VMA adyacentes), dup_anon_vma() se invoca correctamente.  Sin embargo, en el caso de la fusión de un nuevo VMA, se pasó por alto un caso particular peculiar de mremap().  El problema es que vma_expand() solo realiza dup_anon_vma() si el objetivo (el VMA que finalmente se convertirá en el VMA fusionado): no es el siguiente VMA, es decir, el que aparece después del rango en el que se establecerá el nuevo VMA.  Una idea clave aquí es que en todos los demás casos, aparte de mremap(), una nueva fusión de VMA o bien expande un VMA existente, lo que significa que el VMA objetivo será ese VMA, o anon_vma sería NULL.  Específicamente:  * __mmap_region() - no hay anon_vma en su lugar, mapeo inicial. * do_brk_flags() - expandiendo un VMA existente. * vma_merge_extend() - expandiendo un VMA existente. * relocate_vma_down() - no hay anon_vma en su lugar, mapeo inicial.  Además, nos encontramos en la situación única de necesitar duplicar el estado de anon_vma de un VMA que no es ni el VMA anterior ni el siguiente con el que se está fusionando.  dup_anon_vma() se ocupa exclusivamente del caso objetivo=unfaulted, fuente=faulted. Esto deja cuatro posibilidades, en cada caso donde el VMA copiado es faulted:  1. VMA anterior unfaulted:copiado -----|         ---truncado---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "467E1359-7F6A-4790-AC45-172024944460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/61f67c230a5e7c741c352349ea80147fbe65bfae",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a4d9dbfc1bab16e25fefd34b5e537a46bed8fc96",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23078",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.543",
      "lastModified" : "2026-03-18T13:53:29.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: scarlett2: Fix buffer overflow in config retrieval\n\nThe scarlett2_usb_get_config() function has a logic error in the\nendianness conversion code that can cause buffer overflows when\ncount > 1.\n\nThe code checks `if (size == 2)` where `size` is the total buffer size in\nbytes, then loops `count` times treating each element as u16 (2 bytes).\nThis causes the loop to access `count * 2` bytes when the buffer only\nhas `size` bytes allocated.\n\nFix by checking the element size (config_item->size) instead of the\ntotal buffer size. This ensures the endianness conversion matches the\nactual element type."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nALSA: scarlett2: Corrección de desbordamiento de búfer en la recuperación de configuración\n\nLa función scarlett2_usb_get_config() tiene un error lógico en el código de conversión de endianness que puede causar desbordamientos de búfer cuando count &gt; 1.\n\nEl código comprueba 'if (size == 2)' donde 'size' es el tamaño total del búfer en bytes, luego itera 'count' veces tratando cada elemento como u16 (2 bytes). Esto hace que el bucle acceda a 'count * 2' bytes cuando el búfer solo tiene 'size' bytes asignados.\n\nSolución comprobando el tamaño del elemento (config_item-&gt;size) en lugar del tamaño total del búfer. Esto asegura que la conversión de endianness coincida con el tipo de elemento real."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.14",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "D0EEEC50-FFAD-4440-85F6-5EDA9D0DF2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/27049f50be9f5ae3a62d272128ce0b381cb26a24",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/31a3eba5c265a763260976674a22851e83128f6d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/51049f6e3f05d70660e2458ad3bb302a3721b751",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6f5c69f72e50d51be3a8c028ae7eda42c82902cb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/91a756d22f0482eac5bedb113c8922f90b254449",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d5e80d1f97ae55bcea1426f551e4419245b41b9c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23079",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.643",
      "lastModified" : "2026-03-18T13:51:51.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify()\n\nOn error handling paths, lineinfo_changed_notify() doesn't free the\nallocated resources which results leaks.  Fix it."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngpio: cdev: Corregir fugas de recursos ante errores en lineinfo_changed_notify()\n\nEn las rutas de manejo de errores, lineinfo_changed_notify() no libera los recursos asignados, lo que provoca fugas. Corregirlo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.10",
            "versionEndExcluding" : "6.18",
            "matchCriteriaId" : "AC4D9A16-72F2-4CA3-A8F5-80DD12FD7626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.1",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "EB9AFB04-76D6-4A78-8476-60E0CC207B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.18:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE57113-2223-4308-A0F2-5E6ECFBB3C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.18:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "38C4D89F-9A13-4D29-8645-C9785C142C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/16414341b0dd58b650b5df45c79115bc5977bb76",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/70b3c280533167749a8f740acaa8ef720f78f984",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23080",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.750",
      "lastModified" : "2026-03-18T13:48:13.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak\n\nFix similar memory leak as in commit 7352e1d5932a (\"can: gs_usb:\ngs_usb_receive_bulk_callback(): fix URB memory leak\").\n\nIn mcba_usb_probe() -> mcba_usb_start(), the URBs for USB-in transfers are\nallocated, added to the priv->rx_submitted anchor and submitted. In the\ncomplete callback mcba_usb_read_bulk_callback(), the URBs are processed and\nresubmitted. In mcba_usb_close() -> mcba_urb_unlink() the URBs are freed by\ncalling usb_kill_anchored_urbs(&priv->rx_submitted).\n\nHowever, this does not take into account that the USB framework unanchors\nthe URB before the complete function is called. This means that once an\nin-URB has been completed, it is no longer anchored and is ultimately not\nreleased in usb_kill_anchored_urbs().\n\nFix the memory leak by anchoring the URB in the\nmcba_usb_read_bulk_callback()to the priv->rx_submitted anchor."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: mcba_usb: mcba_usb_read_bulk_callback(): corrige la fuga de memoria de URB\n\nCorrige una fuga de memoria similar a la del commit 7352e1d5932a ('can: gs_usb: gs_usb_receive_bulk_callback(): corrige la fuga de memoria de URB').\n\nEn mcba_usb_probe() -&gt; mcba_usb_start(), los URB para transferencias USB de entrada se asignan, se añaden al ancla priv-&gt;rx_submitted y se envían. En la función de callback de completado mcba_usb_read_bulk_callback(), los URB se procesan y se reenvían. En mcba_usb_close() -&gt; mcba_urb_unlink(), los URB se liberan llamando a usb_kill_anchored_urbs(&amp;priv-&gt;rx_submitted).\n\nSin embargo, esto no tiene en cuenta que el framework USB desancla el URB antes de que se llame a la función de completado. Esto significa que una vez que un URB de entrada ha sido completado, ya no está anclado y finalmente no se libera en usb_kill_anchored_urbs().\n\nCorrige la fuga de memoria anclando el URB en mcba_usb_read_bulk_callback() al ancla priv-&gt;rx_submitted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "0B2F1303-C14D-45B0-BA87-F552F8C544A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/179f6f0cf5ae489743273b7c1644324c0c477ea9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/59153b6388e05609144ad56a9b354e9100a91983",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/710a7529fb13c5a470258ff5508ed3c498d54729",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8b34c611a4feb81921bc4728c091e4e3ba0270c0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/94c9f6f7b953f6382fef4bdc48c046b861b8868f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b5a1ccdc63b71d93a69a6b72f7a3f3934293ea60",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d374d715e338dfc3804aaa006fa6e470ffebb264",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23081",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:18.873",
      "lastModified" : "2026-03-18T13:44:29.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: intel-xway: fix OF node refcount leakage\n\nAutomated review spotted am OF node reference count leakage when\nchecking if the 'leds' child node exists.\n\nCall of_put_node() to correctly maintain the refcount."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: phy: intel-xway: solucionar fuga de contador de referencias de nodo OF\n\nUna revisión automatizada detectó una fuga en el contador de referencias de un nodo OF al verificar si el nodo hijo 'leds' existe.\n\nLlamar a of_put_node() para mantener correctamente el contador de referencias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1f24dfd556401b75f78e8d9cbd94dd9f31411c3a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/79912b256e14054e6ba177d7e7e631485ce23dbe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23082",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.060",
      "lastModified" : "2026-04-18T09:16:13.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error\n\nIn commit 7352e1d5932a (\"can: gs_usb: gs_usb_receive_bulk_callback(): fix\nURB memory leak\"), the URB was re-anchored before usb_submit_urb() in\ngs_usb_receive_bulk_callback() to prevent a leak of this URB during\ncleanup.\n\nHowever, this patch did not take into account that usb_submit_urb() could\nfail. The URB remains anchored and\nusb_kill_anchored_urbs(&parent->rx_submitted) in gs_can_close() loops\ninfinitely since the anchor list never becomes empty.\n\nTo fix the bug, unanchor the URB when an usb_submit_urb() error occurs,\nalso print an info message."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: gs_usb: gs_usb_receive_bulk_callback(): desanclar URL en error de usb_submit_urb()\n\nEn el commit 7352e1d5932a (\"can: gs_usb: gs_usb_receive_bulk_callback(): corregir fuga de memoria de URB\"), el URB fue re-anclado antes de usb_submit_urb() en gs_usb_receive_bulk_callback() para prevenir una fuga de este URB durante la limpieza.\n\nSin embargo, este parche no tuvo en cuenta que usb_submit_urb() podría fallar. El URB permanece anclado y usb_kill_anchored_urbs(&amp;parent-&gt;rx_submitted) en gs_can_close() entra en un bucle infinito ya que la lista de anclajes nunca queda vacía.\n\nPara corregir el error, desanclar el URB cuando ocurre un error de usb_submit_urb(), también imprimir un mensaje de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.12.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F27AC7-EC6E-439C-A4DE-3E0179CDFE1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.18.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B6C380-0FF3-4ECC-AA45-F055A5ECBFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/79a6d1bfe1148bc921b8d7f3371a7fbce44e30f7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aa8a8866c533a150be4763bcb27993603bd5426c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c3edc14da81a8d8398682f6e4ab819f09f37c0b7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c610b550ccc0438d456dfe1df9f4f36254ccaae3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ce4352057fc5a986c76ece90801b9755e7c6e56c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/da01de754e455e2598a7f1ce4ff2078c4f0ecde1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23083",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.163",
      "lastModified" : "2026-03-18T13:40:23.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nfou: Don't allow 0 for FOU_ATTR_IPPROTO.\n\nfou_udp_recv() has the same problem mentioned in the previous\npatch.\n\nIf FOU_ATTR_IPPROTO is set to 0, skb is not freed by\nfou_udp_recv() nor \"resubmit\"-ted in ip_protocol_deliver_rcu().\n\nLet's forbid 0 for FOU_ATTR_IPPROTO."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfou: No permitir 0 para FOU_ATTR_IPPROTO.\n\nfou_udp_recv() tiene el mismo problema mencionado en el parche anterior.\n\nSi FOU_ATTR_IPPROTO se establece en 0, skb no es liberado por fou_udp_recv() ni 'reenviado' en ip_protocol_deliver_rcu().\n\nProhibamos 0 para FOU_ATTR_IPPROTO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C0E32AE9-6434-429F-8548-532124F03BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1cc98b8887cabb1808d2f4a37cd10a7be7574771",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/611ef4bd9c73d9e6d87bed57a635ff1fdd8c91ea",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6e983789b7588ee59cbf303583546c043bad8e19",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7a9bc9e3f42391e4c187e099263cf7a1c4b69ff5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9b75dff8446ec871030d8daf5a69e74f5fe8b956",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b7db31a52c3862a1a32202a273a4c32e7f5f4823",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c7498f9bc390479ccfad7c7f2332237ff4945b03",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23084",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.257",
      "lastModified" : "2026-03-17T21:10:34.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbe2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list\n\nWhen the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is\nset to false, the driver may request the PMAC_ID from the firmware of the\nnetwork card, and this function will store that PMAC_ID at the provided\naddress pmac_id. This is the contract of this function.\n\nHowever, there is a location within the driver where both\npmac_id_valid == false and pmac_id == NULL are being passed. This could\nresult in dereferencing a NULL pointer.\n\nTo resolve this issue, it is necessary to pass the address of a stub\nvariable to the function."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbe2net: Corrección de desreferencia de puntero NULL en be_cmd_get_mac_from_list\n\nCuando el argumento del parámetro pmac_id_valid de be_cmd_get_mac_from_list() se establece en falso, el controlador puede solicitar el PMAC_ID del firmware de la tarjeta de red, y esta función almacenará ese PMAC_ID en la dirección pmac_id proporcionada. Este es el contrato de esta función.\n\nSin embargo, existe una ubicación dentro del controlador donde se están pasando tanto pmac_id_valid == false como pmac_id == NULL. Esto podría resultar en la desreferencia de un puntero NULL.\n\nPara resolver este problema, es necesario pasar la dirección de una variable auxiliar a la función."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.12",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "7CF10EDB-C604-447B-A79C-923E751E9F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/31410a01a86bcb98c798d01061abf1f789c4f75a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/47ffb4dcffe336f4a7bd0f3284be7aadc6484698",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4cba480c9b9a3861a515262225cb53a1f5978344",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6c3e00888dbec887125a08b51a705b9b163fcdd1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8215794403d264739cc676668087512950b2ff31",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/92c6dc181a18e6e0ddb872ed35cb48a9274829e4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e206fb415db36bad52bb90c08d46ce71ffbe8a80",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23085",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.363",
      "lastModified" : "2026-03-17T21:10:24.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Avoid truncating memory addresses\n\nOn 32-bit machines with CONFIG_ARM_LPAE, it is possible for lowmem\nallocations to be backed by addresses physical memory above the 32-bit\naddress limit, as found while experimenting with larger VMSPLIT\nconfigurations.\n\nThis caused the qemu virt model to crash in the GICv3 driver, which\nallocates the 'itt' object using GFP_KERNEL. Since all memory below\nthe 4GB physical address limit is in ZONE_DMA in this configuration,\nkmalloc() defaults to higher addresses for ZONE_NORMAL, and the\nITS driver stores the physical address in a 32-bit 'unsigned long'\nvariable.\n\nChange the itt_addr variable to the correct phys_addr_t type instead,\nalong with all other variables in this driver that hold a physical\naddress.\n\nThe gicv5 driver correctly uses u64 variables, while all other irqchip\ndrivers don't call virt_to_phys or similar interfaces. It's expected that\nother device drivers have similar issues, but fixing this one is\nsufficient for booting a virtio based guest."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nirqchip/gic-v3-its: Evitar la truncación de direcciones de memoria\n\nEn máquinas de 32 bits con CONFIG_ARM_LPAE, es posible que las asignaciones de memoria baja estén respaldadas por direcciones de memoria física por encima del límite de direcciones de 32 bits, como se descubrió al experimentar con configuraciones VMSPLIT más grandes.\n\nEsto causó que el modelo virt de qemu colapsara en el controlador GICv3, que asigna el objeto 'itt' usando GFP_KERNEL. Dado que toda la memoria por debajo del límite de direcciones físicas de 4 GB está en ZONE_DMA en esta configuración, kmalloc() por defecto utiliza direcciones más altas para ZONE_NORMAL, y el controlador ITS almacena la dirección física en una variable 'unsigned long' de 32 bits.\n\nCambiar la variable itt_addr al tipo correcto phys_addr_t en su lugar, junto con todas las demás variables en este controlador que contienen una dirección física.\n\nEl controlador gicv5 utiliza correctamente variables u64, mientras que todos los demás controladores irqchip no llaman a virt_to_phys o interfaces similares. Se espera que otros controladores de dispositivos tengan problemas similares, pero solucionar este es suficiente para arrancar un invitado basado en virtio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "B2D727D1-8078-464E-B5EA-519FA082EFD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/03faa61eb4b9ca9aa09bd91d4c3773d8e7b1ac98",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/084ba3b99f2dfd991ce7e84fb17117319ec3cd9f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1b323391560354d8c515de8658b057a1daa82adb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/85215d633983233809f7d4dad163b953331b8238",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8d76a7d89c12d08382b66e2f21f20d0627d14859",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e2f9c751f73a2d5bb62d94ab030aec118a811f27",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e332b3b69e5b3acf07204a4b185071bab15c2b88",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23086",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.467",
      "lastModified" : "2026-03-17T21:10:14.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: cap TX credit to local buffer size\n\nThe virtio transports derives its TX credit directly from peer_buf_alloc,\nwhich is set from the remote endpoint's SO_VM_SOCKETS_BUFFER_SIZE value.\n\nOn the host side this means that the amount of data we are willing to\nqueue for a connection is scaled by a guest-chosen buffer size, rather\nthan the host's own vsock configuration. A malicious guest can advertise\na large buffer and read slowly, causing the host to allocate a\ncorrespondingly large amount of sk_buff memory.\nThe same thing would happen in the guest with a malicious host, since\nvirtio transports share the same code base.\n\nIntroduce a small helper, virtio_transport_tx_buf_size(), that\nreturns min(peer_buf_alloc, buf_alloc), and use it wherever we consume\npeer_buf_alloc.\n\nThis ensures the effective TX window is bounded by both the peer's\nadvertised buffer and our own buf_alloc (already clamped to\nbuffer_max_size via SO_VM_SOCKETS_BUFFER_MAX_SIZE), so a remote peer\ncannot force the other to queue more data than allowed by its own\nvsock settings.\n\nOn an unpatched Ubuntu 22.04 host (~64 GiB RAM), running a PoC with\n32 guest vsock connections advertising 2 GiB each and reading slowly\ndrove Slab/SUnreclaim from ~0.5 GiB to ~57 GiB; the system only\nrecovered after killing the QEMU process. That said, if QEMU memory is\nlimited with cgroups, the maximum memory used will be limited.\n\nWith this patch applied:\n\n  Before:\n    MemFree:        ~61.6 GiB\n    Slab:           ~142 MiB\n    SUnreclaim:     ~117 MiB\n\n  After 32 high-credit connections:\n    MemFree:        ~61.5 GiB\n    Slab:           ~178 MiB\n    SUnreclaim:     ~152 MiB\n\nOnly ~35 MiB increase in Slab/SUnreclaim, no host OOM, and the guest\nremains responsive.\n\nCompatibility with non-virtio transports:\n\n  - VMCI uses the AF_VSOCK buffer knobs to size its queue pairs per\n    socket based on the local vsk->buffer_* values; the remote side\n    cannot enlarge those queues beyond what the local endpoint\n    configured.\n\n  - Hyper-V's vsock transport uses fixed-size VMBus ring buffers and\n    an MTU bound; there is no peer-controlled credit field comparable\n    to peer_buf_alloc, and the remote endpoint cannot drive in-flight\n    kernel memory above those ring sizes.\n\n  - The loopback path reuses virtio_transport_common.c, so it\n    naturally follows the same semantics as the virtio transport.\n\nThis change is limited to virtio_transport_common.c and thus affects\nvirtio-vsock, vhost-vsock, and loopback, bringing them in line with the\n\"remote window intersected with local policy\" behaviour that VMCI and\nHyper-V already effectively have.\n\n[Stefano: small adjustments after changing the previous patch]\n[Stefano: tweak the commit message]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvsock/virtio: limitar el crédito TX al tamaño del búfer local\n\nLos transportes virtio derivan su crédito TX directamente de peer_buf_alloc, que se establece a partir del valor SO_VM_SOCKETS_BUFFER_SIZE del punto final remoto.\n\nEn el lado del host, esto significa que la cantidad de datos que estamos dispuestos a encolar para una conexión se escala por un tamaño de búfer elegido por el invitado, en lugar de la propia configuración vsock del host. Un invitado malicioso puede anunciar un búfer grande y leer lentamente, haciendo que el host asigne una cantidad correspondientemente grande de memoria sk_buff.\nLo mismo ocurriría en el invitado con un host malicioso, ya que los transportes virtio comparten la misma base de código.\n\nIntroducir una pequeña función auxiliar, virtio_transport_tx_buf_size(), que devuelve min(peer_buf_alloc, buf_alloc), y usarla dondequiera que consumamos peer_buf_alloc.\n\nEsto asegura que la ventana TX efectiva esté limitada tanto por el búfer anunciado del par como por nuestro propio buf_alloc (ya ajustado a buffer_max_size a través de SO_VM_SOCKETS_BUFFER_MAX_SIZE), de modo que un par remoto no pueda forzar al otro a encolar más datos de los permitidos por su propia configuración vsock.\n\nEn un host Ubuntu 22.04 sin parchear (~64 GiB de RAM), ejecutar una PoC con 32 conexiones vsock de invitado anunciando 2 GiB cada una y leyendo lentamente llevó Slab/SUnreclaim de ~0.5 GiB a ~57 GiB; el sistema solo se recuperó después de terminar el proceso QEMU. Dicho esto, si la memoria de QEMU está limitada con cgroups, la memoria máxima utilizada estará limitada.\n\nCon este parche aplicado:\n\n  Antes:\n    MemFree:        ~61.6 GiB\n    Slab:           ~142 MiB\n    SUnreclaim:     ~117 MiB\n\n  Después de 32 conexiones de alto crédito:\n    MemFree:        ~61.5 GiB\n    Slab:           ~178 MiB\n    SUnreclaim:     ~152 MiB\n\nSolo un aumento de ~35 MiB en Slab/SUnreclaim, sin OOM del host, y el invitado permanece receptivo.\n\nCompatibilidad con transportes no virtio:\n\n  - VMCI utiliza los controles de búfer AF_VSOCK para dimensionar sus pares de cola por socket basándose en los valores locales vsk-&gt;buffer_*; el lado remoto no puede ampliar esas colas más allá de lo que configuró el punto final local.\n\n  - El transporte vsock de Hyper-V utiliza búferes de anillo VMBus de tamaño fijo y un límite de MTU; no hay un campo de crédito controlado por el par comparable a peer_buf_alloc, y el punto final remoto no puede impulsar la memoria del kernel en tránsito por encima de esos tamaños de anillo.\n\n  - La ruta de bucle invertido reutiliza virtio_transport_common.c, por lo que naturalmente sigue la misma semántica que el transporte virtio.\n\nEste cambio se limita a virtio_transport_common.c y por lo tanto afecta a virtio-vsock, vhost-vsock y loopback, poniéndolos en línea con el comportamiento de 'ventana remota intersectada con política local' que VMCI y Hyper-V ya tienen efectivamente.\n\n[Stefano: pequeños ajustes después de cambiar el parche anterior]\n[Stefano: ajustar el mensaje de commit]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.8",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "68145F3E-ECEF-4C5B-95B5-996FCDAD1705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/84ef86aa7120449828d1e0ce438c499014839711",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ee784fdf006cbe8739cfa093f54d326cbf54037",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c0e42fb0e054c2b2ec4ee80f48ccd256ae0227ce",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d9d5f222558b42f6277eafaaa6080966faf37676",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fef7110ae5617555c792a2bb4d27878d84583adf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23087",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.570",
      "lastModified" : "2026-03-17T21:10:02.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: xen: scsiback: Fix potential memory leak in scsiback_remove()\n\nMemory allocated for struct vscsiblk_info in scsiback_probe() is not\nfreed in scsiback_remove() leading to potential memory leaks on remove,\nas well as in the scsiback_probe() error paths. Fix that by freeing it\nin scsiback_remove()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nscsi: xen: scsiback: Corrección de posible fuga de memoria en scsiback_remove()\n\nLa memoria asignada para la estructura vscsiblk_info en scsiback_probe() no es liberada en scsiback_remove(), lo que lleva a posibles fugas de memoria al eliminar, así como en las rutas de error de scsiback_probe(). Esto se corrige liberándola en scsiback_remove()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C0E32AE9-6434-429F-8548-532124F03BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/24c441f0e24da175d7912095663f526ac480dc4f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/32e52b56056daf0f0881fd9254706acf25b4be97",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/427b0fb30ddec3bad05dcd73b00718f98c7026d2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4a975c72429b050c234405668b742cdecc11548e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/901a5f309daba412e2a30364d7ec1492fa11c32c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f86264ec0e2b102fcd49bf3e4f32fee669d482fc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23088",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.673",
      "lastModified" : "2026-03-17T21:09:54.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix crash on synthetic stacktrace field usage\n\nWhen creating a synthetic event based on an existing synthetic event that\nhad a stacktrace field and the new synthetic event used that field a\nkernel crash occurred:\n\n ~# cd /sys/kernel/tracing\n ~# echo 's:stack unsigned long stack[];' > dynamic_events\n ~# echo 'hist:keys=prev_pid:s0=common_stacktrace if prev_state & 3' >> events/sched/sched_switch/trigger\n ~# echo 'hist:keys=next_pid:s1=$s0:onmatch(sched.sched_switch).trace(stack,$s1)' >> events/sched/sched_switch/trigger\n\nThe above creates a synthetic event that takes a stacktrace when a task\nschedules out in a non-running state and passes that stacktrace to the\nsched_switch event when that task schedules back in. It triggers the\n\"stack\" synthetic event that has a stacktrace as its field (called \"stack\").\n\n ~# echo 's:syscall_stack s64 id; unsigned long stack[];' >> dynamic_events\n ~# echo 'hist:keys=common_pid:s2=stack' >> events/synthetic/stack/trigger\n ~# echo 'hist:keys=common_pid:s3=$s2,i0=id:onmatch(synthetic.stack).trace(syscall_stack,$i0,$s3)' >> events/raw_syscalls/sys_exit/trigger\n\nThe above makes another synthetic event called \"syscall_stack\" that\nattaches the first synthetic event (stack) to the sys_exit trace event and\nrecords the stacktrace from the stack event with the id of the system call\nthat is exiting.\n\nWhen enabling this event (or using it in a historgram):\n\n ~# echo 1 > events/synthetic/syscall_stack/enable\n\nProduces a kernel crash!\n\n BUG: unable to handle page fault for address: 0000000000400010\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: Oops: 0000 [#1] SMP PTI\n CPU: 6 UID: 0 PID: 1257 Comm: bash Not tainted 6.16.3+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.16.3-1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-debian-1.17.0-1 04/01/2014\n RIP: 0010:trace_event_raw_event_synth+0x90/0x380\n Code: c5 00 00 00 00 85 d2 0f 84 e1 00 00 00 31 db eb 34 0f 1f 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 <49> 8b 04 24 48 83 c3 01 8d 0c c5 08 00 00 00 01 cd 41 3b 5d 40 0f\n RSP: 0018:ffffd2670388f958 EFLAGS: 00010202\n RAX: ffff8ba1065cc100 RBX: 0000000000000000 RCX: 0000000000000000\n RDX: 0000000000000001 RSI: fffff266ffda7b90 RDI: ffffd2670388f9b0\n RBP: 0000000000000010 R08: ffff8ba104e76000 R09: ffffd2670388fa50\n R10: ffff8ba102dd42e0 R11: ffffffff9a908970 R12: 0000000000400010\n R13: ffff8ba10a246400 R14: ffff8ba10a710220 R15: fffff266ffda7b90\n FS:  00007fa3bc63f740(0000) GS:ffff8ba2e0f48000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000400010 CR3: 0000000107f9e003 CR4: 0000000000172ef0\n Call Trace:\n  <TASK>\n  ? __tracing_map_insert+0x208/0x3a0\n  action_trace+0x67/0x70\n  event_hist_trigger+0x633/0x6d0\n  event_triggers_call+0x82/0x130\n  trace_event_buffer_commit+0x19d/0x250\n  trace_event_raw_event_sys_exit+0x62/0xb0\n  syscall_exit_work+0x9d/0x140\n  do_syscall_64+0x20a/0x2f0\n  ? trace_event_raw_event_sched_switch+0x12b/0x170\n  ? save_fpregs_to_fpstate+0x3e/0x90\n  ? _raw_spin_unlock+0xe/0x30\n  ? finish_task_switch.isra.0+0x97/0x2c0\n  ? __rseq_handle_notify_resume+0xad/0x4c0\n  ? __schedule+0x4b8/0xd00\n  ? restore_fpregs_from_fpstate+0x3c/0x90\n  ? switch_fpu_return+0x5b/0xe0\n  ? do_syscall_64+0x1ef/0x2f0\n  ? do_fault+0x2e9/0x540\n  ? __handle_mm_fault+0x7d1/0xf70\n  ? count_memcg_events+0x167/0x1d0\n  ? handle_mm_fault+0x1d7/0x2e0\n  ? do_user_addr_fault+0x2c3/0x7f0\n  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThe reason is that the stacktrace field is not labeled as such, and is\ntreated as a normal field and not as a dynamic event that it is.\n\nIn trace_event_raw_event_synth() the event is field is still treated as a\ndynamic array, but the retrieval of the data is considered a normal field,\nand the reference is just the meta data:\n\n// Meta data is retrieved instead of a dynamic array\n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  tracing: Corrección de un fallo al usar un campo de rastreo de pila sintético  Al crear un evento sintético basado en un evento sintético existente que tenía un campo de rastreo de pila y el nuevo evento sintético usaba ese campo, ocurrió un fallo del kernel:   ~# cd /sys/kernel/tracing  ~# echo 's:stack unsigned long stack[];' &gt; dynamic_events  ~# echo 'hist:keys=prev_pid:s0=common_stacktrace if prev_state &amp; 3' &gt;&gt; events/sched/sched_switch/trigger  ~# echo 'hist:keys=next_pid:s1=$s0:onmatch(sched.sched_switch).trace(stack,$s1)' &gt;&gt; events/sched/sched_switch/trigger  Lo anterior crea un evento sintético que toma un rastreo de pila cuando una tarea se desprograma en un estado no en ejecución y pasa ese rastreo de pila al evento sched_switch cuando esa tarea se vuelve a programar. Activa el evento sintético 'stack' que tiene un rastreo de pila como su campo (llamado 'stack').   ~# echo 's:syscall_stack s64 id; unsigned long stack[];' &gt;&gt; dynamic_events  ~# echo 'hist:keys=common_pid:s2=stack' &gt;&gt; events/synthetic/stack/trigger  ~# echo 'hist:keys=common_pid:s3=$s2,i0=id:onmatch(synthetic.stack).trace(syscall_stack,$i0,$s3)' &gt;&gt; events/raw_syscalls/sys_exit/trigger  Lo anterior crea otro evento sintético llamado 'syscall_stack' que adjunta el primer evento sintético (stack) al evento de rastreo sys_exit y registra el rastreo de pila del evento stack con el ID de la llamada al sistema que está saliendo.  Al habilitar este evento (o al usarlo en un histograma):   ~# echo 1 &gt; events/synthetic/syscall_stack/enable  ¡Produce un fallo del kernel!   BUG: unable to handle page fault for address: 0000000000400010  #PF: supervisor read access in kernel mode  #PF: error_code(0x0000) - not-present page  PGD 0 P4D 0  Oops: Oops: 0000 [#1] SMP PTI  CPU: 6 UID: 0 PID: 1257 Comm: bash Not tainted 6.16.3+deb14-amd64 #1 PREEMPT(lazy) Debian 6.16.3-1  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-debian-1.17.0-1 04/01/2014  RIP: 0010:trace_event_raw_event_synth+0x90/0x380  Code: c5 00 00 00 00 85 d2 0f 84 e1 00 00 00 31 db eb 34 0f 1f 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 &lt;49&gt; 8b 04 24 48 83 c3 01 8d 0c c5 08 00 00 00 01 cd 41 3b 5d 40 0f  RSP: 0018:ffffd2670388f958 EFLAGS: 00010202  RAX: ffff8ba1065cc100 RBX: 0000000000000000 RCX: 0000000000000000  RDX: 0000000000000001 RSI: fffff266ffda7b90 RDI: ffffd2670388f9b0  RBP: 0000000000000010 R08: ffff8ba104e76000 R09: ffffd2670388fa50  R10: ffff8ba102dd42e0 R11: ffffffff9a908970 R12: 0000000000400010  R13: ffff8ba10a246400 R14: ffff8ba10a710220 R15: fffff266ffda7b90  FS: 00007fa3bc63f740(0000) GS:ffff8ba2e0f48000(0000) knlGS:0000000000000000  CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033  CR2: 0000000000400010 CR3: 0000000107f9e003 CR4: 0000000000172ef0  Call Trace:      ? __tracing_map_insert+0x208/0x3a0   action_trace+0x67/0x70   event_hist_trigger+0x633/0x6d0   event_triggers_call+0x82/0x130   trace_event_buffer_commit+0x19d/0x250   trace_event_raw_event_sys_exit+0x62/0xb0   syscall_exit_work+0x9d/0x140   do_syscall_64+0x20a/0x2f0   ? trace_event_raw_event_sched_switch+0x12b/0x170   ? save_fpregs_to_fpstate+0x3e/0x90   ? _raw_spin_unlock+0xe/0x30   ? finish_task_switch.isra.0+0x97/0x2c0   ? __rseq_handle_notify_resume+0xad/0x4c0   ? __schedule+0x4b8/0xd00   ? restore_fpregs_from_fpstate+0x3c/0x90   ? switch_fpu_return+0x5b/0xe0   ? do_syscall_64+0x1ef/0x2f0   ? do_fault+0x2e9/0x540   ? __handle_mm_fault+0x7d1/0xf70   ? count_memcg_events+0x167/0x1d0   ? handle_mm_fault+0x1d7/0x2e0   ? do_user_addr_fault+0x2c3/0x7f0   entry_SYSCALL_64_after_hwframe+0x76/0x7e  La razón es que el campo de rastreo de pila no está etiquetado como tal, y es tratado como un campo normal y no como un evento dinámico, que es lo que es.  En trace_event_raw_ev"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.237",
            "versionEndExcluding" : "5.11",
            "matchCriteriaId" : "B227CA05-3F78-4828-9681-ACB2FDB45E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.124",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "40EB4F7C-BD50-4C1D-81D7-8364D12117D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.43",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "D63292D0-A72D-4CF1-982A-1BE3A4B41404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "DA5AD755-3F64-45B9-8709-1D24A061B353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/327af07dff6ab5650b21491eb4f69694999ff3d1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3b90d099efa2b67239bd3b3dc3521ec584261748",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/90f9f5d64cae4e72defd96a2a22760173cb3c9ec",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/98ecbfb2598c9c7ca755a29f402da9d36c057077",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23089",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.780",
      "lastModified" : "2026-03-17T21:09:42.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()\n\nWhen snd_usb_create_mixer() fails, snd_usb_mixer_free() frees\nmixer->id_elems but the controls already added to the card still\nreference the freed memory. Later when snd_card_register() runs,\nthe OSS mixer layer calls their callbacks and hits a use-after-free read.\n\nCall trace:\n  get_ctl_value+0x63f/0x820 sound/usb/mixer.c:411\n  get_min_max_with_quirks.isra.0+0x240/0x1f40 sound/usb/mixer.c:1241\n  mixer_ctl_feature_info+0x26b/0x490 sound/usb/mixer.c:1381\n  snd_mixer_oss_build_test+0x174/0x3a0 sound/core/oss/mixer_oss.c:887\n  ...\n  snd_card_register+0x4ed/0x6d0 sound/core/init.c:923\n  usb_audio_probe+0x5ef/0x2a90 sound/usb/card.c:1025\n\nFix by calling snd_ctl_remove() for all mixer controls before freeing\nid_elems. We save the next pointer first because snd_ctl_remove()\nfrees the current element."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nALSA: usb-audio: Corrección de uso después de liberación en snd_usb_mixer_free()\n\nCuando snd_usb_create_mixer() falla, snd_usb_mixer_free() libera mixer-&gt;id_elems, pero los controles ya añadidos a la tarjeta siguen referenciando la memoria liberada. Más tarde, cuando se ejecuta snd_card_register(), la capa del mezclador OSS llama a sus retrollamadas y se produce una lectura de uso después de liberación.\n\nTraza de llamada:\n  get_ctl_value+0x63f/0x820 sound/usb/mixer.c:411\n  get_min_max_with_quirks.isra.0+0x240/0x1f40 sound/usb/mixer.c:1241\n  mixer_ctl_feature_info+0x26b/0x490 sound/usb/mixer.c:1381\n  snd_mixer_oss_build_test+0x174/0x3a0 sound/core/oss/mixer_oss.c:887\n  ...\n  snd_card_register+0x4ed/0x6d0 sound/core/init.c:923\n  usb_audio_probe+0x5ef/0x2a90 sound/usb/card.c:1025\n\nSe corrige llamando a snd_ctl_remove() para todos los controles del mezclador antes de liberar id_elems. Guardamos el siguiente puntero primero porque snd_ctl_remove() libera el elemento actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.13",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "FF8E9F0D-F0AD-45F3-935B-FCC837066EC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/51b1aa6fe7dc87356ba58df06afb9677c9b841ea",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/56fb6efd5d04caf6f14994d51ec85393b9a896c6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7009daeefa945973a530b2f605fe445fc03747af",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7bff0156d13f0ad9436e5178b979b063d59f572a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/930e69757b74c3ae083b0c3c7419bfe7f0edc7b2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dc1a5dd80af1ee1f29d8375b12dd7625f6294dad",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e6f103a22b08daf5df2f4aa158081840e5910963",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23090",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.877",
      "lastModified" : "2026-03-17T21:09:35.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nslimbus: core: fix device reference leak on report present\n\nSlimbus devices can be allocated dynamically upon reception of\nreport-present messages.\n\nMake sure to drop the reference taken when looking up already registered\ndevices.\n\nNote that this requires taking an extra reference in case the device has\nnot yet been registered and has to be allocated."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nslimbus: core: soluciona fuga de referencia de dispositivo al informar presencia\n\nLos dispositivos Slimbus pueden asignarse dinámicamente tras la recepción de mensajes de informe de presencia.\n\nAsegúrese de liberar la referencia tomada al buscar dispositivos ya registrados.\n\nTenga en cuenta que esto requiere tomar una referencia adicional en caso de que el dispositivo aún no haya sido registrado y deba asignarse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "F7890100-2475-49B0-BE7F-02AA4C41DFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/02b78bbfbafe49832e508079148cb87cdfa55825",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2ddc09f6a0a221b1d91a7cbc8cc2cefdbd334fe6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/54de72a7aabc0749938d7a2833a0c1a5d3ed7ac9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6602bb4d1338e92b5838e50322b87697bdbd2ee0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9391380eb91ea5ac792aae9273535c8da5b9aa01",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/948615429c9f2ac9d25d4e1f1a4472926b217a9a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b1217e40705b2f6d311c197b12866752656217ff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23091",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:19.980",
      "lastModified" : "2026-03-17T21:09:26.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nintel_th: fix device leak on output open()\n\nMake sure to drop the reference taken when looking up the th device\nduring output device open() on errors and on close().\n\nNote that a recent commit fixed the leak in a couple of open() error\npaths but not all of them, and the reference is still leaking on\nsuccessful open()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nintel_th: corrige la fuga de dispositivo al abrir la salida\n\nAsegúrese de liberar la referencia tomada al buscar el dispositivo th durante la apertura del dispositivo de salida en caso de errores y al cerrar.\n\nTenga en cuenta que una confirmación reciente corrigió la fuga en un par de rutas de error de open(), pero no en todas ellas, y la referencia sigue fugándose en una apertura exitosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "A0018EA7-895D-4A80-896F-9887A1161EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0fca16c5591534cc1fec8b6181277ee3a3d0f26c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/64015cbf06e8bb75b81ae95b997e847b55280f7f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/95fc36a234da24bbc5f476f8104a5a15f99ed3e3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/af4b9467296b9a16ebc008147238070236982b6d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b71e64ef7ff9443835d1333e3e80ab1e49e5209f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bf7785434b5d05d940d936b78925080950bd54dd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f9b059bda4276f2bb72cb98ec7875a747f042ea2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23092",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.083",
      "lastModified" : "2026-03-17T21:09:20.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source\n\nWhen simple_write_to_buffer() succeeds, it returns the number of bytes\nactually copied to the buffer. The code incorrectly uses 'count'\nas the index for null termination instead of the actual bytes copied.\nIf count exceeds the buffer size, this leads to out-of-bounds write.\nAdd a check for the count and use the return value as the index.\n\nThe bug was validated using a demo module that mirrors the original\ncode and was tested under QEMU.\n\nPattern of the bug:\n- A fixed 64-byte stack buffer is filled using count.\n- If count > 64, the code still does buf[count] = '\\0', causing an\n- out-of-bounds write on the stack.\n\nSteps for reproduce:\n- Opens the device node.\n- Writes 128 bytes of A to it.\n- This overflows the 64-byte stack buffer and KASAN reports the OOB.\n\nFound via static analysis. This is similar to the\ncommit da9374819eb3 (\"iio: backend: fix out-of-bound write\")"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\niio: dac: ad3552r-hs: corrección de escritura fuera de límites en ad3552r_hs_write_data_source\n\nCuando simple_write_to_buffer() tiene éxito, devuelve el número de bytes realmente copiados al búfer. El código usa incorrectamente 'count' como índice para la terminación nula en lugar de los bytes realmente copiados. Si count excede el tamaño del búfer, esto lleva a una escritura fuera de límites. Añadir una comprobación para count y usar el valor de retorno como índice.\n\nEl error fue validado usando un módulo de demostración que refleja el código original y fue probado bajo QEMU.\n\nPatrón del error:\n- Un búfer de pila fijo de 64 bytes se llena usando count.\n- Si count &gt; 64, el código aún hace buf[count] = '\\0', causando una\n- escritura fuera de límites en la pila.\n\nPasos para reproducir:\n- Abre el nodo del dispositivo.\n- Escribe 128 bytes de A en él.\n- Esto desborda el búfer de pila de 64 bytes y KASAN reporta el OOB.\n\nEncontrado mediante análisis estático. Esto es similar al\ncommit da9374819eb3 ('iio: backend: corrección de escritura fuera de límites')"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "467E1359-7F6A-4790-AC45-172024944460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/978d28136c53df38f8f0b747191930e2f95e9084",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/db16e7c52032c79156930a337ee17232931794ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23093",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.177",
      "lastModified" : "2026-03-17T21:09:13.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: smbd: fix dma_unmap_sg() nents\n\nThe dma_unmap_sg() functions should be called with the same nents as the\ndma_map_sg(), not the value the map function returned."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nksmbd: smbd: corrección de dma_unmap_sg() nents\n\nLas funciones dma_unmap_sg() deben ser llamadas con los mismos nents que la dma_map_sg(), no el valor que la función de mapeo devolvió."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "3F9487DA-0705-4945-A8B3-1460DE840D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4d1e9a4a450aae47277763562122cc80ed703ab2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6ececffd3e9fe93a87738625dc0671165d27bf96",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/70ba85e439221a5d6dda34a3004db6640f0525e6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/98e3e2b561bc88f4dd218d1c05890672874692f6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d1943bc9dc9508f5933788a76f8a35d10e43a646",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f569f5b8bfd5133defdf9c7f8a72c63aa11f54ec",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23094",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.273",
      "lastModified" : "2026-03-17T21:09:04.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nuacce: fix isolate sysfs check condition\n\nuacce supports the device isolation feature. If the driver\nimplements the isolate_err_threshold_read and\nisolate_err_threshold_write callback functions, uacce will create\nsysfs files now. Users can read and configure the isolation policy\nthrough sysfs. Currently, sysfs files are created as long as either\nisolate_err_threshold_read or isolate_err_threshold_write callback\nfunctions are present.\n\nHowever, accessing a non-existent callback function may cause the\nsystem to crash. Therefore, intercept the creation of sysfs if\nneither read nor write exists; create sysfs if either is supported,\nbut intercept unsupported operations at the call site."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nuacce: corregir la condición de verificación de sysfs de aislamiento\n\nuacce soporta la característica de aislamiento de dispositivos. Si el controlador implementa las funciones de callback isolate_err_threshold_read e isolate_err_threshold_write, uacce creará archivos sysfs ahora. Los usuarios pueden leer y configurar la política de aislamiento a través de sysfs. Actualmente, los archivos sysfs se crean siempre que estén presentes las funciones de callback isolate_err_threshold_read o isolate_err_threshold_write.\n\nSin embargo, acceder a una función de callback inexistente puede causar que el sistema falle. Por lo tanto, interceptar la creación de sysfs si no existe ni lectura ni escritura; crear sysfs si se soporta cualquiera de los dos, pero interceptar las operaciones no soportadas en el sitio de la llamada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "DA5AD755-3F64-45B9-8709-1D24A061B353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/82821a681d5dcce31475a65190fc39ea8f372cc0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/98eec349259b1fd876f350b1c600403bcef8f85d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9ab05cdcac354b1b1139918f49c6418b9005d042",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fdbbb47d15ae17bf39fafec7e2028c1f8efba15e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23095",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.370",
      "lastModified" : "2026-04-03T14:16:22.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ngue: Fix skb memleak with inner IP protocol 0.\n\nsyzbot reported skb memleak below. [0]\n\nThe repro generated a GUE packet with its inner protocol 0.\n\ngue_udp_recv() returns -guehdr->proto_ctype for \"resubmit\"\nin ip_protocol_deliver_rcu(), but this only works with\nnon-zero protocol number.\n\nLet's drop such packets.\n\nNote that 0 is a valid number (IPv6 Hop-by-Hop Option).\n\nI think it is not practical to encap HOPOPT in GUE, so once\nsomeone starts to complain, we could pass down a resubmit\nflag pointer to distinguish two zeros from the upper layer:\n\n  * no error\n  * resubmit HOPOPT\n\n[0]\nBUG: memory leak\nunreferenced object 0xffff888109695a00 (size 240):\n  comm \"syz.0.17\", pid 6088, jiffies 4294943096\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 40 c2 10 81 88 ff ff 00 00 00 00 00 00 00 00  .@..............\n  backtrace (crc a84b336f):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4958 [inline]\n    slab_alloc_node mm/slub.c:5263 [inline]\n    kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270\n    __build_skb+0x23/0x60 net/core/skbuff.c:474\n    build_skb+0x20/0x190 net/core/skbuff.c:490\n    __tun_build_skb drivers/net/tun.c:1541 [inline]\n    tun_build_skb+0x4a1/0xa40 drivers/net/tun.c:1636\n    tun_get_user+0xc12/0x2030 drivers/net/tun.c:1770\n    tun_chr_write_iter+0x71/0x120 drivers/net/tun.c:1999\n    new_sync_write fs/read_write.c:593 [inline]\n    vfs_write+0x45d/0x710 fs/read_write.c:686\n    ksys_write+0xa7/0x170 fs/read_write.c:738\n    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n    do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94\n    entry_SYSCALL_64_after_hwframe+0x77/0x7f"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngue: Corrige la fuga de memoria de skb con el protocolo IP interno 0.\n\nsyzbot informó de una fuga de memoria de skb a continuación. [0]\n\nLa reproducción generó un paquete GUE con su protocolo interno 0.\n\ngue_udp_recv() devuelve -guehdr-&gt;proto_ctype para 'resubmit' en ip_protocol_deliver_rcu(), pero esto solo funciona con números de protocolo distintos de cero.\n\nDescartemos tales paquetes.\n\nTenga en cuenta que 0 es un número válido (Opción Salto a Salto de IPv6).\n\nCreo que no es práctico encapsular HOPOPT en GUE, así que una vez que alguien empiece a quejarse, podríamos pasar un puntero de bandera de reenvío para distinguir dos ceros de la capa superior:\n\n  * sin error\n  * reenviar HOPOPT\n\n[0]\nBUG: fuga de memoria\nobjeto sin referencia 0xffff888109695a00 (tamaño 240):\n  comm 'syz.0.17', pid 6088, jiffies 4294943096\n  volcado hexadecimal (primeros 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 40 c2 10 81 88 ff ff 00 00 00 00 00 00 00 00  .@..............\n  rastreo (crc a84b336f):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4958 [inline]\n    slab_alloc_node mm/slub.c:5263 [inline]\n    kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270\n    __build_skb+0x23/0x60 net/core/skbuff.c:474\n    build_skb+0x20/0x190 net/core/skbuff.c:490\n    __tun_build_skb drivers/net/tun.c:1541 [inline]\n    tun_build_skb+0x4a1/0xa40 drivers/net/tun.c:1636\n    tun_get_user+0xc12/0x2030 drivers/net/tun.c:1770\n    tun_chr_write_iter+0x71/0x120 drivers/net/tun.c:1999\n    new_sync_write fs/read_write.c:593 [inline]\n    vfs_write+0x45d/0x710 fs/read_write.c:686\n    ksys_write+0xa7/0x170 fs/read_write.c:738\n    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n    do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94\n    entry_SYSCALL_64_after_hwframe+0x77/0x7f"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C0E32AE9-6434-429F-8548-532124F03BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/380a82d36e37db49fd41ecc378c22fd29392e96a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/536f5bbc322eb1e175bdd1ced22b236a951c4d8f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5437a279804ced8088cabb945dba88a26d828f8c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/886f186328b718400dbf79e1bc8cbcbd710ab766",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9a56796ad258786d3624eef5aefba394fc9bdded",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ce569b389a5c78d64788a5ea94560e17fa574b35",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f87b9b7a618c82e7465e872eb10e14c803871892",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23096",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.473",
      "lastModified" : "2026-03-18T13:29:58.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nuacce: fix cdev handling in the cleanup path\n\nWhen cdev_device_add fails, it internally releases the cdev memory,\nand if cdev_device_del is then executed, it will cause a hang error.\nTo fix it, we check the return value of cdev_device_add() and clear\nuacce->cdev to avoid calling cdev_device_del in the uacce_remove."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nuacce: corrección del manejo de cdev en la ruta de limpieza\n\nCuando cdev_device_add falla, libera internamente la memoria de cdev, y si cdev_device_del se ejecuta entonces, causará un error de bloqueo. Para solucionarlo, verificamos el valor de retorno de cdev_device_add() y borramos uacce-&gt;cdev para evitar llamar a cdev_device_del en uacce_remove."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "5B635197-F169-4155-A953-A712BDD15376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1bc3e51367c420e6db31f41efa874c7a8e12194a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/819d647406200d0e83e56fd2df8f451b11290559",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/98d67a1bd6caddd0a8b8c82a0b925742cf500936",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a3bece3678f6c88db1f44c602b2a63e84b4040ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bd2393ed7712513e7e2dbcb6e21464a67ff9e702",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c94c7188d325bc5137d447d67a2f18f7d4f2f4a3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d9031575a2f8aabc53af3025dd79af313a2e046b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23097",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.570",
      "lastModified" : "2026-03-18T12:47:17.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmigrate: correct lock ordering for hugetlb file folios\n\nSyzbot has found a deadlock (analyzed by Lance Yang):\n\n1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock).\n2) Task (5754): Holds i_mmap_rwsem(write lock), then tries to acquire\nfolio_lock.\n\nmigrate_pages()\n  -> migrate_hugetlbs()\n    -> unmap_and_move_huge_page()     <- Takes folio_lock!\n      -> remove_migration_ptes()\n        -> __rmap_walk_file()\n          -> i_mmap_lock_read()       <- Waits for i_mmap_rwsem(read lock)!\n\nhugetlbfs_fallocate()\n  -> hugetlbfs_punch_hole()           <- Takes i_mmap_rwsem(write lock)!\n    -> hugetlbfs_zero_partial_page()\n     -> filemap_lock_hugetlb_folio()\n      -> filemap_lock_folio()\n        -> __filemap_get_folio        <- Waits for folio_lock!\n\nThe migration path is the one taking locks in the wrong order according to\nthe documentation at the top of mm/rmap.c.  So expand the scope of the\nexisting i_mmap_lock to cover the calls to remove_migration_ptes() too.\n\nThis is (mostly) how it used to be after commit c0d0381ade79.  That was\nremoved by 336bf30eb765 for both file & anon hugetlb pages when it should\nonly have been removed for anon hugetlb pages."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmigrate: orden correcto de bloqueo para folios de archivo hugetlb\n\nSyzbot ha encontrado un interbloqueo (analizado por Lance Yang):\n\n1) Tarea (5749): Mantiene folio_lock, luego intenta adquirir i_mmap_rwsem (bloqueo de lectura).\n2) Tarea (5754): Mantiene i_mmap_rwsem (bloqueo de escritura), luego intenta adquirir folio_lock.\n\nmigrate_pages()\n  -&gt; migrate_hugetlbs()\n    -&gt; unmap_and_move_huge_page()     &lt;- ¡Toma folio_lock!\n      -&gt; remove_migration_ptes()\n        -&gt; __rmap_walk_file()\n          -&gt; i_mmap_lock_read()       &lt;- ¡Espera por i_mmap_rwsem (bloqueo de lectura)!\n\nhugetlbfs_fallocate()\n  -&gt; hugetlbfs_punch_hole()           &lt;- ¡Toma i_mmap_rwsem (bloqueo de escritura)!\n    -&gt; hugetlbfs_zero_partial_page()\n     -&gt; filemap_lock_hugetlb_folio()\n      -&gt; filemap_lock_folio()\n        -&gt; __filemap_get_folio        &lt;- ¡Espera por folio_lock!\n\nLa ruta de migración es la que toma los bloqueos en el orden incorrecto según la documentación en la parte superior de mm/rmap.c. Así que expandir el alcance del i_mmap_lock existente para cubrir también las llamadas a remove_migration_ptes().\n\nEsto es (en su mayoría) como solía ser después del commit c0d0381ade79. Eso fue eliminado por 336bf30eb765 tanto para páginas hugetlb de archivo como anónimas cuando solo debería haber sido eliminado para páginas hugetlb anónimas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.9.9",
            "versionEndExcluding" : "5.10",
            "matchCriteriaId" : "9598C575-CE16-4F2B-A517-667AA54B4B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.1",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "FE8CC3D1-1602-4F1D-A05B-F0E1722A86DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B29EBB93-107F-4ED6-8DE3-C2732BC659C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.10:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD159FA-170F-4389-9085-CACCF97ABB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.10:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "F0390D83-6C17-4557-BE8D-B659E04F565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.10:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "4120E4B3-B66D-4ACE-8570-1DD4DF20A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.10:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "73D60343-647D-4B5D-AA6D-CE87C462E368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1b68efce6dd483d22f50d0d3800c4cfda14b1305",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/526394af4e8ade89cacd1a9ce2b97712712fcc34",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5edb9854f8df5428b40990a1c7d60507da5bd330",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ad97b9a55246eb940a26ac977f80892a395cabf9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b75070823b89009f5123fd0e05a8e0c3d39937c1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b7880cb166ab62c2409046b2347261abf701530e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e7396d23f9d5739f56cf9ab430c3a169f5508394",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23098",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.680",
      "lastModified" : "2026-04-03T14:16:23.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: fix double-free in nr_route_frame()\n\nIn nr_route_frame(), old_skb is immediately freed without checking if\nnr_neigh->ax25 pointer is NULL. Therefore, if nr_neigh->ax25 is NULL,\nthe caller function will free old_skb again, causing a double-free bug.\n\nTherefore, to prevent this, we need to modify it to check whether\nnr_neigh->ax25 is NULL before freeing old_skb."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetrom: soluciona doble liberación en nr_route_frame()\n\nEn nr_route_frame(), old_skb es liberado inmediatamente sin comprobar si el puntero nr_neigh-&gt;ax25 es NULL. Por lo tanto, si nr_neigh-&gt;ax25 es NULL, la función llamadora liberará old_skb de nuevo, causando un error de doble liberación.\n\nPor lo tanto, para evitar esto, necesitamos modificarlo para comprobar si nr_neigh-&gt;ax25 es NULL antes de liberar old_skb."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12.1",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "09B85227-C981-41DD-9DA8-8AD2A9B88A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6F62EECE-8FB1-4D57-85D8-CB9E23CF313C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/25aab6bfc31017a7e52035b99aef5c2b6bde8ffb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6e0110ea90313b7c0558a0b77038274a6821caf8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7c48fdf2d1349bb54815b56fb012b9d577707708",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/94d1a8bd08af1f4cc345c5c29f5db1ea72b8bb8c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9f5fa78d9980fe75a69835521627ab7943cb3d67",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ba1096c315283ee3292765f6aea4cca15816c4f7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bd8955337e3764f912f49b360e176d8aaecf7016",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23099",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.777",
      "lastModified" : "2026-03-18T20:09:32.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: limit BOND_MODE_8023AD to Ethernet devices\n\nBOND_MODE_8023AD makes sense for ARPHRD_ETHER only.\n\nsyzbot reported:\n\n BUG: KASAN: global-out-of-bounds in __hw_addr_create net/core/dev_addr_lists.c:63 [inline]\n BUG: KASAN: global-out-of-bounds in __hw_addr_add_ex+0x25d/0x760 net/core/dev_addr_lists.c:118\nRead of size 16 at addr ffffffff8bf94040 by task syz.1.3580/19497\n\nCPU: 1 UID: 0 PID: 19497 Comm: syz.1.3580 Tainted: G             L      syzkaller #0 PREEMPT(full)\nTainted: [L]=SOFTLOCKUP\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nCall Trace:\n <TASK>\n  dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n  print_address_description mm/kasan/report.c:378 [inline]\n  print_report+0xca/0x240 mm/kasan/report.c:482\n  kasan_report+0x118/0x150 mm/kasan/report.c:595\n check_region_inline mm/kasan/generic.c:-1 [inline]\n  kasan_check_range+0x2b0/0x2c0 mm/kasan/generic.c:200\n  __asan_memcpy+0x29/0x70 mm/kasan/shadow.c:105\n  __hw_addr_create net/core/dev_addr_lists.c:63 [inline]\n  __hw_addr_add_ex+0x25d/0x760 net/core/dev_addr_lists.c:118\n  __dev_mc_add net/core/dev_addr_lists.c:868 [inline]\n  dev_mc_add+0xa1/0x120 net/core/dev_addr_lists.c:886\n  bond_enslave+0x2b8b/0x3ac0 drivers/net/bonding/bond_main.c:2180\n  do_set_master+0x533/0x6d0 net/core/rtnetlink.c:2963\n  do_setlink+0xcf0/0x41c0 net/core/rtnetlink.c:3165\n  rtnl_changelink net/core/rtnetlink.c:3776 [inline]\n  __rtnl_newlink net/core/rtnetlink.c:3935 [inline]\n  rtnl_newlink+0x161c/0x1c90 net/core/rtnetlink.c:4072\n  rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958\n  netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550\n  netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]\n  netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344\n  netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894\n  sock_sendmsg_nosec net/socket.c:727 [inline]\n  __sock_sendmsg+0x21c/0x270 net/socket.c:742\n  ____sys_sendmsg+0x505/0x820 net/socket.c:2592\n  ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2646\n  __sys_sendmsg+0x164/0x220 net/socket.c:2678\n  do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]\n  __do_fast_syscall_32+0x1dc/0x560 arch/x86/entry/syscall_32.c:307\n  do_fast_syscall_32+0x34/0x80 arch/x86/entry/syscall_32.c:332\n entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n </TASK>\n\nThe buggy address belongs to the variable:\n lacpdu_mcast_addr+0x0/0x40"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbonding: limitar BOND_MODE_8023AD a dispositivos Ethernet\n\nBOND_MODE_8023AD solo tiene sentido para ARPHRD_ETHER.\n\nsyzbot informó:\n\n BUG: KASAN: global-out-of-bounds en __hw_addr_create net/core/dev_addr_lists.c:63 [inline]\n BUG: KASAN: global-out-of-bounds en __hw_addr_add_ex+0x25d/0x760 net/core/dev_addr_lists.c:118\nLectura de tamaño 16 en la dirección ffffffff8bf94040 por la tarea syz.1.3580/19497\n\nCPU: 1 UID: 0 PID: 19497 Comm: syz.1.3580 Tainted: G L syzkaller #0 PREEMPT(full)\nTainted: [L]=SOFTLOCKUP\nNombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nTraza de Llamadas:\n \n  dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n  print_address_description mm/kasan/report.c:378 [inline]\n  print_report+0xca/0x240 mm/kasan/report.c:482\n  kasan_report+0x118/0x150 mm/kasan/report.c:595\n check_region_inline mm/kasan/generic.c:-1 [inline]\n  kasan_check_range+0x2b0/0x2c0 mm/kasan/generic.c:200\n  __asan_memcpy+0x29/0x70 mm/kasan/shadow.c:105\n  __hw_addr_create net/core/dev_addr_lists.c:63 [inline]\n  __hw_addr_add_ex+0x25d/0x760 net/core/dev_addr_lists.c:118\n  __dev_mc_add net/core/dev_addr_lists.c:868 [inline]\n  dev_mc_add+0xa1/0x120 net/core/dev_addr_lists.c:886\n  bond_enslave+0x2b8b/0x3ac0 drivers/net/bonding/bond_main.c:2180\n  do_set_master+0x533/0x6d0 net/core/rtnetlink.c:2963\n  do_setlink+0xcf0/0x41c0 net/core/rtnetlink.c:3165\n  rtnl_changelink net/core/rtnetlink.c:3776 [inline]\n  __rtnl_newlink net/core/rtnetlink.c:3935 [inline]\n  rtnl_newlink+0x161c/0x1c90 net/core/rtnetlink.c:4072\n  rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958\n  netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550\n  netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]\n  netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344\n  netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894\n  sock_sendmsg_nosec net/socket.c:727 [inline]\n  __sock_sendmsg+0x21c/0x270 net/socket.c:742\n  ____sys_sendmsg+0x505/0x820 net/socket.c:2592\n  ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2646\n  __sys_sendmsg+0x164/0x220 net/socket.c:2678\n  do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]\n  __do_fast_syscall_32+0x1dc/0x560 arch/x86/entry/syscall_32.c:307\n  do_fast_syscall_32+0x34/0x80 arch/x86/entry/syscall_32.c:332\n entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n \n\nLa dirección errónea pertenece a la variable:\n lacpdu_mcast_addr+0x0/0x40"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.24",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "B1B14999-5FD5-43C6-B224-8B3A07A91FB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/43dee6f7ef1d228821de1b61c292af3744c8d7da",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5063b2cd9b27d35ab788d707d7858ded0acc8f1d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/72925dbb0c8c7b16bf922e93c6cc03cbd8c955c4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/80c881e53a4fa0a80fa4bef7bc0ead0e8e88940d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c84fcb79e5dbde0b8d5aeeaf04282d2149aebcf6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ef68afb1bee8d35a18896c27d7358079353d8d8a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23100",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.880",
      "lastModified" : "2026-04-18T09:16:13.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix hugetlb_pmd_shared()\n\nPatch series \"mm/hugetlb: fixes for PMD table sharing (incl.  using\nmmu_gather)\", v3.\n\nOne functional fix, one performance regression fix, and two related\ncomment fixes.\n\nI cleaned up my prototype I recently shared [1] for the performance fix,\ndeferring most of the cleanups I had in the prototype to a later point. \nWhile doing that I identified the other things.\n\nThe goal of this patch set is to be backported to stable trees \"fairly\"\neasily. At least patch #1 and #4.\n\nPatch #1 fixes hugetlb_pmd_shared() not detecting any sharing\nPatch #2 + #3 are simple comment fixes that patch #4 interacts with.\nPatch #4 is a fix for the reported performance regression due to excessive\nIPI broadcasts during fork()+exit().\n\nThe last patch is all about TLB flushes, IPIs and mmu_gather.\nRead: complicated\n\nThere are plenty of cleanups in the future to be had + one reasonable\noptimization on x86. But that's all out of scope for this series.\n\nRuntime tested, with a focus on fixing the performance regression using\nthe original reproducer [2] on x86.\n\n\nThis patch (of 4):\n\nWe switched from (wrongly) using the page count to an independent shared\ncount.  Now, shared page tables have a refcount of 1 (excluding\nspeculative references) and instead use ptdesc->pt_share_count to identify\nsharing.\n\nWe didn't convert hugetlb_pmd_shared(), so right now, we would never\ndetect a shared PMD table as such, because sharing/unsharing no longer\ntouches the refcount of a PMD table.\n\nPage migration, like mbind() or migrate_pages() would allow for migrating\nfolios mapped into such shared PMD tables, even though the folios are not\nexclusive.  In smaps we would account them as \"private\" although they are\n\"shared\", and we would be wrongly setting the PM_MMAP_EXCLUSIVE in the\npagemap interface.\n\nFix it by properly using ptdesc_pmd_is_shared() in hugetlb_pmd_shared()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm/hugetlb: corregir hugetlb_pmd_shared()\n\nSerie de parches 'mm/hugetlb: correcciones para el uso compartido de tablas PMD (incl. el uso de mmu_gather)', v3.\n\nUna corrección funcional, una corrección de regresión de rendimiento y dos correcciones de comentarios relacionadas.\n\nLimpié mi prototipo que compartí recientemente [1] para la corrección de rendimiento, aplazando la mayoría de las limpiezas que tenía en el prototipo para un momento posterior. Mientras hacía eso, identifiqué las otras cosas.\n\nEl objetivo de este conjunto de parches es ser retroportado a árboles estables \"bastante\" fácilmente. Al menos el parche #1 y #4.\n\nEl parche #1 corrige que hugetlb_pmd_shared() no detecte ningún uso compartido.\nEl parche #2 + #3 son simples correcciones de comentarios con las que el parche #4 interactúa.\nEl parche #4 es una corrección para la regresión de rendimiento reportada debido a transmisiones IPI excesivas durante fork()+exit().\n\nEl último parche trata sobre vaciados de TLB, IPIs y mmu_gather.\nLéase: complicado\n\nHay muchas limpiezas por hacer en el futuro + una optimización razonable en x86. Pero todo eso está fuera del alcance de esta serie.\n\nProbado en tiempo de ejecución, con un enfoque en corregir la regresión de rendimiento usando el reproductor original [2] en x86.\n\nEste parche (de 4):\n\nCambiamos de usar (erróneamente) el recuento de páginas a un recuento compartido independiente. Ahora, las tablas de páginas compartidas tienen un refcount de 1 (excluyendo referencias especulativas) y en su lugar usan ptdesc-&gt;pt_share_count para identificar el uso compartido.\n\nNo convertimos hugetlb_pmd_shared(), así que ahora mismo, nunca detectaríamos una tabla PMD compartida como tal, porque compartir/dejar de compartir ya no afecta el refcount de una tabla PMD.\n\nLa migración de páginas, como mbind() o migrate_pages(), permitiría migrar folios mapeados en dichas tablas PMD compartidas, aunque los folios no sean exclusivos. En smaps los contabilizaríamos como \"privados\" aunque sean \"compartidos\", y estaríamos configurando erróneamente el PM_MMAP_EXCLUSIVE en la interfaz pagemap.\n\nCorregirlo usando correctamente ptdesc_pmd_is_shared() en hugetlb_pmd_shared()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.239",
            "versionEndExcluding" : "5.11",
            "matchCriteriaId" : "6B462A12-1313-443F-A4AD-497D3E94D030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.186",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "0A14ADC6-011A-46D0-A322-43C2517D1E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.142",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "2382297A-0991-403C-B3BE-E14D6ACDF1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.72",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "97B4F548-197A-4ED6-BBAA-A5DDE4C23486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.9",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "1863CA93-1652-44FD-9A0D-75DB28F5318F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13.1",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "DABFB8C1-7DE1-44E5-A929-BC67ABA89E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3F9505-6B98-4269-8B81-127E55A1BF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "5DFCDFB8-4FD0-465A-9076-D813D78FE51B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3a18b452dd5f7f1652c2e92f8ae769aa17a66c9e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/51dcf459845fd28f5a0d83d408a379b274ec5cc5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5b2aec77f92265a9028c5f632bdd9af5b57ec3a3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/69c4e241ff13545d410a8b2a688c932182a858bf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ae48255bcb17b32436be97553dca848730d365f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/bf3c2affe245cf831866ddc8f736ae6a22cdc11c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ca1a47cd3f5f4c46ca188b1c9a27af87d1ab2216",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23101",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:20.977",
      "lastModified" : "2026-03-19T19:33:02.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: led-class: Only Add LED to leds_list when it is fully ready\n\nBefore this change the LED was added to leds_list before led_init_core()\ngets called adding it the list before led_classdev.set_brightness_work gets\ninitialized.\n\nThis leaves a window where led_trigger_register() of a LED's default\ntrigger will call led_trigger_set() which calls led_set_brightness()\nwhich in turn will end up queueing the *uninitialized*\nled_classdev.set_brightness_work.\n\nThis race gets hit by the lenovo-thinkpad-t14s EC driver which registers\n2 LEDs with a default trigger provided by snd_ctl_led.ko in quick\nsuccession. The first led_classdev_register() causes an async modprobe of\nsnd_ctl_led to run and that async modprobe manages to exactly hit\nthe window where the second LED is on the leds_list without led_init_core()\nbeing called for it, resulting in:\n\n ------------[ cut here ]------------\n WARNING: CPU: 11 PID: 5608 at kernel/workqueue.c:4234 __flush_work+0x344/0x390\n Hardware name: LENOVO 21N2S01F0B/21N2S01F0B, BIOS N42ET93W (2.23 ) 09/01/2025\n ...\n Call trace:\n  __flush_work+0x344/0x390 (P)\n  flush_work+0x2c/0x50\n  led_trigger_set+0x1c8/0x340\n  led_trigger_register+0x17c/0x1c0\n  led_trigger_register_simple+0x84/0xe8\n  snd_ctl_led_init+0x40/0xf88 [snd_ctl_led]\n  do_one_initcall+0x5c/0x318\n  do_init_module+0x9c/0x2b8\n  load_module+0x7e0/0x998\n\nClose the race window by moving the adding of the LED to leds_list to\nafter the led_init_core() call."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nleds: led-class: Solo añadir el LED a leds_list cuando esté completamente listo\n\nAntes de este cambio, el LED se añadía a leds_list antes de que se llamara a led_init_core(), añadiéndolo a la lista antes de que se inicializara led_classdev.set_brightness_work.\n\nEsto deja una ventana donde led_trigger_register() del disparador predeterminado de un LED llamará a led_trigger_set(), que llama a led_set_brightness(), lo que a su vez terminará encolando el led_classdev.set_brightness_work *no inicializado*.\n\nEsta condición de carrera es activada por el controlador EC de lenovo-thinkpad-t14s, que registra 2 LEDs con un disparador predeterminado proporcionado por snd_ctl_led.ko en rápida sucesión. La primera llamada a led_classdev_register() provoca la ejecución de un modprobe asíncrono de snd_ctl_led y ese modprobe asíncrono logra alcanzar exactamente la ventana donde el segundo LED está en leds_list sin que se haya llamado a led_init_core() para él, resultando en:\n\n ------------[ cut here ]------------\n ADVERTENCIA: CPU: 11 PID: 5608 at kernel/workqueue.c:4234 __flush_work+0x344/0x390\n Hardware name: LENOVO 21N2S01F0B/21N2S01F0B, BIOS N42ET93W (2.23 ) 09/01/2025\n ...\n Rastreo de llamadas:\n  __flush_work+0x344/0x390 (P)\n  flush_work+0x2c/0x50\n  led_trigger_set+0x1c8/0x340\n  led_trigger_register+0x17c/0x1c0\n  led_trigger_register_simple+0x84/0xe8\n  snd_ctl_led_init+0x40/0xf88 [snd_ctl_led]\n  do_one_initcall+0x5c/0x318\n  do_init_module+0x9c/0x2b8\n  load_module+0x7e0/0x998\n\nCerrar la ventana de la condición de carrera moviendo la adición del LED a leds_list a después de la llamada a led_init_core()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "3426920A-E477-43B8-9E72-5B245C924157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2757f7748ce2d0fa44112024907bafb37e104d6e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/78822628165f3d817382f67f91129161159ca234",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d117fdcb21b05c0e0460261d017b92303cd9ba77",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d1883cefd31752f0504b94c3bcfa1f6d511d6e87",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/da565bf98c9ad0eabcb09fc97859e0b52f98b7c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e90c861411fc84629a240384b0a72830539d3386",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f7a6df659af777058833802c29b3b7974db5e78a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23102",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.077",
      "lastModified" : "2026-03-19T19:30:19.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: signal: Fix restoration of SVE context\n\nWhen SME is supported, Restoring SVE signal context can go wrong in a\nfew ways, including placing the task into an invalid state where the\nkernel may read from out-of-bounds memory (and may potentially take a\nfatal fault) and/or may kill the task with a SIGKILL.\n\n(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into\n    an invalid state where SVCR.SM is set (and sve_state is non-NULL)\n    but TIF_SME is clear, consequently resuting in out-of-bounds memory\n    reads and/or killing the task with SIGKILL.\n\n    This can only occur in unusual (but legitimate) cases where the SVE\n    signal context has either been modified by userspace or was saved in\n    the context of another task (e.g. as with CRIU), as otherwise the\n    presence of an SVE signal context with SVE_SIG_FLAG_SM implies that\n    TIF_SME is already set.\n\n    While in this state, task_fpsimd_load() will NOT configure SMCR_ELx\n    (leaving some arbitrary value configured in hardware) before\n    restoring SVCR and attempting to restore the streaming mode SVE\n    registers from memory via sve_load_state(). As the value of\n    SMCR_ELx.LEN may be larger than the task's streaming SVE vector\n    length, this may read memory outside of the task's allocated\n    sve_state, reading unrelated data and/or triggering a fault.\n\n    While this can result in secrets being loaded into streaming SVE\n    registers, these values are never exposed. As TIF_SME is clear,\n    fpsimd_bind_task_to_cpu() will configure CPACR_ELx.SMEN to trap EL0\n    accesses to streaming mode SVE registers, so these cannot be\n    accessed directly at EL0. As fpsimd_save_user_state() verifies the\n    live vector length before saving (S)SVE state to memory, no secret\n    values can be saved back to memory (and hence cannot be observed via\n    ptrace, signals, etc).\n\n    When the live vector length doesn't match the expected vector length\n    for the task, fpsimd_save_user_state() will send a fatal SIGKILL\n    signal to the task. Hence the task may be killed after executing\n    userspace for some period of time.\n\n(2) Restoring a context with SVE_SIG_FLAG_SM clear does not clear the\n    task's SVCR.SM. If SVCR.SM was set prior to restoring the context,\n    then the task will be left in streaming mode unexpectedly, and some\n    register state will be combined inconsistently, though the task will\n    be left in legitimate state from the kernel's PoV.\n\n    This can only occur in unusual (but legitimate) cases where ptrace\n    has been used to set SVCR.SM after entry to the sigreturn syscall,\n    as syscall entry clears SVCR.SM.\n\n    In these cases, the the provided SVE register data will be loaded\n    into the task's sve_state using the non-streaming SVE vector length\n    and the FPSIMD registers will be merged into this using the\n    streaming SVE vector length.\n\nFix (1) by setting TIF_SME when setting SVCR.SM. This also requires\nensuring that the task's sme_state has been allocated, but as this could\ncontain live ZA state, it should not be zeroed. Fix (2) by clearing\nSVCR.SM when restoring a SVE signal context with SVE_SIG_FLAG_SM clear.\n\nFor consistency, I've pulled the manipulation of SVCR, TIF_SVE, TIF_SME,\nand fp_type earlier, immediately after the allocation of\nsve_state/sme_state, before the restore of the actual register state.\nThis makes it easier to ensure that these are always modified\nconsistently, even if a fault is taken while reading the register data\nfrom the signal context. I do not expect any software to depend on the\nexact state restored when a fault is taken while reading the context."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  arm64/fpsimd: señal: Corrección de la restauración del contexto SVE  Cuando SME es compatible, la restauración del contexto de señal SVE puede salir mal de varias maneras, incluyendo colocar la tarea en un estado inválido donde el kernel puede leer de memoria fuera de límites (y puede potencialmente sufrir una falla fatal) y/o puede terminar la tarea con un SIGKILL.  (1) Restaurar un contexto con SVE_SIG_FLAG_SM establecido puede colocar la tarea en un estado inválido donde SVCR.SM está establecido (y sve_state no es NULL) pero TIF_SME está despejado, lo que consecuentemente resulta en lecturas de memoria fuera de límites y/o la terminación de la tarea con SIGKILL.  Esto solo puede ocurrir en casos inusuales (pero legítimos) donde el contexto de señal SVE ha sido modificado por el espacio de usuario o fue guardado en el contexto de otra tarea (p. ej., como con CRIU), ya que de lo contrario la presencia de un contexto de señal SVE con SVE_SIG_FLAG_SM implica que TIF_SME ya está establecido.  Mientras en este estado, task_fpsimd_load() NO configurará SMCR_ELx (dejando algún valor arbitrario configurado en hardware) antes de restaurar SVCR e intentar restaurar los registros SVE en modo streaming desde la memoria a través de sve_load_state(). Como el valor de SMCR_ELx.LEN puede ser mayor que la longitud del vector SVE en modo streaming de la tarea, esto puede leer memoria fuera del sve_state asignado a la tarea, leyendo datos no relacionados y/o desencadenando una falla.  Si bien esto puede resultar en la carga de secretos en los registros SVE en modo streaming, estos valores nunca son expuestos. Como TIF_SME está despejado, fpsimd_bind_task_to_cpu() configurará CPACR_ELx.SMEN para atrapar accesos EL0 a los registros SVE en modo streaming, por lo que estos no pueden ser accedidos directamente en EL0. Como fpsimd_save_user_state() verifica la longitud del vector en vivo antes de guardar el estado (S)SVE en memoria, ningún valor secreto puede ser guardado de nuevo en memoria (y por lo tanto no puede ser observado a través de ptrace, señales, etc.).  Cuando la longitud del vector en vivo no coincide con la longitud del vector esperada para la tarea, fpsimd_save_user_state() enviará una señal SIGKILL fatal a la tarea. Por lo tanto, la tarea puede ser terminada después de ejecutar el espacio de usuario por algún período de tiempo.  (2) Restaurar un contexto con SVE_SIG_FLAG_SM despejado no despeja el SVCR.SM de la tarea. Si SVCR.SM estaba establecido antes de restaurar el contexto, entonces la tarea quedará en modo streaming inesperadamente, y algún estado de registro se combinará de manera inconsistente, aunque la tarea quedará en un estado legítimo desde el punto de vista del kernel.  Esto solo puede ocurrir en casos inusuales (pero legítimos) donde ptrace ha sido usado para establecer SVCR.SM después de la entrada a la llamada al sistema sigreturn, ya que la entrada a la llamada al sistema despeja SVCR.SM.  En estos casos, los datos de registro SVE proporcionados se cargarán en el sve_state de la tarea usando la longitud del vector SVE no-streaming y los registros FPSIMD se fusionarán en esto usando la longitud del vector SVE en modo streaming.  Solución para (1) estableciendo TIF_SME al establecer SVCR.SM. Esto también requiere asegurar que el sme_state de la tarea ha sido asignado, pero como esto podría contener estado ZA en vivo, no debe ser puesto a cero. Solución para (2) despejando SVCR.SM al restaurar un contexto de señal SVE con SVE_SIG_FLAG_SM despejado.  Para consistencia, he adelantado la manipulación de SVCR, TIF_SVE, TIF_SME y fp_type, inmediatamente después de la asignación de sve_state/sme_state, antes de la restauración del estado de registro real. Esto facilita asegurar que estos siempre se modifiquen de manera consist"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "9157E107-BB12-45A1-9689-48547A53C91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "BA57F2A2-E63D-4E4E-8D3F-AF4ECBE0BC03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/7b5a52cf252a0d2e89787b645290ad288878f332",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9bc3adba8c35119be80ab20217027720446742f2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ce820dd4e6e2d711242dc4331713b9bb4fe06d09",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d2907cbe9ea0a54cbe078076f9d089240ee1e2d9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23103",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.177",
      "lastModified" : "2026-04-03T14:16:23.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Make the addrs_lock be per port\n\nMake the addrs_lock be per port, not per ipvlan dev.\n\nInitial code seems to be written in the assumption,\nthat any address change must occur under RTNL.\nBut it is not so for the case of IPv6. So\n\n1) Introduce per-port addrs_lock.\n\n2) It was needed to fix places where it was forgotten\nto take lock (ipvlan_open/ipvlan_close)\n\nThis appears to be a very minor problem though.\nSince it's highly unlikely that ipvlan_add_addr() will\nbe called on 2 CPU simultaneously. But nevertheless,\nthis could cause:\n\n1) False-negative of ipvlan_addr_busy(): one interface\niterated through all port->ipvlans + ipvlan->addrs\nunder some ipvlan spinlock, and another added IP\nunder its own lock. Though this is only possible\nfor IPv6, since looks like only ipvlan_addr6_event() can be\ncalled without rtnl_lock.\n\n2) Race since ipvlan_ht_addr_add(port) is called under\ndifferent ipvlan->addrs_lock locks\n\nThis should not affect performance, since add/remove IP\nis a rare situation and spinlock is not taken on fast\npaths."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nipvlan: Hacer que el addrs_lock sea por puerto\n\nHacer que el addrs_lock sea por puerto, no por dispositivo ipvlan.\n\nEl código inicial parece estar escrito bajo la suposición de que cualquier cambio de dirección debe ocurrir bajo RTNL. Pero no es así para el caso de IPv6. Así que\n\n1) Introducir addrs_lock por puerto.\n\n2) Fue necesario corregir lugares donde se olvidó tomar el bloqueo (ipvlan_open/ipvlan_close)\n\nEsto parece ser un problema muy menor, sin embargo. Ya que es muy poco probable que ipvlan_add_addr() sea llamado en 2 CPU simultáneamente. Pero, sin embargo, esto podría causar:\n\n1) Falso negativo de ipvlan_addr_busy(): una interfaz iteró a través de todos los port-&gt;ipvlans + ipvlan-&gt;addrs bajo algún spinlock de ipvlan, y otra añadió IP bajo su propio bloqueo. Aunque esto solo es posible para IPv6, ya que parece que solo ipvlan_addr6_event() puede ser llamado sin rtnl_lock.\n\n2) Condición de carrera ya que ipvlan_ht_addr_add(port) es llamado bajo diferentes bloqueos ipvlan-&gt;addrs_lock.\n\nEsto no debería afectar el rendimiento, ya que añadir/eliminar IP es una situación rara y el spinlock no se toma en rutas rápidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "A01BEBA6-BA9F-40D5-99D9-19EB7F39672F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/04ba6de6eff61238e5397c14ac26a6578c7735a5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1f300c10d92c547c3a7d978e1212ff52f18256ed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3c149b662cbb202a450e81f938e702ba333864ad",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6a81e2db096913d7e43aada1c350c1282e76db39",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/70feb16e3fbfb10b15de1396557c38e99f1ab8df",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/88f83e6c9cdb46b8c8ddd0ba01393362963cf589",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d3ba32162488283c0a4c5bedd8817aec91748802",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23104",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.270",
      "lastModified" : "2026-03-25T11:16:18.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix devlink reload call trace\n\nCommit 4da71a77fc3b (\"ice: read internal temperature sensor\") introduced\ninternal temperature sensor reading via HWMON. ice_hwmon_init() was added\nto ice_init_feature() and ice_hwmon_exit() was added to ice_remove(). As a\nresult if devlink reload is used to reinit the device and then the driver\nis removed, a call trace can occur.\n\nBUG: unable to handle page fault for address: ffffffffc0fd4b5d\nCall Trace:\n string+0x48/0xe0\n vsnprintf+0x1f9/0x650\n sprintf+0x62/0x80\n name_show+0x1f/0x30\n dev_attr_show+0x19/0x60\n\nThe call trace repeats approximately every 10 minutes when system\nmonitoring tools (e.g., sadc) attempt to read the orphaned hwmon sysfs\nattributes that reference freed module memory.\n\nThe sequence is:\n1. Driver load, ice_hwmon_init() gets called from ice_init_feature()\n2. Devlink reload down, flow does not call ice_remove()\n3. Devlink reload up, ice_hwmon_init() gets called from\n   ice_init_feature() resulting in a second instance\n4. Driver unload, ice_hwmon_exit() called from ice_remove() leaving the\n   first hwmon instance orphaned with dangling pointer\n\nFix this by moving ice_hwmon_exit() from ice_remove() to\nice_deinit_features() to ensure proper cleanup symmetry with\nice_hwmon_init()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nice: corrige el rastreo de llamadas de recarga de devlink\n\nEl commit 4da71a77fc3b ('ice: read internal temperature sensor') introdujo la lectura del sensor de temperatura interno a través de HWMON. ice_hwmon_init() se añadió a ice_init_feature() y ice_hwmon_exit() se añadió a ice_remove(). Como resultado, si se utiliza la recarga de devlink para reinicializar el dispositivo y luego se elimina el controlador, puede ocurrir un rastreo de llamadas.\n\nERROR: no se puede manejar el fallo de página para la dirección: ffffffffc0fd4b5d\nRastreo de Llamadas:\n string+0x48/0xe0\n vsnprintf+0x1f9/0x650\n sprintf+0x62/0x80\n name_show+0x1f/0x30\n dev_attr_show+0x19/0x60\n\nEl rastreo de llamadas se repite aproximadamente cada 10 minutos cuando las herramientas de monitoreo del sistema (p. ej., sadc) intentan leer los atributos huérfanos de hwmon sysfs que referencian memoria de módulo liberada.\n\nLa secuencia es:\n1. Carga del controlador, ice_hwmon_init() es llamado desde ice_init_feature()\n2. Recarga de Devlink hacia abajo, el flujo no llama a ice_remove()\n3. Recarga de Devlink hacia arriba, ice_hwmon_init() es llamado desde ice_init_feature() resultando en una segunda instancia\n4. Descarga del controlador, ice_hwmon_exit() llamado desde ice_remove() dejando la primera instancia de hwmon huérfana con un puntero colgante\n\nSolucione esto moviendo ice_hwmon_exit() de ice_remove() a ice_deinit_features() para asegurar una simetría de limpieza adecuada con ice_hwmon_init()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "493CE645-E315-45B0-8BC7-6E4D7E0AA338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/87c1dacca197cc64e06fedeb269e3dd6699bae60",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ac7dd0f813fb65ff2fd9543900c3009f8e84110",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/d3f867e7a04678640ebcbfb81893c59f4af48586",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23105",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.370",
      "lastModified" : "2026-04-03T14:16:23.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag\n\nThis is more of a preventive patch to make the code more consistent and\nto prevent possible exploits that employ child qlen manipulations on qfq.\nuse cl_is_active instead of relying on the child qdisc's qlen to determine\nclass activation."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: qfq: Usar cl_is_active para determinar si la clase está activa en qfq_rm_from_ag\n\nEsto es más bien un parche preventivo para hacer el código más consistente y para prevenir posibles exploits que emplean manipulaciones de qlen secundarias en qfq.\nusar cl_is_active en lugar de depender del qlen del qdisc secundario para determinar la activación de la clase."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C1D3B462-A229-4130-A191-F09550344C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/77f1afd0bb4d5da95236f6114e6d0dfcde187ff6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/93b8635974fb050c43d07e35e5edfe6e685ca28a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/abd9fc26ea577561a5ef6241a1b058755ffdad0c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b8c24cf5268fb3bfb8d16324c3dbb985f698c835",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d837fbee92453fbb829f950c8e7cf76207d73f33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f27047abf7cac1b6f90c3ad60de21ef9f717c26d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fac2c67bb2bb732eae4283e45fc338af7e08c254",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23106",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.470",
      "lastModified" : "2026-03-19T19:24:19.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ntimekeeping: Adjust the leap state for the correct auxiliary timekeeper\n\nWhen __do_ajdtimex() was introduced to handle adjtimex for any\ntimekeeper, this reference to tk_core was not updated. When called on an\nauxiliary timekeeper, the core timekeeper would be updated incorrectly.\n\nThis gets caught by the lock debugging diagnostics because the\ntimekeepers sequence lock gets written to without holding its\nassociated spinlock:\n\nWARNING: include/linux/seqlock.h:226 at __do_adjtimex+0x394/0x3b0, CPU#2: test/125\naux_clock_adj (kernel/time/timekeeping.c:2979)\n__do_sys_clock_adjtime (kernel/time/posix-timers.c:1161 kernel/time/posix-timers.c:1173)\ndo_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1))\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131)\n\nUpdate the correct auxiliary timekeeper."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngestión del tiempo: Ajustar el estado de salto para el gestor de tiempo auxiliar correcto\n\nCuando se introdujo __do_ajdtimex() para manejar adjtimex para cualquier gestor de tiempo, esta referencia a tk_core no fue actualizada. Cuando se invocaba en un gestor de tiempo auxiliar, el gestor de tiempo principal se actualizaría incorrectamente.\n\nEsto es detectado por los diagnósticos de depuración de bloqueos porque el bloqueo de secuencia de los gestores de tiempo se escribe sin mantener su spinlock asociado:\n\nADVERTENCIA: include/linux/seqlock.h:226 at __do_adjtimex+0x394/0x3b0, CPU#2: test/125\naux_clock_adj (kernel/time/timekeeping.c:2979)\n__do_sys_clock_adjtime (kernel/time/posix-timers.c:1161 kernel/time/posix-timers.c:1173)\ndo_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1))\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131)\n\nActualizar el gestor de tiempo auxiliar correcto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "B85D4F7E-5EBC-46E3-BF55-682F134FC24E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8f7c9dbeaa0be5810e44d323735967d3dba9239d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e806f7dde8ba28bc72a7a0898589cac79f6362ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23107",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.570",
      "lastModified" : "2026-03-19T19:21:34.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: signal: Allocate SSVE storage when restoring ZA\n\nThe code to restore a ZA context doesn't attempt to allocate the task's\nsve_state before setting TIF_SME. Consequently, restoring a ZA context\ncan place a task into an invalid state where TIF_SME is set but the\ntask's sve_state is NULL.\n\nIn legitimate but uncommon cases where the ZA signal context was NOT\ncreated by the kernel in the context of the same task (e.g. if the task\nis saved/restored with something like CRIU), we have no guarantee that\nsve_state had been allocated previously. In these cases, userspace can\nenter streaming mode without trapping while sve_state is NULL, causing a\nlater NULL pointer dereference when the kernel attempts to store the\nregister state:\n\n| # ./sigreturn-za\n| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n| Mem abort info:\n|   ESR = 0x0000000096000046\n|   EC = 0x25: DABT (current EL), IL = 32 bits\n|   SET = 0, FnV = 0\n|   EA = 0, S1PTW = 0\n|   FSC = 0x06: level 2 translation fault\n| Data abort info:\n|   ISV = 0, ISS = 0x00000046, ISS2 = 0x00000000\n|   CM = 0, WnR = 1, TnD = 0, TagAccess = 0\n|   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n| user pgtable: 4k pages, 52-bit VAs, pgdp=0000000101f47c00\n| [0000000000000000] pgd=08000001021d8403, p4d=0800000102274403, pud=0800000102275403, pmd=0000000000000000\n| Internal error: Oops: 0000000096000046 [#1]  SMP\n| Modules linked in:\n| CPU: 0 UID: 0 PID: 153 Comm: sigreturn-za Not tainted 6.19.0-rc1 #1 PREEMPT\n| Hardware name: linux,dummy-virt (DT)\n| pstate: 214000c9 (nzCv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n| pc : sve_save_state+0x4/0xf0\n| lr : fpsimd_save_user_state+0xb0/0x1c0\n| sp : ffff80008070bcc0\n| x29: ffff80008070bcc0 x28: fff00000c1ca4c40 x27: 63cfa172fb5cf658\n| x26: fff00000c1ca5228 x25: 0000000000000000 x24: 0000000000000000\n| x23: 0000000000000000 x22: fff00000c1ca4c40 x21: fff00000c1ca4c40\n| x20: 0000000000000020 x19: fff00000ff6900f0 x18: 0000000000000000\n| x17: fff05e8e0311f000 x16: 0000000000000000 x15: 028fca8f3bdaf21c\n| x14: 0000000000000212 x13: fff00000c0209f10 x12: 0000000000000020\n| x11: 0000000000200b20 x10: 0000000000000000 x9 : fff00000ff69dcc0\n| x8 : 00000000000003f2 x7 : 0000000000000001 x6 : fff00000c1ca5b48\n| x5 : fff05e8e0311f000 x4 : 0000000008000000 x3 : 0000000000000000\n| x2 : 0000000000000001 x1 : fff00000c1ca5970 x0 : 0000000000000440\n| Call trace:\n|  sve_save_state+0x4/0xf0 (P)\n|  fpsimd_thread_switch+0x48/0x198\n|  __switch_to+0x20/0x1c0\n|  __schedule+0x36c/0xce0\n|  schedule+0x34/0x11c\n|  exit_to_user_mode_loop+0x124/0x188\n|  el0_interrupt+0xc8/0xd8\n|  __el0_irq_handler_common+0x18/0x24\n|  el0t_64_irq_handler+0x10/0x1c\n|  el0t_64_irq+0x198/0x19c\n| Code: 54000040 d51b4408 d65f03c0 d503245f (e5bb5800)\n| ---[ end trace 0000000000000000 ]---\n\nFix this by having restore_za_context() ensure that the task's sve_state\nis allocated, matching what we do when taking an SME trap. Any live\nSVE/SSVE state (which is restored earlier from a separate signal\ncontext) must be preserved, and hence this is not zeroed."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\narm64/fpsimd: señal: Asignar almacenamiento SSVE al restaurar ZA\n\nEl código para restaurar un contexto ZA no intenta asignar el sve_state de la tarea antes de establecer TIF_SME. En consecuencia, restaurar un contexto ZA puede colocar una tarea en un estado inválido donde TIF_SME está establecido pero el sve_state de la tarea es NULL.\n\nEn casos legítimos pero poco comunes donde el contexto de señal ZA NO fue creado por el kernel en el contexto de la misma tarea (por ejemplo, si la tarea se guarda/restaura con algo como CRIU), no tenemos garantía de que sve_state se haya asignado previamente. En estos casos, el espacio de usuario puede entrar en modo de transmisión sin atrapar mientras sve_state es NULL, causando una desreferencia de puntero NULL posterior cuando el kernel intenta almacenar el estado del registro:\n\n| # ./sigreturn-za\n| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n| Mem abort info:\n|   ESR = 0x0000000096000046\n|   EC = 0x25: DABT (current EL), IL = 32 bits\n|   SET = 0, FnV = 0\n|   EA = 0, S1PTW = 0\n|   FSC = 0x06: level 2 translation fault\n| Data abort info:\n|   ISV = 0, ISS = 0x00000046, ISS2 = 0x00000000\n|   CM = 0, WnR = 1, TnD = 0, TagAccess = 0\n|   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n| user pgtable: 4k pages, 52-bit VAs, pgdp=0000000101f47c00\n| [0000000000000000] pgd=08000001021d8403, p4d=0800000102274403, pud=0800000102275403, pmd=0000000000000000\n| Internal error: Oops: 0000000096000046 [#1]  SMP\n| Modules linked in:\n| CPU: 0 UID: 0 PID: 153 Comm: sigreturn-za Not tainted 6.19.0-rc1 #1 PREEMPT\n| Hardware name: linux,dummy-virt (DT)\n| pstate: 214000c9 (nzCv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n| pc : sve_save_state+0x4/0xf0\n| lr : fpsimd_save_user_state+0xb0/0x1c0\n| sp : ffff80008070bcc0\n| x29: ffff80008070bcc0 x28: fff00000c1ca4c40 x27: 63cfa172fb5cf658\n| x26: fff00000c1ca5228 x25: 0000000000000000 x24: 0000000000000000\n| x23: 0000000000000000 x22: fff00000c1ca4c40 x21: fff00000c1ca4c40\n| x20: 0000000000000020 x19: fff00000ff6900f0 x18: 0000000000000000\n| x17: fff05e8e0311f000 x16: 0000000000000000 x15: 028fca8f3bdaf21c\n| x14: 0000000000000212 x13: fff00000c0209f10 x12: 0000000000000020\n| x11: 0000000000200b20 x10: 0000000000000000 x9 : fff00000ff69dcc0\n| x8 : 00000000000003f2 x7 : 0000000000000001 x6 : fff00000c1ca5b48\n| x5 : fff05e8e0311f000 x4 : 0000000008000000 x3 : 0000000000000000\n| x2 : 0000000000000001 x1 : fff00000c1ca5970 x0 : 0000000000000440\n| Call trace:\n|  sve_save_state+0x4/0xf0 (P)\n|  fpsimd_thread_switch+0x48/0x198\n|  __switch_to+0x20/0x1c0\n|  __schedule+0x36c/0xce0\n|  schedule+0x34/0x11c\n|  exit_to_user_mode_loop+0x124/0x188\n|  el0_interrupt+0xc8/0xd8\n|  __el0_irq_handler_common+0x18/0x24\n|  el0t_64_irq_handler+0x10/0x1c\n|  el0t_64_irq+0x198/0x19c\n| Code: 54000040 d51b4408 d65f03c0 d503245f (e5bb5800)\n| ---[ end trace 0000000000000000 ]---\n\nEsto se soluciona haciendo que restore_za_context() asegure que el sve_state de la tarea esté asignado, coincidiendo con lo que hacemos al tomar una trampa SME. Cualquier estado SVE/SSVE activo (que se restaura anteriormente desde un contexto de señal separado) debe ser preservado, y por lo tanto no se pone a cero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "9157E107-BB12-45A1-9689-48547A53C91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0af233d66eff90fb8f3e0fc09f2316bba0b72bb9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/19b2c3f3ca1b4b6dccd2a42aca2692d8c79c4214",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/70f7f54566afc23f2c71bf1411af81f5d8009e0f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c5a5b150992ebab779c1ce54f54676786e47e94c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ea8ccfddbce0bee6310da4f3fc560ad520f5e6b4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23108",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.673",
      "lastModified" : "2026-03-18T17:12:48.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak\n\nFix similar memory leak as in commit 7352e1d5932a (\"can: gs_usb:\ngs_usb_receive_bulk_callback(): fix URB memory leak\").\n\nIn usb_8dev_open() -> usb_8dev_start(), the URBs for USB-in transfers are\nallocated, added to the priv->rx_submitted anchor and submitted. In the\ncomplete callback usb_8dev_read_bulk_callback(), the URBs are processed and\nresubmitted. In usb_8dev_close() -> unlink_all_urbs() the URBs are freed by\ncalling usb_kill_anchored_urbs(&priv->rx_submitted).\n\nHowever, this does not take into account that the USB framework unanchors\nthe URB before the complete function is called. This means that once an\nin-URB has been completed, it is no longer anchored and is ultimately not\nreleased in usb_kill_anchored_urbs().\n\nFix the memory leak by anchoring the URB in the\nusb_8dev_read_bulk_callback() to the priv->rx_submitted anchor."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: usb_8dev: usb_8dev_read_bulk_callback(): corregir fuga de memoria de URB\n\nCorrige una fuga de memoria similar a la del commit 7352e1d5932a ('can: gs_usb: gs_usb_receive_bulk_callback(): corregir fuga de memoria de URB').\n\nEn usb_8dev_open() -&gt; usb_8dev_start(), los URB para transferencias USB de entrada se asignan, se añaden al ancla priv-&gt;rx_submitted y se envían. En la función de devolución de llamada completa usb_8dev_read_bulk_callback(), los URB se procesan y se reenvían. En usb_8dev_close() -&gt; unlink_all_urbs(), los URB se liberan llamando a usb_kill_anchored_urbs(&amp;priv-&gt;rx_submitted).\n\nSin embargo, esto no tiene en cuenta que el framework USB desancla el URB antes de que se llame a la función completa. Esto significa que una vez que un URB de entrada ha sido completado, ya no está anclado y finalmente no se libera en usb_kill_anchored_urbs().\n\nCorrige la fuga de memoria anclando el URB en usb_8dev_read_bulk_callback() al ancla priv-&gt;rx_submitted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "0DA926F9-DB52-45D7-A34F-F18540B9BD53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/07e9373739c6388af9d99797cdb2e79dbbcbe92b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/59ff56992bba28051ad67cd8cc7b0edfe7280796",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/60719661b4cbd7ffbed1a0e0fa3bbc82d8bd2be9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ea4a98e924164586066b39f29bfcc7cc9da108cd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ef6e608e5ee71eca0cd3475c737e684cef24f240",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f7a980b3b8f80fe367f679da376cf76e800f9480",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/feb8243eaea7efd5279b19667d7189fd8654c87a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23109",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.783",
      "lastModified" : "2026-03-18T14:10:20.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()\n\nAbove the while() loop in wait_sb_inodes(), we document that we must wait\nfor all pages under writeback for data integrity.  Consequently, if a\nmapping, like fuse, traditionally does not have data integrity semantics,\nthere is no need to wait at all; we can simply skip these inodes.\n\nThis restores fuse back to prior behavior where syncs are no-ops.  This\nfixes a user regression where if a system is running a faulty fuse server\nthat does not reply to issued write requests, this causes wait_sb_inodes()\nto wait forever."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfs/writeback: omitir los mapeos AS_NO_DATA_INTEGRITY en wait_sb_inodes()\n\nPor encima del bucle while() en wait_sb_inodes(), documentamos que debemos esperar por todas las páginas en proceso de escritura para la integridad de los datos. En consecuencia, si un mapeo, como fuse, tradicionalmente no tiene semántica de integridad de datos, no hay necesidad de esperar en absoluto; podemos simplemente omitir estos inodos.\n\nEsto restaura fuse a su comportamiento anterior donde las sincronizaciones son no-ops. Esto corrige una regresión de usuario donde si un sistema está ejecutando un servidor fuse defectuoso que no responde a las solicitudes de escritura emitidas, esto hace que wait_sb_inodes() espere indefinidamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "467E1359-7F6A-4790-AC45-172024944460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3f4ed5e2b8f111553562507ad6202432c7c57731",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f9a49aa302a05e91ca01f69031cb79a0ea33031f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23110",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-04T17:16:21.880",
      "lastModified" : "2026-05-04T09:16:00.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Wake up the error handler when final completions race against each other\n\nThe fragile ordering between marking commands completed or failed so\nthat the error handler only wakes when the last running command\ncompletes or times out has race conditions. These race conditions can\ncause the SCSI layer to fail to wake the error handler, leaving I/O\nthrough the SCSI host stuck as the error state cannot advance.\n\nFirst, there is an memory ordering issue within scsi_dec_host_busy().\nThe write which clears SCMD_STATE_INFLIGHT may be reordered with reads\ncounting in scsi_host_busy(). While the local CPU will see its own\nwrite, reordering can allow other CPUs in scsi_dec_host_busy() or\nscsi_eh_inc_host_failed() to see a raised busy count, causing no CPU to\nsee a host busy equal to the host_failed count.\n\nThis race condition can be prevented with a memory barrier on the error\npath to force the write to be visible before counting host busy\ncommands.\n\nSecond, there is a general ordering issue with scsi_eh_inc_host_failed(). By\ncounting busy commands before incrementing host_failed, it can race with a\nfinal command in scsi_dec_host_busy(), such that scsi_dec_host_busy() does\nnot see host_failed incremented but scsi_eh_inc_host_failed() counts busy\ncommands before SCMD_STATE_INFLIGHT is cleared by scsi_dec_host_busy(),\nresulting in neither waking the error handler task.\n\nThis needs the call to scsi_host_busy() to be moved after host_failed is\nincremented to close the race condition."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nscsi: core: Despertar al manejador de errores cuando las finalizaciones finales compiten entre sí\n\nEl ordenamiento frágil entre marcar comandos como completados o fallidos, de modo que el manejador de errores solo se despierte cuando el último comando en ejecución se complete o agote el tiempo de espera, tiene condiciones de carrera. Estas condiciones de carrera pueden hacer que la capa SCSI no despierte al manejador de errores, dejando la E/S a través del host SCSI atascada ya que el estado de error no puede avanzar.\n\nPrimero, hay un problema de ordenamiento de memoria dentro de scsi_dec_host_busy(). La escritura que borra SCMD_STATE_INFLIGHT puede reordenarse con lecturas que cuentan en scsi_host_busy(). Si bien la CPU local verá su propia escritura, la reordenación puede permitir que otras CPU en scsi_dec_host_busy() o scsi_eh_inc_host_failed() vean un recuento de ocupación elevado, lo que hace que ninguna CPU vea un host ocupado igual al recuento de host_failed.\n\nEsta condición de carrera puede evitarse con una barrera de memoria en la ruta de error para forzar que la escritura sea visible antes de contar los comandos de host ocupados.\n\nSegundo, hay un problema de ordenamiento general con scsi_eh_inc_host_failed(). Al contar los comandos ocupados antes de incrementar host_failed, puede competir con un comando final en scsi_dec_host_busy(), de modo que scsi_dec_host_busy() no ve host_failed incrementado, pero scsi_eh_inc_host_failed() cuenta los comandos ocupados antes de que SCMD_STATE_INFLIGHT sea borrado por scsi_dec_host_busy(), lo que resulta en que ninguno despierte la tarea del manejador de errores.\n\nEsto requiere que la llamada a scsi_host_busy() se mueva después de que host_failed se incremente para cerrar la condición de carrera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C8F8CE97-601F-43DD-8822-7399EEB63A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "EF0253DB-B732-41D3-8F8B-4A5BA50106EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/219f009ebfd1ef3970888ee9eef4c8a06357f862",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/64ae21b9c4f0c7e60cf47a53fa7ab68852079ef0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6d9a367be356101963c249ebf10ea10b32886607",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9fdc6f28d5e81350ab1d2cac8389062bd09e61e1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cc872e35c0df80062abc71268d690a2f749e542e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/fe2f8ad6f0999db3b318359a01ee0108c703a8c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25049",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:22.833",
      "lastModified" : "2026-02-05T20:22:47.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. This issue has been patched in versions 1.123.17 and 2.5.2."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 1.123.17 y 2.5.2, un usuario autenticado con permiso para crear o modificar flujos de trabajo podría abusar de expresiones manipuladas en los parámetros del flujo de trabajo para desencadenar la ejecución no intencionada de comandos del sistema en el host que ejecuta n8n. Este problema ha sido parcheado en las versiones 1.123.17 y 2.5.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.17",
            "matchCriteriaId" : "8FB57226-E06A-4156-9A24-C320BCA37EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.2",
            "matchCriteriaId" : "509670CC-912A-43CD-995A-26CDBBEF3D8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/7860896909b3d42993a36297f053d2b0e633235d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/936c06cfc1ad269a89e8ef7f8ac79c104436d54b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-6cqr-8cfr-67f8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25051",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:22.980",
      "lastModified" : "2026-02-05T20:23:13.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to version 1.123.2, a Cross-Site Scripting (XSS) vulnerability has been identified in the handling of webhook responses and related HTTP endpoints. Under certain conditions, the Content Security Policy (CSP) sandbox protection intended to isolate HTML responses may not be applied correctly. An authenticated user with permission to create or modify workflows could abuse this to execute malicious scripts with same-origin privileges when other users interact with the crafted workflow. This could lead to session hijacking and account takeover. This issue has been patched in version 1.123.2."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de la versión 1.123.2, se ha identificado una vulnerabilidad de cross-site scripting (XSS) en el manejo de respuestas de webhook y puntos finales HTTP relacionados. Bajo ciertas condiciones, la protección sandbox de la Política de Seguridad de Contenido (CSP) destinada a aislar respuestas HTML puede no aplicarse correctamente. Un usuario autenticado con permiso para crear o modificar flujos de trabajo podría abusar de esto para ejecutar scripts maliciosos con privilegios de mismo origen cuando otros usuarios interactúan con el flujo de trabajo manipulado. Esto podría llevar a secuestro de sesión y toma de control de cuenta. Este problema ha sido parcheado en la versión 1.123.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.2",
            "matchCriteriaId" : "EE940943-0AED-4A45-B7F2-B4FAE5DA8D06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/ced34c0f93ab4c759a56065965986094d8ef7323",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/e8cf4d6bb3af94dc296cbb67bc3dd20e9b508ac9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-825q-w924-xhgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25052",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:23.113",
      "lastModified" : "2026-02-05T20:32:11.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical configuration data and user credentials, leading to complete account takeover of any user on the instance. This issue has been patched in versions 1.123.18 and 2.5.0."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 1.123.18 y 2.5.0, una vulnerabilidad en los controles de acceso a archivos permite a usuarios autenticados con permiso para crear o modificar flujos de trabajo leer archivos sensibles del sistema anfitrión de n8n. Esto puede ser explotado para obtener datos de configuración críticos y credenciales de usuario, lo que lleva a una toma de control completa de la cuenta de cualquier usuario en la instancia. Este problema ha sido parcheado en las versiones 1.123.18 y 2.5.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.18",
            "matchCriteriaId" : "C1A36047-7403-4520-87D8-2E595FB23EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "95E3F80B-2B36-4FF8-ACF7-59ED730DFBDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-gfvg-qv54-r4pc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25053",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:23.243",
      "lastModified" : "2026-02-05T20:32:37.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on the n8n host. This issue has been patched in versions 1.123.10 and 2.5.0."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 1.123.10 y 2.5.0, las vulnerabilidades en el nodo Git permitían a usuarios autenticados con permiso para crear o modificar flujos de trabajo ejecutar comandos de sistema arbitrarios o leer archivos arbitrarios en el host de n8n. Este problema ha sido parcheado en las versiones 1.123.10 y 2.5.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.0",
            "matchCriteriaId" : "3AFF4D90-0F9D-4A0F-9FF2-CCBEF1208289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "95E3F80B-2B36-4FF8-ACF7-59ED730DFBDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-9g95-qf3f-ggrw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25054",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:23.377",
      "lastModified" : "2026-02-05T20:39:47.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 1.123.9 and 2.2.1, a Cross-Site Scripting (XSS) vulnerability existed in a markdown rendering component used in n8n's interface, including workflow sticky notes and other areas that support markdown content. An authenticated user with permission to create or modify workflows could abuse this to execute scripts with same-origin privileges when other users interact with a maliciously crafted workflow. This could lead to session hijacking and account takeover. This issue has been patched in versions 1.123.9 and 2.2.1."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 1.123.9 y 2.2.1, existía una vulnerabilidad de cross-site scripting (XSS) en un componente de renderizado de markdown utilizado en la interfaz de n8n, incluyendo notas adhesivas de flujos de trabajo y otras áreas que admiten contenido markdown. Un usuario autenticado con permiso para crear o modificar flujos de trabajo podría abusar de esto para ejecutar scripts con privilegios del mismo origen cuando otros usuarios interactúan con un flujo de trabajo creado maliciosamente. Esto podría llevar al secuestro de sesión y a la toma de control de cuenta. Este problema ha sido parcheado en las versiones 1.123.9 y 2.2.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.9",
            "matchCriteriaId" : "61511366-2780-4938-B001-7AECA38FF32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "F0C5D7D7-EC36-47A8-A727-B5EECB578A86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-qpq4-pw7f-pp8w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25055",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:23.513",
      "lastModified" : "2026-02-05T20:41:47.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to remote servers via the SSH node without validating their metadata the vulnerability can lead to files being written to unintended locations on those remote systems potentially leading to remote code execution on those systems. As a prerequisites an unauthenticated attacker needs knowledge of such workflows existing and the endpoints for file uploads need to be unauthenticated. This issue has been patched in versions 1.123.12 and 2.4.0."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 1.123.12 y 2.4.0, cuando los flujos de trabajo procesan archivos cargados y los transfieren a servidores remotos a través del nodo SSH sin validar sus metadatos, la vulnerabilidad puede llevar a que los archivos se escriban en ubicaciones no deseadas en esos sistemas remotos, lo que podría llevar a la ejecución remota de código en esos sistemas. Como prerrequisito, un atacante no autenticado necesita conocimiento de la existencia de dichos flujos de trabajo y los puntos finales para la carga de archivos deben estar no autenticados. Este problema ha sido parcheado en las versiones 1.123.12 y 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.12",
            "matchCriteriaId" : "80A5866A-294B-4650-98FA-EAF8A4E8BD88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.0f",
            "matchCriteriaId" : "51DB9894-8CFF-4098-BFBD-769C12893E95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-m82q-59gv-mcr9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25056",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:23.647",
      "lastModified" : "2026-02-05T20:42:20.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permission to create or modify workflows to write arbitrary files to the n8n server's filesystem potentially leading to remote code execution. This issue has been patched in versions 1.118.0 and 2.4.0."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 1.118.0 y 2.4.0, una vulnerabilidad en el modo de consulta SQL del nodo Merge permitía a usuarios autenticados con permiso para crear o modificar flujos de trabajo escribir archivos arbitrarios en el sistema de archivos del servidor n8n, lo que podría conducir a la ejecución remota de código. Este problema ha sido parcheado en las versiones 1.118.0 y 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.118.0",
            "matchCriteriaId" : "63812ACC-3B98-4BE8-AF36-F34C39C17488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "69737D87-C216-40BB-BA7B-8D0BDA0C51C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-hv53-3329-vmrm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25115",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T17:16:23.877",
      "lastModified" : "2026-02-05T20:44:21.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de la versión 2.4.8, una vulnerabilidad en el nodo de Código Python permite a los usuarios autenticados escapar del entorno sandbox de Python y ejecutar código fuera del límite de seguridad previsto. Este problema ha sido parcheado en la versión 2.4.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.4.8",
            "matchCriteriaId" : "E5B03DE1-526B-4F58-B199-88D39DF532F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-8398-gmmx-564h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21893",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:08.410",
      "lastModified" : "2026-02-20T17:07:21.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s community package installation functionality. The issue allowed authenticated users with administrative permissions to execute arbitrary system commands on the n8n host under specific conditions. This issue has been patched in version 1.120.3."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Desde la versión 0.187.0 hasta antes de la 1.120.3, se identificó una vulnerabilidad de inyección de comandos en la funcionalidad de instalación de paquetes de la comunidad de n8n. El problema permitía a usuarios autenticados con permisos administrativos ejecutar comandos de sistema arbitrarios en el host de n8n bajo condiciones específicas. Este problema ha sido parcheado en la versión 1.120.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.187.0",
            "versionEndExcluding" : "1.120.3",
            "matchCriteriaId" : "18235AB6-E573-49C8-BB08-AA2BA2760843"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/ae0669a736cc496beeb296e115267862727ae838",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-7c4h-vh2m-743m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22044",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:08.580",
      "lastModified" : "2026-02-06T21:19:53.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL injection. This issue has been patched in version 10.0.23."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software gratuito de gestión de activos y TI. Desde la versión 0.85 hasta antes de la 10.0.23, un usuario autenticado puede realizar una inyección SQL. Este problema ha sido parcheado en la versión 10.0.23."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.85",
            "versionEndExcluding" : "10.0.23",
            "matchCriteriaId" : "BD484FC7-BC66-4499-B835-378F634F8155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-569q-j526-w385",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22247",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:08.753",
      "lastModified" : "2026-02-06T21:19:00.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through the Webhook feature. This issue has been patched in version 11.0.5."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software gratuito de gestión de activos y TI. Desde la versión 11.0.0 hasta antes de la 11.0.5, un administrador de GLPI puede realizar una solicitud SSRF a través de la función Webhook. Este problema ha sido parcheado en la versión 11.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.5",
            "matchCriteriaId" : "C13BB849-4C19-473A-B105-57915EE59C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/11.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-f6f6-v3qr-9p5x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23624",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:08.913",
      "lastModified" : "2026-02-06T21:18:17.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patched in versions ."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software gratuito de gestión de activos y TI. En versiones desde la 0.71 hasta antes de la 10.0.23 y antes de la 11.0.5, cuando se utiliza la autenticación remota, basada en variables SSO, un usuario puede robar una sesión GLPI previamente abierta por otro usuario en la misma máquina. Este problema ha sido parcheado en las versiones ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.71",
            "versionEndExcluding" : "10.0.23",
            "matchCriteriaId" : "D09C27B0-C82A-4F14-845D-FF7991EDBBE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.5",
            "matchCriteriaId" : "C13BB849-4C19-473A-B105-57915EE59C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/11.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-5j4j-vx46-r477",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25139",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:09.207",
      "lastModified" : "2026-02-20T17:08:42.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. In version 2025.10 and prior, multiple out-of-bounds read allow any unauthenticated user, with ability to send or manipulate input packets, to read adjacent memory locations, or crash a vulnerable device running the 6LoWPAN stack. The received packet is cast into a sixlowpan_sfr_rfrag_t struct and dereferenced without validating the packet is large enough to contain the struct object. At time of publication, no known patch exists."
      }, {
        "lang" : "es",
        "value" : "RIOT es un sistema operativo de microcontrolador de código abierto, diseñado para cumplir con los requisitos de los dispositivos de internet de las cosas (IoT) y otros dispositivos embebidos. En la versión 2025.10 y anteriores, múltiples lecturas fuera de límites permiten a cualquier usuario no autenticado, con la capacidad de enviar o manipular paquetes de entrada, leer ubicaciones de memoria adyacentes o bloquear un dispositivo vulnerable que ejecute la pila 6LoWPAN. El paquete recibido se convierte a una estructura sixlowpan_sfr_rfrag_t y se desreferencia sin validar que el paquete sea lo suficientemente grande como para contener el objeto de la estructura. En el momento de la publicación, no existe ningún parche conocido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025.10",
            "matchCriteriaId" : "262B78DC-ABA0-4E16-A9B1-7BA07826ADE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-c8fh-23qr-97mc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25507",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:09.360",
      "lastModified" : "2026-02-20T17:12:46.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a use-after-free vulnerability was reported in the BLE provisioning transport (protocomm_ble) layer. The issue can be triggered by a remote BLE client while the device is in provisioning mode. The vulnerability occurred when provisioning was stopped with keep_ble_on = true. In this configuration, internal protocomm_ble state and GATT metadata were freed while the BLE stack and GATT services remained active. Subsequent BLE read or write callbacks dereferenced freed memory, allowing a connected or newly connected client to trigger invalid memory acces. This issue has been patched in versions 5.5.3, 5.4.4, 5.3.5, 5.2.7, and 5.1.7."
      }, {
        "lang" : "es",
        "value" : "ESF-IDF es el Framework de Desarrollo de Internet de las Cosas (IoT) de Espressif. En las versiones 5.5.2, 5.4.3, 5.3.4, 5.2.6 y 5.1.6, se informó una vulnerabilidad de uso después de liberación en la capa de transporte de aprovisionamiento BLE (protocomm_ble). El problema puede ser activado por un cliente BLE remoto mientras el dispositivo está en modo de aprovisionamiento. La vulnerabilidad ocurrió cuando el aprovisionamiento se detuvo con keep_ble_on = true. En esta configuración, el estado interno de protocomm_ble y los metadatos GATT fueron liberados mientras la pila BLE y los servicios GATT permanecieron activos. Las devoluciones de llamada de lectura o escritura BLE posteriores desreferenciaron memoria liberada, permitiendo a un cliente conectado o recién conectado activar un acceso a memoria inválido. Este problema ha sido parcheado en las versiones 5.5.3, 5.4.4, 5.3.5, 5.2.7 y 5.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D991F0-A03E-44CF-9187-75897399797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A040C2-E9D4-4678-9A10-74B5AEE4901D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4D9168-C8C1-4B1A-81C3-D4888DB36CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA4F443-03D3-4B10-909E-A813F72BC08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43489143-3F90-42E6-B75F-78CBEAD09C4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/security/advisories/GHSA-h7r3-gmg9-xjmg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25508",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:09.547",
      "lastModified" : "2026-02-20T17:13:08.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, an out-of-bounds read vulnerability was reported in the BLE ATT Prepare Write handling of the BLE provisioning transport (protocomm_ble). The issue can be triggered by a remote BLE client while the device is in provisioning mode. The transport accumulated prepared-write fragments in a fixed-size buffer but incorrectly tracked the cumulative length. By sending repeated prepare write requests with overlapping offsets, a remote client could cause the reported length to exceed the allocated buffer size. This inflated length was then passed to provisioning handlers during execute-write processing, resulting in an out-of-bounds read and potential memory corruption. This issue has been patched in versions 5.5.3, 5.4.4, 5.3.5, 5.2.7, and 5.1.7."
      }, {
        "lang" : "es",
        "value" : "ESF-IDF es el Framework de Desarrollo de Internet de las Cosas (IoT) de Espressif. En las versiones 5.5.2, 5.4.3, 5.3.4, 5.2.6 y 5.1.6, se informó una vulnerabilidad de lectura fuera de límites en el manejo de BLE ATT Prepare Write del transporte de aprovisionamiento BLE (protocomm_ble). El problema puede ser activado por un cliente BLE remoto mientras el dispositivo está en modo de aprovisionamiento. El transporte acumuló fragmentos de escritura preparada en un búfer de tamaño fijo pero rastreó incorrectamente la longitud acumulativa. Al enviar solicitudes repetidas de escritura preparada con desplazamientos superpuestos, un cliente remoto podría hacer que la longitud informada excediera el tamaño del búfer asignado. Esta longitud inflada fue luego pasada a los manejadores de aprovisionamiento durante el procesamiento de ejecución de escritura, resultando en una lectura fuera de límites y potencial corrupción de memoria. Este problema ha sido parcheado en las versiones 5.5.3, 5.4.4, 5.3.5, 5.2.7 y 5.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D991F0-A03E-44CF-9187-75897399797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A040C2-E9D4-4678-9A10-74B5AEE4901D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4D9168-C8C1-4B1A-81C3-D4888DB36CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA4F443-03D3-4B10-909E-A813F72BC08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43489143-3F90-42E6-B75F-78CBEAD09C4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/espressif/esp-idf/commit/0540c85140c2c06c0cbecc8843277ea676d5c4a9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/1ff264abf2504cade46f0ce3a03f821310bcf6d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/47552ff4fd824caf38215468ebd2f31fb5f36d70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/4c3fdcd316f780bab4ae5aa73c9626ea9fe24ac6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/894c28afe3f2f8f31ff25b64191883517dddb5cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/cde7b7362adc15638c141c249681cbe5d23de663",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/dba9a7dc01e4dab14c77d328f6a6f46369aeee63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/security/advisories/GHSA-9j5x-rf36-54x9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25532",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T18:16:09.747",
      "lastModified" : "2026-02-20T17:13:48.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS (Wi-Fi Protected Setup) Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during fragment length calculation. When processing EAP-Expanded (WSC) messages, the code computes frag_len by subtracting header sizes from the total packet length. If an attacker sends a packet where the EAP Length field covers only the header and flags but omits the expected payload (such as the 2-byte Message Length field when WPS_MSG_FLAG_LEN is set), frag_len becomes negative. This negative value is then implicitly cast to size_t when passed to wpabuf_put_data(), resulting in a very large unsigned value. This issue has been patched in versions 5.5.3, 5.4.4, 5.3.5, 5.2.7, and 5.1.7."
      }, {
        "lang" : "es",
        "value" : "ESF-IDF es el Framework de Desarrollo de Internet de las Cosas (IoT) de Espressif. En las versiones 5.5.2, 5.4.3, 5.3.4, 5.2.6 y 5.1.6, existe una vulnerabilidad en la implementación de Enrollee de WPS (Wi-Fi Protected Setup) donde paquetes EAP-WSC malformados con cargas útiles truncadas pueden causar un desbordamiento negativo de enteros (integer underflow) durante el cálculo de la longitud del fragmento. Al procesar mensajes EAP-Expanded (WSC), el código calcula frag_len restando los tamaños de las cabeceras de la longitud total del paquete. Si un atacante envía un paquete donde el campo EAP Length cubre solo la cabecera y las banderas (flags) pero omite la carga útil esperada (como el campo Message Length de 2 bytes cuando WPS_MSG_FLAG_LEN está configurado), frag_len se vuelve negativo. Este valor negativo se convierte implícitamente a size_t cuando se pasa a wpabuf_put_data(), lo que resulta en un valor sin signo muy grande. Este problema ha sido parcheado en las versiones 5.5.3, 5.4.4, 5.3.5, 5.2.7 y 5.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D991F0-A03E-44CF-9187-75897399797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A040C2-E9D4-4678-9A10-74B5AEE4901D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4D9168-C8C1-4B1A-81C3-D4888DB36CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA4F443-03D3-4B10-909E-A813F72BC08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espressif:esp-idf:5.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43489143-3F90-42E6-B75F-78CBEAD09C4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/espressif/esp-idf/commit/60f992a26de17bb5406f2149a2f8282dd7ad1c59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/6f6766f917bc940ffbcc97eac4765a6ab15d5f79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/73a587d42a57ece1962b6a4c530b574600650f63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/b209fae993d795255827ce6b2b0d6942a377f5d4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/b88befde6b5addcdd8d7373ce55c8052dea1e855",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/cad36beb4cde27abcf316cd90d8d8dddbc6f213a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/commit/de28801e8ea6a736b6f0db6fc0c682739363bb41",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/espressif/esp-idf/security/advisories/GHSA-m2h2-683f-9mw7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0536",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-04T19:16:14.290",
      "lastModified" : "2026-02-05T22:06:39.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo GIF creado maliciosamente, al ser analizado por Autodesk 3ds Max, puede causar una vulnerabilidad de desbordamiento de búfer basado en pila. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026",
            "versionEndExcluding" : "2026.3.2",
            "matchCriteriaId" : "CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25121",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T19:16:14.790",
      "lastModified" : "2026-02-20T21:31:35.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerability was discovered in apko's dirFS filesystem abstraction. An attacker who can supply a malicious APK package (e.g., via a compromised or typosquatted repository) could create directories or symlinks outside the intended installation root. The MkdirAll, Mkdir, and Symlink methods in pkg/apk/fs/rwosfs.go use filepath.Join() without validating that the resulting path stays within the base directory. This issue has been patched in version 1.1.1."
      }, {
        "lang" : "es",
        "value" : "apko permite a los usuarios construir y publicar imágenes de contenedor OCI construidas a partir de paquetes apk. Desde la versión 0.14.8 hasta antes de la 1.1.1, se descubrió una vulnerabilidad de salto de ruta en la abstracción del sistema de archivos dirFS de apko. Un atacante que pueda suministrar un paquete APK malicioso (por ejemplo, a través de un repositorio comprometido o con typosquatting) podría crear directorios o enlaces simbólicos fuera de la raíz de instalación prevista. Los métodos MkdirAll, Mkdir y Symlink en pkg/apk/fs/rwosfs.go usan filepath.Join() sin validar que la ruta resultante permanezca dentro del directorio base. Este problema ha sido parcheado en la versión 1.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:apko:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.14.8",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "D4999F65-41B1-42B5-8BFE-C5DD249E18F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/apko/commit/d8b7887a968a527791b3c591ae83928cb49a9f14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/apko/security/advisories/GHSA-5g94-c2wx-8pxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25122",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T19:16:14.960",
      "lastModified" : "2026-02-20T21:31:50.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0, expandapk.Split drains the first gzip stream of an APK archive via io.Copy(io.Discard, gzi) without explicit bounds. With an attacker-controlled input stream, this can force large gzip inflation work and lead to resource exhaustion (availability impact). The Split function reads the first tar header, then drains the remainder of the gzip stream by reading from the gzip reader directly without any maximum uncompressed byte limit or inflate-ratio cap. A caller that parses attacker-controlled APK streams may be forced to spend excessive CPU time inflating gzip data, leading to timeouts or process slowdown. This issue has been patched in version 1.1.0."
      }, {
        "lang" : "es",
        "value" : "apko permite a los usuarios construir y publicar imágenes de contenedor OCI construidas a partir de paquetes apk. Desde la versión 0.14.8 hasta antes de la 1.1.0, expandapk.Split drena el primer flujo gzip de un archivo APK a través de io.Copy(io.Discard, gzi) sin límites explícitos. Con un flujo de entrada controlado por un atacante, esto puede forzar un gran trabajo de descompresión gzip y llevar al agotamiento de recursos (impacto en la disponibilidad). La función Split lee la primera cabecera tar, luego drena el resto del flujo gzip leyendo directamente del lector gzip sin ningún límite máximo de bytes descomprimidos o tope de relación de descompresión. Un llamador que analiza flujos APK controlados por un atacante puede verse forzado a gastar un tiempo excesivo de CPU descomprimiendo datos gzip, lo que lleva a tiempos de espera o ralentización del proceso. Este problema ha sido parcheado en la versión 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:apko:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.14.8",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "D977E504-C3B8-403B-8277-A1A4A2DAB907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/apko/commit/2be3903fe194ad46351840f0569b35f5ac965f09",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/apko/security/advisories/GHSA-6p9p-q6wh-9j89",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25140",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T19:16:15.117",
      "lastModified" : "2026-02-20T21:31:56.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, an attacker who controls or compromises an APK repository used by apko could cause resource exhaustion on the build host. The ExpandApk function in pkg/apk/expandapk/expandapk.go expands .apk streams without enforcing decompression limits, allowing a malicious repository to serve a small, highly-compressed .apk that inflates into a large tar stream, consuming excessive disk space and CPU time, causing build failures or denial of service. This issue has been patched in version 1.1.1."
      }, {
        "lang" : "es",
        "value" : "apko permite a los usuarios construir y publicar imágenes de contenedor OCI construidas a partir de paquetes apk. Desde la versión 0.14.8 hasta antes de la 1.1.1, un atacante que controle o comprometa un repositorio APK utilizado por apko podría causar el agotamiento de recursos en el host de compilación. La función ExpandApk en pkg/apk/expandapk/expandapk.go expande flujos .apk sin aplicar límites de descompresión, permitiendo que un repositorio malicioso sirva un .apk pequeño y altamente comprimido que se infla en un gran flujo tar, consumiendo espacio en disco y tiempo de CPU excesivos, causando fallos de compilación o denegación de servicio. Este problema ha sido parcheado en la versión 1.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:apko:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.14.8",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "D4999F65-41B1-42B5-8BFE-C5DD249E18F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/apko/commit/2be3903fe194ad46351840f0569b35f5ac965f09",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/apko/security/advisories/GHSA-f4w5-5xv9-85f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23897",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:05.130",
      "lastModified" : "2026-03-18T13:06:52.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandaloneServer from @apollo/server/standalone is vulnerable to denial of service (DoS) attacks through specially crafted request bodies with exotic character set encodings. This issue does not affect users that use @apollo/server as a dependency for integration packages, like @as-integrations/express5 or @as-integrations/next, only direct usage of startStandaloneServer."
      }, {
        "lang" : "es",
        "value" : "Apollo Server es un servidor GraphQL de código abierto, compatible con especificaciones, que es compatible con cualquier cliente GraphQL, incluyendo Apollo Client. En las versiones de 2.0.0 a 3.13.0, de 4.2.0 a antes de 4.13.0, y de 5.0.0 a antes de 5.4.0, la configuración predeterminada de startStandaloneServer de @apollo/server/standalone es vulnerable a ataques de denegación de servicio (DoS) a través de cuerpos de solicitud especialmente diseñados con codificaciones de conjuntos de caracteres exóticas. Este problema no afecta a los usuarios que usan @apollo/server como dependencia para paquetes de integración, como @as-integrations/express5 o @as-integrations/next, solo el uso directo de startStandaloneServer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apollographql:apollo_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "3.13.0",
            "matchCriteriaId" : "34174FF9-91E9-483C-AA97-CF5A49DDAA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apollographql:apollo_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.13.0",
            "matchCriteriaId" : "4025F805-618D-4076-BA0C-5793BD7D9FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apollographql:apollo_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.4.0",
            "matchCriteriaId" : "C94B1336-4AB9-450F-A10B-8B030823D150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apollographql/apollo-server/commit/d25a5bdc377826ad424fcf7f8d1d062055911643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apollographql/apollo-server/commit/e9d49d163a86b8a33be56ed27c494b9acd5400a4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apollographql/apollo-server/security/advisories/GHSA-mp6q-xf9x-fwf7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24843",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:05.393",
      "lastModified" : "2026-02-18T15:57:38.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker who can influence the tar stream from a QEMU guest VM could write files outside the intended workspace directory on the host. The retrieveWorkspace function extracts tar entries without validating that paths stay within the workspace, allowing path traversal via ../ sequences. This issue has been patched in version 0.40.3."
      }, {
        "lang" : "es",
        "value" : "melange permite a los usuarios construir paquetes apk utilizando pipelines declarativos. En las versiones 0.11.3 hasta antes de la 0.40.3, un atacante que puede influir en el flujo tar desde una VM invitada de QEMU podría escribir archivos fuera del directorio de espacio de trabajo previsto en el host. La función retrieveWorkspace extrae entradas tar sin validar que las rutas permanezcan dentro del espacio de trabajo, permitiendo el salto de ruta a través de secuencias ../. Este problema ha sido parcheado en la versión 0.40.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:melange:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.11.3",
            "versionEndExcluding" : "0.40.5",
            "matchCriteriaId" : "56496C74-AC93-4A3A-AF6B-DCA473D83792"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/melange/commit/6e243d0d46699f837d7c392397a694d2bcc7612b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/melange/security/advisories/GHSA-qxx2-7h4c-83f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24844",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:05.550",
      "lastModified" : "2026-02-18T15:55:43.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide build input values, but not modify pipeline definitions, could execute arbitrary shell commands if the pipeline uses ${{vars.*}} or ${{inputs.*}} substitutions in working-directory. The field is embedded into shell scripts without proper quote escaping. This issue has been patched in version 0.40.3."
      }, {
        "lang" : "es",
        "value" : "melange permite a los usuarios construir paquetes apk usando pipelines declarativos. Desde la versión 0.3.0 hasta antes de la 0.40.3, un atacante que puede proporcionar valores de entrada de construcción, pero no modificar las definiciones de pipeline, podría ejecutar comandos de shell arbitrarios si el pipeline usa sustituciones ${{vars.*}} o ${{inputs.*}} en working-directory. El campo se incrusta en scripts de shell sin el escape de comillas adecuado. Este problema ha sido parcheado en la versión 0.40.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:melange:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndIncluding" : "0.40.5",
            "matchCriteriaId" : "5C0F1F45-AE07-4650-ADC4-996D023BCEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/melange/commit/e51ca30cfb63178f5a86997d23d3fff0359fa6c8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/melange/security/advisories/GHSA-vqqr-rmpc-hhg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24884",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:05.703",
      "lastModified" : "2026-02-27T20:27:32.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Compressing is a compressing and uncompressing lib for node. In version 2.0.0 and 1.10.3 and prior, Compressing extracts TAR archives while restoring symbolic links without validating their targets. By embedding symlinks that resolve outside the intended extraction directory, an attacker can cause subsequent file entries to be written to arbitrary locations on the host file system. Depending on the extractor’s handling of existing files, this behavior may allow overwriting sensitive files or creating new files in security-critical locations. This issue has been patched in versions 1.10.4 and 2.0.1."
      }, {
        "lang" : "es",
        "value" : "Compressing es una librería de compresión y descompresión para node. En las versiones 2.0.0 y 1.10.3 y anteriores, Compressing extrae archivos TAR mientras restaura enlaces simbólicos sin validar sus destinos. Al incrustar enlaces simbólicos que se resuelven fuera del directorio de extracción previsto, un atacante puede hacer que las entradas de archivos subsiguientes se escriban en ubicaciones arbitrarias en el sistema de archivos del host. Dependiendo de cómo el extractor maneje los archivos existentes, este comportamiento puede permitir sobrescribir archivos sensibles o crear nuevos archivos en ubicaciones críticas para la seguridad. Este problema ha sido parcheado en las versiones 1.10.4 y 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-modules:compressing:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.10.4",
            "matchCriteriaId" : "7FD0D71B-4E26-469A-BC9C-DCB66097E813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-modules:compressing:2.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF61D84F-AAB3-47A3-BB3A-0D35E654643E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-modules/compressing/commit/8d16c196c7f1888fc1af957d9ff36117247cea6c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/node-modules/compressing/commit/ce1c0131c401c071c77d5a1425bf8c88cfc16361",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/node-modules/compressing/security/advisories/GHSA-cc8f-xg8v-72m3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25143",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:06.227",
      "lastModified" : "2026-02-18T15:55:19.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacker who can influence inputs to the patch pipeline could execute arbitrary shell commands on the build host. The patch pipeline in pkg/build/pipelines/patch.yaml embeds input-derived values (series paths, patch filenames, and numeric parameters) into shell scripts without proper quoting or validation, allowing shell metacharacters to break out of their intended context. The vulnerability affects the built-in patch pipeline which can be invoked through melange build and melange license-check operations. An attacker who can control patch-related inputs (e.g., through pull request-driven CI, build-as-a-service, or by influencing melange configurations) can inject shell metacharacters such as backticks, command substitutions $(…), semicolons, pipes, or redirections to execute arbitrary commands with the privileges of the melange build process. This issue has been patched in version 0.40.3."
      }, {
        "lang" : "es",
        "value" : "melange permite a los usuarios construir paquetes apk usando pipelines declarativos. Desde la versión 0.10.0 hasta antes de la 0.40.3, un atacante que pueda influir en las entradas del pipeline de parche podría ejecutar comandos de shell arbitrarios en el host de compilación. El pipeline de parche en pkg/build/pipelines/patch.yaml incrusta valores derivados de la entrada (rutas de series, nombres de archivo de parche y parámetros numéricos) en scripts de shell sin la debida entrecomillado o validación, permitiendo que los metacaracteres de shell salgan de su contexto previsto. La vulnerabilidad afecta al pipeline de parche incorporado que puede ser invocado a través de las operaciones melange build y melange license-check. Un atacante que pueda controlar las entradas relacionadas con el parche (por ejemplo, a través de CI impulsado por solicitudes de extracción, build-as-a-service, o influyendo en las configuraciones de melange) puede inyectar metacaracteres de shell como backticks, sustituciones de comandos $(…), puntos y coma, pipes o redirecciones para ejecutar comandos arbitrarios con los privilegios del proceso de compilación de melange. Este problema ha sido parcheado en la versión 0.40.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:melange:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.40.5",
            "matchCriteriaId" : "7C431FC1-D406-4CF1-969D-9228F4FE6B89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/melange/commit/bd132535cd9f57d4bd39d9ead0633598941af030",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/melange/security/advisories/GHSA-rf4g-89h5-crcr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25145",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:06.373",
      "lastModified" : "2026-02-18T15:53:58.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "melange allows users to build apk packages using declarative pipelines. From version 0.14.0 to before 0.40.3, an attacker who can influence a melange configuration file (e.g., through pull request-driven CI or build-as-a-service scenarios) could read arbitrary files from the host system. The LicensingInfos function in pkg/config/config.go reads license files specified in copyright[].license-path without validating that paths remain within the workspace directory, allowing path traversal via ../ sequences. The contents of the traversed file are embedded into the generated SBOM as license text, enabling exfiltration of sensitive data through build artifacts. This issue has been patched in version 0.40.3."
      }, {
        "lang" : "es",
        "value" : "melange permite a los usuarios construir paquetes apk utilizando pipelines declarativos. Desde la versión 0.14.0 hasta antes de la 0.40.3, un atacante que pueda influir en un archivo de configuración de melange (por ejemplo, a través de CI impulsado por solicitudes de extracción o escenarios de construcción como servicio) podría leer archivos arbitrarios del sistema anfitrión. La función LicensingInfos en pkg/config/config.go lee archivos de licencia especificados en copyright[].license-path sin validar que las rutas permanezcan dentro del directorio del espacio de trabajo, permitiendo el salto de ruta a través de secuencias ../. El contenido del archivo recorrido se incrusta en el SBOM generado como texto de licencia, lo que permite la exfiltración de datos sensibles a través de artefactos de construcción. Este problema ha sido parcheado en la versión 0.40.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:melange:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.14.0",
            "versionEndExcluding" : "0.40.5",
            "matchCriteriaId" : "67EBECFD-BD89-4F4E-A497-4AEE445EC5C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/melange/commit/2f95c9f4355ed993f2670bf1bb82d88b0f65e9e4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/melange/security/advisories/GHSA-2w4f-9fgg-q2v9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25157",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:06.577",
      "lastModified" : "2026-02-13T14:33:31.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When the cd command failed, the unescaped path was interpolated directly into an echo statement, allowing arbitrary command execution on the remote SSH host. The parseSSHTarget function did not validate that SSH target strings could not begin with a dash. An attacker-supplied target like -oProxyCommand=... would be interpreted as an SSH configuration flag rather than a hostname, allowing arbitrary command execution on the local machine. This issue has been patched in version 2026.1.29."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.1.29, existe una vulnerabilidad de inyección de comandos del sistema operativo a través de la Ruta Raíz del Proyecto en sshNodeCommand. La función sshNodeCommand construía un script de shell sin escapar correctamente la ruta del proyecto proporcionada por el usuario en un mensaje de error. Cuando el comando cd fallaba, la ruta sin escapar se interpolaba directamente en una declaración echo, permitiendo la ejecución arbitraria de comandos en el host SSH remoto. La función parseSSHTarget no validaba que las cadenas de destino SSH no pudieran comenzar con un guion. Un objetivo proporcionado por el atacante como -oProxyCommand=... sería interpretado como una bandera de configuración SSH en lugar de un nombre de host, permitiendo la ejecución arbitraria de comandos en la máquina local. Este problema ha sido parcheado en la versión 2026.1.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.1.29",
            "matchCriteriaId" : "4801AF60-B3F7-4C05-A4A1-F8443F445ACD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-q284-4pvr-m585",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25160",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:06.720",
      "lastModified" : "2026-02-13T21:23:28.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default for all outgoing storage driver communications, making the system vulnerable to Man-in-the-Middle (MitM) attacks. This enables the complete decryption, theft, and manipulation of all data transmitted during storage operations, severely compromising the confidentiality and integrity of user data. This issue has been patched in version 3.57.0."
      }, {
        "lang" : "es",
        "value" : "Alist es un programa de listado de archivos que soporta múltiples almacenamientos, impulsado por Gin y Solidjs. Antes de la versión 3.57.0, la aplicación deshabilita la verificación de certificados TLS por defecto para todas las comunicaciones salientes del controlador de almacenamiento, haciendo el sistema vulnerable a ataques man-in-the-middle (MitM). Esto permite el descifrado completo, el robo y la manipulación de todos los datos transmitidos durante las operaciones de almacenamiento, comprometiendo gravemente la confidencialidad e integridad de los datos del usuario. Este problema ha sido parcheado en la versión 3.57.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alistgo:alist:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.57.0",
            "matchCriteriaId" : "6604E5A5-7438-488A-97E5-7632264956BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AlistGo/alist/commit/69629ca76a8f2c8c973ede3b616f93aa26ff23fb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AlistGo/alist/security/advisories/GHSA-8jmm-3xwx-w974",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25161",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:06.870",
      "lastModified" : "2026-02-13T21:24:02.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vulnerability in multiple file operation handlers. An authenticated attacker can bypass directory-level authorisation by injecting traversal sequences into filename components, enabling unauthorised file removal, movement and copying across user boundaries within the same storage mount. This issue has been patched in version 3.57.0."
      }, {
        "lang" : "es",
        "value" : "Alist es un programa de listado de archivos que soporta múltiples almacenamientos, impulsado por Gin y Solidjs. Antes de la versión 3.57.0, la aplicación contiene una vulnerabilidad de salto de ruta en múltiples manejadores de operaciones de archivo. Un atacante autenticado puede eludir la autorización a nivel de directorio inyectando secuencias de salto de ruta en los componentes del nombre de archivo, lo que permite la eliminación, movimiento y copia de archivos no autorizados entre límites de usuario dentro del mismo montaje de almacenamiento. Este problema ha sido parcheado en la versión 3.57.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alistgo:alist:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.57.0",
            "matchCriteriaId" : "6604E5A5-7438-488A-97E5-7632264956BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AlistGo/alist/commit/b188288525b9a35c76535139311e7c036dab057e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AlistGo/alist/security/advisories/GHSA-x4q4-7phh-42j9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25475",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:07.287",
      "lastModified" : "2026-02-13T14:42:29.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. This issue has been patched in version 2026.1.30."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente de IA personal. Antes de la versión 2026.1.30, la función isValidMedia() en src/media/parse.ts permite rutas de archivo arbitrarias, incluyendo rutas absolutas, rutas de directorio de inicio y secuencias de salto de directorio. Un agente puede leer cualquier archivo en el sistema al generar MEDIA:/path/to/file, exfiltrando datos sensibles al usuario/canal. Este problema ha sido parcheado en la versión 2026.1.30."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.1.30",
            "matchCriteriaId" : "85BCA27F-CEA4-4F4E-940F-5957B8EB247F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-r8g4-86fx-92mq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25481",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:07.447",
      "lastModified" : "2026-02-20T21:20:25.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langroid is a framework for building large-language-model-powered applications. Prior to version 0.59.32, there is a bypass to the fix for CVE-2025-46724. TableChatAgent can call pandas_eval tool to evaluate the expression. There is a WAF in langroid/utils/pandas_utils.py introduced to block code injection CVE-2025-46724. However it can be bypassed due to _literal_ok() returning False instead of raising UnsafeCommandError on invalid input, combined with unrestricted access to dangerous dunder attributes (__init__, __globals__, __builtins__). This allows chaining whitelisted DataFrame methods to leak the eval builtin and execute arbitrary code. This issue has been patched in version 0.59.32."
      }, {
        "lang" : "es",
        "value" : "Langroid es un framework para construir aplicaciones impulsadas por modelos de lenguaje grandes. Antes de la versión 0.59.32, existe un bypass para la corrección de CVE-2025-46724. TableChatAgent puede llamar a la herramienta pandas_eval para evaluar la expresión. Existe un WAF en langroid/utils/pandas_utils.py introducido para bloquear la inyección de código CVE-2025-46724. Sin embargo, puede ser evadido debido a que _literal_ok() devuelve False en lugar de lanzar UnsafeCommandError en una entrada inválida, combinado con el acceso sin restricciones a atributos dunder peligrosos (__init__, __globals__, __builtins__). Esto permite encadenar métodos de DataFrame en lista blanca para filtrar el builtin eval y ejecutar código arbitrario. Este problema ha sido parcheado en la versión 0.59.32."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.59.32",
            "matchCriteriaId" : "D5E51268-4EEF-4AFB-A80B-DA57B3099F66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langroid/langroid/commit/30abbc1a854dee22fbd2f8b2f575dfdabdb603ea",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/langroid/langroid/security/advisories/GHSA-x34r-63hx-w57f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25505",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:07.707",
      "lastModified" : "2026-02-27T20:25:05.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue has been patched in version 0.1.7."
      }, {
        "lang" : "es",
        "value" : "Bambuddy es un sistema autoalojado de archivo y gestión de impresiones para impresoras 3D Bambu Lab. Antes de la versión 0.1.7, una clave secreta codificada utilizada para firmar JWTs está incluida en el código fuente y las rutas de ManyAPI no verifican la autenticación. Este problema ha sido parcheado en la versión 0.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bambuddy:bambuddy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.7",
            "matchCriteriaId" : "58605F66-D3E4-45BE-A4BC-2E435EBD824B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maziggy/bambuddy/blob/a9bb8ed8239602bf08a9914f85a09eeb2bf13d15/backend/app/core/auth.py#L28",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maziggy/bambuddy/blob/main/CHANGELOG.md",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/maziggy/bambuddy/commit/a82f9278d2d587b7042a0858aab79fd8b6e3add9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maziggy/bambuddy/commit/c31f2968889c855f1ffacb700c2c9970deb2a6fb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maziggy/bambuddy/pull/225",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/maziggy/bambuddy/releases/tag/v0.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/maziggy/bambuddy/security/advisories/GHSA-gc24-px2r-5qmf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25513",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:07.973",
      "lastModified" : "2026-02-23T15:02:32.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the REST API that allows authenticated API users to execute arbitrary SQL queries through the sort parameter. The vulnerability exists in the ModelClass::getOrderBy() method where user-supplied sorting parameters are directly concatenated into the SQL ORDER BY clause without validation or sanitization. This affects all API endpoints that support sorting functionality. This issue has been patched in version 2025.81."
      }, {
        "lang" : "es",
        "value" : "FacturaScripts es un software de planificación de recursos empresariales y contabilidad de código abierto. Antes de la versión 2025.81, FacturaScripts contiene una crítica vulnerabilidad de inyección SQL en la API REST que permite a los usuarios de la API autenticados ejecutar consultas SQL arbitrarias a través del parámetro sort. La vulnerabilidad existe en el método ModelClass::getOrderBy() donde los parámetros de ordenación proporcionados por el usuario se concatenan directamente en la cláusula SQL ORDER BY sin validación ni saneamiento. Esto afecta a todos los puntos finales de la API que soportan la funcionalidad de ordenación. Este problema ha sido parcheado en la versión 2025.81."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        }, {
          "lang" : "en",
          "value" : "CWE-943"
        }, {
          "lang" : "en",
          "value" : "CWE-1286"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facturascripts:facturascripts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.81",
            "matchCriteriaId" : "0FF1EA1B-4578-48BC-975F-C522C60A8D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NeoRazorX/facturascripts/commit/1b6cdfa9ee1bb3365ea4a4ad753452035a027605",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-cjfx-qhwm-hf99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25514",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T20:16:08.113",
      "lastModified" : "2026-02-23T15:00:00.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the autocomplete functionality that allows authenticated attackers to extract sensitive data from the database including user credentials, configuration settings, and all stored business data. The vulnerability exists in the CodeModel::all() method where user-supplied parameters are directly concatenated into SQL queries without sanitization or parameterized binding. This issue has been patched in version 2025.81."
      }, {
        "lang" : "es",
        "value" : "FacturaScripts es software de código abierto de planificación de recursos empresariales y contabilidad. Antes de la versión 2025.81, FacturaScripts contiene una vulnerabilidad crítica de inyección SQL en la funcionalidad de autocompletado que permite a atacantes autenticados extraer datos sensibles de la base de datos, incluyendo credenciales de usuario, configuraciones y todos los datos de negocio almacenados. La vulnerabilidad existe en el método CodeModel::all() donde los parámetros proporcionados por el usuario se concatenan directamente en las consultas SQL sin saneamiento o enlace parametrizado. Este problema ha sido parcheado en la versión 2025.81."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        }, {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facturascripts:facturascripts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.81",
            "matchCriteriaId" : "0FF1EA1B-4578-48BC-975F-C522C60A8D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NeoRazorX/facturascripts/commit/5c070f82665b98efd2f914a4769c6dc9415f5b0f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-pqqg-5f4f-8952",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0944",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:58.603",
      "lastModified" : "2026-02-11T19:19:44.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows Forceful Browsing.This issue affects Group invite: from 0.0.0 before 2.3.9, from 3.0.0 before 3.0.4, from 4.0.0 before 4.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de verificación incorrecta de condiciones inusuales o excepcionales en Drupal Group invite permite la navegación forzada. Este problema afecta a Group invite: desde 0.0.0 antes de 2.3.9, desde 3.0.0 antes de 3.0.4, desde 4.0.0 antes de 4.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadrop:group_invite:*:*:*:*:*:drupal:*:*",
            "versionEndExcluding" : "2.3.9",
            "matchCriteriaId" : "4051913C-ED82-48A0-B44B-C94BC22A15FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadrop:group_invite:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.4",
            "matchCriteriaId" : "706621E6-B586-46B8-9161-A85CEA9497B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metadrop:group_invite:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "40921C8A-8A8D-4578-B36E-31C66491CCF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-001",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0945",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:58.780",
      "lastModified" : "2026-04-02T20:35:09.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue affects Role Delegation: from 1.3.0 before 1.5.0."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad \"Privilege Defined With Unsafe Actions\" en la delegación de roles de Drupal permite la escalada de privilegios. Este problema afecta a la delegación de roles: desde la versión 1.3.0 hasta la 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-267"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:role_delegation_project:role_delegation:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "8.x-1.3",
            "versionEndExcluding" : "8.x-1.5",
            "matchCriteriaId" : "D39CC1B5-D6C2-4F77-BBCA-9E84E385B8C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-002",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0946",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:58.907",
      "lastModified" : "2026-02-11T19:19:34.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AT Internet SmartTag allows Cross-Site Scripting (XSS).This issue affects AT Internet SmartTag: from 0.0.0 before 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Drupal AT Internet SmartTag permite cross-site scripting (XSS). Este problema afecta a AT Internet SmartTag: desde 0.0.0 hasta antes de 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bordeaux-metropole:at_internet_smarttag:*:*:*:*:*:drupal:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "E5AFD944-F23F-4D08-8A30-EDD41959D13A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-003",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0947",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:59.030",
      "lastModified" : "2026-02-11T19:19:26.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AT Internet Piano Analytics allows Cross-Site Scripting (XSS).This issue affects AT Internet Piano Analytics: from 0.0.0 before 1.0.1, from 2.0.0 before 2.3.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en Drupal AT Internet Piano Analytics permite cross-site scripting (XSS). Este problema afecta a AT Internet Piano Analytics: desde 0.0.0 anterior a 1.0.1, desde 2.0.0 anterior a 2.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bordeaux-metropole:at_internet_piano_analytics:*:*:*:*:*:drupal:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "66D2F4BF-F84C-478B-B79B-76F1957C2F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bordeaux-metropole:at_internet_piano_analytics:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "358AD460-489C-4165-868E-03B3D5DCC356"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-004",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0948",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:59.143",
      "lastModified" : "2026-02-11T19:19:14.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación Usando una Ruta o Canal Alternativo en Drupal Microsoft Entra ID SSO Login permite la escalada de privilegios. Este problema afecta a Microsoft Entra ID SSO Login: desde 0.0.0 antes de 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jaseerkinangattil:microsoft_entra_id_sso_login:*:*:*:*:*:drupal:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "CFDD1628-B784-43DF-866F-2899957BF5BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-005",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1553",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:59.267",
      "lastModified" : "2026-02-11T19:19:03.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización incorrecta en Drupal Drupal Canvas permite la navegación forzada. Este problema afecta a Drupal Canvas: desde 0.0.0 antes de 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal_canvas_project:drupal_canvas:*:*:*:*:*:drupal:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "8C71CD74-430A-41FC-85C5-7839D57819B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-006",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1554",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2026-02-04T21:15:59.427",
      "lastModified" : "2026-02-11T19:18:19.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2."
      }, {
        "lang" : "es",
        "value" : "Inyección XML (también conocida como Inyección XPath Ciega) vulnerabilidad en el servidor del Sistema de Autenticación Central (CAS) de Drupal permite la escalada de privilegios. Este problema afecta al servidor del Sistema de Autenticación Central (CAS): desde 0.0.0 anterior a 2.0.3, desde 2.1.0 anterior a 2.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "mlhess@drupal.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtenman:central_authentication_system_server:*:*:*:*:*:drupal:*:*",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "667508E4-C557-47F0-8038-58B3CAF1851E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtenman:central_authentication_system_server:*:*:*:*:*:drupal:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.1.2",
            "matchCriteriaId" : "1925AABB-E45D-40EC-9357-07091200BF4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-contrib-2026-007",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25499",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T21:16:01.043",
      "lastModified" : "2026-02-11T19:17:14.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configuration documentation, the sudoer line suggested is insecure and can result in escaping the folder using ../, allowing any files on the system to be edited. This issue has been patched in version 0.93.1."
      }, {
        "lang" : "es",
        "value" : "El Proveedor de Terraform / OpenTofu añade soporte para Proxmox Virtual Environment. Antes de la versión 0.93.1, en la documentación de configuración SSH, la línea sudoer sugerida es insegura y puede resultar en escapar de la carpeta usando ../, permitiendo que cualquier archivo en el sistema sea editado. Este problema ha sido parcheado en la versión 0.93.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bpg:terraform_provider:*:*:*:*:*:proxmox_virtual_environment:*:*",
            "versionEndExcluding" : "0.93.1",
            "matchCriteriaId" : "A458F745-4F03-406E-8071-C663D84305B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bpg/terraform-provider-proxmox/commit/bd604c41a31e2a55dd6acc01b0608be3ea49c023",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bpg/terraform-provider-proxmox/security/advisories/GHSA-gwch-7m8v-7544",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bpg/terraform-provider-proxmox/security/advisories/GHSA-gwch-7m8v-7544",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25511",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T21:16:02.243",
      "lastModified" : "2026-02-11T19:16:29.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, an authenticated user within the System Administrator group can trigger a full SSRF via the WOPI service discovery URL, including access to internal hosts/ports. The SSRF response body can be exfiltrated via the built‑in debug system, turning it into a visible SSRF. This also allows full server-side file read. This issue has been patched in versions 6.8.150, 25.0.82, and 26.0.5."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta de gestión de relaciones con clientes empresariales y de groupware. Antes de las versiones 6.8.150, 25.0.82 y 26.0.5, un usuario autenticado dentro del grupo de Administradores del Sistema puede desencadenar un SSRF completo a través de la URL de descubrimiento de servicio WOPI, incluyendo acceso a hosts/puertos internos. El cuerpo de la respuesta SSRF puede ser exfiltrado a través del sistema de depuración incorporado, convirtiéndolo en un SSRF visible. Esto también permite la lectura completa de archivos del lado del servidor. Este problema ha sido parcheado en las versiones 6.8.150, 25.0.82 y 26.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.150",
            "matchCriteriaId" : "1F54FF3F-BE7C-41FF-926A-9496CE99CE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.82",
            "matchCriteriaId" : "39BE8337-170B-4895-A5AA-B27AFB64E418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0.1",
            "versionEndExcluding" : "26.0.5",
            "matchCriteriaId" : "FB489F3F-5EA4-4DFD-9F70-9AD862D7401A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/commit/5ac199dce758e1ce0d1cdb6905df5da3c2af42b3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-r9v4-jm2r-r9pm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-r9v4-jm2r-r9pm",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25512",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T21:16:02.390",
      "lastModified" : "2026-02-11T19:15:49.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmp_file into an exec() call. By injecting shell metacharacters into tmp_file, an authenticated attacker can execute arbitrary system commands on the server. This issue has been patched in versions 6.8.150, 25.0.82, and 26.0.5."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta empresarial de gestión de relaciones con clientes y groupware. Antes de las versiones 6.8.150, 25.0.82 y 26.0.5, existe una vulnerabilidad de ejecución remota de código (RCE) en Group-Office. El endpoint email/message/tnefAttachmentFromTempFile concatena directamente el parámetro tmp_file, controlado por el usuario, en una llamada a exec(). Al inyectar metacaracteres de shell en tmp_file, un atacante autenticado puede ejecutar comandos de sistema arbitrarios en el servidor. Este problema ha sido parcheado en las versiones 6.8.150, 25.0.82 y 26.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.150",
            "matchCriteriaId" : "97DDA2DE-263C-4AB0-BA43-6AD9D0CAF599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.82",
            "matchCriteriaId" : "39BE8337-170B-4895-A5AA-B27AFB64E418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0.1",
            "versionEndExcluding" : "26.0.5",
            "matchCriteriaId" : "FB489F3F-5EA4-4DFD-9F70-9AD862D7401A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/Intermesh/groupoffice/commit/6c612deca97a6cd2a1bd4feea0ce7e8e9d907792",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-579w-jvg7-frr4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-579w-jvg7-frr4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25517",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T21:16:02.540",
      "lastModified" : "2026-02-20T21:20:34.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wagtail is an open source content management system built on Django. Prior to versions 6.3.6, 7.0.4, 7.1.3, 7.2.2, and 7.3, due to a missing permission check on the preview endpoints, a user with access to the Wagtail admin and knowledge of a model's fields can craft a form submission to obtain a preview rendering of any page, snippet or site setting object for which previews are enabled, consisting of any data of the user's choosing. The existing data of the object itself is not exposed, but depending on the nature of the template being rendered, this may expose other database contents that would otherwise only be accessible to users with edit access over the model. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This issue has been patched in versions 6.3.6, 7.0.4, 7.1.3, 7.2.2, and 7.3."
      }, {
        "lang" : "es",
        "value" : "Wagtail es un sistema de gestión de contenido de código abierto construido sobre Django. Antes de las versiones 6.3.6, 7.0.4, 7.1.3, 7.2.2 y 7.3, debido a una verificación de permisos faltante en los puntos finales de vista previa, un usuario con acceso al administrador de Wagtail y conocimiento de los campos de un modelo puede elaborar un envío de formulario para obtener una representación de vista previa de cualquier página, fragmento u objeto de configuración del sitio para los cuales las vistas previas están habilitadas, que consiste en cualquier dato elegido por el usuario. Los datos existentes del objeto en sí no se exponen, pero dependiendo de la naturaleza de la plantilla que se está renderizando, esto puede exponer otros contenidos de la base de datos que de otro modo solo serían accesibles para usuarios con acceso de edición sobre el modelo. La vulnerabilidad no es explotable por un visitante de sitio ordinario sin acceso al administrador de Wagtail. Este problema ha sido parcheado en las versiones 6.3.6, 7.0.4, 7.1.3, 7.2.2 y 7.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.6",
            "matchCriteriaId" : "07044C9A-F32B-4DC9-9787-3CDA3FEB6D51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "7.0.4",
            "matchCriteriaId" : "5917D7D2-B9DC-45D2-8EF8-C71359ADD7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.1.3",
            "matchCriteriaId" : "2725F3E2-8508-4E5B-B892-5563DAEE8501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "18E2C820-9669-43BB-8CEE-8FC5C91979D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wagtail/wagtail/commit/01fd3477365a193e6a8270311defb76e890d2719",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/5f09b6da61e779b0e8499bdbba52bf2f7bd3241f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/73f070dbefbd3b39ea6649ce36bd2d2a6eef2190",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/7dfe8de5f8b3f112c73c87b6729197db16454915",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/dd824023a031f1b82a6b6f83a97a5c73391b7c03",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-4qvv-g3vr-m348",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25519",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T21:16:02.693",
      "lastModified" : "2026-02-18T20:56:13.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external IDP. For users synced to OpenSlides via an external IDP, there is an incorrect access control regarding the local login of these users. Users can successfully login using the local login form and the OpenSlides username of a SAML user and a trivial password. This password is valid for all SAML users. This issue has been patched in version 4.2.29."
      }, {
        "lang" : "es",
        "value" : "OpenSlides es un sistema de presentación y asamblea gratuito, basado en web, para gestionar y proyectar la agenda, las mociones y las elecciones de una asamblea. Antes de la versión 4.2.29, OpenSlides soporta inicios de sesión locales con nombre de usuario y contraseña o un inicio de sesión único (single sign-on) opcionalmente configurable con SAML a través de un IDP externo. Para los usuarios sincronizados con OpenSlides a través de un IDP externo, existe un control de acceso incorrecto con respecto al inicio de sesión local de estos usuarios. Los usuarios pueden iniciar sesión exitosamente utilizando el formulario de inicio de sesión local y el nombre de usuario de OpenSlides de un usuario SAML y una contraseña trivial. Esta contraseña es válida para todos los usuarios SAML. Este problema ha sido parcheado en la versión 4.2.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openslides:openslides:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.5",
            "versionEndExcluding" : "4.2.29",
            "matchCriteriaId" : "1FFF78A6-AFEC-40E1-92E2-B7ABAD16B9EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSlides/OpenSlides/releases/tag/4.2.29",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSlides/OpenSlides/security/advisories/GHSA-vv4h-8wfc-pf8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenSlides/openslides-auth-service/commit/70c1aa9f5e1db59ec120ecce98d1c1169350a4ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSlides/openslides-auth-service/pull/889",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1884",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-04T22:15:57.933",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file module/webhook/model.php of the component Webhook Module. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en ZenTao hasta la versión 21.7.6-85642. El elemento afectado es la función fetchHook del archivo module/webhook/model.PHP del componente Módulo Webhook. Esta manipulación causa falsificación de petición del lado del servidor. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zentao:zentao:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.7.6",
            "matchCriteriaId" : "8D75EE4E-998F-4DD4-8EEC-6FA8E246499E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/9#issue-3832844574",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/9#issue-3832844574",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1892",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-04T22:15:58.110",
      "lastModified" : "2026-02-10T17:45:33.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file models/boards.js of the component REST API. Such manipulation of the argument item.cardId/item.checklistId/card.boardId leads to improper authorization. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is reported as difficult. Upgrading to version 8.21 mitigates this issue. The name of the patch is cabfeed9a68e21c469bf206d8655941444b9912c. It is suggested to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en WeKan hasta la versión 8.20. Esto afecta la función setBoardOrgs del archivo models/boards.js del componente REST API. Dicha manipulación del argumento item.cardId/item.checklistId/card.boardId conduce a una autorización indebida. El ataque puede ser lanzado remotamente. Un alto nivel de complejidad está asociado con este ataque. La explotabilidad se reporta como difícil. La actualización a la versión 8.21 mitiga este problema. El nombre del parche es cabfeed9a68e21c469bf206d8655941444b9912c. Se sugiere actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/cabfeed9a68e21c469bf206d8655941444b9912c",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25518",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:58.990",
      "lastModified" : "2026-02-27T20:20:22.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS lookups during ACME DNS-01 processing (for zone discovery and propagation self-checks). By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a crafted entry into cert-manager's DNS cache. Accessing this entry will trigger a panic, resulting in denial‑of‑service (DoS) of the cert-manager controller. The issue can also be exploited if the authoritative DNS server for the domain being validated is controlled by a malicious actor. This issue has been patched in versions 1.18.5 and 1.19.3."
      }, {
        "lang" : "es",
        "value" : "cert-manager añade certificados y emisores de certificados como tipos de recursos en clústeres de Kubernetes, y simplifica el proceso de obtención, renovación y uso de esos certificados. En las versiones desde la 1.18.0 hasta antes de la 1.18.5 y desde la 1.19.0 hasta antes de la 1.19.3, el cert-manager-controller realiza búsquedas DNS durante el procesamiento ACME DNS-01 (para el descubrimiento de zonas y las autocomprobaciones de propagación). Por defecto, estas búsquedas utilizan DNS estándar sin cifrar. Un atacante que puede interceptar y modificar el tráfico DNS desde el pod del cert-manager-controller puede insertar una entrada manipulada en la caché DNS de cert-manager. Acceder a esta entrada provocará un pánico, lo que resultará en una denegación de servicio (DoS) del controlador de cert-manager. El problema también puede ser explotado si el servidor DNS autoritativo para el dominio que se está validando es controlado por un actor malicioso. Este problema ha sido parcheado en las versiones 1.18.5 y 1.19.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        }, {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cert-manager:cert-manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.18.0",
            "versionEndExcluding" : "1.18.5",
            "matchCriteriaId" : "BAF454D3-E7A8-42DD-BEF0-C26D9BD49EC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cert-manager:cert-manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.19.0",
            "versionEndExcluding" : "1.19.3",
            "matchCriteriaId" : "BB820C78-5014-4E4B-B7AF-EA9F687CD3ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cert-manager/cert-manager/pull/8467",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cert-manager/cert-manager/pull/8468",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cert-manager/cert-manager/pull/8469",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25521",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:59.203",
      "lastModified" : "2026-02-20T21:20:40.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to before 2.0.39, a prototype pollution vulnerability exists in locutus. Despite a previous fix that attempted to mitigate prototype pollution by checking whether user input contained a forbidden key, it is still possible to pollute Object.prototype via a crafted input using String.prototype. This issue has been patched in version 2.0.39."
      }, {
        "lang" : "es",
        "value" : "Locutus incorpora librerías estándar de otros lenguajes de programación a JavaScript con fines educativos. En las versiones desde la 2.0.12 hasta antes de la 2.0.39, existe una vulnerabilidad de contaminación de prototipos en Locutus. A pesar de una corrección anterior que intentó mitigar la contaminación de prototipos verificando si la entrada del usuario contenía una clave prohibida, todavía es posible contaminar Object.prototype mediante una entrada manipulada utilizando String.prototype. Este problema ha sido corregido en la versión 2.0.39."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locutus:locutus:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.12",
            "versionEndExcluding" : "2.0.39",
            "matchCriteriaId" : "F90DC302-09EA-4098-98B1-8B553D0A7C9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/locutusjs/locutus/commit/042af9ca7fde2ff599120783e720a17f335bb01c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/locutusjs/locutus/security/advisories/GHSA-rxrv-835q-v5mh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25523",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:59.353",
      "lastModified" : "2026-02-20T20:57:08.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento-lts is a long-term support alternative to Magento Community Edition (CE). Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1."
      }, {
        "lang" : "es",
        "value" : "Magento-lts es una alternativa de soporte a largo plazo a Magento Community Edition (CE). Antes de la versión 20.16.1, la URL de administración puede ser descubierta sin conocimiento previo de su ubicación explotando el encabezado X-Original-Url en algunas configuraciones. Este problema ha sido parcheado en la versión 20.16.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "20.16.0",
            "matchCriteriaId" : "38BC51D0-57DC-4980-A1C7-860D04FF03C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-jg68-vhv3-9r8f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/bugs?subject=openmage&report_id=3416312",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25526",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:59.510",
      "lastModified" : "2026-02-20T21:00:42.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java class instantiation and file access bypassing built-in sandbox restrictions. This issue has been patched in versions 2.7.6 and 2.8.3."
      }, {
        "lang" : "es",
        "value" : "JinJava es un motor de plantillas basado en Java, basado en la sintaxis de plantillas de Django, adaptado para renderizar plantillas Jinja. Antes de las versiones 2.7.6 y 2.8.3, JinJava es vulnerable a la ejecución arbitraria de Java a través de un bypass mediante ForTag. Esto permite la instanciación arbitraria de clases Java y el acceso a archivos eludiendo las restricciones de sandbox integradas. Este problema ha sido parcheado en las versiones 2.7.6 y 2.8.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hubspot:jinjava:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.6",
            "matchCriteriaId" : "BC9EFEAD-5907-4796-A5F8-401DF7A9319A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hubspot:jinjava:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "2.8.3",
            "matchCriteriaId" : "959D6165-C81D-4F46-B188-E1B1BAEA5266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HubSpot/jinjava/commit/3d02e504d8bbb13bf3fe019e9ca7b51dfce7a998",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/HubSpot/jinjava/commit/c7328dce6030ac718f88974196035edafef24441",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/HubSpot/jinjava/releases/tag/jinjava-2.7.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/HubSpot/jinjava/releases/tag/jinjava-2.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/HubSpot/jinjava/security/advisories/GHSA-gjx9-j8f8-7j74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25536",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:59.663",
      "lastModified" : "2026-03-18T14:22:25.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless StreamableHTTPServerTransport deployments. This issue has been patched in version 1.26.0."
      }, {
        "lang" : "es",
        "value" : "El SDK de TypeScript de MCP es el SDK oficial de TypeScript para servidores y clientes de Model Context Protocol. Desde la versión 1.10.0 hasta la 1.25.3, se produce una fuga de datos de respuesta entre clientes cuando una única instancia de McpServer/servidor y de transporte es reutilizada a través de múltiples conexiones de cliente, más comúnmente en despliegues de StreamableHTTPServerTransport sin estado. Este problema ha sido parcheado en la versión 1.26.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:mcp_typescript_sdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.10.0",
            "versionEndExcluding" : "1.26.0",
            "matchCriteriaId" : "B979E384-46FC-45C2-947D-62860FC1F257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modelcontextprotocol/typescript-sdk/issues/204",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/modelcontextprotocol/typescript-sdk/issues/243",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-345p-7cg4-v4c7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25537",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:59.807",
      "lastModified" : "2026-02-11T19:13:47.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic. When a standard claim (such as nbf or exp) is provided with an incorrect JSON type (Like a String instead of a Number), the library’s internal parsing mechanism marks the claim as “FailedToParse”. Crucially, the validation logic treats this “FailedToParse” state identically to “NotPresent”. This means that if a check is enabled (like: validate_nbf = true), but the claim is not explicitly marked as required in required_spec_claims, the library will skip the validation check entirely for the malformed claim, treating it as if it were not there. This allows attackers to bypass critical time-based security restrictions (like “Not Before” checks) and commit potential authentication and authorization bypasses. This issue has been patched in version 10.3.0."
      }, {
        "lang" : "es",
        "value" : "jsonwebtoken es una librería JWT en Rust. Antes de la versión 10.3.0, existe una vulnerabilidad de confusión de tipos en jsonwebtoken, específicamente, en su lógica de validación de declaraciones. Cuando una declaración estándar (como nbf o exp) se proporciona con un tipo JSON incorrecto (como una cadena de texto en lugar de un número), el mecanismo de análisis interno de la librería marca la declaración como 'FailedToParse'. Crucialmente, la lógica de validación trata este estado 'FailedToParse' idénticamente a 'NotPresent'. Esto significa que si una verificación está habilitada (como: validate_nbf = true), pero la declaración no está explícitamente marcada como requerida en required_spec_claims, la librería omitirá la verificación de validación por completo para la declaración malformada, tratándola como si no estuviera presente. Esto permite a los atacantes eludir restricciones de seguridad críticas basadas en el tiempo (como las verificaciones de 'Not Before') y realizar posibles elusiones de autenticación y autorización. Este problema ha sido parcheado en la versión 10.3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keats:jsonwebtoken:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "10.3.0",
            "matchCriteriaId" : "2D8E0C7E-4688-48CB-B2EE-68D277D56183"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Keats/jsonwebtoken/commit/abbc3076742c4161347bc6b8bf4aa5eb86e1dc01",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Keats/jsonwebtoken/security/advisories/GHSA-h395-gr6q-cpjc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Keats/jsonwebtoken/security/advisories/GHSA-h395-gr6q-cpjc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25538",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:15:59.943",
      "lastModified" : "2026-02-11T19:10:54.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists in Devtron's Attributes API interface, allowing any authenticated user (including low-privileged CI/CD Developers) to obtain the global API Token signing key by accessing the /orchestrator/attributes?key=apiTokenSecret endpoint. After obtaining the key, attackers can forge JWT tokens for arbitrary user identities offline, thereby gaining complete control over the Devtron platform and laterally moving to the underlying Kubernetes cluster. This issue has been patched via commit d2b0d26."
      }, {
        "lang" : "es",
        "value" : "Devtron es una plataforma de integración de herramientas de código abierto para Kubernetes. En la versión 2.0.0 y anteriores, existe una vulnerabilidad en la interfaz de la API de Atributos de Devtron, que permite a cualquier usuario autenticado (incluidos los desarrolladores de CI/CD con bajos privilegios) obtener la clave de firma del Token de la API global accediendo al endpoint /orchestrator/attributes?key=apiTokenSecret. Después de obtener la clave, los atacantes pueden falsificar tokens JWT para identidades de usuario arbitrarias sin conexión, obteniendo así control total sobre la plataforma Devtron y moviéndose lateralmente al clúster de Kubernetes subyacente. Este problema ha sido parcheado mediante el commit d2b0d26."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devtron:devtron:*:*:*:*:*:kubernetes:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "4B1BB103-0C0A-4E78-A282-783DE037A037"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devtron-labs/devtron/commit/d2b0d260d858ab1354b73a8f50f7f078ca62706f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/devtron-labs/devtron/security/advisories/GHSA-8wpc-j9q9-j5m2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/devtron-labs/devtron/security/advisories/GHSA-8wpc-j9q9-j5m2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25539",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.083",
      "lastModified" : "2026-02-11T19:10:21.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile endpoint does not validate the dest parameter, allowing authenticated users to write files to arbitrary locations on the filesystem. This can lead to Remote Code Execution (RCE) by writing to sensitive locations such as cron jobs, SSH authorized_keys, or shell configuration files. This issue has been patched in version 3.5.5."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Antes de la versión 3.5.5, el endpoint /api/file/copyFile no valida el parámetro dest, permitiendo a usuarios autenticados escribir archivos en ubicaciones arbitrarias en el sistema de archivos. Esto puede llevar a la Ejecución Remota de Código (RCE) al escribir en ubicaciones sensibles como trabajos cron, SSH authorized_keys o archivos de configuración de shell. Este problema ha sido parcheado en la versión 3.5.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.3",
            "matchCriteriaId" : "3141D3B1-ED56-4898-B115-8863570D1D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/commit/d7f790755edf8c78d2b4176171e5a0cdcd720feb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c4jr-5q7w-f6r9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c4jr-5q7w-f6r9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25540",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.233",
      "lastModified" : "2026-02-20T21:02:56.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via `Rails.cache. When AUTHORIZED_FETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that depend on the account that signed the HTTP request. However, these contents are stored in an internal cache and reused with no regards to the signing actor. As a result, an empty response generated for a blocked user account may be served to requests from legitimate non-blocked actors, or conversely, content intended for non-blocked actors may be returned to blocked actors. This issue has been patched in versions 4.3.19, 4.4.13, 4.5.6."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito, de código abierto, basado en ActivityPub. Antes de las versiones 4.3.19, 4.4.13, 4.5.6, Mastodon es vulnerable al envenenamiento de caché web a través de 'Rails.cache'. Cuando AUTHORIZED_FETCH está habilitado, los puntos finales de ActivityPub para publicaciones fijadas y hashtags destacados tienen contenidos que dependen de la cuenta que firmó la solicitud HTTP. Sin embargo, estos contenidos se almacenan en una caché interna y se reutilizan sin tener en cuenta al actor firmante. Como resultado, una respuesta vacía generada para una cuenta de usuario bloqueada puede ser servida a solicitudes de actores legítimos no bloqueados, o, a la inversa, contenido destinado a actores no bloqueados puede ser devuelto a actores bloqueados. Este problema ha sido parcheado en las versiones 4.3.19, 4.4.13, 4.5.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-524"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.19",
            "matchCriteriaId" : "7C5EDBA6-4837-43AB-AEF3-C61A974B5017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.13",
            "matchCriteriaId" : "5A55C7B9-3FC4-4DB8-8C33-8C3435A54F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.6",
            "matchCriteriaId" : "A3A0CD1A-0EC2-43E3-8273-D3D06A65A2D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-ccpr-m53r-mfwr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25541",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.383",
      "lastModified" : "2026-02-27T20:13:28.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition \"v_capacity >= new_cap + offset\" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1."
      }, {
        "lang" : "es",
        "value" : "Bytes es una librería de utilidad para trabajar con bytes. Desde la versión 1.2.1 hasta antes de la 1.11.1, Bytes es vulnerable a desbordamiento de entero en BytesMut::reserve. En la ruta de recuperación única de BytesMut::reserve, si la condición 'v_capacity &gt;= new_cap + offset' utiliza una adición sin verificar. Cuando new_cap + offset desborda usize en compilaciones de lanzamiento, esta condición puede pasar incorrectamente, haciendo que self.cap se establezca en un valor que excede la capacidad asignada real. Las API posteriores, como spare_capacity_mut(), confían entonces en este valor de cap corrupto y pueden crear segmentos fuera de límites, lo que lleva a UB. Este comportamiento es observable en compilaciones de lanzamiento (el desbordamiento de entero se ajusta), mientras que las compilaciones de depuración entran en pánico debido a las comprobaciones de desbordamiento. Este problema ha sido parcheado en la versión 1.11.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-680"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tokio-rs:bytes:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "1.2.1",
            "versionEndExcluding" : "1.11.1",
            "matchCriteriaId" : "20BFEB88-98B3-498A-9FFC-0C950ED8CF0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tokio-rs/bytes/commit/d0293b0e35838123c51ca5dfdf468ecafee4398f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tokio-rs/bytes/releases/tag/v1.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2026-0007.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25543",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.523",
      "lastModified" : "2026-02-24T21:29:57.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. Prior to versions 9.0.892 and 9.1.893-beta, if the template tag is allowed, its contents are not sanitized. The template tag is a special tag that does not usually render its contents, unless the shadowrootmode attribute is set to open or closed. This issue has been patched in versions 9.0.892 and 9.1.893-beta."
      }, {
        "lang" : "es",
        "value" : "HtmlSanitizer es una librería.NET para limpiar fragmentos y documentos HTML de construcciones que pueden llevar a ataques XSS. Antes de las versiones 9.0.892 y 9.1.893-beta, si la etiqueta template está permitida, su contenido no se sanitiza. La etiqueta template es una etiqueta especial que normalmente no renderiza su contenido, a menos que el atributo shadowrootmode esté configurado como open o closed. Este problema ha sido parcheado en las versiones 9.0.892 y 9.1.893-beta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmlsanitizer_project:htmlsanitizer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.892",
            "matchCriteriaId" : "50E4C6AE-4885-4C25-AECC-7DFC84B02DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmlsanitizer_project:htmlsanitizer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.878",
            "versionEndExcluding" : "9.1.893",
            "matchCriteriaId" : "3D85EA7A-1B11-4EAA-AE6A-C008831A68A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mganss/HtmlSanitizer/commit/0ac53dca30ddad963f2b243669a5066933d82b81",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mganss/HtmlSanitizer/security/advisories/GHSA-j92c-7v7g-gj3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.nuget.org/packages/HtmlSanitizer/9.0.892",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.nuget.org/packages/HtmlSanitizer/9.1.893-beta",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25546",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.667",
      "lastModified" : "2026-03-18T14:25:39.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others. This issue has been patched in version 0.1.1."
      }, {
        "lang" : "es",
        "value" : "Godot MCP es un servidor de Model Context Protocol (MCP) para interactuar con el motor de juego Godot. Antes de la versión 0.1.1, una vulnerabilidad de inyección de comandos en godot-mcp permite la ejecución remota de código. La función executeOperation pasaba la entrada controlada por el usuario (p. ej., projectPath) directamente a exec(), lo que genera un shell. Un atacante podría inyectar metacaracteres de shell como $(command) o &amp;calc para ejecutar comandos arbitrarios con los privilegios del proceso del servidor MCP. Esto afecta a cualquier herramienta que acepte projectPath, incluyendo create_scene, add_node, load_sprite y otras. Este problema ha sido parcheado en la versión 0.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coding-solo:godot_mcp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.1",
            "matchCriteriaId" : "0CC0EB90-7310-48CF-951B-E59AAD1BAABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Coding-Solo/godot-mcp/commit/21c785d923cfdb471ea60323c13807d62dfecc5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Coding-Solo/godot-mcp/issues/64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Coding-Solo/godot-mcp/pull/67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Coding-Solo/godot-mcp/security/advisories/GHSA-8jx2-rhfh-q928",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25547",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, the library attempts to eagerly generate every possible combination synchronously. Because the expansion grows exponentially, even a small input can consume excessive CPU and memory and may crash the Node.js process. This issue has been patched in version 5.0.1."
      }, {
        "lang" : "es",
        "value" : "@isaacs/brace-expansion es una bifurcación de TypeScript híbrida CJS/ESM de brace-expansion. Antes de la versión 5.0.1, @isaacs/brace-expansion es vulnerable a un problema de denegación de servicio (DoS) causado por la expansión ilimitada de rangos de llaves. Cuando un atacante proporciona un patrón que contiene rangos de llaves numéricos repetidos, la librería intenta generar ávidamente cada combinación posible de forma síncrona. Debido a que la expansión crece exponencialmente, incluso una entrada pequeña puede consumir CPU y memoria excesivas y puede bloquear el proceso de Node.js. Este problema ha sido parcheado en la versión 5.0.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/brace-expansion/security/advisories/GHSA-7h2j-956f-4vf2",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25575",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:00.957",
      "lastModified" : "2026-02-11T19:10:03.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the propose_edits endpoint allows unauthenticated users to overwrite files in directories writable by the application user (e.g., /cdn). By supplying unsanitized file keys containing traversal sequences (e.g., ../../) in the JSON payload, an attacker can escape the intended temporary directory and replace public facing images or fill the server's storage. This issue has been patched via commit 86f34c7."
      }, {
        "lang" : "es",
        "value" : "NavigaTUM es un sitio web y una API para buscar salas, edificios y otros lugares. Antes del commit 86f34c7, existe una vulnerabilidad de salto de ruta en el endpoint propose_edits que permite a usuarios no autenticados sobrescribir archivos en directorios con permisos de escritura para el usuario de la aplicación (por ejemplo, /cdn). Al proporcionar claves de archivo no saneadas que contienen secuencias de salto (por ejemplo, ../../) en la carga útil JSON, un atacante puede escapar del directorio temporal previsto y reemplazar imágenes de cara al público o llenar el almacenamiento del servidor. Este problema ha sido parcheado mediante el commit 86f34c7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        }, {
          "lang" : "en",
          "value" : "CWE-26"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tum:navigatum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-02-03",
            "matchCriteriaId" : "419E6528-5D2E-451B-9F05-40EC28A72E22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TUM-Dev/NavigaTUM/commit/86f34c72886a59ec8f1e6c00f78a5ab889a70fd0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TUM-Dev/NavigaTUM/pull/2650",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25578",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:01.107",
      "lastModified" : "2026-02-18T19:03:44.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, a cross-site scripting vulnerability in the frontend allows a malicious attacker to inject code through the comment metadata of a song to exfiltrate user credentials. This issue has been patched in version 0.60.0."
      }, {
        "lang" : "es",
        "value" : "Navidrome es un servidor y streamer de colección de música basado en web de código abierto. Antes de la versión 0.60.0, una vulnerabilidad de cross-site scripting en el frontend permite a un atacante malicioso inyectar código a través de los metadatos de comentarios de una canción para exfiltrar credenciales de usuario. Este problema ha sido parcheado en la versión 0.60.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:navidrome:navidrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.60.0",
            "matchCriteriaId" : "505C09F4-61BF-49C6-A089-5E2E8577E01B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navidrome/navidrome/commit/d7ec7355c9036d5be659d6ac555c334bb5848ba6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/navidrome/navidrome/releases/tag/v0.60.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/navidrome/navidrome/security/advisories/GHSA-rh3r-8pxm-hg4w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25579",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:01.257",
      "lastModified" : "2026-02-18T19:01:54.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, authenticated users can crash the Navidrome server by supplying an excessively large size parameter to /rest/getCoverArt or to a shared-image URL (/share/img/<token>). When processing such requests, the server attempts to create an extremely large resized image, causing uncontrolled memory growth. This triggers the Linux OOM killer, terminates the Navidrome process, and results in a full service outage. If the system has sufficient memory and survives the allocation, Navidrome then writes these extremely large resized images into its cache directory, allowing an attacker to rapidly exhaust server disk space as well. This issue has been patched in version 0.60.0."
      }, {
        "lang" : "es",
        "value" : "Navidrome es un servidor y streamer de colección de música basado en web de código abierto. Antes de la versión 0.60.0, los usuarios autenticados pueden bloquear el servidor de Navidrome al proporcionar un parámetro de tamaño excesivamente grande a /rest/getCoverArt o a una URL de imagen compartida (/share/img/). Al procesar dichas solicitudes, el servidor intenta crear una imagen redimensionada extremadamente grande, lo que provoca un crecimiento descontrolado de la memoria. Esto activa el OOM killer de Linux, termina el proceso de Navidrome y resulta en una interrupción completa del servicio. Si el sistema tiene suficiente memoria y sobrevive a la asignación, Navidrome escribe estas imágenes redimensionadas extremadamente grandes en su directorio de caché, permitiendo que un atacante agote rápidamente el espacio en disco del servidor también. Este problema ha sido parcheado en la versión 0.60.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:navidrome:navidrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.60.0",
            "matchCriteriaId" : "505C09F4-61BF-49C6-A089-5E2E8577E01B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navidrome/navidrome/releases/tag/v0.60.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/navidrome/navidrome/security/advisories/GHSA-hrr4-3wgr-68x3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25582",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:01.393",
      "lastModified" : "2026-02-18T18:48:30.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow (read) vulnerability in CIccIO::WriteUInt16Float() when converting malformed XML to ICC profiles via iccFromXml tool. This issue has been patched in version 2.3.1.3."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.3, existe una vulnerabilidad de desbordamiento de búfer de montón (lectura) en CIccIO::WriteUInt16Float() al convertir XML malformado a perfiles ICC a través de la herramienta iccFromXml. Este problema ha sido parcheado en la versión 2.3.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.3",
            "matchCriteriaId" : "35AA9083-F043-455B-85D4-E21897D1C8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/b5e5dd238f609ec1a4efb25674e7fa4bd29d894a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/559",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/561",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-46hq-fphp-jggf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25583",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:01.540",
      "lastModified" : "2026-02-18T18:47:01.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8() when processing malformed ICC profile files via unchecked fread operation. This issue has been patched in version 2.3.1.3."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.3, existe una vulnerabilidad de desbordamiento de búfer de montón en CIccFileIO::Read8() al procesar archivos de perfil ICC malformados mediante una operación fread sin verificar. Este problema ha sido parcheado en la versión 2.3.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.3",
            "matchCriteriaId" : "35AA9083-F043-455B-85D4-E21897D1C8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/8a6df2d8dac1e971a18be66fa36e3a0d6584f919",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/558",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/562",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-5ffg-r52h-fgw3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25584",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T22:16:01.683",
      "lastModified" : "2026-02-18T18:37:23.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum<>::GetValues(). This is triggered when processing a malformed ICC profile. The vulnerability allows an out-of-bounds write on the stack, potentially leading to memory corruption, information disclosure, or code execution when processing specially crafted ICC files. This issue has been patched in version 2.3.1.3."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.3, existe una vulnerabilidad de desbordamiento de búfer de pila (stack-buffer-overflow) en CIccTagFloatNum&lt;&gt;::GetValues(). Esto se activa al procesar un perfil ICC malformado. La vulnerabilidad permite una escritura fuera de límites en la pila, lo que podría conducir a corrupción de memoria, revelación de información o ejecución de código al procesar archivos ICC especialmente diseñados. Este problema ha sido parcheado en la versión 2.3.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        }, {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.3",
            "matchCriteriaId" : "35AA9083-F043-455B-85D4-E21897D1C8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/c9cb108f58683bd87afca616dea3e4cdb884c23f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/551",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/565",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-xjr3-v3vr-5794",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1894",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-04T23:15:55.657",
      "lastModified" : "2026-02-11T19:08:27.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js of the component REST API. Performing a manipulation of the argument item.cardId/item.checklistId/card.boardId results in improper authorization. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. The patch is named 251d49eea94834cf351bb395808f4a56fb4dbb44. Upgrading the affected component is recommended."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en WeKan hasta la versión 8.20. Esto afecta una función desconocida del archivo models/checklistItems.js del componente REST API. Realizar una manipulación del argumento item.cardId/item.checklistId/card.boardId resulta en una autorización incorrecta. La explotación remota del ataque es posible. Actualizar a la versión 8.21 solucionará este problema. El parche se denomina 251d49eea94834cf351bb395808f4a56fb4dbb44. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/251d49eea94834cf351bb395808f4a56fb4dbb44",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344266",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344266",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1895",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-04T23:15:55.860",
      "lastModified" : "2026-02-23T10:16:23.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to address this issue. This patch is called 8c0b4f79d8582932528ec2fdf2a4487c86770fb9. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Un fallo ha sido encontrado en WeKan hasta 8.20. Afectada es la función applyWipLimit del archivo models/lists.js del componente Attachment Storage Handler. Ejecutar una manipulación puede llevar a controles de acceso impropios. El ataque puede ser ejecutado de forma remota. Actualizar a la versión 8.21 es capaz de abordar este problema. Este parche se llama 8c0b4f79d8582932528ec2fdf2a4487c86770fb9. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/8c0b4f79d8582932528ec2fdf2a4487c86770fb9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344267",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344267",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742666",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742679",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22038",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T23:15:56.057",
      "lastModified" : "2026-02-17T15:42:50.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.46, the AutoGPT platform's Stagehand integration blocks log API keys and authentication secrets in plaintext using logger.info() statements. This occurs in three separate block implementations (StagehandObserveBlock, StagehandActBlock, and StagehandExtractBlock) where the code explicitly calls api_key.get_secret_value() and logs the result. This issue has been patched in autogpt-platform-beta-v0.6.46."
      }, {
        "lang" : "es",
        "value" : "AutoGPT es una plataforma que permite a los usuarios crear, desplegar y gestionar agentes de inteligencia artificial continuos que automatizan flujos de trabajo complejos. Antes de autogpt-platform-beta-v0.6.46, los bloques de integración de Stagehand de la plataforma AutoGPT registraban claves API y secretos de autenticación en texto plano utilizando sentencias logger.info(). Esto ocurre en tres implementaciones de bloques separadas (StagehandObserveBlock, StagehandActBlock y StagehandExtractBlock) donde el código llama explícitamente a api_key.get_secret_value() y registra el resultado. Este problema ha sido parcheado en autogpt-platform-beta-v0.6.46."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agpt:autogpt_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.46",
            "matchCriteriaId" : "C9642924-6805-44F1-9115-2BFB5F87B8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/commit/1eabc604842fa876c09d69af43d2d1e8fb9b8eb9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-rc89-6g7g-v5v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25585",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-04T23:15:56.220",
      "lastModified" : "2026-02-18T18:12:31.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a vulnerability IccCmm.cpp:5793 when reading through index during ICC profile processing. The malformed ICC profile triggers improper array bounds validation in the color management module, resulting in an out-of-bounds read that can lead to memory disclosure or segmentation fault from accessing memory beyond the array boundary. This issue has been patched in version 2.3.1.3."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.3, existe una vulnerabilidad IccCmm.cpp:5793 al leer a través del índice durante el procesamiento del perfil ICC. El perfil ICC malformado desencadena una validación incorrecta de los límites del array en el módulo de gestión de color, lo que resulta en una lectura fuera de límites que puede conducir a la divulgación de memoria o a un fallo de segmentación al acceder a memoria más allá del límite del array. Este problema ha sido parcheado en la versión 2.3.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-129"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.3",
            "matchCriteriaId" : "35AA9083-F043-455B-85D4-E21897D1C8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/ba81cd94b9c82b1d3905d45427badbd9d8adfa15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/552",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/563",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-pmqx-q624-jg6w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1896",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T00:15:53.760",
      "lastModified" : "2026-02-10T17:45:59.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in WeKan up to 8.20. Affected by this vulnerability is the function ComprehensiveBoardMigration of the file server/migrations/comprehensiveBoardMigration.js of the component Migration Operation Handler. The manipulation of the argument boardId leads to improper access controls. The attack is possible to be carried out remotely. Upgrading to version 8.21 addresses this issue. The identifier of the patch is cc35dafef57ef6e44a514a523f9a8d891e74ad8f. Upgrading the affected component is advised."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en WeKan hasta la versión 8.20. Afectada por esta vulnerabilidad es la función ComprehensiveBoardMigration del archivo server/migrations/comprehensiveBoardMigration.js del componente Migration Operation Handler. La manipulación del argumento boardId conduce a controles de acceso inadecuados. El ataque puede ser llevado a cabo de forma remota. La actualización a la versión 8.21 soluciona este problema. El identificador del parche es cc35dafef57ef6e44a514a523f9a8d891e74ad8f. Se aconseja actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/cc35dafef57ef6e44a514a523f9a8d891e74ad8f",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1897",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T01:15:52.450",
      "lastModified" : "2026-02-10T17:47:03.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Position-History Tracking. The manipulation results in missing authorization. The attack may be performed from remote. Upgrading to version 8.21 can resolve this issue. The patch is identified as 55576ec17722db094835470b386162c9a662fb60. It is advisable to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en WeKan hasta 8.20. Afectada por este problema es alguna funcionalidad desconocida del archivo server/methods/positionHistory.js del componente Position-History Tracking. La manipulación resulta en autorización faltante. El ataque puede ser realizado desde remoto. Actualizar a la versión 8.21 puede resolver este problema. El parche es identificado como 55576ec17722db094835470b386162c9a662fb60. Es aconsejable actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/55576ec17722db094835470b386162c9a662fb60",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1898",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T01:15:53.507",
      "lastModified" : "2026-02-10T21:46:48.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in WeKan up to 8.20. This affects an unknown part of the file packages/wekan-ldap/server/syncUser.js of the component LDAP User Sync. This manipulation causes improper access controls. It is possible to initiate the attack remotely. Upgrading to version 8.21 is able to mitigate this issue. Patch name: 146905a459106b5d00b4f09453a6554255e6965a. You should upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en WeKan hasta la versión 8.20. Esto afecta una parte desconocida del archivo packages/wekan-ldap/server/syncUser.js del componente Sincronización de Usuarios LDAP. Esta manipulación causa controles de acceso inadecuados. Es posible iniciar el ataque remotamente. La actualización a la versión 8.21 puede mitigar este problema. Nombre del parche: 146905a459106b5d00b4f09453a6554255e6965a. Debería actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/146905a459106b5d00b4f09453a6554255e6965a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0867",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T07:16:17.223",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Essential Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ew-author, ew-archive, ew-category, ew-page, and ew-menu shortcodes in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was partially fixed in version 3.0."
      }, {
        "lang" : "es",
        "value" : "El plugin Essential Widgets para WordPress es vulnerable a cross-site scripting almacenado a través de los shortcodes ew-author, ew-archive, ew-category, ew-page y ew-menu del plugin en todas las versiones hasta la 3.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. NOTA: Esta vulnerabilidad fue parcialmente corregida en la versión 3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3440541/essential-widgets",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3447282/essential-widgets",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/08d4ed49-1338-422f-b55f-a102f2d1d6c8?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1246",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T07:16:17.443",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Arbitrary File Read via path traversal in the 'loadFile' parameter in all versions up to, and including, 6.4.2 due to insufficient path validation and sanitization in the 'loadLogFile' AJAX action. This makes it possible for authenticated attackers, with Editor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information such as database credentials and authentication keys."
      }, {
        "lang" : "es",
        "value" : "El plugin ShortPixel Image Optimizer para WordPress es vulnerable a la lectura arbitraria de archivos a través de salto de ruta en el parámetro 'loadFile' en todas las versiones hasta la 6.4.2, inclusive, debido a la validación y saneamiento de ruta insuficientes en la acción AJAX 'loadLogFile'. Esto permite a atacantes autenticados, con acceso de nivel Editor o superior, leer el contenido de archivos arbitrarios en el servidor, que pueden contener información sensible como credenciales de base de datos y claves de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/shortpixel-image-optimiser/tags/6.4.1/class/Controller/AjaxController.php#L1686",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/shortpixel-image-optimiser/tags/6.4.1/class/Controller/AjaxController.php#L309",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/shortpixel-image-optimiser/tags/6.4.1/class/Controller/BulkController.php#L200",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3449706%40shortpixel-image-optimiser&new=3449706%40shortpixel-image-optimiser&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/03cb41d2-67c8-457f-8d85-7aede8e12d44?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1268",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T07:16:17.620",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dynamic Widget Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget content field in the Gutenberg editor sidebar in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Dynamic Widget Content para WordPress es vulnerable a cross-site scripting almacenado a través del campo de contenido del widget en la barra lateral del editor Gutenberg en todas las versiones hasta la 1.3.6, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/dynamic-widget-content/tags/1.3.6/helpers/blocks.php#L64",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dynamic-widget-content/tags/1.3.6/helpers/blocks.php#L70",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3444655%40dynamic-widget-content&new=3444655%40dynamic-widget-content&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5324ca6d-37cb-41e4-8355-80ca113f855e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1953",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-02-05T07:16:17.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nukegraphic CMS v3.1.2 contains a stored cross-site scripting (XSS) vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The application fails to properly sanitize user input in the name field before storing it in the database and rendering it across multiple CMS pages. An authenticated attacker with low privileges can inject malicious JavaScript payloads through the profile edit request, which are then executed site-wide whenever the affected user's name is displayed. This allows the attacker to execute arbitrary JavaScript in the context of other users' sessions, potentially leading to session hijacking, credential theft, or unauthorized actions performed on behalf of victims."
      }, {
        "lang" : "es",
        "value" : "Nukegraphic CMS v3.1.2 contiene una vulnerabilidad de cross-site scripting (XSS) almacenado en la funcionalidad de edición de perfil de usuario en /ngc-cms/user-edit-profile.PHP. La aplicación no sanitiza correctamente la entrada del usuario en el campo de nombre antes de almacenarla en la base de datos y renderizarla en múltiples páginas del CMS. Un atacante autenticado con bajos privilegios puede inyectar cargas útiles de JavaScript maliciosas a través de la solicitud de edición de perfil, las cuales son luego ejecutadas en todo el sitio cada vez que se muestra el nombre del usuario afectado. Esto permite al atacante ejecutar JavaScript arbitrario en el contexto de las sesiones de otros usuarios, lo que podría llevar al secuestro de sesión, robo de credenciales o acciones no autorizadas realizadas en nombre de las víctimas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/carlosbudiman/CVE-2026-1953-Disclosure",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25198",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-05T08:16:08.450",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack."
      }, {
        "lang" : "es",
        "value" : "Las versiones de web2py 2.27.1-stable+timestamp.2023.11.16.08.03.57 y anteriores contienen una vulnerabilidad de redirección abierta. Si esta vulnerabilidad es explotada, el usuario puede ser redirigido a un sitio web arbitrario al acceder a una URL especialmente diseñada. Como resultado, el usuario puede convertirse en víctima de un ataque de phishing."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/web2py/web2py/commit/b4e1ddbd6d40fb30863f6263a67bcdf411a0c6df",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://github.com/web2py/web2py/releases",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN46925341/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://web2py.com/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1319",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T09:15:50.643",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Robin Image Optimizer – Unlimited Image Optimization & WebP Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of a Media Library image in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Robin Image Optimizer – Unlimited Image Optimization &amp; WebP Converter para WordPress es vulnerable a cross-site scripting almacenado a través del campo 'Texto Alternativo' de una imagen de la librería de medios en todas las versiones hasta la 2.0.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de Autor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3445467/robin-image-optimizer/tags/2.0.3/libs/addons/includes/classes/webp/vendor/rosell-dk/dom-util-for-webp/src/PictureTags.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/288cd86b-8d13-46bf-99ef-76698cd62a41?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1271",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T10:16:03.440",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the 'pm_upload_image' and 'pm_upload_cover_image' AJAX actions. This is due to the update_user_meta() function being called outside of the user authorization check in public/partials/crop.php and public/partials/coverimg_crop.php. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change any user's profile picture or cover image, including administrators."
      }, {
        "lang" : "es",
        "value" : "El plugin ProfileGrid – User Profiles, Groups and Communities para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta e incluyendo la 5.9.7.2 a través de las acciones AJAX 'pm_upload_image' y 'pm_upload_cover_image'. Esto se debe a que la función update_user_meta() se llama fuera de la comprobación de autorización de usuario en public/partials/crop.php y public/partials/coverimg_crop.php. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, cambien la imagen de perfil o la imagen de portada de cualquier usuario, incluidos los administradores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.6.7/public/partials/coverimg_crop.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.6.7/public/partials/crop.php#L73",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/coverimg_crop.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/crop.php#L73",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3448434%40profilegrid-user-profiles-groups-and-communities&new=3448434%40profilegrid-user-profiles-groups-and-communities&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/712535ce-8c38-4944-aa0a-36d9bacaeb67?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1294",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T10:16:03.643",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All In One Image Viewer Block plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.2 due to missing authorization and URL validation on the image-proxy REST API endpoint. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin All In One Image Viewer Block para WordPress es vulnerable a la falsificación de petición del lado del servidor en todas las versiones hasta la 1.0.2, inclusive, debido a la falta de autorización y validación de URL en el endpoint de la API REST image-proxy. Esto permite a atacantes no autenticados realizar peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede utilizarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/image-viewer/tags/1.0.2/image-viewer-block.php#L10",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449642/image-viewer/tags/1.0.3/image-viewer-block.php?old=3405983&old_path=image-viewer%2Ftags%2F1.0.2%2Fimage-viewer-block.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7c3f7108-eb32-425a-a705-4f032e7da6b0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1654",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T10:16:03.857",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Peter's Date Countdown plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Peter's Date Countdown para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro '$_SERVER['PHP_SELF']' en todas las versiones hasta la 2.0.0, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/peters-date-countdown/tags/2.0.0/datecountdown.php#L246",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3450122/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f8f8e436-2679-4ecb-831e-2b22dd99be32?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1517",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T12:15:59.930",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be executed remotely. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en iomad hasta 5.0. Afecta a una función desconocida del componente Company Admin Block. Dicha manipulación conduce a inyección SQL. El ataque puede ser ejecutado remotamente. Es una buena práctica aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iomad/iomad/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/iomad/iomad/issues/2559",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/iomad/iomad/issues/2559#issuecomment-3841174677",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344487",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344487",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1966",
      "sourceIdentifier" : "security@yugabyte.com",
      "published" : "2026-02-05T12:16:01.467",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services."
      }, {
        "lang" : "es",
        "value" : "YugabyteDB Anywhere muestra las contraseñas de enlace LDAP configuradas a través de gflags en texto claro dentro de la interfaz de usuario web. Un usuario autenticado con acceso a la vista de configuración podría obtener las credenciales LDAP, lo que podría permitir el acceso no autorizado a servicios de directorio externos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@yugabyte.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:H/AT:P/PR:H/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@yugabyte.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.yugabyte.com/stable/secure/vulnerability-disclosure-policy/",
        "source" : "security@yugabyte.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23572",
      "sourceIdentifier" : "psirt@teamviewer.com",
      "published" : "2026-02-05T12:16:01.607",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en los clientes TeamViewer Full y Host (Windows, macOS, Linux) anterior a la versión 15.74.5 permite a un usuario autenticado eludir controles de acceso adicionales con la configuración 'Permitir después de la confirmación' en una sesión remota. Un exploit podría resultar en acceso no autorizado antes de la confirmación local. El usuario debe estar autenticado para la sesión remota a través de ID/contraseña, Enlace de Sesión o Acceso Fácil como requisito previo para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@teamviewer.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@teamviewer.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1003/",
        "source" : "psirt@teamviewer.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23796",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-05T12:16:01.743",
      "lastModified" : "2026-02-19T18:31:45.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID\nfor a victim and later hijack the authenticated session.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable."
      }, {
        "lang" : "es",
        "value" : "Quick.Cart permite que el identificador de sesión de un usuario se establezca antes de la autenticación. El valor de este ID de sesión permanece igual después de la autenticación. Este comportamiento permite a un atacante fijar un ID de sesión para una víctima y luego secuestrar la sesión autenticada.\n\nEl proveedor fue notificado con antelación sobre esta vulnerabilidad, pero no respondió con los detalles de la vulnerabilidad o el rango de versiones vulnerables. Solo la versión 6.7 fue probada y confirmada como vulnerable; otras versiones no fueron probadas y también podrían ser vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensolution:quick.cart:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544991D-06F2-4207-BAA0-5045BC483E61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/02/CVE-2026-23796",
        "source" : "cvd@cert.pl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensolution.org/sklep-internetowy-quick-cart.html",
        "source" : "cvd@cert.pl",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23797",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-05T12:16:01.897",
      "lastModified" : "2026-02-19T18:30:15.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password in user editing page.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable."
      }, {
        "lang" : "es",
        "value" : "En Quick.Cart, las contraseñas de usuario se almacenan en formato de texto plano. Un atacante con privilegios elevados puede mostrar las contraseñas de los usuarios en la página de edición de usuarios.\n\nEl proveedor fue notificado tempranamente sobre esta vulnerabilidad, pero no respondió con los detalles de la vulnerabilidad o el rango de versiones vulnerables. Solo la versión 6.7 fue probada y confirmada como vulnerable; otras versiones no fueron probadas y también podrían ser vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensolution:quick.cart:6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0544991D-06F2-4207-BAA0-5045BC483E61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/02/CVE-2026-23796",
        "source" : "cvd@cert.pl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensolution.org/sklep-internetowy-quick-cart.html",
        "source" : "cvd@cert.pl",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1523",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-05T14:16:04.420",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal vulnerability in Digitek ADT1100 and Digitek DT950 from PRIMION DIGITEK, S.L.U (Azkoyen Group). This vulnerability allows an attacker to access arbitrary files in the server's file system, thet is, 'http://<host>/..%2F..% 2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd'. By manipulating the input to include URL encoded directory traversal sequences (e.g., %2F representing /), an attacker can bypass the input validation mechanisms ans retrieve sensitive files outside the intended directory, which could lead to information disclosure or further system compromise."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de recorrido de rutas en Digitek ADT1100 y Digitek DT950 de PRIMION DIGITEK, S.L.U (Grupo Azkoyen). Esta vulnerabilidad permite a un atacante acceder a archivos arbitrarios en el sistema de archivos del servidor, es decir, 'http:///..%2F..% 2F..%2F..%2F..% 2F..%2F..%2F..%2F..%2Fetc%2 Fpasswd'. Al manipular la entrada para incluir secuencias de recorrido de directorios codificadas en URL (por ejemplo, %2F que representa /), un atacante puede eludir los mecanismos de validación de entradas y recuperar archivos confidenciales fuera del directorio previsto, lo que podría dar lugar a la divulgación de información o a un mayor compromiso del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-digitek-grupo-azkoyen",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1927",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-05T14:16:04.693",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the greenshift_app_pass_validation() function in all versions up to, and including, 12.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve global plugin settings including stored AI API keys and modify plugin settings, including the injection of arbitrary web scripts via the 'custom_css' value (stored XSS). NOTE: This vulnerability was partially patched in version 12.6."
      }, {
        "lang" : "es",
        "value" : "El plugin Greenshift – bloques de animación y constructor de páginas para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobación de capacidad faltante en la función greenshift_app_pass_validation() en todas las versiones hasta la 12.5.7, ambas inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, recuperen configuraciones globales del plugin, incluyendo claves API de IA almacenadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3441535/greenshift-animation-and-page-builder-blocks/trunk/init.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3441609/greenshift-animation-and-page-builder-blocks",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6e2128db-ca9f-4211-8bc5-01a2cc1cba64?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0714",
      "sourceIdentifier" : "psirt@moxa.com",
      "published" : "2026-02-05T17:16:13.203",
      "lastModified" : "2026-02-18T17:55:46.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and attaching external equipment to the SPI bus to capture TPM communications. If successful, the captured data may allow offline decryption of eMMC contents. This attack cannot be performed through brief or opportunistic physical access and requires extended physical access, possession of the device, appropriate equipment, and sufficient time for signal capture and analysis. Remote exploitation is not possible."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ataque físico en ciertas computadoras industriales Moxa que utilizan cifrado de disco completo LUKS respaldado por TPM en Moxa Industrial Linux 3, donde el TPM discreto está conectado a la CPU a través de un bus SPI. La explotación requiere acceso físico invasivo, incluyendo abrir el dispositivo y conectar equipo externo al bus SPI para capturar las comunicaciones del TPM. Si tiene éxito, los datos capturados pueden permitir el descifrado fuera de línea del contenido de la eMMC. Este ataque no puede realizarse mediante acceso físico breve u oportunista y requiere acceso físico prolongado, posesión del dispositivo, equipo apropiado y tiempo suficiente para la captura y análisis de señales. La explotación remota no es posible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@moxa.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@moxa.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-1222a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "8167DA5A-652A-402E-BF4F-01D70DD14FC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-1222a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72578407-EBB4-455A-BFFD-CBF17DBDF888"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t-us_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "503B8755-1E39-4EF2-9E36-6FF430F3DDF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t-us:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CA1BF1-116A-4EED-8C17-67167F0C2053"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "5F3FD56F-C600-42DA-8A17-AE6A53677F77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F459B2E-241A-41C6-B0F9-651955E6EC9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t-ap_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "E3D4B9CC-F8C0-4761-AD7C-48884CCA008E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t-ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09ACD6D-F1AF-450F-8B7B-5313389E204E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t-eu_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "2E3C2660-8331-4382-9B39-0C3828230878"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t-eu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532B900B-39A3-4DD8-867A-CD84702B7243"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3434a-t-lte-wifi_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "64DA1C29-CF93-4A95-8F55-5CA151E20B3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3434a-t-lte-wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D9FC85-16CD-4170-B153-5B8E752402E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3424a-t-lte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "995400B9-5332-4215-BA10-BF11EE0DDA94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3424a-t-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91D6E6E-C4A4-4D1F-AA36-D5DC150DF3C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3420a-t-lte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "FB2C60D1-9E8B-44B6-81B7-65A645468F2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3420a-t-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738173F1-B37C-4763-96A9-82932E578CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3430a-t-lte-wifi_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "5710925C-DFD1-4DAB-AA86-E0BC497FB03A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3430a-t-lte-wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C8CE2A-55D7-46AF-8279-27398D3A4035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4450a-t-5g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "04F34E9F-00C9-4BDA-9F90-7C8BAAA4B232"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4450a-t-5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A69F3-C344-4497-9D83-28D4705E1AF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4434a-i-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "D3021869-904A-48D8-B5A6-86392B0B7AE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4434a-i-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2624B562-847E-42E2-8A40-CD758D9A6ED3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4410a-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "1BB21C59-CBBE-48D0-8F9B-B3981B41A7B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4410a-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B160E192-06BA-46C2-9A3B-5E7DE67975ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4454a-t-5g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "FD20F80A-E88B-4035-9EA9-CC20473C9D11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4454a-t-5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE600462-6F7D-42DB-B057-BEFF8EB8D7AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4414a-i-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "51EEBA33-4514-4518-ABC8-E3A2BC188EF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4414a-i-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AE6E81-EC56-45A6-8ACD-0E69FC5A4035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4430a-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "3534010A-ABE9-40E6-A414-DB40248F08C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4430a-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B389D3-63FC-413F-837F-686315DB7987"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "DE026AF0-969E-487A-A3E8-5335F8410BA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8210-t-lx-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53104CD8-0DF4-46E5-87F1-B5810EB1B79E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "B471C4C8-AA5B-4313-BC60-8643A995CBA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-eu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D493C8-E0E4-4C2B-8A95-66DB61BD7035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "EAF65F04-34B5-4BDF-891F-A748F3E83226"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-ap-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC404D8-D558-462F-898F-9CFE54330FD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "F40D9DE3-4DE6-4607-AFD4-6F6BF5A6739E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-us-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726EC056-8BC7-4ACC-A6FF-7E7664859B03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "3D28B123-ECE0-42C6-847E-C8202F4AB609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65808DD-2672-42D7-8544-8A9E0D1519E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v1202-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "6F44CEC2-E2EA-4D48-8E73-9021016490B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v1202-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70417E9B-EE42-4C07-AF9F-E5A5706FA2AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v1222-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "A49B3729-A2FD-4323-9C3C-247F40F2A275"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v1222-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7C7DB-3D0F-42DB-8BFA-FE925BCE033C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v1222-w-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E603495A-9361-4F98-A504-27BD79287C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v1222-w-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDB695F-6E8A-4F1B-BB66-4454EEFEA8FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl7-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "3090DF0D-8F71-44D2-89A5-E09557D38DF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl7-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9866E9-E766-48C5-BE4D-C0D47A110B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl7-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F97B9744-7133-42A1-8A57-71645107BE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl7-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7478BFC6-B075-48AB-91AD-4198763E9A98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl7-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "00629F07-BF15-4EBD-9A4F-75F6E10FE28E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl7-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0B516F-DB20-4945-810F-0FB5E35519DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl5-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F039963D-EB6C-4C4D-988D-EF29070CF838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl5-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286BAABC-D23A-47CE-8C34-E5D9A80FD3F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl1-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "0293EC6B-74AB-4A34-8F77-DB531FDF37C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl1-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6952DBFC-A124-4789-A736-9379F22D55F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl3-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "1835EB75-FC89-4AB3-99CC-E0FBF83964FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl3-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C281936-9B86-426B-BED9-85938021F697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl1-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "3F7259E4-42FE-4B53-9052-01CFDF8D54E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl1-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE3E251-B527-4E99-B328-196FECD9BC09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl3-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "D28A5EF7-404C-42FA-9C7E-3F41CADB75EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl3-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD0AFF8-9643-4DA7-8B84-3E6F2A38B202"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl1-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B8F00264-77DE-4F32-BF38-7BC2010A9A82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl1-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE7E790-7486-4B86-A1CF-4F53A69692BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl1-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "35B513A7-8D04-4B05-8504-5003429C7EF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl1-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0569FA-D547-46BB-B3EC-5258157998C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl7-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "AEA9EA52-3C06-4A5B-9A7B-FBDAA8F68366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl7-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AF6210-73AD-49A6-B65B-655F8E78A2C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl5-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "CA5DB30C-70E4-42AB-B722-F0672E66C93B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl5-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2472200D-E9E7-4B8F-AC80-96EB939CC027"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers",
        "source" : "psirt@moxa.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0715",
      "sourceIdentifier" : "psirt@moxa.com",
      "published" : "2026-02-05T17:16:13.333",
      "lastModified" : "2026-02-18T17:51:47.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface.  Access to the bootloader menu does not allow full system takeover or privilege escalation. The bootloader enforces digital signature verification and only permits flashing of Moxa-signed images. As a result, an attacker cannot install malicious firmware or execute arbitrary code. The primary impact is limited to a potential temporary denial-of-service condition if a valid image is reflashed. Remote exploitation is not possible."
      }, {
        "lang" : "es",
        "value" : "Las computadoras industriales Moxa basadas en Arm que ejecutan Moxa Industrial Linux Secure utilizan una contraseña de bootloader única para el dispositivo, proporcionada en el mismo. Un atacante con acceso físico al dispositivo podría usar esta información para acceder al menú del bootloader a través de una interfaz serial. El acceso al menú del bootloader no permite la toma de control total del sistema ni la escalada de privilegios. El bootloader aplica la verificación de firma digital y solo permite el flasheo de imágenes firmadas por Moxa. Como resultado, un atacante no puede instalar firmware malicioso ni ejecutar código arbitrario. El impacto principal se limita a una posible condición temporal de denegación de servicio si se vuelve a flashear una imagen válida. La explotación remota no es posible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@moxa.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@moxa.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-1222a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "8167DA5A-652A-402E-BF4F-01D70DD14FC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-1222a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72578407-EBB4-455A-BFFD-CBF17DBDF888"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t-us_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "503B8755-1E39-4EF2-9E36-6FF430F3DDF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t-us:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CA1BF1-116A-4EED-8C17-67167F0C2053"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "5F3FD56F-C600-42DA-8A17-AE6A53677F77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F459B2E-241A-41C6-B0F9-651955E6EC9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t-ap_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "E3D4B9CC-F8C0-4761-AD7C-48884CCA008E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t-ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09ACD6D-F1AF-450F-8B7B-5313389E204E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2222a-t-eu_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4",
            "matchCriteriaId" : "2E3C2660-8331-4382-9B39-0C3828230878"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2222a-t-eu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532B900B-39A3-4DD8-867A-CD84702B7243"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3434a-t-lte-wifi_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "64DA1C29-CF93-4A95-8F55-5CA151E20B3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3434a-t-lte-wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D9FC85-16CD-4170-B153-5B8E752402E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3424a-t-lte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "995400B9-5332-4215-BA10-BF11EE0DDA94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3424a-t-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91D6E6E-C4A4-4D1F-AA36-D5DC150DF3C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3420a-t-lte_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "FB2C60D1-9E8B-44B6-81B7-65A645468F2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3420a-t-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738173F1-B37C-4763-96A9-82932E578CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3430a-t-lte-wifi_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "5710925C-DFD1-4DAB-AA86-E0BC497FB03A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3430a-t-lte-wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C8CE2A-55D7-46AF-8279-27398D3A4035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4450a-t-5g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "04F34E9F-00C9-4BDA-9F90-7C8BAAA4B232"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4450a-t-5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A69F3-C344-4497-9D83-28D4705E1AF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4434a-i-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "D3021869-904A-48D8-B5A6-86392B0B7AE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4434a-i-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2624B562-847E-42E2-8A40-CD758D9A6ED3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4410a-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "1BB21C59-CBBE-48D0-8F9B-B3981B41A7B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4410a-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B160E192-06BA-46C2-9A3B-5E7DE67975ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4454a-t-5g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "FD20F80A-E88B-4035-9EA9-CC20473C9D11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4454a-t-5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE600462-6F7D-42DB-B057-BEFF8EB8D7AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4414a-i-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "51EEBA33-4514-4518-ABC8-E3A2BC188EF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4414a-i-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AE6E81-EC56-45A6-8ACD-0E69FC5A4035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-4430a-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "3534010A-ABE9-40E6-A414-DB40248F08C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-4430a-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B389D3-63FC-413F-837F-686315DB7987"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "DE026AF0-969E-487A-A3E8-5335F8410BA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8210-t-lx-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53104CD8-0DF4-46E5-87F1-B5810EB1B79E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "B471C4C8-AA5B-4313-BC60-8643A995CBA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-eu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D493C8-E0E4-4C2B-8A95-66DB61BD7035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "EAF65F04-34B5-4BDF-891F-A748F3E83226"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-ap-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC404D8-D558-462F-898F-9CFE54330FD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "F40D9DE3-4DE6-4607-AFD4-6F6BF5A6739E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-us-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726EC056-8BC7-4ACC-A6FF-7E7664859B03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "3D28B123-ECE0-42C6-847E-C8202F4AB609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65808DD-2672-42D7-8544-8A9E0D1519E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v1202-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "6F44CEC2-E2EA-4D48-8E73-9021016490B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v1202-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70417E9B-EE42-4C07-AF9F-E5A5706FA2AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v1222-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "A49B3729-A2FD-4323-9C3C-247F40F2A275"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v1222-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E7C7DB-3D0F-42DB-8BFA-FE925BCE033C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v1222-w-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E603495A-9361-4F98-A504-27BD79287C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v1222-w-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DDB695F-6E8A-4F1B-BB66-4454EEFEA8FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl7-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "3090DF0D-8F71-44D2-89A5-E09557D38DF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl7-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9866E9-E766-48C5-BE4D-C0D47A110B59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl7-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F97B9744-7133-42A1-8A57-71645107BE55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl7-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7478BFC6-B075-48AB-91AD-4198763E9A98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl7-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "00629F07-BF15-4EBD-9A4F-75F6E10FE28E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl7-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F0B516F-DB20-4945-810F-0FB5E35519DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl5-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "F039963D-EB6C-4C4D-988D-EF29070CF838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl5-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286BAABC-D23A-47CE-8C34-E5D9A80FD3F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl1-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "0293EC6B-74AB-4A34-8F77-DB531FDF37C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl1-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6952DBFC-A124-4789-A736-9379F22D55F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl3-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "1835EB75-FC89-4AB3-99CC-E0FBF83964FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl3-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C281936-9B86-426B-BED9-85938021F697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl1-ct-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "3F7259E4-42FE-4B53-9052-01CFDF8D54E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl1-ct-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE3E251-B527-4E99-B328-196FECD9BC09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl3-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "D28A5EF7-404C-42FA-9C7E-3F41CADB75EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl3-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD0AFF8-9643-4DA7-8B84-3E6F2A38B202"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl1-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "B8F00264-77DE-4F32-BF38-7BC2010A9A82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl1-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE7E790-7486-4B86-A1CF-4F53A69692BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl1-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "35B513A7-8D04-4B05-8504-5003429C7EF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl1-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0569FA-D547-46BB-B3EC-5258157998C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-wl7-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "AEA9EA52-3C06-4A5B-9A7B-FBDAA8F68366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-wl7-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AF6210-73AD-49A6-B65B-655F8E78A2C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:v2406c-kl5-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "CA5DB30C-70E4-42AB-B722-F0672E66C93B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:v2406c-kl5-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2472200D-E9E7-4B8F-AC80-96EB939CC027"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-255121-cve-2026-0714-cve-2026-0715-multiple-vulnerabilities-in-industrial-computers",
        "source" : "psirt@moxa.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1707",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-05T18:16:11.180",
      "lastModified" : "2026-02-26T22:20:45.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\\unrestrict <key>`. This results in reliable command execution on the pgAdmin host during the restore operation."
      }, {
        "lang" : "es",
        "value" : "Las versiones 9.11 de pgAdmin están afectadas por una vulnerabilidad de omisión de restricción de restauración mediante divulgación de clave que ocurre al ejecutarse en modo servidor y al realizar restauraciones desde archivos de volcado en formato PLAIN. Un atacante con acceso a la interfaz web de pgAdmin puede observar una operación de restauración activa, extraer la clave '\\restrict' en tiempo real y competir con el proceso de restauración sobrescribiendo el script de restauración con una carga útil que reactiva los metacomandos usando '\\unrestrict '. Esto resulta en una ejecución de comandos fiable en el host de pgAdmin durante la operación de restauración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgadmin:pgadmin_4:9.11:*:*:*:*:postgresql:*:*",
            "matchCriteriaId" : "3F3F9DF9-ED88-43C6-8164-AC5E57F27DA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pgadmin-org/pgadmin4/issues/9518",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1301",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-05T19:15:55.983",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory."
      }, {
        "lang" : "es",
        "value" : "En compilaciones con PubSub y JSON habilitados, un mensaje JSON especialmente diseñado puede hacer que el decodificador escriba más allá de una matriz asignada en el montón antes de la autenticación, bloqueando de forma fiable el proceso y corrompiendo la memoria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-036-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25630",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-05T19:15:56.463",
      "lastModified" : "2026-02-05T19:15:56.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Reason: This candidate was issued in error."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0106",
      "sourceIdentifier" : "dsap-vuln-management@google.com",
      "published" : "2026-02-05T21:15:52.597",
      "lastModified" : "2026-02-19T18:24:53.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En vpu_mmap de vpu_ioctl, existe una posible mmap de dirección arbitraria debido a una falta de comprobación de límites. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/pixel/2026/2026-02-01",
        "source" : "dsap-vuln-management@google.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1962",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T21:15:52.987",
      "lastModified" : "2026-02-12T17:29:38.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attachmentMigration.js of the component Attachment Migration. The manipulation leads to improper access controls. The attack may be initiated remotely. Upgrading to version 8.21 is sufficient to resolve this issue. The identifier of the patch is 053bf1dfb76ef230db162c64a6ed50ebedf67eee. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en WeKan hasta la versión 8.20. El elemento afectado es una función desconocida del archivo server/attachmentMigration.js del componente Attachment Migration. La manipulación conduce a controles de acceso inadecuados. El ataque puede iniciarse de forma remota. Actualizar a la versión 8.21 es suficiente para resolver este problema. El identificador del parche es 053bf1dfb76ef230db162c64a6ed50ebedf67eee. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/053bf1dfb76ef230db162c64a6ed50ebedf67eee",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344484",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344484",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1963",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T21:15:53.180",
      "lastModified" : "2026-03-06T21:50:55.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the component Attachment Storage. The manipulation results in improper access controls. The attack may be launched remotely. Upgrading to version 8.21 mitigates this issue. The patch is identified as c413a7e860bc4d93fe2adcf82516228570bf382d. Upgrading the affected component is advised."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en WeKan hasta la versión 8.20. Esto afecta una función desconocida del archivo models/attachments.js del componente Almacenamiento de Adjuntos. La manipulación resulta en controles de acceso inadecuados. El ataque puede lanzarse remotamente. La actualización a la versión 8.21 mitiga este problema. El parche se identifica como c413a7e860bc4d93fe2adcf82516228570bf382d. Se aconseja actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/c413a7e860bc4d93fe2adcf82516228570bf382d",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344485",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344485",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742678",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1964",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T22:15:53.713",
      "lastModified" : "2026-02-12T17:29:49.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. Patch name: 545566f5663545d16174e0f2399f231aa693ab6e. It is advisable to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en WeKan hasta 8.20. Esto afecta a una función desconocida del archivo models/boards.js del componente REST Endpoint. Esta manipulación causa controles de acceso inadecuados. La explotación remota del ataque es posible. La actualización a la versión 8.21 solucionará este problema. Nombre del parche: 545566f5663545d16174e0f2399f231aa693ab6e. Es aconsejable actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/545566f5663545d16174e0f2399f231aa693ab6e",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344486",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344486",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742680",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1970",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-05T22:15:53.900",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they \"will issue a consolidated Security Advisory on our official support website.\" This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Edimax BR-6258n hasta la versión 1.18. Este problema afecta a la función formStaDrvSetup del archivo /goform/formStaDrvSetup. Esta manipulación del argumento submit-url causa una redirección abierta. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado. El proveedor confirma que el producto afectado ha llegado al fin de su vida útil. Confirman que 'emitirán un Aviso de Seguridad consolidado en nuestro sitio web oficial de soporte'. Esta vulnerabilidad solo afecta a productos que ya no cuentan con soporte por parte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:edimax:br-6258n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.18",
            "matchCriteriaId" : "DDED4A03-07D5-4AD8-965A-B37327D90F57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edimax:br-6258n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "245EC52E-E2FD-45BD-933D-1CA49AA586E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/EDIMAX-BR-6258n-v1-18-Open-Redirect-Vulnerability-in-Web-formStaDrvSetup-handler-2eeb5c52018a803bb958e4f80cdf2550?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.742734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-05T22:15:54.100",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from 2025-12-16 through 2026 (by default, the encryption key is the same across all customers' installations). NOTE: the Supplier's position is that the instance of CWE-1394 is not a vulnerability because customers \"are supposed to enable\" a non-default option that eliminates the weakness. However, that non-default option can disrupt functionality as shown in the \"Managing FortiGates with private data encryption\" document, and is therefore intentionally not a default option."
      }, {
        "lang" : "es",
        "value" : "Fortinet FortiOS hasta 7.6.6 permite a los atacantes descifrar credenciales LDAP almacenadas en archivos de configuración del dispositivo, según se explotó en la naturaleza desde el 16-12-2025 hasta 2026 (por defecto, la clave de cifrado es la misma en todas las instalaciones de los clientes). NOTA: la posición del Proveedor es que la instancia de CWE-1394 no es una vulnerabilidad porque se 'supone que los clientes deben habilitar' una opción no predeterminada que elimina la debilidad. Sin embargo, esa opción no predeterminada puede interrumpir la funcionalidad como se muestra en el documento 'Managing FortiGates with private data encryption', y, por lo tanto, no es intencionalmente una opción predeterminada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1394"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.fortinet.com/document/fortimanager/7.6.6/administration-guide/30332/managing-fortigates-with-private-data-encryption",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.cert.at/en/blog/2026/1/threat-actors-use-forticloud-to-collect-ldap-connection-passwords",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0391",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-05T23:15:54.093",
      "lastModified" : "2026-02-18T17:44:14.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Representación errónea de la interfaz de usuario (UI) de información crítica en Microsoft Edge para Android permite a un atacante no autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "143.0.3650.66",
            "matchCriteriaId" : "FEBAB3A4-6F70-4D49-934F-4B643B3515C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0391",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21532",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-05T23:15:54.317",
      "lastModified" : "2026-02-12T19:01:06.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Function Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información en Azure Function"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_functions:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55C8D12F-35AE-4DEF-B47C-D686B0F11B0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21532",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24300",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-05T23:15:54.490",
      "lastModified" : "2026-02-12T19:02:39.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Front Door Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Azure Front Door Elevación de Privilegios vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_front_door:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66AE777-ECFA-4FD1-A6B5-AD9E8181020A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24300",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24302",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-05T23:15:54.653",
      "lastModified" : "2026-04-10T14:16:34.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Azure Arc Elevación de privilegio Vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_arc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE84F29-0F6A-46F5-9F06-8D992C0417BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24302",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23623",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T00:15:56.663",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5, a user with view-only rights and no download privileges can obtain a local copy of a shared file. Although there are no corresponding buttons in the interface, pressing Ctrl+Shift+S initiates the file download process. This allows the user to bypass the access restrictions and leads to unauthorized data retrieval. This issue has been patched in Collabora Online Development Edition version 25.04.08.2 and Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5."
      }, {
        "lang" : "es",
        "value" : "Collabora Online es una suite ofimática colaborativa en línea basada en la tecnología de LibreOffice. Antes de la versión 25.04.08.2 de Collabora Online Development Edition y antes de las versiones 23.05.20.1, 24.04.17.3 y 25.04.7.5 de Collabora Online, un usuario con derechos de solo lectura y sin privilegios de descarga puede obtener una copia local de un archivo compartido. Aunque no hay botones correspondientes en la interfaz, al presionar Ctrl+Shift+S se inicia el proceso de descarga del archivo. Esto permite al usuario eludir las restricciones de acceso y conduce a la recuperación de datos no autorizada. Este problema ha sido parcheado en la versión 25.04.08.2 de Collabora Online Development Edition y en las versiones 23.05.20.1, 24.04.17.3 y 25.04.7.5 de Collabora Online."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CollaboraOnline/online/security/advisories/GHSA-68v6-r6qq-mmq2",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1971",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T01:15:50.693",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file wiz_WISP24gmanual.asp. Such manipulation of the argument manualssid leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they \"will issue a consolidated Security Advisory on our official support website.\" This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Edimax BR-6288ACL hasta la versión 1.12. Afectada es la función wiz_WISP24gmanual del archivo wiz_WISP24gmanual.asp. Dicha manipulación del argumento manualssid conduce a cross site scripting. El ataque puede ser lanzado remotamente. El exploit ha sido revelado al público y puede ser utilizado. El proveedor confirma que el producto afectado está al final de su vida útil. Confirman que 'emitirán un Aviso de Seguridad consolidado en nuestro sitio web oficial de soporte'. Esta vulnerabilidad solo afecta a productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:edimax:br-6288acl_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "29ECDBF8-EC0F-4DFD-A5D6-EBFA42A8379E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edimax:br-6288acl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BD9748C-CF8C-41E0-901E-D3523BF97C1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/EDIMAX-BR6288ACL-v1-12-XSS-via-wiz_WISP24gmanual-asp-Configuration-2eeb5c52018a802e8ed9f6d000f7a6aa?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1972",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T02:16:04.633",
      "lastModified" : "2026-02-20T15:20:01.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor confirms that the affected product is end-of-life. They confirm that they \"will issue a consolidated Security Advisory on our official support website.\" This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Edimax BR-6208AC 2_1.02. El elemento afectado es la función auth_check_userpass2. Realizar una manipulación del argumento Username/Password resulta en el uso de credenciales predeterminadas. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría usarse. El proveedor confirma que el producto afectado ha llegado al fin de su vida útil. Confirman que 'emitirán un Aviso de Seguridad consolidado en nuestro sitio web oficial de soporte'. Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:edimax:br-6208ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "E14BA21E-9421-4F32-A670-4441B7D782C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edimax:br-6208ac:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925424B0-B731-4AB3-A348-3E8684962993"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Weak-Password-Authentication-Vulnerability-in-auth_check_userpass2-Functi-2f0b5c52018a801c9645dd5261717901?source=copy_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344494",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344494",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744032",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1973",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T02:16:05.620",
      "lastModified" : "2026-02-09T15:48:21.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the component SMF. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Free5GC hasta la versión 4.1.0. El elemento afectado es la función establishPfcpSession del componente SMF. La ejecución de una manipulación puede llevar a una desreferencia de puntero nulo. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede utilizarse. Es una buena práctica aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/815",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/815#issue-3832032062",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/smf/pull/189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344495",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344495",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1974",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T02:16:05.810",
      "lastModified" : "2026-02-09T15:47:30.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of the component SMF. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Free5GC hasta la versión 4.1.0. Esto afecta a la función ResolveNodeIdToIp del archivo internal/sbi/processor/datapath.go del componente SMF. La manipulación conduce a una denegación de servicio. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser utilizado. Se recomienda aplicar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/816",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/816#issue-3832055233",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/smf/pull/189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344496",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344496",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743237",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1228",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T03:15:48.077",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.3 via the tlgb_shortcode() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to disclose private timeline content via the id attribute supplied to the 'timeline_block' shortcode."
      }, {
        "lang" : "es",
        "value" : "El plugin Timeline Block – Beautiful Timeline Builder for WordPress (Vertical &amp; Horizontal Timelines) para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 1.3.3, inclusive, a través de la función tlgb_shortcode() debido a la falta de validación en una clave controlada por el usuario. Esto permite a atacantes autenticados, con acceso de nivel Autor y superior, divulgar contenido privado de la línea de tiempo a través del atributo id suministrado al shortcode 'timeline_block'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3446078/timeline-block-block",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cecebfd0-c2af-4150-8793-299cdbeaa7b9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1975",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T03:15:49.313",
      "lastModified" : "2026-02-09T15:15:28.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pfcp_reports.go. The manipulation results in null pointer dereference. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Applying a patch is advised to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Free5GC hasta la versión 4.1.0. Esto afecta a la función identityTriggerType del archivo pfcp_reports.go. La manipulación resulta en una desreferenciación de puntero nulo. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. Se aconseja aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/814",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/814#issue-3831993593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/smf/pull/189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344497",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344497",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743238",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1976",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T03:15:49.503",
      "lastModified" : "2026-02-09T15:04:08.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component SMF. This manipulation causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Free5GC hasta la versión 4.1.0. La función SessionDeletionResponse del componente SMF está afectada. Esta manipulación causa desreferencia de puntero nulo. El ataque puede llevarse a cabo remotamente. El exploit se ha hecho público y podría usarse para ataques. Se sugiere instalar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/817",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/817#issue-3832188092",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/smf/pull/189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743239",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1977",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T04:15:52.200",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualize_data. Such manipulation of the argument vegalite_specification leads to code injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en isaacwasserman mcp-vegalite-server hasta 16aefed598b8cd897b78e99b907f6e2984572c61. Afectada por esta vulnerabilidad es la función eval del componente visualize_data. Tal manipulación del argumento vegalite_specification conduce a la inyección de código. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto utiliza un sistema de lanzamiento continuo para entrega continua, y como tal, la información de la versión para las versiones afectadas o actualizadas no se divulga. El proyecto fue informado del problema tempranamente a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacwasserman/mcp-vegalite-server/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/isaacwasserman/mcp-vegalite-server/issues/9",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344499",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344499",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.743246",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25692",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.550",
      "lastModified" : "2026-02-06T04:15:52.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25693",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.630",
      "lastModified" : "2026-02-06T04:15:52.630",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25694",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.697",
      "lastModified" : "2026-02-06T04:15:52.697",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25695",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.763",
      "lastModified" : "2026-02-06T04:15:52.763",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25696",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.827",
      "lastModified" : "2026-02-06T04:15:52.827",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25697",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.890",
      "lastModified" : "2026-02-06T04:15:52.890",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25698",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T04:15:52.957",
      "lastModified" : "2026-02-06T04:15:52.957",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1978",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T05:16:10.170",
      "lastModified" : "2026-02-27T20:10:36.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information Handler. Performing a manipulation results in direct request. It is possible to initiate the attack remotely. The exploit is now public and may be used. You should change the configuration settings."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en kalyan02 NanoCMS hasta 0.4. Afectada por este problema es alguna funcionalidad desconocida del archivo /data/pagesdata.txt del componente User Information Handler. Realizar una manipulación resulta en solicitud directa. Es posible iniciar el ataque remotamente. El exploit es ahora público y puede ser usado. Debería cambiar la configuración."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kalyan02:nanocms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "5BEC85B3-49E2-4C0C-9421-852443ADA842"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kalyan02/NanoCMS/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/kalyan02/NanoCMS/blob/master/data/pagesdata.txt",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344500",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344500",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743260",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1979",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T05:16:12.667",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called e50f15c1c6e131fa7934355eb02b8173b13df415. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en mruby hasta la versión 3.4.0. Esto afecta a la función mrb_vm_exec del archivo src/vm.c del componente Optimización JMPNOT-a-JMPIF. La ejecución de una manipulación puede conducir a un uso después de liberar. El ataque debe lanzarse localmente. El exploit ha sido publicado y puede ser utilizado. Este parche se llama e50f15c1c6e131fa7934355eb02b8173b13df415. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mruby:mruby:*:*:*:*:*:ruby:*:*",
            "versionEndIncluding" : "3.4.0",
            "matchCriteriaId" : "F9663307-847C-4A95-9485-4AEA84AAB19E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mruby/mruby/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mruby/mruby/issues/6701",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/mruby/mruby/issues/6701#issue-3802609843",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/sysfce2/mruby/commit/e50f15c1c6e131fa7934355eb02b8173b13df415",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344501",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344501",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1990",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T05:16:12.920",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrapper::ObjectWrapper of the file src/oatpp/data/type/Type.hpp. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en oatpp hasta la versión 1.3.1. Esto afecta a la función oatpp::data::type::ObjectWrapper::ObjectWrapper del archivo src/oatpp/data/type/Type.hpp. La manipulación conduce a una desreferencia de puntero nulo. Se requiere acceso local para llevar a cabo este ataque. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oatpp/oatpp/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oatpp/oatpp/issues/1080",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oatpp/oatpp/issues/1080#issue-3806715350",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344508",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344508",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.743387",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0598",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-06T06:15:49.970",
      "lastModified" : "2026-05-04T22:16:18.913",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. The APIs do not properly verify whether a conversation identifier belongs to the authenticated user making the request. As a result, an attacker with valid credentials could access or influence conversations owned by other users. This exposes sensitive conversation data and allows unauthorized manipulation of AI-generated outputs."
      }, {
        "lang" : "es",
        "value" : "Se identificó una falla de seguridad en los puntos finales de conversación de la API de Ansible Lightspeed que gestionan las interacciones de chat de IA. Las API no verifican correctamente si un identificador de conversación pertenece al usuario autenticado que realiza la solicitud. Como resultado, un atacante con credenciales válidas podría acceder o influir en conversaciones propiedad de otros usuarios. Esto expone datos de conversación sensibles y permite la manipulación no autorizada de las salidas generadas por IA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-283"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:13545",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0598",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2427094",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1991",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T06:15:50.240",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c of the component UVC Descriptor Handler. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en libuvc hasta la versión 0.0.7. La función uvc_scan_streaming del archivo src/device.c del componente UVC Descriptor Handler está afectada. La manipulación resulta en una desreferencia de puntero nulo. El ataque debe abordarse localmente. El exploit ahora es público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libuvc:libuvc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.7",
            "matchCriteriaId" : "44A9C66B-DC71-4CFD-A387-BB990D0EBE89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libuvc/libuvc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libuvc/libuvc/issues/300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0104/blob/main/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344509",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344509",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743388",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0521",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-02-06T07:16:11.353",
      "lastModified" : "2026-02-18T17:43:20.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through various means, for instance, by sending a link or by tricking victims to visit a page crafted by the attacker.\n\n\n\nThis issue was verified in MAP+: 3.4.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) reflejada en la funcionalidad de exportación de PDF de la solución TYDAC AG MAP+ permite a atacantes no autenticados crear una URL maliciosa, que si es visitada por una víctima, ejecutará JavaScript arbitrario en el contexto de la víctima. Dicha URL podría ser entregada a través de varios medios, por ejemplo, enviando un enlace o engañando a las víctimas para que visiten una página creada por el atacante.\n\nEste problema fue verificado en MAP+: 3.4.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tydac:map\\+:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42625819-146F-45CD-B927-71B9C6951E75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.redguard.ch/blog/2026/02/05/advisory-tydac-mapplus/",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tydac.ch/en/mapplus/",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1401",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T07:16:11.563",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to, and including, 1.6.3. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page. The vulnerability exists because the CSV import functionality lacks authorization checks and doesn't sanitize imported data, which is later rendered without escaping through the [tune-library] shortcode."
      }, {
        "lang" : "es",
        "value" : "El plugin Tune Library para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de la importación CSV en todas las versiones hasta la 1.6.3, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a la página inyectada. La vulnerabilidad existe porque la funcionalidad de importación CSV carece de comprobaciones de autorización y no sanitiza los datos importados, que luego se renderizan sin escape a través del shortcode [tune-library]."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/tune-library/tags/1.6.3/tune-library.php#L219",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tune-library/tags/1.6.3/tune-library.php#L235",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tune-library/tags/1.6.3/writeNodes.php#L113",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3451457%40tune-library&new=3451457%40tune-library&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cd600810-b1bc-4025-b441-5c90da7240de?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1808",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T07:16:11.923",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplus_button shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress 'Orange Confort+ accessibility toolbar para WordPress' es vulnerable a cross-site scripting almacenado a través del parámetro 'style' del shortcode ocplus_button en todas las versiones hasta la 0.7, inclusive, debido a una sanitización de entrada y escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/orange-confort-plus/tags/0.7/inc/class-shortcode.php#L50",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/orange-confort-plus/trunk/inc/class-shortcode.php#L50",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3453313%40orange-confort-plus&new=3453313%40orange-confort-plus&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/89cb81c3-25d7-4a4e-beed-558ea8ce721d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1888",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T07:16:12.130",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplaylist' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Docus – YouTube Video Playlist para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'docusplaylist' en todas las versiones hasta la 1.0.6, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/docus/tags/1.0.6/includes/class.shortcode.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/docus/trunk/includes/class.shortcode.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3454510%40docus&new=3454510%40docus&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/16c6fec8-81ec-477a-9942-10fd3adb8fa4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1909",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T07:16:12.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WaveSurfer-WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's audio shortcode in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping on the 'src' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WaveSurfer-WP para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode de audio del plugin en todas las versiones hasta la 2.8.3, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida en el atributo 'src'. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wavesurfer-wp/tags/2.8.3/wavesurfer-wp.php#L739",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wavesurfer-wp/trunk/wavesurfer-wp.php#L739",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3454006%40wavesurfer-wp&new=3454006%40wavesurfer-wp&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b507462d-1ce2-4463-93bf-635ee78274f6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1998",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T07:16:12.553",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 570744d06c5ba9dba59b4c3f432ca4f0abd396b6. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en micropython hasta la versión 1.27.0. Esta vulnerabilidad afecta a la función mp_import_all del archivo py/runtime.c. Esta manipulación causa corrupción de memoria. El ataque necesita ser lanzado localmente. El exploit ha sido publicado y puede ser usado. Nombre del parche: 570744d06c5ba9dba59b4c3f432ca4f0abd396b6. Se sugiere instalar un parche para abordar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:micropython:micropython:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.27.0",
            "matchCriteriaId" : "BAE0EFBB-AF36-42CE-A7ED-0FE76B15691A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dpgeorge/micropython/commit/570744d06c5ba9dba59b4c3f432ca4f0abd396b6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/micropython/micropython/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/micropython/micropython/issues/18639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/micropython/micropython/issues/18639#issue-3780651410",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/micropython/micropython/pull/18671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344546",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344546",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743396",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2000",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T07:16:13.053",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Backend. Performing a manipulation of the argument ip_list results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en DCN DCME-320 hasta 20260121. La función apply_config del archivo /function/system/basic/bridge_cfg.php del componente Web Management Backend se ve afectada. Realizar una manipulación del argumento ip_list resulta en inyección de comandos. El ataque puede llevarse a cabo de forma remota. El exploit se ha hecho público y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dcnetworks:dcme-320_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20260121",
            "matchCriteriaId" : "304A6B63-3257-40BC-B6CE-88381FB3624B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dcnetworks:dcme-320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83218E1-F3F6-43B0-925D-F8965C159DEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/physicszq/Routers/tree/main/Dcme",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344548",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344548",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743455",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2008",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T07:16:13.447",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function eqn_chart of the file fmcp/mpl_mcp/core/eqn_chart.py. Performing a manipulation of the argument equations results in code injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en abhiphile fermat-mcp hasta 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. Esta vulnerabilidad afecta a la función eqn_chart del archivo fmcp/mpl_mcp/core/eqn_chart.py. Realizar una manipulación del argumento equations resulta en inyección de código. Es posible iniciar el ataque de forma remota. El exploit ya es público y puede ser utilizado. Este producto utiliza un rolling release para proporcionar entrega continua. Por lo tanto, no hay detalles de versión disponibles para las versiones afectadas ni actualizadas. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abhiphile:fermat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-08",
            "matchCriteriaId" : "6A5DD4DA-5304-42E0-BDC6-4047BE6DF5BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/abhiphile/fermat-mcp/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/abhiphile/fermat-mcp/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/abhiphile/fermat-mcp/issues/9#issue-3837794397",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344590",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344590",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743458",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1279",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T08:15:52.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_title' parameter in the `search_employee_directory` shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Employee Directory para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'form_title' en el shortcode 'search_employee_directory' en todas las versiones hasta la 1.2.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/employee-staff-directory/tags/1.2.1/handler/mo-empdir-search_handler.php#L29",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/employee-staff-directory/trunk/handler/mo-empdir-search_handler.php#L29",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3448620%40employee-staff-directory&new=3448620%40employee-staff-directory",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/employee-staff-directory",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f0d3b54c-6244-4776-be3c-afe3a28a2b8a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21626",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2026-02-06T08:15:53.697",
      "lastModified" : "2026-02-18T17:26:54.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure"
      }, {
        "lang" : "es",
        "value" : "La configuración de control de acceso para los campos personalizados de publicaciones del foro no se aplican al tipo de salida JSON, lo que lleva a un vector de violación de ACL y una revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@joomla.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@joomla.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackideas:easydiscuss:*:*:*:*:*:joomla\\!:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "5.0.15",
            "matchCriteriaId" : "1F4EB9D6-4491-4616-8485-B1FDFF3B88E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://stackideas.com/easydiscuss",
        "source" : "security@joomla.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2009",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T08:15:53.863",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/php_action/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en SourceCodester Gas Agency Management System 1.0. Este problema afecta a algún procesamiento desconocido del archivo /gasmark/php_action/createUser.PHP. La ejecución de una manipulación puede llevar a controles de acceso inadecuados. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:gas_agency_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303027E5-14BE-4CEC-A045-8A615AE2CFE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Asim-QAZi/Improper-Access-Control-in-SourceCodester-Gas-Agency-Management-System",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743459",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2010",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T08:15:54.063",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d. Impacted is the function Paid of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradePaymentService.java of the component Trade Payment Handler. The manipulation of the argument paymentId leads to improper authorization. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 7329437e1288540336b1c66c114ed3363adcba02. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Sanluan PublicCMS hasta 4.0.202506.d/5.202506.d/6.202506.d. Afectada es la función Paid del archivo publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradePaymentService.java del componente Trade Payment Handler. La manipulación del argumento paymentId lleva a autorización impropia. El ataque puede ser iniciado remotamente. La complejidad de un ataque es bastante alta. La explotabilidad es considerada difícil. El exploit ha sido divulgado al público y puede ser usado. El identificador del parche es 7329437e1288540336b1c66c114ed3363adcba02. Se recomienda aplicar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.202506.d",
            "matchCriteriaId" : "B3C8055A-B1BA-4C2A-BA25-1F511ED90DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.202302.a",
            "versionEndIncluding" : "5.202506.d",
            "matchCriteriaId" : "F86941E4-F491-49ED-A87C-47E9C323DE12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sanluan/PublicCMS/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sanluan/PublicCMS/commit/7329437e1288540336b1c66c114ed3363adcba02",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sanluan/PublicCMS/issues/108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/sanluan/PublicCMS/issues/108#issue-3838143772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743487",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1252",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T09:15:47.880",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Events Listing Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Event URL' parameter in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Events Listing Widget para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'Event URL' en todas las versiones hasta la 1.3.4, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel Autor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/events-listing-widget/tags/1.3.4/events-listing-widget.php#L266",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/events-listing-widget/trunk/events-listing-widget.php#L266",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3451446%40events-listing-widget&new=3451446%40events-listing-widget&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7f3b13a5-0711-4ad3-b11c-f8556e1ca9f9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1499",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T09:15:48.987",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path traversal in the file upload functionality. This makes it possible for authenticated (subscriber-level) attackers to set the internal `prod_key_random_id` option, which can then be used by an unauthenticated attacker to bypass authentication checks and write arbitrary files to the server via the `handle_upload_single_big_file()` function, ultimately leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Duplicate para WordPress es vulnerable a una Autorización Faltante que lleva a una Carga Arbitraria de Archivos en todas las versiones hasta la 1.1.8 inclusive. Esto se debe a una verificación de capacidad faltante en la acción AJAX 'process_add_site()' combinada con un salto de ruta en la funcionalidad de carga de archivos. Esto hace posible que atacantes autenticados (a nivel de suscriptor) establezcan la opción interna 'prod_key_random_id', que luego puede ser utilizada por un atacante no autenticado para eludir las verificaciones de autenticación y escribir archivos arbitrarios en el servidor a través de la función 'handle_upload_single_big_file()', lo que finalmente lleva a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/local-sync/tags/1.1.8/admin/class-local-sync-admin.php#L422",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/local-sync/tags/1.1.8/admin/class-local-sync-files-op.php#L843",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/local-sync/tags/1.1.8/includes/class-local-sync-handle-server-requests.php#L389",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/local-sync/trunk/admin/class-local-sync-admin.php#L422",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/local-sync/trunk/admin/class-local-sync-files-op.php#L843",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/local-sync/trunk/includes/class-local-sync-handle-server-requests.php#L389",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3452904%40local-sync&old=3400317%40local-sync&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/11bb7190-023b-45e1-99a5-7313c489ef45?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1785",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T09:15:49.163",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4. This is due to missing nonce validation on the cloud snippet download and update actions in the Cloud_Search_List_Table class. This makes it possible for unauthenticated attackers to force logged-in administrators to download or update cloud snippets without their consent via a crafted request, granted they can trick an administrator into visiting a malicious page."
      }, {
        "lang" : "es",
        "value" : "El plugin Code Snippets para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 3.9.4, inclusive. Esto se debe a la falta de validación de nonce en las acciones de descarga y actualización de fragmentos en la nube en la clase Cloud_Search_List_Table. Esto hace posible que atacantes no autenticados fuercen a administradores con sesión iniciada a descargar o actualizar fragmentos en la nube sin su consentimiento mediante una petición manipulada, siempre que puedan engañar a un administrador para que visite una página maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/codesnippetspro/code-snippets/pull/331/changes",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/code-snippets/tags/3.9.4/php/cloud/class-cloud-search-list-table.php#L105",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/code-snippets/tags/3.9.4/php/cloud/list-table-shared-ops.php#L57",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/code-snippets/trunk/php/cloud/class-cloud-search-list-table.php#L105",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/code-snippets/trunk/php/cloud/list-table-shared-ops.php#L57",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4a5787f3-6a16-491a-aa01-6222f275cf0f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21643",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-06T09:15:49.330",
      "lastModified" : "2026-04-16T16:00:01.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') en Fortinet FortiClientEMS 7.4.4 podría permitir a un atacante no autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente diseñadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-04-13",
      "cisaActionDue" : "2026-04-16",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Fortinet FortiClient EMS SQL Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552AF7AC-8630-442C-A7A4-66CA789DC3FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/0xBlackash/CVE-2026-21643/blob/main/cve-2026-21643.py",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21643",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24914",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:49.490",
      "lastModified" : "2026-02-10T17:49:14.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion vulnerability in the camera module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de confusión de tipos en el módulo de la cámara.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24915",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:49.657",
      "lastModified" : "2026-02-10T17:51:40.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read issue in the media subsystem.\nImpact: Successful exploitation of this vulnerability will affect availability and confidentiality."
      }, {
        "lang" : "es",
        "value" : "Problema de lectura fuera de límites en el subsistema de medios.\nImpacto: La explotación exitosa de esta vulnerabilidad afectará la disponibilidad y la confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B7AE1-10B8-45DD-813D-315E5CF51EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinvision/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24916",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:49.803",
      "lastModified" : "2026-02-10T17:53:42.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Identity authentication bypass vulnerability in the window module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación de identidad en el módulo de ventana.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24917",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:49.950",
      "lastModified" : "2026-02-10T17:57:51.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UAF vulnerability in the security module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad UAF en el módulo de seguridad.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AEAF2-AF46-4835-93E1-4F942D5E2810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FBF39A-164F-4F98-AB49-28C50A430C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888C5BD7-421B-4A85-8719-BFEE3C215527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198CDB2-4BC5-411A-8736-615A531FC545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24918",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:50.250",
      "lastModified" : "2026-02-10T17:59:46.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Address read vulnerability in the communication module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Corregir vulnerabilidad de lectura en el módulo de comunicación.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888C5BD7-421B-4A85-8719-BFEE3C215527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA69843-EC8D-42E2-900E-017D2B502E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "081B7AE1-10B8-45DD-813D-315E5CF51EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinvision/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24919",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:50.413",
      "lastModified" : "2026-02-10T18:01:17.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds write vulnerability in the DFX module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en el módulo DFX.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FBF39A-164F-4F98-AB49-28C50A430C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888C5BD7-421B-4A85-8719-BFEE3C215527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198CDB2-4BC5-411A-8736-615A531FC545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA69843-EC8D-42E2-900E-017D2B502E9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24921",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:50.583",
      "lastModified" : "2026-02-10T18:06:28.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Address read vulnerability in the HDC module.\nImpact: Successful exploitation of this vulnerability will affect availability and confidentiality."
      }, {
        "lang" : "es",
        "value" : "Abordar vulnerabilidad de lectura en el módulo HDC.\nImpacto: La explotación exitosa de esta vulnerabilidad afectará la disponibilidad y la confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24922",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:50.730",
      "lastModified" : "2026-02-10T18:09:30.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow vulnerability in the HDC module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer en el módulo HDC.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24923",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:50.873",
      "lastModified" : "2026-02-10T18:10:30.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permission control vulnerability in the HDC module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control de permisos en el módulo HDC.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24925",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:51.023",
      "lastModified" : "2026-02-10T18:11:30.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow vulnerability in the image module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basado en montículo en el módulo de imagen.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24926",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:51.170",
      "lastModified" : "2026-02-10T18:12:03.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds write vulnerability in the camera module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en el módulo de la cámara.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24929",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:51.330",
      "lastModified" : "2026-02-09T19:11:51.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read vulnerability in the graphics module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en el módulo de gráficos.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24930",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:51.480",
      "lastModified" : "2026-02-09T19:05:44.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UAF concurrency vulnerability in the graphics module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de concurrencia UAF en el módulo de gráficos.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24931",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T09:15:51.623",
      "lastModified" : "2026-02-09T19:12:23.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability of improper criterion security check in the card module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de comprobación de seguridad de criterio incorrecto en el módulo de la tarjeta.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2011",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T09:15:51.770",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en itsourcecode Student Management System 1.0. El elemento afectado es una función desconocida del archivo /ramonsys/enrollment/controller.php. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tianrenu/CVE-Discoveries/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2012",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T09:15:51.977",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en itsourcecode Student Management System 1.0. El elemento afectado es una función desconocida del archivo /ramonsys/facultyloading/index.PHP. Esta manipulación del argumento ID causa inyección SQL. El ataque puede iniciarse remotamente. El exploit ha sido divulgado públicamente y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tianrenu/CVE-Discoveries/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344594",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344594",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743499",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24920",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T10:16:07.363",
      "lastModified" : "2026-02-09T19:12:59.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permission control vulnerability in the AMS module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control de permisos en el módulo AMS.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888C5BD7-421B-4A85-8719-BFEE3C215527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA69843-EC8D-42E2-900E-017D2B502E9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinvision/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24924",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T10:16:07.537",
      "lastModified" : "2026-03-05T09:16:10.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability of improper permission control in the print module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control de permisos inadecuado en el módulo de impresión.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24927",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T10:16:07.680",
      "lastModified" : "2026-02-09T19:13:18.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds access vulnerability in the frequency modulation module.\nImpact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de acceso fuera de límites en el módulo de modulación de frecuencia.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FBF39A-164F-4F98-AB49-28C50A430C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888C5BD7-421B-4A85-8719-BFEE3C215527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198CDB2-4BC5-411A-8736-615A531FC545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA69843-EC8D-42E2-900E-017D2B502E9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24928",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-02-06T10:16:07.820",
      "lastModified" : "2026-02-09T19:13:29.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds write vulnerability in the file system module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en el módulo del sistema de archivos.\nImpacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-680"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/2/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2013",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T10:16:07.967",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en itsourcecode Student Management System 1.0. Esto afecta una función desconocida del archivo /ramonsys/soa/index.php. Dicha manipulación del argumento ID conduce a inyección SQL. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tianrenu/CVE-Discoveries/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344595",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344595",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743500",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2014",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T10:16:08.243",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en itsourcecode Student Management System 1.0. Esto afecta una función desconocida del archivo /ramonsys/billing/index.PHP. Realizar una manipulación del argumento ID resulta en inyección SQL. La explotación remota del ataque es posible. El exploit ha sido publicado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/35",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344596",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344596",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744048",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2015",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T11:15:51.127",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument school_id can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Portabilis i-Educar hasta 2.10. Afecta a una función desconocida del archivo FinalStatusImportService.php del componente Final Status Import. La ejecución de una manipulación del argumento school_id puede conducir a una autorización indebida. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.0",
            "matchCriteriaId" : "877348AB-B600-47B3-A565-8198483C6414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ViniCastro2001/Security_Reports/tree/main/i-educar/BFLA-Final-Status-Import",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ViniCastro2001/Security_Reports/tree/main/i-educar/BFLA-Final-Status-Import#proof-of-concept-poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743760",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1293",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-06T12:16:25.133",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the `yoast-schema` block attribute in all versions up to, and including, 26.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Yoast SEO – SEO avanzado con guía en tiempo real e IA integrada para WordPress es vulnerable a cross-site scripting almacenado a través del atributo de bloque 'yoast-schema' en todas las versiones hasta la 26.8, inclusive, debido a sanitización de entrada y escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wordpress-seo/tags/26.8/inc/class-wpseo-utils.php#L915",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wordpress-seo/tags/26.8/src/generators/schema-generator.php#L188",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wordpress-seo/tags/26.8/src/presenters/schema-presenter.php#L49",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8b2e7c2d-ed2f-439b-9cee-f2e5d46121b6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2016",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T12:16:26.073",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The identifier of the patch is 82f66af3e252e3e137dba0c3891570f085e79adf. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en happyfish100 libfastcommon hasta la versión 1.0.84. Afectada por esta vulnerabilidad es la función base64_decode del archivo src/base64.c. La manipulación conduce a un desbordamiento de búfer basado en pila. Se requiere acceso local para abordar este ataque. El exploit ha sido divulgado públicamente y puede ser utilizado. El identificador del parche es 82f66af3e252e3e137dba0c3891570f085e79adf. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:happyfish100:libfastcommon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.84",
            "matchCriteriaId" : "C75F73CF-18BB-4FE5-9440-693DD0E92FFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/happyfish100/libfastcommon/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/happyfish100/libfastcommon/commit/82f66af3e252e3e137dba0c3891570f085e79adf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/happyfish100/libfastcommon/issues/55",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/happyfish100/libfastcommon/issues/55#issue-3836362577",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/happyfish100/libfastcommon/issues/55#issuecomment-3776757848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.743873",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2017",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T12:16:26.280",
      "lastModified" : "2026-02-17T19:09:53.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en IP-COM W30AP hasta 1.0.0.11(1340). Afectada por este problema es la función R7WebsSecurityHandler del archivo /goform/wx3auth del componente POST Request Handler. La manipulación del argumento data resulta en desbordamiento de búfer basado en pila. El ataque puede ser realizado desde remoto. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ip-com:w30ap_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.11\\(1340\\)",
            "matchCriteriaId" : "3125B43A-2D76-4A19-950E-F029CD60E9AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ip-com:w30ap:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58327732-CBB5-4926-8B3E-DD6D4CBC36D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/GXB0_0/iot-vul/blob/master/IP-COM/W30AP/wx3auth-sprintf.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/GXB0_0/iot-vul/blob/master/IP-COM/W30AP/wx3auth-sprintf.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744062",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744063",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2018",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T13:15:54.397",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en itsourcecode School Management System 1.0. Esto afecta una parte desconocida del archivo /ramonsys/settings/controller.PHP. Esta manipulación del argumento ID causa inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744075",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2054",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T13:15:54.580",
      "lastModified" : "2026-02-17T19:09:28.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of the component Wifi Setting Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en D-Link DIR-605L y DIR-619L 2.06B01/2.13B01. Afectada es una función desconocida del componente Wifi Setting Handler. Realizar una manipulación resulta en revelación de información. El ataque puede iniciarse remotamente. El exploit se ha hecho público y puede ser utilizado para ataques. Esta vulnerabilidad solo afecta a productos que ya no tienen soporte por parte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.06b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1CE88F-3DB4-451D-82FE-866FD48FD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-619l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AF2288-99EC-45EE-8390-1A8FA01BDEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99992A1-E442-4D83-84F4-44F44C25219C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_81/81.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_81/81.md#poc--result",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344614",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344614",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744224",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2055",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T13:15:54.777",
      "lastModified" : "2026-02-17T19:09:14.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the component DHCP Client Information Handler. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en D-Link DIR-605L y DIR-619L 2.06B01/2.13B01. El elemento afectado es una función desconocida del componente DHCP Client Information Handler. La ejecución de una manipulación puede llevar a la revelación de información. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques. Esta vulnerabilidad solo afecta a productos que ya no tienen soporte por parte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.06b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1CE88F-3DB4-451D-82FE-866FD48FD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-619l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AF2288-99EC-45EE-8390-1A8FA01BDEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99992A1-E442-4D83-84F4-44F44C25219C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_82/82.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_82/82.md#poc--result",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344615",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344615",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744225",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1337",
      "sourceIdentifier" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
      "published" : "2026-02-06T14:16:38.120",
      "lastModified" : "2026-02-24T21:21:55.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.\n\nProof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337"
      }, {
        "lang" : "es",
        "value" : "El escape insuficiente de caracteres Unicode en el registro de consultas en las ediciones Neo4j Enterprise y Community anteriores a 2026.01 puede conducir a XSS si el usuario abre los registros en una herramienta que los trate como HTML. No hay impacto de seguridad en los productos Neo4j, pero este aviso se publica como precaución para tratar los registros como texto plano si se utilizan versiones anteriores a 2026.01.\n\nPrueba de concepto de exploit: https://github.com/JoakimBulow/CVE-2026-1337"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-117"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neo4j:neo4j:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "2026.01",
            "matchCriteriaId" : "45EA63FF-3AC6-43C7-A504-CB24BAC916F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neo4j:neo4j:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "2026.01",
            "matchCriteriaId" : "0E3788A7-7BDC-467B-A491-1D19A3FE5C80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JoakimBulow/CVE-2026-1337",
        "source" : "3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2056",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T14:16:38.510",
      "lastModified" : "2026-02-17T19:08:56.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wan_connection_status.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en D-Link DIR-605L y DIR-619L 2.06B01/2.13B01. El elemento afectado es una función desconocida del archivo /wan_connection_status.asp del componente DHCP Connection Status Handler. La manipulación conduce a revelación de información. La explotación remota del ataque es posible. El exploit ha sido revelado públicamente y puede ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no son soportados por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.06b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1CE88F-3DB4-451D-82FE-866FD48FD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-619l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61AF2288-99EC-45EE-8390-1A8FA01BDEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99992A1-E442-4D83-84F4-44F44C25219C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_82/82.md#poc--result",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_83/83.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344616",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344616",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2057",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T16:16:15.070",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en SourceCodester Medical Center Portal Management System 1.0. Esto afecta una función desconocida del archivo /login.php. La manipulación del argumento User resulta en inyección SQL. El ataque puede ser ejecutado remotamente. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bontrofftech:medical_center_portal_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC0D0D6-4753-4749-9480-7AB082CBAEE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Roger-Adventures/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344617",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344617",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744233",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23738",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T17:16:26.000",
      "lastModified" : "2026-02-18T18:42:48.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using ast_str_append. The endpoint at GET /httpstatus is the potential vulnerable endpoint relating to asterisk/main /http.c. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2."
      }, {
        "lang" : "es",
        "value" : "Asterisk es una centralita privada y un kit de herramientas de telefonía de código abierto. Antes de las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2, los valores proporcionados/controlados por el usuario para las Cookies y cualquier parámetro de consulta de variable GET se interpolan directamente en el HTML de la página usando ast_str_append. El endpoint en GET /httpstatus es el endpoint potencialmente vulnerable relacionado con asterisk/main /http.c. Este problema ha sido parcheado en las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.18.2",
            "matchCriteriaId" : "55FE60C1-D6E7-40DE-A1E3-C37A8ED13BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndIncluding" : "21.12.1",
            "matchCriteriaId" : "842D5FCD-E7A1-45AF-BC46-7C6CB03AE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndIncluding" : "22.8.2",
            "matchCriteriaId" : "F12BA0F4-535F-409E-B2AB-84B703707055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.2",
            "matchCriteriaId" : "B036D768-9ADA-4965-A596-BEF60749C3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.9",
            "matchCriteriaId" : "44460225-C50D-414A-A2E0-F8280E1C1E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "79225576-AF7C-4099-9624-C53578A7417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29323E6E-12C9-46C7-B29C-25E0CD537A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E563972-78C0-40A0-83EA-6A3BA3D71946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "64209621-D458-432A-B0E3-C8D0B6698574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "B148158A-8354-41C2-A44C-2C0DAABAD217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4D96E8-1F01-42B8-9181-67DEB12D9DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1B02A-F5F9-48EB-A396-412821F5D602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB2891-448F-4C4E-8A47-2283A8F71FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AF30E9-FC50-4A5C-BC99-9B3394488B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A41366F-EA16-4867-A198-ACFFE5AFEA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/asterisk/asterisk/security/advisories/GHSA-v6hp-wh3r-cwxh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23739",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T17:16:26.147",
      "lastModified" : "2026-02-18T18:42:37.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the ast_xml_open() function in xml.c parses XML documents using libxml with unsafe parsing options that enable entity expansion and XInclude processing. Specifically, it invokes xmlReadFile() with the XML_PARSE_NOENT flag and later processes XIncludes via xmlXIncludeProcess().If any untrusted or user-supplied XML file is passed to this function, it can allow an attacker to trigger XML External Entity (XXE) or XInclude-based local file disclosure, potentially exposing sensitive files from the host system. This can also be triggered in other cases in which the user is able to supply input in xml format that triggers the asterisk process to parse it. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2."
      }, {
        "lang" : "es",
        "value" : "Asterisk es una centralita privada de código abierto y un kit de herramientas de telefonía. Antes de las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2, la función ast_xml_open() en xml.c analiza documentos XML usando libxml con opciones de análisis inseguras que permiten la expansión de entidades y el procesamiento de XInclude. Específicamente, invoca xmlReadFile() con la bandera XML_PARSE_NOENT y posteriormente procesa XIncludes a través de xmlXIncludeProcess(). Si cualquier archivo XML no confiable o proporcionado por el usuario se pasa a esta función, puede permitir a un atacante activar una Entidad Externa XML (XXE) o una divulgación de archivos locales basada en XInclude, exponiendo potencialmente archivos sensibles del sistema anfitrión. Esto también puede ser activado en otros casos en los que el usuario puede proporcionar entrada en formato XML que activa el proceso de Asterisk para analizarla. Este problema ha sido parcheado en las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.18.2",
            "matchCriteriaId" : "46AC3571-DD52-4F3C-98D2-3BB915498D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.12.1",
            "matchCriteriaId" : "B9CB7760-849C-42CB-BF9A-A3DB40F19447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.8.2",
            "matchCriteriaId" : "03AEEF8D-B546-4587-A236-63E2C41582FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.2",
            "matchCriteriaId" : "B036D768-9ADA-4965-A596-BEF60749C3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.9",
            "matchCriteriaId" : "44460225-C50D-414A-A2E0-F8280E1C1E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "79225576-AF7C-4099-9624-C53578A7417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29323E6E-12C9-46C7-B29C-25E0CD537A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E563972-78C0-40A0-83EA-6A3BA3D71946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "64209621-D458-432A-B0E3-C8D0B6698574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "B148158A-8354-41C2-A44C-2C0DAABAD217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4D96E8-1F01-42B8-9181-67DEB12D9DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1B02A-F5F9-48EB-A396-412821F5D602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB2891-448F-4C4E-8A47-2283A8F71FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AF30E9-FC50-4A5C-BC99-9B3394488B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A41366F-EA16-4867-A198-ACFFE5AFEA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/asterisk/asterisk/security/advisories/GHSA-85x7-54wr-vh42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23740",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T17:16:26.290",
      "lastModified" : "2026-02-10T18:25:39.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users on a linux system) to that directory can cause root to execute arbitrary commands or overwrite arbitrary files by controlling the gdb init file and output paths. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2."
      }, {
        "lang" : "es",
        "value" : "Asterisk es una centralita privada y un kit de herramientas de telefonía de código abierto. Antes de las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2, cuando ast_coredumper escribe sus archivos de inicialización y salida de gdb en un directorio con permisos de escritura para todos (por ejemplo, /tmp), un atacante con permiso de escritura (que es para todos los usuarios en un sistema Linux) en ese directorio puede hacer que root ejecute comandos arbitrarios o sobrescriba archivos arbitrarios controlando las rutas del archivo de inicialización de gdb y de los archivos de salida. Este problema ha sido parcheado en las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "20E281EB-9D1B-4F5F-A6B7-3A36B8BC0065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1117AA4-CE6B-479B-9995-A9F71C430663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "775041BD-5C86-42B6-8B34-E1D5171B3D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "55EC2877-2FF5-4777-B118-E764A94BCE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0392C9-A5E9-4D71-8B8D-63FB96E055A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "09AF962D-D4BB-40BA-B435-A59E4402931C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "559D1063-7F37-44F8-B5C6-94758B675FDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "185B2B4B-B246-4379-906B-9BDA7CDD4400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "73D3592D-3CE5-4462-9FE8-4BCB54E74B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:13.13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CCE9E0-5DC4-43A2-96DB-9ABEA60EC157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD72D9A-E83D-401F-AB57-F149EDF3100F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "28FFE601-860E-4507-9053-BC2CC0E368A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "BC842354-1A42-4C36-A7C3-02DAD6E90876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6F59212A-DFCA-454F-A705-DC137627F7D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert1-rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC6EF5A-A3CD-400F-B6A9-728E257A2DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert10:*:*:*:*:*:*",
            "matchCriteriaId" : "42633641-4DFA-4F33-96B5-0D7D101F1A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert11:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDC8235-FE4A-42A3-B3BE-E1B7F65501BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert12:*:*:*:*:*:*",
            "matchCriteriaId" : "9505512D-485C-4A0A-91A1-2DEFF1A81023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert13:*:*:*:*:*:*",
            "matchCriteriaId" : "207B4B99-21CC-4535-9689-993493C76295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert14:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5CC3FB-7B37-4EB6-93CE-EE868831542F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1577-29A7-4C84-8E5C-6EAF9E9E1954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2E466728-57CF-457B-B25D-20C92C944980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "07E14A73-7BA2-4E46-860E-F02E5C1514D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "05CB55B9-DBC9-4BE3-A293-AF624B05F90C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAD713A-CBA2-40C3-9DE3-5366827F18C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F5A8B7-29C9-403C-9561-7B3E96F9FCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert10:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B96A53-2263-463C-9CCA-0F29865FE500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert11:*:*:*:*:*:*",
            "matchCriteriaId" : "A53049F1-8551-453E-834A-68826A7AA959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert12:*:*:*:*:*:*",
            "matchCriteriaId" : "B224A4E9-4B6B-4187-B0D6-E4BAE2637960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "9501DBFF-516D-4F26-BBF6-1B453EE2A630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3E9AC0-C0B4-4E87-8D48-2B688D28B678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8628F6-F8D1-4C0C-BD89-8E2EEF19A5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "E27A6FD1-9321-4C9E-B32B-D6330CD3DC92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "B6BF5EDB-9D17-453D-A22E-FDDC4DCDD85B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "4C75A21E-5D05-434B-93DE-8DAC4DD3E587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "1D725758-C9F5-4DB2-8C45-CC052518D3FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:16.8.0:cert9:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E2AECC-B681-4EA5-9DE5-2086BB37A5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7FA28D-33B7-4F20-8235-E66C21019875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "79EEB5E5-B79E-454B-8DCD-3272BA337A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3BBA39-95EC-462F-8F5A-15E8D07CC804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert10:*:*:*:*:*:*",
            "matchCriteriaId" : "D6BF553C-020D-4F99-9995-CA4A4383B2DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert11:*:*:*:*:*:*",
            "matchCriteriaId" : "E3069F1F-DDE8-4E9A-B4FF-64B7B11EEFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert12:*:*:*:*:*:*",
            "matchCriteriaId" : "890205E3-973D-422E-940A-E9190BA37EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert13:*:*:*:*:*:*",
            "matchCriteriaId" : "23100176-0528-448D-B2FA-D3B9B31A249D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert14:*:*:*:*:*:*",
            "matchCriteriaId" : "346B29FD-48B4-4121-89FD-45325865E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert15:*:*:*:*:*:*",
            "matchCriteriaId" : "49798C73-CCC4-4013-8A01-348D6B3D9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert16:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019880-BE93-4592-B3E0-C69FA2C47B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "892BAE5D-A64E-4FE0-9A99-8C07F342A042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "1A716A45-7075-4CA6-9EF5-2DD088248A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "80EFA05B-E22D-49CE-BDD6-5C7123F1C12B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "20FD475F-2B46-47C9-B535-1561E29CB7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "7238FCD9-9F40-44BA-A170-69D4857AA1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "F657B046-6C83-48F9-A0B1-C63CDA7FD61D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "6D87C7DE-23EA-4532-A2E4-9BF82ADE12DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B79A5B46-5CA3-445E-BE47-1711DCD038A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "D600B37E-94EA-48DE-B48E-871B3A983721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:18.9:cert9:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC3A00E-D1C6-467F-8FE7-E8437A527B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "79225576-AF7C-4099-9624-C53578A7417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29323E6E-12C9-46C7-B29C-25E0CD537A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E563972-78C0-40A0-83EA-6A3BA3D71946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "64209621-D458-432A-B0E3-C8D0B6698574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "B148158A-8354-41C2-A44C-2C0DAABAD217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4D96E8-1F01-42B8-9181-67DEB12D9DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1B02A-F5F9-48EB-A396-412821F5D602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB2891-448F-4C4E-8A47-2283A8F71FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AF30E9-FC50-4A5C-BC99-9B3394488B9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.18.2",
            "matchCriteriaId" : "46AC3571-DD52-4F3C-98D2-3BB915498D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.12.1",
            "matchCriteriaId" : "B9CB7760-849C-42CB-BF9A-A3DB40F19447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.8.2",
            "matchCriteriaId" : "03AEEF8D-B546-4587-A236-63E2C41582FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.2",
            "matchCriteriaId" : "B036D768-9ADA-4965-A596-BEF60749C3CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/asterisk/asterisk/security/advisories/GHSA-xpc6-x892-v83c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23741",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T17:16:26.427",
      "lastModified" : "2026-02-18T18:42:31.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/ast_coredumper runs as root, as noted by the NOTES tag on line 689 of the ast_coredumper file. The script will source the contents of /etc/asterisk/ast_debug_tools.conf, which resides in a folder that is writeable by the asterisk user:group. Due to the /etc/asterisk/ast_debug_tools.conf file following bash semantics and it being loaded; an attacker with write permissions may add or modify the file such that when the root ast_coredumper is run; it would source and thereby execute arbitrary bash code found in the /etc/asterisk/ast_debug_tools.conf. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2."
      }, {
        "lang" : "es",
        "value" : "Asterisk es un kit de herramientas de telefonía y centralita privada de código abierto. Antes de las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2, el script asterisk/contrib/scripts/ast_coredumper se ejecuta como root, como se indica en la etiqueta NOTES en la línea 689 del archivo ast_coredumper. El script obtendrá el contenido de /etc/asterisk/ast_debug_tools.conf, que reside en una carpeta que es escribible por el usuario:grupo asterisk. Debido a que el archivo /etc/asterisk/ast_debug_tools.conf sigue la semántica de bash y a que se carga; un atacante con permisos de escritura puede añadir o modificar el archivo de tal manera que cuando se ejecute el ast_coredumper de root; este obtendría y, por lo tanto, ejecutaría código bash arbitrario encontrado en el /etc/asterisk/ast_debug_tools.conf. Este problema ha sido parcheado en las versiones 20.7-cert9, 20.18.2, 21.12.1, 22.8.2 y 23.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.18.2",
            "matchCriteriaId" : "46AC3571-DD52-4F3C-98D2-3BB915498D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.12.1",
            "matchCriteriaId" : "B9CB7760-849C-42CB-BF9A-A3DB40F19447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.8.2",
            "matchCriteriaId" : "03AEEF8D-B546-4587-A236-63E2C41582FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.2",
            "matchCriteriaId" : "B036D768-9ADA-4965-A596-BEF60749C3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.9",
            "matchCriteriaId" : "44460225-C50D-414A-A2E0-F8280E1C1E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1:*:*:*:*:*:*",
            "matchCriteriaId" : "79225576-AF7C-4099-9624-C53578A7417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29323E6E-12C9-46C7-B29C-25E0CD537A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E563972-78C0-40A0-83EA-6A3BA3D71946"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "64209621-D458-432A-B0E3-C8D0B6698574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "B148158A-8354-41C2-A44C-2C0DAABAD217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "3D4D96E8-1F01-42B8-9181-67DEB12D9DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "50D1B02A-F5F9-48EB-A396-412821F5D602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert6:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB2891-448F-4C4E-8A47-2283A8F71FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert7:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AF30E9-FC50-4A5C-BC99-9B3394488B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:certified_asterisk:20.7:cert8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A41366F-EA16-4867-A198-ACFFE5AFEA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/asterisk/asterisk/security/advisories/GHSA-rvch-3jmx-3jf3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25556",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-06T17:16:27.387",
      "lastModified" : "2026-02-24T21:07:13.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering. The function accepts a caller-owned fz_pixmap pointer but incorrectly drops the pixmap in its error handling path before rethrowing the exception. Callers (including the barcode decoding path in fz_decode_barcode_from_display_list) also drop the same pixmap in cleanup, resulting in a double-free that can corrupt the heap and crash the process. This issue affects applications that enable and use MuPDF barcode decoding and can be triggered by processing crafted input that causes a rendering-time error while decoding barcodes."
      }, {
        "lang" : "es",
        "value" : "Las versiones de MuPDF 1.23.0 a 1.27.0 contienen una vulnerabilidad de doble liberación en fz_fill_pixmap_from_display_list() cuando ocurre una excepción durante la renderización de la lista de visualización. La función acepta un puntero fz_pixmap propiedad del llamador, pero libera incorrectamente el pixmap en su ruta de manejo de errores antes de relanzar la excepción. Los llamadores (incluida la ruta de decodificación de códigos de barras en fz_decode_barcode_from_display_list) también liberan el mismo pixmap en la limpieza, lo que resulta en una doble liberación que puede corromper el heap y bloquear el proceso. Este problema afecta a las aplicaciones que habilitan y utilizan la decodificación de códigos de barras de MuPDF y puede ser activado al procesar una entrada manipulada que causa un error en tiempo de renderización mientras se decodifican códigos de barras."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndIncluding" : "1.27.0",
            "matchCriteriaId" : "4289D7B7-1717-4A65-9331-E62FC00B68DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=709029",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=d4743b6092d513321c23c6f7fe5cff87cde043c1",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://mupdf.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/mupdf-barcode-decoding-double-free",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2058",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T17:16:27.877",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en mathurvishal CloudClassroom-PHP-Project hasta 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Esto afecta una función desconocida del archivo /postquerypublic.php del componente Post Query Details Page. Esta manipulación del argumento gnamex causa inyección SQL. El ataque es posible de llevar a cabo remotamente. El exploit ha sido publicado y puede ser usado. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden ser especificados. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vishalmathur:cloudclassroom-php-project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F0E8E7-9640-4A8A-A79A-387195228313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/carlosalbertotuma/CLOUD-CLASSROOMS-php-1.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carlosalbertotuma/CLOUD-CLASSROOMS-php-1.0#impact",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344618",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344618",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2059",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T17:16:28.060",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /emp_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Medical Center Portal Management System 1.0. Afecta a una función desconocida del archivo /emp_edit1.PHP. Dicha manipulación del argumento ID conduce a inyección SQL. El ataque puede realizarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bontrofftech:medical_center_portal_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC0D0D6-4753-4749-9480-7AB082CBAEE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Roger-Adventures/CVE/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344619",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344619",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2103",
      "sourceIdentifier" : "cves@blacklanternsecurity.com",
      "published" : "2026-02-06T17:16:28.240",
      "lastModified" : "2026-02-17T15:46:31.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials."
      }, {
        "lang" : "es",
        "value" : "Infor SyteLine ERP utiliza claves criptográficas estáticas codificadas de forma rígida para cifrar las credenciales almacenadas, incluyendo contraseñas de usuario, cadenas de conexión de la base de datos y claves de API. Las claves de cifrado son idénticas en todas las instalaciones. Un atacante con acceso al binario de la aplicación y a la base de datos puede descifrar todas las credenciales almacenadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cves@blacklanternsecurity.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cves@blacklanternsecurity.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infor:syteline_erp:10.0.8803.16889:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0110991B-B5AE-42B2-8E73-A6022EED59E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp",
        "source" : "cves@blacklanternsecurity.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1769",
      "sourceIdentifier" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
      "published" : "2026-02-06T18:15:56.193",
      "lastModified" : "2026-02-24T20:58:11.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. \n\nConsider \nupgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com"
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') vulnerabilidad en Xerox CentreWare en Windows permite XSS Almacenado. Este problema afecta a CentreWare: hasta la 7.0.6.\n\nConsidere actualizar Xerox® CentreWare Web® a la v7.2.2.25 a través del software disponible en Xerox.com"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.6",
            "matchCriteriaId" : "382DF13C-043B-4D3C-A00F-E7C6EF80FD6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2026/02/Xerox-Security-Bulletin-XRX26-003-for-Xerox-CentreWare-Web.pdf",
        "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22592",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:56.357",
      "lastModified" : "2026-02-17T21:40:59.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, an authenticated user can cause a DOS attack. If one of the repo files is deleted before synchronization, it will cause the application to crash. This issue has been patched in versions 0.13.4 and 0.14.0+dev."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. En la versión 0.13.3 y anteriores, un usuario autenticado puede causar un ataque DoS. Si uno de los archivos del repositorio se elimina antes de la sincronización, hará que la aplicación falle. Este problema ha sido parcheado en las versiones 0.13.4 y 0.14.0+dev."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.4",
            "matchCriteriaId" : "674F0DE0-7669-4B02-B45E-DD60FB5D462F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-cr88-6mqm-4g57",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-cr88-6mqm-4g57",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23632",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:56.553",
      "lastModified" : "2026-02-17T21:53:45.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, the endpoint \"PUT /repos/:owner/:repo/contents/*\" does not require write permissions and allows access with read permission only via repoAssignment(). After passing the permission check, PutContents() invokes UpdateRepoFile(), which results in commit creation and the execution of git push. As a result, a token with read-only permission can be used to modify repository contents. This issue has been patched in versions 0.13.4 and 0.14.0+dev."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. En la versión 0.13.3 y anteriores, el endpoint 'PUT /repos/:owner/:repo/contents/*' no requiere permisos de escritura y permite el acceso solo con permiso de lectura a través de repoAssignment(). Después de pasar la verificación de permisos, PutContents() invoca a UpdateRepoFile(), lo que resulta en la creación de un commit y la ejecución de git push. Como resultado, un token con permiso de solo lectura puede ser utilizado para modificar el contenido del repositorio. Este problema ha sido parcheado en las versiones 0.13.4 y 0.14.0+dev."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.4",
            "matchCriteriaId" : "674F0DE0-7669-4B02-B45E-DD60FB5D462F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-5qhx-gwfj-6jqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23633",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:56.727",
      "lastModified" : "2026-02-17T21:54:40.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. En la versión 0.13.3 y anteriores, existe una lectura/escritura de archivo arbitraria mediante salto de ruta en la edición de hooks de Git. Este problema ha sido parcheado en las versiones 0.13.4 y 0.14.0+dev."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.4",
            "matchCriteriaId" : "674F0DE0-7669-4B02-B45E-DD60FB5D462F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-mrph-w4hh-gx3g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24135",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:57.483",
      "lastModified" : "2026-02-17T21:55:35.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows an authenticated user with write access to a repository's wiki to delete arbitrary files on the server by manipulating the old_title parameter in the wiki editing form. This issue has been patched in versions 0.13.4 and 0.14.0+dev."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git de código abierto autoalojado. En la versión 0.13.3 y anteriores, existe una vulnerabilidad de salto de ruta en la función updateWikiPage de Gogs. La vulnerabilidad permite a un usuario autenticado con acceso de escritura a la wiki de un repositorio eliminar archivos arbitrarios en el servidor manipulando el parámetro old_title en el formulario de edición de la wiki. Este problema ha sido parcheado en las versiones 0.13.4 y 0.14.0+dev."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.4",
            "matchCriteriaId" : "674F0DE0-7669-4B02-B45E-DD60FB5D462F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-jp7c-wj6q-3qf2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24419",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:58.333",
      "lastModified" : "2026-02-09T21:55:03.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the Prima Nota (Journal Entry) module's add.php file. The application fails to validate that comma-separated values from the id_documenti GET parameter are integers before using them in SQL IN() clauses, allowing attackers to inject arbitrary SQL commands and extract sensitive data through XPATH error messages."
      }, {
        "lang" : "es",
        "value" : "OpenSTAManager es un software de gestión de código abierto para asistencia técnica y facturación. OpenSTAManager v2.9.8 y versiones anteriores contienen una vulnerabilidad crítica de inyección SQL basada en errores en el archivo add.PHP del módulo Prima Nota (Asiento de Diario). La aplicación no valida que los valores separados por comas del parámetro GET id_documenti sean enteros antes de usarlos en cláusulas SQL IN(), lo que permite a los atacantes inyectar comandos SQL arbitrarios y extraer datos sensibles a través de mensajes de error XPATH."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "42CFDCCE-817A-4017-8C56-ECC90B1CF7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4j2x-jh4m-fqv6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4j2x-jh4m-fqv6",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24776",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:58.497",
      "lastModified" : "2026-02-23T18:14:32.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to 17.0.2, the drag&drop handler moving an agenda item to a different section was not properly checking if the target meeting section is part of the same meeting (or is the backlog, in case of recurring meetings). This allowed an attacker to move a meeting agenda item into a different meeting. The attacker did not get access to meetings, but they could add arbitrary agenda items, that could cause confusions. The vulnerability is fixed in 17.0.2."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Antes de la 17.0.2, el manejador de arrastrar y soltar que movía un elemento de la agenda a una sección diferente no verificaba correctamente si la sección de reunión de destino formaba parte de la misma reunión (o si era el backlog, en el caso de reuniones recurrentes). Esto permitía a un atacante mover un elemento de la agenda de una reunión a una reunión diferente. El atacante no obtenía acceso a las reuniones, pero podía añadir elementos de la agenda arbitrarios, lo que podría causar confusiones. La vulnerabilidad está corregida en la versión 17.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "3FA4C106-EEE3-4582-BE10-010975AE359B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-p9v8-w9ph-hqmf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24851",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:58.673",
      "lastModified" : "2026-02-24T20:52:16.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.5 to v1.11.2 ( openfga-0.2.22<= Helm chart <= openfga-0.2.51, v.1.8.5 <= docker <= v.1.11.2) are vulnerable to improper policy enforcement when certain Check calls are executed. The vulnerability requires a model that has a a relation directly assignable by a type bound public access and assignable by type bound non-public access, a tuple assigned for the relation that is a type bound public access, a tuple assigned for the same object with the same relation that is not type bound public access, and a tuple assigned for a different object that has an object ID lexicographically larger with the same user and relation which is not type bound public access. This vulnerability is fixed in v1.11.3."
      }, {
        "lang" : "es",
        "value" : "OpenFGA es un motor de autorización/permisos de alto rendimiento y flexible, construido para desarrolladores e inspirado en Google Zanzibar. OpenFGA v1.8.5 a v1.11.2 (openfga-0.2.22&lt;= Helm chart &lt;= openfga-0.2.51, v.1.8.5 &lt;= docker &lt;= v.1.11.2) son vulnerables a una aplicación de políticas incorrecta cuando se ejecutan ciertas llamadas Check. La vulnerabilidad requiere un modelo que tenga una relación directamente asignable por un acceso público ligado a tipo y asignable por un acceso no público ligado a tipo, una tupla asignada para la relación que es un acceso público ligado a tipo, una tupla asignada para el mismo objeto con la misma relación que no es un acceso público ligado a tipo, y una tupla asignada para un objeto diferente que tiene un ID de objeto lexicográficamente mayor con el mismo usuario y relación que no es un acceso público ligado a tipo. Esta vulnerabilidad está corregida en la v1.11.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openfga:helm_charts:*:*:*:*:*:openfga:*:*",
            "versionStartIncluding" : "0.2.22",
            "versionEndExcluding" : "0.2.51",
            "matchCriteriaId" : "CE16E305-94B6-4C8E-86C1-9AA98A94D1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openfga:openfga:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.5",
            "versionEndExcluding" : "1.11.3",
            "matchCriteriaId" : "BC329AC3-B832-4CB4-9B0D-6F503BF02915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openfga/openfga/releases/tag/v1.11.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openfga/openfga/security/advisories/GHSA-jq9f-gm9w-rwm9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24903",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:58.830",
      "lastModified" : "2026-02-24T20:57:19.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the  Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs."
      }, {
        "lang" : "es",
        "value" : "OrcaStatLLM Researcher es un generador de artículos de investigación basado en LLM. Se descubrió una vulnerabilidad de cross-site scripting (XSS) almacenado en el mensaje de registro en la página de sesión de OrcaStatLLM-Researcher que permite a los atacantes inyectar y ejecutar código JavaScript arbitrario en los navegadores de las víctimas a través de entradas maliciosas de temas de investigación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:algonet:orcastatllm_researcher:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B038E281-0FF6-46C2-9F63-3BC74B2DF112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AlgoNetLab/OrcaStatLLM-Researcher/security/advisories/GHSA-47wv-g894-82m4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25722",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:59.077",
      "lastModified" : "2026-02-09T14:51:42.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protection and create or modify files without user confirmation. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.57."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.0.57, Claude Code no validaba correctamente los cambios de directorio cuando se combinaba con operaciones de escritura en carpetas protegidas. Al usar el comando cd para navegar a directorios sensibles como .claude, era posible eludir la protección contra escritura y crear o modificar archivos sin confirmación del usuario. La explotación fiable de esto requería la capacidad de añadir contenido no confiable en una ventana de contexto de Claude Code. Este problema ha sido parcheado en la versión 2.0.57."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.57",
            "matchCriteriaId" : "30804A02-7373-4C9F-AE17-E2C3EA396DDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-66q4-vfjg-2qhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25723",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:15:59.237",
      "lastModified" : "2026-02-09T14:50:15.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude folder and paths outside the project scope. Exploiting this required the ability to execute commands through Claude Code with the \"accept edits\" feature enabled. This issue has been patched in version 2.0.55."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.0.55, Claude Code no validaba correctamente los comandos que utilizaban operaciones sed canalizadas con el comando echo, permitiendo a los atacantes eludir las restricciones de escritura de archivos. Esta vulnerabilidad permitía la escritura en directorios sensibles como la carpeta .claude y rutas fuera del alcance del proyecto. La explotación de esto requería la capacidad de ejecutar comandos a través de Claude Code con la función 'aceptar ediciones' habilitada. Este problema ha sido parcheado en la versión 2.0.55."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.55",
            "matchCriteriaId" : "2C2D7786-474A-4524-8A9D-7D1678871868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-mhg7-666j-cqg4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25724",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:16:00.037",
      "lastModified" : "2026-03-27T22:16:20.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. This issue has been patched in version 2.1.7."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.1.7, Claude Code no aplicaba estrictamente las reglas de denegación configuradas en settings.json al acceder a archivos a través de enlaces simbólicos. Si un usuario denegaba explícitamente a Claude Code el acceso a un archivo (como /etc /passwd) y Claude Code tenía acceso a un enlace simbólico que apuntaba a ese archivo, era posible que Claude Code leyera el archivo restringido a través del enlace simbólico sin activar la aplicación de la regla de denegación. Este problema ha sido parcheado en la versión 2.1.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.1.7",
            "matchCriteriaId" : "25EC5B17-180E-4453-815D-F324DF589561"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-4q92-rfm6-2cqx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.terra.security/blog/when-ai-becomes-the-attack-surface-lessons-from-discovering-cve-2026-25724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25725",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T18:16:00.187",
      "lastModified" : "2026-02-09T14:46:12.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup. While the parent directory was mounted as writable and .claude/settings.local.json was explicitly protected with read-only constraints, settings.json was not protected if it was missing. This allowed malicious code running inside the sandbox to create this file and inject persistent hooks (such as SessionStart commands) that would execute with host privileges when Claude Code was restarted. This issue has been patched in version 2.1.2."
      }, {
        "lang" : "es",
        "value" : "Claude Code es una herramienta de codificación agéntica. Antes de la versión 2.1.2, el mecanismo de sandboxing bubblewrap de Claude Code no protegió adecuadamente el archivo de configuración .claude/settings.json cuando no existía al inicio. Si bien el directorio padre estaba montado como escribible y .claude/settings.local.json estaba explícitamente protegido con restricciones de solo lectura, settings.json no estaba protegido si faltaba. Esto permitía que código malicioso ejecutándose dentro del sandbox creara este archivo e inyectara hooks persistentes (como comandos SessionStart) que se ejecutarían con privilegios de host cuando se reiniciara Claude Code. Este problema ha sido parcheado en la versión 2.1.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-501"
        }, {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.1.2",
            "matchCriteriaId" : "BFD4F565-E51C-4E83-815C-B2D2A0EEB5E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anthropics/claude-code/security/advisories/GHSA-ff64-7w26-62rf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2060",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T18:16:00.320",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /simpleblooddonor/editcampaignform.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Simple Blood Donor Management System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /simpleblooddonor/editcampaignform.php. Realizar una manipulación del argumento ID resulta en inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:simple_blood_donor_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75613ECC-3DE5-4D47-9A97-BCD7E52D3824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/kyxh001/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344620",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344620",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2061",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T18:16:00.513",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en D-Link DIR-823X 250416. La función sub_424D20 del archivo /goform/set_ipv6 se ve afectada por este problema. La ejecución de una manipulación puede conducir a una inyección de comandos del sistema operativo. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-832x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D215FF9C-55FD-438B-82EE-EF0E8B628444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/20",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344621",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344621",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744286",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23989",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:08.470",
      "lastModified" : "2026-02-24T20:57:55.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the \"Reva\" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the \"archiver\" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3."
      }, {
        "lang" : "es",
        "value" : "REVA es una plataforma de interoperabilidad. Antes de las versiones 2.42.3 y 2.40.3, un error en el middleware de autorización GRPC del componente 'Reva' de OpenCloud permite a un usuario malintencionado eludir la verificación de alcance de un enlace público. Al explotar esto a través del servicio 'archiver', se puede aprovechar para crear un archivo (zip o tar) que contenga todos los recursos a los que tiene acceso el creador de dicho enlace público. Esta vulnerabilidad está corregida en las versiones 2.42.3 y 2.40.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heinlein:opencloud_reva:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.40.3",
            "matchCriteriaId" : "4F5764DF-7B45-4D7D-93E2-82C09B09EE57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heinlein:opencloud_reva:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.41.0",
            "versionEndExcluding" : "2.42.3",
            "matchCriteriaId" : "3BDFF093-EF44-4D55-8D49-B32725E6AAFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencloud-eu/reva/commit/95aa2bc5d980eaf6cc134d75782b4f5ac7b36ae1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencloud-eu/reva/security/advisories/GHSA-9j2f-3rj3-wgpg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24050",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:08.640",
      "lastModified" : "2026-02-23T20:48:10.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored XSS in group names or channel names. Exploiting these vulnerabilities required the user explicitly interacting with the problematic object. This vulnerability is fixed in 11.5."
      }, {
        "lang" : "es",
        "value" : "Zulip es una herramienta de colaboración en equipo de código abierto. Desde la versión 5.0 hasta antes de la 11.5, algunas acciones administrativas en el perfil de usuario eran susceptibles a XSS almacenado en nombres de grupos o nombres de canales. La explotación de estas vulnerabilidades requería que el usuario interactuara explícitamente con el objeto problemático. Esta vulnerabilidad está corregida en la 11.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "11.5",
            "matchCriteriaId" : "6F93B1EC-F7D0-412E-A470-E58542B5E66C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zulip/zulip/commit/e6093d9e4788f4d82236d856c5ed7b16767886a7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zulip/zulip/releases/tag/11.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zulip/zulip/security/advisories/GHSA-56qv-8823-6fq9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://zulip.readthedocs.io/en/latest/overview/changelog.html#zulip-server-11-5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24416",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:08.837",
      "lastModified" : "2026-02-09T21:44:51.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vulnerability in the article pricing completion handler. The application fails to properly sanitize the idarticolo parameter before using it in SQL queries, allowing attackers to inject arbitrary SQL commands and extract sensitive data through time-based Boolean inference."
      }, {
        "lang" : "es",
        "value" : "OpenSTAManager es un software de gestión de código abierto para asistencia técnica y facturación. OpenSTAManager v2.9.8 y versiones anteriores contienen una crítica vulnerabilidad de inyección SQL ciega basada en tiempo en el manejador de completado de precios de artículos. La aplicación no logra sanear correctamente el parámetro idarticolo antes de usarlo en consultas SQL, permitiendo a los atacantes inyectar comandos SQL arbitrarios y extraer datos sensibles a través de inferencia booleana basada en tiempo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "42CFDCCE-817A-4017-8C56-ECC90B1CF7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-p864-fqgv-92q4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24417",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:08.973",
      "lastModified" : "2026-02-09T21:43:49.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vulnerability in the global search functionality. The application fails to properly sanitize the term parameter before using it in SQL LIKE clauses across multiple module-specific search handlers, allowing attackers to inject arbitrary SQL commands and extract sensitive data through time-based Boolean inference."
      }, {
        "lang" : "es",
        "value" : "OpenSTAManager es un software de gestión de código abierto para asistencia técnica y facturación. OpenSTAManager v2.9.8 y versiones anteriores contienen una crítica vulnerabilidad de inyección SQL ciega basada en tiempo en la funcionalidad de búsqueda global. La aplicación no logra sanear correctamente el parámetro term antes de usarlo en cláusulas SQL LIKE a través de múltiples manejadores de búsqueda específicos de módulo, permitiendo a los atacantes inyectar comandos SQL arbitrarios y extraer datos sensibles a través de inferencia booleana basada en tiempo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "42CFDCCE-817A-4017-8C56-ECC90B1CF7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4hc4-8599-xh2h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24418",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:09.120",
      "lastModified" : "2026-02-09T21:42:38.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the bulk operations handler for the Scadenzario (Payment Schedule) module. The application fails to validate that elements of the id_records array are integers before using them in an SQL IN() clause, allowing attackers to inject arbitrary SQL commands and extract sensitive data through XPATH error messages."
      }, {
        "lang" : "es",
        "value" : "OpenSTAManager es un software de gestión de código abierto para asistencia técnica y facturación. OpenSTAManager v2.9.8 y versiones anteriores contienen una crítica vulnerabilidad de inyección SQL basada en errores en el manejador de operaciones masivas para el módulo Scadenzario (Calendario de Pagos). La aplicación no valida que los elementos del array id_records sean enteros antes de usarlos en una cláusula SQL IN(), permitiendo a los atacantes inyectar comandos SQL arbitrarios y extraer datos sensibles a través de mensajes de error XPATH."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "42CFDCCE-817A-4017-8C56-ECC90B1CF7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4xwv-49c8-fvhq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25647",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:09.593",
      "lastModified" : "2026-02-24T20:59:10.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lute is a structured Markdown engine supporting Go and JavaScript. Lute 1.7.6 and earlier (as used in SiYuan before) has a Stored Cross-Site Scripting (XSS) vulnerability in the Markdown rendering engine. An attacker can inject malicious JavaScript into a Markdown text/note. When another user clicks the rendered content, the script executes in the context of their session."
      }, {
        "lang" : "es",
        "value" : "Lute es un motor Markdown estructurado compatible con Go y JavaScript. Lute 1.7.6 y versiones anteriores (tal como se usa en SiYuan anteriormente) tiene una vulnerabilidad de Cross-Site Scripting Almacenado (XSS) en el motor de renderizado de Markdown. Un atacante puede inyectar JavaScript malicioso en un texto/nota de Markdown. Cuando otro usuario hace clic en el contenido renderizado, el script se ejecuta en el contexto de su sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:3.5.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E5172C-68F8-4D7D-98C1-07ED441F4F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/88250/lute/commit/0118e218916cf0cc7df639b50ce74e0c6c3d1868",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rw25-98wq-76qv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25650",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:09.743",
      "lastModified" : "2026-02-24T20:59:52.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10."
      }, {
        "lang" : "es",
        "value" : "El Conector MCP para Salesforce es una implementación de servidor del Protocolo de Contexto de Modelo (MCP) para la integración con Salesforce. Antes de la 0.1.10, el acceso arbitrario a atributos conduce a la divulgación del token de autenticación de Salesforce. Esta vulnerabilidad se corrigió en la 0.1.10."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smn2gnt:mcp_salesforce_connector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.10",
            "matchCriteriaId" : "70D84298-4578-4E3D-87C6-A1DC860A8442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25651",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:09.897",
      "lastModified" : "2026-02-24T21:00:44.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. This vulnerability is fixed in 1.0.0."
      }, {
        "lang" : "es",
        "value" : "client-certificate-auth es un middleware para Node.js que implementa autenticación/autorización de certificados SSL de cliente. Las versiones 0.2.1 y 0.3.0 de client-certificate-auth contienen una vulnerabilidad de redirección abierta. El middleware redirige incondicionalmente las solicitudes HTTP a HTTPS utilizando el encabezado Host no validado, permitiendo a un atacante redirigir a los usuarios a dominios arbitrarios. Esta vulnerabilidad está corregida en 1.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgies:client-certificate-auth:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.2.1",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "12D5AAD7-AA91-4059-8A66-7A6751B3B140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tgies/client-certificate-auth/releases/tag/v1.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/tgies/client-certificate-auth/security/advisories/GHSA-m4w9-gch5-c2g4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25751",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:10.163",
      "lastModified" : "2026-02-10T14:33:38.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An information disclosure vulnerability in FUXA allows an unauthenticated, remote attacker to retrieve sensitive administrative database credentials. Exploitation allows an unauthenticated, remote attacker to obtain the full system configuration, including administrative credentials for the InfluxDB database. Possession of these credentials may allow an attacker to authenticate directly to the database service, enabling them to read, modify, or delete all historical process data, or perform a Denial of Service by corrupting the database. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de visualización de procesos (SCADA/HMI/Dashboard) basado en web. Una vulnerabilidad de revelación de información en FUXA permite a un atacante remoto no autenticado recuperar credenciales administrativas sensibles de la base de datos. La explotación permite a un atacante remoto no autenticado obtener la configuración completa del sistema, incluyendo las credenciales administrativas para la base de datos InfluxDB. La posesión de estas credenciales puede permitir a un atacante autenticarse directamente en el servicio de la base de datos, permitiéndole leer, modificar o eliminar todos los datos históricos del proceso, o realizar una denegación de servicio corrompiendo la base de datos. Esto afecta a FUXA hasta la versión 1.2.9. Este problema ha sido parcheado en la versión 1.2.10 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "5811902D-CD7C-4D52-BD99-66EACBBB88FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-c5gq-4h56-4mmx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25752",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:10.330",
      "lastModified" : "2026-02-10T14:31:52.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and overwrite arbitrary device tags or disable communication drivers, exposing connected ICS/SCADA environments to follow-on actions. This may allow an attacker to manipulate physical processes and disconnected devices from the HMI. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de Visualización de Procesos (SCADA/HMI/Dashboard) basado en web. Una vulnerabilidad de omisión de autorización en FUXA permite a un atacante remoto no autenticado modificar etiquetas de dispositivos a través de WebSockets. La explotación permite a un atacante remoto no autenticado omitir los controles de acceso basados en roles y sobrescribir etiquetas de dispositivos arbitrarias o deshabilitar controladores de comunicación, exponiendo entornos ICS/SCADA conectados a acciones posteriores. Esto puede permitir a un atacante manipular procesos físicos y dispositivos desconectados desde la HMI. Esto afecta a FUXA hasta la versión 1.2.9. Este problema ha sido parcheado en la versión 1.2.10 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "5811902D-CD7C-4D52-BD99-66EACBBB88FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-ggxw-g3cp-mgf8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25753",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T19:16:10.473",
      "lastModified" : "2026-02-11T19:03:15.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the password is known."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, la aplicación utiliza una contraseña predeterminada estática y codificada de forma rígida para todas las cuentas de estudiantes recién creadas. Esto resulta en una toma de control masiva de cuentas, permitiendo a cualquier atacante iniciar sesión como cualquier estudiante una vez que la contraseña es conocida."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-6537-cf56-j9w2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2062",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T19:16:10.750",
      "lastModified" : "2026-02-11T19:02:06.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_modify_bearer_response/sgwc_sxa_handle_session_modification_response of the component PGW S5U Address Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is f1bbd7b57f831e2a070780a7d8d5d4c73babdb59. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Open5GS hasta la versión 2.7.6. Esto afecta a la función sgwc_s5c_handle_modify_bearer_response/sgwc_sxa_handle_session_modification_response del componente PGW S5U Address Handler. La manipulación conduce a una desreferencia de puntero nulo. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. El identificador del parche es f1bbd7b57f831e2a070780a7d8d5d4c73babdb59. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.0",
            "matchCriteriaId" : "971CD190-C643-4F58-8D93-B44659693524"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/commit/f1bbd7b57f831e2a070780a7d8d5d4c73babdb59",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4257",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4257#issue-3787701521",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344622",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344622",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744719",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2063",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T19:16:10.950",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface. The manipulation of the argument ac_server results in os command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en D-Link DIR-823X 250416. Esta vulnerabilidad afecta código desconocido del archivo /goform/set_ac_server del componente Interfaz de Gestión Web. La manipulación del argumento ac_server resulta en inyección de comandos del sistema operativo. El ataque puede lanzarse remotamente. El exploit ha sido publicado y puede usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344623",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344623",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.744720",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1709",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-06T20:16:09.193",
      "lastModified" : "2026-03-05T20:58:02.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate."
      }, {
        "lang" : "es",
        "value" : "Se encontró un defecto en Keylime. El registrador de Keylime, desde la versión 7.12.0, no exige la autenticación de Transport Layer Security (TLS) del lado del cliente. Esta vulnerabilidad de omisión de autenticación permite a clientes no autenticados con acceso a la red realizar operaciones administrativas, incluyendo listar agentes, recuperar datos públicos de Trusted Platform Module (TPM) y eliminar agentes, al conectarse sin presentar un certificado de cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-322"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keylime:keylime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.12.0",
            "matchCriteriaId" : "ACE3AA5F-45C3-4431-A917-7F9AC642C6BF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34990D09-125F-48CA-B85E-9D9F0EB4BC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7DAD7C-9369-4A87-A1D0-4208D3AF0CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:10.0_aarch64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DBA47B-96D0-4EF3-A653-193B6BDCD795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:10.0_aarch64:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C78B63-6947-4580-BA46-8418C5FB10B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB056B47-1F45-4CE4-81F6-872F66C24C29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8492E227-C09E-4F51-8EAF-0F7BCCD41A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.0_s390x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8456B7-F13F-4E74-B610-F1301B738A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07C1C58-0E5F-4B56-9B8D-5DE67DB00F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FABD546-0E45-4A65-A2E5-50EC62B852E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.0_ppc64le:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D490B-E674-4957-BD84-B0615A06FBF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2224",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2225",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1709",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2435514",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22254",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:10.057",
      "lastModified" : "2026-02-20T21:03:13.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Versions of Winter CMS before 1.2.10 allow users with access to the CMS Asset Manager were able to upload SVGs without automatic sanitization. To actively exploit this security issue, an attacker would need access to the Backend with a user account with the following permission: cms.manage_assets. The Winter CMS maintainers strongly recommend that the cms.manage_assets permission only be reserved to trusted administrators and developers in general. This vulnerability is fixed in 1.2.10."
      }, {
        "lang" : "es",
        "value" : "Winter es un sistema de gestión de contenido (CMS) gratuito y de código abierto basado en el framework PHP Laravel. Las versiones de Winter CMS anteriores a la 1.2.10 permitían a los usuarios con acceso al Gestor de Activos del CMS subir SVGs sin sanitización automática. Para explotar activamente este problema de seguridad, un atacante necesitaría acceso al Backend con una cuenta de usuario con el siguiente permiso: cms.manage_assets. Los mantenedores de Winter CMS recomiendan encarecidamente que el permiso cms.manage_assets solo se reserve a administradores y desarrolladores de confianza en general. Esta vulnerabilidad está corregida en la 1.2.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wintercms:winter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "588A92F0-EBF4-4A9A-A0A3-8BD4F9FDA03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wintercms/winter/commit/8a7f74b004fcd19721764fc63af0cdb339d9fb65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wintercms/winter/releases/tag/v1.2.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wintercms/winter/security/advisories/GHSA-m7gw-rffq-rxjm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25520",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:10.440",
      "lastModified" : "2026-02-18T14:33:15.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be used to get an Array containing the host's Function constructor, by using Array.prototype.at you can obtain the hosts Function constructor, which can be used to execute arbitrary code outside of the sandbox. This vulnerability is fixed in 0.8.29."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una librería de sandboxing de JavaScript. Antes de 0.8.29, los valores de retorno de las funciones no están encapsulados. Object.values/Object.entries pueden usarse para obtener un Array que contiene el constructor Function del host; al usar Array.prototype.at se puede obtener el constructor Function del host, el cual puede usarse para ejecutar código arbitrario fuera del sandbox. Esta vulnerabilidad está corregida en 0.8.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.29",
            "matchCriteriaId" : "5822AD4C-2C8E-4196-9149-A626F0572E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/commit/67cb186c41c78c51464f70405504e8ef0a6e43c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-58jh-xv4v-pcx4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-58jh-xv4v-pcx4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25586",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:10.770",
      "lastModified" : "2026-02-18T14:32:36.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which disables prototype whitelist enforcement in the property-access path. This permits direct access to __proto__ and other blocked prototype properties, enabling host Object.prototype pollution and persistent cross-sandbox impact. This vulnerability is fixed in 0.8.29."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una librería de sandboxing de JavaScript. Antes de 0.8.29, es posible un escape del sandbox al sombrear hasOwnProperty en un objeto sandbox, lo que deshabilita la aplicación de la lista blanca de prototipos en la ruta de acceso a propiedades. Esto permite el acceso directo a __proto__ y otras propiedades de prototipo bloqueadas, lo que permite la contaminación del Object.prototype del host y un impacto persistente entre sandboxes. Esta vulnerabilidad está corregida en 0.8.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.29",
            "matchCriteriaId" : "5822AD4C-2C8E-4196-9149-A626F0572E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/commit/67cb186c41c78c51464f70405504e8ef0a6e43c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-jjpw-65fv-8g48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-jjpw-65fv-8g48",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25587",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:10.930",
      "lastModified" : "2026-02-18T14:31:17.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFE_PROTOYPES, it's prototype can be obtained via Map.prototype. By overwriting Map.prototype.has the sandbox can be escaped. This vulnerability is fixed in 0.8.29."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una librería de sandboxing de JavaScript. Antes de 0.8.29, como Map está en SAFE_PROTOYPES, su prototipo puede ser obtenido a través de Map.prototype. Al sobrescribir Map.prototype.has, el sandbox puede ser evadido. Esta vulnerabilidad está corregida en 0.8.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.29",
            "matchCriteriaId" : "5822AD4C-2C8E-4196-9149-A626F0572E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/commit/67cb186c41c78c51464f70405504e8ef0a6e43c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-66h4-qj4x-38xp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-66h4-qj4x-38xp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25640",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:11.110",
      "lastModified" : "2026-02-20T20:59:26.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to before 1.51.0,  a path traversal vulnerability in the Pydantic AI web UI allows an attacker to serve arbitrary JavaScript in the context of the application by crafting a malicious URL. In affected versions, the CDN URL is constructed using a version query parameter from the request URL. This parameter is not validated, allowing path traversal sequences that cause the server to fetch and serve attacker-controlled HTML/JavaScript from an arbitrary source on the same CDN, instead of the legitimate chat UI package. If a victim clicks the link or visits it via an iframe, attacker-controlled code executes in their browser, enabling theft of chat history and other client-side data. This vulnerability only affects applications that use Agent.to_web to serve a chat interface and clai web to serve a chat interface from the CLI. These are typically run locally (on localhost), but may also be deployed on a remote server. This vulnerability is fixed in 1.51.0."
      }, {
        "lang" : "es",
        "value" : "Pydantic AI es un framework de agente Python para construir aplicaciones y flujos de trabajo con IA Generativa. Desde la 1.34.0 hasta antes de la 1.51.0, una vulnerabilidad de salto de ruta en la interfaz de usuario web de Pydantic AI permite a un atacante servir JavaScript arbitrario en el contexto de la aplicación al crear una URL maliciosa. En las versiones afectadas, la URL de la CDN se construye utilizando un parámetro de consulta de versión de la URL de la solicitud. Este parámetro no se valida, lo que permite secuencias de salto de ruta que hacen que el servidor obtenga y sirva HTML/JavaScript controlado por el atacante desde una fuente arbitraria en la misma CDN, en lugar del paquete legítimo de la interfaz de usuario de chat. Si una víctima hace clic en el enlace o lo visita a través de un iframe, el código controlado por el atacante se ejecuta en su navegador, lo que permite el robo del historial de chat y otros datos del lado del cliente. Esta vulnerabilidad solo afecta a las aplicaciones que usan Agent.to_web para servir una interfaz de chat y clai web para servir una interfaz de chat desde la CLI. Estas suelen ejecutarse localmente (en localhost), pero también pueden implementarse en un servidor remoto. Esta vulnerabilidad se corrige en la 1.51.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pydantic:pydantic_ai:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "1.34.0",
            "versionEndExcluding" : "1.51.0",
            "matchCriteriaId" : "CD7C18E2-854E-44FD-A4AF-D4E580B67D98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pydantic/pydantic-ai/releases/tag/v1.51.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-wjp5-868j-wqv7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25641",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:11.263",
      "lastModified" : "2026-02-18T14:01:02.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch between the key on which the validation is performed and the key used for accessing properties. Even though the key used in property accesses is annotated as string, this is never enforced. So, attackers can pass malicious objects that coerce to different string values when used, e.g., one for the time the key is sanitized using hasOwnProperty(key) and a different one for when the key is used for the actual property access. This vulnerability is fixed in 0.8.29."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una librería de sandboxing de JavaScript. Antes de 0.8.29, existe una vulnerabilidad de escape de sandbox debido a una discrepancia entre la clave sobre la que se realiza la validación y la clave utilizada para acceder a las propiedades. Aunque la clave utilizada en los accesos a propiedades está anotada como string, esto nunca se aplica. Así, los atacantes pueden pasar objetos maliciosos que se convierten a diferentes valores de string cuando se usan, por ejemplo, uno para el momento en que la clave se sanea usando hasOwnProperty(key) y uno diferente para cuando la clave se usa para el acceso real a la propiedad. Esta vulnerabilidad está corregida en 0.8.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.29",
            "matchCriteriaId" : "5822AD4C-2C8E-4196-9149-A626F0572E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/blob/6103d7147c4666fe48cfda58a4d5f37005b43754/src/executor.ts#L304-L304",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/commit/67cb186c41c78c51464f70405504e8ef0a6e43c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-7x3h-rm86-3342",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-7x3h-rm86-3342",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25642",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:11.437",
      "lastModified" : "2026-02-25T14:45:01.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.6, files served below the /uploads/ endpoint did not use a more strict security-policy. This resulted in a too open Content-Security-Policy and furthermore opened the possibility to host malicious interactive web content (such as fake login forms) using SVG files. This vulnerability is fixed in 1.10.6."
      }, {
        "lang" : "es",
        "value" : "HedgeDoc es una aplicación de notas markdown de código abierto, en tiempo real y colaborativa. Antes de la versión 1.10.6, los archivos servidos bajo el endpoint /uploads/ no utilizaban una política de seguridad más estricta. Esto resultó en una Content-Security-Policy demasiado abierta y además abrió la posibilidad de alojar contenido web interactivo malicioso (como formularios de inicio de sesión falsos) utilizando archivos SVG. Esta vulnerabilidad está corregida en la versión 1.10.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hedgedoc:hedgedoc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.6",
            "matchCriteriaId" : "EAB0E1A5-8DC9-4EEB-ADA5-12A10143EE18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hedgedoc/hedgedoc/commit/74daa0e7a1cbfafd9aeb255eaf064dfe47cd401c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/commit/b930fe04cee92cd4723044030bb59c36781c7137",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/releases/tag/1.10.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-x74j-jmf9-534w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25643",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:11.607",
      "lastModified" : "2026-02-11T19:00:39.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc. The application does not sanitize user input in the video stream configuration (config.yaml), allowing direct injection of system commands via the exec: directive. The go2rtc service executes these commands without restrictions. This vulnerability is only exploitable by an administrator or users who have exposed their Frigate install to the open internet with no authentication which allows anyone full administrative control. This vulnerability is fixed in 0.16.4."
      }, {
        "lang" : "es",
        "value" : "Frigate es un grabador de video en red (NVR) con detección de objetos local en tiempo real para cámaras IP. Antes de la versión 0.16.4, se ha identificado una crítica vulnerabilidad de Ejecución Remota de Comandos (RCE) en la integración de Frigate con go2rtc. La aplicación no sanitiza la entrada del usuario en la configuración del flujo de video (config.yaml), permitiendo la inyección directa de comandos del sistema a través de la directiva exec:. El servicio go2rtc ejecuta estos comandos sin restricciones. Esta vulnerabilidad solo es explotable por un administrador o usuarios que han expuesto su instalación de Frigate a internet abierta sin autenticación, lo que permite a cualquiera un control administrativo total. Esta vulnerabilidad está corregida en la versión 0.16.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-250"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frigate:frigate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.16.4",
            "matchCriteriaId" : "AF9FEB51-0493-421E-9817-A5A88857FBD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakeblackshear/frigate/releases/tag/v0.16.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/blakeblackshear/frigate/security/advisories/GHSA-4c97-5jmr-8f6x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/blakeblackshear/frigate/security/advisories/GHSA-4c97-5jmr-8f6x",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25727",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T20:16:11.860",
      "lastModified" : "2026-02-24T15:23:35.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack."
      }, {
        "lang" : "es",
        "value" : "time proporciona manejo de fechas y horas en Rust. Desde la versión 0.3.6 hasta antes de la 0.3.47, cuando se proporciona una entrada del usuario a cualquier tipo que analiza el formato RFC 2822, es posible un ataque de denegación de servicio por agotamiento de la pila. El ataque se basa en características formalmente deprecadas y rara vez utilizadas que forman parte del formato RFC 2822, empleadas de manera maliciosa. Una entrada ordinaria y no maliciosa nunca encontrará este escenario. Se añadió un límite a la profundidad de recursión en la versión 0.3.47. A partir de esta versión, se devolverá un error en lugar de agotar la pila."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:time_project:time:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.3.6",
            "versionEndExcluding" : "0.3.47",
            "matchCriteriaId" : "7B1E36BA-97A9-44D1-8E88-2E5B96901D1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/time-rs/time/blob/main/CHANGELOG.md#0347-2026-02-05",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/time-rs/time/commit/1c63dc7985b8fa26bd8c689423cc56b7a03841ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/time-rs/time/releases/tag/v0.3.47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/time-rs/time/security/advisories/GHSA-r6v5-fh4h-64xc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2064",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T20:16:12.087",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/meusdadod.php of the component User Data Page. Such manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Portabilis i-Educar hasta 2.10. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /intranet/meusdadod.php del componente Página de Datos de Usuario. Tal manipulación del argumento File lleva a cross-site scripting. Es posible lanzar el ataque remotamente. El exploit está públicamente disponible y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.0",
            "matchCriteriaId" : "877348AB-B600-47B3-A565-8198483C6414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nmmorette/vulnerability-research/tree/main/XSS-Idiario",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2065",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T20:16:12.270",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Flycatcher Toys smART Pixelator 2.0. Affected by this issue is some unknown functionality of the component Bluetooth Low Energy Interface. Performing a manipulation results in missing authentication. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Flycatcher Toys smART Pixelator 2.0. Este problema afecta a alguna funcionalidad desconocida del componente Interfaz Bluetooth de Baja Energía. Al realizar una manipulación, se produce una falta de autenticación. El ataque solo puede realizarse desde la red local. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:flycatcher:smart_pixelator_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD283A87-7172-46D0-BE75-1A2FCE3A2977"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:flycatcher:smart_pixelator:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD72FCD-88D4-425D-980A-E8D7C7DB3122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/davidrxchester/smart-pixelator-upload",
        "source" : "cna@vuldb.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/davidrxchester/smart-pixelator-upload/blob/main/poc.py",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25580",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:17.167",
      "lastModified" : "2026-02-20T21:01:59.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially accessing internal services or cloud credentials. This vulnerability only affects applications that accept message history from external users. This vulnerability is fixed in 1.56.0."
      }, {
        "lang" : "es",
        "value" : "Pydantic AI es un framework de agente Python para construir aplicaciones y flujos de trabajo con IA Generativa. Desde la 0.0.26 hasta antes de la 1.56.0, existe una vulnerabilidad de Server-Side Request Forgery (SSRF) en la funcionalidad de descarga de URL de Pydantic AI. Cuando las aplicaciones aceptan el historial de mensajes de fuentes no confiables, los atacantes pueden incluir URL maliciosas que hacen que el servidor realice solicitudes HTTP a recursos de red internos, accediendo potencialmente a servicios internos o credenciales en la nube. Esta vulnerabilidad solo afecta a aplicaciones que aceptan el historial de mensajes de usuarios externos. Esta vulnerabilidad está corregida en la 1.56.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pydantic:pydantic_ai:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "0.0.26",
            "versionEndExcluding" : "1.56.0",
            "matchCriteriaId" : "AED125A7-1F54-4ACF-A702-6D4C09ABDE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pydantic/pydantic-ai/commit/d398bc9d39aecca6530fa7486a410d5cce936301",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-2jrp-274c-jhv3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25581",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:17.307",
      "lastModified" : "2026-02-19T17:23:19.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control configuration options passed to sceditor.create(), like emoticons, charset, etc. then it's possible for them to trigger an XSS attack due to lack of sanitisation of configuration options. This vulnerability is fixed in 3.2.1."
      }, {
        "lang" : "es",
        "value" : "SCEditor es un editor WYSIWYG BBCode y XHTML ligero. Antes de la 3.2.1, si un atacante tiene la capacidad de controlar las opciones de configuración pasadas a sceditor.create(), como emoticonos, charset, etc., entonces es posible que desencadenen un ataque XSS debido a la falta de saneamiento de las opciones de configuración. Esta vulnerabilidad está corregida en la 3.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sceditor:sceditor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "89A25EF0-A930-409D-A131-113C83E73F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/samclarke/SCEditor/commit/5733aed4f0e257cb78e1ba191715fc458cbd473d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/samclarke/SCEditor/security/advisories/GHSA-25fq-6qgg-qpj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25592",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:17.647",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in Microsoft.SemanticKernel.Core version 1.71.0. As a mitigation, users can create a Function Invocation Filter which checks the arguments being passed to any calls to DownloadFileAsync  or UploadFileAsync and ensures the provided localFilePath is allow listed."
      }, {
        "lang" : "es",
        "value" : "Semantic Kernel es un SDK utilizado para construir, orquestar y desplegar agentes de IA y sistemas multiagente. Antes de la versión 1.70.0, se ha identificado una vulnerabilidad de escritura arbitraria de archivos en el SDK .NET de Semantic Kernel de Microsoft, específicamente dentro del SessionsPythonPlugin. El problema ha sido solucionado en la versión 1.70.0 de Microsoft.SemanticKernel.Core. Como mitigación, los usuarios pueden crear un Filtro de Invocación de Función que verifica los argumentos que se pasan a cualquier llamada a DownloadFileAsync o UploadFileAsync y asegura que el localFilePath proporcionado esté en una lista de permitidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microsoft/semantic-kernel/blob/main/dotnet/samples/Demos/CodeInterpreterPlugin/Program.cs#L61-L64",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/microsoft/semantic-kernel/pull/13478/changes#diff-88d3cacba2bfa84eef8f2aa171b34f9940338cbb784a3ffc49f5fe3af1b8943d",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-2ww3-72rp-wpp4",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25593",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:17.790",
      "lastModified" : "2026-02-13T14:44:08.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling command injection as the gateway user. This vulnerability is fixed in 2026.1.20."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.1.20, un cliente local no autenticado podía usar la API WebSocket de Gateway para escribir la configuración a través de config.apply y establecer valores inseguros de cliPath que luego se usaban para el descubrimiento de comandos, lo que permitía la inyección de comandos como el usuario de gateway. Esta vulnerabilidad está corregida en la versión 2026.1.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.1.20",
            "matchCriteriaId" : "E5B8DFA8-AEDD-4BC1-A7FD-CE3673D8EDDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-g55j-c2v4-pjcg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25597",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:17.933",
      "lastModified" : "2026-02-19T17:27:30.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. This vulnerability is fixed in 8.2.4 and 9.0.3."
      }, {
        "lang" : "es",
        "value" : "PrestaShop es una aplicación web de comercio electrónico de código abierto. Antes de 8.2.4 y 9.0.3, existe una vulnerabilidad de enumeración de usuarios basada en tiempo en la funcionalidad de autenticación de usuarios de PrestaShop. Esta vulnerabilidad permite a un atacante determinar si una cuenta de cliente existe en el sistema midiendo los tiempos de respuesta. Esta vulnerabilidad está corregida en 8.2.4 y 9.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.4",
            "matchCriteriaId" : "8E0A201F-4217-4055-AE4E-D82693EEB90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.3",
            "matchCriteriaId" : "EAE3FA8E-5622-4234-AE14-AD4FE451357C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/9.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-67v7-3g49-mxh2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25628",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:18.083",
      "lastModified" : "2026-02-19T17:45:58.093",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (read-only access). This vulnerability is fixed in 1.16.0."
      }, {
        "lang" : "es",
        "value" : "Qdrant es un motor de búsqueda de similitud vectorial y una base de datos vectorial. Desde la versión 1.9.3 hasta antes de la 1.16.0, es posible añadir contenido a archivos arbitrarios a través del endpoint /logger utilizando una ruta on_disk.log_file controlada por el atacante. Se requieren privilegios mínimos (acceso de solo lectura). Esta vulnerabilidad está corregida en la versión 1.16.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qdrant:qdrant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.3",
            "versionEndIncluding" : "1.16.0",
            "matchCriteriaId" : "56056537-A590-4EC8-8605-91E6624A23A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qdrant/qdrant/blob/48203e414e4e7f639a6d394fb6e4df695f808e51/src/actix/api/service_api.rs#L195",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/qdrant/qdrant/commit/32b7fdfb7f542624ecd1f7c8d3e2b13c4e36a2c1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/qdrant/qdrant/security/advisories/GHSA-f632-vm87-2m2f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25631",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:18.230",
      "lastModified" : "2026-02-19T17:51:02.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated attacker to send requests with credentials to unintended domains, potentially leading to credential exfiltration. This only might affect user who have credentials that use wildcard domain patterns (e.g., *.example.com) in the \"Allowed domains\" setting. This issue is fixed in version 1.121.0 and later."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de la versión 1.121.0, existe una vulnerabilidad en la validación de dominio de credenciales del nodo de Solicitud HTTP que permitía a un atacante autenticado enviar solicitudes con credenciales a dominios no deseados, lo que podría llevar a la exfiltración de credenciales. Esto solo podría afectar a usuarios que tienen credenciales que utilizan patrones de dominio comodín (por ejemplo, *.example.com) en la configuración de 'Dominios permitidos'. Este problema está solucionado en la versión 1.121.0 y posteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.121.0",
            "matchCriteriaId" : "51C9C1AF-7118-42A5-A973-CA66FE251756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-2xcx-75h9-vr9h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25632",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:18.377",
      "lastModified" : "2026-03-18T15:14:50.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water distribution networks. Prior to 0.16.1, EPyT-Flow’s REST API parses attacker-controlled JSON request bodies using a custom deserializer (my_load_from_json) that supports a type field. When type is present, the deserializer dynamically imports an attacker-specified module/class and instantiates it with attacker-supplied arguments. This allows invoking dangerous classes such as subprocess.Popen, which can lead to OS command execution during JSON parsing. This also affects the loading of JSON files. This vulnerability is fixed in 0.16.1."
      }, {
        "lang" : "es",
        "value" : "EPyT-Flow es un paquete de Python diseñado para la fácil generación de datos de escenarios hidráulicos y de calidad del agua de redes de distribución de agua. Antes de la versión 0.16.1, la API REST de EPyT-Flow analiza cuerpos de solicitud JSON controlados por el atacante utilizando un deserializador personalizado (my_load_from_json) que soporta un campo type. Cuando type está presente, el deserializador importa dinámicamente un módulo/clase especificado por el atacante y lo instancia con argumentos proporcionados por el atacante. Esto permite invocar clases peligrosas como subprocess.Popen, lo que puede llevar a la ejecución de comandos del sistema operativo durante el análisis JSON. Esto también afecta la carga de archivos JSON. Esta vulnerabilidad está corregida en la versión 0.16.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:waterfutures:epyt-flow:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.16.1",
            "matchCriteriaId" : "58884503-AFDE-408F-994A-A94C23E8AC3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WaterFutures/EPyT-Flow/commit/3fff9151494c7dbc72073830b734f0a7e550e385",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WaterFutures/EPyT-Flow/releases/tag/v0.16.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/WaterFutures/EPyT-Flow/security/advisories/GHSA-74vm-8frp-7w68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25634",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:18.530",
      "lastModified" : "2026-02-19T17:55:29.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Apply() int IccTagMPE.cpp. This vulnerability is fixed in 2.3.1.4."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas que permiten la interacción, manipulación y aplicación de perfiles de gestión de color ICC. Antes de la versión 2.3.1.4, los búferes de pila SrcPixel y DestPixel se superponen en CIccTagMultiProcessElement::Apply() en IccTagMPE.cpp. Esta vulnerabilidad se corrige en la versión 2.3.1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-123"
        }, {
          "lang" : "en",
          "value" : "CWE-628"
        }, {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1.4",
            "matchCriteriaId" : "2AA25C48-3EE4-4FEB-9C10-6D32BFABD814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/9206e0b8684e4cf4186d9ae768f16760bc1af9ff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/577",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/579",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/releases/tag/v2.3.1.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-35rg-jcmp-583h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25635",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:18.690",
      "lastModified" : "2026-02-17T21:27:17.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this can lead to Remote Code Execution by writing a payload to the Startup folder, which executes on next login. This vulnerability is fixed in 9.2.0."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos. Antes de la 9.2.0, el lector CHM de Calibre contiene una vulnerabilidad de salto de ruta que permite la escritura arbitraria de archivos en cualquier lugar donde el usuario tenga permisos de escritura. En Windows (no se ha probado en otros sistemas operativos), esto puede llevar a la ejecución remota de código escribiendo una carga útil en la carpeta de Inicio, que se ejecuta en el siguiente inicio de sesión. Esta vulnerabilidad se corrigió en la 9.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "264BDA56-70BE-4FCE-96AD-7F9D1BA0FB54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/commit/9739232fcb029ac15dfe52ccd4fdb4a07ebb6ce9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-32vh-whvh-9fxr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://0x5t.raptx.org/posts/calibre-chm-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25636",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:18.833",
      "lastModified" : "2026-02-17T21:23:11.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to an absolute filesystem path and opens it in read-write mode, even when it points outside the conversion extraction directory. This vulnerability is fixed in 9.2.0."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos. En 9.1.0 y versiones anteriores, una vulnerabilidad de salto de ruta en la conversión de EPUB de Calibre permite que un archivo EPUB malicioso corrompa archivos existentes arbitrarios escribibles por el proceso de Calibre. Durante la conversión, Calibre resuelve la URI de CipherReference de META-INF/encryption.xml a una ruta de sistema de archivos absoluta y lo abre en modo de lectura-escritura, incluso cuando apunta fuera del directorio de extracción de la conversión. Esta vulnerabilidad está corregida en 9.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "264BDA56-70BE-4FCE-96AD-7F9D1BA0FB54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/commit/9484ea82c6ab226c18e6ca5aa000fa16de598726",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-8r26-m7j5-hm29",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://0x5t.raptx.org/posts/calibre-epub-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25729",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:19.313",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DeepAudit is a multi-agent system for code vulnerability discovery. In 3.0.4 and earlier, there is an improper access control vulnerability in the /api/v1/users/ endpoint allows any authenticated user to enumerate all users in the system and retrieve sensitive information including email addresses, phone numbers, full names, and role information."
      }, {
        "lang" : "es",
        "value" : "DeepAudit es un sistema multiagente para el descubrimiento de vulnerabilidades de código. En 3.0.4 y anteriores, existe una vulnerabilidad de control de acceso inadecuado en el endpoint /api/v1/users/ que permite a cualquier usuario autenticado enumerar todos los usuarios del sistema y recuperar información sensible, incluyendo direcciones de correo electrónico, números de teléfono, nombres completos e información de rol."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lintsinghua:deepaudit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.4",
            "matchCriteriaId" : "1E3DCDDE-E9D3-47F8-B564-C4491EC31495"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lintsinghua/DeepAudit/commit/b2a3b26579d3fdbab5236ae12ed67ae2313175fd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lintsinghua/DeepAudit/security/advisories/GHSA-vmmm-48w2-q56q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25731",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T21:16:19.457",
      "lastModified" : "2026-02-17T21:18:56.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via the --template-html or --template-html-index command-line options. This vulnerability is fixed in 9.2.0."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos. Antes de la versión 9.2.0, una vulnerabilidad de inyección de plantillas del lado del servidor (SSTI) en el motor de plantillas Templite de Calibre permite la ejecución de código arbitrario cuando un usuario convierte un libro electrónico utilizando un archivo de plantilla personalizado malicioso a través de las opciones de línea de comandos --template-html o --template-html-index. Esta vulnerabilidad está corregida en la versión 9.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "264BDA56-70BE-4FCE-96AD-7F9D1BA0FB54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/commit/f0649b27512e987b95fcab2e1e0a3bcdafc23379",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-xrh9-w7qx-3gcc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2066",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T21:16:19.733",
      "lastModified" : "2026-02-10T15:11:28.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UTT ?? 520W 1.7.7-180627. Esto afecta a la función strcpy del archivo /goform/formIpGroupConfig. La ejecución de una manipulación del argumento groupName puede conducir a un desbordamiento de búfer. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:1.7.7-180627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E0E55-A7EE-4B95-8584-41F4FCED4B64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/36.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/36.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745260",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2067",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T21:16:19.917",
      "lastModified" : "2026-02-10T15:11:17.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTimeGroupConfig. The manipulation of the argument year1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en UTT ?? 520W 1.7.7-180627. Esta vulnerabilidad afecta la función strcpy del archivo /goform/formTimeGroupConfig. La manipulación del argumento year1 conduce a desbordamiento de búfer. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:1.7.7-180627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E0E55-A7EE-4B95-8584-41F4FCED4B64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/37.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/37.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1727",
      "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
      "published" : "2026-02-06T22:16:10.860",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized for error logs and temporary staging during data imports from GCS and Cloud SQL. This predictability allowed an attacker to engage in \"bucket squatting\" by establishing these buckets before a victim's initial use.\n\nAll versions after December 12th, 2025 have been updated to protect from this vulnerability. No user action is required for this."
      }, {
        "lang" : "es",
        "value" : "El servicio Agentspace se vio afectado por una vulnerabilidad que expuso información sensible debido al uso de nombres predecibles para los buckets de Google Cloud Storage. Estos nombres se utilizaron para registros de errores y preparación temporal durante las importaciones de datos desde GCS y Cloud SQL. Esta predictibilidad permitió a un atacante participar en 'bucket squatting' al establecer estos buckets antes del uso inicial de una víctima.\n\nTodas las versiones posteriores al 12 de diciembre de 2025 se han actualizado para protegerse de esta vulnerabilidad. No se requiere ninguna acción del usuario para esto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "CLEAR"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloud.google.com/gemini/enterprise/docs/release-notes#February_06_2026",
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1731",
      "sourceIdentifier" : "13061848-ea10-403d-bd75-c83a022c2891",
      "published" : "2026-02-06T22:16:11.020",
      "lastModified" : "2026-02-17T13:40:10.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user."
      }, {
        "lang" : "es",
        "value" : "BeyondTrust Remote Support (RS) y ciertas versiones anteriores de Privileged Remote Access (PRA) contienen una crítica vulnerabilidad de ejecución remota de código de pre-autenticación. Al enviar solicitudes especialmente diseñadas, un atacante remoto no autenticado podría ejecutar comandos del sistema operativo en el contexto del usuario del sitio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "13061848-ea10-403d-bd75-c83a022c2891",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-13",
      "cisaActionDue" : "2026-02-16",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "13061848-ea10-403d-bd75-c83a022c2891",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.1",
            "matchCriteriaId" : "A82D26FE-8791-41BC-A71B-4C2FEB81C41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.3.2",
            "matchCriteriaId" : "178845B4-26D3-4C94-AED9-1C847B9357F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0023293",
        "source" : "13061848-ea10-403d-bd75-c83a022c2891",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.beyondtrust.com/trust-center/security-advisories/bt26-02",
        "source" : "13061848-ea10-403d-bd75-c83a022c2891",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/win3zz/CVE-2026-1731",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1731",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.greynoise.io/blog/reconnaissance-beyondtrust-rce-cve-2026-1731",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25123",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:11.153",
      "lastModified" : "2026-02-18T18:08:19.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Homarr is an open-source dashboard. Prior to 1.52.0, a public (unauthenticated) tRPC endpoint widget.app.ping accepts an arbitrary url and performs a server-side request to that URL. This allows an unauthenticated attacker to trigger outbound HTTP requests from the Homarr server, enabling SSRF behavior and a reliable port-scanning primitive (open vs closed ports can be inferred from statusCode vs fetch failed and timing). This vulnerability is fixed in 1.52.0."
      }, {
        "lang" : "es",
        "value" : "Homarr es un panel de control de código abierto. Antes de la versión 1.52.0, un endpoint tRPC público (no autenticado) widget.app.ping acepta una URL arbitraria y realiza una solicitud del lado del servidor a esa URL. Esto permite a un atacante no autenticado activar solicitudes HTTP salientes desde el servidor de Homarr, lo que habilita el comportamiento SSRF y una primitiva fiable de escaneo de puertos (los puertos abiertos frente a los cerrados pueden inferirse del código de estado frente a la falla de la solicitud y el tiempo). Esta vulnerabilidad está corregida en la versión 1.52.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:homarr:homarr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.52.0",
            "matchCriteriaId" : "A87B1EAB-AF23-4E1E-A33B-D84AA170D817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/homarr-labs/homarr/security/advisories/GHSA-c6rh-8wj4-gv74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25516",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:11.300",
      "lastModified" : "2026-02-20T15:43:23.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. The ui.markdown() component uses the markdown2 library to convert markdown content to HTML, which is then rendered via innerHTML. By default, markdown2 allows raw HTML to pass through unchanged. This means that if an application renders user-controlled content through ui.markdown(), an attacker can inject malicious HTML containing JavaScript event handlers. Unlike other NiceGUI components that render HTML (ui.html(), ui.chat_message(), ui.interactive_image()), the ui.markdown() component does not provide or require a sanitize parameter, leaving applications vulnerable to XSS attacks. This vulnerability is fixed in 3.7.0."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de interfaz de usuario (UI) basado en Python. El componente ui.markdown() utiliza la biblioteca markdown2 para convertir contenido markdown a HTML, que luego se renderiza a través de innerHTML. Por defecto, markdown2 permite que el HTML sin procesar pase sin cambios. Esto significa que si una aplicación renderiza contenido controlado por el usuario a través de ui.markdown(), un atacante puede inyectar HTML malicioso que contenga manejadores de eventos de JavaScript. A diferencia de otros componentes de NiceGUI que renderizan HTML (ui.html(), ui.chat_message(), ui.interactive_image()), el componente ui.markdown() no proporciona ni requiere un parámetro de saneamiento, dejando las aplicaciones vulnerables a ataques XSS. Esta vulnerabilidad se corrige en la versión 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.0",
            "matchCriteriaId" : "68362D51-C57A-4D2E-A22C-8BAA68A4CBD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/commit/f1f7533577875af7d23f161ed3627f73584cb561",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-v82v-c5x8-w282",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25533",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:11.450",
      "lastModified" : "2026-02-20T21:06:58.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar behavior or the vm module and the function constructor access prevention can be side-stepped by leveraging host object references. This vulnerability is fixed in 2.10.1."
      }, {
        "lang" : "es",
        "value" : "Enclave es un sandbox seguro de JavaScript diseñado para la ejecución segura de código de agentes de IA. Antes de 2.10.1, las capas de seguridad existentes en enclave-vm son insuficientes: La sanitización AST puede ser eludida con accesos dinámicos a propiedades, el endurecimiento de los objetos de error no cubre el comportamiento peculiar o del módulo vm y la prevención de acceso al constructor de funciones puede ser eludida aprovechando referencias a objetos del host. Esta vulnerabilidad está corregida en 2.10.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentfront:enclave:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "B0AEA41C-F6D1-4981-A259-DFD61CBF362F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/agentfront/enclave/commit/2fcf5da81e7e2578ede6f94cae4f379165426dca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/agentfront/enclave/security/advisories/GHSA-x39w-8vm5-5m3p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.staicu.org/publications/usenixSec2023-SandDriller.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25544",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:11.597",
      "lastModified" : "2026-02-20T20:14:42.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Payload is a free and open source headless content management system. Prior to 3.73.0, when querying JSON or richText fields, user input was directly embedded into SQL without escaping, enabling blind SQL injection attacks. An unauthenticated attacker could extract sensitive data (emails, password reset tokens) and achieve full account takeover without password cracking. This vulnerability is fixed in 3.73.0."
      }, {
        "lang" : "es",
        "value" : "Payload es un sistema de gestión de contenido 'headless' de código abierto y gratuito. Antes de la versión 3.73.0, al consultar campos JSON o richText, la entrada del usuario se incrustaba directamente en SQL sin escapar, lo que permitía ataques de inyección SQL ciega. Un atacante no autenticado podría extraer datos sensibles (correos electrónicos, tokens de restablecimiento de contraseña) y lograr una toma de control completa de la cuenta sin descifrar contraseñas. Esta vulnerabilidad está corregida en la versión 3.73.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payloadcms:payload:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.73.0",
            "matchCriteriaId" : "D8DFE235-8E7F-495B-B4A1-B7B6EDD2A988"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/payloadcms/payload/security/advisories/GHSA-xx6w-jxg9-2wh8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25574",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:11.740",
      "lastModified" : "2026-02-20T20:14:13.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-collection Insecure Direct Object Reference (IDOR) vulnerability exists in the payload-preferences internal collection. In multi-auth collection environments using Postgres or SQLite with default serial/auto-increment IDs, authenticated users from one auth collection can read and delete preferences belonging to users in different auth collections when their numeric IDs collide. This vulnerability has been patched in v3.74.0."
      }, {
        "lang" : "es",
        "value" : "Payload es un sistema de gestión de contenido sin interfaz, de código abierto y gratuito. Antes de la versión 3.74.0, existe una vulnerabilidad de Referencia Directa Insegura a Objeto (IDOR) entre colecciones en la colección interna payload-preferences. En entornos de colecciones de autenticación múltiple que utilizan Postgres o SQLite con IDs seriales/auto-incrementales predeterminados, los usuarios autenticados de una colección de autenticación pueden leer y eliminar preferencias que pertenecen a usuarios en diferentes colecciones de autenticación cuando sus IDs numéricos colisionan. Esta vulnerabilidad ha sido parcheada en la versión 3.74.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payloadcms:payload:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.74.0",
            "matchCriteriaId" : "5EE81572-2333-46CC-B577-ED74968D43D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/payloadcms/payload/security/advisories/GHSA-jq29-r496-r955",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25732",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:11.993",
      "lastModified" : "2026-02-20T15:44:09.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal when developers use the pattern UPLOAD_DIR / file.name. Malicious filenames containing ../ sequences allow attackers to write files outside intended directories, with potential for remote code execution through application file overwrites in vulnerable deployment patterns. This design creates a prevalent security footgun affecting applications following common community patterns. Note: Exploitation requires application code incorporating file.name into filesystem paths without sanitization. Applications using fixed paths, generated filenames, or explicit sanitization are not affected. This vulnerability is fixed in 3.7.0."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de UI basado en Python. Antes de la versión 3.7.0, la propiedad FileUpload.name de NiceGUI expone metadatos de nombre de archivo proporcionados por el cliente sin sanitización, lo que permite el salto de ruta cuando los desarrolladores usan el patrón UPLOAD_DIR / file.name. Nombres de archivo maliciosos que contienen secuencias ../ permiten a los atacantes escribir archivos fuera de los directorios previstos, con potencial de ejecución remota de código a través de la sobrescritura de archivos de la aplicación en patrones de despliegue vulnerables. Este diseño crea un riesgo de seguridad autoinducido prevalente que afecta a las aplicaciones que siguen patrones comunes de la comunidad. Nota: La explotación requiere código de aplicación que incorpore file.name en las rutas del sistema de archivos sin sanitización. Las aplicaciones que usan rutas fijas, nombres de archivo generados o sanitización explícita no se ven afectadas. Esta vulnerabilidad está corregida en la versión 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.0",
            "matchCriteriaId" : "68362D51-C57A-4D2E-A22C-8BAA68A4CBD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/blob/main/nicegui/elements/upload_files.py#L110-L115",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/blob/main/nicegui/elements/upload_files.py#L79-L82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-9ffm-fxg3-xrhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25758",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:12.133",
      "lastModified" : "2026-02-19T18:01:26.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spree is an open source e-commerce solution built with Ruby on Rails. A critical IDOR vulnerability exists in Spree Commerce's guest checkout flow that allows any guest user to bind arbitrary guest addresses to their order by manipulating address ID parameters. This enables unauthorized access to other guests' personally identifiable information (PII) including names, addresses and phone numbers. The vulnerability bypasses existing ownership validation checks and affects all guest checkout transactions. This vulnerability is fixed in 4.10.3, 5.0.8, 5.1.10, 5.2.7, and 5.3.2."
      }, {
        "lang" : "es",
        "value" : "Spree es una solución de comercio electrónico de código abierto construida con Ruby on Rails. Existe una vulnerabilidad IDOR crítica en el flujo de pago como invitado de Spree Commerce que permite a cualquier usuario invitado vincular direcciones de invitado arbitrarias a su pedido manipulando los parámetros de ID de dirección. Esto permite el acceso no autorizado a la información de identificación personal (PII) de otros invitados, incluyendo nombres, direcciones y números de teléfono. La vulnerabilidad elude las comprobaciones de validación de propiedad existentes y afecta a todas las transacciones de pago como invitado. Esta vulnerabilidad está corregida en 4.10.3, 5.0.8, 5.1.10, 5.2.7 y 5.3.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10.3",
            "matchCriteriaId" : "4003CD89-3C79-4680-AB60-106F88C01468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.8",
            "matchCriteriaId" : "CE1D7F8C-4F16-4DD4-8561-25C728863066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.10",
            "matchCriteriaId" : "454F517E-0713-43E7-93A3-5E4B29CCEEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.7",
            "matchCriteriaId" : "44109CC9-7DC9-4F90-829A-8C7DBEDD1837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.2",
            "matchCriteriaId" : "06654012-3233-4397-AC59-065A17513649"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spree/spree/blob/1341623f2ae92685cdbe232885bf5808fc8f9ca8/core/app/models/spree/order/address_book.rb#L16-L38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/blob/1341623f2ae92685cdbe232885bf5808fc8f9ca8/core/app/models/spree/order/checkout.rb#L241-L254",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/blob/1341623f2ae92685cdbe232885bf5808fc8f9ca8/core/app/services/spree/checkout/update.rb#L33-L48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/blob/1341623f2ae92685cdbe232885bf5808fc8f9ca8/core/lib/spree/permitted_attributes.rb#L92-L96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/15619618e43b367617ec8d2d4aafc5e54fa7b734",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/29282d1565ba4f7bc2bbc47d550e2c0c6d0ae59f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/6650f96356faa0d16c05bcb516f1ffd5641741b8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/902d301ac83fd2047db1b9a3a99545162860f748",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/ff7cfcfcfe0c40c60d03317e1d0ee361c6a6b054",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/security/advisories/GHSA-87fh-rc96-6fr6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25760",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:12.277",
      "lastModified" : "2026-02-19T18:02:59.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path traversal / arbitrary file read issue, and it can expose credentials, configs, and keys. This vulnerability is fixed in 1.6.11."
      }, {
        "lang" : "es",
        "value" : "Sliver es un framework de comando y control que utiliza un netstack Wireguard personalizado. Anterior a 1.6.11, un salto de ruta en el subsistema de contenido del sitio web permite a un operador autenticado leer archivos arbitrarios en el host del servidor Sliver. Esto es un problema de salto de ruta autenticado / lectura de archivos arbitrarios, y puede exponer credenciales, configuraciones y claves. Esta vulnerabilidad está corregida en 1.6.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bishopfox:sliver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.11",
            "matchCriteriaId" : "9D797281-52C3-452C-8CAA-7E358D81CD3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BishopFox/sliver/commit/818127349ccec812876693c4ca74ebf4350ec6b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BishopFox/sliver/security/advisories/GHSA-2286-hxv5-cmp2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25763",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:12.420",
      "lastModified" : "2026-02-13T19:07:56.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an arbitrary file write vulnerability exists in OpenProject’s repository changes endpoint (/projects/:project_id/repository/changes) when rendering the “latest changes” view via git log. By supplying a specially crafted rev value (for example, rev=--output=/tmp/poc.txt), an attacker can inject git log command-line options. When OpenProject executes the SCM command, Git interprets the attacker-controlled rev as an option and writes the output to an attacker-chosen path. As a result, any user with the :browse_repository permission on the project can create or overwrite arbitrary files that the OpenProject process user is permitted to write. The written contents consist of git log output, but by crafting custom commits the attacker can still upload valid shell scripts, ultimately leading to RCE. The RCE lets the attacker create a reverse shell to the target host and view confidential files outside of OpenProject, such as /etc/passwd. This issue has been patched in versions 16.6.7 and 17.0.3."
      }, {
        "lang" : "es",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an arbitrary file write vulnerability exists in OpenProject’s repository changes endpoint (/projects/:project_id/repository/changes) when rendering the “latest changes” view via git log. By supplying a specially crafted rev value (for example, rev=--output=/tmp/poc.txt), an attacker can inject git log command-line options. When OpenProject executes the SCM command, Git interprets the attacker-controlled rev as an option and writes the output to an attacker-chosen path. As a result, any user with the :browse_repository permission on the project can create or overwrite arbitrary files that the OpenProject process user is permitted to write. The written contents consist of git log output, but by crafting custom commits the attacker can still upload valid shell scripts, ultimately leading to RCE. The RCE lets the attacker create a reverse shell to the target host and view confidential files outside of OpenProject, such as /etc /passwd. This issue has been patched in versions 16.6.7 and 17.0.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.7",
            "matchCriteriaId" : "A92A6956-8428-458E-8CDC-87124CB065F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.3",
            "matchCriteriaId" : "C23460A0-11DE-4F88-A751-5A776EEF6D87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-x37c-hcg5-r5m7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25764",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T22:16:12.560",
      "lastModified" : "2026-02-13T19:04:45.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an HTML injection vulnerability occurs in the time tracking function of OpenProject. The application does not escape HTML tags, an attacker with administrator privileges can create a work package with the name containing the HTML tags and add it to the Work package section when creating time tracking. This issue has been patched in versions 16.6.7 and 17.0.3."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Antes de las versiones 16.6.7 y 17.0.3, una vulnerabilidad de inyección HTML ocurre en la función de seguimiento de tiempo de OpenProject. La aplicación no escapa las etiquetas HTML, un atacante con privilegios de administrador puede crear un paquete de trabajo con el nombre que contiene las etiquetas HTML y añadirlo a la sección de Paquetes de trabajo al crear el seguimiento de tiempo. Este problema ha sido parcheado en las versiones 16.6.7 y 17.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.7",
            "matchCriteriaId" : "A92A6956-8428-458E-8CDC-87124CB065F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.3",
            "matchCriteriaId" : "C23460A0-11DE-4F88-A751-5A776EEF6D87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v16.6.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-q523-c695-h3hp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2068",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T22:16:12.710",
      "lastModified" : "2026-02-13T18:56:31.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en UTT ?? 520W 1.7.7-180627. Este problema afecta la función strcpy del archivo /goform/formSyslogConf. La manipulación del argumento ServerIp resulta en desbordamiento de búfer. El ataque puede ser lanzado remotamente. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:1.7.7-180627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E0E55-A7EE-4B95-8584-41F4FCED4B64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/38.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/38.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2069",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T22:16:12.883",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes stack-based buffer overflow. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 18993. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en ggml-org llama.cpp hasta 55abc39. La función afectada es llama_grammar_advance_stack del archivo llama.cpp/src/llama-grammar.cpp del componente GBNF Grammar Handler. Esta manipulación causa desbordamiento de búfer basado en pila. El ataque necesita ser lanzado localmente. El exploit ha sido publicado y puede ser usado. Nombre del parche: 18993. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ggml-org/llama.cpp/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/ggml-org/llama.cpp/issues/18988",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/ggml-org/llama.cpp/issues/18988#event-4426704865",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/ggml-org/llama.cpp/pull/18993",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/user-attachments/files/24761101/poc.zip",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344636",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344636",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.745263",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25644",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.077",
      "lastModified" : "2026-02-20T21:03:18.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8."
      }, {
        "lang" : "es",
        "value" : "DataHub es una plataforma de metadatos de código abierto. Antes de la versión 1.3.1.8, la fuente de ingesta LDAP es vulnerable a un ataque MitM mediante degradación de TLS. Este problema ha sido parcheado en la versión 1.3.1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1.8",
            "matchCriteriaId" : "65F176DB-8B6C-4A60-9BAE-A34785A4C8E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-j34h-x7qg-4qw5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25749",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.230",
      "lastModified" : "2026-02-20T15:45:19.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto de línea de comandos. Antes de la versión 9.1.2132, existe una vulnerabilidad de desbordamiento de búfer de pila en la lógica de resolución de archivos de etiquetas de Vim al procesar la opción 'helpfile'. La vulnerabilidad se encuentra en la función get_tagfname() en src/tag.c. Al procesar etiquetas de archivos de ayuda, Vim copia el valor de la opción 'helpfile' controlado por el usuario en un búfer de pila de tamaño fijo de MAXPATHL + 1 bytes (típicamente 4097 bytes) utilizando una operación STRCPY() insegura sin ninguna comprobación de límites. Este problema ha sido parcheado en la versión 9.1.2132."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.2132",
            "matchCriteriaId" : "2023836A-3D6F-41D5-905A-7A0E8C1AA874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.1.2132",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25754",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.390",
      "lastModified" : "2026-03-17T20:42:28.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a remote attacker to manipulate object prototypes at runtime. This issue has been patched in versions 10.1.3 and 11.0.0-next.9."
      }, {
        "lang" : "es",
        "value" : "AdonisJS es un framework web con prioridad en TypeScript. Antes de las versiones 10.1.3 y 11.0.0-next.9, una vulnerabilidad de contaminación de prototipos en el análisis de datos de formulario multipart de AdonisJS podría permitir a un atacante remoto manipular prototipos de objetos en tiempo de ejecución. Este problema ha sido parcheado en las versiones 10.1.3 y 11.0.0-next.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.1.3",
            "matchCriteriaId" : "A2D0EAB1-2749-484C-8CF3-C51E5E934279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.1.4",
            "versionEndExcluding" : "11.0.0",
            "matchCriteriaId" : "020CFEB2-5732-42CA-B05A-5BE722B7EC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E7CB148B-B37C-4BAB-8F9A-B2E028FDE19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "250E3E4D-B54A-4AD9-93C0-D26DE41B8CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2DFE6131-7D0C-4B69-B4C0-F77BA58E9F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "99B68074-366C-4B96-909D-E49DFE3D240A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "349D208E-B74B-4BEE-9958-9E9FC7BB73BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "51559F52-A6DF-4CD4-A763-36AA17AFB0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FCDAA05D-1138-4C7B-9AA8-1627996390C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0C3D4CD4-4DF6-440B-9D4D-E0E36273434A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/adonisjs/bodyparser/commit/40e1c71f958cffb74f6b91bed6630dca979062ed",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/adonisjs/bodyparser/releases/tag/v11.0.0-next.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/adonisjs/core/security/advisories/GHSA-f5x2-vj4h-vg4c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25757",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.527",
      "lastModified" : "2026-02-23T17:40:58.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 5.0.8, 5.1.10, 5.2.7, and 5.3.2, unauthenticated users can view completed guest orders by Order ID. This issue may lead to disclosure of PII of guest users (including names, addresses and phone numbers). This issue has been patched in versions 5.0.8, 5.1.10, 5.2.7, and 5.3.2."
      }, {
        "lang" : "es",
        "value" : "Spree es una solución de comercio electrónico de código abierto construida con Ruby on Rails. Antes de las versiones 5.0.8, 5.1.10, 5.2.7 y 5.3.2, los usuarios no autenticados pueden ver pedidos de invitados completados mediante el ID de pedido. Este problema puede llevar a la divulgación de PII de usuarios invitados (incluyendo nombres, direcciones y números de teléfono). Este problema ha sido parcheado en las versiones 5.0.8, 5.1.10, 5.2.7 y 5.3.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.8",
            "matchCriteriaId" : "98910FEE-BD94-4433-8F48-2BA39FDFDDB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.10",
            "matchCriteriaId" : "454F517E-0713-43E7-93A3-5E4B29CCEEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.7",
            "matchCriteriaId" : "44109CC9-7DC9-4F90-829A-8C7DBEDD1837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spreecommerce:spree:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.2",
            "matchCriteriaId" : "06654012-3233-4397-AC59-065A17513649"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spree/spree/blob/1341623f2ae92685cdbe232885bf5808fc8f9ca8/storefront/app/controllers/spree/orders_controller.rb#L14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/blob/1341623f2ae92685cdbe232885bf5808fc8f9ca8/storefront/app/controllers/spree/orders_controller.rb#L51C1-L55C8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/blob/a878eb4a782ce0445d218ea86fb12075b0e3d7cc/core/lib/spree/core/number_generator.rb#L45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/3e00be64c128ef4bd4b99731f0c3ab469509cfab",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/6b32ed7d474aa55fa441990e6aa39740152aa1be",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/6f6b8a7a28a8bff24a6e20eab04b4bbbdf39384d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/commit/ea4a5db590ca753dbc986f2a4e818d9e0edfb1ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/spree/spree/security/advisories/GHSA-p6pv-q7rc-g4h9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25762",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.670",
      "lastModified" : "2026-03-17T20:43:40.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vulnerability exists in the multipart file handling logic of @adonisjs/bodyparser. When processing file uploads, the multipart parser may accumulate an unbounded amount of data in memory while attempting to detect file types, potentially leading to excessive memory consumption and process termination. This issue has been patched in versions 10.1.3 and 11.0.0-next.9."
      }, {
        "lang" : "es",
        "value" : "AdonisJS es un framework web TypeScript-first. Antes de las versiones 10.1.3 y 11.0.0-next.9, existe una vulnerabilidad de denegación de servicio (DoS) en la lógica de manejo de archivos multipart de @adonisjs/bodyparser. Al procesar cargas de archivos, el analizador multipart puede acumular una cantidad ilimitada de datos en memoria mientras intenta detectar tipos de archivo, lo que podría llevar a un consumo excesivo de memoria y a la terminación del proceso. Este problema ha sido parcheado en las versiones 10.1.3 y 11.0.0-next.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "10.1.3",
            "matchCriteriaId" : "A2D0EAB1-2749-484C-8CF3-C51E5E934279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.1.4",
            "versionEndExcluding" : "11.0.0",
            "matchCriteriaId" : "020CFEB2-5732-42CA-B05A-5BE722B7EC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E7CB148B-B37C-4BAB-8F9A-B2E028FDE19A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "250E3E4D-B54A-4AD9-93C0-D26DE41B8CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2DFE6131-7D0C-4B69-B4C0-F77BA58E9F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "99B68074-366C-4B96-909D-E49DFE3D240A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "349D208E-B74B-4BEE-9958-9E9FC7BB73BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "51559F52-A6DF-4CD4-A763-36AA17AFB0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FCDAA05D-1138-4C7B-9AA8-1627996390C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonisjs:bodyparser:11.0.0:next8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0C3D4CD4-4DF6-440B-9D4D-E0E36273434A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/adonisjs/bodyparser/releases/tag/v10.1.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/adonisjs/bodyparser/releases/tag/v11.0.0-next.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/adonisjs/core/security/advisories/GHSA-xx9g-fh25-4q64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25793",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.830",
      "lastModified" : "2026-02-18T17:47:38.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3."
      }, {
        "lang" : "es",
        "value" : "Nebula es una herramienta de red superpuesta escalable. En las versiones de 1.7.0 a 1.10.2, al usar certificados P256 (lo cual no es la configuración predeterminada), es posible evadir una entrada en la lista de bloqueo creada contra la huella digital de un certificado al usar la Maleabilidad de la Firma ECDSA para usar una copia del certificado con una huella digital diferente. Este problema ha sido parcheado en la versión 1.10.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slack:nebula:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.10.3",
            "matchCriteriaId" : "95C8E184-A4E9-4558-8824-D89590D62C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slackhq/nebula/commit/f573e8a26695278f9d71587390fbfe0d0933aa21",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/slackhq/nebula/security/advisories/GHSA-69x3-g4r3-p962",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25803",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:54.973",
      "lastModified" : "2026-03-17T20:43:52.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials (admin/admin) upon the first initialization. Attackers with network access to the application's login interface can gain full administrative control, managing VPN tunnels and system settings. This issue will be patched in version 2.0.2."
      }, {
        "lang" : "es",
        "value" : "3DP-MANAGER es un generador de entrada para 3x-ui. En la versión 2.0.1 y anteriores, la aplicación crea automáticamente una cuenta administrativa con credenciales predeterminadas conocidas (admin/admin) tras la primera inicialización. Atacantes con acceso de red a la interfaz de inicio de sesión de la aplicación pueden obtener control administrativo total, gestionando túneles VPN y configuraciones del sistema. Este problema será parcheado en la versión 2.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denpiligrim:3dp-manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "9E4299E9-A60F-4AC3-AAEE-6164DFCEACCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denpiligrim/3dp-manager/commit/f568de41de97dd1b70a963708a1ee18e52b9d248",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denpiligrim/3dp-manager/security/advisories/GHSA-5x57-h7cw-9jmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25804",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-06T23:15:55.123",
      "lastModified" : "2026-02-28T00:30:06.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3."
      }, {
        "lang" : "es",
        "value" : "Antrea es una solución de red de Kubernetes diseñada para ser nativa de Kubernetes. Antes de las versiones 2.3.2 y 2.4.3, el sistema de asignación de prioridad de políticas de red de Antrea tiene un error de desbordamiento aritmético uint16 que causa cálculos incorrectos de prioridad de OpenFlow al manejar un gran número de políticas con varios valores de prioridad. Esto resulta en una aplicación de tráfico potencialmente incorrecta. Este problema ha sido parcheado en la versión 2.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:antrea:*:*:*:*:*:kubernetes:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "395EA656-873E-492A-88A3-D6813376D968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:antrea:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "7DB4CD72-9C1A-47E2-BB11-16F803BAE15A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/antrea-io/antrea/pull/7496",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2070",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-06T23:15:55.277",
      "lastModified" : "2026-02-13T18:55:44.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en UTT ?? 520W 1.7.7-180627. El elemento afectado es la función strcpy del archivo /goform/formPolicyRouteConf. Dicha manipulación del argumento GroupName conduce a un desbordamiento de búfer. El ataque puede ser ejecutado de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:1.7.7-180627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E0E55-A7EE-4B95-8584-41F4FCED4B64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/39.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344637",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344637",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2071",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T01:15:54.470",
      "lastModified" : "2026-02-13T18:55:05.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument except results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en UTT ?? 520W 1.7.7-180627. El elemento afectado es la función strcpy del archivo /goform/formP2PLimitConfig. Realizar una manipulación del argumento except resulta en desbordamiento de búfer. El ataque puede llevarse a cabo de forma remota. El exploit se ha hecho público y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520w_firmware:1.7.7-180627:*:*:*:*:*:*:*",
            "matchCriteriaId" : "114E0E55-A7EE-4B95-8584-41F4FCED4B64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD42AC5F-531F-40FC-BD78-D20F298AF79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cymiao1978/cve/blob/main/new/40.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344638",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344638",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25837",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.500",
      "lastModified" : "2026-02-07T04:15:53.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25838",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.580",
      "lastModified" : "2026-02-07T04:15:53.580",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25839",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.643",
      "lastModified" : "2026-02-07T04:15:53.643",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25840",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.703",
      "lastModified" : "2026-02-07T04:15:53.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25841",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.767",
      "lastModified" : "2026-02-07T04:15:53.767",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25842",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.823",
      "lastModified" : "2026-02-07T04:15:53.823",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25843",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.893",
      "lastModified" : "2026-02-07T04:15:53.893",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25844",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:53.960",
      "lastModified" : "2026-02-07T04:15:53.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25845",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-07T04:15:54.017",
      "lastModified" : "2026-02-07T04:15:54.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2073",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T04:15:54.083",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/user/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en itsourcecode School Management System 1.0. Esto afecta una función desconocida del archivo /ramonsys/user/index.php. Ejecutar una manipulación del argumento ID puede llevar a una inyección SQL. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Sherlocksbs/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2074",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T05:16:12.800",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP POST Request Handler. The manipulation leads to xml external entity reference. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en O2OA hasta 9.0.0. Esto impacta una función desconocida del archivo /x_program_center/jaxrs/mpweixin/check del componente Manejador de Solicitudes HTTP POST. La manipulación lleva a referencia a entidad externa XML. Es posible iniciar el ataque remotamente. El exploit está disponible públicamente y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        }, {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneland:o2oa:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.0",
            "matchCriteriaId" : "5EA70656-25DB-4A76-B31F-98AE5269C319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/SourByte-Lab/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745486",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745489",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2075",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T06:16:04.120",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\RoleController.java of the component Role-Permission Binding Handler. The manipulation results in improper access controls. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en yeqifu warehouse hasta aaf29962ba407d22d991781de28796ee7b4670e4. Afectada es la función saveRolePermission del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\RoleController.java del componente Role-Permission Binding Handler. La manipulación resulta en controles de acceso impropios. Es posible lanzar el ataque remotamente. El exploit ha sido publicado al público y puede ser usado para ataques. Este producto adopta el enfoque de lanzamientos continuos para proporcionar entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas y actualizadas no están disponibles. El proyecto fue informado del problema tempranamente a través de un informe de problema pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/52",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/52#issue-3846645856",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745508",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2076",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T07:15:46.630",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this vulnerability is the function addUser/updateUser/deleteUser of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\UserController.java of the component User Management Endpoint. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Afectada por esta vulnerabilidad es la función addUser/updateUser/deleteUser del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\UserController.java del componente User Management Endpoint. Esta manipulación causa una autorización indebida. El ataque puede iniciarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques. Este producto utiliza entrega continua con lanzamientos progresivos. Por lo tanto, no hay detalles de versión disponibles de las versiones afectadas ni actualizadas. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/53",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/53#issue-3846651070",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745509",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2077",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T08:15:50.997",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function addRole/updateRole/deleteRole of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\RoleController.java of the component Role Management Handler. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Afectada por este problema es la función addRole/updateRole/deleteRole del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\RoleController.java del componente Role Management Handler. Dicha manipulación conduce a una autorización indebida. El ataque puede lanzarse remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto no utiliza versionado. Por esta razón, la información sobre las versiones afectadas y no afectadas no está disponible. El proyecto fue informado del problema tempranamente a través de un informe de incidencia, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/54",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/54#issue-3846654129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745512",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2078",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T08:15:51.830",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addPermission/updatePermission/deletePermission of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\PermissionController.java of the component Permission Management. Performing a manipulation results in improper authorization. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Esto afecta la función addPermission/updatePermission/deletePermission del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\PermissionController.java del componente Gestión de Permisos. Realizar una manipulación resulta en una autorización indebida. El ataque puede iniciarse de forma remota. El exploit ahora es público y puede ser utilizado. Este producto utiliza un modelo de lanzamiento continuo para entregar actualizaciones continuas. Como resultado, la información de versión específica para las versiones afectadas o actualizadas no está disponible. El proyecto fue informado del problema tempranamente a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/55",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/55#issue-3846656775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745513",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0555",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:15:59.733",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Premmerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premmerce_wizard_actions' AJAX endpoint in all versions up to, and including, 1.3.20. This is due to missing capability checks and insufficient input sanitization and output escaping on the `state` parameter. This makes it possible for authenticated attackers, with subscriber level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page (the Premmerce Wizard admin page)."
      }, {
        "lang" : "es",
        "value" : "El plugin Premmerce para WordPress es vulnerable a cross-site scripting almacenado a través del endpoint AJAX 'premmerce_wizard_actions' en todas las versiones hasta la 1.3.20, inclusive. Esto se debe a la falta de comprobaciones de capacidad y a una sanitización de entrada y un escape de salida insuficientes en el parámetro 'state'. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada (la página de administración del Asistente de Premmerce)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/premmerce/tags/1.3.20/src/Admin/Admin.php?marks=41#L41",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/premmerce/tags/1.3.20/src/Admin/Handlers/WizardHandler.php?marks=42,50,52#L42",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/premmerce/tags/1.3.20/src/Api/WizardApi.php?marks=38#L38",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/premmerce/tags/1.3.20/views/admin/tabs/wizard.php?marks=30#L30",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464825/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/90b2a644-19a0-43a1-8ff6-7486d7ef29b3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1082",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:15:59.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings page form handler in `inc/settings-page.php`. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin TITLE ANIMATOR para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0, inclusive. Esto se debe a la falta de validación de nonce en el manejador del formulario de la página de configuración en `inc/settings-page.php`. Esto hace posible que atacantes no autenticados modifiquen la configuración del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/title-animator/tags/1.0/inc/settings-page.php#L5",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/title-animator/trunk/inc/settings-page.php#L5",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/98736b9d-3e0a-40c0-900a-fbbaaac07958?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1570",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:00.070",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Bible Verse via Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `verse` shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple Bible Verse via Shortcode para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'verse' del plugin en todas las versiones hasta la 1.1, inclusive, debido a la sanitización de entrada y el escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-bible-verse-via-shortcode/trunk/index.php#L40",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/098b979f-337d-4fbd-bfcc-0e8a281e6982?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1573",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:00.240",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OMIGO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `omigo_donate_button` shortcode in all versions up to, and including, 3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin OMIGO para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'omigo_donate_button' del plugin en todas las versiones hasta la 3.3, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/omigo/trunk/omigo.php?rev=2778497#L386",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f2cf46e6-a732-45c4-ad18-607009d7a586?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1608",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:00.407",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Video Onclick plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `youtube` shortcode in all versions up to, and including, 0.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Video Onclick para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode youtube del plugin en todas las versiones hasta la 0.4.7, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/video-onclick/tags/0.4.7/video-onclick.php#L109",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/73ddf729-da69-4d0b-866f-34a92ec72800?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1611",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:00.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wikiloops Track Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wikiloops` shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Wikiloops Track Player para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'wikiloops' del plugin en todas las versiones hasta la 1.0.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wikiloops-track-player/tags/1.0.1/Wikiloops-Track-Player.php#L19",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb472bdb-de35-45e4-bcea-04f27d425817?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1613",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:00.730",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `list_class` shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Wonka Slide para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'list_class' del plugin en todas las versiones hasta la 1.3.3, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida en atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wonka-slide/trunk/admin/class-wonka-slide-build.php#L65",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f15f0211-724d-45b5-bf2f-7482f77c474d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1634",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:00.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Subitem AL Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Subitem AL Slider para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro `$_SERVER['PHP_SELF']` en todas las versiones hasta la 1.0.0, inclusive, debido a una sanitización insuficiente de la entrada y un escape de la salida. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/subitem-al-slider/tags/1.0.0/templates/tab1_block1.tpl#L11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/subitem-al-slider/trunk/templates/tab1_block1.tpl#L11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/subitem-al-slider/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4bfeff72-27de-46a9-b947-f60255b5d062?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1643",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:01.070",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MP-Ukagaka plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin MP-Ukagaka para WordPress es vulnerable a cross-site scripting reflejado en todas las versiones hasta la 1.5.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mp-ukagaka/tags/1.5.2/options.php#L160",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mp-ukagaka/trunk/options.php#L160",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/mp-ukagaka/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/14c3b53c-ba98-4e93-ba65-6da11816d7a6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1675",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-07T09:16:01.230",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for unauthenticated attackers to bypass the geolocation blocking mechanism by appending the key to any URL on sites where the administrator has not changed the default value."
      }, {
        "lang" : "es",
        "value" : "El plugin Advanced Country Blocker para WordPress es vulnerable a un bypass de autorización en todas las versiones hasta la 2.3.1, inclusive, debido al uso de un valor predeterminado predecible para la clave secreta de bypass creada durante la instalación sin requerir que los usuarios la cambien. Esto hace posible que atacantes no autenticados omitan el mecanismo de bloqueo por geolocalización al añadir la clave a cualquier URL en sitios donde el administrador no ha cambiado el valor predeterminado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-country-blocker/tags/2.3.1/advanced-country-blocking.php#L278",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-country-blocker/tags/2.3.1/advanced-country-blocking.php#L336",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-country-blocker/tags/2.3.1/advanced-country-blocking.php#L420",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455225/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/30747988-83f9-41f9-9bc5-1f533bc4cb94?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2079",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T09:16:01.407",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addMenu/updateMenu/deleteMenu of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\MenuController.java of the component Menu Management. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en yeqifu warehouse hasta aaf29962ba407d22d991781de28796ee7b4670e4. Esta vulnerabilidad afecta a la función addMenu/updateMenu/deleteMenu del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\MenuController.java del componente Gestión de Menús. La ejecución de una manipulación puede llevar a una autorización indebida. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Este producto opera bajo un modelo de lanzamiento continuo, lo que garantiza una entrega continua. En consecuencia, no hay detalles de versión para las versiones afectadas o actualizadas. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/56",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/56#issue-3846659524",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745514",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2080",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T09:16:01.593",
      "lastModified" : "2026-02-13T18:49:08.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulation of the argument passwd1 leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en UTT HiPER 810 1.7.4-141218. Este problema afecta a la función setSysAdm del archivo /goform/formUser. La manipulación del argumento passwd1 conduce a inyección de comandos. La explotación remota del ataque es posible. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810_firmware:1.7.4-141218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185B9785-D7CC-41DC-96B6-7929F86F2348"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB059D5-5874-4759-B322-7066F6ACCD37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT810CVE/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cha0yang1/UTT810CVE/blob/main/README.md#reproduction-steps",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745521",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2081",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T10:15:52.170",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passwd causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en D-Link DIR-823X 250416. El elemento afectado es una función desconocida del archivo /goform/set_password. Esta manipulación del argumento http_passwd causa inyección de comandos del sistema operativo. El ataque es posible de llevar a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/22",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/master-abc/cve/issues/22#issue-3847400767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2082",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T10:15:52.373",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads to os command injection. The attack may be performed from remote. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en D-Link DIR-823X 250416. El elemento afectado es una función desconocida del archivo /goform/set_mac_clone. Dicha manipulación del argumento mac conduce a inyección de comandos. El ataque puede ser realizado de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/master-abc/cve/issues/21#issue-3847172823",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745854",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2083",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T11:16:06.750",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /delete_post.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en el Sitio de Red Social 1.0 de code-projects. Esto afecta una función desconocida del archivo /delete_post.php. Realizar una manipulación del argumento ID resulta en inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido liberado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:social_networking_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE90865-B6CC-4E9A-AF38-C11E14AE0864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/6Justdododo6/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2084",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T12:15:55.717",
      "lastModified" : "2026-02-10T14:57:30.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en D-Link DIR-823X 250416. Esto afecta a una función desconocida del archivo /goform/set_language. La ejecución de una manipulación del argumento langSelection puede llevar a una inyección de comandos del sistema operativo. Es posible lanzar el ataque de forma remota. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746380",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2085",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T12:15:56.723",
      "lastModified" : "2026-02-12T16:21:57.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endpoint. The manipulation of the argument ussdValue leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en D-Link DWR-M921 1.1.50. La función sub_419F20 del archivo /boafrm/formUSSDSetup del componente USSD Configuration Endpoint está afectada. La manipulación del argumento ussdValue conduce a una inyección de comandos. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m921_firmware:1.1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCABFE8-93E0-484A-8603-DF3F77DD8C31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CACEA2C-88E1-481F-B864-CFF44B72FC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/1#issue-3851345029",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746400",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2086",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T14:16:08.047",
      "lastModified" : "2026-02-24T20:05:16.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en UTT HiPER 810G hasta 1.7.7-171114. Afectada por esta vulnerabilidad es la función strcpy del archivo /goform/formFireWall del componente Interfaz de Gestión. La manipulación del argumento GroupName resulta en desbordamiento de búfer. El ataque puede ser lanzado remotamente. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alc9700jmo/CVE/issues/22",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alc9700jmo/CVE/issues/22#issue-3851242657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746502",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2087",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T14:16:08.927",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the argument user_email causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Online Class Record System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /admin/login.php. Esta manipulación del argumento user_email causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:online_class_record_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361E17C-45B8-41E9-9007-AF82A97C990F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoccm07/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746510",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2088",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T15:15:57.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en PHPGurukul Beauty Parlour Management System 1.1. Esto afecta una parte desconocida del archivo /admin/accepted-appointment.php. Tal manipulación del argumento delid lleva a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0663F5C-7E50-4432-817D-518802751580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Shaon-Xis/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746520",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2089",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T15:15:57.960",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Class Record System 1.0. Esta vulnerabilidad afecta código desconocido del archivo /admin/subject/controller.PHP. La realización de una manipulación del argumento ID resulta en inyección SQL. La explotación remota del ataque es posible. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:online_class_record_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361E17C-45B8-41E9-9007-AF82A97C990F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoccm07/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344656",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344656",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2090",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T16:15:47.727",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en SourceCodester Online Class Record System 1.0. Este problema afecta algún procesamiento desconocido del archivo /admin/message/search.php. La ejecución de una manipulación del argumento term puede llevar a inyección SQL. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:online_class_record_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8361E17C-45B8-41E9-9007-AF82A97C990F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoccm07/cve/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2105",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T17:15:47.710",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The affected element is the function addDept/updateDept/deleteDept of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\DeptController.java of the component Department Management. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en yeqifu warehouse hasta aaf29962ba407d22d991781de28796ee7b4670e4. El elemento afectado es la función addDept/updateDept/deleteDept del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\DeptController.java del componente Gestión de Departamentos. La ejecución de una manipulación puede conducir a una autorización indebida. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado. Este producto adopta el enfoque de lanzamientos continuos para proporcionar entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas y actualizadas no están disponibles. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/57",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/57#issue-3846662068",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344681",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344681",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745515",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2106",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T18:15:47.310",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\NoticeController.java of the component Notice Management. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. El elemento afectado es la función addNotice/updateNotice/deleteNotice/batchDeleteNotice del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\NoticeController.java del componente Gestión de Avisos. La manipulación conduce a una autorización indebida. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Este producto utiliza entrega continua con lanzamientos continuos. Por lo tanto, no hay detalles de versión disponibles de las versiones afectadas ni actualizadas. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/58",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/58#issue-3846664260",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344682",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344682",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745516",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2107",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T19:15:46.413",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\LoginfoController.java of the component Log Info Handler. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Esto afecta a la función loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\LoginfoController.java del componente Log Info Handler. La manipulación resulta en una autorización indebida. El ataque puede lanzarse remotamente. El exploit se ha hecho público y podría usarse. Este producto no utiliza versionado. Por esta razón, la información sobre las versiones afectadas y no afectadas no está disponible. El proyecto fue informado del problema con antelación a través de un informe de incidencia, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/59",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/59#issue-3846665806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344683",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344683",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745517",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2108",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T19:15:46.613",
      "lastModified" : "2026-02-27T13:45:11.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en jsbroks COCO Annotator hasta 0.11.1. Esto afecta una función desconocida del archivo /api/info/long_task del componente Endpoint. Esta manipulación causa denegación de servicio. El ataque puede iniciarse remotamente. El exploit ha sido divulgado públicamente y puede utilizarse. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsbroks:coco_annotator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.1",
            "matchCriteriaId" : "88E9E355-3EDA-4E73-970D-95AF4583E249"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nmmorette/vulnerability-research/blob/main/coco-anotator/Unauthenticated%20Task%20Queue%20Flood%20in%20COCO%20Annotator%202f1ef09b873680f99d39e3f7db9886fa.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344684",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344684",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745547",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2109",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T20:15:55.500",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/undo/ of the component Delete Category Handler. Such manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en jsbroks COCO Annotator hasta la versión 0.11.1. Afecta a una función desconocida del archivo /api/undo/ del componente Delete Category Handler. Dicha manipulación del argumento ID conduce a una autorización indebida. El ataque puede lanzarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsbroks:coco_annotator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.1",
            "matchCriteriaId" : "88E9E355-3EDA-4E73-970D-95AF4583E249"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nmmorette/vulnerability-research/blob/main/BFLA%20COCO%20Annotator%20in%20DELETE%20api%20undo/BFLA%20COCO%20Annotator%20in%20DELETE%20api%20undo%202f1ef09b8736807aa1f7ede4b64fa35d.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344685",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344685",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.745579",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2110",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T20:15:56.373",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Tasin1025 SwiftBuy hasta 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /login.PHP. Realizar una manipulación resulta en una restricción inadecuada de intentos excesivos de autenticación. La explotación remota del ataque es posible. La complejidad del ataque se califica como alta. La explotación parece ser difícil. El exploit ha sido liberado al público y puede ser utilizado para ataques. Este producto sigue un enfoque de lanzamiento continuo para la entrega continua, por lo que no se proporcionan detalles de la versión para las versiones afectadas o actualizadas. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-799"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swiftbuy:swiftbuy:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C98236-16E8-4CE6-8195-97F503E2E40E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.344686",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344686",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746251",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.websecurityinsights.my.id/2026/01/swiftbuy-v-10-loginphp-no-limit-to.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2111",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T21:15:45.500",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this issue is some unknown functionality of the file /airag/knowledge/doc/edit of the component Retrieval-Augmented Generation Module. Executing a manipulation of the argument filePath can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en JeecgBoot hasta la versión 3.9.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /airag/knowledge/doc/edit del componente Módulo de Generación Aumentada por Recuperación. La ejecución de una manipulación del argumento filePath puede conducir a un salto de ruta. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.0",
            "matchCriteriaId" : "7EC1CC58-2561-4C33-AECE-0821840287D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.344687",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344687",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746789",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/vxbwk9/ezodz20a26g36y8m",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2113",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T21:15:45.697",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en yuan1994 tpadmin hasta 1.3.12. Esto afecta una parte desconocida en la biblioteca /public/static/admin/lib/webuploader/0.1.5/server/preview.php del componente WebUploader. La manipulación conduce a deserialización. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido divulgado públicamente y puede ser usado. Esta vulnerabilidad solo afecta productos que ya no son soportados por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpadmin_project:tpadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.12",
            "matchCriteriaId" : "4EA8510B-FFCB-4910-88BA-3E54AAC37941"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sTy1H/CVE-Report/blob/main/Remote%20Code%20Execution%20Vulnerability%20in%20Tpadmin%20System.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344688",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344688",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746795",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25560",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:01.347",
      "lastModified" : "2026-02-10T22:03:03.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied username input is incorporated into LDAP search filters and DN-related values without adequate escaping, allowing an attacker to manipulate LDAP queries during authentication."
      }, {
        "lang" : "es",
        "value" : "Versiones de WeKan anteriores a la 8.19 contienen una vulnerabilidad de inyección de filtro LDAP en la autenticación LDAP. La entrada de nombre de usuario proporcionada por el usuario se incorpora en los filtros de búsqueda LDAP y en los valores relacionados con DN sin un escape adecuado, permitiendo a un atacante manipular las consultas LDAP durante la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/0b0e16c3eae28bbf453d33a81a9c58ce7db6d5bb",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-ldap-authentication-filter-injection",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25561",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:01.490",
      "lastModified" : "2026-02-10T22:02:06.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an authorization weakness in the attachment upload API. The API does not fully validate that provided identifiers (such as boardId, cardId, swimlaneId, and listId) are consistent and refer to a coherent card/board relationship, enabling attempts to upload attachments with mismatched object relationships."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una debilidad de autorización en la API de carga de adjuntos. La API no valida completamente que los identificadores proporcionados (como boardId, cardId, swimlaneId y listId) sean consistentes y se refieran a una relación coherente de tarjeta/tablero, lo que permite intentos de cargar adjuntos con relaciones de objeto no coincidentes."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/1d16955b6d4f0a0282e89c2c1b0415c7597019b8",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-attachment-upload-object-relationship-validation-bypass",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25562",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:01.627",
      "lastModified" : "2026-02-10T22:01:03.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment metadata can be returned without properly scoping results to boards and cards accessible to the requesting user, potentially exposing attachment metadata to unauthorized users."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una vulnerabilidad de revelación de información en la publicación de adjuntos. Los metadatos de los adjuntos pueden ser devueltos sin acotar adecuadamente los resultados a los tableros y tarjetas accesibles para el usuario solicitante, exponiendo potencialmente los metadatos de los adjuntos a usuarios no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/6dfa3beb2b6ab23438d0f4395b84bf0749eb4820",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-attachments-publication-information-disclosure",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25563",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:01.767",
      "lastModified" : "2026-02-10T21:59:34.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una referencia directa insegura a objetos (IDOR) en la creación de listas de verificación y rutas de listas de verificación relacionadas. La implementación no verifica que el cardId proporcionado pertenezca al boardId proporcionado, lo que permite la manipulación de ID entre tableros mediante la manipulación de identificadores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/5cd875813fdec5a3c40a0358b30a347967c85c14",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-checklist-creation-cross-board-idor",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25564",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:01.903",
      "lastModified" : "2026-02-10T21:58:59.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una referencia directa insegura a objetos (IDOR) en la creación de listas de verificación y en las rutas de listas de verificación relacionadas. La implementación no verifica que el cardId proporcionado pertenezca al boardId proporcionado, lo que permite la alteración de ID entre tableros mediante la manipulación de identificadores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/08a6f084eba09487743a7c807fb4a9000fcfa9ac",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-checklist-deletion-idor-via-missing-relationship-validation",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25565",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.043",
      "lastModified" : "2026-02-10T21:57:16.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only board read access rather than requiring write permission. This can allow users with read-only roles to perform card updates that should require write access."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una vulnerabilidad de autorización donde ciertas rutas de la API de actualización de tarjetas validan solo el acceso de lectura al tablero en lugar de requerir permiso de escritura. Esto puede permitir a usuarios con roles de solo lectura realizar actualizaciones de tarjetas que deberían requerir acceso de escritura."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/181f837d8cbae96bdf9dcbd31beaa3653c2c0285",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-read-only-board-roles-can-update-cards",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25566",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.190",
      "lastModified" : "2026-02-18T20:43:46.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic. A user can specify a destination board/list/swimlane without adequate authorization checks for the destination and without validating that destination objects belong to the destination board, potentially enabling unauthorized cross-board moves."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una vulnerabilidad de autorización en la lógica de movimiento de tarjetas. Un usuario puede especificar un tablero/lista/carril de destino sin comprobaciones de autorización adecuadas para el destino y sin validar que los objetos de destino pertenezcan al tablero de destino, lo que podría permitir movimientos no autorizados entre tableros."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/198509e7600981400353aec6259247b3c04e043e",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-cross-board-card-move-without-destination-authorization",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25567",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.333",
      "lastModified" : "2026-02-10T21:56:33.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in the card comment creation API. The endpoint accepts an authorId from the request body, allowing an authenticated user to spoof the recorded comment author by supplying another user's identifier."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una referencia directa insegura a objetos (IDOR) en la API de creación de comentarios de tarjetas. El endpoint acepta un authorId del cuerpo de la solicitud, permitiendo a un usuario autenticado suplantar al autor del comentario registrado al proporcionar el identificador de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/67cb47173c1a152d9eaf5469740992b2dacdf62d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-card-comment-author-spoofing-via-user-controlled-authorid",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25568",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.467",
      "lastModified" : "2026-02-10T21:55:34.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement."
      }, {
        "lang" : "es",
        "value" : "Las versiones de WeKan anteriores a la 8.19 contienen una vulnerabilidad de lógica de autorización donde la configuración de instancia allowPrivateOnly no se aplica suficientemente en el momento de la creación del tablero. Cuando allowPrivateOnly está habilitado, los usuarios aún pueden crear tableros públicos debido a una aplicación incompleta por parte del servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/7ed76c180ede46ab1dac6b8ad27e9128a272c2c8",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-allowprivateonly-setting-enforcement-bypass",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25857",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.607",
      "lastModified" : "2026-03-05T20:33:27.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality (formSetWanDiag). The implementation constructs a shell command that invokes curl and incorporates attacker-controlled input into the command line without adequate neutralization. As a result, a remote attacker with access to the affected management interface can inject additional shell syntax and execute arbitrary commands on the device with the privileges of the management process."
      }, {
        "lang" : "es",
        "value" : "El firmware del router Tenda G300-F, versión 16.01.14.2 y anteriores, contiene una vulnerabilidad de inyección de comandos del sistema operativo en la funcionalidad de diagnóstico WAN (formSetWanDiag). La implementación construye un comando de shell que invoca curl e incorpora entrada controlada por el atacante en la línea de comandos sin una neutralización adecuada. Como resultado, un atacante remoto con acceso a la interfaz de gestión afectada puede inyectar sintaxis de shell adicional y ejecutar comandos arbitrarios en el dispositivo con los privilegios del proceso de gestión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g300-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.01.14.2",
            "matchCriteriaId" : "22CFA7F2-88E4-44CA-91E8-08D83669B62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g300-f:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55B27E2-33B6-4131-A7C7-DF952D0F05B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.evan.lat/blog/cve-2026-25857/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tendacn.com/material/show/736333682028613",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-g300-f-command-injection-via-formsetwandiag",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25858",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.753",
      "lastModified" : "2026-04-07T18:16:40.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a victim’s telephone number. The password reset flow exposes the one-time password (OTP) directly in the API response and validates password reset requests solely by comparing the provided OTP to a value stored by telephone number, without verifying user identity or ownership of the telephone number. This enables remote account takeover of any user with a known or guessable telephone number."
      }, {
        "lang" : "es",
        "value" : "macrozheng mall versión 1.0.3 y anteriores contiene una vulnerabilidad de autenticación en el flujo de trabajo de restablecimiento de contraseña de mall-portal que permite a un atacante no autenticado restablecer contraseñas de cuentas de usuario arbitrarias utilizando solo el número de teléfono de una víctima. El flujo de restablecimiento de contraseña expone la contraseña de un solo uso (OTP) directamente en la respuesta de la API y valida las solicitudes de restablecimiento de contraseña únicamente comparando la OTP proporcionada con un valor almacenado por número de teléfono, sin verificar la identidad del usuario o la propiedad del número de teléfono. Esto permite la toma de control remota de la cuenta de cualquier usuario con un número de teléfono conocido o predecible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:macrozheng:mall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "3962F288-B38B-436C-BE79-91257EF7680D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/macrozheng/mall/issues/946",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.macrozheng.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/macrozheng-mall-unauthenticated-password-reset-via-otp-disclosure",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25859",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-07T22:16:02.910",
      "lastModified" : "2026-02-10T21:54:37.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan versions prior to 8.20 allow non-administrative users to access migration functionality due to insufficient permission checks, potentially resulting in unauthorized migration operations."
      }, {
        "lang" : "es",
        "value" : "Versiones de Wekan anteriores a la 8.20 permiten a usuarios no administrativos acceder a la funcionalidad de migración debido a comprobaciones de permisos insuficientes, resultando potencialmente en operaciones de migración no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.20",
            "matchCriteriaId" : "8F4BC7B9-451E-41AD-A635-05CDFD2769F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/cbb1cd78de3e40264a5e047ace0ce27f8635b4e6",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wekan.fi/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wekan-migration-functionality-insufficient-permission-checks",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2114",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T22:16:03.070",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_admin.php. The manipulation of the argument admin_id results in sql injection. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en itsourcecode Society Management System 1.0. Esta vulnerabilidad afecta código desconocido del archivo /admin/edit_admin.PHP. La manipulación del argumento admin_id resulta en inyección SQL. El ataque puede ser realizado desde remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zpf7029/oblong/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344689",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344689",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746796",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2115",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-07T23:15:48.663",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the file /admin/delete_expenses.php. This manipulation of the argument expenses_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode Society Management System 1.0. Este problema afecta a algún procesamiento desconocido del archivo /admin/delete_expenses.PHP. Esta manipulación del argumento expenses_id causa inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zpf7029/oblong/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344690",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344690",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2116",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T00:16:02.277",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/edit_expenses.php. Such manipulation of the argument expenses_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en itsourcecode Society Management System 1.0. Afectada es una función desconocida del archivo /admin/edit_expenses.PHP. Dicha manipulación del argumento expenses_id conduce a inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido revelado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zpf7029/oblong/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344691",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344691",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746798",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2117",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T00:16:02.850",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en itsourcecode Society Management System 1.0. El elemento afectado es una función desconocida del archivo /admin/edit_activity.php. Realizar una manipulación del argumento activity_id resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZooNJarway/CVE/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344692",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344692",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746884",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2118",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T01:16:09.070",
      "lastModified" : "2026-02-13T18:46:55.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument Isp_Name can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en UTT HiPER 810 1.7.4-141218. El elemento afectado es la función sub_4407D4 del archivo /goform/formReleaseConnect del componente rehttpd. La ejecución de una manipulación del argumento Isp_Name puede conducir a una inyección de comandos. El ataque puede lanzarse remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810_firmware:1.7.4-141218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185B9785-D7CC-41DC-96B6-7929F86F2348"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB059D5-5874-4759-B322-7066F6ACCD37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344693",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344693",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2120",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T01:16:09.990",
      "lastModified" : "2026-02-11T18:59:38.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler. The manipulation of the argument terminal_addr/server_ip/server_port leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en D-Link DIR-823X 250416. Esto afecta una función desconocida del archivo /goform/set_server_settings del componente Configuration Parameter Handler. La manipulación del argumento terminal_addr/server_ip/server_port conduce a una inyección de comandos del sistema operativo. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/26",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344694",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344694",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746916",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2122",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T01:16:10.180",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the component WAF Firewall. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Xiaopi Panel hasta 20260126. Esto impacta una función desconocida del archivo /demo.php del componente WAF Cortafuegos. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xiaopi:panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-01-26",
            "matchCriteriaId" : "F96A6C8E-4C8F-4872-B55F-D7A20CEE3F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/37",
        "source" : "cna@vuldb.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344695",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344695",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746917",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2129",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T02:15:56.853",
      "lastModified" : "2026-02-11T18:59:14.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argument ac_ipaddr/ac_ipstatus/ap_randtime results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en D-Link DIR-823X 250416. Afectada por este problema es alguna funcionalidad desconocida del archivo /goform/set_ac_status. Realizar una manipulación del argumento ac_ipaddr/ac_ipstatus/ap_randtime resulta en inyección de comandos del sistema operativo. El ataque puede ser iniciado remotamente. El exploit se ha hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.746935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2205",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T02:15:57.047",
      "lastModified" : "2026-02-11T18:58:58.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.js of the component Meteor Publication Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. Upgrading to version 8.21 is able to mitigate this issue. The name of the patch is 0f5a9c38778ca550cbab6c5093470e1e90cb837f. Upgrading the affected component is advised."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en WeKan hasta la versión 8.20. Esto afecta una parte desconocida del archivo server/publications/cards.js del componente Meteor Publication Handler. Dicha manipulación conduce a revelación de información. El ataque puede ser realizado desde remoto. La actualización a la versión 8.21 es capaz de mitigar este problema. El nombre del parche es 0f5a9c38778ca550cbab6c5093470e1e90cb837f. Se aconseja actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/0f5a9c38778ca550cbab6c5093470e1e90cb837f",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344919",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344919",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752161",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2206",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T02:15:57.263",
      "lastModified" : "2026-02-11T18:58:46.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in WeKan up to 8.20. This vulnerability affects unknown code of the file server/methods/fixDuplicateLists.js of the component Administrative Repair Handler. Performing a manipulation results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 8.21 is able to resolve this issue. The patch is named 4ce181d17249778094f73d21515f7f863f554743. It is advisable to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en WeKan hasta 8.20. Esta vulnerabilidad afecta a código desconocido del archivo server/methods/fixDuplicateLists.js del componente Administrative Repair Handler. Realizar una manipulación resulta en controles de acceso inadecuados. Es posible iniciar el ataque de forma remota. Actualizar a la versión 8.21 puede resolver este problema. El parche se denomina 4ce181d17249778094f73d21515f7f863f554743. Es aconsejable actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/4ce181d17249778094f73d21515f7f863f554743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344920",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344920",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752162",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2207",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T02:15:57.447",
      "lastModified" : "2026-02-11T18:58:37.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. Upgrading to version 8.21 is capable of addressing this issue. This patch is called 91a936e07d2976d4246dfe834281c3aaa87f9503. You should upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en WeKan hasta la versión 8.20. Este problema afecta a algún procesamiento desconocido del archivo server/publications/activities.js del componente Activity Publication Handler. La ejecución de una manipulación puede conducir a la revelación de información. Es posible lanzar el ataque de forma remota. La actualización a la versión 8.21 es capaz de abordar este problema. Este parche se denomina 91a936e07d2976d4246dfe834281c3aaa87f9503. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/91a936e07d2976d4246dfe834281c3aaa87f9503",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344921",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344921",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2208",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T02:15:57.640",
      "lastModified" : "2026-02-11T18:58:14.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in WeKan up to 8.20. Impacted is an unknown function of the file server/publications/rules.js of the component Rules Handler. The manipulation leads to missing authorization. The attack can be initiated remotely. Upgrading to version 8.21 is recommended to address this issue. The identifier of the patch is a787bcddf33ca28afb13ff5ea9a4cb92dceac005. The affected component should be upgraded."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en WeKan hasta 8.20. Afectada es una función desconocida del archivo server/publications/rules.js del componente Rules Handler. La manipulación conduce a falta de autorización. El ataque puede ser iniciado remotamente. Se recomienda actualizar a la versión 8.21 para abordar este problema. El identificador del parche es a787bcddf33ca28afb13ff5ea9a4cb92dceac005. El componente afectado debería ser actualizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.21",
            "matchCriteriaId" : "083807DE-F47B-4A75-916B-CDC9A3307747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/a787bcddf33ca28afb13ff5ea9a4cb92dceac005",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344922",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344922",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752164",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2209",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T02:15:57.820",
      "lastModified" : "2026-02-11T18:56:51.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in WeKan up to 8.18. The affected element is the function setCreateTranslation of the file client/components/settings/translationBody.js of the component Custom Translation Handler. The manipulation results in improper authorization. The attack can be launched remotely. Upgrading to version 8.19 is sufficient to fix this issue. The patch is identified as f244a43771f6ebf40218b83b9f46dba6b940d7de. It is suggested to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en WeKan hasta la versión 8.18. El elemento afectado es la función setCreateTranslation del archivo client/components/settings/translationBody.js del componente Custom Translation Handler. La manipulación resulta en autorización indebida. El ataque puede ser lanzado remotamente. La actualización a la versión 8.19 es suficiente para solucionar este problema. El parche se identifica como f244a43771f6ebf40218b83b9f46dba6b940d7de. Se sugiere actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.19",
            "matchCriteriaId" : "BE76E9D8-332F-4A27-9690-CEEF9504B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wekan/wekan/commit/f244a43771f6ebf40218b83b9f46dba6b940d7de",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344923",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344923",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2130",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T03:15:46.330",
      "lastModified" : "2026-03-05T20:19:06.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component search_username. Executing a manipulation of the argument Username can lead to command injection. The attack may be launched remotely. Upgrading to version 1.0.13 is able to mitigate this issue. This patch is called b1ae073c4b3e789ab8de36dc6ca8111ae9399e7a. Upgrading the affected component is advised."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en BurtTheCoder mcp-maigret hasta 1.0.12. Esto afecta una parte desconocida del archivo src/index.ts del componente search_username. La ejecución de una manipulación del argumento Username puede llevar a inyección de comandos. El ataque puede ser lanzado remotamente. La actualización a la versión 1.0.13 es capaz de mitigar este problema. Este parche se llama b1ae073c4b3e789ab8de36dc6ca8111ae9399e7a. Se aconseja actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:burtthecoder:maigret_mcp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.12",
            "matchCriteriaId" : "02DA4115-D1B1-4B67-9772-3F607E5AC42B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BurtTheCoder/mcp-maigret/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/BurtTheCoder/mcp-maigret/commit/b1ae073c4b3e789ab8de36dc6ca8111ae9399e7a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/BurtTheCoder/mcp-maigret/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/BurtTheCoder/mcp-maigret/pull/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/BurtTheCoder/mcp-maigret/releases/tag/v1.0.13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344765",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344765",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747171",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2131",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T03:15:49.047",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function input_text. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en XixianLiang HarmonyOS-mcp-server 0.1.0. Esta vulnerabilidad afecta la función input_text. La manipulación del argumento text conduce a inyección de comandos del sistema operativo. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xixianliang:harmonyos_mcp_server:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E71BB19-83F6-4D4B-AE79-0EF229138F42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/scanleale/MCP_sec/blob/main/HarmonyOS-mcp-server%20RCE%20vulnerability.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747209",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2132",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T04:15:53.720",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en code-projects Online Music Site 1.0. Este problema afecta a algún procesamiento desconocido del archivo /Administrator/PHP/AdminUpdateCategory.php. La manipulación del argumento txtcat resulta en inyección SQL. El ataque puede ser ejecutado de forma remota. El exploit ha sido publicado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Volije/AdminUpdateCategory/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747210",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2133",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T04:15:55.190",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of the argument txtimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en code-projects Online Music Site 1.0. Afecta a una función desconocida del archivo /Administrator/PHP/AdminUpdateCategory.php. Esta manipulación del argumento txtimage provoca una carga sin restricciones. El ataque puede llevarse a cabo de forma remota. El exploit ha sido puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Volije/cve2/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747213",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2134",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T05:16:04.353",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in PHPGurukul Hospital Management System 4.0. The affected element is an unknown function of the file /hms/admin/manage-doctors.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en PHPGurukul Hospital Management System 4.0. El elemento afectado es una función desconocida del archivo /hms/admin/manage-doctors.php. Dicha manipulación del argumento ID conduce a inyección SQL. El ataque puede ser realizado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:hospital_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA36E354-4DBF-4BE4-9BC4-CB00C6771BAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Shaon-Xis/PHPGurukul-HMS-SQL-Injection",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2135",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T05:16:07.673",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en UTT HiPER 810 1.7.4-141218. El elemento afectado es la función sub_43F020 del archivo /goform/formPdbUpConfig. Realizar una manipulación del argumento policyNames resulta en inyección de comandos. Es posible iniciar el ataque remotamente. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810_firmware:1.7.4-141218:*:*:*:*:*:*:*",
            "matchCriteriaId" : "185B9785-D7CC-41DC-96B6-7929F86F2348"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB059D5-5874-4759-B322-7066F6ACCD37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2136",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T06:16:16.313",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en projectworlds Online Food Ordering System 1.0. Esto afecta a una función desconocida del archivo /view-ticket.php. La ejecución de una manipulación del argumento ID puede llevar a inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5341DF-BF6E-450B-B216-A427E5FE8F98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hater-us/CVE/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747230",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2137",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T06:16:17.900",
      "lastModified" : "2026-02-11T18:46:52.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda TX3 hasta la versión 16.03.13.11_multi. Esto afecta a una función desconocida del archivo /goform/SetIpMacBind. La manipulación de la lista de argumentos conduce a un desbordamiento de búfer. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:tx3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.03.13.11",
            "matchCriteriaId" : "0360A3DB-3AA6-4F4A-AB94-A43C15C4C0E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:tx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E287DCCF-7DF1-4FBE-8A50-A95E272A5B40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx3/fromSetIpMacBind.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx3/fromSetIpMacBind.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747239",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2138",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T06:16:18.093",
      "lastModified" : "2026-02-10T19:28:57.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda TX9 up to 22.03.02.10_multi. Affected is the function sub_42D03C of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tenda TX9 hasta 22.03.02.10_multi. Afectada es la función sub_42D03C del archivo /goform/SetStaticRouteCfg. La manipulación del argumento list resulta en desbordamiento de búfer. El ataque puede lanzarse de forma remota. El exploit se ha hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:tx9_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "22.03.02.10",
            "matchCriteriaId" : "910846D1-8651-428F-BB95-809EFCD993DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:tx9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52B738-D619-4716-B67E-F2A9C1E7ED41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/SetStaticRouteCfg.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/SetStaticRouteCfg.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747249",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2139",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T07:15:59.507",
      "lastModified" : "2026-02-10T19:29:09.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. Affected by this vulnerability is the function sub_432580 of the file /goform/fast_setting_wifi_set. This manipulation of the argument ssid causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Tenda TX9 hasta la versión 22.03.02.10_multi. Afectada por esta vulnerabilidad es la función sub_432580 del archivo /goform/fast_setting_wifi_set. Esta manipulación del argumento ssid causa desbordamiento de búfer. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:tx9_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "22.03.02.10",
            "matchCriteriaId" : "910846D1-8651-428F-BB95-809EFCD993DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:tx9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52B738-D619-4716-B67E-F2A9C1E7ED41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/fast_setting_wifi_set.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/fast_setting_wifi_set.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344774",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344774",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747250",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2140",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T07:16:01.577",
      "lastModified" : "2026-02-10T19:28:33.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda TX9 up to 22.03.02.10_multi. Affected by this issue is the function sub_4223E0 of the file /goform/setMacFilterCfg. Such manipulation of the argument deviceList leads to buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda TX9 hasta 22.03.02.10_multi. Afectada por este problema es la función sub_4223E0 del archivo /goform/setMacFilterCfg. Dicha manipulación del argumento deviceList conduce a desbordamiento de búfer. El ataque puede ser lanzado de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:tx9_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "22.03.02.10",
            "matchCriteriaId" : "910846D1-8651-428F-BB95-809EFCD993DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:tx9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E52B738-D619-4716-B67E-F2A9C1E7ED41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/setMacFilterCfg.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/setMacFilterCfg.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747251",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2141",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T08:15:52.230",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3. This affects an unknown part of the file gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java of the component URL Handler. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en WuKongOpenSource WukongCRM hasta la versión 11.3.3. Esto afecta una parte desconocida del archivo gateway/src/main/java/com/kakarote/gateway/service/impl/PermissionServiceImpl.java del componente URL Handler. Realizar una manipulación resulta en una autorización indebida. La explotación remota del ataque es posible. El exploit ha sido publicado al público y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:5kcrm:wukongcrm:*:*:*:*:java:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.3.3",
            "matchCriteriaId" : "354142A8-0772-4135-8373-1C978EE4087D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SourByte05/SourByte-Lab/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344776",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344776",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2142",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T08:15:53.557",
      "lastModified" : "2026-02-10T14:57:38.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en D-Link DIR-823X 250416. Esta vulnerabilidad afecta la función sub_420688 del archivo /goform/set_qos. La ejecución de una manipulación puede conducir a una inyección de comandos del sistema operativo. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/29",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747428",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2143",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T09:15:51.690",
      "lastModified" : "2026-02-10T14:57:46.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en D-Link DIR-823X 250416. Este problema afecta a un procesamiento desconocido del archivo /goform/set_ddns del componente Servicio DDNS. La manipulación del argumento ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd conduce a una inyección de comandos del sistema operativo. El ataque puede llevarse a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2145",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T09:15:52.943",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7. The impacted element is an unknown function of the file /adminPage/conf/check of the component Web Management Interface. Such manipulation of the argument nginxDir leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en cym1102 nginxWebUI hasta la versión 4.3.7. El elemento afectado es una función desconocida del archivo /adminPage/conf/check del componente Interfaz de Gestión Web. Dicha manipulación del argumento nginxDir conduce a cross-site scripting. El ataque puede ser ejecutado remotamente. El exploit está disponible públicamente y podría ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cym1102:nginxwebui:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.7",
            "matchCriteriaId" : "DF720CF4-0F01-44BE-B71A-B599214A11D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cym1102/nginxWebUI/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cym1102/nginxWebUI/issues/203",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cym1102/nginxWebUI/issues/203#issue-3860109934",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344847",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344847",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747404",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2146",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T10:15:49.467",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1. This affects the function updateAvatar of the file /api/users/updateAvatar of the component co.yixiang.utils.FileUtil. Performing a manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en guchengwuyue yshopmall hasta la versión 1.9.1. Esto afecta a la función updateAvatar del archivo /API/users/updateAvatar del componente co.yixiang.utils.FileUtil. Realizar una manipulación del argumento File resulta en una carga sin restricciones. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. El proyecto fue informado del problema tempranamente a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guchengwuyue:yshopmall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "59DA2DC7-2594-494A-959C-2CDDF504605F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/guchengwuyue/yshopmall/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/guchengwuyue/yshopmall/issues/40",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/guchengwuyue/yshopmall/issues/40#issue-3860542812",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747409",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2147",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T10:15:50.673",
      "lastModified" : "2026-02-10T18:53:43.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Tenda AC21 16.03.08.16. Esto afecta a una función desconocida del archivo /cgi-bin/DownloadLog del componente Interfaz de Gestión Web. La ejecución de una manipulación puede conducir a revelación de información. El ataque puede realizarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089AC516-5475-4725-B348-832A00ED0CC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B05222-6E83-487C-A083-CED82D803330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/30",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344849",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344849",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747429",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2148",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T11:15:51.800",
      "lastModified" : "2026-02-10T18:51:48.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Tenda AC21 16.03.08.16. Afecta a una función desconocida del archivo /cgi-bin/DownloadFlash del componente Interfaz de Gestión Web. La manipulación conduce a la revelación de información. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089AC516-5475-4725-B348-832A00ED0CC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B05222-6E83-487C-A083-CED82D803330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344850",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344850",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747557",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2149",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T11:15:53.453",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patient_id results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /appointments.php. La manipulación del argumento patient_id resulta en cross site scripting. Es posible lanzar el ataque remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-appointments-XSS.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344851",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344851",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747920",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2150",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T12:15:51.820",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /checkin.php. This manipulation of the argument patient_id causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /checkin.php. Esta manipulación del argumento patient_id causa cross-site scripting. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-checkin-php-XSS.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344852",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344852",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.747921",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2151",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T12:15:52.813",
      "lastModified" : "2026-02-11T18:45:45.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DIR-615 4.10. This affects an unknown part of the file adv_firewall.php of the component DMZ Host Feature. Such manipulation of the argument dmz_ipaddr  leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en D-Link DIR-615 4.10. Esto afecta una parte desconocida del archivo adv_firewall.php del componente DMZ Host Feature. Dicha manipulación del argumento dmz_ipaddr conduce a inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615_firmware:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C17E5F0-B947-4C63-922B-27EA638A4682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E92E959-C211-4979-A233-163BEFCF6F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pentagonal-time-3a7.notion.site/DIR-615-OS-Command-Injection-2f6e5dd4c5a58053b2b4f166c2a503ba",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344853",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344853",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748031",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2152",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T13:16:03.507",
      "lastModified" : "2026-02-11T18:45:20.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration Interface. Performing a manipulation of the argument dest_ip/ submask/ gw results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DIR-615 4.10. Esta vulnerabilidad afecta código desconocido del archivo adv_routing.php del componente Interfaz de Configuración Web. Realizar una manipulación del argumento dest_ip/ submask/ gw resulta en inyección de comandos. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría ser usado. Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-615_firmware:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C17E5F0-B947-4C63-922B-27EA638A4682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E92E959-C211-4979-A233-163BEFCF6F0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pentagonal-time-3a7.notion.site/DIR-615-routing-command-injection-2f6e5dd4c5a580089587f5e78a1bbf70?pvs=74",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344854",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344854",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748032",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2153",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T13:16:04.657",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in mwielgoszewski doorman up to 0.6. This issue affects the function is_safe_url of the file doorman/users/views.py. Executing a manipulation of the argument Next can lead to open redirect. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en mwielgoszewski doorman hasta 0.6. Este problema afecta la función is_safe_url del archivo doorman/users/views.py. Ejecutar una manipulación del argumento Next puede llevar a una redirección abierta. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mwielgoszewski:doorman:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6",
            "matchCriteriaId" : "39C5DA64-7533-4ABB-982C-F7BF3D408AB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/RacerZ-fighting/39f230feb0e450ae54f0a80c63c5d924",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344855",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344855",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748072",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2154",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T14:16:25.833",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Impacted is an unknown function of the file /registration.php of the component Patient Registration Module. The manipulation of the argument First Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Afecta a una función desconocida del archivo /registration.php del componente Módulo de Registro de Pacientes. La manipulación del argumento Primer Nombre conduce a cross-site scripting. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-vulnerability-report-c97788dd6ea6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344856",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344856",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748208",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2155",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T14:16:26.027",
      "lastModified" : "2026-02-11T18:44:51.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en D-Link DIR-823X 250416. El elemento afectado es la función sub_4208A0 del archivo /goform/set_dmz del componente Configuration Handler. La manipulación del argumento dmz_host/dmz_enable resulta en inyección de comandos. El ataque puede ejecutarse remotamente. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/32",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344857",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344857",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750038",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2156",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T15:15:51.307",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el Sistema de Gestión de Estudiantes en Línea 1.0 de code-projects. El elemento afectado es una función desconocida del archivo /admin/announcement/index.php?view=add del componente Módulo de Gestión de Anuncios. Esta manipulación causa cross site scripting. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F072AFC-3156-426B-ADDF-E4B0AE7906C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/baguette168/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344858",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344858",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2157",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T15:15:52.310",
      "lastModified" : "2026-02-11T18:44:32.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en D-Link DIR-823X 250416. Esto afecta a la función sub_4175CC del archivo /goform/set_static_route_table. Dicha manipulación del argumento interface/destip/netmask/gateway/metric conduce a inyección de comandos del sistema operativo. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/28",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344859",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344859",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2158",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T15:15:52.490",
      "lastModified" : "2026-02-11T18:44:13.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /check_user.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en code-projects Student Web Portal 1.0. Esto afecta a una función desconocida del archivo /check_user.php. Realizar una manipulación del argumento Username resulta en inyección SQL. Es posible iniciar el ataque de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:student_web_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75927186-D2AC-42B4-9633-43D8D0582B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Qing-420/cve/blob/main/sql.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344860",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344860",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748816",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2159",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T16:15:50.207",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Simple Responsive Tourism Website 1.0. Afecta a una función desconocida del archivo /tourism/classes/Master.PHP?f=register del componente Registration. La ejecución de una manipulación del argumento firstname/lastname/username puede conducir a cross-site scripting. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_responsive_tourism_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3930D5-8A1D-4675-BA33-98CFAFC5FF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CH0ico/CVE_choco_5/blob/main/report.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750995",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2160",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T16:15:51.190",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=save_package. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester Simple Responsive Tourism Website 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /tourism/classes/Master.php?f=save_package. La manipulación del argumento Title lleva a cross-site scripting. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_responsive_tourism_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3930D5-8A1D-4675-BA33-98CFAFC5FF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CH0ico/CVE_choco_6/blob/main/report.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751016",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2161",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T16:15:51.377",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en itsourcecode Directory Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /admin/forget-password.PHP. La manipulación del argumento email resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:directory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2C6D1C-BDB9-462E-A977-E1A5F39EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wzl731/test/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344863",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344863",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751082",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2162",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T16:15:51.557",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en itsourcecode News Portal Project 1.0. Esto afecta una parte desconocida del archivo /admin/aboutus.PHP. Esta manipulación del argumento pagetitle causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:news_portal_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71E9B8-FE24-4FB4-92C9-B5EDFA612172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wzl731/test/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344864",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344864",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751083",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2163",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T17:15:58.210",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en D-Link DIR-600 hasta 2.15WWb02. Esta vulnerabilidad afecta código desconocido del archivo ssdp.cgi. Dicha manipulación del argumento HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID conduce a inyección de comandos. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser utilizado. Esta vulnerabilidad solo afecta productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.15wwb02",
            "matchCriteriaId" : "DA05704C-5CF2-4726-A4E8-51A29DFD3DA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A8637C-BD16-4B96-A1DA-34529F3169D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LonTan0/CVE/blob/main/Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi%20of%20D-Link%20DIR%E2%80%91600.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LonTan0/CVE/blob/main/Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi%20of%20D-Link%20DIR%E2%80%91600.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344865",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344865",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2164",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T17:15:58.410",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing a manipulation of the argument File results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en detronetdip E-commerce 1.0.0. Este problema afecta un procesamiento desconocido del archivo /seller/assets/backend/profile/addadhar.PHP. Realizar una manipulación del argumento File resulta en una carga sin restricciones. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado para ataques. Se informó al proyecto del problema con antelación a través de un informe de problemas, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:detronetdip:e-commerce:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36062CE-323B-47C8-BFD8-BC932DBD1A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Nixon-H/PHP-Unrestricted-Upload-RCE",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/detronetdip/E-commerce/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/detronetdip/E-commerce/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344866",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344866",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751853",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2165",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T17:15:58.593",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/add_seller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en detronetdip E-commerce 1.0.0. Se ve afectada una función desconocida del archivo /Admin/assets/backend/seller/add_seller.PHP del componente Punto final de creación de cuenta. La ejecución de una manipulación del argumento email puede llevar a una falta de autenticación. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:detronetdip:e-commerce:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36062CE-323B-47C8-BFD8-BC932DBD1A52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Nixon-H/Unauthenticated-Admin-Account-Creation",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/detronetdip/E-commerce/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/detronetdip/E-commerce/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344867",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344867",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751857",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2166",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T17:15:58.787",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en code-projects Online Reviewer System 1.0. El elemento afectado es una función desconocida del archivo /login/index.php del componente Login. La manipulación del argumento username/password conduce a inyección SQL. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/liaoliao-hla/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344868",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344868",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751858",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2167",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T17:15:58.970",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Totolink WA300 5.2cu.7112_B20190227. El elemento afectado es la función setAPNetwork del archivo /cgi-bin/cstecgi.cgi. La manipulación del argumento Ipaddr resulta en inyección de comandos del sistema operativo. El ataque puede realizarse de forma remota. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:wa300_firmware:5.2cu.7112_b20190227:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F137FA6-A9D2-4C23-9B05-F63C5A111CDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:wa300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B6EA54A-C245-41A8-9FF1-2455D3CCA85E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/36",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344869",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344869",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752063",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2168",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T18:15:48.290",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DWR-M921 1.1.50. This affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en D-Link DWR-M921 1.1.50. Esto afecta a la función sub_419920 del archivo /boafrm/formLtefotaUpgradeQuectel. Esta manipulación del argumento fota_url provoca inyección de comandos. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m921_firmware:1.1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCABFE8-93E0-484A-8603-DF3F77DD8C31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CACEA2C-88E1-481F-B864-CFF44B72FC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344870",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344870",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748838",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2169",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T18:15:48.490",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DWR-M921 1.1.50. This impacts an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en D-Link DWR-M921 1.1.50. Esto afecta a una función desconocida del archivo /boafrm/formLtefotaUpgradeFibocom. Tal manipulación del argumento fota_url conduce a una inyección de comandos. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m921_firmware:1.1.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCABFE8-93E0-484A-8603-DF3F77DD8C31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CACEA2C-88E1-481F-B864-CFF44B72FC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344871",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344871",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748930",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2171",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:20.257",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Online Student Management System 1.0. Afectada es una función desconocida del archivo accounts.PHP del componente Login. Realizando una manipulación del argumento username/password resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F072AFC-3156-426B-ADDF-E4B0AE7906C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749233",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754641",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2172",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:21.240",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Online Application System for Admission 1.0. Affected by this vulnerability is an unknown functionality of the file enrollment/index.php of the component Login Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en code-projects Online Application System for Admission 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo enrollment/index.php del componente Login Endpoint. Ejecutar una manipulación puede llevar a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_application_system_for_admission:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A782A7-7B28-4ABE-9531-A28969E64D67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344873",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344873",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749253",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2173",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:21.420",
      "lastModified" : "2026-02-11T18:39:47.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en code-projects Online Examination System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo login.PHP. La manipulación del argumento username/password conduce a inyección SQL. El ataque puede ser iniciado remotamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_examination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C25C55-3F57-4D4E-99A4-068A64ECA280"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344874",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344874",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749255",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2174",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:21.597",
      "lastModified" : "2026-02-11T18:39:15.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Contact Management System 1.0. This affects an unknown part of the component CRUD Endpoint. The manipulation of the argument ID results in improper authentication. The attack may be launched remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en code-projects Contact Management System 1.0. Esto afecta una parte desconocida del componente CRUD Endpoint. La manipulación del argumento ID resulta en autenticación impropia. El ataque puede ser lanzado remotamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:contact_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFD3C66-D1B2-4ACB-8917-1A2CBC530067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344875",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344875",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2175",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:21.773",
      "lastModified" : "2026-02-11T18:38:16.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420618 of the file /goform/set_upnp. This manipulation of the argument upnp_enable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en D-Link DIR-823X 250416. Esta vulnerabilidad afecta a la función sub_420618 del archivo /goform/set_upnp. Esta manipulación del argumento upnp_enable provoca inyección de comandos del sistema operativo. Es posible la explotación remota del ataque. El exploit se ha puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/31",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344876",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344876",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749263",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2176",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:21.950",
      "lastModified" : "2026-02-11T18:37:50.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem[0] leads to sql injection. The attack can be executed remotely."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en el Sistema de Gestión de Contactos 1.0 de code-projects. Este problema afecta a un procesamiento desconocido del archivo index.py. Dicha manipulación del argumento selecteditem[0] conduce a inyección SQL. El ataque puede ejecutarse de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:contact_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFD3C66-D1B2-4ACB-8917-1A2CBC530067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344877",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344877",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2177",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:22.130",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Prison Management System 1.0. El elemento afectado es una función desconocida del componente Login. La manipulación conduce a la fijación de sesión. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fast5:prison_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438558E0-8BD5-473B-877C-825148C1813E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hater-us/CVE/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344880",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344880",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749485",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2178",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T19:16:22.313",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in r-huijts xcode-mcp-server up to f3419f00117aa9949e326f78cc940166c88f18cb. This affects the function registerXcodeTools of the file src/tools/xcode/index.ts of the component run_lldb. The manipulation of the argument args results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The patch is identified as 11f8d6bacadd153beee649f92a78a9dad761f56f. Applying a patch is advised to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en r-huijts xcode-mcp-server hasta f3419f00117aa9949e326f78cc940166c88f18cb. Esto afecta a la función registerXcodeTools del archivo src/tools/xcode/index.ts del componente run_lldb. La manipulación del argumento args resulta en inyección de comandos. Es posible lanzar el ataque de forma remota. El exploit ha sido hecho público y podría ser utilizado. Este producto adopta el enfoque de lanzamientos continuos para proporcionar entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas y actualizadas no están disponibles. El parche se identifica como 11f8d6bacadd153beee649f92a78a9dad761f56f. Se aconseja aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:r-huijts:xcode_mcp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-08-26",
            "matchCriteriaId" : "057F14A1-F47D-433F-A599-C9661A365C94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/r-huijts/xcode-mcp-server/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/r-huijts/xcode-mcp-server/commit/11f8d6bacadd153beee649f92a78a9dad761f56f",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/r-huijts/xcode-mcp-server/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/r-huijts/xcode-mcp-server/issues/13#issue-3878065790",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344881",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344881",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749569",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2179",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T20:15:50.047",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en PHPGurukul Hospital Management System 4.0. Esto impacta una función desconocida del archivo /admin/manage-users.php. Esta manipulación del argumento ID causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:hospital_management_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA36E354-4DBF-4BE4-9BC4-CB00C6771BAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Shaon-Xis/PHPGurukul-HMS-SQLi-PoC/tree/main",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Shaon-Xis/PHPGurukul-HMS-SQLi-PoC/tree/main#4-proof-of-concept-reproduction-steps",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344882",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344882",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2180",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T20:15:51.043",
      "lastModified" : "2026-02-10T14:43:41.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda RX3 16.03.13.11. Afectada es una función desconocida del archivo /goform/fast_setting_wifi_set. Tal manipulación del argumento ssid_5g conduce a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:rx3_firmware:16.03.13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584AA720-0200-40C5-9BE4-80CFE253D0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:rx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CB413F-F1C3-492C-B966-C6BEE5B9FCE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344883",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344883",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2181",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T20:15:51.217",
      "lastModified" : "2026-02-10T14:43:33.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Tenda RX3 16.03.13.11. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /goform/openSchedWifi. Realizar una manipulación del argumento schedStartTime/schedEndTime resulta en un desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit ha sido publicado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:rx3_firmware:16.03.13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584AA720-0200-40C5-9BE4-80CFE253D0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:rx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CB413F-F1C3-492C-B966-C6BEE5B9FCE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344884",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344884",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749710",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2182",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T20:15:51.393",
      "lastModified" : "2026-02-10T15:10:54.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. Executing a manipulation of the argument passwd1 can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UTT ?? 521G 3.1.1-190816. Afectada por este problema es la función doSystem del archivo /goform/setSysAdm. La ejecución de una manipulación del argumento passwd1 puede conducir a una inyección de comandos. El ataque puede ser lanzado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:521g_firmware:3.1.1-190816:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D382FB6A-F840-4E88-8F4D-B09C18121BF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:521g:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E57349-DA71-4E3F-BCD1-C14EA9B574FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344885",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344885",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749712",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2183",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T20:15:51.573",
      "lastModified" : "2026-02-24T14:45:10.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This affects an unknown part of the file /restructured/csv.php. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The code repository of the project has not been active for many years."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en el Sistema de Generación de Certificados de Great Developers hasta 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. Esto afecta una parte desconocida del archivo /restructured/csv.PHP. La manipulación conduce a una carga sin restricciones. La explotación remota del ataque es posible. Este producto sigue un enfoque de lanzamiento continuo para la entrega continua, por lo que no se proporcionan detalles de la versión para las versiones afectadas o actualizadas. El repositorio de código del proyecto no ha estado activo durante muchos años."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greatdevelopers:certificate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-10-16",
            "matchCriteriaId" : "7360FD75-8AE3-46E7-932F-4C4D22356E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344886",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344886",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749713",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2184",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T21:15:47.140",
      "lastModified" : "2026-02-24T14:41:22.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file /restructured/csv.php. The manipulation of the argument photo results in os command injection. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The code repository of the project has not been active for many years."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en el sistema de generación de certificados de Great Developers hasta 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. Esta vulnerabilidad afecta a código desconocido del archivo /restructured/csv.PHP. La manipulación del argumento photo resulta en inyección de comandos del sistema operativo. El ataque puede ejecutarse de forma remota. Este producto implementa un lanzamiento continuo para la entrega constante, lo que significa que la información de la versión para las versiones afectadas o actualizadas no está disponible. El repositorio de código del proyecto no ha estado activo durante muchos años."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:greatdevelopers:certificate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2017-10-16",
            "matchCriteriaId" : "7360FD75-8AE3-46E7-932F-4C4D22356E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344887",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344887",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2185",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T21:15:48.120",
      "lastModified" : "2026-02-10T14:54:35.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda RX3 16.03.13.11. This issue affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering Configuration Endpoint. This manipulation of the argument devName/mac causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Tenda RX3 16.03.13.11. Este problema afecta a la función set_device_name del archivo /goform/setBlackRule del componente MAC Filtering Configuration Endpoint. Esta manipulación del argumento devName/mac causa un desbordamiento de búfer basado en pila. El ataque puede llevarse a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:rx3_firmware:16.03.13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584AA720-0200-40C5-9BE4-80CFE253D0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:rx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CB413F-F1C3-492C-B966-C6BEE5B9FCE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344888",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344888",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2186",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T21:15:48.297",
      "lastModified" : "2026-02-10T14:54:48.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Tenda RX3 16.03.13.11. Afectada es la función fromSetIpMacBind del archivo /goform/SetIpMacBind. Dicha manipulación de la lista de argumentos conduce a un desbordamiento de búfer basado en pila. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:rx3_firmware:16.03.13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584AA720-0200-40C5-9BE4-80CFE253D0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:rx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CB413F-F1C3-492C-B966-C6BEE5B9FCE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344889",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344889",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2187",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T21:15:48.473",
      "lastModified" : "2026-02-10T14:54:57.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manipulation of the argument list results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Tenda RX3 16.03.13.11. El elemento afectado es la función set_qosMib_list del archivo /goform/formSetQosBand. Realizar una manipulación del argumento list resulta en un desbordamiento de búfer basado en pila. Es posible iniciar el ataque de forma remota. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:rx3_firmware:16.03.13.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584AA720-0200-40C5-9BE4-80CFE253D0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:rx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CB413F-F1C3-492C-B966-C6BEE5B9FCE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344890",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344890",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2188",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T22:15:50.973",
      "lastModified" : "2026-02-10T14:57:33.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub_446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en UTT ?? 521G 3.1.1-190816. El elemento afectado es la función sub_446B18 del archivo /goform/formPdbUpConfig. La ejecución de una manipulación del argumento policyNames puede conducir a una inyección de comandos del sistema operativo. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:521g_firmware:3.1.1-190816:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D382FB6A-F840-4E88-8F4D-B09C18121BF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:521g:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E57349-DA71-4E3F-BCD1-C14EA9B574FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT521G/blob/main/RCE2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344891",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344891",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2189",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T22:15:51.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/report/index.php. The manipulation of the argument ay leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en itsourcecode School Management System 1.0. Esto afecta a una función desconocida del archivo /ramonsys/report/index.php. La manipulación del argumento ay conduce a inyección SQL. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/angtas/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344892",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344892",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2190",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T23:15:48.527",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/user/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en itsourcecode School Management System 1.0. Esto afecta una función desconocida del archivo /ramonsys/user/controller.php. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yyue02/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344893",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344893",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749783",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2191",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T23:15:49.483",
      "lastModified" : "2026-02-10T15:09:59.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Tenda AC9 15.03.06.42_multi. La función formGetDdosDefenceList está afectada. Esta manipulación del argumento security.ddos.map causa desbordamiento de búfer basado en pila. El ataque puede iniciarse remotamente. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac9_firmware:15.03.06.42_multi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE11228-D2BB-48CF-BFDA-E2AA73E73C3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344894",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344894",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2192",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T23:15:49.663",
      "lastModified" : "2026-02-10T15:09:48.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Tenda AC9 15.03.06.42_multi. Afectada por esta vulnerabilidad es la función formGetRebootTimer. Tal manipulación del argumento sys.schedulereboot.start_time/sys.schedulereboot.end_time conduce a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac9_firmware:5.03.06.42_multi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4DB0137-7B0F-46BF-9178-83D695531170"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda4.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344895",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344895",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749801",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2193",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-08T23:15:49.840",
      "lastModified" : "2026-02-11T18:37:22.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DI-7100G C1 24.04.18D1. Affected by this issue is the function set_jhttpd_info. Performing a manipulation of the argument usb_username results in command injection. Remote exploitation of the attack is possible."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en D-Link DI-7100G C1 24.04.18D1. Afectada por este problema es la función set_jhttpd_info. Realizar una manipulación del argumento usb_username resulta en inyección de comandos. La explotación remota del ataque es posible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:di-7100g_c1_firmware:24.04.18d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A158880-0B6A-4F44-812B-DD64AB28505B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:di-7100g_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B661C392-F07F-4BF5-B559-B00693C63E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_4.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344896",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344896",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749803",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2194",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T00:15:48.840",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function start_proxy_client_email. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en D-Link DI-7100G C1 24.04.18D1. Esto afecta a la función start_proxy_client_email. La ejecución de una manipulación puede conducir a una inyección de comandos. El ataque puede ejecutarse remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:di-7100g_c1_firmware:24.04.18d1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A158880-0B6A-4F44-812B-DD64AB28505B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:di-7100g_c1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B661C392-F07F-4BF5-B559-B00693C63E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344897",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344897",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2195",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T00:15:49.030",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en code-projects Online Reviewer System 1.0. Esta vulnerabilidad afecta código desconocido del archivo /system/system/admins/assessments/pretest/questions-view.PHP. La manipulación del argumento ID conduce a inyección SQL. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido revelado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344898",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344898",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750005",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2196",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T01:16:03.633",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Online Reviewer System 1.0. Este problema afecta algún procesamiento desconocido del archivo /system/system/admins/assessments/pretest/exam-update.PHP. La manipulación del argumento test_id resulta en inyección SQL. El ataque puede ser realizado desde remoto. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344899",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344899",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750011",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2197",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T01:16:03.857",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en code-projects Online Reviewer System 1.0. Afectada es una función desconocida del archivo /system/system/admins/assessments/pretest/exam-delete.php. Esta manipulación del argumento test_id causa inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344900",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344900",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750012",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2198",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T01:16:04.043",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en code-projects Online Reviewer System 1.0. El elemento afectado es una función desconocida del archivo /system/system/admins/assessments/pretest/loaddata.php. Dicha manipulación del argumento difficulty_id conduce a inyección SQL. Es posible lanzar el ataque remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344901",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344901",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2199",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T01:16:04.227",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en el sistema de revisión en línea code-projects 1.0. El elemento afectado es una función desconocida del archivo /reviewer/system/system/admins/manage/users/user-delete.PHP. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/6Justdododo6/CVE/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344902",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344902",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2200",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T02:16:03.557",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en heyewei JFinalCMS 5.0.0. Esto afecta a una función desconocida del archivo /admin/admin/save del componente API Endpoint. La ejecución de una manipulación puede conducir a cross-site scripting. El ataque puede lanzarse remotamente. El exploit se ha puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heyewei:jfinalcms:5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1184ABA1-685A-4CBF-9D88-616116DA2DAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zh-010/my_cve/blob/main/heyewei%20JFinalCMS%20XSS.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344903",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344903",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750098",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2201",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T02:16:03.793",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The code repository of the project has not been active for many years."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en ZeroWdd studentmanager hasta 2151560fc0a50ec00426785ec1e01a3763b380d9. Esto afecta a la función addLeave del archivo src/main/java/com/wdd/studentmanager/controller/LeaveController.java. La manipulación del argumento Reason for Leave conduce a cross-site scripting. El ataque puede ser iniciado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto utiliza un modelo de lanzamiento continuo para entregar actualizaciones continuas. Como resultado, la información de versión específica para las versiones afectadas o actualizadas no está disponible. El repositorio de código del proyecto no ha estado activo durante muchos años."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zerowdd:studentmanager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2375E47D-661D-4707-AC3E-A71C23BEF7FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.344904",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344904",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750217",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/clockw1se/lts9x9/mxgrzspnzmpxu7e7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2202",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T03:16:13.590",
      "lastModified" : "2026-02-10T15:07:30.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Tenda AC8 16.03.33.05. Afecta a la función fromSetWifiGusetBasic del archivo /goform/WifiGuestSet del componente httpd. La manipulación del argumento shareSpeed resulta en desbordamiento de búfer. El ataque puede lanzarse de forma remota. El exploit es ahora público y puede usarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac8_firmware:16.03.33.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2CCE05-8645-491A-878A-46F5EDDDF4C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81F1E48-0204-4478-A937-5D40CDD9E5E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/AC8/WifiGuestSet-sharespeed-bufferoverflow.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/AC8/WifiGuestSet-sharespeed-bufferoverflow.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344905",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344905",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750225",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2203",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T03:16:13.790",
      "lastModified" : "2026-02-10T15:07:15.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd Service. This manipulation of the argument timeZone causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Tenda AC8 16.03.33.05. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /goform/fast_setting_wifi_set del componente Embedded Httpd Service. Esta manipulación del argumento timeZone causa desbordamiento de búfer. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac8_firmware:16.03.33.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2CCE05-8645-491A-878A-46F5EDDDF4C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81F1E48-0204-4478-A937-5D40CDD9E5E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/AC8/fastsettingwifiset-timezome.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/AC8/fastsettingwifiset-timezome.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344906",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344906",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2210",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T03:16:13.970",
      "lastModified" : "2026-02-11T18:36:24.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en D-Link DIR-823X 250416. Esto afecta a la función sub_4211C8 del archivo /goform/set_filtering. Dicha manipulación conduce a la inyección de comandos del sistema operativo. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7C64E7-D64D-43DE-8A82-196E66F91F3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CE2627-49F3-4B6F-B48B-F52665C6B8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/34",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/user-attachments/files/25010265/Remote.Command.Injection.in.D-Link.DIR-823X.via._goform_set_filtering.zip",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344925",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344925",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752165",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2211",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T04:15:50.623",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Administrator/PHP/AdminDeleteCategory.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en code-projects Online Music Site 1.0. Afectada es una función desconocida del archivo /Administrator/PHP/AdminDeleteCategory.php. La ejecución de una manipulación del argumento ID puede llevar a inyección SQL. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344927",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344927",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2212",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T04:15:50.810",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en code-projects Online Music Site 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /Administrator/PHP/AdminEditCategory.php. La manipulación del argumento ID conduce a inyección SQL. El ataque es posible de llevar a cabo remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344928",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344928",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1615",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-02-09T05:16:24.353",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle untrusted data safely. An attacker can exploit this vulnerability by supplying a malicious JSON Path expression that, when evaluated, executes arbitrary JavaScript code, leading to Remote Code Execution in Node.js environments or Cross-site Scripting (XSS) in browser contexts. This affects all methods that evaluate JSON Paths against objects, including .query, .nodes, .paths, .value, .parent, and .apply."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete jsonpath son vulnerables a Inyección de Código Arbitrario a través de la evaluación insegura de expresiones JSON Path proporcionadas por el usuario. La biblioteca se basa en el módulo static-eval para procesar la entrada JSON Path, el cual no está diseñado para manejar datos no confiables de forma segura. Un atacante puede explotar esta vulnerabilidad al proporcionar una expresión JSON Path maliciosa que, al ser evaluada, ejecuta código JavaScript arbitrario, lo que lleva a Ejecución Remota de Código en entornos Node.js o Cross-site scripting (XSS) en contextos de navegador. Esto afecta a todos los métodos que evalúan JSON Paths contra objetos, incluyendo .query, .nodes, .paths, .value, .parent y .apply."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dchester/jsonpath/blob/c1dd8ec74034fb0375233abb5fdbec51ac317b4b/lib/handlers.js%23L243",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/dchester/jsonpath/commit/b61111f07ac1a8d0f3133b5fc51438ecb76a6c39",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15141219",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-JSONPATH-13645034",
        "source" : "report@snyk.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2213",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T05:16:24.630",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminAddAlbum.php. The manipulation of the argument txtimage results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en code-projects Online Music Site 1.0. Afectada por este problema está alguna funcionalidad desconocida del archivo /Administrator/PHP/AdminAddAlbum.php. La manipulación del argumento txtimage resulta en una carga sin restricciones. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344929",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344929",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2214",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T05:16:24.903",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txtalbum causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en code-projects para el Plugin 1.0. Esto afecta a una parte desconocida del archivo /Administrator/PHP/AdminAddAlbum.php. Esta manipulación del argumento txtalbum causa cross site scripting. Es posible iniciar el ataque remotamente. El exploit se ha hecho público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_music_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01F25-5D13-4657-A849-2AA9890C8510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yuji0903/silver-guide/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344930",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344930",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752602",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2215",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T05:16:25.100",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRET_KEY results in use of default cryptographic key. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en rachelos WeRSS we-mp-rss hasta la versión 1.4.8. Este problema afecta a un procesamiento desconocido del archivo core/auth.py del componente JWT Handler. Realizar una manipulación del argumento SECRET_KEY resulta en el uso de una clave criptográfica predeterminada. El ataque puede iniciarse de forma remota. El ataque se considera de alta complejidad. La explotabilidad se evalúa como difícil. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1394"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.344932",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344932",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752756",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.notion.so/WeRSS-Weak-JWT-Key-Leading-to-Authentication-Bypass-2feea92a3c41803faadae58327facd7b",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22613",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2026-02-09T06:16:24.360",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton \n\nNetwork M3\n\n which is available on the Eaton download center."
      }, {
        "lang" : "es",
        "value" : "El mecanismo de verificación de identidad del servidor para la actualización del firmware realizada a través del shell de comandos está implementado de forma insegura, lo que podría permitir a un atacante realizar un ataque man-in-the-middle. Este problema de seguridad ha sido solucionado en la última versión del firmware de Eaton Network M3, que está disponible en el centro de descargas de Eaton."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1002.pdf",
        "source" : "CybersecurityCOE@eaton.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2216",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T06:16:24.600",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function download_export_file of the file apis/tools.py. Executing a manipulation of the argument filename can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en rachelos WeRSS we-mp-rss hasta la versión 1.4.8. La función afectada es download_export_file del archivo apis/tools.py. La ejecución de una manipulación del argumento filename puede conducir a un salto de ruta. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.344933",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344933",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752763",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.notion.so/WeRSS-Path-Traversal-Vulnerability-Leads-to-Arbitrary-File-Read-2feea92a3c41804da1f1f5ddbf86e655",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2217",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T06:16:24.817",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manage_user.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en itsourcecode Event Management System 1.0. El elemento afectado es una función desconocida del archivo /admin/manage_user.php. La manipulación del argumento ID resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:event_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0334F94B-DD03-4A2C-B1E5-F6FF0EE78C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wan1yan/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752829",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2218",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T06:16:25.013",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystemAdmin of the component alphapd. This manipulation of the argument AdminID causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en D-Link DCS-933L hasta la versión 1.14.11. Esto afecta una función desconocida del archivo /setSystemAdmin del componente alphapd. Esta manipulación del argumento AdminID provoca inyección de comandos. La explotación remota del ataque es posible. El exploit se ha divulgado públicamente y puede ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no cuentan con soporte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-933l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.11",
            "matchCriteriaId" : "D33C282C-53EB-41C0-A5AC-A7DCD8BD520F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-933l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414352B6-6760-4D78-91FC-5198F62981E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753247",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0870",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-09T07:16:17.697",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "MacroHub desarrollado por GIGABYTE tiene una vulnerabilidad de escalada de privilegios local. Debido a que la aplicación MacroHub lanza aplicaciones externas con privilegios inadecuados, permitiendo a atacantes locales autenticados ejecutar código arbitrario con privilegios de SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gigabyte.com/Support/Security/2362",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/en/cp-139-10702-b40aa-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10701-fc9e0-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1868",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-09T07:16:18.250",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure template expansion of user supplied data via crafted Duo Agent Platform Flow definitions. This vulnerability could be used to cause Denial of Service or gain code execution on the Gateway. This has been fixed in versions 18.6.2, 18.7.1, and 18.8.1 of the GitLab AI Gateway."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado una vulnerabilidad en el componente Duo Workflow Service de GitLab AI Gateway que afecta a todas las versiones de AI Gateway desde la 18.1.6, 18.2.6, 18.3.1 hasta la 18.6.1, 18.7.0 y 18.8.0, en las que AI Gateway era vulnerable a la expansión insegura de plantillas de datos proporcionados por el usuario a través de definiciones de flujo (Flow) de Duo Agent Platform manipuladas. Esta vulnerabilidad podría utilizarse para causar denegación de servicio o para obtener ejecución de código en el Gateway. Esto se ha corregido en las versiones 18.6.2, 18.7.1 y 18.8.1 de GitLab AI Gateway."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/06/patch-release-gitlab-ai-gateway-18-8-1-released/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/modelops/applied-ml/code-suggestions/ai-assist/-/work_items/1850",
        "source" : "cve@gitlab.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24466",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-09T07:16:18.463",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege."
      }, {
        "lang" : "es",
        "value" : "Productos proporcionados por Oki Electric Industry Co., Ltd. y sus productos OEM (Ricoh Co., Ltd., Murata Machinery, Ltd.) registran servicios de Windows con rutas de archivo sin comillas. Un usuario con permiso de escritura en el directorio raíz de la unidad del sistema puede ejecutar código arbitrario con privilegios de SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2026-000002",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN55395471/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.muratec.jp/ce/support/announce_sp_20260209.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.oki.com/jp/printing/support/important-information/2026/info-260209/index.html",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.oki.com/jp/product_security/sa_2026_0001_en.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2220",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T07:16:18.687",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en code-projects Online Reviewer System 1.0. Esto afecta una función desconocida del archivo /system/system/admins/assessments/pretest/btn_functions.php. Dicha manipulación del argumento difficulty_id conduce a inyección SQL. El ataque puede ser ejecutado remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/20",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2221",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T07:16:18.923",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en code-projects Online Reviewer System 1.0. Afecta a una función desconocida del archivo /login/index.php del componente Login. Realizar una manipulación del argumento Username resulta en inyección SQL. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/22",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344938",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344938",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750024",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22903",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2026-02-09T08:16:10.103",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd server, causing it to crash and potentially enabling remote code execution due to missing stack protections."
      }, {
        "lang" : "es",
        "value" : "Un atacante remoto no autenticado puede enviar una solicitud HTTP manipulada que contiene una cookie SESSIONID excesivamente larga. Esto puede desencadenar un desbordamiento de búfer de pila en el servidor lighttpd modificado, lo que provoca su caída y potencialmente permite la ejecución remota de código debido a la falta de protecciones de pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://certvde.com/de/advisories/VDE-2026-004",
        "source" : "info@cert.vde.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22904",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2026-02-09T08:16:11.387",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and possible remote code execution."
      }, {
        "lang" : "es",
        "value" : "El manejo inadecuado de la longitud al analizar múltiples campos de cookie (incluido TRACKID) permite a un atacante remoto no autenticado enviar valores de cookie de tamaño excesivo y desencadenar un desbordamiento de búfer de pila, lo que resulta en una condición de denegación de servicio y posible ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://certvde.com/de/advisories/VDE-2026-004",
        "source" : "info@cert.vde.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22905",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2026-02-09T08:16:11.560",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration downloads."
      }, {
        "lang" : "es",
        "value" : "Un atacante remoto no autenticado puede eludir la autenticación explotando una validación de URI insuficiente y utilizando secuencias de salto de ruta (p. ej., /js/../cgi-bin/post.cgi), obteniendo acceso no autorizado a puntos finales CGI protegidos y descargas de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://certvde.com/de/advisories/VDE-2026-004",
        "source" : "info@cert.vde.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22906",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2026-02-09T08:16:11.723",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass."
      }, {
        "lang" : "es",
        "value" : "Las credenciales de usuario se almacenan utilizando cifrado AES?ECB con una clave codificada de forma rígida. Un atacante remoto no autenticado que obtenga el archivo de configuración puede descifrar y recuperar nombres de usuario y contraseñas en texto plano, especialmente cuando se combina con la omisión de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "references" : [ {
        "url" : "https://certvde.com/de/advisories/VDE-2026-004",
        "source" : "info@cert.vde.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2222",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T08:16:11.887",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en code-projects Online Reviewer System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /system/system/admins/manage/users/btn_functions.PHP. La ejecución de una manipulación del argumento firstname puede llevar a cross site scripting. El ataque puede ser realizado de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344939",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344939",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750026",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2223",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T08:16:12.090",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some unknown functionality of the file /system/system/students/assessments/pretest/take/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en code-projects Online Reviewer System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /system/system/students/assessments/pretest/take/index.php. La manipulación del argumento ID conduce a inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344940",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344940",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750027",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2234",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-09T08:16:12.287",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "C&Cm@il developed by HGiga  has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content."
      }, {
        "lang" : "es",
        "value" : "C&amp;Cm@il desarrollado por HGiga tiene una vulnerabilidad de autenticación faltante, permitiendo a atacantes remotos no autenticados leer y modificar el contenido del correo de cualquier usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10703-3d02f-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2235",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-09T08:16:12.463",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents."
      }, {
        "lang" : "es",
        "value" : "C&amp;Cm@il desarrollado por HGiga tiene una vulnerabilidad de inyección SQL, permitiendo a atacantes remotos autenticados inyectar comandos SQL arbitrarios para leer el contenido de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10703-3d02f-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2236",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-09T08:16:12.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "C&Cm@il developed by HGiga  has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents."
      }, {
        "lang" : "es",
        "value" : "C&amp;Cm@il desarrollado por HGiga tiene una vulnerabilidad de inyección SQL, permitiendo a atacantes remotos no autenticados inyectar comandos SQL arbitrarios para leer el contenido de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10703-3d02f-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25904",
      "sourceIdentifier" : "reefs@jfrog.com",
      "published" : "2026-02-09T09:16:33.850",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the \"mcp-run-python\" project is archived and unlikely to receive a fix."
      }, {
        "lang" : "es",
        "value" : "La herramienta Pydantic-AI MCP Run Python configura el sandbox de Deno con una configuración excesivamente permisiva que permite al código Python subyacente acceder a la interfaz localhost del host para realizar ataques SSRF. Nota - el proyecto 'mcp-run-python' está archivado y es poco probable que reciba una solución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "reefs@jfrog.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "reefs@jfrog.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.jfrog.com/vulnerabilities/mcp-run-python-deno-ssrf-jfsa-2026-001653029/",
        "source" : "reefs@jfrog.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25905",
      "sourceIdentifier" : "reefs@jfrog.com",
      "published" : "2026-02-09T09:16:34.030",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment. This may result in an attacker hijacking the MCP server - for malicious purposes including MCP tool shadowing. Note - the \"mcp-run-python\" project is archived and unlikely to receive a fix."
      }, {
        "lang" : "es",
        "value" : "El código Python ejecutado por 'runPython' o 'runPythonAsync' no está aislado del resto del código JS, permitiendo que cualquier código Python utilice las API de Pyodide para modificar el entorno JS. Esto puede resultar en que un atacante secuestre el servidor MCP - con fines maliciosos, incluida la suplantación de herramientas MCP. Nota - el proyecto \"mcp-run-python\" está archivado y es poco probable que reciba una solución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "reefs@jfrog.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "reefs@jfrog.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-653"
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.jfrog.com/vulnerabilities/mcp-run-python-lack-of-isolation-mcp-takeover-jfsa-2026-001653030/",
        "source" : "reefs@jfrog.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-09T09:16:34.193",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when \"Block remote images\" is used, does not block SVG feImage."
      }, {
        "lang" : "es",
        "value" : "Roundcube Webmail antes de 1.5.13 y 1.6 antes de 1.6.13, cuando se usa 'Bloquear imágenes remotas', no bloquea SVG feImage."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-420"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/roundcube/roundcubemail/commit/26d7677",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://news.ycombinator.com/item?id=46937012",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://nullcathedral.com/posts/2026-02-08-roundcube-svg-feimage-remote-image-bypass/",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2224",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T09:16:34.403",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /system/system/admins/manage/users/btn_functions.php. The manipulation of the argument firstname results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en code-projects Online Reviewer System 1.0. Esto afecta una parte desconocida del archivo /system/system/admins/manage/users/btn_functions.php. La manipulación del argumento firstname resulta en cross site scripting. Es posible lanzar el ataque remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344941",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344941",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750028",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2225",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T09:16:34.590",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admin/index.php of the component Administrator Login. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en itsourcecode News Portal Project 1.0. Esta vulnerabilidad afecta código desconocido del archivo /admin/index.php del componente Administrator Login. Esta manipulación del argumento email causa inyección SQL. El ataque puede iniciarse remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:news_portal_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71E9B8-FE24-4FB4-92C9-B5EDFA612172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wan1yan/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344942",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344942",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753402",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754405",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23903",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-09T10:15:57.520",
      "lastModified" : "2026-02-11T18:30:59.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Alternate Name vulnerability in Apache Shiro.\n\nThis issue affects Apache Shiro: before 2.0.7.\n\nUsers are recommended to upgrade to version 2.0.7, which fixes the issue.\n\nThe issue only effects static files. If static files are served from a case-insensitive filesystem,\nsuch as default macOS setup, static files may be accessed by varying the case of the filename in the request.\nIf only lower-case (common default) filters are present in Shiro, they may be bypassed this way.\n\nShiro 2.0.7 and later has a new parameters to remediate this issue\nshiro.ini: filterChainResolver.caseInsensitive = true\napplication.propertie: shiro.caseInsensitive=true\n\nShiro 3.0.0 and later (upcoming) makes this the default."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación por nombre alternativo en Apache Shiro.\n\nEste problema afecta a Apache Shiro: antes de la versión 2.0.7.\n\nSe recomienda a los usuarios actualizar a la versión 2.0.7, que soluciona el problema.\n\nEl problema solo afecta a los archivos estáticos. Si los archivos estáticos se sirven desde un sistema de archivos que no distingue entre mayúsculas y minúsculas, como la configuración predeterminada de macOS, se puede acceder a los archivos estáticos variando el uso de mayúsculas y minúsculas del nombre de archivo en la solicitud. Si solo hay filtros en minúsculas (valor predeterminado común) en Shiro, pueden ser omitidos de esta manera.\n\nShiro 2.0.7 y versiones posteriores tienen nuevos parámetros para solucionar este problema\nshiro.ini: filterChainResolver.caseInsensitive = true\napplication.propertie: shiro.caseInsensitive=true\n\nShiro 3.0.0 y versiones posteriores (próximas) lo convierten en el valor predeterminado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-289"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "9E1B2B45-F100-4693-9F70-FE8D342853A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/5jjf0hnjcol58z2m5y255c7scz1lnp8k",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2226",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T10:15:57.683",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.php of the component ZIP File Handler. Such manipulation of the argument sql_filename leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en DouPHP hasta 1.9. Este problema afecta a un procesamiento desconocido del archivo /admin/file.php del componente ZIP File Handler. Dicha manipulación del argumento sql_filename conduce a una carga sin restricciones. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:douco:douphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "B6DF9F4E-A994-42F7-844A-213436013969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pengchengwangli/MyCVE/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344943",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344943",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753441",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2227",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T10:15:57.880",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin. Performing a manipulation of the argument AdminID results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DCS-931L hasta la versión 1.13.0. La función impactada es doSystem del archivo /setSystemAdmin. Realizar una manipulación del argumento AdminID resulta en inyección de comandos. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría usarse. Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-931l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.00",
            "matchCriteriaId" : "74D022B7-6811-4C16-BE64-D9F29AD56D8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-931l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1F2866-F7C1-4EC5-8C46-3DE78CD04AFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/CVE/blob/main/D-Link%20DCS931L1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344944",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344944",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753450",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753980",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22922",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-09T11:16:13.187",
      "lastModified" : "2026-02-11T18:30:44.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access. \n\nUsers are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this issue."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.1.0 a 3.1.6 de Apache Airflow contienen una falla de autorización que puede permitir a un usuario autenticado con permisos personalizados limitados al acceso a tareas ver los registros de tareas sin tener acceso a los registros de tareas.\n\nSe recomienda a los usuarios actualizar a Apache Airflow 3.1.7 o posterior, lo que resuelve este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-648"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "ECDF2B6E-5E76-479A-A5F5-8A867A5176FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/60412",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/gdb7vffhpmrj5hp1j0oj1j13o4vmsq40",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/09/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24098",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-09T11:16:14.660",
      "lastModified" : "2026-03-11T13:51:59.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have access to. \n\nUsers are advised to upgrade to 3.1.7 or later, which resolves this issue"
      }, {
        "lang" : "es",
        "value" : "Apache Airflow versiones anteriores a la 3.1.7, tiene una vulnerabilidad que permite a los usuarios autenticados de la interfaz de usuario (UI) con permiso para uno o más DAGs específicos ver errores de importación generados por otros DAGs a los que no tenían acceso.\n\nSe aconseja a los usuarios actualizar a la versión 3.1.7 o posterior, lo que resuelve este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "4C0114E8-30C3-477B-9AA9-2B388731C60A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/60801",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/nx96435v77xdst7ls5lk57kqvqyj095x",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/09/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25846",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-09T11:16:14.787",
      "lastModified" : "2026-02-18T20:48:14.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs"
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack antes de 2025.3.119033 los tokens de acceso podrían ser expuestos en los registros del buzón."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.119033",
            "matchCriteriaId" : "CC1847FB-B46E-4DF2-9466-8C942DB90519"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25847",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-09T11:16:15.003",
      "lastModified" : "2026-02-18T17:56:53.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible"
      }, {
        "lang" : "es",
        "value" : "En JetBrains PyCharm antes de 2025.3.2 un XSS basado en DOM en la página del visor de Jupyter era posible"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:pycharm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.2",
            "matchCriteriaId" : "36BCB182-4C2F-4C50-8A9A-BDF148B39C0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25848",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-09T11:16:15.150",
      "lastModified" : "2026-02-18T17:56:13.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible"
      }, {
        "lang" : "es",
        "value" : "En JetBrains Hub antes de 2025.3.119807 la omisión de autenticación permitiendo acciones administrativas era posible"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.119807",
            "matchCriteriaId" : "5022BCE5-1AB2-49DE-B76C-1A18AFC5CD69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0632",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-09T12:15:57.603",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.12 via the 'saveDataSource' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin Fluent Forms Pro Add On Pack para WordPress es vulnerable a la falsificación de petición del lado del servidor en todas las versiones hasta la 6.1.12, inclusive, a través de la función 'saveDataSource'. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, realizar peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede utilizarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluentforms.com/docs/changelog/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fd3bf470-f966-454d-8df3-0dec4682e883?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1959",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-09T12:15:57.767",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the \n\n'descripción'\n\nparameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) almacenado en Loggro Pymes, a través del parámetro 'descripción' en el endpoint '/loggrodemo/jbrain/MaestraCuentasBancarias'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-loggro-pymes-web-application",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1960",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-09T12:15:57.940",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) almacenado en Loggro Pymes, a través del parámetro 'Facebook' en el endpoint '/loggrodemo/jbrain/ConsultaTerceros'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-loggro-pymes-web-application",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0398",
      "sourceIdentifier" : "security@open-xchange.com",
      "published" : "2026-02-09T15:16:11.360",
      "lastModified" : "2026-04-20T14:55:46.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor."
      }, {
        "lang" : "es",
        "value" : "Zonas manipuladas pueden llevar a un mayor uso de recursos y cadenas CNAME manipuladas pueden llevar a envenenamiento de caché en Recursor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@open-xchange.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.10",
            "matchCriteriaId" : "BCD53D74-E38B-4113-A5FD-880E7EA4EFA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.8",
            "versionEndExcluding" : "5.2.8",
            "matchCriteriaId" : "707F72F2-1B2F-4DFA-8421-DBDF47980A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.5",
            "matchCriteriaId" : "EE3FB5B9-EB60-473D-9C9D-39787C08BA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-01.html",
        "source" : "security@open-xchange.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24027",
      "sourceIdentifier" : "security@open-xchange.com",
      "published" : "2026-02-09T15:16:11.587",
      "lastModified" : "2026-04-20T14:55:39.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crafted zones can lead to increased incoming network traffic."
      }, {
        "lang" : "es",
        "value" : "Zonas elaboradas pueden llevar a un aumento del tráfico de red entrante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@open-xchange.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.10",
            "matchCriteriaId" : "BCD53D74-E38B-4113-A5FD-880E7EA4EFA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.8",
            "matchCriteriaId" : "0A9BDC0A-EA2A-4FAA-9E2B-8DDC3730FCBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.5",
            "matchCriteriaId" : "EE3FB5B9-EB60-473D-9C9D-39787C08BA1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-01.html",
        "source" : "security@open-xchange.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24095",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2026-02-09T16:16:00.767",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows users with the \"Use WATO\" permission to access the \"Analyze configuration\" page by directly navigating to its URL, bypassing the intended \"Access analyze configuration\" permission check. If these users also have the \"Make changes, perform actions\" permission, they can perform unauthorized actions such as disabling checks or acknowledging results."
      }, {
        "lang" : "es",
        "value" : "Aplicación indebida de permisos en las versiones de Checkmk 2.4.0 anteriores a 2.4.0p21, 2.3.0 anteriores a 2.3.0p43, y 2.2.0 (Fin de vida útil) permite a los usuarios con el permiso 'Usar WATO' acceder a la página 'Analizar configuración' navegando directamente a su URL, eludiendo la verificación del permiso prevista 'Acceder a analizar configuración'. Si estos usuarios también tienen el permiso 'Realizar cambios, ejecutar acciones', pueden realizar acciones no autorizadas como deshabilitar verificaciones o confirmar resultados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/19032",
        "source" : "security@checkmk.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2240",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T16:16:03.223",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in janet-lang janet up to 1.40.1. The impacted element is the function janetc_pop_funcdef of the file src/core/compile.c. Such manipulation leads to out-of-bounds read. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The name of the patch is 4dd08a4cdef5b1c42d9a2c19fc24412e97ef51d5. A patch should be applied to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en janet-lang janet hasta la versión 1.40.1. El elemento afectado es la función janetc_pop_funcdef del archivo src/core/compile.c. Dicha manipulación conduce a una lectura fuera de límites. El ataque debe llevarse a cabo localmente. El exploit ha sido divulgado al público y puede ser utilizado. El nombre del parche es 4dd08a4cdef5b1c42d9a2c19fc24412e97ef51d5. Se debería aplicar un parche para remediar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janet-lang:janet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40.1",
            "matchCriteriaId" : "D63D3EB2-96FF-4D2B-AD67-2DE091B2CC05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/janet-lang/janet/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/commit/4dd08a4cdef5b1c42d9a2c19fc24412e97ef51d5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1702#issuecomment-3790473369",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0123/blob/main/ja4/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753155",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21419",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-09T18:16:05.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability in the Installer and Service. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges"
      }, {
        "lang" : "es",
        "value" : "Versiones de Dell Display and Peripheral Manager (Windows) anteriores a la 2.2 contienen una vulnerabilidad de 'Resolución de Enlace Incorrecta Antes del Acceso a Archivos' ('Seguimiento de Enlaces') en el Instalador y el Servicio. Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de Privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000384542/dsa-2026-009",
        "source" : "security_alert@emc.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2241",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T18:16:08.660",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function os_strftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is named 0f285855f0e34f9183956be5f16e045f54626bff. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en janet-lang janet hasta 1.40.1. Esto afecta a la función os_strftime del archivo src/core/os.c. Realizar una manipulación resulta en una lectura fuera de límites. El ataque debe iniciarse desde una posición local. El exploit se ha hecho público y podría utilizarse. El parche se llama 0f285855f0e34f9183956be5f16e045f54626bff. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janet-lang:janet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40.1",
            "matchCriteriaId" : "D63D3EB2-96FF-4D2B-AD67-2DE091B2CC05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/janet-lang/janet/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/commit/0f285855f0e34f9183956be5f16e045f54626bff",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1701",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1701#event-4446770461",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0123/blob/main/ja3/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2242",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T18:16:08.857",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetc_if of the file src/core/specials.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called c43e06672cd9dacf2122c99f362120a17c34b391. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en janet-lang janet hasta la versión 1.40.1. Esto afecta a la función janetc_if del archivo src/core/specials.c. La ejecución de una manipulación puede llevar a una lectura fuera de límites. El ataque debe lanzarse localmente. El exploit ha sido divulgado públicamente y puede ser utilizado. Este parche se llama c43e06672cd9dacf2122c99f362120a17c34b391. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janet-lang:janet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40.1",
            "matchCriteriaId" : "D63D3EB2-96FF-4D2B-AD67-2DE091B2CC05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/janet-lang/janet/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/commit/c43e06672cd9dacf2122c99f362120a17c34b391",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0123/blob/main/ja2/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.344981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.344981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754495",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23948",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:47.627",
      "lastModified" : "2026-02-10T15:09:11.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, una vulnerabilidad de desreferencia de puntero NULL en rdp_write_logon_info_v2() permite a un servidor RDP malicioso bloquear el proxy de FreeRDP al enviar una PDU LogonInfoV2 especialmente diseñada con cbDomain=0 o cbUserName=0. Esta vulnerabilidad está corregida en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/4d44e3c097656a8b9ec696353647b0888ca45860",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6f3c-qvqq-2px5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:48.590",
      "lastModified" : "2026-02-10T15:06:24.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, video_timer puede enviar notificaciones al cliente después de que el canal de control se cierra, desreferenciando una devolución de llamada liberada y desencadenando un uso después de la liberación. Esta vulnerabilidad está corregida en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/e02e052f6692550e539d10f99de9c35a23492db2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4x6j-w49r-869g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24675",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:48.743",
      "lastModified" : "2026-02-10T15:05:31.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación libre del Protocolo de Escritorio Remoto. Antes de 3.22.0, urb_select_interface puede liberar la configuración MS del dispositivo en caso de error, pero el código posterior aún la desreferencia, lo que lleva a un uso después de la liberación en libusb_udev_select_interface. Esta vulnerabilidad se corrige en 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/d676518809c319eec15911c705c13536036af2ae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x9jr-99h2-g7mj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24676",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:48.890",
      "lastModified" : "2026-02-10T15:04:59.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using audin->format, leading to a use after free in audio_format_compatible. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, la renegociación del formato AUDIN libera la lista de formatos activos mientras el hilo de captura continúa usando audin-&gt;format, lo que lleva a un uso después de la liberación en audio_format_compatible. Esta vulnerabilidad está corregida en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/026b81ae5831ac1598d8f7371e0d0996fac7db00",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qh5p-frq4-pgxj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24677",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.043",
      "lastModified" : "2026-02-10T15:09:02.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, ecam_encoder_compress_h264 confía en las dimensiones controladas por el servidor y no valida el tamaño del búfer de origen, lo que lleva a una lectura fuera de límites en sws_scale. Esta vulnerabilidad está corregida en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/d2d4f449312ddafd4a4c6c8a4f856c7f0d44a3b5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xw37-j744-f8v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24678",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.190",
      "lastModified" : "2026-02-10T15:08:47.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, un hilo de captura envía respuestas de muestra utilizando una devolución de llamada de canal liberado después del cierre de un canal de dispositivo, lo que lleva a un uso después de la liberación en ecam_channel_write. Esta vulnerabilidad está corregida en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/f3ab1a16139036179d9852745fdade18fec11600",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6gvg-29wx-6v7h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24679",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.327",
      "lastModified" : "2026-02-10T15:08:26.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array indices without bounds checks, causing an out-of-bounds read in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, el cliente URBDRC utiliza números de interfaz proporcionados por el servidor como índices de matriz sin comprobaciones de límites, causando una lectura fuera de límites en libusb_udev_select_interface. Esta vulnerabilidad se corrige en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/2d563a50be17c1b407ca448b1321378c0726dd31",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jp4-67x6-gv7x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24680",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.477",
      "lastModified" : "2026-02-10T15:06:48.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, sdl_Pointer_New libera datos en caso de fallo, luego pointer_free llama a sdl_Pointer_Free y los libera de nuevo, lo que desencadena un ASan UAF. Esta vulnerabilidad se corrige en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/c42ecbd183b001e76bfc3614cddfad0034acc758",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j893-9wg8-33rc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24681",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.623",
      "lastModified" : "2026-02-10T15:06:04.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.22.0, las finalizaciones de transferencia masiva asíncronas pueden usar una devolución de llamada de canal liberado después del cierre del canal URBDRC, lo que lleva a un uso después de la liberación en urb_write_completion. Esta vulnerabilidad está corregida en la versión 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/414f701464929c217f2509bcbd6d2c1f00f7ed73",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ccvv-hg2w-6x9j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24682",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.763",
      "lastModified" : "2026-02-10T15:04:10.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio formats on parse failure (i + i), leading to out-of-bounds access in audio_formats_free. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de 3.22.0, audin_server_recv_formats libera un número incorrecto de formatos de audio al fallar el análisis (i + i), lo que lleva a un acceso fuera de límites en audio_formats_free. Esta vulnerabilidad está corregida en 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/1c5c74223179d425a1ce6dbbb6a3dd2a958b7aee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcw2-pqgw-mx6g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24683",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:49.910",
      "lastModified" : "2026-02-10T15:03:23.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. ainput_send_input_event almacena en caché channel_callback en una variable local y luego la usa sin sincronización; un cierre de canal concurrente puede liberar o reinicializar la devolución de llamada, lo que lleva a un uso después de la liberación. Antes de la 3.22.0, Esta vulnerabilidad está corregida en la 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/d9ca272dce7a776ab475e9b1a8e8c3d2968c8486",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-45pf-68pj-fg8q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24684",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:50.057",
      "lastModified" : "2026-02-10T15:02:32.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de 3.22.0, el hilo de reproducción asíncrono de RDPSND puede procesar PDUs en cola después de que el canal se cierra y el estado interno se libera, lo que lleva a un uso después de la liberación en rdpsnd_treat_wave. Esta vulnerabilidad está corregida en 3.22.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22.0",
            "matchCriteriaId" : "9E363251-2275-4F89-B397-67FE461B63A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24777",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T19:15:50.200",
      "lastModified" : "2026-02-11T18:28:40.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permission can lock and unlock users. This functionality should only be possible for users of the application, but they were not supposed to be able to lock application administrators. Due to a missing permission check this logic was not enforced. The problem was fixed in OpenProject 17.0.2The problem was fixed in OpenProject 17.0.2."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto y basado en la web. Antes de la versión 17.0.2, los usuarios con el permiso Gestionar Usuarios podían bloquear y desbloquear usuarios. Esta funcionalidad solo debería ser posible para los usuarios de la aplicación, pero no se suponía que pudieran bloquear a los administradores de la aplicación. Debido a una comprobación de permisos faltante, esta lógica no se aplicó. El problema se solucionó en OpenProject 17.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "3FA4C106-EEE3-4582-BE10-010975AE359B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-fq66-cwg6-qq69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1486",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-09T20:15:55.717",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verify if an Identity Provider (IdP) is enabled before issuing tokens. The issuer lookup mechanism (lookupIdentityProviderFromIssuer) retrieves the IdP configuration but does not filter for isEnabled=false. If an administrator disables an IdP (e.g., due to a compromise or offboarding), an entity possessing that IdP's signing key can still generate valid JWT assertions that Keycloak accepts, resulting in the issuance of valid access tokens."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Keycloak. Existe una vulnerabilidad en el flujo jwt-authorization-grant donde el servidor no verifica si un Proveedor de Identidad (IdP) está habilitado antes de emitir tokens. El mecanismo de búsqueda del emisor (lookupIdentityProviderFromIssuer) recupera la configuración del IdP pero no filtra por isEnabled=false. Si un administrador deshabilita un IdP (por ejemplo, debido a un compromiso o una baja), una entidad que posea la clave de firma de ese IdP aún puede generar aserciones JWT válidas que Keycloak acepta, lo que resulta en la emisión de tokens de acceso válidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1486",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433347",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1529",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-09T20:15:55.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en Keycloak. Un atacante puede explotar esta vulnerabilidad modificando el ID de la organización y el correo electrónico de destino dentro de la carga útil (payload) de un JSON Web Token (JWT) de un token de invitación legítimo. Esta falta de verificación de firma criptográfica permite al atacante registrarse exitosamente en una organización no autorizada, lo que lleva a un acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2363",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2364",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2365",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1529",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433783",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24900",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:56.387",
      "lastModified" : "2026-02-19T20:08:14.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content accepted a select_file_id parameter to serve SubmissionFile objects containing a record of files submitted by students. This parameter was not correctly scoped to the requesting user, allowing users access arbitrary submission file contents by id. This vulnerability is fixed in 2.9.1."
      }, {
        "lang" : "es",
        "value" : "MarkUs es una aplicación web para la entrega y calificación de tareas de estudiantes. Antes de 2.9.1, la ruta courses/&lt;:course_id&gt;/assignments/&lt;:assignment_id&gt;/submissions/html_content aceptaba un parámetro select_file_id para servir objetos SubmissionFile que contenían un registro de los archivos entregados por los estudiantes. Este parámetro no estaba correctamente acotado al usuario solicitante, permitiendo a los usuarios acceder a contenidos arbitrarios de archivos de entrega por ID. Esta vulnerabilidad está corregida en 2.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markusproject:markus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.1",
            "matchCriteriaId" : "2D6B2B7B-F46C-4CEE-86D4-B25D3746747A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MarkUsProject/Markus/commit/7daed9fd2d44932223798d997b55094a3bff104b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/releases/tag/v2.9.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/security/advisories/GHSA-56gh-8hmq-7q88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25057",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:56.550",
      "lastModified" : "2026-02-19T20:25:55.387",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/<:course_id>/assignments/upload_config_files). The uploaded zip file entry names are used to create paths to write files to disk without checking these paths. This vulnerability is fixed in 2.9.1."
      }, {
        "lang" : "es",
        "value" : "MarkUs es una aplicación web para la entrega y calificación de trabajos de estudiantes. Antes de 2.9.1, los instructores pueden subir un archivo zip para crear una tarea a partir de una configuración exportada (courses/&lt;:course_id&gt;/assignments/upload_config_files). Los nombres de las entradas del archivo zip subido se utilizan para crear rutas para escribir archivos en el disco sin verificar estas rutas. Esta vulnerabilidad está corregida en 2.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markusproject:markus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.1",
            "matchCriteriaId" : "2D6B2B7B-F46C-4CEE-86D4-B25D3746747A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MarkUsProject/Markus/commit/0ca002a1f0071c7a00dbb2ed34fede57323c5dc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/releases/tag/v2.9.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/security/advisories/GHSA-mccg-p332-252h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25230",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:56.700",
      "lastModified" : "2026-02-19T20:02:58.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form elements that call certain endpoints or link elements that redirect the user on active interaction. This vulnerability is fixed in 3.3.0."
      }, {
        "lang" : "es",
        "value" : "FileRise es un gestor de archivos web / servidor WebDAV autoalojado. Antes de la versión 3.3.0, una vulnerabilidad de inyección HTML permite a un usuario autenticado modificar el DOM y añadir, por ejemplo, elementos de formulario que llaman a ciertos puntos finales o elementos de enlace que redirigen al usuario tras una interacción activa. Esta vulnerabilidad está corregida en la versión 3.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filerise:filerise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.0",
            "matchCriteriaId" : "20EF81AB-DD02-41FF-9DCC-6498CF4C595A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/error311/FileRise/blob/7fee135a5b8feb25558aba0474bd6bb53943fc88/src/controllers/FileController.php#L4016-L4058",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/error311/FileRise/blob/7fee135a5b8feb25558aba0474bd6bb53943fc88/src/models/FileModel.php#L3146",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/error311/FileRise/releases/tag/v3.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/error311/FileRise/security/advisories/GHSA-h8fw-42v6-gfhv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25231",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:56.863",
      "lastModified" : "2026-02-19T19:31:59.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory. Files uploaded to this directory can be accessed directly by any user who knows or can guess the file path, without requiring authentication. As a result, sensitive data could be exposed, and privacy may be breached. This vulnerability is fixed in 3.3.0."
      }, {
        "lang" : "es",
        "value" : "FileRise es un gestor de archivos web autoalojado / servidor WebDAV. En versiones anteriores a la 3.3.0, la aplicación contiene una vulnerabilidad de lectura de archivos no autenticada debido a la falta de control de acceso en el directorio /uploads. Los archivos subidos a este directorio pueden ser accedidos directamente por cualquier usuario que conozca o pueda adivinar la ruta del archivo, sin requerir autenticación. Como resultado, datos sensibles podrían quedar expuestos y la privacidad podría verse comprometida. Esta vulnerabilidad está corregida en la 3.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filerise:filerise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.0",
            "matchCriteriaId" : "20EF81AB-DD02-41FF-9DCC-6498CF4C595A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/error311/FileRise/releases/tag/v3.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.017",
      "lastModified" : "2026-02-17T15:15:29.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.allowed_origins_regex is constructed using a regex built from configured allowlist values and used with fullmatch() for validation. Because metacharacters are not escaped, a malicious origin can match unexpectedly. The check relies on allowed_origins_regex.fullmatch(origin). This vulnerability is fixed in 2.20.0."
      }, {
        "lang" : "es",
        "value" : "Litestar es un framework de Interfaz de Pasarela de Servidor Asíncrono (ASGI). Antes de la versión 2.20.0, CORSConfig.allowed_origins_regex se construye utilizando una expresión regular (regex) creada a partir de los valores de la lista de permitidos (allowlist) configurados y se usa con fullmatch() para la validación. Debido a que los metacaracteres no se escapan, un origen malicioso puede coincidir de forma inesperada. La comprobación se basa en allowed_origins_regex.fullmatch(origin). Esta vulnerabilidad se corrige en la versión 2.20.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:litestar:litestar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.20.0",
            "matchCriteriaId" : "67E26161-0CDE-4B8F-A065-04A19BC4CDCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.litestar.dev/2/release-notes/changelog.html#2.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/commit/eb87703b309efcc0d1b087dcb12784e76b003d5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/releases/tag/v2.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/security/advisories/GHSA-2p2x-hpg8-cqp2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25479",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.177",
      "lastModified" : "2026-02-17T15:14:04.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar.middleware.allowed_hosts, allowlist entries are compiled into regex patterns in a way that allows regex metacharacters to retain special meaning (e.g., . matches any character). This enables a bypass where an attacker supplies a host that matches the regex but is not the intended literal hostname. This vulnerability is fixed in 2.20.0."
      }, {
        "lang" : "es",
        "value" : "Litestar es un framework de Interfaz de Pasarela de Servidor Asíncrono (ASGI). Antes de la 2.20.0, en litestar.middleware.allowed_hosts, las entradas de la lista de permitidos se compilan en patrones de expresiones regulares de una manera que permite que los metacaracteres de expresiones regulares conserven un significado especial (por ejemplo, . coincide con cualquier carácter). Esto permite una omisión donde un atacante proporciona un host que coincide con la expresión regular pero no es el nombre de host literal previsto. Esta vulnerabilidad se corrige en la 2.20.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-185"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:litestar:litestar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.20.0",
            "matchCriteriaId" : "67E26161-0CDE-4B8F-A065-04A19BC4CDCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.litestar.dev/2/release-notes/changelog.html#2.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/commit/06b36f481d1bfea6f19995cfb4f203aba45c4ace",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/releases/tag/v2.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/security/advisories/GHSA-93ph-p7v4-hwh4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25480",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.330",
      "lastModified" : "2026-02-17T15:12:34.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord() substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one URL to serve cached responses of another (cache poisoning/mixup). This vulnerability is fixed in 2.20.0."
      }, {
        "lang" : "es",
        "value" : "Litestar es un framework de Interfaz de Pasarela de Servidor Asíncrono (ASGI). Antes de la versión 2.20.0, FileStore mapea las claves de caché a nombres de archivo utilizando la normalización Unicode NFKD y la sustitución ord() sin separadores, creando colisiones de claves. Cuando FileStore se utiliza como backend de caché de respuestas, un atacante remoto no autenticado puede desencadenar colisiones de claves de caché a través de rutas manipuladas, haciendo que una URL sirva respuestas en caché de otra (envenenamiento/mezcla de caché). Esta vulnerabilidad está corregida en la versión 2.20.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-176"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:litestar:litestar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.20.0",
            "matchCriteriaId" : "67E26161-0CDE-4B8F-A065-04A19BC4CDCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.litestar.dev/2/release-notes/changelog.html#2.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/commit/85db6183a76f8a6b3fd6ee3c88d860b9f37a2cca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/releases/tag/v2.20.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/litestar-org/litestar/security/advisories/GHSA-vxqx-rh46-q2pg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.483",
      "lastModified" : "2026-02-19T19:26:43.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry Types list. This vulnerability is fixed in 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. Desde la 5.0.0-RC1 hasta la 5.8.21, Craft tiene un XSS almacenado a través de los nombres de los tipos de entrada. El nombre no se sanea cuando se muestra en la lista de tipos de entrada. Esta vulnerabilidad está corregida en la 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.8.21",
            "matchCriteriaId" : "4ACFCAB5-0930-4DFE-8DC8-5AAFE880C4DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/cfd6ba0e2ce1a59a02d75cae6558c4ace1ab8bd4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-7pr4-wx9w-mqwr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.650",
      "lastModified" : "2026-02-19T19:12:55.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save_images_Asset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a non-image file extension such as .txt is allowed, downstream image validation is bypassed, which can allow an authenticated attacker with permission to use save_images_Asset to retrieve sensitive data such as AWS instance metadata credentials from the underlying host. This issue is patched in versions 4.16.18 and 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft CMS es un sistema de gestión de contenido. En las versiones de Craft 3.5.0 a 4.16.17 y 5.0.0-RC1 a 5.8.21, la mutación GraphQL save_images_Asset puede ser utilizada indebidamente para obtener URLs internas al proporcionar un nombre de dominio que se resuelve en una dirección IP interna, eludiendo la validación del nombre de host. Cuando se permite una extensión de archivo que no es de imagen, como .txt, se elude la validación de imagen posterior, lo que puede permitir a un atacante autenticado con permiso para usar save_images_Asset recuperar datos sensibles como credenciales de metadatos de instancia de AWS del host subyacente. Este problema está parcheado en las versiones 4.16.18 y 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "4.16.18",
            "matchCriteriaId" : "9E85FA80-6A50-430C-8E92-3D46BBE0682C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.8.22",
            "matchCriteriaId" : "CCCB684A-592F-495F-86A7-F16399C58701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/e838a221df2ab15cd54248f22fc8355d47df29ff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-96pq-hxpw-rgh8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.793",
      "lastModified" : "2026-02-19T19:20:06.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveAsset GraphQL mutation validates the initial URL hostname and resolved IP against a blocklist, but Guzzle follows HTTP redirects by default. An attacker can bypass all SSRF protections by hosting a redirect that points to cloud metadata endpoints or any internal IP addresses. This issue is patched in versions 4.16.18 and 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. En las versiones de Craft 4.0.0-RC1 a 4.16.17 y 5.0.0-RC1 a 5.8.21, la mutación GraphQL saveAsset valida el nombre de host de la URL inicial y la IP resuelta contra una lista de bloqueo, pero Guzzle sigue las redirecciones HTTP por defecto. Un atacante puede eludir todas las protecciones SSRF al alojar una redirección que apunta a puntos finales de metadatos en la nube o a cualquier dirección IP interna. Este problema está parcheado en las versiones 4.16.18 y 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.16.18",
            "matchCriteriaId" : "29EBFBEA-6CFF-49DD-BEE0-3E65E89DEA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.22",
            "matchCriteriaId" : "E1C69442-81E7-4695-B09C-E7811765D283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/0974055634af68998f67850ab2045d8aaa19fa98",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-8jr8-7hr4-vhfx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:57.937",
      "lastModified" : "2026-02-19T19:17:44.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences.  In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveAsset GraphQL mutation uses filter_var(..., FILTER_VALIDATE_IP) to block a specific list of IP addresses. However, alternative IP notations (hexadecimal, mixed) are not recognized by this function, allowing attackers to bypass the blocklist and access cloud metadata services. This issue is patched in versions 4.16.18 and 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. En las versiones de Craft 4.0.0-RC1 a 4.16.17 y 5.0.0-RC1 a 5.8.21, la mutación GraphQL saveAsset utiliza filter_var(..., FILTER_VALIDATE_IP) para bloquear una lista específica de direcciones IP. Sin embargo, las notaciones IP alternativas (hexadecimal, mixta) no son reconocidas por esta función, lo que permite a los atacantes eludir la lista de bloqueo y acceder a los servicios de metadatos en la nube. Este problema está parcheado en las versiones 4.16.18 y 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.16.18",
            "matchCriteriaId" : "29EBFBEA-6CFF-49DD-BEE0-3E65E89DEA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.22",
            "matchCriteriaId" : "E1C69442-81E7-4695-B09C-E7811765D283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/d49e93e5ba0c48939ce5eaa6cd9b4a990542d8b2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-m5r2-8p9x-hp5m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25495",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:58.080",
      "lastModified" : "2026-02-19T19:18:14.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the element-indexes/get-elements endpoint is vulnerable to SQL Injection via the criteria[orderBy] parameter (JSON body). The application fails to sanitize this input before using it in the database query. An attacker with Control Panel access can inject arbitrary SQL into the ORDER BY clause by omitting viewState[order] (or setting both to the same payload). This issue is patched in versions 4.16.18 and 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. En las versiones de Craft 4.0.0-RC1 hasta 4.16.17 y 5.0.0-RC1 hasta 5.8.21, el endpoint element-indexes/get-elements es vulnerable a inyección SQL a través del parámetro criteria[orderBy] (cuerpo JSON). La aplicación no sanea esta entrada antes de usarla en la consulta de la base de datos. Un atacante con acceso al Panel de Control puede inyectar SQL arbitrario en la cláusula ORDER BY al omitir viewState[order] (o al establecer ambos con la misma carga útil). Este problema está parcheado en las versiones 4.16.18 y 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.16.18",
            "matchCriteriaId" : "29EBFBEA-6CFF-49DD-BEE0-3E65E89DEA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.22",
            "matchCriteriaId" : "E1C69442-81E7-4695-B09C-E7811765D283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/96c60d775c644ff0a0276da52fe29e11d4cd38d2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-2453-mppf-46cj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25496",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:58.223",
      "lastModified" : "2026-02-19T19:17:02.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a stored XSS vulnerability exists in the Number field type settings. The Prefix and Suffix fields are rendered using the |md|raw Twig filter without proper escaping, allowing script execution when the Number field is displayed on users' profiles. This issue is patched in versions 4.16.18 and 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. En las versiones de Craft 4.0.0-RC1 hasta 4.16.17 y 5.0.0-RC1 hasta 5.8.21, existe una vulnerabilidad de XSS almacenado en la configuración del tipo de campo Número. Los campos Prefijo y Sufijo se renderizan utilizando el filtro Twig |md|raw sin el escape adecuado, lo que permite la ejecución de scripts cuando el campo Número se muestra en los perfiles de los usuarios. Este problema está parcheado en las versiones 4.16.18 y 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.16.18",
            "matchCriteriaId" : "29EBFBEA-6CFF-49DD-BEE0-3E65E89DEA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.22",
            "matchCriteriaId" : "E1C69442-81E7-4695-B09C-E7811765D283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/cb5fb0e979e72f315c9178fc031883d49527f513",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-9f5h-mmq6-2x78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25497",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:58.367",
      "lastModified" : "2026-02-19T19:16:05.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. In Craft versions from 4.0.0-RC1 to before 4.17.0-beta.1 and 5.9.0-beta.1, there is a Privilege Escalation vulnerability in Craft CMS’s GraphQL API that allows an authenticated user with write access to one asset volume to escalate their privileges and modify/transfer assets belonging to any other volume, including restricted or private volumes to which they should not have access. The saveAsset GraphQL mutation validates authorization against the schema-resolved volume but fetches the target asset by ID without verifying that the asset belongs to the authorized volume. This allows unauthorized cross-volume asset modification and transfer. This vulnerability is fixed in 4.17.0-beta.1 and 5.9.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. En las versiones de Craft desde la 4.0.0-RC1 hasta antes de la 4.17.0-beta.1 y la 5.9.0-beta.1, existe una vulnerabilidad de escalada de privilegios en la API GraphQL de Craft CMS que permite a un usuario autenticado con acceso de escritura a un volumen de activos escalar sus privilegios y modificar/transferir activos pertenecientes a cualquier otro volumen, incluidos volúmenes restringidos o privados a los que no deberían tener acceso. La mutación GraphQL saveAsset valida la autorización contra el volumen resuelto por el esquema, pero recupera el activo objetivo por ID sin verificar que el activo pertenezca al volumen autorizado. Esto permite la modificación y transferencia no autorizada de activos entre volúmenes. Esta vulnerabilidad está corregida en las versiones 4.17.0-beta.1 y 5.9.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/ac7edf868c1a81fd9c4dc49d3b3edf1cce113409",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-fxp3-g6gw-4r4v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25498",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:58.510",
      "lastModified" : "2026-02-19T19:20:46.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a Remote Code Execution (RCE) vulnerability exists in Craft CMS where the assembleLayoutFromPost() function in src/services/Fields.php fails to sanitize user-supplied configuration data before passing it to Craft::createObject(). This allows authenticated administrators to inject malicious Yii2 behavior configurations that execute arbitrary system commands on the server. This vulnerability represents an unpatched variant of the behavior injection vulnerability addressed in CVE-2025-68455, affecting different endpoints through a separate code path. This vulnerability is fixed in 5.8.22."
      }, {
        "lang" : "es",
        "value" : "Craft es una plataforma para crear experiencias digitales. En las versiones 4.0.0-RC1 hasta la 4.16.17 y 5.0.0-RC1 hasta la 5.8.21, existe una vulnerabilidad de ejecución remota de código (RCE) en Craft CMS donde la función assembleLayoutFromPost() en src/services/Fields.PHP no logra sanear los datos de configuración proporcionados por el usuario antes de pasarlos a Craft::createObject(). Esto permite a los administradores autenticados inyectar configuraciones de comportamiento maliciosas de Yii2 que ejecutan comandos de sistema arbitrarios en el servidor. Esta vulnerabilidad representa una variante sin parchear de la vulnerabilidad de inyección de comportamiento abordada en CVE-2025-68455, afectando a diferentes puntos finales a través de una ruta de código separada. Esta vulnerabilidad se corrige en la 5.8.22."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-470"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.16.18",
            "matchCriteriaId" : "29EBFBEA-6CFF-49DD-BEE0-3E65E89DEA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.22",
            "matchCriteriaId" : "E1C69442-81E7-4695-B09C-E7811765D283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/395c64f0b80b507be1c862a2ec942eaacb353748",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/releases/tag/5.8.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-7jx7-3846-m7w7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25598",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T20:15:58.653",
      "lastModified" : "2026-02-28T00:23:47.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the Harden-Runner GitHub Action (Community Tier) that allows outbound network connections to evade audit logging. Specifically, outbound traffic using the sendto, sendmsg, and sendmmsg socket system calls can bypass detection and logging when using egress-policy: audit. This vulnerability is fixed in 2.14.2."
      }, {
        "lang" : "es",
        "value" : "Harden-Runner es un agente de seguridad de CI/CD que funciona como un EDR para los runners de GitHub Actions. Antes de 2.14.2, se ha identificado una vulnerabilidad de seguridad en la acción de GitHub Harden-Runner (Nivel Comunitario) que permite que las conexiones de red salientes evadan el registro de auditoría. Específicamente, el tráfico saliente que utiliza las llamadas al sistema de socket sendto, sendmsg y sendmmsg puede eludir la detección y el registro cuando se utiliza egress-policy: audit. Esta vulnerabilidad está corregida en 2.14.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-778"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stepsecurity:harden-runner:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "2.14.2",
            "matchCriteriaId" : "5B714DF6-0FF1-4437-B163-0489E992B020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/step-security/harden-runner/releases/tag/v2.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/step-security/harden-runner/security/advisories/GHSA-cpmj-h4f6-r6pq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2245",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T20:15:59.270",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library src/lib_ccx/ts_tables.c of the component MPEG-TS File Parser. Such manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The name of the patch is fd7271bae238ccb3ae8a71304ea64f0886324925. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en CCExtractor hasta 183. Esto afecta la función parse_PAT/parse_PMT en la biblioteca src/lib_ccx/ts_tables.c del componente MPEG-TS File Parser. Dicha manipulación conduce a lectura fuera de límites. El ataque solo puede realizarse desde un entorno local. El exploit está disponible públicamente y podría ser utilizado. El nombre del parche es fd7271bae238ccb3ae8a71304ea64f0886324925. Es una buena práctica aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CCExtractor/ccextractor/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/commit/fd7271bae238ccb3ae8a71304ea64f0886324925",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/issues/2053",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/pull/2057",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0123/blob/main/cc1/repro",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344991",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344991",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753159",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753160",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2246",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-09T20:15:59.467",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltag_detector_detect of the file apriltag.c. The manipulation leads to memory corruption. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en AprilRobotics apriltag hasta 3.4.5. Afectada por esta vulnerabilidad es la función apriltag_detector_detect del archivo apriltag.c. La manipulación conduce a corrupción de memoria. El ataque debe ser llevado a cabo localmente. El exploit ha sido divulgado públicamente y puede ser usado. El identificador del parche es cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61. Se sugiere instalar un parche para abordar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AprilRobotics/apriltag/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/AprilRobotics/apriltag/commit/cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/AprilRobotics/apriltag/issues/422",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/AprilRobotics/apriltag/issues/422#issuecomment-3797661933",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0120/blob/main/repro",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.344994",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.344994",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753162",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25528",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:48.857",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. The LangSmith SDK's distributed tracing feature is vulnerable to Server-Side Request Forgery via malicious HTTP headers. An attacker can inject arbitrary api_url values through the baggage header, causing the SDK to exfiltrate sensitive trace data to attacker-controlled endpoints. When using distributed tracing, the SDK parses incoming HTTP headers via RunTree.from_headers() in Python or RunTree.fromHeaders() in Typescript. The baggage header can contain replica configurations including api_url and api_key fields. Prior to the fix, these attacker-controlled values were accepted without validation. When a traced operation completes, the SDK's post() and patch() methods send run data to all configured replica URLs, including any injected by an attacker. This vulnerability is fixed in version 0.6.3 of the Python SDK and  0.4.6 of the JavaScript SDK."
      }, {
        "lang" : "es",
        "value" : "Los SDKs del cliente de LangSmith proporcionan SDKs para interactuar con la plataforma LangSmith. La característica de trazado distribuido del SDK de LangSmith es vulnerable a la falsificación de petición del lado del servidor a través de encabezados HTTP maliciosos. Un atacante puede inyectar valores arbitrarios de api_url a través del encabezado 'baggage', haciendo que el SDK exfiltre datos de traza sensibles a puntos finales controlados por el atacante. Al usar el trazado distribuido, el SDK analiza los encabezados HTTP entrantes a través de RunTree.from_headers() en Python o RunTree.fromHeaders() en Typescript. El encabezado 'baggage' puede contener configuraciones de réplica, incluyendo los campos api_url y api_key. Antes de la corrección, estos valores controlados por el atacante eran aceptados sin validación. Cuando una operación trazada se completa, los métodos post() y patch() del SDK envían datos de ejecución a todas las URLs de réplica configuradas, incluyendo cualquiera inyectada por un atacante. Esta vulnerabilidad está corregida en la versión 0.6.3 del SDK de Python y 0.4.6 del SDK de JavaScript."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-v34v-rq6j-cj6p",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25639",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.010",
      "lastModified" : "2026-02-18T18:24:34.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5."
      }, {
        "lang" : "es",
        "value" : "Axios es un cliente HTTP basado en promesas para el navegador y Node.js. Antes de la versión 1.13.5, la función mergeConfig en axios falla con un TypeError al procesar objetos de configuración que contienen __proto__ como propiedad propia. Un atacante puede desencadenar esto proporcionando un objeto de configuración malicioso creado a través de JSON.parse(), causando una denegación de servicio completa. Esta vulnerabilidad se corrigió en la versión 1.13.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.13.5",
            "matchCriteriaId" : "A8935935-994A-4A4E-9FBB-E83C9EF0B2E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/axios/axios/commit/d7ff1409c68168d3057fc3891f911b2b92616f9e",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/axios/axios/pull/7369",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/axios/axios/pull/7388",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/axios/axios/releases/tag/v0.30.3",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/axios/axios/releases/tag/v1.13.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25740",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.163",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings. In 25.05 and earlier, when programs.captive-browser is enabled, any user of the system can run arbitrary commands with the CAP_NET_RAW capability (binding to privileged ports, spoofing localhost traffic from privileged services...). This vulnerability is fixed in 25.11 and 26.05."
      }, {
        "lang" : "es",
        "value" : "navegador cautivo, una instancia dedicada de Chrome para iniciar sesión en portales cautivos sin alterar la configuración de DNS. En 25.05 y anteriores, cuando programs.captive-browser está habilitado, cualquier usuario del sistema puede ejecutar comandos arbitrarios con la capacidad CAP_NET_RAW (enlazando a puertos privilegiados, suplantando tráfico de localhost desde servicios privilegiados...). Esta vulnerabilidad está corregida en 25.11 y 26.05."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NixOS/nixpkgs/pull/487775",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/pull/487779",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/NixOS/nixpkgs/security/advisories/GHSA-wc3r-c66x-8xmc",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25761",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.323",
      "lastModified" : "2026-02-28T00:21:30.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Super-linter is a combination of multiple linters to run as a GitHub Action or standalone. From 6.0.0 to 8.3.0, the Super-linter GitHub Action is vulnerable to command injection via crafted filenames. When this action is used in downstream GitHub Actions workflows, an attacker can submit a pull request that introduces a file whose name contains shell command substitution syntax, such as $(...). In affected Super-linter versions, runtime scripts may execute the embedded command during file discovery processing, enabling arbitrary command execution in the workflow runner context. This can be used to disclose the job’s GITHUB_TOKEN depending on how the workflow configures permissions. This vulnerability is fixed in 8.3.1."
      }, {
        "lang" : "es",
        "value" : "Super-linter es una combinación de múltiples linters para ejecutar como una Acción de GitHub o de forma independiente. Desde la 6.0.0 hasta la 8.3.0, la Acción de GitHub Super-linter es vulnerable a inyección de comandos a través de nombres de archivo manipulados. Cuando esta acción se utiliza en flujos de trabajo de GitHub Actions posteriores, un atacante puede enviar una solicitud de extracción que introduce un archivo cuyo nombre contiene sintaxis de sustitución de comandos de shell, como $(...). En las versiones afectadas de Super-linter, los scripts en tiempo de ejecución pueden ejecutar el comando incrustado durante el procesamiento de descubrimiento de archivos, lo que permite la ejecución arbitraria de comandos en el contexto del ejecutor del flujo de trabajo. Esto puede usarse para divulgar el GITHUB_TOKEN del trabajo dependiendo de cómo el flujo de trabajo configure los permisos. Esta vulnerabilidad se corrige en la 8.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:super-linter_project:super-linter:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "8.3.1",
            "matchCriteriaId" : "8793631B-2725-45CA-BB01-D0D6D2EDC1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/super-linter/super-linter/releases/tag/v8.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/super-linter/super-linter/security/advisories/GHSA-r79c-pqj3-577x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25765",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.490",
      "lastModified" : "2026-02-20T21:03:57.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1, Faraday's build_exclusive_url method (in lib/faraday/connection.rb) uses Ruby's URI#merge to combine the connection's base URL with a user-supplied path. Per RFC 3986, protocol-relative URLs (e.g. //evil.com/path) are treated as network-path references that override the base URL's host/authority component. This means that if any application passes user-controlled input to Faraday's get(), post(), build_url(), or other request methods, an attacker can supply a protocol-relative URL like //attacker.com/endpoint to redirect the request to an arbitrary host, enabling Server-Side Request Forgery (SSRF). This vulnerability is fixed in 2.14.1."
      }, {
        "lang" : "es",
        "value" : "Faraday es una capa de abstracción de biblioteca cliente HTTP que proporciona una interfaz común sobre muchos adaptadores. Antes de la versión 2.14.1, el método build_exclusive_url de Faraday (en lib/faraday/connection.rb) utiliza URI#merge de Ruby para combinar la URL base de la conexión con una ruta proporcionada por el usuario. Según la RFC 3986, las URL relativas al protocolo (por ejemplo, //evil.com/path) se tratan como referencias de ruta de red que anulan el componente de host/autoridad de la URL base. Esto significa que si alguna aplicación pasa entrada controlada por el usuario a los métodos get(), post(), build_url() u otros métodos de petición de Faraday, un atacante puede proporcionar una URL relativa al protocolo como //attacker.com/endpoint para redirigir la petición a un host arbitrario, lo que permite la falsificación de petición del lado del servidor (SSRF). Esta vulnerabilidad se corrige en la versión 2.14.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faraday_project:faraday:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.10.5",
            "matchCriteriaId" : "5EB2D675-BCBC-47F1-8782-F14A960DF3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faraday_project:faraday:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.14.1",
            "matchCriteriaId" : "C612B716-C5E1-42C1-93EA-5609AEEBF64A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lostisland/faraday/commit/a6d3a3a0bf59c2ab307d0abd91bc126aef5561bc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lostisland/faraday/releases/tag/v2.14.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/lostisland/faraday/security/advisories/GHSA-33mh-2634-fwr2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25791",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.650",
      "lastModified" : "2026-02-23T17:42:31.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled. Because sessions are stored without a cleanup/expiry path in this flow, an unauthenticated remote actor can repeatedly create sessions and drive memory exhaustion. This vulnerability is fixed in 1.7.0."
      }, {
        "lang" : "es",
        "value" : "Sliver es un framework de comando y control que utiliza un netstack Wireguard personalizado. Antes de la versión 1.7.0, el oyente DNS C2 acepta mensajes de arranque TOTP no autenticados y asigna sesiones DNS del lado del servidor sin validar los valores OTP, incluso cuando EnforceOTP está habilitado. Dado que las sesiones se almacenan sin una ruta de limpieza/caducidad en este flujo, un actor remoto no autenticado puede crear sesiones repetidamente y provocar el agotamiento de la memoria. Esta vulnerabilidad se corrige en la versión 1.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bishopfox:sliver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "7BD4DFA2-8C16-4122-A4D8-C3E03081913D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BishopFox/sliver/releases/tag/v1.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/BishopFox/sliver/security/advisories/GHSA-wxrw-gvg8-fqjp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25806",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.807",
      "lastModified" : "2026-02-11T19:41:55.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the GET /api/students/:email\nPUT /api/students/:email/status, and DELETE /api/students/:email routes in backend/src/routes/student.routes.ts only enforce authentication using authenticateToken but do not enforce authorization. The application does not verify whether the authenticated user owns the student record being accessed, has an administrative / staff role, or is permitted to modify or delete the target student."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, las rutas GET /api/students/:email, PUT /api/students/:email/status y DELETE /api/students/:email en backend/src/routes/student.routes.ts solo aplican autenticación usando authenticateToken pero no aplican autorización. La aplicación no verifica si el usuario autenticado es propietario del registro de estudiante al que se accede, tiene un rol administrativo / de personal, o tiene permiso para modificar o eliminar al estudiante objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-99gr-8933-3vwj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25809",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:49.957",
      "lastModified" : "2026-02-11T19:41:44.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission window is currently open."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, el punto final de evaluación de código no valida el estado del ciclo de vida de la evaluación antes de permitir la ejecución. No hay una verificación para garantizar que la evaluación ha comenzado, no ha caducado o la ventana de envío está actualmente abierta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-cc32-rp29-w9x7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25810",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:50.103",
      "lastModified" : "2026-02-11T19:41:33.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization (ownership checks)."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de colocaciones diseñado para instituciones educativas. En la versión 1.0.0, el archivo backend/src/routes/student.submission.routes.ts verifica la autenticación pero no logra aplicar la autorización a nivel de objeto (verificaciones de propiedad)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-2gqv-gxrj-p8x3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25876",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:50.240",
      "lastModified" : "2026-02-11T19:41:23.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/results.routes.ts verify authentication but fails to enforce object-level authorization (ownership checks). For example, this can be used to return all results for an assessment."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, el archivo backend/src/routes/results.routes.ts verifica la autenticación pero no logra aplicar la autorización a nivel de objeto (verificaciones de propiedad). Por ejemplo, esto puede ser utilizado para devolver todos los resultados de una evaluación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-w238-w4mg-j357",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25878",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T21:15:50.380",
      "lastModified" : "2026-02-28T00:18:44.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessible without Shopware admin authentication. The route was configured with auth_required=false and performed no session validation, exposing the Adminer UI to unauthenticated users. This vulnerability is fixed in 2.2.1."
      }, {
        "lang" : "es",
        "value" : "FroshAdminer es el plugin de Adminer para la plataforma Shopware. Antes de la versión 2.2.1, la ruta de Adminer (/admin/adminer) era accesible sin autenticación de administrador de Shopware. La ruta estaba configurada con auth_required=false y no realizaba ninguna validación de sesión, exponiendo la interfaz de usuario de Adminer a usuarios no autenticados. Esta vulnerabilidad se corrige en la versión 2.2.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendsofshopware:froshadminer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "7F95E905-90E0-4563-94B3-BE7F7FAEBAB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FriendsOfShopware/FroshPlatformAdminer/commit/c4dd6c3462af178b3a7d146d3c651c2c253e902b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FriendsOfShopware/FroshPlatformAdminer/releases/tag/2.2.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/FriendsOfShopware/FroshPlatformAdminer/security/advisories/GHSA-f339-246p-wwjp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25807",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:02.293",
      "lastModified" : "2026-02-24T18:13:41.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZAI Shell is an autonomous SysOps agent designed to navigate, repair, and secure complex environments. Prior to 9.0.3, the P2P terminal sharing feature (share start) opens a TCP socket on port 5757 without any authentication mechanism. Any remote attacker can connect to this port using a simple socket script. An attacker who connects to a ZAI-Shell P2P session running in --no-ai mode can send arbitrary system commands. If the host user approves the command without reviewing its contents, the command executes directly with the user's privileges, bypassing all Sentinel safety checks. This vulnerability is fixed in 9.0.3."
      }, {
        "lang" : "es",
        "value" : "ZAI Shell es un agente SysOps autónomo diseñado para navegar, reparar y asegurar entornos complejos. Prior a la versión 9.0.3, la función de compartición de terminal P2P (share start) abre un socket TCP en el puerto 5757 sin ningún mecanismo de autenticación. Cualquier atacante remoto puede conectarse a este puerto usando un script de socket simple. Un atacante que se conecta a una sesión P2P de ZAI-Shell ejecutándose en modo --no-ai puede enviar comandos de sistema arbitrarios. Si el usuario anfitrión aprueba el comando sin revisar su contenido, el comando se ejecuta directamente con los privilegios del usuario, eludiendo todas las comprobaciones de seguridad de Sentinel. Esta vulnerabilidad está corregida en la versión 9.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taklaxbr:zai_shell:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "9.0.3",
            "matchCriteriaId" : "36F1EDAE-CEAB-4BDF-A018-F19D615EBEA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TaklaXBR/zai-shell/commit/a4ea8525d912f55d6e2f09b2869966c52d189a4a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TaklaXBR/zai-shell/releases/tag/v9.0.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/TaklaXBR/zai-shell/security/advisories/GHSA-6pjj-r955-34rr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25808",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:02.440",
      "lastModified" : "2026-02-28T00:17:33.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is fixed in 0.6.20 and 0.7.2."
      }, {
        "lang" : "es",
        "value" : "Hollo es un software de microblogging de un solo usuario federado diseñado para ser federado a través de ActivityPub. Antes de 0.6.20 y 0.7.2, existe una vulnerabilidad de seguridad donde los mensajes directos (MD) y las publicaciones solo para seguidores fueron expuestos a través del endpoint de bandeja de salida de ActivityPub sin autorización. Esta vulnerabilidad está corregida en 0.6.20 y 0.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedify:hollo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.6.0",
            "versionEndExcluding" : "0.6.20",
            "matchCriteriaId" : "A1422F95-7A77-4327-B1F1-95B79678E9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedify:hollo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.7.0",
            "versionEndExcluding" : "0.7.2",
            "matchCriteriaId" : "10E08CBE-B4F8-4DF9-A84F-BCC0BAEF3A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fedify-dev/hollo/commit/329969c502ef092d5c3f9c2c20421c34f4ff0f0e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fedify-dev/hollo/releases/tag/0.6.20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/fedify-dev/hollo/releases/tag/0.7.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/fedify-dev/hollo/security/advisories/GHSA-6r2w-3pcj-v4v5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25811",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:02.583",
      "lastModified" : "2026-02-18T20:30:48.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application derives the tenant identifier directly from the email domain provided by the user, without validating domain ownership or registration. This allows cross-tenant data access."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, la aplicación deriva el identificador de inquilino directamente del dominio de correo electrónico proporcionado por el usuario, sin validar la propiedad o el registro del dominio. Esto permite el acceso a datos entre inquilinos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-3gmm-9ww2-87fh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25812",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:02.720",
      "lastModified" : "2026-02-18T20:10:05.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, la aplicación permite solicitudes CORS con credenciales pero no implementa ningún mecanismo de protección CSRF."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-99xx-fc63-wc39",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25813",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:02.860",
      "lastModified" : "2026-02-18T20:10:30.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, la aplicación registra datos altamente sensibles directamente en la salida de consola sin enmascaramiento ni anonimización."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-3647-q595-wfr2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25814",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.000",
      "lastModified" : "2026-02-18T20:05:44.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB query/filter construction without validation or sanitization."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, los parámetros de consulta controlados por el usuario se pasan directamente a la construcción de consultas/filtros de DynamoDB sin validación ni saneamiento."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-gmg6-mv7g-xjfv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25875",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.133",
      "lastModified" : "2026-02-11T19:42:50.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorization middleware trusts client-controlled JWT claims (role and scope) without enforcing server-side role verification."
      }, {
        "lang" : "es",
        "value" : "PlaciPy es un sistema de gestión de prácticas diseñado para instituciones educativas. En la versión 1.0.0, el middleware de autorización de administrador confía en las declaraciones JWT controladas por el cliente (rol y alcance) sin aplicar la verificación de rol del lado del servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prasklatechnology:placipy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D45A3FA-CF6C-4A70-AF7F-696137CA9133"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-mx95-8ppg-v574",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25880",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.267",
      "lastModified" : "2026-02-23T18:14:13.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File → “Show in folder”. This behavior leads to arbitrary code execution on the victim’s system with the privileges of the current user, without any warning or user interaction beyond the menu click."
      }, {
        "lang" : "es",
        "value" : "SumatraPDF es un lector multiformato para Windows. En la versión 3.5.2 y anteriores, el lector de PDF permite la ejecución de un binario malicioso (explorer.exe) ubicado en el mismo directorio que el PDF abierto cuando el usuario hace clic en Archivo ? 'Mostrar en carpeta'. Este comportamiento conduce a la ejecución de código arbitrario en el sistema de la víctima con los privilegios del usuario actual, sin ninguna advertencia ni interacción del usuario más allá del clic en el menú."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.2",
            "matchCriteriaId" : "3D48C2C6-E8BC-471E-B59A-236F038EBC0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/security/advisories/GHSA-5x4h-247q-px37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25881",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.423",
      "lastModified" : "2026-02-18T18:07:12.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to mutate host built-in prototypes by laundering the isGlobal protection flag through array literal intermediaries. When a global prototype reference (e.g., Map.prototype, Set.prototype) is placed into an array and retrieved, the isGlobal taint is stripped, permitting direct prototype mutation from within the sandbox. This results in persistent host-side prototype pollution and may enable RCE in applications that use polluted properties in sensitive sinks (example gadget: execSync(obj.cmd)). This vulnerability is fixed in 0.8.31."
      }, {
        "lang" : "es",
        "value" : "SandboxJS es una biblioteca de sandboxing de JavaScript. Antes de la versión 0.8.31, una vulnerabilidad de escape de sandbox permite que el código en sandbox mute los prototipos integrados del host al blanquear la bandera de protección 'isGlobal' a través de intermediarios de literales de array. Cuando una referencia de prototipo global (por ejemplo, Map.prototype, Set.prototype) se coloca en un array y se recupera, la marca 'isGlobal' se elimina, permitiendo la mutación directa del prototipo desde dentro del sandbox. Esto resulta en una contaminación persistente de prototipos del lado del host y puede habilitar RCE en aplicaciones que usan propiedades contaminadas en sumideros sensibles (ejemplo de gadget: execSync(obj.cmd)). Esta vulnerabilidad está corregida en la versión 0.8.31."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nyariv:sandboxjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.8.31",
            "matchCriteriaId" : "626B7924-ECB8-4661-A9FA-3A12B095F1DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nyariv/SandboxJS/commit/f369f8db26649f212a6a9a2e7a1624cb2f705b53",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-ww7g-4gwx-m7wj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25885",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.583",
      "lastModified" : "2026-02-20T20:47:36.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss://polarlearn.nl/api/v1/ws can be used without logging in. An unauthenticated client can subscribe to any group chat by providing a group UUID, and can also send messages to any group. The server accepts the message and stores it in the group’s chatContent, so this is not just a visual spam issue."
      }, {
        "lang" : "es",
        "value" : "PolarLearn es un programa de aprendizaje de código abierto y gratuito. En 0-PRERELEASE-16 y versiones anteriores, el WebSocket de chat grupal en wss://polarlearn.nl/API/v1/ws puede utilizarse sin iniciar sesión. Un cliente no autenticado puede suscribirse a cualquier chat grupal proporcionando un UUID de grupo, y también puede enviar mensajes a cualquier grupo. El servidor acepta el mensaje y lo almacena en el chatContent del grupo, por lo que esto no es solo un problema de correo no deseado visual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polarlearn:polarlearn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98DA1036-1EFB-46E7-9C83-425B1C6E6F23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/polarnl/PolarLearn/commit/3ba588fda0d3f8e238483a20772719f27e52e79f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/polarnl/PolarLearn/security/advisories/GHSA-gvjm-5pw7-6c8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25889",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.723",
      "lastModified" : "2026-02-23T17:55:17.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password (or an admin to change any user's password) without providing the current password. By using Title Case field name \"Password\" instead of lowercase \"password\" in the API request, the current_password verification is completely bypassed. This enables account takeover if an attacker obtains a valid JWT token through XSS, session hijacking, or other means. This vulnerability is fixed in 2.57.1."
      }, {
        "lang" : "es",
        "value" : "File Browser proporciona una interfaz de gestión de archivos dentro de un directorio especificado y puede ser utilizado para subir, eliminar, previsualizar, renombrar y editar archivos. Anterior a la 2.57.1, una falla de sensibilidad a mayúsculas y minúsculas en la lógica de validación de contraseñas permite a cualquier usuario autenticado cambiar su contraseña (o a un administrador cambiar la contraseña de cualquier usuario) sin proporcionar la contraseña actual. Al usar el nombre de campo en formato 'Title Case' 'Password' en lugar de 'password' en minúsculas en la solicitud de la API, la verificación de current_password es completamente eludida. Esto permite la toma de control de cuenta si un atacante obtiene un token JWT válido a través de XSS, secuestro de sesión, u otros medios. Esta vulnerabilidad está corregida en la 2.57.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.57.1",
            "matchCriteriaId" : "814A9A1C-C2FE-406B-AD51-62B4A826C6AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/filebrowser/filebrowser/commit/ff2f00498cff151e2fb1f5f0b16963bf33c3d6d4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/releases/tag/v2.57.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-hxw8-4h9j-hq2r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25890",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:03.873",
      "lastModified" : "2026-02-20T20:31:02.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's \"Disallow\" file path rules by modifying the request URL. By adding multiple slashes (e.g., //private/) to the path, the authorization check fails to match the rule, while the underlying filesystem resolves the path correctly, granting unauthorized access to restricted files. This vulnerability is fixed in 2.57.1."
      }, {
        "lang" : "es",
        "value" : "Navegador de Archivos proporciona una interfaz de gestión de archivos dentro de un directorio especificado y se puede utilizar para subir, eliminar, previsualizar, renombrar y editar archivos. Antes de la versión 2.57.1, un usuario autenticado puede eludir las reglas de ruta de archivo 'Disallow' de la aplicación modificando la URL de la solicitud. Al añadir múltiples barras (por ejemplo, //private/) a la ruta, la comprobación de autorización no logra coincidir con la regla, mientras que el sistema de archivos subyacente resuelve la ruta correctamente, otorgando acceso no autorizado a archivos restringidos. Esta vulnerabilidad está corregida en la versión 2.57.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.57.1",
            "matchCriteriaId" : "814A9A1C-C2FE-406B-AD51-62B4A826C6AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/filebrowser/filebrowser/commit/489af403a19057f6b6b4b1dc0e48cbb26a202ef9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/releases/tag/v2.57.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4mh3-h929-w968",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25892",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:04.023",
      "lastModified" : "2026-02-20T20:24:32.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version[] parameter which PHP converts to an array. On next page load, openssl_verify() receives this array instead of string and throws TypeError, returning HTTP 500 to all users. Upgrade to Adminer 5.4.2."
      }, {
        "lang" : "es",
        "value" : "Adminer es un software de gestión de bases de datos de código abierto. Adminer v5.4.1 y anteriores tiene un mecanismo de verificación de versión donde adminer.org envía información de versión firmada a través de JavaScript postMessage, que el navegador luego envía por POST a ?script=version. Este endpoint carece de validación de origen y acepta datos POST de cualquier fuente. Un atacante puede enviar por POST el parámetro version[] que PHP convierte en un array. En la siguiente carga de página, openssl_verify() recibe este array en lugar de una cadena y lanza TypeError, devolviendo HTTP 500 a todos los usuarios. Actualice a Adminer 5.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.2",
            "versionEndExcluding" : "5.4.2",
            "matchCriteriaId" : "0A0A483B-178F-44CC-9EB7-C469C1F8C106"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vrana/adminer/commit/21d3a3150388677b18647d68aec93b7850e457d3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vrana/adminer/releases/tag/v5.4.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/vrana/adminer/security/advisories/GHSA-q4f2-39gr-45jh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25918",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:04.177",
      "lastModified" : "2026-02-28T00:16:27.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via JSON.stringify without sanitization, exposing secrets to shell history, CI/CD logs, and log aggregation systems. This vulnerability is fixed in 1.8.2."
      }, {
        "lang" : "es",
        "value" : "unity-cli es una utilidad de línea de comandos para el motor de juego Unity. Antes de 1.8.2, el comando sign-package en @rage-against-the-pixel/unity-cli registra credenciales sensibles en texto plano cuando se utiliza la bandera --verbose. Los argumentos de línea de comandos, incluyendo --email y --password, se emiten a través de JSON.stringify sin sanitización, exponiendo secretos al historial de la shell, a los registros de CI/CD y a los sistemas de agregación de registros. Esta vulnerabilidad está corregida en 1.8.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rageagainstthepixel:unity-cli:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.8.2",
            "matchCriteriaId" : "C61C418A-2DB7-49E7-BDA6-B6DD4768C0CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RageAgainstThePixel/unity-cli/commit/8d4d67b23d7c5fd8f00df3f0f10bec2961c95342",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RageAgainstThePixel/unity-cli/releases/tag/v1.8.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/RageAgainstThePixel/unity-cli/security/advisories/GHSA-4255-c27h-62m5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25920",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:04.320",
      "lastModified" : "2026-02-20T20:22:56.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData() only validates half the range that DecodeOne() actually accesses. Opening a crafted .mobi file can read nearly (1 << codeLength) bytes beyond the CDIC dictionary buffer, leading to a crash."
      }, {
        "lang" : "es",
        "value" : "SumatraPDF es un lector multiformato para Windows. En 3.5.2 y versiones anteriores, existe una vulnerabilidad de lectura fuera de límites del heap en el descompresor MOBI HuffDic de SumatraPDF. La comprobación de límites en AddCdicData() solo valida la mitad del rango al que DecodeOne() realmente accede. Abrir un archivo .mobi manipulado puede leer casi (1 &lt;&lt; codeLength) bytes más allá del búfer del diccionario CDIC, lo que provoca un fallo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.2",
            "matchCriteriaId" : "3D48C2C6-E8BC-471E-B59A-236F038EBC0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/blob/916392f94bc34e24f3c3286893ac6d7fa1e1c428/src/MobiDoc.cpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/commit/12b6887e9dfff874fe8749bab1bdc53d4ff075b3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/security/advisories/GHSA-5mwx-65x7-cffp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25923",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:04.460",
      "lastModified" : "2026-03-17T20:30:28.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file (disguised as JPEG) via the image upload feature, trigger Phar deserialization through BBCode [img] tag processing, and exploit Smarty 4.1.0 POP chain to achieve arbitrary file deletion. This vulnerability is fixed in 20260208.1."
      }, {
        "lang" : "es",
        "value" : "mi pequeño foro es un foro de internet basado en PHP y MySQL que muestra los mensajes en vista clásica de hilos. Antes de 20260208.1, la aplicación no filtra el protocolo phar:// en la validación de URL, permitiendo a los atacantes subir un archivo Phar Polyglot malicioso (disfrazado como JPEG) a través de la función de subida de imágenes, activar la deserialización de Phar a través del procesamiento de la etiqueta BBCode [img], y explotar la cadena POP de Smarty 4.1.0 para lograr la eliminación arbitraria de archivos. Esta vulnerabilidad está corregida en 20260208.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mylittleforum:my_little_forum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20260208.1",
            "matchCriteriaId" : "B3238E69-543A-4C90-983B-E6DBD9A9ECBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/My-Little-Forum/mylittleforum/releases/tag/20260208.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-wr9p-3c3g-78fw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25925",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:04.607",
      "lastModified" : "2026-02-28T00:13:57.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a critical security vulnerability in how it parses JSON files within Flow or App packages. The application blindly trusts the $type property in JSON files, allowing an attacker to instantiate arbitrary .NET objects and execute code. This vulnerability is fixed in 2.4.0."
      }, {
        "lang" : "es",
        "value" : "PowerDocu contiene un ejecutable GUI de Windows para realizar documentaciones técnicas. Antes de la versión 2.4.0, PowerDocu contenía una vulnerabilidad de seguridad crítica en la forma en que analiza los archivos JSON dentro de paquetes de Flow o de aplicaciones. La aplicación confía ciegamente en la propiedad $type en los archivos JSON, permitiendo a un atacante instanciar objetos .NET arbitrarios y ejecutar código. Esta vulnerabilidad está corregida en la versión 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modery:powerdocu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "72BD01ED-2860-4AA0-B857-EFD869020F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modery/PowerDocu/releases/tag/v-2.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/modery/PowerDocu/security/advisories/GHSA-m8j2-5jr7-2jpw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25961",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T22:16:04.750",
      "lastModified" : "2026-02-20T20:22:32.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks. A network attacker with any valid TLS certificate (e.g., Let's Encrypt) can intercept the update check request, inject a malicious installer URL, and achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "SumatraPDF es un lector multiformato para Windows. En las versiones 3.5.0 a 3.5.2, el mecanismo de actualización de SumatraPDF deshabilita la verificación del nombre de host TLS (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) y ejecuta instaladores sin comprobaciones de firma. Un atacante de red con cualquier certificado TLS válido (por ejemplo, Let's Encrypt) puede interceptar la solicitud de comprobación de actualización, inyectar una URL de instalador malicioso y lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5",
            "versionEndIncluding" : "3.5.2",
            "matchCriteriaId" : "35B34851-E186-4558-A6E4-CCE41DFEC9E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sumatrapdfreader/sumatrapdf/security/advisories/GHSA-xpm2-rr5m-x96q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25893",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:05.313",
      "lastModified" : "2026-02-13T20:35:25.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server. This issue has been patched in FUXA version 1.2.10."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de visualización de procesos basado en web (SCADA/HMI/Dashboard). Antes de la versión 1.2.10, una vulnerabilidad de omisión de autenticación en FUXA permite a un atacante remoto no autenticado obtener acceso administrativo a través de la API de actualización de latido y ejecutar código arbitrario en el servidor. Este problema ha sido parcheado en la versión 1.2.10 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "5811902D-CD7C-4D52-BD99-66EACBBB88FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/commit/fe82348d160904d0013b9a3e267d50158f5c7afb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-vwcg-c828-9822",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25894",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:05.463",
      "lastModified" : "2026-02-13T20:33:42.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. This affects FUXA through version 1.2.9 when authentication is enabled, but the administrator JWT secret is not configured. This issue has been patched in FUXA version 1.2.10."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de visualización de procesos (SCADA/HMI/Dashboard) basado en web. Una configuración predeterminada insegura en FUXA permite a un atacante remoto no autenticado obtener acceso administrativo y ejecutar código arbitrario en el servidor. Esto afecta a FUXA hasta la versión 1.2.9 cuando la autenticación está habilitada, pero el secreto JWT del administrador no está configurado. Este problema ha sido parcheado en la versión 1.2.10 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        }, {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "5811902D-CD7C-4D52-BD99-66EACBBB88FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/commit/ea7b3df066f9fdef8ecdce318398ae40546bc50d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-32cc-x95p-fxcg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25895",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:05.617",
      "lastModified" : "2026-02-13T20:32:48.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de visualización de procesos basado en web (SCADA/HMI/Dashboard). Una vulnerabilidad de salto de ruta en FUXA permite a un atacante remoto no autenticado escribir archivos arbitrarios en ubicaciones arbitrarias en el sistema de archivos del servidor. Esto afecta a FUXA hasta la versión 1.2.9. Este problema ha sido parcheado en la versión 1.2.10 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "5811902D-CD7C-4D52-BD99-66EACBBB88FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/commit/22c2192f5d9beef8a787c45eff3a14c24dbb5f96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-88qh-cphv-996c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25931",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:05.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings._determineIsTrusted treats the configuration value cSpell.trustedWorkspace as the authoritative trust flag. The value defaults to true (package.json) and is read from workspace configuration each time settings are fetched. The code coerces any truthy value to true and forwards it to ConfigLoader.setIsTrusted , which in turn allows JavaScript/TypeScript configuration files ( .cspell.config.js/.mjs/.ts , etc.) to be located and executed. Because no VS Code workspace-trust state is consulted, an untrusted workspace can keep the flag true and place a malicious .cspell.config.js ; opening the workspace causes the extension host to execute attacker-controlled Node.js code with the user’s privileges. This vulnerability is fixed in v4.5.4."
      }, {
        "lang" : "es",
        "value" : "vscode-spell-checker es un corrector ortográfico básico que funciona bien con código y documentos. Antes de la v4.5.4, DocumentSettings._determineIsTrusted trata el valor de configuración cSpell.trustedWorkspace como el indicador de confianza autoritativo. El valor predeterminado es true (package.json) y se lee de la configuración del espacio de trabajo cada vez que se obtienen los ajustes. El código fuerza cualquier valor truthy a true y lo reenvía a ConfigLoader.setIsTrusted, lo que a su vez permite que los archivos de configuración de JavaScript/TypeScript ( .cspell.config.js/.mjs/.ts , etc.) sean localizados y ejecutados. Debido a que no se consulta ningún estado de confianza del espacio de trabajo de VS Code, un espacio de trabajo no confiable puede mantener el indicador en true y colocar un .cspell.config.js malicioso; abrir el espacio de trabajo hace que el host de la extensión ejecute código Node.js controlado por el atacante con los privilegios del usuario. Esta vulnerabilidad se corrige en la v4.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        }, {
          "lang" : "en",
          "value" : "CWE-807"
        }, {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1mT4SOkkHSHU6NFfKwekysydAd3FUAC6K/view?usp=sharing",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/streetsidesoftware/vscode-spell-checker/commit/f39af9a3a6f2a939a57171a24161ed735d41c575",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/streetsidesoftware/vscode-spell-checker/releases/tag/code-spell-checker-v4.5.4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/streetsidesoftware/vscode-spell-checker/security/advisories/GHSA-mggq-68mr-58vj",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25934",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:05.937",
      "lastModified" : "2026-02-20T20:21:19.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would likely result in unexpected errors such as object not found. For context, clients fetch packfiles from upstream Git servers. Those files contain a checksum of their contents, so that clients can perform integrity checks before consuming it. The pack indexes (.idx) are generated locally by go-git, or the git cli, when new .pack files are received and processed. The integrity checks for both files were not being verified correctly. This vulnerability is fixed in 5.16.5."
      }, {
        "lang" : "es",
        "value" : "go-git es una biblioteca de implementación de git altamente extensible escrita en Go puro. Antes de la versión 5.16.5, se descubrió una vulnerabilidad en go-git por la cual los valores de integridad de datos para los archivos .pack y .idx no se verificaban correctamente. Esto resultaba en que go-git podía consumir archivos corruptos, lo que probablemente provocaría errores inesperados como 'objeto no encontrado'. Para contextualizar, los clientes obtienen los packfiles de los servidores Git ascendentes. Esos archivos contienen una suma de verificación (checksum) de sus contenidos, para que los clientes puedan realizar comprobaciones de integridad antes de consumirlos. Los índices pack (.idx) son generados localmente por go-git, o por la CLI de git, cuando se reciben y procesan nuevos archivos .pack. Las comprobaciones de integridad para ambos archivos no se estaban verificando correctamente. Esta vulnerabilidad está corregida en la versión 5.16.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-git_project:go-git:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "5.16.5",
            "matchCriteriaId" : "337C04E7-3892-49DC-BB2D-60615B821E3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-git/go-git/releases/tag/v5.16.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25938",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:06.100",
      "lastModified" : "2026-02-13T20:31:47.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is enabled. This has been patched in FUXA version 1.2.11."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de visualización de procesos basado en web (SCADA/HMI/Dashboard). Desde la 1.2.8 hasta la 1.2.10, una vulnerabilidad de omisión de autenticación en FUXA permite a un atacante remoto no autenticado ejecutar código arbitrario en el servidor cuando el plugin de Node-RED está habilitado. Esto ha sido parcheado en la versión 1.2.11 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.8",
            "versionEndExcluding" : "1.2.11",
            "matchCriteriaId" : "CCAAE051-0029-45D1-82C7-06B082BC7FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/commit/5e7679b09718534e4501a146fdfe093da29af336",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-v4p5-w6r3-2x4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25939",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:06.287",
      "lastModified" : "2026-02-13T20:31:09.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, \nan authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions. This has been patched in FUXA version 1.2.11."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software basado en web para Visualización de Procesos (SCADA/HMI/Dashboard). Desde la 1.2.8 hasta la versión 1.2.10, una vulnerabilidad de omisión de autorización en FUXA permite a un atacante remoto no autenticado crear y modificar programadores arbitrarios, exponiendo entornos ICS/SCADA conectados a acciones posteriores. Esto ha sido parcheado en la versión 1.2.11 de FUXA."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.8",
            "versionEndExcluding" : "1.2.11",
            "matchCriteriaId" : "CCAAE051-0029-45D1-82C7-06B082BC7FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/commit/5782b35117a9bd14ffcb881f8dfb8c6680157d9b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-c869-jx4c-q5fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25951",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:06.630",
      "lastModified" : "2026-02-13T20:28:36.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path sanitization logic allows an authenticated attacker with administrative privileges to bypass directory traversal protections. By using nested traversal sequences (e.g., ....//), an attacker can write arbitrary files to the server filesystem, including sensitive directories like runtime/scripts. This leads to Remote Code Execution (RCE) when the server reloads the malicious scripts. This vulnerability is fixed in 1.2.11."
      }, {
        "lang" : "es",
        "value" : "FUXA es un software de visualización de procesos (SCADA/HMI/Dashboard) basado en web. Antes de la versión 1.2.11, existe una falla en la lógica de saneamiento de rutas que permite a un atacante autenticado con privilegios administrativos eludir las protecciones de salto de directorio. Al usar secuencias de salto anidadas (por ejemplo, ....//), un atacante puede escribir archivos arbitrarios en el sistema de archivos del servidor, incluyendo directorios sensibles como runtime/scripts. Esto conduce a la ejecución remota de código (RCE) cuando el servidor recarga los scripts maliciosos. Esta vulnerabilidad está corregida en la versión 1.2.11."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-23"
        }, {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.11",
            "matchCriteriaId" : "C982B1D7-0CC3-4FD4-AE0D-FCCD2AD951D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frangoteam/FUXA/commit/f7a9f04b2ab97ab5421e4ec4e711c51e9f4b65c8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/releases/tag/v1.2.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/frangoteam/FUXA/security/advisories/GHSA-68m5-5w2h-h837",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25957",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:06.780",
      "lastModified" : "2026-02-24T19:53:01.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. This vulnerability is fixed in 1.5.13 and 1.4.2."
      }, {
        "lang" : "es",
        "value" : "Cube es una capa semántica para construir aplicaciones de datos. Desde la versión 1.1.17 hasta antes de la 1.5.13 y la 1.4.2, es posible inhabilitar la totalidad de la API de Cube mediante el envío de una solicitud especialmente diseñada a un endpoint de la API de Cube. Esta vulnerabilidad está corregida en las versiones 1.5.13 y 1.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cube:cube.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.1.17",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "EDBEFAB8-9209-469F-B40A-3212CE2D83D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cube:cube.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "1.5.13",
            "matchCriteriaId" : "BE6B3000-94CC-46CE-BA90-87D559D6F536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cube-js/cube/security/advisories/GHSA-9vph-2hvm-x66g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25958",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-09T23:16:06.957",
      "lastModified" : "2026-02-19T19:36:28.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possible to make a specially crafted request with a valid API token that leads to privilege escalation. This vulnerability is fixed in 1.5.13, 1.4.2, and 1.0.14."
      }, {
        "lang" : "es",
        "value" : "Cube es una capa semántica para construir aplicaciones de datos. Desde 0.27.19 hasta antes de 1.5.13, 1.4.2 y 1.0.14, es posible realizar una solicitud especialmente diseñada con un token de API válido que conduce a una escalada de privilegios. Esta vulnerabilidad está corregida en 1.5.13, 1.4.2 y 1.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cube:cube.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.27.19",
            "versionEndExcluding" : "1.0.14",
            "matchCriteriaId" : "78B8CBDB-7E95-45F7-B916-A2CEA52AF86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cube:cube.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "A7012092-D8D0-451C-BF39-8B34AEC74673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cube:cube.js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "1.5.13",
            "matchCriteriaId" : "BE6B3000-94CC-46CE-BA90-87D559D6F536"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cube-js/cube/security/advisories/GHSA-v226-32c7-x2v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0845",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-10T00:16:05.993",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'WCFM_Settings_Controller::processing' function in all versions up to, and including, 6.7.24. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site."
      }, {
        "lang" : "es",
        "value" : "El plugin WCFM – Frontend Manager para WooCommerce junto con Bookings Subscription Listings Compatible para WordPress es vulnerable a la modificación no autorizada de datos que puede conducir a una escalada de privilegios debido a una verificación de capacidad faltante en la función 'WCFM_Settings_Controller::processing' en todas las versiones hasta la 6.7.24, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel de Shop Manager o superior, actualicen opciones arbitrarias en el sitio de WordPress. Esto puede ser aprovechado para actualizar el rol predeterminado para el registro a administrador y habilitar el registro de usuarios para que los atacantes obtengan acceso de usuario administrativo a un sitio vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-frontend-manager/tags/6.7.24/controllers/settings/wcfm-controller-settings.php#L150",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-frontend-manager/tags/6.7.24/core/class-wcfm-ajax.php#L285",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455819/wc-frontend-manager/trunk/controllers/settings/wcfm-controller-settings.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4973cef3-dddf-4eb5-99f4-c23a0e162fd6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2258",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-10T00:16:06.523",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionCollapse in the library dev/src/lobster/wfc.h. Executing a manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been published and may be used. This patch is called c2047a33e1ac2c42ab7e8704b33f7ea518a11ffd. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en aardappel lobster hasta 2025.4. Afectada por esta vulnerabilidad es la función WaveFunctionCollapse en la biblioteca dev/src/lobster/wfc.h. Ejecutar una manipulación puede llevar a corrupción de memoria. El ataque solo puede ser ejecutado localmente. El exploit ha sido publicado y puede ser usado. Este parche se llama c2047a33e1ac2c42ab7e8704b33f7ea518a11ffd. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strlen:lobster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025.4",
            "matchCriteriaId" : "1E46ECE9-D8C1-4F54-87C3-558A233D36DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aardappel/lobster/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/commit/c2047a33e1ac2c42ab7e8704b33f7ea518a11ffd",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/issues/395",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/issues/395#issuecomment-3849012938",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0204/blob/main/lob1/repro.lobster",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.345005",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.345005",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753167",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0484",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:00.947",
      "lastModified" : "2026-02-17T16:12:08.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de verificación de autorización en SAP NetWeaver Servidor de aplicaciones ABAP y SAP S/4HANA, un atacante autenticado podría acceder a un código de transacción específico y modificar los datos de texto en el sistema. Esta vulnerabilidad tiene un alto impacto en la integridad de la aplicación sin efecto en la confidencialidad y disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85616273-040E-49CB-8EB6-D2D4D7B603E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F774A45-2A9F-4873-A5DC-766D030C8CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86086D00-10BF-4C55-8D87-82CCBE468153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F25246A-D9E5-4F0D-B91A-478D4E5570DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0218695F-C4AD-46BF-B176-F10C644A9C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9E7C3E-1005-450A-9198-E014C1BAADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A177AB1-CC85-46EF-91DF-462096608C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7591F81-708C-4285-9BB2-F2B4BDB9759B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7825FC-2F0F-4096-BE41-67B4DCC4F7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3672622",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0485",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:01.387",
      "lastModified" : "2026-02-17T16:11:42.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, rendering the CMS completely unavailable. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected."
      }, {
        "lang" : "es",
        "value" : "SAP BusinessObjects BI Platform permite a un atacante no autenticado enviar solicitudes especialmente diseñadas que podrían causar que el Content Management Server (CMS) se bloquee y se reinicie automáticamente. Al enviar repetidamente estas solicitudes, el atacante podría inducir una interrupción persistente del servicio, dejando el CMS completamente no disponible. La explotación exitosa resulta en un alto impacto en la disponibilidad, mientras que la confidencialidad y la integridad no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-405"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8354981E-4A5F-4E5E-AF3A-283D5922DF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CEEB4426-D0A6-40D4-B053-8A47E8E0700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2027:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C532D05D-B06C-4BAB-84D1-5127F3A78977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3678282",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0486",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:01.550",
      "lastModified" : "2026-02-17T16:11:29.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "En sistemas SAP basados en ABAP, un módulo de función habilitado remotamente no realiza las comprobaciones de autorización necesarias para un usuario autenticado, resultando en la divulgación de información del sistema. Esto tiene bajo impacto en la confidencialidad. La integridad y la disponibilidad no se ven impactadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E087FCF-62FE-48A7-80B1-1BEDEA5716D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C9CBFC-453A-4B9E-87B6-466369CE6AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:2005_1_700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB77DE3-2703-4A42-BE41-D37F312A7A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4836C482-5A64-4373-BCB4-0185BDF83EAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3691645",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0488",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:01.710",
      "lastModified" : "2026-02-17T16:10:03.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "Un atacante autenticado en SAP CRM y SAP S/4HANA (Editor de scripts) podría explotar una vulnerabilidad en una llamada a un módulo de función genérico y ejecutar funcionalidades críticas no autorizadas, lo que incluye la capacidad de ejecutar una sentencia SQL arbitraria. Esto conduce a un compromiso total de la base de datos con alto impacto en la confidencialidad, integridad y disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BACB30-A607-410E-AB05-E991CC19CE12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A0C742-4CBD-46B8-B2B3-5949EFC82A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A540DA-F234-4EEA-ADE8-4F6306A86C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088EF501-76F9-44EC-B8B9-AED6F6096C03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0023602-B509-4B20-9B29-20EEE88E1692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489A03BA-B2B1-4271-9A0B-B514051807DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527C39A2-8777-4334-B4D4-A738442A0FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA935EBA-7508-4993-B07A-48EBFB267914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E58BF28-5CE1-47C3-8DE3-72BEA73DC3B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE1D9D8-4942-4F90-AE5C-D82A01917F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CC76B6-E96D-42E1-8EA4-38BBBDD1DE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC693B01-4B67-4A72-A6CB-F090FF95A99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:746:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DF2127-D217-432B-AD0A-3A83DEAA3B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:747:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58D83D4-822A-42FC-841E-43A174AECE85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:748:*:*:*:*:*:*:*",
            "matchCriteriaId" : "808207D6-794F-4D38-9E22-233A1E584F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6E6ECF-6417-4B17-AAB8-1B8D7DB222C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:webclient_ui_framework:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4F358E-8664-41BE-83B6-5A81FC974F4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3697099",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0490",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:01.873",
      "lastModified" : "2026-02-17T16:06:59.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted endpoint that breaks the authentication, which prevents the legitimate users from accessing the platform. As a result, it has a high impact on the availability but no impact on the confidentiality and integrity."
      }, {
        "lang" : "es",
        "value" : "SAP BusinessObjects BI Platform permite a un atacante no autenticado elaborar una solicitud de red específica al punto final de confianza que rompe la autenticación, lo que impide que los usuarios legítimos accedan a la plataforma. Como resultado, tiene un alto impacto en la disponibilidad, pero ningún impacto en la confidencialidad y la integridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8354981E-4A5F-4E5E-AF3A-283D5922DF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CEEB4426-D0A6-40D4-B053-8A47E8E0700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2027:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C532D05D-B06C-4BAB-84D1-5127F3A78977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3654236",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0505",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:02.030",
      "lastModified" : "2026-02-17T16:06:27.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones BSP permiten a un usuario no autenticado manipular parámetros URL controlados por el usuario que no están suficientemente validados. Esto podría resultar en una redirección no validada a sitios web controlados por el atacante, lo que conlleva un impacto bajo en la confidencialidad y la integridad, y ningún impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD522469-1153-4A3C-9271-2338A5674BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D355E922-5592-41C7-ACE4-311044B9E8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A41C8-812E-4319-B515-CF9F030DAA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B470B7D-486C-43B0-B9B0-AC0A16034A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0024390E-91C7-48B5-8E04-265E9E6D4E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133C3E0D-2D67-479A-A678-07EB04244BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E1D717-FA00-47D5-94B6-E818848890C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:erp:618:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4573BD22-D50B-431E-928A-C495E342D1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C95A73-48EB-446C-A5F0-20E1D6BC1779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3C9003-68A6-4886-8979-9B7D01A35E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964023CE-6EA4-42BB-93B2-DCE6B36D3F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B775EF-6C11-4FAB-B5E7-8F6C4C5674BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D17245-5B6D-4024-AFA6-8E0A70B294BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEFABE8-1797-4C7B-941C-3205AE90914B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78832FB6-B1DD-4516-B1DF-D90BB58BF25A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3678417",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0508",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:02.187",
      "lastModified" : "2026-02-17T16:06:15.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application."
      }, {
        "lang" : "es",
        "value" : "La plataforma SAP BusinessObjects Business Intelligence permite a un atacante autenticado con privilegios elevados insertar una URL maliciosa dentro de la aplicación. Tras una explotación exitosa, la víctima podría hacer clic en esta URL maliciosa, lo que resultaría en una redirección no validada a un dominio controlado por el atacante y, posteriormente, la descarga de contenido malicioso. Esta vulnerabilidad tiene un alto impacto en la confidencialidad y la integridad de la aplicación, sin ningún efecto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8354981E-4A5F-4E5E-AF3A-283D5922DF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CEEB4426-D0A6-40D4-B053-8A47E8E0700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2027:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C532D05D-B06C-4BAB-84D1-5127F3A78977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3674246",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0509",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:02.357",
      "lastModified" : "2026-02-17T16:04:59.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Servidor de Aplicaciones ABAP y Plataforma ABAP permite a un usuario autenticado y con bajos privilegios realizar llamadas a funciones remotas en segundo plano sin la autorización S_RFC requerida en ciertos casos. Esto puede resultar en un alto impacto en la integridad y disponibilidad, y ningún impacto en la confidencialidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE603A80-8FF0-4180-9E11-C468AE2441C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB97250-22A3-4BA6-8498-59ED0E81E3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5D31D3-B2B2-4347-B8DF-D06056289598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50570852-982E-40CA-B391-3FB8B9373F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B74AD9-A83E-45DD-96C2-4F3C8C8C6AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237DBA4A-B5A9-48C9-B6A3-D293BB66EF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3668B2D9-0A4C-43F5-B248-9A6438AF7D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC9779B-7571-44F7-BCCC-6BF2834ED779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D243C94B-F182-48A0-9775-4B193B913B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02507EB2-8776-4EA9-9164-B2F6AD911B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7867ADA5-47AA-48DD-9CAC-D3ACB5713CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E3292A-7311-4821-A52E-8FB4A1449D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171A52A4-8383-47D9-89D4-FC44CA84DA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1190FF1-8D50-4424-AE21-6AE562D5C6B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3674774",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23681",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:02.520",
      "lastModified" : "2026-02-17T16:04:47.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific function modules to retrieve information about the system and its configuration. This disclosure of the system information could assist the attacker to plan subsequent attacks. This vulnerability has a low impact on the confidentiality of the application, with no effect on its integrity or availability."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de verificación de autorización en un módulo de función en el Plug-In de Herramientas de Soporte de SAP, un atacante autenticado podría invocar módulos de función específicos para recuperar información sobre el sistema y su configuración. Esta divulgación de la información del sistema podría ayudar al atacante a planificar ataques subsiguientes. Esta vulnerabilidad tiene un bajo impacto en la confidencialidad de la aplicación, sin efecto en su integridad o disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E087FCF-62FE-48A7-80B1-1BEDEA5716D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C9CBFC-453A-4B9E-87B6-466369CE6AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC728B3-F77B-45E8-B7EC-9C78B41FA1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4836C482-5A64-4373-BCB4-0185BDF83EAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3680416",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23684",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:02.683",
      "lastModified" : "2026-02-17T16:04:38.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data confidentiality or availability of the application."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de condición de carrera en la nube de SAP Commerce. Debido a esto, cuando un atacante añade productos a un carrito, puede resultar en la creación de una entrada de carrito con un valor de producto erróneo que podría ser finalizada la compra. Esto conlleva un alto impacto en la integridad de los datos, sin impacto en la confidencialidad de los datos ni en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-366"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:2205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391FB1C6-1A52-4E53-B042-44D592AEC7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:2211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC6D6B9-6A5A-4631-B10F-FB95150E1B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3689543",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23685",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:02.850",
      "lastModified" : "2026-02-17T16:04:13.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic execution, potentially causing a denial of service. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de deserialización en SAP NetWeaver (servicio JMS), un atacante autenticado como administrador con acceso local podría enviar contenido especialmente diseñado al servidor. Si es procesado por la aplicación, este contenido podría desencadenar un comportamiento no deseado durante la ejecución de la lógica interna, causando potencialmente una denegación de servicio. La explotación exitosa resulta en un alto impacto en la disponibilidad, mientras que la confidencialidad y la integridad permanecen inafectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.50:*:*:*:java_as:*:*:*",
            "matchCriteriaId" : "DC79A74D-A118-4B1D-B1D0-C8CD8DA72244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3687285",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23686",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.013",
      "lastModified" : "2026-02-17T16:03:09.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the application, this content enables injection of untrusted entries into generated configuration, allowing manipulation of application-controlled settings. Successful exploitation leads to a low impact on integrity, while confidentiality and availability remain unaffected."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de inyección CRLF en SAP NetWeaver Servidor de Aplicaciones Java, un atacante autenticado con acceso administrativo podría enviar contenido especialmente diseñado a la aplicación. Si es procesado por la aplicación, este contenido permite la inyección de entradas no confiables en la configuración generada, lo que permite la manipulación de configuraciones controladas por la aplicación. La explotación exitosa conlleva a un bajo impacto en la integridad, mientras que la confidencialidad y la disponibilidad no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3673213",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23687",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.180",
      "lastModified" : "2026-02-17T16:12:35.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Servidor de Aplicaciones ABAP y Plataforma ABAP permite a un atacante autenticado con privilegios normales obtener un mensaje firmado válido y enviar documentos XML firmados modificados al verificador. Esto puede resultar en la aceptación de información de identidad manipulada, acceso no autorizado a datos de usuario sensibles y una posible interrupción del uso normal del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85616273-040E-49CB-8EB6-D2D4D7B603E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F774A45-2A9F-4873-A5DC-766D030C8CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86086D00-10BF-4C55-8D87-82CCBE468153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F25246A-D9E5-4F0D-B91A-478D4E5570DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0218695F-C4AD-46BF-B176-F10C644A9C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9E7C3E-1005-450A-9198-E014C1BAADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A177AB1-CC85-46EF-91DF-462096608C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7591F81-708C-4285-9BB2-F2B4BDB9759B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678CFB4C-1FD5-469F-AB56-9E8E80664EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:916:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BB40FF-37CE-49CF-B90E-1E17C1343EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:917:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA758D6-0480-4A04-B341-476BB938F35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:918:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7F598D-F876-4FCC-A807-EBA95884AA5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3697567",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23688",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.340",
      "lastModified" : "2026-02-17T15:58:00.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "La aplicación SAP Fiori Gestionar Hojas de Entrada de Servicios no realiza las comprobaciones de autorización necesarias para un usuario autenticado, resultando en una escalada de privilegios. Esto tiene bajo impacto en la integridad, la confidencialidad y la disponibilidad no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C95A73-48EB-446C-A5F0-20E1D6BC1779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3C9003-68A6-4886-8979-9B7D01A35E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964023CE-6EA4-42BB-93B2-DCE6B36D3F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B775EF-6C11-4FAB-B5E7-8F6C4C5674BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D17245-5B6D-4024-AFA6-8E0A70B294BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEFABE8-1797-4C7B-941C-3205AE90914B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3215823",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23689",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.500",
      "lastModified" : "2026-02-17T15:57:04.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de consumo de recursos no controlado (denegación de servicio), un atacante autenticado con privilegios de usuario regular y acceso a la red puede invocar repetidamente un módulo de función habilitado remotamente con un parámetro de control de bucle excesivamente grande. Esto desencadena una ejecución de bucle prolongada que consume recursos excesivos del sistema, lo que podría dejar el sistema no disponible. La explotación exitosa resulta en una condición de denegación de servicio que afecta la disponibilidad, mientras que la confidencialidad y la integridad permanecen inafectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-606"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:advanced_planning_and_optimization:713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E303C34-3616-489F-BEA3-456E302E2D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:advanced_planning_and_optimization:714:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82CF8FC0-AECD-4ACC-B823-45645A5B2D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supply_chain_management:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19AC4DB-E940-46AC-9E3D-4108B3F07BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supply_chain_management:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A1E0EC-CA14-4AA4-A798-E4E9AD59E45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supply_chain_management:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B74ECC-DC88-4171-B091-49BD76491336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:supply_chain_management:712:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9172B1E7-CEDA-4A60-9915-E744FC1319FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3703092",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24312",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.663",
      "lastModified" : "2026-02-17T15:32:58.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions from a less sensitive function to execute unauthorized, high-privilege actions. This has a high impact on data integrity, with low impact on confidentiality and no impact on availability of the application."
      }, {
        "lang" : "es",
        "value" : "Una verificación de autorización errónea en SAP Business Workflow conduce a escalada de privilegios. Un usuario administrativo autenticado puede eludir las restricciones de rol aprovechando permisos de una función menos sensible para ejecutar acciones no autorizadas y de alto privilegio. Esto tiene un alto impacto en la integridad de los datos, con bajo impacto en la confidencialidad y sin impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86086D00-10BF-4C55-8D87-82CCBE468153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F25246A-D9E5-4F0D-B91A-478D4E5570DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0218695F-C4AD-46BF-B176-F10C644A9C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC9E7C3E-1005-450A-9198-E014C1BAADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A177AB1-CC85-46EF-91DF-462096608C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7591F81-708C-4285-9BB2-F2B4BDB9759B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7825FC-2F0F-4096-BE41-67B4DCC4F7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3710111",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24319",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.820",
      "lastModified" : "2026-02-17T15:30:20.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability."
      }, {
        "lang" : "es",
        "value" : "En SAP Business One, la información sensible se escribe en los archivos de volcado de memoria de la aplicación sin ofuscación. Obtener acceso a esta información podría potencialmente conducir a operaciones no autorizadas dentro del entorno B1, incluyendo la modificación de datos de la empresa. Este problema resulta en un alto impacto en la confidencialidad y la integridad, sin impacto en la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-316"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391F491C-2DE8-44E5-B054-42F188161C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_one:10.0:*:*:*:*:sap_hana:*:*",
            "matchCriteriaId" : "C1A6AF0B-16D1-4D03-A972-518B3D8242AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3679346",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24320",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:03.990",
      "lastModified" : "2026-02-17T15:27:30.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory corruption and the potential leakage of memory content. Successful exploitation of this vulnerability would have a low impact on the confidentiality of the application, with no effect on its integrity or availability."
      }, {
        "lang" : "es",
        "value" : "Debido a una gestión de memoria inadecuada en SAP NetWeaver y ABAP Platform (Servidor de Aplicaciones ABAP), un atacante autenticado podría explotar errores lógicos en la gestión de memoria al proporcionar una entrada especialmente diseñada que contiene caracteres únicos, los cuales se convierten de forma incorrecta. Esto podría resultar en corrupción de memoria y la posible fuga de contenido de la memoria. La explotación exitosa de esta vulnerabilidad tendría un bajo impacto en la confidencialidad de la aplicación, sin efecto en su integridad o disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE603A80-8FF0-4180-9E11-C468AE2441C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5D31D3-B2B2-4347-B8DF-D06056289598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50570852-982E-40CA-B391-3FB8B9373F78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B74AD9-A83E-45DD-96C2-4F3C8C8C6AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:7.93:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237DBA4A-B5A9-48C9-B6A3-D293BB66EF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3668B2D9-0A4C-43F5-B248-9A6438AF7D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB41121A-3D27-460C-A9AF-A1573F1F4568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_kernel:9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC9779B-7571-44F7-BCCC-6BF2834ED779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02507EB2-8776-4EA9-9164-B2F6AD911B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64nuc:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7867ADA5-47AA-48DD-9CAC-D3ACB5713CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_krnl64uc:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E3292A-7311-4821-A52E-8FB4A1449D44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3678313",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24321",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:04.150",
      "lastModified" : "2026-02-17T15:24:36.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not intended to be publicly accessible via the front-end. This vulnerability has a low impact on confidentiality and does not affect integrity and availability."
      }, {
        "lang" : "es",
        "value" : "SAP Commerce Cloud expone múltiples puntos finales de API a usuarios no autenticados, permitiéndoles enviar solicitudes a estos puntos finales abiertos para recuperar información sensible que no está destinada a ser accesible públicamente a través del front-end. Esta vulnerabilidad tiene un bajo impacto en la confidencialidad y no afecta la integridad y la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:2205:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391FB1C6-1A52-4E53-B042-44D592AEC7A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:2211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC6D6B9-6A5A-4631-B10F-FB95150E1B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3687771",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24322",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:04.307",
      "lastModified" : "2026-02-17T15:23:50.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability."
      }, {
        "lang" : "es",
        "value" : "SAP Solution Tools Plug-In (ST-PI) contiene un módulo de función que no realiza las comprobaciones de autorización necesarias para usuarios autenticados, permitiendo que se divulgue información sensible. Esta vulnerabilidad tiene un alto impacto en la confidencialidad y no afecta a la integridad ni a la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E087FCF-62FE-48A7-80B1-1BEDEA5716D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C9CBFC-453A-4B9E-87B6-466369CE6AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC728B3-F77B-45E8-B7EC-9C78B41FA1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4836C482-5A64-4373-BCB4-0185BDF83EAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3705882",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24323",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:04.467",
      "lastModified" : "2026-02-17T15:15:47.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones BSP permiten a un usuario no autenticado inyectar contenido de script malicioso a través de parámetros de URL controlados por el usuario que no están suficientemente saneados. Cuando una víctima accede a una URL manipulada, el script inyectado se ejecuta en el navegador de la víctima, lo que conlleva un impacto bajo en la confidencialidad y la integridad, y ningún impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD522469-1153-4A3C-9271-2338A5674BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D355E922-5592-41C7-ACE4-311044B9E8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E8A41C8-812E-4319-B515-CF9F030DAA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B470B7D-486C-43B0-B9B0-AC0A16034A01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0024390E-91C7-48B5-8E04-265E9E6D4E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133C3E0D-2D67-479A-A678-07EB04244BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:document_management_system:617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E1D717-FA00-47D5-94B6-E818848890C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:erp:618:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4573BD22-D50B-431E-928A-C495E342D1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C95A73-48EB-446C-A5F0-20E1D6BC1779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3C9003-68A6-4886-8979-9B7D01A35E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964023CE-6EA4-42BB-93B2-DCE6B36D3F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B775EF-6C11-4FAB-B5E7-8F6C4C5674BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14D17245-5B6D-4024-AFA6-8E0A70B294BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEFABE8-1797-4C7B-941C-3205AE90914B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:108:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78832FB6-B1DD-4516-B1DF-D90BB58BF25A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3678417",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24324",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:04.630",
      "lastModified" : "2026-02-17T15:15:09.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected."
      }, {
        "lang" : "es",
        "value" : "SAP BusinessObjects Business Intelligence Platform (AdminTools) permite a un atacante autenticado con privilegios de usuario ejecutar una consulta específica en AdminTools que podría causar la caída del Content Management Server (CMS), dejando el CMS parcial o completamente no disponible y resultando en la denegación de servicio del Content Management Server (CMS). La explotación exitosa afecta la disponibilidad del sistema, mientras que la confidencialidad y la integridad no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-405"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "8354981E-4A5F-4E5E-AF3A-283D5922DF90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CEEB4426-D0A6-40D4-B053-8A47E8E0700D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2027:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C532D05D-B06C-4BAB-84D1-5127F3A78977"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3695912",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24325",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:04.790",
      "lastModified" : "2026-02-17T15:14:43.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an admin user to inject malicious JavaScript into a website and the injected script gets executed when the user visits the compromised page.This vulnerability has low impact on confidentiality and integrity of the data. There is no impact on the availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP BusinessObjects Enterprise no codifica suficientemente las entradas controladas por el usuario, lo que lleva a una vulnerabilidad de cross-site scripting (XSS) almacenado. Esto permite a un usuario administrador inyectar JavaScript malicioso en un sitio web y el script inyectado se ejecuta cuando el usuario visita la página comprometida. Esta vulnerabilidad tiene bajo impacto en la confidencialidad e integridad de los datos. No hay impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_enterprise:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A72BBFB-83AF-444D-8FA1-D93461970A8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_enterprise:2025:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5C4FE2-06FF-4997-A9AC-3ECC22D86E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_enterprise:2027:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C0B64B-0C14-4297-96D9-85170D17FCBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3697256",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24326",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:04.950",
      "lastModified" : "2026-02-17T15:13:03.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function modules to do direct update on standard SAP database table . This results in low impact on integrity, with no impact on confidentiality or availability of the application."
      }, {
        "lang" : "es",
        "value" : "Debido a una verificación de autorización faltante en las Operaciones Desconectadas de SAP S/4HANA Defense &amp; Security, un atacante con privilegios de usuario podría llamar módulos de función habilitados remotamente para realizar una actualización directa en una tabla de base de datos SAP estándar. Esto resulta en un impacto bajo en la integridad, sin impacto en la confidencialidad o disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78ADAFAC-2C87-4C49-8865-EB1C97B7B5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7FBDFA-E462-4BAE-9408-351011A813A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B614A1E8-F448-4D31-985B-C4A7C0CB368B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127D2BD7-BB9D-4CE0-BB07-F871905B31A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:606:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1223E-1745-4B98-8E3E-F96B3ECAC188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:616:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6DD245-E9C9-4B4D-A1BC-03EB6AC72D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:617:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2166F508-E6D6-4115-943C-DB3A542ED1FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:618:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0867D831-9BF5-4E85-8D18-739A4D815B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:619:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCE5819-11CF-40BA-9AA6-58B5ACC7F5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19551C2A-E648-4984-B8C6-943AB0DD98E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB489DD-5DBD-4ED1-B960-73EABA12BD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:802:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86985075-6564-4905-B863-0FE785DF1060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40CB0220-9467-49B8-9050-368B816ABE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:804:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732E1942-ECBF-4FCD-98C7-C7DF361748F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AC39A9-6262-48B5-ACBA-2D214AB97222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:806:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAC823D3-3E07-4534-905F-3D1209AE55EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:807:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433D5F16-FB53-4774-ABA1-73D9618A06E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77352DDD-866D-45E1-9995-B0D9AC997623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_defense_\\&_security:809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9592A1-EAD9-4BDB-868A-73306569146F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3678009",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24327",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:05.113",
      "lastModified" : "2026-02-17T15:12:00.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that they are otherwise unauthorized to view. This leads to low impact on confidentiality and no effect on integrity or availability."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de verificación de autorización en SAP Strategic Enterprise Management (Balanced Scorecard en Business Server Pages), un atacante autenticado podría acceder a información a la que de otro modo no está autorizado a ver. Esto conlleva a un bajo impacto en la confidencialidad y ningún efecto en la integridad o disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDD6A72-3274-4DA0-8FCC-2DCBEAEF3796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:602:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F37F0CE-282C-4558-A28B-AEDF3026EC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:603:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67617A83-F329-4520-95A8-07A1AF6A3BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:604:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE85E4AC-1C91-4B50-8C30-0B23E3D809B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2A924-479C-46D8-9E9E-894C5B312485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:634:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F513E0-E7C5-4DDC-BC32-BE26E64789C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CB2786-0E05-4E4A-9951-CBAC3B4F2B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:736:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BFD1E4-B940-400B-9776-A56B96F234C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:746:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63A80AE-2988-4335-8E72-71B66B412CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:747:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FF97BE-502F-4DA9-97BC-FA504DCA2FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:748:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DB344B-AFC6-4211-86EB-AE5E5D96E213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:strategic_enterprise_management:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C06928C2-E38C-48D6-9FD5-712B003A7B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3680390",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24328",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-10T04:16:05.273",
      "lastModified" : "2026-02-17T15:10:34.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This results in a low impact on confidentiality and integrity, with no impact on the availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP TAF_APPLAUNCHER dentro de Business Server Pages permite a un atacante no autenticado crear enlaces maliciosos que, al ser pulsados por una víctima, los redirigen a sitios controlados por el atacante, exponiendo o alterando potencialmente información sensible en el navegador de la víctima. Esto resulta en un impacto bajo en la confidencialidad y la integridad, sin impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_server_pages:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC862E54-CEB7-4A61-BFEC-9ED2372109FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_server_pages:758:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41EE398C-9049-44E7-AFCF-26441F66D886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_server_pages:2008_1_700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F28858-4CDD-42CB-93E4-26B56B67B6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_server_pages:2008_1_710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8EF5BB-C105-403F-A2C2-F916FE0732E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3688319",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2259",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-10T04:16:05.433",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser::ParseStatements in the library dev/src/lobster/parser.h of the component Parsing. The manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2f45fe860d00990e79e13250251c1dde633f1f89. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en aardappel lobster hasta 2025.4. Afectada por este problema es la función lobster::Parser::ParseStatements en la biblioteca dev/src/lobster/parser.h del componente Parsing. La manipulación conduce a corrupción de memoria. El ataque solo puede ser realizado desde un entorno local. El exploit ha sido divulgado al público y puede ser usado. El identificador del parche es 2f45fe860d00990e79e13250251c1dde633f1f89. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strlen:lobster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025.4",
            "matchCriteriaId" : "1E46ECE9-D8C1-4F54-87C3-558A233D36DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aardappel/lobster/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/commit/2f45fe860d00990e79e13250251c1dde633f1f89",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/issues/396",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/issues/396#issuecomment-3849019040",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0204/blob/main/lob2/repro.lobster",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.345006",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.345006",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753168",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2260",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-10T04:16:05.620",
      "lastModified" : "2026-02-12T15:33:09.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DCS-931L hasta la versión 1.13.0. Esto afecta una parte desconocida del archivo /goform/setSysAdmin. La manipulación del argumento AdminID resulta en inyección de comandos del sistema operativo. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y podría ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-931l_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.13.00",
            "matchCriteriaId" : "11907E7B-BE80-4528-8226-8C88E778796F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-931l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1F2866-F7C1-4EC5-8C46-3DE78CD04AFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/CVE/blob/main/DLinkRce.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cha0yang1/CVE/blob/main/DLinkRce.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.345007",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.345007",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753398",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25973",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:17.330",
      "lastModified" : "2026-02-10T05:16:17.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25974",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:20.270",
      "lastModified" : "2026-02-10T05:16:20.270",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25975",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:20.373",
      "lastModified" : "2026-02-10T05:16:20.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25976",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:20.440",
      "lastModified" : "2026-02-10T05:16:20.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25977",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:20.900",
      "lastModified" : "2026-02-10T05:16:20.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25978",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:21.333",
      "lastModified" : "2026-02-10T05:16:21.333",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25979",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:21.410",
      "lastModified" : "2026-02-10T05:16:21.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25980",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:21.480",
      "lastModified" : "2026-02-10T05:16:21.480",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25981",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T05:16:21.543",
      "lastModified" : "2026-02-10T05:16:21.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0996",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-10T06:15:54.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all versions up to, and including, 6.1.14 due to a combination of missing authorization checks, a leaked nonce, and insufficient input sanitization. The vulnerability allows Subscriber-level users to trigger AI form generation via a protected endpoint. When prompted, AI services will typically return bare JavaScript code (without <script> tags), which bypasses the plugin's sanitization. This stored JavaScript executes whenever anyone views the generated form, making it possible for authenticated attackers with Subscriber-level access and above to inject arbitrary web scripts that will execute in the context of any user accessing the form."
      }, {
        "lang" : "es",
        "value" : "El plugin Fluent Forms para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del módulo AI Form Builder en todas las versiones hasta la 6.1.14, inclusive, debido a una combinación de comprobaciones de autorización faltantes, un nonce filtrado y saneamiento de entrada insuficiente. La vulnerabilidad permite a usuarios de nivel Suscriptor activar la generación de formularios de IA a través de un endpoint protegido. Cuando se le solicita, los servicios de IA suelen devolver código JavaScript sin las etiquetas "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Hooks/actions.php#L641",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Modules/Ai/AiFormBuilder.php#L29",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Modules/Ai/AiFormBuilder.php#L334",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/boot/globals.php#L438",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449710/fluentform/trunk/app/Hooks/actions.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/00192a36-4b75-4dae-9a6e-0afb02ed5bad?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2093",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:13.440",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents."
      }, {
        "lang" : "es",
        "value" : "Docpedia desarrollado por Flowring tiene una vulnerabilidad de inyección SQL, permitiendo a atacantes remotos no autenticados inyectar comandos SQL arbitrarios para leer el contenido de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10697-6a30b-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2094",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:13.707",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docpedia developed by Flowring has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents."
      }, {
        "lang" : "es",
        "value" : "Docpedia desarrollado por Flowring tiene una vulnerabilidad de inyección SQL, permitiendo a atacantes remotos autenticados inyectar comandos SQL arbitrarios para leer, modificar y eliminar contenidos de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10697-6a30b-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2095",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:13.903",
      "lastModified" : "2026-02-13T20:53:19.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user authentication token and log into the system as any user."
      }, {
        "lang" : "es",
        "value" : "Agentflow desarrollado por Flowring tiene una vulnerabilidad de omisión de autenticación, permitiendo a atacantes remotos no autenticados explotar una funcionalidad específica para obtener un token de autenticación de usuario arbitrario e iniciar sesión en el sistema como cualquier usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowring:agentflow:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "488D23DA-9DF9-4694-9148-FD4DFFC90173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.flowring.com/post/view?bid=72&id=45611&tpg=1&ppg=1&sty=1#45939",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2096",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:14.110",
      "lastModified" : "2026-02-13T20:52:16.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality."
      }, {
        "lang" : "es",
        "value" : "Agentflow desarrollado por Flowring tiene una vulnerabilidad de autenticación faltante, permitiendo a atacantes remotos no autenticados leer, modificar y eliminar contenidos de la base de datos mediante el uso de una funcionalidad específica."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowring:agentflow:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD22355C-8F68-443E-9898-616A7C3EE2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.flowring.com/post/view?bid=72&id=45611&tpg=1&ppg=1&sty=1#45939",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2097",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:14.303",
      "lastModified" : "2026-02-13T20:51:42.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server."
      }, {
        "lang" : "es",
        "value" : "Agentflow desarrollado por Flowring tiene una vulnerabilidad de carga de archivos arbitrarios, permitiendo a atacantes remotos autenticados cargar y ejecutar puertas traseras web shell, lo que habilita la ejecución de código arbitrario en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowring:agentflow:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD22355C-8F68-443E-9898-616A7C3EE2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2098",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:14.503",
      "lastModified" : "2026-02-13T20:49:31.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks."
      }, {
        "lang" : "es",
        "value" : "AgentFlow desarrollado por Flowring tiene una vulnerabilidad de cross-site scripting reflejado, permitiendo a atacantes remotos no autenticados ejecutar códigos JavaScript arbitrarios en el navegador del usuario a través de ataques de phishing."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowring:agentflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.0.1878.877",
            "matchCriteriaId" : "DD6816D3-3DE9-4ED8-9A89-6E59C0D7FB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2099",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-10T07:16:14.700",
      "lastModified" : "2026-02-13T20:48:06.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load."
      }, {
        "lang" : "es",
        "value" : "AgentFlow desarrollado por Flowring tiene una vulnerabilidad de cross-site scripting almacenado, que permite a atacantes remotos autenticados inyectar códigos JavaScript persistentes que se ejecutan en los navegadores de los usuarios al cargar la página."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowring:agentflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.0.1878.877",
            "matchCriteriaId" : "DD6816D3-3DE9-4ED8-9A89-6E59C0D7FB21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1722",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-10T08:15:56.307",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.0. This is due to the plugin not implementing authorization checks in the `wcfm-refund-requests-form` AJAX controller. This makes it possible for unauthenticated attackers to create arbitrary refund requests for any order ID and item ID, potentially leading to financial loss if automatic refund approval is enabled in the plugin settings."
      }, {
        "lang" : "es",
        "value" : "El plugin WCFM Marketplace – Multivendor Marketplace para WooCommerce para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 3.7.0, inclusive. Esto se debe a que el plugin no implementa comprobaciones de autorización en el controlador AJAX 'wcfm-refund-requests-form'. Esto hace posible que atacantes no autenticados creen solicitudes de reembolso arbitrarias para cualquier ID de pedido y ID de artículo, lo que podría provocar pérdidas financieras si la aprobación automática de reembolsos está habilitada en la configuración del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-multivendor-marketplace/tags/3.7.0/core/class-wcfmmp-refund.php#L235",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-multivendor-marketplace/trunk/core/class-wcfmmp-refund.php#L235",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3455829%40wc-multivendor-marketplace%2Ftrunk&old=3424081%40wc-multivendor-marketplace%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d39ec46d-58c4-40e4-b94a-e7a9fc99291a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1866",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-10T10:15:57.717",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin's sanitization function calling `html_entity_decode()` before `wp_kses()`, and then calling `html_entity_decode()` again on output. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the 'name_directory_name' and 'name_directory_description' parameters in the public submission form granted they can trick the site administrator into approving their submission or auto-publish is enabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Name Directory para WordPress es vulnerable a cross-site scripting almacenado a través de una codificación de doble entidad HTML en todas las versiones hasta e incluyendo la 1.32.0. Esto se debe a que la función de saneamiento del plugin llama a `html_entity_decode()` antes de `wp_kses()`, y luego vuelve a llamar a `html_entity_decode()` en la salida. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada a través de los parámetros 'name_directory_name' y 'name_directory_description' en el formulario de envío público, siempre que puedan engañar al administrador del sitio para que apruebe su envío o la publicación automática esté habilitada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/name-directory/tags/1.31.0/helpers.php#L604",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/name-directory/tags/1.31.0/shortcode.php#L193",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/name-directory/tags/1.31.0/shortcode.php#L41",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455023/name-directory/trunk?contextall=1&old=3446566&old_path=%2Fname-directory%2Ftrunk#file3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/29d13457-ac60-4e3d-9d8b-0141e6f8f4f6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1922",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-10T10:15:57.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ecs-list-events` shortcode `message` attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin The Events Calendar Shortcode &amp; Block para WordPress es vulnerable a cross-site scripting almacenado a través del atributo 'message' del shortcode 'ecs-list-events' del plugin en todas las versiones hasta la 3.1.2, e incluyendo, debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar-shortcode/tags/3.1.1/the-events-calendar-shortcode.php#L486",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar-shortcode/trunk/the-events-calendar-shortcode.php#L486",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3454586%40the-events-calendar-shortcode&old=3448663%40the-events-calendar-shortcode&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb302539-97e7-4b2c-865d-bd81919647ae?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22923",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:58.050",
      "lastModified" : "2026-03-10T18:18:13.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en NX (Todas las versiones &lt; V2512). La aplicación afectada contiene una vulnerabilidad de validación de datos que podría permitir a un atacante con acceso local interferir con datos internos durante el proceso de exportación de PDF, lo que podría llevar potencialmente a la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0",
            "matchCriteriaId" : "31B0C57C-0518-44B8-AEFD-8B04DF04F607"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-535115.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23715",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:58.220",
      "lastModified" : "2026-02-11T18:24:46.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds write vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en Simcenter Femap (Todas las versiones &lt; V2512), Simcenter Nastran (Todas las versiones &lt; V2512). Las aplicaciones afectadas contienen una vulnerabilidad de escritura fuera de límites al analizar archivos XDB especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "D0DE036D-8721-4DDF-9459-5735606CF324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "308A9F5D-48A7-4AEA-B2C9-BAFF947244DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-965753.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23716",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:58.393",
      "lastModified" : "2026-02-11T18:24:30.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en Simcenter Femap (Todas las versiones &lt; V2512), Simcenter Nastran (Todas las versiones &lt; V2512). Las aplicaciones afectadas contienen una vulnerabilidad de lectura fuera de límites al analizar archivos XDB especialmente diseñados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "D0DE036D-8721-4DDF-9459-5735606CF324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "308A9F5D-48A7-4AEA-B2C9-BAFF947244DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-965753.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23717",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:58.567",
      "lastModified" : "2026-02-11T18:24:15.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en Simcenter Femap (Todas las versiones &lt; V2512), Simcenter Nastran (Todas las versiones &lt; V2512). Las aplicaciones afectadas contienen una vulnerabilidad de lectura fuera de límites al analizar archivos XDB especialmente diseñados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "D0DE036D-8721-4DDF-9459-5735606CF324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "308A9F5D-48A7-4AEA-B2C9-BAFF947244DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-965753.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "i AG"
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23718",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:58.740",
      "lastModified" : "2026-02-11T18:24:00.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en Simcenter Femap (Todas las versiones &lt; V2512), Simcenter Nastran (Todas las versiones &lt; V2512). Las aplicaciones afectadas contienen una vulnerabilidad de lectura fuera de límites al analizar archivos NDB especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "D0DE036D-8721-4DDF-9459-5735606CF324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "308A9F5D-48A7-4AEA-B2C9-BAFF947244DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-965753.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23719",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:58.910",
      "lastModified" : "2026-02-11T18:23:23.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en Simcenter Femap (Todas las versiones &lt; V2512), Simcenter Nastran (Todas las versiones &lt; V2512). La aplicación afectada es vulnerable a desbordamiento de búfer basado en montículo al analizar archivos NDB especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "D0DE036D-8721-4DDF-9459-5735606CF324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "308A9F5D-48A7-4AEA-B2C9-BAFF947244DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-965753.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23720",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:59.073",
      "lastModified" : "2026-02-11T17:58:50.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en Simcenter Femap (Todas las versiones &lt; V2512), Simcenter Nastran (Todas las versiones &lt; V2512). Las aplicaciones afectadas contienen una vulnerabilidad de lectura fuera de límites al analizar archivos NDB especialmente diseñados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "D0DE036D-8721-4DDF-9459-5735606CF324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2512.0000",
            "matchCriteriaId" : "308A9F5D-48A7-4AEA-B2C9-BAFF947244DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-965753.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23901",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-10T10:15:59.240",
      "lastModified" : "2026-02-12T15:30:25.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Observable Timing Discrepancy vulnerability in Apache Shiro.\n\nThis issue affects Apache Shiro: from 1.*, 2.* before 2.0.7.\n\nUsers are recommended to upgrade to version 2.0.7 or later, which fixes the issue.\n\nPrior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough,\nthat a brute-force attack may be able to tell, by timing the requests only, determine if\nthe request failed because of a non-existent user vs. wrong password.\n\nThe most likely attack vector is a local attack only.\nShiro security model  https://shiro.apache.org/security-model.html#username_enumeration  discusses this as well.\n\nTypically, brute force attack can be mitigated at the infrastructure level."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de discrepancia de tiempo observable en Apache Shiro.\n\nEste problema afecta a Apache Shiro: desde 1.*, 2.* antes de 2.0.7.\n\nSe recomienda a los usuarios actualizar a la versión 2.0.7 o posterior, que soluciona el problema.\n\nAntes de Shiro 2.0.7, las rutas de código para usuarios inexistentes frente a usuarios existentes son lo suficientemente diferentes como para que un ataque de fuerza bruta pueda discernir, solo cronometrando las solicitudes, si la solicitud falló debido a un usuario inexistente frente a una contraseña incorrecta.\n\nEl vector de ataque más probable es solo un ataque local.\nEl modelo de seguridad de Shiro https://shiro.apache.org/security-model.html#username_enumeration también aborda esto.\n\nTípicamente, el ataque de fuerza bruta puede mitigarse a nivel de infraestructura."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:C/RE:L/U:Green",
            "baseScore" : 1.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "GREEN"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "9E1B2B45-F100-4693-9F70-FE8D342853A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/mm1jct9b86jvnh3y44tj22xvjtx3xhhh",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23906",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-10T10:15:59.427",
      "lastModified" : "2026-02-12T05:16:55.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affected Products and Versions\n  *  Apache Druid\n  *  Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0)\n  *  Prerequisites:  *  druid-basic-security extension enabled\n  *  LDAP authenticator configured\n  *  Underlying LDAP server permits anonymous bind                                                                                                                                                   \n\n\n\n\n\n\nVulnerability Description\n\nAn authentication bypass vulnerability exists in Apache Druid when using the druid-basic-security extension with LDAP authentication. If the underlying LDAP server is configured to allow anonymous\nbinds, an attacker can bypass authentication by providing an existing username with an empty password. This allows unauthorized access to otherwise restricted Druid resources without valid credentials.\n\nThe vulnerability stems from improper validation of LDAP authentication responses when anonymous binds are permitted, effectively treating anonymous bind success as valid user authentication. \n\nImpact\n\nA remote, unauthenticated attacker can:\n  *  Gain unauthorized access to the Apache Druid cluster\n  *  Access sensitive data stored in Druid datasources\n  *  Execute queries and potentially manipulate data\n  *  Access administrative interfaces if the bypassed account has elevated privileges\n  *  Completely compromise the confidentiality, integrity, and availability of the Druid deployment                                                                                                                                                                                    \n\n\nMitigation\n \nImmediate Mitigation (No Druid Upgrade Required):                                                                                                                                                    \n  *  Disable anonymous bind on your LDAP server. This prevents the vulnerability from being exploitable and is the recommended immediate action.\n\n\n\nResolution\n  *  Upgrade Apache Druid to version 36.0.0 or later, which includes fixes to properly reject anonymous LDAP bind attempts."
      }, {
        "lang" : "es",
        "value" : "Productos y Versiones Afectados\n  *  Apache Druid\n  *  Versiones Afectadas: 0.17.0 hasta 35.x (todas las versiones anteriores a 36.0.0)\n  *  Prerrequisitos:\n  *  extensión druid-basic-security habilitada\n  *  autenticador LDAP configurado\n  *  El servidor LDAP subyacente permite el enlace anónimo\n\nDescripción de la vulnerabilidad\n\nExiste una vulnerabilidad de omisión de autenticación en Apache Druid al usar la extensión druid-basic-security con autenticación LDAP. Si el servidor LDAP subyacente está configurado para permitir enlaces anónimos, un atacante puede omitir la autenticación proporcionando un nombre de usuario existente con una contraseña vacía. Esto permite el acceso no autorizado a recursos de Druid que de otro modo estarían restringidos sin credenciales válidas.\n\nLa vulnerabilidad se deriva de una validación incorrecta de las respuestas de autenticación LDAP cuando se permiten los enlaces anónimos, tratando efectivamente el éxito del enlace anónimo como una autenticación de usuario válida.\n\nImpacto\n\nUn atacante remoto no autenticado puede:\n  *  Obtener acceso no autorizado al clúster de Apache Druid\n  *  Acceder a datos sensibles almacenados en las fuentes de datos de Druid\n  *  Ejecutar consultas y potencialmente manipular datos\n  *  Acceder a interfaces administrativas si la cuenta omitida tiene privilegios elevados\n  *  Comprometer completamente la confidencialidad, integridad y disponibilidad de la implementación de Druid\n\nMitigación\n\nMitigación Inmediata (No se requiere actualización de Druid):\n  *  Deshabilite el enlace anónimo en su servidor LDAP. Esto evita que la vulnerabilidad sea explotable y es la acción inmediata recomendada.\n\nResolución\n  *  Actualice Apache Druid a la versión 36.0.0 o posterior, que incluye correcciones para rechazar correctamente los intentos de enlace anónimo de LDAP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:druid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.17.0",
            "versionEndExcluding" : "36.0.0",
            "matchCriteriaId" : "1EAD572D-067D-4CCC-9C8E-B4439C08B80D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/2x9rv3kv6t1p577lvq4z0rl0zlt9g4sr",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/09/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24343",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-10T10:15:59.567",
      "lastModified" : "2026-02-11T17:56:14.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.\n\nThis issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.\n\nUsers are recommended to upgrade to version 1.8.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Datos dentro de Expresiones XPath ('Inyección XPath') vulnerabilidad en Apache HertzBeat.\n\nEste problema afecta a Apache HertzBeat: desde 1.7.1 anterior a 1.8.0.\n\nSe recomienda a los usuarios actualizar a la versión 1.8.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-643"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.1",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "8DA673CE-B995-46A5-9501-1F334CA4E71D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/b2k3jqwffrbo2sy6bl4n0f68kp8bfo1n",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/09/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25655",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:59.700",
      "lastModified" : "2026-02-12T15:27:28.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user.\r\nThis could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en SINEC NMS (Todas las versiones &lt; V4.0 SP2). La aplicación afectada permite la modificación indebida de un archivo de configuración por un usuario de bajo privilegio. Esto podría permitir a un atacante cargar DLLs maliciosas, lo que podría llevar a la ejecución de código arbitrario con privilegios administrativos. (ZDI-CAN-28107)"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "7B9143A8-0ED9-467A-9138-2D2CCB9ADC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_nms:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2767CF34-75A7-449A-AD39-B7BF58A2EF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_nms:4.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF775FB0-A9C1-4305-9063-5FC97E081758"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-311973.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25656",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2026-02-10T10:15:59.880",
      "lastModified" : "2026-04-14T09:16:35.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user.\r\nThis could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)"
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en SINEC NMS (Todas las versiones), Componente de Gestión de Usuarios (UMC) (Todas las versiones &lt; V2.15.2.1). La aplicación afectada permite la modificación indebida de un archivo de configuración por parte de un usuario con pocos privilegios.\nEsto podría permitir a un atacante cargar DLLs maliciosas, lo que podría llevar a la ejecución de código arbitrario con privilegios de SYSTEM.(ZDI-CAN-28108)"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_nms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA9CD9F-B0E7-41E4-9383-2F212DDCBBA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.15.2.1",
            "matchCriteriaId" : "4E1CEBC6-7D60-4929-B802-62C990201D12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-311973.html",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2268",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-10T10:16:00.057",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the `ninja_forms_merge_tags` filter to user-supplied input within repeater fields, which allows the resolution of `{post_meta:KEY}` merge tags without authorization checks. This makes it possible for unauthenticated attackers to extract arbitrary post metadata from any post on the site, including sensitive data such as WooCommerce billing emails, API keys, private tokens, and customer personal information via the `nf_ajax_submit` AJAX action."
      }, {
        "lang" : "es",
        "value" : "El plugin Ninja Forms para WordPress es vulnerable a la exposición de información sensible en todas las versiones hasta la 3.14.0, inclusive. Esto se debe a la aplicación insegura del filtro 'ninja_forms_merge_tags' a la entrada proporcionada por el usuario dentro de los campos repetidores, lo que permite la resolución de las etiquetas de combinación '{post_meta:KEY}' sin comprobaciones de autorización. Esto hace posible que atacantes no autenticados extraigan metadatos de publicaciones arbitrarios de cualquier publicación en el sitio, incluyendo datos sensibles como correos electrónicos de facturación de WooCommerce, claves API, tokens privados e información personal del cliente a través de la acción AJAX 'nf_ajax_submit'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.13.3/includes/AJAX/Controllers/Submission.php#L222",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.13.3/includes/AJAX/Controllers/Submission.php#L706",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ninja-forms/tags/3.13.3/includes/MergeTags/WP.php#L48",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3454719/ninja-forms/trunk/includes/AJAX/Controllers/Submission.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/24902fab-44ea-44c9-bcf5-70960cfeb402?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1602",
      "sourceIdentifier" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "published" : "2026-02-10T16:16:10.387",
      "lastModified" : "2026-02-12T15:16:10.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL en Ivanti Endpoint Manager anterior a la versión 2024 SU5 permite a un atacante remoto autenticado leer datos arbitrarios de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2024",
            "matchCriteriaId" : "7ABDE6FE-56CC-4A46-91F2-2F54C3EC6A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7283FE-C10A-4E37-B004-15FB0CAC49A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC51EEA2-1C4C-4069-9704-7ACFE4773930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su2:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EF5E1B-9377-49D3-9BE3-62FC78E666A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su3:*:*:*:*:*:*",
            "matchCriteriaId" : "749AADDA-834D-4EC0-B7FF-E136FD1984F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su3_security_release_1:*:*:*:*:*:*",
            "matchCriteriaId" : "698BF7A1-62A1-45B5-BF08-AB3F3AA0245C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su4:*:*:*:*:*:*",
            "matchCriteriaId" : "4902A745-E7CB-4FC9-9BCB-89EFAB643237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su4_sr1:*:*:*:*:*:*",
            "matchCriteriaId" : "96504BF5-A81F-4A69-A183-BC80FA0321DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US",
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1603",
      "sourceIdentifier" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "published" : "2026-02-10T16:16:10.540",
      "lastModified" : "2026-03-10T13:11:30.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data."
      }, {
        "lang" : "es",
        "value" : "Una omisión de autenticación en Ivanti Endpoint Manager anterior a la versión 2024 SU5 permite a un atacante remoto no autenticado filtrar datos de credenciales almacenados específicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2026-03-09",
      "cisaActionDue" : "2026-03-23",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2024",
            "matchCriteriaId" : "7ABDE6FE-56CC-4A46-91F2-2F54C3EC6A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C7283FE-C10A-4E37-B004-15FB0CAC49A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC51EEA2-1C4C-4069-9704-7ACFE4773930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su2:*:*:*:*:*:*",
            "matchCriteriaId" : "E1EF5E1B-9377-49D3-9BE3-62FC78E666A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su3:*:*:*:*:*:*",
            "matchCriteriaId" : "749AADDA-834D-4EC0-B7FF-E136FD1984F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su3_security_release_1:*:*:*:*:*:*",
            "matchCriteriaId" : "698BF7A1-62A1-45B5-BF08-AB3F3AA0245C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su4:*:*:*:*:*:*",
            "matchCriteriaId" : "4902A745-E7CB-4FC9-9BCB-89EFAB643237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:endpoint_manager:2024:su4_security_release_1:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF8F788-0384-4E6B-844E-35ED79CA1F17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US",
        "source" : "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1603",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1774",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-02-10T16:16:10.740",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability."
      }, {
        "lang" : "es",
        "value" : "CASL Ability, versiones 2.4.0 a 6.7.4, contiene una vulnerabilidad de contaminación de prototipos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/1321.html",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Prototype_pollution",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://github.com/stalniy/casl/tree/master/packages/casl-ability",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/458422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21743",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T16:16:10.903",
      "lastModified" : "2026-02-12T16:05:15.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autorización faltante en Fortinet FortiAuthenticator 6.6.0 hasta 6.6.6, FortiAuthenticator 6.5 todas las versiones, FortiAuthenticator 6.4 todas las versiones, FortiAuthenticator 6.3 todas las versiones puede permitir a un usuario de solo lectura realizar modificaciones a usuarios locales a través de una carga de archivo a un endpoint desprotegido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.6.7",
            "matchCriteriaId" : "C1683FD1-9BDE-4596-9DBC-F146922E022C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-25-528",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22153",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-10T16:16:11.050",
      "lastModified" : "2026-02-12T16:03:10.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación por debilidad primaria [CWE-305] en Fortinet FortiOS 7.6.0 hasta 7.6.4 podría permitir a un atacante no autenticado omitir la autenticación LDAP de la política de VPN sin agente o FSSO, cuando el servidor LDAP remoto está configurado de una manera específica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "26DF2CCC-782C-4AE8-8CDE-13FFEE8676E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-25-1052",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24885",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T17:16:20.940",
      "lastModified" : "2026-02-13T20:19:00.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery (CSRF) vulnerability exists in the ProjectPermissionController within the Kanboard application. The application fails to strictly enforce the application/json Content-Type for the changeUserRole action. Although the request body is JSON, the server accepts text/plain, allowing an attacker to craft a malicious form using the text/plain attribute. Which allows unauthorized modification of project user roles if an authenticated admin visits a malicious site This vulnerability is fixed in 1.2.50."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos centrado en la metodología Kanban. Antes de la versión 1.2.50, existe una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el ProjectPermissionController dentro de la aplicación Kanboard. La aplicación no logra aplicar estrictamente el Content-Type application/json para la acción changeUserRole. Aunque el cuerpo de la petición es JSON, el servidor acepta text/plain, permitiendo a un atacante crear un formulario malicioso usando el atributo text/plain. Lo que permite la modificación no autorizada de los roles de usuario del proyecto si un administrador autenticado visita un sitio malicioso. Esta vulnerabilidad está corregida en la versión 1.2.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.50",
            "matchCriteriaId" : "C1B88FC0-3CFD-4A8C-A9E4-9AAF4F1D51EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/2c56d92783d4a3094812c2f7cba50f80a372f95e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-582j-h4w4-hwr5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-582j-h4w4-hwr5",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25530",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T17:16:21.910",
      "lastModified" : "2026-02-13T20:21:29.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos centrado en la metodología Kanban. Antes de la versión 1.2.50, el método API getSwimlane carece de autorización a nivel de proyecto, permitiendo a usuarios autenticados acceder a datos de swimlane de proyectos a los que no tienen acceso. Esta vulnerabilidad está corregida en la versión 1.2.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.50",
            "matchCriteriaId" : "C1B88FC0-3CFD-4A8C-A9E4-9AAF4F1D51EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/c3d8d20e05322b09e036fed7afb57194d624a414",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-6rxw-vvvj-r93q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0651",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-10T18:16:21.977",
      "lastModified" : "2026-04-02T18:16:26.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability was identified TP-Link Tapo C260 v1, D235 v1 and C520WS v2.6 within the HTTP server’s handling of GET requests. The server performs path normalization before fully decoding URL encoded input and falls back to using the raw path when normalization fails. An attacker can exploit this logic flaw by supplying crafted, URL encoded traversal sequences that bypass directory restrictions and allow access to files outside the intended web root. \n\nSuccessful exploitation may allow authenticated attackers to get disclosure of sensitive system files and credentials, while unauthenticated attackers may gain access to non-sensitive static assets."
      }, {
        "lang" : "es",
        "value" : "En TP-Link Tapo C260 v1, es posible un salto de ruta debido a un manejo inadecuado de rutas de solicitud GET específicas a través de HTTPS, lo que permite la exploración local no autenticada de rutas del sistema de archivos. Un atacante en la red local puede determinar si ciertos archivos existen en el dispositivo, sin posibilidades de lectura, escritura o ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c260_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.9",
            "matchCriteriaId" : "FD5A8252-3DA6-4C0D-AF45-F19BCBDBEF95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c260:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26590B2F-AD6F-467B-813C-18972794C1F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c260/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c520ws/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-d235/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c260/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c520ws/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4960/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0652",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-10T18:16:22.127",
      "lastModified" : "2026-02-13T20:45:16.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization. An authenticated attacker can execute arbitrary system commands with high impact on confidentiality, integrity and availability. It may cause full device compromise."
      }, {
        "lang" : "es",
        "value" : "En TP-Link Tapo C260 v1, existe una vulnerabilidad de inyección de comandos debido a una sanitización inadecuada en ciertos parámetros POST durante la sincronización de la configuración. Un atacante autenticado puede ejecutar comandos de sistema arbitrarios con alto impacto en la confidencialidad, integridad y disponibilidad. Puede causar un compromiso total del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c260_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.9",
            "matchCriteriaId" : "FD5A8252-3DA6-4C0D-AF45-F19BCBDBEF95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c260:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26590B2F-AD6F-467B-813C-18972794C1F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c260/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c260/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4960/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0653",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-10T18:16:22.257",
      "lastModified" : "2026-03-13T19:53:56.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited privileges. An attacker may change sensitive configuration parameters without authorization, resulting in unauthorized device state manipulation but not full code execution."
      }, {
        "lang" : "es",
        "value" : "En TP-Link Tapo C260 v1, un usuario autenticado con nivel de invitado puede eludir las restricciones de acceso previstas enviando solicitudes manipuladas a un endpoint de sincronización. Esto permite la modificación de la configuración protegida del dispositivo a pesar de los privilegios limitados. Un atacante puede cambiar parámetros de configuración sensibles sin autorización, resultando en una manipulación no autorizada del estado del dispositivo, pero no en la ejecución completa de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tapo_c260_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.9",
            "matchCriteriaId" : "FD5A8252-3DA6-4C0D-AF45-F19BCBDBEF95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tapo_c260:1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26590B2F-AD6F-467B-813C-18972794C1F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/tapo-c260/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tapo-d235/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tapo-c260/v1/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4960/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1996",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2026-02-10T18:16:22.387",
      "lastModified" : "2026-02-24T14:37:53.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection."
      }, {
        "lang" : "es",
        "value" : "Ciertas impresoras HP OfficeJet Pro pueden ser vulnerables a una posible denegación de servicio cuando las solicitudes IPP se gestionan incorrectamente, al no lograr establecer una conexión TCP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "hp-security-alert@hp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "hp-security-alert@hp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l18a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "83AE53D5-3D31-4638-9824-8BD3080B047E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l18a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F00B4D-B9F8-4B62-B5D3-900256A489DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "9109A5AD-EF41-4C7E-B194-E110D5D95159"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8532A8EA-9AB0-4D1E-B335-17AA15B6A1F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l67a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "89AA3A8B-F188-47FA-A571-2C1FCA8B0F0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l67a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D8B24-02F4-4623-9042-F9A41B1EAFF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "54FE9C18-23EF-470A-862D-92D449026494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F37D279-337F-4F3C-B074-4B07BD28BF8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "B839A09A-EEA3-4785-B4BE-F11EC14E1CFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC798E1B-C271-4608-91E3-A9F424FC25EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "4EBE023F-B131-474A-89BE-2E573068C4F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5A514C-A3D2-42FF-9751-B058E6CE0B3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "5D016642-7A50-4CFC-92DE-65A317C48033"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E269E14-8C60-4025-AC04-D42E85475361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s37a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "98178362-DD0F-443E-9272-567C8EA08C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s37a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FB194F-5069-46E0-A6A3-23AF123C8493"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "072F2277-25A8-4107-9637-C87A4BB4AE18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A5E84C-A804-459B-8007-3035AC29122F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "2E5D53DE-E7DF-41D2-B9B9-96BEE51764F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E18355D-4931-46DD-A779-674809C4E7F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "6B962641-44FF-4E2D-A140-412733D786F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F912B54E-0455-4183-9E87-0FADA27882FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "2EC64FE3-251A-47CD-9DB4-4118BD63BE5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBA06E1-0407-45CE-9781-F7829678EB23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s38a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "A84F1BFA-0B0A-4B1F-8CCF-350F3922E5FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s38a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D108F90C-277C-4DD4-9E44-42AB333FAB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "E7854AE0-AB5F-4514-92B4-230D7D1FEBE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA68A7-AD1A-45C6-9644-9851DE7B0E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "12B9F623-8AB1-48F5-B340-DBDBDAA1567B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D023BE-A942-439B-A339-D669A8D9E12C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g49a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "4F7A4FFD-25F2-467D-80B3-AE807F5CF780"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g49a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF3E032-DE0E-4062-BBEB-7AA5FC3900C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "D0F0D8B8-8500-4959-A7CF-07C729B6113E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC76A26-8406-4E15-B39A-D09147648313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_14057472-14057502-16/hpsbpi04089",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1997",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2026-02-10T18:16:22.513",
      "lastModified" : "2026-02-12T15:13:31.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource.\n\nCORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedded Web Server (EWS). Keeping CORS disabled unless explicitly required helps ensure that only trusted solutions can interact with the device."
      }, {
        "lang" : "es",
        "value" : "Ciertas impresoras HP OfficeJet Pro pueden exponer información si el Intercambio de Recursos de Origen Cruzado (CORS) está mal configurado, lo que podría permitir que orígenes web no autorizados accedan a los recursos del dispositivo.\n\nCORS está deshabilitado por defecto en dispositivos de clase Pro y solo puede ser habilitado por un administrador a través del Servidor Web Incorporado (EWS). Mantener CORS deshabilitado a menos que sea explícitamente requerido ayuda a garantizar que solo soluciones de confianza puedan interactuar con el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "hp-security-alert@hp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "hp-security-alert@hp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "D0F0D8B8-8500-4959-A7CF-07C729B6113E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC76A26-8406-4E15-B39A-D09147648313"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l20a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "42AFB641-43DC-4C4E-82FC-C47354554574"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l20a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E77AC9-8C07-4D01-AAD8-1B5F9D4946BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s32a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "1C8608A6-44B6-48F8-BBCE-273A8B33CCA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s32a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1321D1B8-9399-4191-9DDF-28B8A8BDE419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l21a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "B2FB6733-6C2E-402B-9D86-41BE72000E95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l21a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AE586A-78D6-4485-8AF1-CF2656BEF857"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s42a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "06F31D6D-B169-452E-8345-688E4D790D28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s42a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D745EDC-8EA4-46DF-8A8E-39396E89BAAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "88D8E56D-D2E2-434B-B0CE-AFDFE7DA612C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58F3E22-0132-4FE0-BB1B-67921D9CC62A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s39a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "D0A55B18-ECEB-4213-A199-F3212DFBDB83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s39a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D7F35E-1D2D-427F-986B-881E513D7C87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x83a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "C9B6D0CF-1AAA-4AE9-ABCD-0DA9264E0587"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x83a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D1341D-4DC5-44AB-BCA5-6343326D1D50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "D8B5950D-7807-4F14-AB03-F2F56CC6BE4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344302C9-ECBA-4CEB-BF0A-16870A9AE08E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "8FCE6671-8490-434C-A7FF-D53E3B1FCC28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C3AC4C-6939-4000-82EF-03D75AC3DF5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "2DEBAA9D-5C44-4ED7-B005-451482D52A79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3990AADE-1988-4484-9BCA-6B8C3DF42B6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g56a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "5F85AC50-F776-4BD0-BE75-27F93E95A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g56a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44950BF-5057-472A-8E8D-654DB87E5313"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "C739F365-65CA-4234-8174-6A4CCC23094C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70003792-C31A-413D-A797-1ECD47DB40F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "637F5E0B-067E-4F4B-873E-3A7EA46EF8D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l64a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579CB9CB-AA44-4761-BB9A-F17648F08810"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j3p65a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "D8AA69A9-51B2-4005-A8E7-911CD1F64E49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j3p65a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C09B23-4574-4560-8676-C294D0205C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j3p66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "1A53A81A-9749-4145-A758-DD94AEA09AF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j3p66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D2C89F-1DB6-45D1-971E-8C8ACD0F5A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j3p67a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "E9B9CFD8-0EDD-4804-B3B8-85396EE4639F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j3p67a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCCEABF0-D71E-46E4-9387-91E4D2625FF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "A0B0092C-B768-4CD6-A61F-BB1E642F4E1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j3p68a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC3438C-2004-4F7A-990E-7BF9AEEFBC4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602b",
            "matchCriteriaId" : "BFB262F7-2E5C-412B-BA5E-FD25B21D4A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE2DE16-2E4D-4111-958C-611F1F8DA9C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g5j38a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "EE968184-DAB1-46F0-AA8F-46E1131A9562"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g5j38a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA9039D-0528-43E5-8F19-AAB0FB5E4BC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t1p99a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "7A5FAFC7-AFE3-40C3-81BA-616D265D4B37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t1p99a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16872527-FF5E-4D76-A25B-A6C3C037C1FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:l3t99a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "F84FA699-53D3-410E-BD9C-C0FA9A969363"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:l3t99a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FF0FAA-E0BC-431C-A67D-0F8C4F985370"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:y0s19a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "1A4560F3-1427-462B-9D08-203AC07C1863"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:y0s19a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F16D7B-B990-4651-8490-94A0EE6D77B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:g5j56a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "F6F71E8B-2D95-4DD1-AFDF-7E465951B100"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:g5j56a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54557FCD-4056-4B35-BE0C-86FD644312C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:y0s18a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "CF9E2341-3245-4220-9F7D-0566135E9DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:y0s18a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9747F905-DC76-4B72-92AF-124092A9E147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:d9l18a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "83AE53D5-3D31-4638-9824-8BD3080B047E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:d9l18a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F00B4D-B9F8-4B62-B5D3-900256A489DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "9109A5AD-EF41-4C7E-B194-E110D5D95159"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8532A8EA-9AB0-4D1E-B335-17AA15B6A1F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l67a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "89AA3A8B-F188-47FA-A571-2C1FCA8B0F0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l67a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64D8B24-02F4-4623-9042-F9A41B1EAFF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "54FE9C18-23EF-470A-862D-92D449026494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F37D279-337F-4F3C-B074-4B07BD28BF8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "B839A09A-EEA3-4785-B4BE-F11EC14E1CFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC798E1B-C271-4608-91E3-A9F424FC25EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "4EBE023F-B131-474A-89BE-2E573068C4F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5A514C-A3D2-42FF-9751-B058E6CE0B3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "5D016642-7A50-4CFC-92DE-65A317C48033"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E269E14-8C60-4025-AC04-D42E85475361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s37a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "98178362-DD0F-443E-9272-567C8EA08C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s37a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4FB194F-5069-46E0-A6A3-23AF123C8493"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:m9l70a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "072F2277-25A8-4107-9637-C87A4BB4AE18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:m9l70a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A5E84C-A804-459B-8007-3035AC29122F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "2E5D53DE-E7DF-41D2-B9B9-96BEE51764F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E18355D-4931-46DD-A779-674809C4E7F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "6B962641-44FF-4E2D-A140-412733D786F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F912B54E-0455-4183-9E87-0FADA27882FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:j6x79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "2EC64FE3-251A-47CD-9DB4-4118BD63BE5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:j6x79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBA06E1-0407-45CE-9781-F7829678EB23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:k7s38a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "A84F1BFA-0B0A-4B1F-8CCF-350F3922E5FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:k7s38a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D108F90C-277C-4DD4-9E44-42AB333FAB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "E7854AE0-AB5F-4514-92B4-230D7D1FEBE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA68A7-AD1A-45C6-9644-9851DE7B0E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "12B9F623-8AB1-48F5-B340-DBDBDAA1567B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D023BE-A942-439B-A339-D669A8D9E12C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:t0g49a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "001.2602a",
            "matchCriteriaId" : "4F7A4FFD-25F2-467D-80B3-AE807F5CF780"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:t0g49a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF3E032-DE0E-4062-BBEB-7AA5FC3900C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_14051823-14051849-16/hpsbpi04086",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20841",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:22.643",
      "lastModified" : "2026-02-25T14:32:14.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comandos') en la aplicación Bloc de notas de Windows permite a un atacante no autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_notepad:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2510",
            "matchCriteriaId" : "56B0AA8E-CC49-4C3B-949B-399BE988B00A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=46971516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20846",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:22.797",
      "lastModified" : "2026-02-11T20:30:43.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network."
      }, {
        "lang" : "es",
        "value" : "Sobrelectura de búfer en Windows GDI+ permite a un atacante no autorizado denegar servicio a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20846",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21218",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:22.967",
      "lastModified" : "2026-02-12T17:35:25.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de un elemento especial faltante en .NET permite a un atacante no autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-166"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.24",
            "matchCriteriaId" : "F5602070-E5BB-4528-820B-5B0A9040BAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.13",
            "matchCriteriaId" : "0F518467-1A4D-44C6-A276-55BF97C04368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "2D24EC6A-A353-476F-ACCF-98AA24E641B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21218",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21222",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:23.130",
      "lastModified" : "2026-02-11T21:18:38.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Inserción de información sensible en un archivo de registro en el kernel de Windows permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21228",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:23.297",
      "lastModified" : "2026-02-25T14:20:49.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "La validación de certificado incorrecta en Azure Local permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_local:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2510.0.3002",
            "matchCriteriaId" : "E3258428-DD98-4F13-8231-5FCE7D463895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21228",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21229",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:23.453",
      "lastModified" : "2026-02-11T21:15:13.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Power BI allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada inadecuada en Power BI permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:power_bi_report_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1120.113",
            "matchCriteriaId" : "F720CB52-BD7A-4695-AFD2-84FD4CB9AE32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21229",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21231",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:23.600",
      "lastModified" : "2026-02-11T21:13:54.983",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21231",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21232",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:23.770",
      "lastModified" : "2026-02-11T21:12:11.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en Windows HTTP.sys permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21232",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21234",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:23.930",
      "lastModified" : "2026-02-11T21:10:43.267",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Servicio de Plataforma de Dispositivos Conectados de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21234",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21235",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:24.090",
      "lastModified" : "2026-02-11T21:09:06.693",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el Componente Gráfico de Microsoft permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21235",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21236",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:24.250",
      "lastModified" : "2026-02-11T21:07:23.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21236",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21237",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:24.427",
      "lastModified" : "2026-02-11T21:05:42.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Subsistema de Windows para Linux permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21237",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21238",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:24.613",
      "lastModified" : "2026-02-11T21:01:48.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21239",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:24.780",
      "lastModified" : "2026-02-11T21:00:30.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21239",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21240",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:24.963",
      "lastModified" : "2026-02-11T20:59:15.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera de tiempo de verificación tiempo de uso (TOCTOU) en Windows HTTP.sys permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21240",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21241",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:25.150",
      "lastModified" : "2026-02-11T20:57:27.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21241",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21242",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:25.323",
      "lastModified" : "2026-02-11T20:56:41.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el Subsistema de Windows para Linux permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21242",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21243",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:25.480",
      "lastModified" : "2026-02-11T20:41:23.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero nulo en LDAP de Windows - Protocolo ligero de acceso a directorios permite a un atacante no autorizado denegar el servicio a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21243",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21244",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:25.650",
      "lastModified" : "2026-02-11T20:43:08.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Windows Hyper-V permite a un atacante autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21244",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21245",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:25.843",
      "lastModified" : "2026-02-11T20:44:29.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21245",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21246",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:26.010",
      "lastModified" : "2026-02-11T20:36:58.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el Componente de Gráficos de Microsoft permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21246",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21247",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:26.180",
      "lastModified" : "2026-02-11T20:45:56.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en Windows Hyper-V permite a un atacante autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21247",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21248",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:26.340",
      "lastModified" : "2026-02-11T20:15:17.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Windows Hyper-V permite a un atacante autorizado ejecutar código localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21248",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21249",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:26.500",
      "lastModified" : "2026-02-11T19:53:01.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally."
      }, {
        "lang" : "es",
        "value" : "El control externo del nombre o la ruta del archivo en Windows NTLM permite a un atacante no autorizado realizar suplantación de identidad localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21249",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21250",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:26.670",
      "lastModified" : "2026-02-11T19:49:34.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero no confiable en Windows HTTP.sys permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21250",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21251",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:26.840",
      "lastModified" : "2026-02-11T19:42:34.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en la conmutación por error del cliente de clúster de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21251",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21253",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.000",
      "lastModified" : "2026-03-27T21:17:02.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el sistema de archivos Mailslot permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "C9801763-02E0-471B-A571-6E9733A5358D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "5D132B4B-F718-420D-B31D-39390ADB6ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "E1DDF720-A228-412B-BF01-ECD759C35A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "40F60E69-9FF7-4613-84D3-1982F357A82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "62BDF24B-B74A-4F48-A6A5-CA375ECE9B5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21253",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21253-detection-script-elevation-of-privilege-vulnerability-in-mailslot-file-system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21253-mitigation-script-elevation-of-privilege-vulnerability-in-mailslot-file-system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21255",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.167",
      "lastModified" : "2026-02-11T20:04:16.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Windows Hyper-V permite a un atacante autorizado eludir una característica de seguridad localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21255",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21256",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.330",
      "lastModified" : "2026-02-11T21:37:01.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comandos') en GitHub Copilot y Visual Studio permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.14.0",
            "versionEndExcluding" : "17.14.26",
            "matchCriteriaId" : "D5D30CC7-E672-4D7F-B1BA-2D56DC36109C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21256",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21257",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.483",
      "lastModified" : "2026-02-11T19:47:12.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comandos') en GitHub Copilot y Visual Studio permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.14.0",
            "versionEndExcluding" : "17.14.26",
            "matchCriteriaId" : "D5D30CC7-E672-4D7F-B1BA-2D56DC36109C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21257",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21258",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.637",
      "lastModified" : "2026-02-11T19:12:56.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en Microsoft Office Excel permite a un atacante no autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CD88F667-6773-4DB7-B6C3-9C7B769C0808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B342EF98-B414-44D0-BAFB-FCA24294EECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.10417.20097",
            "matchCriteriaId" : "0213E443-C4CD-41DC-9C07-B2D85B284389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21258",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21259",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.790",
      "lastModified" : "2026-02-11T19:12:00.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Microsoft Office Excel permite a un atacante no autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CD88F667-6773-4DB7-B6C3-9C7B769C0808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B342EF98-B414-44D0-BAFB-FCA24294EECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.10417.20097",
            "matchCriteriaId" : "0213E443-C4CD-41DC-9C07-B2D85B284389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21259",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21260",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:27.947",
      "lastModified" : "2026-02-11T19:10:20.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Exposición de información sensible a un actor no autorizado en Microsoft Office Outlook permite a un atacante no autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0E6FF8E4-A3AF-4EC2-AAFD-D4FB80A3851A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1E7C0D0D-7FE2-4FA4-AE4B-1B5D197BE982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20518",
            "matchCriteriaId" : "49F7C45C-1403-4B62-964C-49CACF1B9A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21260",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21261",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:28.107",
      "lastModified" : "2026-02-11T19:08:10.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en Microsoft Office Excel permite a un atacante no autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CD88F667-6773-4DB7-B6C3-9C7B769C0808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B342EF98-B414-44D0-BAFB-FCA24294EECE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C461C8D7-D6DC-47E2-BF64-0872A4D24E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "875BEC9A-6123-48A9-8B89-88AEA8422B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.10417.20097",
            "matchCriteriaId" : "0213E443-C4CD-41DC-9C07-B2D85B284389"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21261",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21312",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:28.257",
      "lastModified" : "2026-02-11T15:57:42.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.3 y anteriores de Audition están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6",
            "matchCriteriaId" : "D3D84C83-FC42-4BB7-8468-F8063EDF40F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/audition/apsb26-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21313",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:28.417",
      "lastModified" : "2026-02-11T15:57:50.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.3 y anteriores de Audition están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6",
            "matchCriteriaId" : "D3D84C83-FC42-4BB7-8468-F8063EDF40F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/audition/apsb26-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21314",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:28.570",
      "lastModified" : "2026-02-11T15:57:54.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.3 y anteriores de Audition están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6",
            "matchCriteriaId" : "D3D84C83-FC42-4BB7-8468-F8063EDF40F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/audition/apsb26-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21315",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:28.720",
      "lastModified" : "2026-02-11T15:57:33.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audition versions 25.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.3 y anteriores de Audition están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para acceder a información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6",
            "matchCriteriaId" : "D3D84C83-FC42-4BB7-8468-F8063EDF40F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/audition/apsb26-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21316",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:28.870",
      "lastModified" : "2026-02-11T15:58:07.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audition versions 25.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.3 y anteriores de Audition están afectadas por una vulnerabilidad de Acceso a Ubicación de Memoria Después del Fin del Búfer que podría conducir a una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para provocar que la aplicación se bloquee o deje de responder. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6",
            "matchCriteriaId" : "D3D84C83-FC42-4BB7-8468-F8063EDF40F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/audition/apsb26-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21317",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.027",
      "lastModified" : "2026-02-11T15:57:58.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.3 y anteriores de Audition están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6",
            "matchCriteriaId" : "D3D84C83-FC42-4BB7-8468-F8063EDF40F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/audition/apsb26-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21318",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.177",
      "lastModified" : "2026-02-11T17:37:55.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 25.6 y anteriores de After Effects se ven afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21319",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.330",
      "lastModified" : "2026-02-11T17:37:48.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para acceder a información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21320",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.480",
      "lastModified" : "2026-02-11T17:37:39.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects se ven afectadas por una vulnerabilidad de tipo Use After Free que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21321",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.627",
      "lastModified" : "2026-02-11T17:37:29.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de desbordamiento de entero o de ajuste (wraparound) que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21322",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.770",
      "lastModified" : "2026-02-11T17:37:15.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de lectura fuera de límites al analizar un archivo manipulado, lo que podría resultar en una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21323",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:29.920",
      "lastModified" : "2026-02-11T17:37:04.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de Uso Después de Liberar que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21324",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.080",
      "lastModified" : "2026-02-11T17:36:45.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects se ven afectadas por una vulnerabilidad de lectura fuera de límites al analizar un archivo manipulado, lo que podría resultar en una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21325",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.230",
      "lastModified" : "2026-02-11T17:36:38.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de lectura fuera de límites al analizar un archivo manipulado, lo que podría resultar en una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21326",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.380",
      "lastModified" : "2026-02-11T17:36:27.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects se ven afectadas por una vulnerabilidad de tipo Use After Free que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, lo que implica que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21327",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.530",
      "lastModified" : "2026-02-11T17:36:07.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21328",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.680",
      "lastModified" : "2026-02-11T17:35:50.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21329",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.830",
      "lastModified" : "2026-02-11T17:39:54.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de Uso Después de Liberar que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21330",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:30.990",
      "lastModified" : "2026-02-11T17:39:42.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de 'Acceso a recursos usando tipo incompatible' ('Type Confusion') que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21332",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:31.147",
      "lastModified" : "2026-02-11T18:29:46.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de InDesign Desktop 21.1, 20.5.1 y anteriores están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.2",
            "matchCriteriaId" : "75FF6705-31FC-4B07-BDBE-C82A6A52FD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "8A1253BD-81D4-4241-832A-5A9614CCF525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21334",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:31.303",
      "lastModified" : "2026-02-11T17:31:30.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 15.1.0 y anteriores de Substance3D - Designer se ven afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21335",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:31.457",
      "lastModified" : "2026-02-11T17:31:16.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.0 y anteriores de Substance3D - Designer están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21336",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:31.603",
      "lastModified" : "2026-02-11T17:31:03.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.0 y anteriores de Substance3D - Designer se ven afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría conducir a una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para bloquear la aplicación, causando una interrupción de los servicios. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21337",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:31.763",
      "lastModified" : "2026-02-11T17:30:53.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.0 y anteriores de Substance3D - Designer se ven afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para acceder a información sensible almacenada en la memoria. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21338",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:31.933",
      "lastModified" : "2026-02-11T17:30:42.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.0 y anteriores de Substance3D - Designer se ven afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría provocar una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para bloquear la aplicación, causando interrupción en los servicios. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21339",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:32.093",
      "lastModified" : "2026-02-11T17:30:29.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.0 y anteriores de Substance3D - Designer están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario en que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21340",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:32.243",
      "lastModified" : "2026-04-28T15:39:40.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 15.1.0 y anteriores de Substance3D - Designer están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "099B5ACB-801D-4DA7-953A-6A95AAB2225E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21350",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:32.403",
      "lastModified" : "2026-02-11T17:29:51.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de desreferencia de puntero nulo que podría conducir a una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para bloquear la aplicación, causando interrupción en los servicios. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21351",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:32.553",
      "lastModified" : "2026-02-11T17:29:31.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.6 y anteriores de After Effects están afectadas por una vulnerabilidad de Uso Después de Liberar que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.6.4",
            "matchCriteriaId" : "F65542CB-5428-49D9-818B-F08F7BA9776F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21357",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:32.707",
      "lastModified" : "2026-02-11T18:29:22.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de InDesign Desktop 21.1, 20.5.1 y anteriores están afectadas por una vulnerabilidad de desbordamiento de búfer basado en montículo que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.2",
            "matchCriteriaId" : "75FF6705-31FC-4B07-BDBE-C82A6A52FD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "8A1253BD-81D4-4241-832A-5A9614CCF525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21358",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T18:16:32.857",
      "lastModified" : "2026-02-11T18:28:40.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de escritorio de InDesign 21.1, 20.5.1 y anteriores se ven afectadas por una vulnerabilidad de desbordamiento de búfer basado en montículo que podría resultar en una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para bloquear la aplicación, causando interrupción en los servicios. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.2",
            "matchCriteriaId" : "75FF6705-31FC-4B07-BDBE-C82A6A52FD14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "8A1253BD-81D4-4241-832A-5A9614CCF525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb26-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21508",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.003",
      "lastModified" : "2026-02-12T17:19:52.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Autenticación incorrecta en Windows Storage permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21508",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21510",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.170",
      "lastModified" : "2026-02-11T16:13:25.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network."
      }, {
        "lang" : "es",
        "value" : "Fallo del mecanismo de protección en Windows Shell permite a un atacante no autorizado eludir una característica de seguridad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-10",
      "cisaActionDue" : "2026-03-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Windows Shell Protection Mechanism Failure Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21510",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21511",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.337",
      "lastModified" : "2026-02-11T18:56:56.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "La deserialización de datos no confiables en Microsoft Office Outlook permite a un atacante no autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "16.0.19127.20518",
            "matchCriteriaId" : "49F7C45C-1403-4B62-964C-49CACF1B9A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E1FE9E95-4874-46EF-AC93-9E485F7A2AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "38479B5D-66F9-4260-A18A-F6E3D9B6991E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21511",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21512",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.493",
      "lastModified" : "2026-02-11T21:39:50.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Falsificación de petición del lado del servidor (SSRF) en Azure DevOps Server permite a un atacante autorizado realizar suplantación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.2.0",
            "matchCriteriaId" : "648338CD-C36A-41F0-8790-713928111BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE17387-5AB3-4EED-BBAD-C0BFFC106C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "F74AA6F1-F3A6-4F78-BD49-4907E487BEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBE376F-E4B1-4A28-A1C1-D35F1A50B592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4189D3-8BF8-439A-99BE-FF9A3787C14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "9755C061-2382-48B9-8556-71C7B8BEF93C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA3E1F-F60B-4FAB-85B3-AB9A311A9CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "241CF9B3-92B7-42BF-AD86-4B34459EDBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022.2.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "30FDFC54-1791-4224-9270-10E96C437C93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21512",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21513",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.643",
      "lastModified" : "2026-03-30T13:28:07.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network."
      }, {
        "lang" : "es",
        "value" : "Falla del mecanismo de protección en el framework MSHTML permite a un atacante no autorizado eludir una característica de seguridad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-10",
      "cisaActionDue" : "2026-03-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "C9801763-02E0-471B-A571-6E9733A5358D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "5D132B4B-F718-420D-B31D-39390ADB6ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "E1DDF720-A228-412B-BF01-ECD759C35A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:-:*:x64:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "40F60E69-9FF7-4613-84D3-1982F357A82E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "62BDF24B-B74A-4F48-A6A5-CA375ECE9B5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21513",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21513-detection-script-security-feature-bypass-vulnerability-in-mshtml-framework",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21513-mitigation-script-security-feature-bypass-vulnerability-in-mshtml-framework",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21513",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21514",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.803",
      "lastModified" : "2026-02-11T15:47:04.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally."
      }, {
        "lang" : "es",
        "value" : "Dependencia de entradas no confiables en una decisión de seguridad en Microsoft Office Word permite a un atacante no autorizado eludir una característica de seguridad localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-10",
      "cisaActionDue" : "2026-03-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "851BAC4E-9965-4F40-9A6C-B73D9004F4C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "23B2FA23-76F4-4D83-A718-B8D04D7EA37B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "D31E509A-0B2E-4B41-88C4-0099E800AFE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "EF3E56B5-E6A6-4061-9380-D421E52B9199"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21514",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21516",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:33.960",
      "lastModified" : "2026-02-11T21:40:45.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización inadecuada de elementos especiales utilizados en un comando ('inyección de comandos') en Github Copilot permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:github_copilot:*:*:*:*:*:jetbrains:*:*",
            "versionEndExcluding" : "1.5.63-243",
            "matchCriteriaId" : "13150737-5808-4F8A-B181-86C3AA6A1ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21516",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21517",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:34.110",
      "lastModified" : "2026-02-25T14:20:17.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Resolución de enlaces incorrecta antes del acceso a archivos (seguimiento de enlaces) en la aplicación de Windows para Mac permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "11.3.2",
            "matchCriteriaId" : "8C81186C-577F-4B6F-B6DD-FEECB522A946"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21517",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21518",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:34.263",
      "lastModified" : "2026-02-23T17:23:27.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización inadecuada de elementos especiales utilizados en un comando ('inyección de comandos') en GitHub Copilot y Visual Studio Code permite a un atacante no autorizado eludir una característica de seguridad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.109.2",
            "matchCriteriaId" : "F9D09E0D-DA79-4992-848B-EFF81DBD4099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21519",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:34.417",
      "lastModified" : "2026-02-11T16:13:16.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Acceso de recurso usando tipo incompatible ('confusión de tipos') en el Administrador de ventanas de escritorio permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-10",
      "cisaActionDue" : "2026-03-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Windows Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21519",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21519",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21522",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:34.577",
      "lastModified" : "2026-02-11T18:45:49.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Neutralización inadecuada de elementos especiales utilizados en un comando ('inyección de comandos') en Azure Compute Gallery permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:confcom:*:*:*:*:*:azure_cli:*:*",
            "versionEndExcluding" : "1.2.8",
            "matchCriteriaId" : "1769C397-4AB8-4BCF-918C-BFF9E8E7B344"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21522",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21523",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:34.743",
      "lastModified" : "2026-02-11T21:41:36.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera de tipo time-of-check time-of-use (toctou) en GitHub Copilot y Visual Studio permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "1.109.2",
            "matchCriteriaId" : "F9D09E0D-DA79-4992-848B-EFF81DBD4099"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21523",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21525",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:34.930",
      "lastModified" : "2026-03-30T13:28:00.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally."
      }, {
        "lang" : "es",
        "value" : "Desreferencia de puntero nulo en el Administrador de Conexiones de Acceso Remoto de Windows permite a un atacante no autorizado denegar el servicio localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2026-02-10",
      "cisaActionDue" : "2026-03-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Windows NULL Pointer Dereference Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "369B4E41-3895-4CB7-BD37-D2E4A4D52FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21525-detection-script-dos-vulnerability-in-windows-remote-access-connection-manager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21525-mitigation-script-dos-vulnerability-in-windows-remote-access-connection-manager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21525",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21527",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:35.093",
      "lastModified" : "2026-02-11T21:41:55.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "La tergiversación de información crítica en la interfaz de usuario (IU) de Microsoft Exchange Server permite a un atacante no autorizado realizar suplantación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-451"
        }, {
          "lang" : "en",
          "value" : "CWE-1286"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*",
            "versionEndExcluding" : "15.02.2562.037",
            "matchCriteriaId" : "54BA4F30-C932-4BBE-A8D6-456CDE767157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "8C98993B-82A5-48CC-947F-896CEA0CDB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "7166BCE0-1D55-46B2-96B9-250AB4BB6291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21527",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21528",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:35.273",
      "lastModified" : "2026-02-19T17:24:48.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Enlazarse a una dirección IP sin restricciones en el SDK de Azure IoT permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_iot_explorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.13",
            "matchCriteriaId" : "BA6401CB-2490-4A38-8F23-363906BAF296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21529",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:35.433",
      "lastModified" : "2026-02-11T18:52:36.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en Azure HDInsights permite a un atacante autorizado realizar suplantación de identidad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_hdinsight:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1",
            "matchCriteriaId" : "A326E32A-E560-49C8-9F8C-B41DF7D19AA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21531",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:35.580",
      "lastModified" : "2026-02-12T15:49:25.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Deserialización de datos no confiables en el SDK de Azure permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_conversation_authoring_client_library:1.0.0:beta1:*:*:*:python:*:*",
            "matchCriteriaId" : "5F0D2A31-6685-4968-B9BD-8538BD0CD134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_conversation_authoring_client_library:1.0.0:beta2:*:*:*:python:*:*",
            "matchCriteriaId" : "6083B261-3037-4BFB-ACC5-B8945AE1046F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_conversation_authoring_client_library:1.0.0:beta3:*:*:*:python:*:*",
            "matchCriteriaId" : "CF3829C8-635B-4E0B-9C39-9FEA1A595C57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21531",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21533",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:35.790",
      "lastModified" : "2026-03-30T13:27:43.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Gestión inadecuada de privilegios en Escritorio remoto de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-10",
      "cisaActionDue" : "2026-03-03",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Windows Improper Privilege Management Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E78A20FD-B910-43DF-BE89-E971E2FD0049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "B941280B-97F6-4F60-80A3-40482A74488D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "C09C54DA-6AB0-4696-A2F2-C11CFC292EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x96:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "458D2B4A-5769-48F3-BA97-F174FE89F928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "EDB3FD9A-2786-4EC1-8989-2B0D054E0307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "893DBA65-116B-4AE0-80E1-50458CB5FDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.6937",
            "matchCriteriaId" : "37E2BFF1-28C0-4FA0-9A6C-020146E4AD54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "3ABF7E9C-769A-4330-AD97-FE3CD766E577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "F54B0C64-9A1F-470B-9824-322CF362507F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.6937",
            "matchCriteriaId" : "A5BD3F0C-1E6F-4937-806C-B87CA19C2830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "B273EF5A-3157-4842-AE91-CEC289813902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6649",
            "matchCriteriaId" : "CD2513FC-D399-4DBF-921F-13B4D1497127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "B08450A0-0F7E-4A05-8989-900221992766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7781",
            "matchCriteriaId" : "9D30B348-DAE7-43EC-85FA-38E1715258A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "8F23FFCF-9C69-4D27-AF21-D09A6041AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7781",
            "matchCriteriaId" : "D1D93202-BDDB-438F-934E-1FE904B3651B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8868",
            "matchCriteriaId" : "E21BC97D-1C11-41FD-9A20-34A2BC535BD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8389",
            "matchCriteriaId" : "B6E3E93E-8160-4BFB-B5CB-85740922CF7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4711",
            "matchCriteriaId" : "9E19FC4B-C3CC-4924-9A0B-5E4F100280D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2149",
            "matchCriteriaId" : "F0EA3C51-C3FE-494A-92D9-D3B1C301CB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.26100.32313",
            "matchCriteriaId" : "33AF95F4-504F-40EF-9F64-5D6F7B40114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21533-detection-script-privilege-escalation-vulnerability-in-windows-remote-desktop",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/cve-2026-21533-mitigation-script-privilege-escalation-vulnerability-in-windows-remote-desktop",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21533",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21537",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:35.970",
      "lastModified" : "2026-02-11T21:50:25.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado de la generación de código ('inyección de código') en Microsoft Defender para Linux permite a un atacante no autorizado ejecutar código a través de una red adyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "1EFDA019-FE81-4CBC-8B31-E8F9C42272A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21537",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23655",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-10T18:16:36.137",
      "lastModified" : "2026-02-25T14:19:13.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Almacenamiento en texto claro de información sensible en Azure Compute Gallery permite a un atacante autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:confidential_sidecar_containers:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12",
            "matchCriteriaId" : "817D3B82-D694-46E1-8021-611B0D1E8ED1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23655",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24045",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:36.500",
      "lastModified" : "2026-04-14T22:16:29.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docmost is open-source collaborative wiki and documentation software. From 0.20.0 and before 0.25.0, the public share page functionality in Docmost does not properly HTML-escape page titles before inserting them into meta tags and the title tag. This allows Stored Cross-Site Scripting (XSS) attacks, where an attacker can execute arbitrary JavaScript in the context of any user who opens a shared page link. This vulnerability is fixed in 0.25.0."
      }, {
        "lang" : "es",
        "value" : "Docmost es un software de wiki y documentación colaborativo de código abierto. Desde g y antes de 0.25.0, la funcionalidad de página compartida pública en Docmost no escapa correctamente los títulos de página HTML antes de insertarlos en las metaetiquetas y la etiqueta de título. Esto permite ataques de cross-site scripting (XSS) almacenado, donde un atacante puede ejecutar JavaScript arbitrario en el contexto de cualquier usuario que abra un enlace de página compartida. Esta vulnerabilidad está corregida en 0.25.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmost:docmost:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.20.0",
            "versionEndExcluding" : "0.25.0",
            "matchCriteriaId" : "D7D600BF-E5D3-41E6-9139-FCD949011063"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/docmost/docmost/commit/f3f74c591f32f85b8aa9a98ed884a7dd455780f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/docmost/docmost/releases/tag/v0.25.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/docmost/docmost/security/advisories/GHSA-h7fp-4f37-29wq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docmost/docmost/security/advisories/GHSA-h7fp-4f37-29wq",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25577",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:37.290",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause denial of service. This vulnerability is fixed in 1.3.11."
      }, {
        "lang" : "es",
        "value" : "Emmett es un framework diseñado para simplificar su proceso de desarrollo. Antes de 1.3.11, la propiedad cookies en mmett_core.http.wrappers.Request no gestiona las excepciones CookieError al analizar encabezados Cookie malformados. Esto permite a atacantes no autenticados activar errores HTTP 500 y causar denegación de servicio. Esta vulnerabilidad está corregida en 1.3.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        }, {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emmett-framework/core/commit/9557ea23a27cbadf7774d8bca6bbe4b54fa8a3ec",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/emmett-framework/core/security/advisories/GHSA-x6cr-mq53-cc76",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/emmett-framework/core/security/advisories/GHSA-x6cr-mq53-cc76",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25611",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T18:16:37.450",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server."
      }, {
        "lang" : "es",
        "value" : "Una serie de mensajes no autenticados, específicamente diseñados, pueden agotar la memoria disponible y colapsar un servidor MongoDB."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-405"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-116206",
        "source" : "cna@mongodb.com"
      }, {
        "url" : "https://jira.mongodb.org/browse/SERVER-116210",
        "source" : "cna@mongodb.com"
      }, {
        "url" : "https://jira.mongodb.org/browse/SERVER-116211",
        "source" : "cna@mongodb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25612",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T18:16:37.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks."
      }, {
        "lang" : "es",
        "value" : "El mecanismo de bloqueo interno del servidor MongoDB utiliza una codificación interna de los recursos para elegir qué bloqueo tomar. Las colecciones pueden colisionar inadvertidamente entre sí en esta representación, causando indisponibilidad entre ellas debido a bloqueos conflictivos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-412"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-114838",
        "source" : "cna@mongodb.com"
      }, {
        "url" : "https://jira.mongodb.org/browse/SERVER-115296",
        "source" : "cna@mongodb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25646",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:37.817",
      "lastModified" : "2026-02-13T20:43:44.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55."
      }, {
        "lang" : "es",
        "value" : "LIBPNG es una biblioteca de referencia para uso en aplicaciones que leen, crean y manipulan archivos de imagen ráster PNG (Portable Network Graphics). Antes de 1.6.55, existe una vulnerabilidad de lectura fuera de límites en la función API png_set_quantize(). Cuando se llama a la función sin histograma y el número de colores en la paleta es más del doble del máximo soportado por la pantalla del usuario, ciertas paletas harán que la función entre en un bucle infinito que lee más allá del final de un búfer interno asignado en el *heap*. Las imágenes que activan esta vulnerabilidad son válidas según la especificación PNG. Esta vulnerabilidad está corregida en 1.6.55."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.55",
            "matchCriteriaId" : "306EDE73-99CF-4AE7-9B92-C63F68FD63AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/09/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25728",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.053",
      "lastModified" : "2026-02-18T15:02:02.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability exists in ClipBucket's avatar and background image upload functionality. The application moves uploaded files to a web-accessible location before validating them, creating a window where an attacker can execute arbitrary PHP code before the file is deleted. The uploaded file was moved to a web-accessible path via move_uploaded_file(), then validated via ValidateImage(). If validation failed, the file was deleted via @unlink(). This vulnerability is fixed in 5.5.3 - #40."
      }, {
        "lang" : "es",
        "value" : "ClipBucket v5 es una plataforma de código abierto para compartir videos. Antes de la versión 5.5.3 - #40, existe una vulnerabilidad de condición de carrera de Tiempo de Verificación a Tiempo de Uso (TOCTOU) en la funcionalidad de carga de avatares e imágenes de fondo de ClipBucket. La aplicación mueve los archivos cargados a una ubicación accesible desde la web antes de validarlos, creando una ventana donde un atacante puede ejecutar código PHP arbitrario antes de que el archivo sea eliminado. El archivo cargado fue movido a una ruta accesible desde la web a través de move_uploaded_file(), luego validado a través de ValidateImage(). Si la validación fallaba, el archivo era eliminado a través de @unlink(). Esta vulnerabilidad está corregida en 5.5.3 - #40."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3",
            "versionEndExcluding" : "5.5.3-40",
            "matchCriteriaId" : "DFE28189-CAEC-486E-9C4A-44D5B4E86ABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/commit/09536e6e2ca6d69a2ee83190b588c0b8116dd16d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-xq7c-m5r2-9wqj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-xq7c-m5r2-9wqj",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25805",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.200",
      "lastModified" : "2026-02-19T15:08:32.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Further it does not show after the tool was being invoked, which parameters were used. Thus, maybe unwanted or even malicious values could be used without the user having a chance to notice it. Patched in Zed Editor 0.219.4 which includes expandable tool call details."
      }, {
        "lang" : "es",
        "value" : "Zed es un editor de código multijugador. Antes de la 0.219.4, Zed no muestra con qué parámetros se invoca una herramienta al solicitar permiso. Además, no muestra qué parámetros se utilizaron después de invocar la herramienta. Por lo tanto, valores posiblemente no deseados o incluso maliciosos podrían usarse sin que el usuario tenga la oportunidad de notarlo. Corregido en Zed Editor 0.219.4, que incluye detalles de llamada de herramienta expandibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-356"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zed:zed:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.219.4",
            "matchCriteriaId" : "097AC575-E913-4FE5-A82A-BC46101AA936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zed-industries/zed/security/advisories/GHSA-f2g4-87h6-4pxq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25947",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.423",
      "lastModified" : "2026-02-23T17:57:18.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocation and scheduling features. The vulnerability has been patched in version v2.1.7."
      }, {
        "lang" : "es",
        "value" : "Worklenz es una herramienta de gestión de proyectos. Antes de 2.1.7, se descubrieron múltiples vulnerabilidades de inyección SQL en la construcción de consultas SQL del backend que afectaban a los controladores de gestión de proyectos y tareas, a los puntos finales de datos financieros y de informes, a los manejadores de socket.io en tiempo real, y a las características de asignación y programación de recursos. La vulnerabilidad ha sido parcheada en la versión v2.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:worklenz:worklenz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.7",
            "matchCriteriaId" : "C488A1A0-AD25-4AF0-B022-3F30C5F88BEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Worklenz/worklenz/commit/76e5cb0f5dd566fb65586cd3db30ee951c92a32b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Worklenz/worklenz/releases/tag/v2.1.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Worklenz/worklenz/security/advisories/GHSA-f2f8-2ppj-85pf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25950",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.593",
      "lastModified" : "2026-02-10T18:16:38.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the issue is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25956",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.653",
      "lastModified" : "2026-02-17T15:05:39.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect (or reflected XSS, depending on the crafted payload) when a user signs up. This vulnerability is fixed in 14.99.14 and 15.94.0."
      }, {
        "lang" : "es",
        "value" : "Frappe es un framework de aplicación web full-stack. Antes de las versiones 14.99.14 y 15.94.0, un atacante podría crear una URL de registro maliciosa para un sitio de Frappe, lo que podría llevar a una redirección abierta (o XSS reflejado, dependiendo de la carga útil creada) cuando un usuario se registra. Esta vulnerabilidad está corregida en las versiones 14.99.14 y 15.94.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.99.14",
            "matchCriteriaId" : "B90A466B-0D94-4B17-8525-15F4528579DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.94.0",
            "matchCriteriaId" : "9C5DE833-AC0F-4270-B614-CE4F8CAE7AC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/frappe/commit/22cac9dd240dc1fa00d4bab7e3887b70faf22bd1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frappe/frappe/security/advisories/GHSA-7m8v-g2pr-h2f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25992",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.807",
      "lastModified" : "2026-02-23T17:58:09.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensitive files. On case-insensitive file systems such as Windows, attackers can bypass restrictions using mixed-case paths and read protected configuration files. This vulnerability is fixed in 3.5.5."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Antes de la versión 3.5.5, el endpoint /api/file/getFile utiliza comprobaciones de igualdad de cadenas que distinguen entre mayúsculas y minúsculas para bloquear el acceso a archivos sensibles. En sistemas de archivos que no distinguen entre mayúsculas y minúsculas, como Windows, los atacantes pueden eludir las restricciones utilizando rutas con mayúsculas y minúsculas mezcladas y leer archivos de configuración protegidos. Esta vulnerabilidad se corrigió en la versión 3.5.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.5",
            "matchCriteriaId" : "D3F6A2E5-099B-4ED7-B1D4-CC2E4DFECF3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/releases/tag/v3.5.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f72r-2h5j-7639",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25993",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:38.957",
      "lastModified" : "2026-02-23T18:03:12.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds\npath / request_path values—derived from the url_key stored in the database—into SQL statements via string concatenation and passes them to execute(). As a result, if a malicious string is stored in url_key , subsequent event processing modifies and executes the SQL statement, leading to a second-order SQL injection. Patched from v2.1.1."
      }, {
        "lang" : "es",
        "value" : "EverShop es una plataforma de comercio electrónico con prioridad en TypeScript. Durante el manejo de eventos de actualización y eliminación de categorías, la aplicación incrusta valores de ruta / ruta de solicitud —derivados de la url_key almacenada en la base de datos— en sentencias SQL mediante concatenación de cadenas y los pasa a execute(). Como resultado, si una cadena maliciosa se almacena en url_key, el procesamiento de eventos posterior modifica y ejecuta la sentencia SQL, lo que lleva a una inyección SQL de segundo orden. Parcheado a partir de la v2.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evershop:evershop:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "227349FD-25AD-4D12-AD7B-F50210FF385D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://github.com/evershopcommerce/evershop/commit/5c5bdf2c1ad5d16ae68e9e48b494563953b6d1cd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/evershopcommerce/evershop/security/advisories/GHSA-3h84-9rhc-j2ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26003",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T18:16:39.107",
      "lastModified" : "2026-02-23T18:06:14.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but it will not result in key leakage. For older versions, as there are only operation interfaces for obtaining information, the impact is almost negligible. This vulnerability is fixed in 4.14.5-fix."
      }, {
        "lang" : "es",
        "value" : "FastGPT es una plataforma de creación de agentes de IA. Desde la 4.14.0 hasta la 4.14.5, los atacantes pueden acceder directamente al sistema de plugins a través de FastGPT/API/plugin/xxx sin autenticación, amenazando así el sistema de plugins. Esto puede causar que el sistema de plugins falle y la pérdida del estado de instalación del plugin, pero no resultará en una fuga de claves. Para versiones anteriores, ya que solo hay interfaces de operación para obtener información, el impacto es casi insignificante. Esta vulnerabilidad está corregida en la 4.14.5-fix."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastgpt:fastgpt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.0",
            "versionEndExcluding" : "4.14.5",
            "matchCriteriaId" : "70BA7E7B-7114-4EDC-984B-7F38B87563AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastgpt:fastgpt:4.14.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E5B2B8-09AF-4ADC-B3D5-6F4BD0179E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/labring/FastGPT/commit/0beb52a2f3dc4067aab011cc98122d1352823b0c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/labring/FastGPT/releases/tag/v4.14.5-fix",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/labring/FastGPT/security/advisories/GHSA-wcrg-g824-9gfg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1847",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:15:51.160",
      "lastModified" : "2026-02-25T17:25:07.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash."
      }, {
        "lang" : "es",
        "value" : "La inserción de ciertos documentos grandes en un conjunto de réplicas podría llevar a que los secundarios del conjunto de réplicas no puedan obtener el oplog del primario. Esto podría estancar la replicación dentro del conjunto de réplicas, lo que llevaría a una caída del servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.29",
            "matchCriteriaId" : "FD489FA8-4D9F-4F32-A7F6-596E4B1E52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.18",
            "matchCriteriaId" : "EAD79FD4-B8A1-463B-A796-BCA50C8A0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.4",
            "matchCriteriaId" : "416DE712-D5B3-4E88-9F5A-17BDDDFE6039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-113532",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1848",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:15:51.333",
      "lastModified" : "2026-02-25T17:20:29.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header."
      }, {
        "lang" : "es",
        "value" : "Conexiones recibidas del puerto proxy puede que no cuenten para el total de conexiones aceptadas, lo que resulta en caídas del servidor si el número total de conexiones excede los recursos disponibles. Esto solo se aplica a conexiones aceptadas del puerto proxy, a la espera de la cabecera del protocolo proxy."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.29",
            "matchCriteriaId" : "FD489FA8-4D9F-4F32-A7F6-596E4B1E52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.18",
            "matchCriteriaId" : "EAD79FD4-B8A1-463B-A796-BCA50C8A0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.4",
            "matchCriteriaId" : "416DE712-D5B3-4E88-9F5A-17BDDDFE6039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-114695",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1849",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:15:51.477",
      "lastModified" : "2026-02-25T17:17:56.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression."
      }, {
        "lang" : "es",
        "value" : "Servidor MongoDB puede experimentar un fallo por falta de memoria mientras evalúa expresiones que producen documentos profundamente anidados. El problema surge en funciones recursivas porque el servidor no comprueba periódicamente la profundidad de la expresión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.29",
            "matchCriteriaId" : "0EE77D5B-E587-4992-8E30-F3E8D085B00C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.18",
            "matchCriteriaId" : "4F6EFC47-E40A-4429-B6CD-27E497A9754F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.2",
            "matchCriteriaId" : "4E2374C5-A865-4B1D-9729-728A9F74BE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-102364",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1850",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:15:51.633",
      "lastModified" : "2026-02-25T17:11:10.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash."
      }, {
        "lang" : "es",
        "value" : "Consultas complejas pueden causar un uso excesivo de memoria en el Planificador de Consultas de MongoDB, resultando en un fallo por falta de memoria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.18",
            "matchCriteriaId" : "EAD79FD4-B8A1-463B-A796-BCA50C8A0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.4",
            "matchCriteriaId" : "416DE712-D5B3-4E88-9F5A-17BDDDFE6039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-114126",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21341",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:55.267",
      "lastModified" : "2026-02-11T16:40:15.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.1.6 y anteriores de Substance3D - Stager están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "74E245C2-305F-4107-A2BE-D667B07FAF60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21342",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:56.613",
      "lastModified" : "2026-02-11T16:40:22.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 3.1.6 y anteriores de Substance3D - Stager están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "74E245C2-305F-4107-A2BE-D667B07FAF60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21343",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:56.857",
      "lastModified" : "2026-02-11T17:16:03.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 3.1.6 y anteriores de Substance3D - Stager están afectadas por una vulnerabilidad de lectura fuera de límites al analizar un archivo manipulado, lo que podría resultar en una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "74E245C2-305F-4107-A2BE-D667B07FAF60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21344",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:57.190",
      "lastModified" : "2026-02-11T17:15:39.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Stager versiones 3.1.6 y anteriores están afectadas por una vulnerabilidad de lectura fuera de límites al analizar un archivo manipulado, lo que podría resultar en una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "74E245C2-305F-4107-A2BE-D667B07FAF60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21345",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:57.457",
      "lastModified" : "2026-02-11T17:15:24.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Substance3D - Stager versiones 3.1.6 y anteriores están afectadas por una vulnerabilidad de lectura fuera de límites al analizar un archivo manipulado, lo que podría resultar en una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "74E245C2-305F-4107-A2BE-D667B07FAF60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21346",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:57.657",
      "lastModified" : "2026-02-11T17:15:14.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.3, 16.0.1 y anteriores de Bridge se ven afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.4",
            "matchCriteriaId" : "04D9B9D5-6B63-4ECB-8971-7ADB6853D4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.0.2",
            "matchCriteriaId" : "0A25A3B1-8324-4C2B-9583-A6A8CC88CA3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb26-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21347",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:57.890",
      "lastModified" : "2026-02-11T17:14:59.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1.3, 16.0.1 y anteriores de Bridge están afectadas por una vulnerabilidad de desbordamiento de entero o ajuste que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1.4",
            "matchCriteriaId" : "04D9B9D5-6B63-4ECB-8971-7ADB6853D4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.0.2",
            "matchCriteriaId" : "0A25A3B1-8324-4C2B-9583-A6A8CC88CA3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb26-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21352",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:58.107",
      "lastModified" : "2026-02-13T20:37:27.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.7.1 2410 y anteriores del DNG SDK se ven afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "39CD12E3-C567-4F3D-A37A-B73D3B4DCFCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21353",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:58.373",
      "lastModified" : "2026-02-13T20:37:33.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.7.1 2410 y anteriores del SDK de DNG están afectadas por una vulnerabilidad de desbordamiento de entero o 'wraparound' que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, en el sentido de que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "39CD12E3-C567-4F3D-A37A-B73D3B4DCFCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21354",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:59.140",
      "lastModified" : "2026-02-13T20:37:36.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.7.1 2410 y anteriores del SDK de DNG se ven afectadas por una vulnerabilidad de desbordamiento de entero o de ajuste que podría provocar una denegación de servicio de la aplicación. Un atacante podría explotar esta vulnerabilidad para hacer que la aplicación se bloquee o deje de responder. La explotación de este problema requiere interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "39CD12E3-C567-4F3D-A37A-B73D3B4DCFCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21355",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T19:15:59.503",
      "lastModified" : "2026-02-13T20:37:41.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 1.7.1 2410 y anteriores del SDK de DNG están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en la memoria. La explotación de este problema requiere interacción del usuario, en el sentido de que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dng_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "39CD12E3-C567-4F3D-A37A-B73D3B4DCFCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25506",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T19:16:03.720",
      "lastModified" : "2026-02-25T17:39:03.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18."
      }, {
        "lang" : "es",
        "value" : "MUNGE es un servicio de autenticación para crear y validar credenciales de usuario. Desde 0.5 hasta 0.5.17, un atacante local puede explotar una vulnerabilidad de desbordamiento de búfer en munged (el demonio de autenticación de MUNGE) para filtrar material de clave criptográfica de la memoria del proceso. Con el material de clave filtrado, el atacante podría falsificar credenciales MUNGE arbitrarias para suplantar a cualquier usuario (incluido root) a servicios que dependen de MUNGE para la autenticación. La vulnerabilidad permite un desbordamiento de búfer al enviar un mensaje manipulado con un campo de longitud de dirección sobredimensionado, corrompiendo el estado interno de munged y permitiendo la extracción de la subclave MAC utilizada para la verificación de credenciales. Esta vulnerabilidad se corrige en 0.5.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:munge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.5",
            "versionEndExcluding" : "0.5.18",
            "matchCriteriaId" : "8FA863EF-F766-4A77-8313-1AFC05928932"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dun/munge/commit/bf40cc27c4ce8451d4b062c9de0b67ec40894812",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dun/munge/releases/tag/munge-0.5.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/dun/munge/security/advisories/GHSA-r9cr-jf4v-75gh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/10/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/17/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25609",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:16:03.877",
      "lastModified" : "2026-02-25T16:54:40.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only."
      }, {
        "lang" : "es",
        "value" : "Validación incorrecta del comando de perfil puede resultar en la determinación de que una solicitud que altera el 'filtro' es de solo lectura."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.29",
            "matchCriteriaId" : "FD489FA8-4D9F-4F32-A7F6-596E4B1E52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.18",
            "matchCriteriaId" : "EAD79FD4-B8A1-463B-A796-BCA50C8A0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.4",
            "matchCriteriaId" : "416DE712-D5B3-4E88-9F5A-17BDDDFE6039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-112952",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25610",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:16:04.037",
      "lastModified" : "2026-02-25T16:46:13.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints."
      }, {
        "lang" : "es",
        "value" : "Un usuario autorizado puede provocar una caída del servidor al ejecutar una pipeline $geoNear con ciertas sugerencias de índice no válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.29",
            "matchCriteriaId" : "FD489FA8-4D9F-4F32-A7F6-596E4B1E52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.13",
            "matchCriteriaId" : "4BEA7813-D8C9-4377-8760-597C4FD6EDF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-99119",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25613",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:16:04.267",
      "lastModified" : "2026-02-25T16:45:10.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index."
      }, {
        "lang" : "es",
        "value" : "Un usuario autorizado puede deshabilitar el servidor MongoDB emitiendo una consulta contra una colección que contiene un índice comodín compuesto no válido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.29",
            "matchCriteriaId" : "FD489FA8-4D9F-4F32-A7F6-596E4B1E52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.18",
            "matchCriteriaId" : "EAD79FD4-B8A1-463B-A796-BCA50C8A0020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.4",
            "matchCriteriaId" : "416DE712-D5B3-4E88-9F5A-17BDDDFE6039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-113685",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26009",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T19:16:04.437",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or template.update permission can define arbitrary shell commands that achieve full root-level remote code execution on every node machine in the cluster. This vulnerability is fixed in commit 11980aaf3f46315b02777f325ba02c56b110165d."
      }, {
        "lang" : "es",
        "value" : "Catalyst es una plataforma construida para anfitriones de servidores de juegos empresariales, comunidades de juegos e integraciones de paneles de facturación. Los scripts de instalación definidos en las plantillas de servidor se ejecutan directamente en el sistema operativo anfitrión como root a través de bash -c, sin sandboxing ni contenerización. Cualquier usuario con permiso template.create o template.update puede definir comandos de shell arbitrarios que logran la ejecución remota de código de nivel root completo en cada máquina nodo del clúster. Esta vulnerabilidad se corrige en el commit 11980aaf3f46315b02777f325ba02c56b110165d."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/karutoil/catalyst/commit/11980aaf3f46315b02777f325ba02c56b110165d",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/karutoil/catalyst/security/advisories/GHSA-xv5r-cpcw-8wr3",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2302",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T19:16:04.677",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code."
      }, {
        "lang" : "es",
        "value" : "Bajo condiciones específicas, al procesar un valor manipulado maliciosamente de tipo Hash r, Mongoid::Criteria.from_hash puede permitir la ejecución de código Ruby arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-183"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/MONGOID-5919",
        "source" : "cna@mongodb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1762",
      "sourceIdentifier" : "GEPowerCVD@ge.com",
      "published" : "2026-02-10T20:16:52.940",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en GE Vernova Enervista UR Setup en Windows permite la manipulación de archivos. Este problema afecta a Enervista: 8.6 y versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "GEPowerCVD@ge.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "GEPowerCVD@ge.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/ges-2025-005.pdf",
        "source" : "GEPowerCVD@ge.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1763",
      "sourceIdentifier" : "GEPowerCVD@ge.com",
      "published" : "2026-02-10T20:16:53.073",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en GE Vernova Enervista UR Setup en Windows. Este problema afecta a Enervista: 8.6 y versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "GEPowerCVD@ge.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-35"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/ges-2025-005.pdf",
        "source" : "GEPowerCVD@ge.com"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-03",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21348",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T20:16:55.420",
      "lastModified" : "2026-02-12T19:07:46.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Versiones 1.22.5 y anteriores de Substance3D - Modeler están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la exposición de memoria. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible almacenada en memoria. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_modeler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.6",
            "matchCriteriaId" : "847F537C-A613-4A9D-A48C-5051EBAF42F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21349",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2026-02-10T20:16:55.590",
      "lastModified" : "2026-02-19T17:50:30.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 15.1 y anteriores de Lightroom Desktop se ven afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere interacción del usuario, ya que una víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:lightroom:*:*:*:*:classic:*:*:*",
            "versionEndExcluding" : "14.5.2",
            "matchCriteriaId" : "BEB7B149-A436-4FC2-BC36-F1A9C1C89104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:lightroom:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "42A062EF-18A6-477A-BC96-63F9A1E6166F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/lightroom/apsb26-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2303",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2026-02-10T20:17:00.757",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer."
      }, {
        "lang" : "es",
        "value" : "El repositorio mongo-go-driver contiene enlaces CGo para la autenticación GSSAPI (Kerberos) en Linux y macOS. La implementación del wrapper de C contiene una vulnerabilidad de lectura fuera de límites del heap debido a suposiciones incorrectas sobre la terminación de cadenas en el estándar GSSAPI. Dado que no se garantiza que los búferes GSSAPI estén terminados en nulo o que tengan relleno adicional, esto resulta en la lectura de un byte más allá del búfer del heap asignado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-183"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/GODRIVER-3770",
        "source" : "cna@mongodb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1495",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-10T21:16:01.470",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad, si se explota, podría permitir a un atacante con privilegios de Lector de Registros de Eventos (S-1-5-32-573) obtener detalles del proxy, incluyendo la URL y las credenciales del proxy, de los archivos de registro de eventos PI to CONNECT. Esto podría permitir el acceso no autorizado al servidor proxy."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-04",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1507",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-10T21:16:01.647",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service."
      }, {
        "lang" : "es",
        "value" : "Los productos afectados son vulnerables a una excepción no controlada que podría permitir a un atacante no autenticado bloquear remotamente los servicios PI centrales, resultando en una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26006",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T22:16:59.710",
      "lastModified" : "2026-02-17T15:28:04.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The autogpt before 0.6.32 is vulnerable to Regular Expression Denial of Service due to the use of regex at Code Extraction Block. The two Regex are used containing the corresponding dangerous patterns \\s+[\\s\\S]*? and \\s+(.*?). They share a common characteristic — the combination of two adjacent quantifiers that can match the same space character (\\s). As a result, an attacker can supply a long sequence of space characters to trigger excessive regex backtracking, potentially leading to a Denial of Service (DoS). This vulnerability is fixed in 0.6.32."
      }, {
        "lang" : "es",
        "value" : "AutoGPT es una plataforma que permite a los usuarios crear, desplegar y gestionar agentes de inteligencia artificial continuos que automatizan flujos de trabajo complejos. La versión de autogpt anterior a la 0.6.32 es vulnerable a la denegación de servicio por expresión regular debido al uso de regex en el Bloque de Extracción de Código. Se utilizan las dos regex que contienen los patrones peligrosos correspondientes '\\s+[\\s\\S]*?' y '\\s+(.*?)'. Comparten una característica común — la combinación de dos cuantificadores adyacentes que pueden coincidir con el mismo carácter de espacio (\\s). Como resultado, un atacante puede suministrar una secuencia larga de caracteres de espacio para desencadenar un retroceso excesivo de la regex, lo que podría llevar a una denegación de servicio (DoS). Esta vulnerabilidad se corrige en la versión 0.6.32."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agpt:autogpt_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.0",
            "versionEndExcluding" : "0.6.32",
            "matchCriteriaId" : "D636AD6C-82BA-474B-84A1-426490C50A2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/blocks/code_extraction_block.py#L106-L109",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/blocks/code_extraction_block.py#L86-L96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/commit/57a06f70883ce6be18738c6ae8bb41085c71e266",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-m2wr-7m3r-p52c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26007",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T22:17:00.307",
      "lastModified" : "2026-02-23T15:40:33.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5."
      }, {
        "lang" : "es",
        "value" : "Criptografía es un paquete diseñado para exponer primitivas criptográficas y recetas a los desarrolladores de Python. Antes de la versión 46.0.5, las funciones public_key_from_numbers (o EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() y load_pem_public_key() no verifican que el punto pertenezca al subgrupo de orden primo esperado de la curva. Esta validación faltante permite a un atacante proporcionar un punto P de clave pública de un subgrupo de orden pequeño. Esto puede llevar a problemas de seguridad en varias situaciones, como la verificación de firma (ECDSA) y la negociación de clave compartida (ECDH) más comúnmente utilizadas. Cuando la víctima calcula el secreto compartido como S = [victim_private_key]P a través de ECDH, esto filtra información sobre victim_private_key mod (orden_subgrupo_pequeño). Para curvas con cofactor &gt; 1, esto revela los bits menos significativos de la clave privada. Cuando estas claves públicas débiles se utilizan en ECDSA, es fácil falsificar firmas en el subgrupo pequeño. Solo las curvas SECT se ven afectadas por esto. Esta vulnerabilidad está corregida en la versión 46.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "46.0.5",
            "matchCriteriaId" : "CB473C4C-52CE-495D-B97D-9B4188A10313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/10/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26013",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-10T22:17:00.453",
      "lastModified" : "2026-03-17T20:30:07.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_tokens_from_messages() method fetches arbitrary image_url values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Request Forgery (SSRF) attacks by providing malicious image URLs in user input. This vulnerability is fixed in 1.2.11."
      }, {
        "lang" : "es",
        "value" : "LangChain es un framework para construir agentes y aplicaciones impulsadas por LLM. Antes de la versión 1.2.11, el método ChatOpenAI.get_num_tokens_from_messages() obtiene valores arbitrarios de image_url sin validación al calcular el recuento de tokens para modelos habilitados para visión. Esto permite a los atacantes desencadenar ataques de falsificación de petición del lado del servidor (SSRF) al proporcionar URLs de imagen maliciosas en la entrada del usuario. Esta vulnerabilidad está corregida en la versión 1.2.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langchain:langchain_core:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.2.11",
            "matchCriteriaId" : "5CCC1EB9-D45D-465A-96B4-2E6D1DE724FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langchain/commit/2b4b1dc29a833d4053deba4c2b77a3848c834565",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchain/security/advisories/GHSA-2g6r-c272-w58r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-10T23:16:16.080",
      "lastModified" : "2026-02-10T23:16:16.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This has been moved to the REJECTED state because the information source is under review. If circumstances change, it is possible that this will be moved to the PUBLISHED state at a later date."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25870",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-10T23:16:16.287",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality. The application accepts user-supplied URLs and performs server-side HTTP or HTTPS requests without sufficient validation or destination restrictions. The implementation does not enforce allowlists, block internal or private IP address ranges, or apply request timeouts or response size limits. An attacker can abuse this behavior to induce the server to issue outbound requests to arbitrary hosts, including internal network resources, potentially enabling internal network scanning and denial of service through resource exhaustion."
      }, {
        "lang" : "es",
        "value" : "DoraCMS versión 3.1 y anteriores contiene una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en su funcionalidad de obtención remota de imágenes de UEditor. La aplicación acepta URLs proporcionadas por el usuario y realiza peticiones HTTP o HTTPS del lado del servidor sin validación suficiente o restricciones de destino. La implementación no aplica listas de permitidos, bloquea rangos de dirección IP internas o privadas, ni aplica tiempos de espera de petición o límites de tamaño de respuesta. Un atacante puede abusar de este comportamiento para inducir al servidor a emitir peticiones salientes a hosts arbitrarios, incluyendo recursos de red internos, lo que podría permitir el escaneo de red interno y la denegación de servicio por agotamiento de recursos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/doramart/DoraCMS/issues/268",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.doracms.net/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/doracms-ueditor-remote-image-fetch-ssrf",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/doramart/DoraCMS/issues/268",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25872",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-10T23:16:16.473",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the embedded web interface. The application fails to properly validate file path input, allowing remote, unauthenticated attackers to access arbitrary files on the underlying filesystem within the context of the web server. This may result in disclosure of system configuration files and other sensitive information."
      }, {
        "lang" : "es",
        "value" : "Las versiones L1.12.22 y anteriores del firmware de JUNG Smart Panel KNX contienen una vulnerabilidad de salto de ruta no autenticada en la interfaz web incrustada. La aplicación no valida correctamente la entrada de la ruta de archivo, permitiendo a atacantes remotos no autenticados acceder a archivos arbitrarios en el sistema de archivos subyacente dentro del contexto del servidor web. Esto puede resultar en la divulgación de archivos de configuración del sistema y otra información sensible."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.jung.de/public/en/pdf/productdocumentation/en_sp5.1knx_09012015.pdf",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.jung-group.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/jung-smart-panel-knx-unauthenticated-path-traversal",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5969.php",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1571",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-02-11T01:15:56.453",
      "lastModified" : "2026-02-20T20:19:24.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker could run script in the device web UI context, potentially enabling credential theft, session hijacking, or unintended actions if a privileged user is targeted."
      }, {
        "lang" : "es",
        "value" : "La entrada controlada por el usuario se refleja en la salida HTML sin la codificación adecuada en TP-Link Archer C60 v3, permitiendo la ejecución arbitraria de JavaScript a través de una URL manipulada. Un atacante podría ejecutar scripts en el contexto de la interfaz de usuario web del dispositivo, lo que podría permitir el robo de credenciales, el secuestro de sesión o acciones no deseadas si un usuario privilegiado es el objetivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_c60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "260206",
            "matchCriteriaId" : "4EE4890E-D3B9-4D3B-AF37-C04EAD960B43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_c60:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF299E47-83CE-416E-9665-55847A6886C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/archer-c60/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4961/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1231",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T02:15:58.297",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `js` Global Settings parameter in all versions up to, and including, 2.10.0.5 due to missing capability checks on save_global_settings() function and insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level access and above who have been granted beaver builder access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Beaver Builder Page Builder – Drag and Drop Website Builder para WordPress es vulnerable a Stored Cross-Site Scripting a través del parámetro de Configuración Global 'js' en todas las versiones hasta, e incluyendo, la 2.10.0.5 debido a la falta de comprobaciones de capacidad en la función save_global_settings() y a la sanitización de entrada y escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel 'Custom' y superior a quienes se les ha concedido acceso a Beaver Builder, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.9.4.2/classes/class-fl-builder-ajax.php#L185",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.9.4.2/classes/class-fl-builder-model.php#L4762",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.9.4.2/classes/class-fl-builder.php#L4394",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7f7827bb-44d7-432d-85aa-3fdb117e1898?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1893",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T05:16:20.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Orbisius Random Name Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_label' parameter in the 'orbisius_random_name_generator' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Orbisius Random Name Generator para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'btn_label' en el shortcode 'orbisius_random_name_generator' en todas las versiones hasta la 1.0.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/orbisius-random-name-generator/tags/1.0.2/orbisius-random-name-generator.php#L112",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3455340%40orbisius-random-name-generator&new=3455340%40orbisius-random-name-generator&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/84e6bd88-88d1-4529-86f3-6c73fb47db9b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26036",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.003",
      "lastModified" : "2026-02-11T05:16:28.003",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26037",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.133",
      "lastModified" : "2026-02-11T05:16:28.133",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26038",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.193",
      "lastModified" : "2026-02-11T05:16:28.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26039",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.267",
      "lastModified" : "2026-02-11T05:16:28.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26040",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.337",
      "lastModified" : "2026-02-11T05:16:28.337",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26041",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.400",
      "lastModified" : "2026-02-11T05:16:28.400",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26042",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.463",
      "lastModified" : "2026-02-11T05:16:28.463",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26043",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.527",
      "lastModified" : "2026-02-11T05:16:28.527",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26044",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-11T05:16:28.590",
      "lastModified" : "2026-02-11T05:16:28.590",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-11T05:16:28.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled."
      }, {
        "lang" : "es",
        "value" : "Roundcube Webmail anterior a 1.5.13 y 1.6 anterior a 1.6.13 permite la inyección de Hojas de Estilo en Cascada (CSS), por ejemplo, debido a que los comentarios se manejan incorrectamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/roundcube/roundcubemail/commit/1f4c3a5af5033747f9685a8a395dbd8228d19816",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/2b5625f1d2ef7e050fd1ae481b2a52dc35466447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/53d75d5dfebef235a344d476b900c20c12d52b01",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/5a3315cce587e0be58335d11ff9a5571c90494a5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/bf89cbaa5897d8ad62e8057d9a3f6babb90b7954",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/c15f5dbf093a497e19a749b20e7f8fb5a9c24cde",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.5.13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/releases/tag/1.6.13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://roundcube.net/news/2026/02/08/security-updates-1.6.13-and-1.5.13",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1235",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-11T06:15:51.220",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress WP eCommerce hasta la versión 3.15.1 deserializa la entrada del usuario a través de acciones AJAX, lo que podría permitir a usuarios no autenticados realizar una inyección de objetos PHP cuando un gadget adecuado está presente en el blog."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c7eb234e-3113-40db-a00d-358604d91e3f/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1357",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T06:15:51.677",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with a lack of path sanitization when writing uploaded files. When the plugin fails to decrypt a session key using openssl_private_decrypt(), it does not terminate execution and instead passes the boolean false value to the phpseclib library's AES cipher initialization. The library treats this false value as a string of null bytes, allowing an attacker to encrypt a malicious payload using a predictable null-byte key. Additionally, the plugin accepts filenames from the decrypted payload without sanitization, enabling directory traversal to escape the protected backup directory. This makes it possible for unauthenticated attackers to upload arbitrary PHP files to publicly accessible directories and achieve Remote Code Execution via the wpvivid_action=send_to_site parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Migration, Backup, Staging – WPvivid Backup &amp; Migration para WordPress es vulnerable a la carga arbitraria de archivos no autenticada en versiones hasta la 0.9.123 inclusive. Esto se debe a un manejo inadecuado de errores en el proceso de descifrado RSA combinado con una falta de saneamiento de ruta al escribir archivos cargados. Cuando el plugin no logra descifrar una clave de sesión usando openssl_private_decrypt(), no termina la ejecución y en su lugar pasa el valor booleano falso a la inicialización del cifrado AES de la biblioteca phpseclib. La biblioteca trata este valor falso como una cadena de bytes nulos, permitiendo a un atacante cifrar una carga útil maliciosa usando una clave de byte nulo predecible. Además, el plugin acepta nombres de archivo de la carga útil descifrada sin saneamiento, lo que permite el salto de directorio para escapar del directorio de copia de seguridad protegido. Esto hace posible que atacantes no autenticados carguen archivos PHP arbitrarios a directorios de acceso público y logren la ejecución remota de código a través del parámetro wpvivid_action=send_to_site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.122/includes/class-wpvivid-crypt.php#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.122/includes/customclass/class-wpvivid-send-to-site.php#L629",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.123/includes/class-wpvivid-crypt.php#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.123/includes/customclass/class-wpvivid-send-to-site.php#L629",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/class-wpvivid-crypt.php#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/customclass/class-wpvivid-send-to-site.php#L629",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3448386/wpvivid-backuprestore#file1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5af0317-ef46-4744-9752-74ce228b5f37?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0724",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:50.827",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPlyr Media Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_wplyr_accent_color' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WPlyr Media Block para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro _wplyr_accent_color en todas las versiones hasta la 1.3.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wplyr-media-block/tags/1.3.0/includes/class-wplyr.php#L359",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wplyr-media-block/tags/1.3.0/includes/class-wplyr.php#L434",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wplyr-media-block/trunk/includes/class-wplyr.php#L359",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wplyr-media-block/trunk/includes/class-wplyr.php#L434",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7a4cc65b-b0a7-4002-add4-ceacfe2f54f1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0815",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:51.000",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Category Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag-image' parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Editor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Category Image para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'tag-image' en todas las versiones hasta la 2.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con acceso de nivel Editor o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/category-image/tags/2.0/category-image.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/category-image/trunk/category-image.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fb28c526-67ae-441d-9964-5ac17b966687?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1215",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:51.177",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MMA Call Tracking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.15. This is due to missing nonce validation when saving plugin configuration on the `mma_call_tracking_menu` admin page. This makes it possible for unauthenticated attackers to modify call tracking configuration settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin MMA Call Tracking para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 2.3.15, inclusive. Esto se debe a la falta de validación de nonce al guardar la configuración del plugin en la página de administración 'mma_call_tracking_menu'. Esto hace posible que atacantes no autenticados modifiquen la configuración de seguimiento de llamadas a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mma-call-tracking/tags/2.3.15/mma_call_tracking.php#L61",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mma-call-tracking/tags/2.3.15/mma_call_tracking.php#L967",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mma-call-tracking/trunk/mma_call_tracking.php#L61",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mma-call-tracking/trunk/mma_call_tracking.php#L967",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5689bd2b-1518-4b3b-81a3-cc92575f6c1f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1560",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:51.353",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.0 via multiple functions in the 'LazyBlocks_Blocks' class. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server."
      }, {
        "lang" : "es",
        "value" : "El plugin Custom Block Builder – Lazy Blocks para WordPress es vulnerable a la ejecución remota de código en todas las versiones hasta la 4.2.0, inclusive, a través de múltiples funciones en la clase 'LazyBlocks_Blocks'. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, ejecuten código en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/lazy-blocks/trunk/classes/class-blocks.php#L1637",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/lazy-blocks/trunk/classes/class-blocks.php#L766",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/lazy-blocks/trunk/classes/class-rest.php#L88",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3454012/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b1853c88-277b-4955-b042-aeed1cffb49b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1748",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:51.523",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve invoice clients, invoice items, and list of WordPress users along with their emails."
      }, {
        "lang" : "es",
        "value" : "El plugin Invoct – PDF Invoices &amp; Billing for WooCommerce para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobación de capacidad faltante en múltiples funciones en todas las versiones hasta la 1.6, ambas inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, recuperen clientes de facturas, elementos de facturas y la lista de usuarios de WordPress junto con sus correos electrónicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php#L565",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php#L585",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php#L605",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php#L626",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.7/KirilKirkovWpInvoices.php#L565",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/79e4b7e1-9fff-4ff2-be2b-6dfa5f1ff48a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1786",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:51.690",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Twitter posts to Blog plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dg_tw_options' function in all versions up to, and including, 1.11.25. This makes it possible for unauthenticated attackers to update plugin settings including Twitter API credentials, post author, post status, and the capability required to access the plugin's admin menu."
      }, {
        "lang" : "es",
        "value" : "El plugin Twitter posts to Blog para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función dg_tw_options en todas las versiones hasta la 1.11.25, inclusive. Esto hace posible que atacantes no autenticados actualicen la configuración del plugin, incluyendo las credenciales de la API de Twitter, el autor de la publicación, el estado de la publicación y la capacidad requerida para acceder al menú de administración del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/twitter-posts-to-blog/trunk/functions.php#L426",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/abcbb84c-6c2d-40c1-8c64-7d4866fa9503?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1804",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:51.863",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WDES Responsive Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdes-popup-title' shortcode in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WDES Responsive Popup para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'wdes-popup-title' del plugin en todas las versiones hasta la 1.3.6, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wdes-responsive-popup/tags/1.3.6/lib/view/title.php#L77",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wdes-responsive-popup/tags/1.3.6/wdes-popup.php#L111",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3afdffa7-23ec-41ea-b05a-152a69b7ce50?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1809",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:52.037",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTML Tag Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin HTML Tag Shortcodes para WordPress es vulnerable a cross-site scripting almacenado a través de los shortcodes del plugin en todas las versiones hasta la 1.1, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/html-shortcodes/tags/1.1/html_shortcode.php#L100",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/html-shortcodes/tags/1.1/html_shortcode.php#L88",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/html-shortcodes/trunk/html_shortcode.php#L100",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/html-shortcodes/trunk/html_shortcode.php#L88",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/846ccac2-ad56-4128-836d-2807c700c3fc?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1821",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:52.213",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mt_reservation shortcode in all versions up to, and including, 0.9.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Microtango para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'restkey' del shortcode mt_reservation en todas las versiones hasta la 0.9.29, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/microtango/tags/0.9.29/microtango-init.php#L129",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/microtango/trunk/microtango-init.php#L129",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455880/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/27657d29-e834-4f05-8fe9-7db0ab96f67d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1826",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:52.383",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenPOS Lite – Point of Sale for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter of the order_qrcode shortcode in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin OpenPOS Lite – Point of Sale for WooCommerce para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'width' del shortcode order_qrcode en todas las versiones hasta la 3.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpos-lite-version/tags/3.0/includes/admin/Admin.php#L3161",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpos-lite-version/trunk/includes/admin/Admin.php#L3161",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3456299/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e3bb88e9-e410-4ff7-b342-72c7b375dff1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1827",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:52.550",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's codeflask shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Flask Micro code-editor para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode codeflask del plugin en todas las versiones hasta la 1.0.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/flask-micro/tags/1.0.0/flask_micro.php#L80",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/flask-micro/trunk/flask_micro.php#L80",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fc1ef15f-ad31-4525-bbe5-bc3cc4485b20?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1833",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:52.713",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WaMate Confirm – Order Confirmation plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to block and unblock phone numbers, which should be restricted to administrators."
      }, {
        "lang" : "es",
        "value" : "El plugin WaMate Confirm – Order Confirmation para WordPress es vulnerable a acceso no autorizado en todas las versiones hasta la 2.0.1, inclusive. Esto se debe a que el plugin no verifica adecuadamente que un usuario está autorizado para realizar una acción. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor o superior, bloqueen y desbloqueen números de teléfono, lo cual debería estar restringido a los administradores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wamate-confirm/tags/2.0.1/customnotification.php#L1579",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wamate-confirm/tags/2.0.1/customnotification.php#L1596",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wamate-confirm/trunk/customnotification.php#L1579",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wamate-confirm/trunk/customnotification.php#L1596",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f9566fdd-c4ad-4971-b23b-bcf76c8b5cef?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1853",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:52.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BuddyHolis ListSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listsearch' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin BuddyHolis ListSearch para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'listsearch' del plugin en todas las versiones hasta la 1.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/listsearch/tags/1.1/listsearch.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/listsearch/trunk/listsearch.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/listsearch/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/43e52adf-387c-452d-96b4-aad459fa75b3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1885",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T09:15:53.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Slideshow Wp para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del atributo 'sswpid' del shortcode 'sswp-slide' en todas las versiones hasta la 1.1, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/slideshow-wp/tags/1.1/includes/sswp-functions.php#L102",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/slideshow-wp/trunk/includes/sswp-functions.php#L102",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0c0827fd-05e6-48bb-9592-bcc373d5f77d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2295",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T10:15:51.357",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_grid_load_more' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users."
      }, {
        "lang" : "es",
        "value" : "El plugin WPZOOM Addons para Elementor – Starter Templates &amp; Widgets para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobación de capacidad faltante en la función 'ajax_post_grid_load_more' en todas las versiones hasta la 1.3.2, ambas inclusive. Esto hace posible que atacantes no autenticados recuperen títulos y extractos de publicaciones protegidas (borrador, futuras, pendientes) que no deberían ser accesibles para usuarios no autenticados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpzoom-elementor-addons/tags/1.3.1/includes/wpzoom-elementor-ajax-posts-grid.php#L66",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3458416/wpzoom-elementor-addons",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9961347-7c47-4fa1-af35-609c39a6cd8b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0595",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:03.830",
      "lastModified" : "2026-02-12T21:16:37.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to add unauthorized email addresses to victim accounts through HTML injection in test case titles."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 13.9 anteriores a la 18.6.6, la 18.7 anteriores a la 18.7.4, y la 18.8 anteriores a la 18.8.4 que, bajo ciertas condiciones, podría haber permitido a un usuario autenticado añadir direcciones de correo electrónico no autorizadas a cuentas de víctimas mediante inyección HTML en los títulos de los casos de prueba."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "BC9EE0EC-1D82-438C-B3DC-3AA8CDAC6AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "B9610056-FED6-4ED5-8830-06E56C125CFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "EB4484C1-2D91-48A6-B396-4F16DC598828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "BCEB62DB-0D85-4A21-99C4-6235CA97A795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/584975",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3486862",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0958",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:03.970",
      "lastModified" : "2026-02-13T15:33:52.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through memory or CPU exhaustion by bypassing JSON validation middleware limits."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 18.4 antes de la 18.6.6, la 18.7 antes de la 18.7.4, y la 18.8 antes de la 18.8.4 que podría haber permitido a un usuario no autenticado causar denegación de servicio mediante el agotamiento de memoria o CPU al eludir los límites del middleware de validación JSON."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.4.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "88188F05-EAB5-43C6-8145-37B6842B8DDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.4.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "9CB95D09-FBC9-4FBA-B7BA-88755C4FA18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "EB4484C1-2D91-48A6-B396-4F16DC598828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "BCEB62DB-0D85-4A21-99C4-6235CA97A795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/586202",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3463363",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1080",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:04.120",
      "lastModified" : "2026-02-12T21:38:00.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab EE affecting all versions from 16.7 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to access iteration data from private descendant groups by querying the iterations API endpoint."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab EE que afectaba a todas las versiones desde la 16.7 anterior a la 18.6.6, la 18.7 anterior a la 18.7.4, y la 18.8 anterior a la 18.8.4 que, bajo ciertas condiciones, podría haber permitido a un usuario autenticado acceder a datos de iteración de grupos descendientes privados al consultar el endpoint de la API de iteraciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "16.7.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "9C40909F-AEAD-4AC0-AD12-082D2E389042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/586477",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3484568",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1094",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:04.263",
      "lastModified" : "2026-02-12T21:19:23.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 18.8.4 that could have allowed an authenticated developer to hide specially crafted file changes from the WebUI."
      }, {
        "lang" : "es",
        "value" : "GitLab ha corregido un problema en GitLab CE/EE que afectaba a todas las versiones desde la 18.8 anteriores a la 18.8.4 que podría haber permitido a un desarrollador autenticado ocultar cambios de archivo especialmente diseñados desde la WebUI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1289"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "BCEB62DB-0D85-4A21-99C4-6235CA97A795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/586483",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3502519",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1282",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:04.403",
      "lastModified" : "2026-02-12T21:22:02.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afectaba a todas las versiones desde la 18.6 y anteriores a la 18.6.6, la 18.7 y anteriores a la 18.7.4, y la 18.8 y anteriores a la 18.8.4 que podría haber permitido a un usuario autenticado inyectar contenido malicioso en los títulos de las etiquetas de proyecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.6.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "C3F7C278-FF2A-49DE-AE73-6B94C9833230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.6.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "22C1B676-A5D2-40E7-8399-CFB9BCEEDE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "EB4484C1-2D91-48A6-B396-4F16DC598828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "BCEB62DB-0D85-4A21-99C4-6235CA97A795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/587106",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3505596",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1387",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:04.547",
      "lastModified" : "2026-02-12T21:34:48.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to cause Denial of Service by uploading a malicious file and repeatedly querying it through GraphQl."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab EE que afecta a todas las versiones desde la 15.6 anterior a la 18.6.6, la 18.7 anterior a la 18.7.4, y la 18.8 anterior a la 18.8.4 que podría haber permitido a un usuario autenticado causar una denegación de servicio al subir un archivo malicioso y consultarlo repetidamente a través de GraphQl."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.6.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "3F0CFD5D-2A9D-49FD-A315-392CB1E1277F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/587546",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3515994",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1456",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:04.703",
      "lastModified" : "2026-02-12T21:39:23.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afectaba a todas las versiones desde la 18.7 hasta las anteriores a la 18.7.4, y desde la 18.8 hasta las anteriores a la 18.8.4, que podría haber permitido a un usuario no autenticado causar denegación de servicio mediante el agotamiento de la CPU al enviar archivos markdown especialmente diseñados que desencadenan un procesamiento exponencial en la vista previa de markdown."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "EB4484C1-2D91-48A6-B396-4F16DC598828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "BCEB62DB-0D85-4A21-99C4-6235CA97A795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/587688",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3517928",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1458",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-11T12:16:04.847",
      "lastModified" : "2026-02-12T21:58:51.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an unauthenticated user to cause denial of service by uploading malicious files."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 8.0 anterior a la 18.6.6, la 18.7 anterior a la 18.7.4 y la 18.8 anterior a la 18.8.4 que, bajo ciertas condiciones, podría haber permitido a un usuario no autenticado causar denegación de servicio mediante la carga de archivos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "536DCE5F-60B9-4F67-A63C-C6C3FD29EEC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "18.6.6",
            "matchCriteriaId" : "E8F97391-D686-4732-A9DE-1F8FC39E1778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "EB4484C1-2D91-48A6-B396-4F16DC598828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.7.0",
            "versionEndExcluding" : "18.7.4",
            "matchCriteriaId" : "DA7B13F4-05B9-436E-A1DC-6C65DB7B44FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "BCEB62DB-0D85-4A21-99C4-6235CA97A795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.4",
            "matchCriteriaId" : "6D01D64A-0619-427D-B351-4101FC257674"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/587698",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link", "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/3517644",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22894",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2026-02-11T13:15:58.937",
      "lastModified" : "2026-02-12T19:40:11.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.5190 and later"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta ha sido reportada que afecta a File Station 6. Si un atacante remoto obtiene una cuenta de usuario, puede entonces explotar la vulnerabilidad para leer el contenido de archivos inesperados o datos del sistema.\n\nYa hemos corregido la vulnerabilidad en la siguiente versión:\nFile Station 5 5.5.6.5190 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@qnapsecurity.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@qnapsecurity.com.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.6.4691",
            "versionEndExcluding" : "5.5.6.5190",
            "matchCriteriaId" : "C6D67625-2A0F-408C-AEA4-C78A8AC2892E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/security-advisory/qsa-26-03",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0910",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-11T14:16:01.807",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wpForo Forum plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.13 via deserialization of untrusted input in the 'wpforo_display_array_data' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present."
      }, {
        "lang" : "es",
        "value" : "El plugin wpForo Forum para WordPress es vulnerable a la inyección de objetos PHP en todas las versiones hasta la 2.4.13, inclusive, a través de la deserialización de entrada no confiable en la función 'wpforo_display_array_data'. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, inyecten un objeto PHP. No se conoce ninguna cadena POP presente en el software vulnerable, lo que significa que esta vulnerabilidad no tiene impacto a menos que otro plugin o tema que contenga una cadena POP esté instalado en el sitio. Si una cadena POP está presente a través de un plugin o tema adicional instalado en el sistema objetivo, puede permitir al atacante realizar acciones como eliminar archivos arbitrarios, recuperar datos sensibles o ejecutar código, dependiendo de la cadena POP presente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpforo/tags/2.4.13/admin/tools-tabs/debug.php#L198",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?old=3416158&old_path=wpforo%2Ftags%2F2.4.13%2Fadmin%2Ftools-tabs%2Fdebug.php&new=3446993&new_path=wpforo%2Ftags%2F2.4.14%2Fadmin%2Ftools-tabs%2Fdebug.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c833223-c8c9-413f-9d72-6fb13101459b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1226",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2026-02-11T14:16:01.973",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted design content is processed through a TGML graphics file."
      }, {
        "lang" : "es",
        "value" : "CWE?94: Improper Control of Generation of Code existe una vulnerabilidad que podría causar la ejecución de código no confiable o no intencionado dentro de la aplicación cuando contenido de diseño manipulado maliciosamente es procesado a través de un archivo gráfico TGML."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-041-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-02.pdf",
        "source" : "cybersecurity@se.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1227",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2026-02-11T14:16:02.117",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or denial of service conditions when a local user uploads a specially crafted TGML graphics file to the EBO server from Workstation."
      }, {
        "lang" : "es",
        "value" : "CWE-611: Existe una vulnerabilidad de Restricción Inadecuada de Referencia a Entidad Externa XML que podría causar la divulgación no autorizada de archivos locales, la interacción dentro del sistema EBO o condiciones de denegación de servicio cuando un usuario local carga un archivo gráfico TGML especialmente diseñado al servidor EBO desde Workstation."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-041-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-02.pdf",
        "source" : "cybersecurity@se.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2337",
      "sourceIdentifier" : "64c5ae8f-7972-4697-86a0-7ada793ac795",
      "published" : "2026-02-11T14:16:02.390",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Plunet Plunet BusinessManager permite el secuestro de sesión, el robo de datos, acciones no autorizadas en nombre del usuario. Este problema afecta a Plunet BusinessManager: 10.15.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "64c5ae8f-7972-4697-86a0-7ada793ac795",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "64c5ae8f-7972-4697-86a0-7ada793ac795",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2026-2337",
        "source" : "64c5ae8f-7972-4697-86a0-7ada793ac795"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2248",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-02-11T15:16:17.433",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with root (UID 0) privileges. This results in full system compromise, allowing unauthorized access to modify system configuration, read sensitive data, or disrupt device operations"
      }, {
        "lang" : "es",
        "value" : "Los dispositivos METIS WIC (versiones &lt;= oscore 2.1.234-r18) exponen un shell basado en web en el endpoint /console que no requiere autenticación. Acceder a este endpoint permite a un atacante remoto ejecutar comandos arbitrarios del sistema operativo con privilegios de root (UID 0). Esto resulta en un compromiso total del sistema, permitiendo el acceso no autorizado para modificar la configuración del sistema, leer datos sensibles o interrumpir las operaciones del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cydome.io/vulnerability-advisory-cve-2026-2248-unauthenticated-remote-root-shell-in-metis-wic",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      }, {
        "url" : "https://www.metis.tech/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2249",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-02-11T15:16:17.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with 'daemon' privileges. This results in the compromise of the software, granting unauthorized access to modify configuration, read and alter sensitive data, or disrupt services."
      }, {
        "lang" : "es",
        "value" : "Dispositivos METIS DFS (versiones &lt;= oscore 2.1.234-r18) exponen un shell basado en web en el endpoint /console que no requiere autenticación. Acceder a este endpoint permite a un atacante remoto ejecutar comandos arbitrarios del sistema operativo con privilegios de 'daemon'. Esto resulta en el compromiso del software, otorgando acceso no autorizado para modificar la configuración, leer y alterar datos sensibles, o interrumpir servicios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cydome.io/vulnerability-advisory-cve-2026-2249-unauthenticated-rce-in-metis-data-fusion-server-dfs",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      }, {
        "url" : "https://www.metis.tech/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2250",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-02-11T15:16:17.760",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is configured with debug mode enabled, causing malformed requests to return verbose Django tracebacks that disclose backend source code, local file paths, and system configuration."
      }, {
        "lang" : "es",
        "value" : "El endpoint web /dbviewer/ en dispositivos METIS WIC está expuesto sin autenticación. Un atacante remoto puede acceder y exportar la base de datos SQLite de telemetría interna que contiene datos operativos sensibles. Además, la aplicación está configurada con el modo de depuración habilitado, lo que hace que las solicitudes malformadas devuelvan rastreos de pila detallados de Django que revelan el código fuente del backend, las rutas de archivos locales y la configuración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-215"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cydome.io/vulnerability-advisory-cve-2026-2250-unauthenticated-data-exfilteration-and-information-disclosure-in-metis-wic-wireless-intelligent-collector",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      }, {
        "url" : "https://www.metis.tech/",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2344",
      "sourceIdentifier" : "64c5ae8f-7972-4697-86a0-7ada793ac795",
      "published" : "2026-02-11T15:16:17.993",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Plunet Plunet BusinessManager permite que se realicen acciones no autorizadas en nombre de usuarios privilegiados. Este problema afecta a Plunet BusinessManager: 10.15.1"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "64c5ae8f-7972-4697-86a0-7ada793ac795",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "64c5ae8f-7972-4697-86a0-7ada793ac795",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2026-2344",
        "source" : "64c5ae8f-7972-4697-86a0-7ada793ac795"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2345",
      "sourceIdentifier" : "7004884b-51e2-48e8-b4a2-5ca29e80453e",
      "published" : "2026-02-11T15:16:18.160",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers that do not properly validate the origin of incoming messages. Specifically, an internal messaging bridge processes messages based solely on the presence of a fromWebsite property without verifying the event.origin attribute."
      }, {
        "lang" : "es",
        "value" : "La extensión de Chrome de Proctorio es una extensión de navegador utilizada para la supervisión en línea. La extensión contiene múltiples manejadores window.addEventListener('message', ...) que no validan correctamente el origen de los mensajes entrantes. Específicamente, un puente de mensajería interno procesa los mensajes basándose únicamente en la presencia de una propiedad fromWebsite sin verificar el atributo event.origin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "7004884b-51e2-48e8-b4a2-5ca29e80453e",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.6,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "7004884b-51e2-48e8-b4a2-5ca29e80453e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hckrt.com/hacktivity/46b61f36-b685-4667-aebf-82a67ad69ad6",
        "source" : "7004884b-51e2-48e8-b4a2-5ca29e80453e"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1837",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2026-02-11T16:16:04.697",
      "lastModified" : "2026-04-14T00:51:40.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.\n\nThis can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags)."
      }, {
        "lang" : "es",
        "value" : "Un archivo especialmente diseñado puede provocar que el decodificador de libjxl escriba datos de píxeles en memoria no asignada no inicializada. Poco después, datos de otra región no asignada no inicializada se copian a los datos de píxeles.\n\nEsto puede hacerse al solicitar una transformación de color de imágenes en escala de grises a otro espacio de color en escala de grises. Búferes asignados para 1 flotante por píxel se utilizan como si estuvieran asignados para 3 flotantes por píxel. Esto ocurre solo si se utiliza LCMS2 como motor CMS. Hay otro motor CMS disponible (seleccionado mediante indicadores de compilación)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-805"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.0",
            "versionEndIncluding" : "0.11.1",
            "matchCriteriaId" : "3D1B55EA-A475-47E9-9562-D77E7B519780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libjxl/libjxl/issues/4549",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/libjxl/libjxl/issues/4549",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25868",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-11T16:16:06.657",
      "lastModified" : "2026-02-26T20:30:30.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "disclosure@vulncheck.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the dir parameter. The application constructs $currentdir from user-controlled input and embeds it into an error message without output encoding, allowing an attacker to supply HTML/JavaScript that is reflected in the response. Successful exploitation can lead to execution of arbitrary script in a victim's browser in the context of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "MiniGal Nano versión 0.3.5 y anteriores contienen una vulnerabilidad de cross-site scripting (XSS) reflejada en index.php a través del parámetro dir. La aplicación construye $currentdir a partir de entrada controlada por el usuario y lo incrusta en un mensaje de error sin codificación de salida, permitiendo a un atacante suministrar HTML/JavaScript que se refleja en la respuesta. La explotación exitosa puede llevar a la ejecución de script arbitrario en el navegador de una víctima en el contexto de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rybber:minigal_nano:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.5",
            "matchCriteriaId" : "76CB8187-6273-4F08-BC77-51BEF4672372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/projects/minigalnano/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://web.archive.org/web/20180330004313/http://www.minigal.dk/minigal-nano.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/minigal-nano-reflected-xss-via-dir-parameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25869",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-11T16:16:06.813",
      "lastModified" : "2026-02-26T20:45:55.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "disclosure@vulncheck.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input to the photos directory and attempts to prevent traversal by removing dot-dot sequences, but this protection can be bypassed using crafted directory patterns. An attacker can exploit this behavior to cause the application to enumerate and display image files from unintended filesystem locations that are readable by the web server, resulting in unintended information disclosure."
      }, {
        "lang" : "es",
        "value" : "MiniGal Nano versiones 0.3.5 y anteriores contienen una vulnerabilidad de salto de ruta en index.php a través del parámetro dir. La aplicación añade la entrada controlada por el usuario al directorio de fotos e intenta prevenir el salto eliminando secuencias de punto-punto, pero esta protección puede ser eludida usando patrones de directorio manipulados. Un atacante puede explotar este comportamiento para hacer que la aplicación enumere y muestre archivos de imagen desde ubicaciones inesperadas del sistema de archivos que son legibles por el servidor web, resultando en una revelación de información no intencionada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rybber:minigal_nano:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.5",
            "matchCriteriaId" : "76CB8187-6273-4F08-BC77-51BEF4672372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/projects/minigalnano/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://web.archive.org/web/20180330004313/http://www.minigal.dk/minigal-nano.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/minigal-nano-path-traversal-via-dir-parameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24789",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-11T17:16:13.040",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication."
      }, {
        "lang" : "es",
        "value" : "Un punto final de API desprotegido permite a un atacante cambiar remotamente la contraseña del dispositivo sin proporcionar autenticación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-041-02.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-02",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.zlmcu.com/en/contact_us.htm",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25084",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-11T17:16:13.243",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs."
      }, {
        "lang" : "es",
        "value" : "La autenticación para ZLAN5143D puede ser eludida al acceder directamente a URLs internas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-041-02.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-02",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.zlmcu.com/en/contact_us.htm",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0228",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2026-02-11T18:16:07.720",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación de certificado incorrecta en PAN-OS permite a los usuarios conectar Agentes de Terminal Server en Windows a PAN-OS usando certificados caducados incluso si la configuración de PAN-OS normalmente no les permitiría hacerlo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2026-0228",
        "source" : "psirt@paloaltonetworks.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0229",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2026-02-11T18:16:07.897",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.\n\nCloud NGFW and Prisma Access® are not impacted by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio (DoS) en la función Advanced DNS Security (ADNS) del software PAN-OS® de Palo Alto Networks permite a un atacante no autenticado iniciar reinicios del sistema utilizando un paquete maliciosamente diseñado. Los intentos repetidos de iniciar un reinicio hacen que el cortafuegos entre en modo de mantenimiento.\n\nCloud NGFW y Prisma Access® no se ven afectados por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2026-0229",
        "source" : "psirt@paloaltonetworks.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2360",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-11T18:16:08.153",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is higher with PostgreSQL 14 or with instances upgraded from PostgreSQL 14 or a prior version. With PostgreSQL 15 and later, the creation permission on the public schema is revoked by default and this exploit can only be achieved if a superuser adds a new schema in her/his own search_path and grants the CREATE privilege on that schema to untrusted users, both actions being clearly discouraged by the PostgreSQL documentation. The problem is resolved in PostgreSQL Anonymizer 3.0.1 and further versions"
      }, {
        "lang" : "es",
        "value" : "PostgreSQL Anonymizer contiene una vulnerabilidad que permite a un usuario obtener privilegios de superusuario al crear un operador personalizado en el esquema público y colocar código malicioso en ese operador. Este operador será ejecutado posteriormente con privilegios de superusuario cuando la extensión sea creada. El riesgo es mayor con PostgreSQL 14 o con instancias actualizadas desde PostgreSQL 14 o una versión anterior. Con PostgreSQL 15 y posteriores, el permiso de creación en el esquema público es revocado por defecto y este exploit solo puede lograrse si un superusuario añade un nuevo esquema en su propio search_path y otorga el privilegio CREATE en ese esquema a usuarios no confiables, ambas acciones siendo claramente desaconsejadas por la documentación de PostgreSQL. El problema está resuelto en PostgreSQL Anonymizer 3.0.1 y versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/dalibo/postgresql_anonymizer/-/blob/latest/NEWS.md",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
      }, {
        "url" : "https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/616",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
      }, {
        "url" : "https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2361",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-11T18:16:08.313",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary view based on a function containing malicious code. When the anon.get_tablesample_ratio function is then called, the malicious code is executed with superuser privileges. This privilege elevation can be exploited by users having the CREATE privilege in PostgreSQL 15 and later. The risk is higher with PostgreSQL 14 or with instances upgraded from PostgreSQL 14 or a prior version because the creation permission on the public schema is granted by default. The problem is resolved in PostgreSQL Anonymizer 3.0.1 and further versions"
      }, {
        "lang" : "es",
        "value" : "PostgreSQL Anonymizer contiene una vulnerabilidad que permite a un usuario obtener privilegios de superusuario creando una vista temporal basada en una función que contiene código malicioso. Cuando la función anon.get_tablesample_ratio es luego llamada, el código malicioso es ejecutado con privilegios de superusuario. Esta elevación de privilegios puede ser explotada por usuarios que tienen el privilegio CREATE en PostgreSQL 15 y posteriores. El riesgo es mayor con PostgreSQL 14 o con instancias actualizadas desde PostgreSQL 14 o una versión anterior porque el permiso de creación en el esquema público se concede por defecto. El problema está resuelto en PostgreSQL Anonymizer 3.0.1 y versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/dalibo/postgresql_anonymizer/-/blob/latest/NEWS.md",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
      }, {
        "url" : "https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/617",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2313",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:51.220",
      "lastModified" : "2026-02-13T17:27:42.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en CSS en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto explotar potencialmente la corrupción de la pila a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/467297219",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2314",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:51.427",
      "lastModified" : "2026-02-13T17:27:49.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de montón en Códecs en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto potencialmente explotar corrupción de montón a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/478560268",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2315",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:51.617",
      "lastModified" : "2026-02-13T17:27:56.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en WebGPU en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto potencialmente realizar acceso a memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/479242793",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2316",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:51.717",
      "lastModified" : "2026-02-13T17:28:37.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Aplicación de políticas insuficiente en Marcos en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto realizar suplantación de interfaz de usuario a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/422531206",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2317",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:51.817",
      "lastModified" : "2026-02-13T17:28:48.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en Animación en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto filtrar datos de origen cruzado a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/464173573",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2318",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:51.920",
      "lastModified" : "2026-02-13T17:29:01.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en PictureInPicture en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto que convenció a un usuario de realizar gestos específicos de la interfaz de usuario, realizar suplantación de interfaz de usuario a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/363930141",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2319",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:52.027",
      "lastModified" : "2026-02-13T17:29:10.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to potentially exploit object corruption via a malicious file. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en DevTools en Google Chrome anterior a 145.0.7632.45 permitía a un atacante remoto que convencía a un usuario a realizar gestos específicos en la interfaz de usuario e instalar una extensión maliciosa, potencialmente explotar la corrupción de objetos mediante un archivo malicioso. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/40071155",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2320",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:52.160",
      "lastModified" : "2026-02-13T14:52:29.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en la entrada de Archivo en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto que convenció a un usuario de realizar gestos específicos de la interfaz de usuario llevar a cabo suplantación de identidad de la interfaz de usuario a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/435684924",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2321",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:52.273",
      "lastModified" : "2026-02-25T19:43:23.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en Ozone en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto que convenció a un usuario para realizar gestos específicos de la interfaz de usuario, potencialmente explotar la corrupción de pila mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/461877477",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2322",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:52.400",
      "lastModified" : "2026-02-13T14:51:37.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en la entrada de archivo en Google Chrome anterior a 145.0.7632.45 permitió a un atacante remoto que convenció a un usuario para realizar gestos específicos de la interfaz de usuario realizar suplantación de interfaz de usuario a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/470928605",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2323",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-11T19:15:52.497",
      "lastModified" : "2026-02-13T14:51:29.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en Descargas en Google Chrome anterior a 145.0.7632.45 permitía a un atacante remoto realizar suplantación de interfaz de usuario mediante una página HTML diseñada. (Gravedad de seguridad de Chromium: Baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.45",
            "matchCriteriaId" : "51821EAE-B89B-44D2-80B6-F868FC2B41B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/467442136",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25062",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:18.607",
      "lastModified" : "2026-02-20T18:10:18.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the value of attachments[].key from the imported JSON is passed directly to path.join(rootPath, node.key) and then read using fs.readFile without validation. By embedding path traversal sequences such as ../ or absolute paths, an attacker can read arbitrary files on the server and import them as attachments. This vulnerability is fixed in 1.4.0."
      }, {
        "lang" : "es",
        "value" : "Outline es un servicio que permite la documentación colaborativa. Antes de 1.4.0, durante el proceso de importación de JSON, el valor de attachments[].key del JSON importado se pasa directamente a path.join(rootPath, node.key) y luego se lee usando fs.readFile sin validación. Al incrustar secuencias de salto de ruta como ../ o rutas absolutas, un atacante puede leer archivos arbitrarios en el servidor e importarlos como adjuntos. Esta vulnerabilidad se corrigió en 1.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getoutline:outline:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "A1297792-2032-4407-B790-09BFBDF42500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/outline/outline/releases/tag/v1.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/outline/outline/security/advisories/GHSA-7r4f-3wjv-83xf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25633",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:18.910",
      "lastModified" : "2026-02-18T19:36:44.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permission to view assets are able are able to download them and view their metadata. Logged-out users and users without permission to access the control panel are unable to take advantage of this. This has been fixed in 5.73.6 and 6.2.5."
      }, {
        "lang" : "es",
        "value" : "Statamic es un CMS impulsado por Laravel + Git diseñado para construir sitios web. Antes de las versiones 5.73.6 y 6.2.5, los usuarios sin permiso para ver activos pueden descargarlos y ver sus metadatos. Los usuarios que no han iniciado sesión y los usuarios sin permiso para acceder al panel de control no pueden aprovecharse de esto. Esto ha sido corregido en las versiones 5.73.6 y 6.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.6",
            "matchCriteriaId" : "88DCC3F4-B944-450D-BE1D-34F2D8ACBE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.2.5",
            "matchCriteriaId" : "4C94BE13-7888-4AB4-ABF0-CCA533C344E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/commit/5a6f47246edf3a0c453727ffecbfa14333a6bc8a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v5.73.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.2.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-gwmx-9gcj-332h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25759",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:19.097",
      "lastModified" : "2026-02-18T19:37:29.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). From 6.0.0 to before 6.2.3, a stored XSS vulnerability in content titles allows authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. Malicious user must have an account with control panel access and content creation permissions. This vulnerability can be exploited to allow super admin accounts to be created. This has been fixed in 6.2.3."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. Desde la 6.0.0 hasta antes de la 6.2.3, una vulnerabilidad de XSS almacenado en los títulos de contenido permite a usuarios autenticados con permisos de creación de contenido inyectar JavaScript malicioso que se ejecuta cuando es visto por usuarios con mayores privilegios. El usuario malicioso debe tener una cuenta con acceso al panel de control y permisos de creación de contenido. Esta vulnerabilidad puede ser explotada para permitir la creación de cuentas de superadministrador. Esto ha sido corregido en la 6.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.2.3",
            "matchCriteriaId" : "08046306-6614-476F-A450-B90A03160915"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/commit/6ed4f65f3387686d6dbd816e9b4f18a8d9736ff6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-ff9r-ww9c-43x8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25924",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:19.283",
      "lastModified" : "2026-02-13T21:30:01.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulnerability in Kanboard allows an authenticated administrator to achieve full Remote Code Execution (RCE). Although the application correctly hides the plugin installation interface when the PLUGIN_INSTALLER configuration is set to false, the underlying backend endpoint fails to verify this security setting. An attacker can exploit this oversight to force the server to download and install a malicious plugin, leading to arbitrary code execution. This vulnerability is fixed in 1.2.50."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos centrado en la metodología Kanban. Antes de la 1.2.50, una vulnerabilidad de omisión de control de seguridad en Kanboard permite a un administrador autenticado lograr la ejecución remota de código (RCE) completa. Aunque la aplicación oculta correctamente la interfaz de instalación de plugins cuando la configuración PLUGIN_INSTALLER está establecida en falso, el endpoint de backend subyacente no verifica esta configuración de seguridad. Un atacante puede explotar este descuido para forzar al servidor a descargar e instalar un plugin malicioso, lo que lleva a la ejecución de código arbitrario. Esta vulnerabilidad está corregida en la 1.2.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.50",
            "matchCriteriaId" : "C1B88FC0-3CFD-4A8C-A9E4-9AAF4F1D51EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/b9ada89b1a64034612fc4262b88c42458c0d6ee4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-grch-p7vf-vc4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25935",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:20.523",
      "lastModified" : "2026-02-20T20:17:54.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vikunja is a todo-app to organize your life. Prior to 1.1.0, TaskGlanceTooltip.vue temporarily creates a div and sets the innerHtml to the description. Since there is no escaping on either the server or client side, a malicious user can share a project, create a malicious task, and cause an XSS on hover. This vulnerability is fixed in 1.1.0."
      }, {
        "lang" : "es",
        "value" : "Vikunja es una aplicación de tareas para organizar tu vida. Antes de la 1.1.0, TaskGlanceTooltip.vue crea temporalmente un div y establece el innerHtml a la descripción. Dado que no hay escape ni en el lado del servidor ni en el del cliente, un usuario malicioso puede compartir un proyecto, crear una tarea maliciosa y causar un XSS al pasar el ratón por encima. Esta vulnerabilidad está corregida en la 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "66BE76CA-1488-49F5-AE91-E6A66BA8E6BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vikunja/vikunja/commit/dd0b82f00a8c9ded1c19a1e643a197c514be6d37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/go-vikunja/vikunja/releases/tag/v1.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m4g2-2q66-vc9v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vikunja.io/changelog/vikunja-v1.1.0-was-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25990",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:20.670",
      "lastModified" : "2026-04-30T21:16:30.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1."
      }, {
        "lang" : "es",
        "value" : "Pillow es una librería de procesamiento de imágenes de Python. Desde la versión 10.3.0 hasta antes de la 12.1.1, una escritura fuera de límites puede ser activada al cargar una imagen PSD especialmente manipulada. Esta vulnerabilidad está corregida en la versión 12.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "12.1.1",
            "matchCriteriaId" : "1EECB9F0-00C4-414F-9066-02BAF05067C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/12/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25994",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:20.813",
      "lastModified" : "2026-02-19T19:23:29.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames."
      }, {
        "lang" : "es",
        "value" : "PJSIP es una librería de comunicación multimedia de código abierto y gratuita escrita en C. En 2.16 y versiones anteriores, existe una vulnerabilidad de desbordamiento de búfer en la sesión ICE de PJNATH al procesar credenciales con nombres de usuario excesivamente largos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16",
            "matchCriteriaId" : "3290D5C6-704B-4F73-A5DB-2DB205F3CDBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/063b3a155f163cc5a9a1df2c56b6720fd3a0dbb0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-j29p-pvh2-pvqp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25999",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:20.963",
      "lastModified" : "2026-02-26T23:25:10.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper access control vulnerability that allows unauthorized users to trigger a reset or deletion of metadata for any tenant. By sending a crafted request to the /resetMemoryCache endpoint, an attacker can clear cached configurations, environments, and cluster data. This vulnerability is fixed in 2.10.2."
      }, {
        "lang" : "es",
        "value" : "Klaw es una herramienta/portal de autoservicio para la gestión/gobernanza de temas de Apache Kafka. Antes de la versión 2.10.2, existe una vulnerabilidad de control de acceso inadecuado que permite a usuarios no autorizados activar un restablecimiento o eliminación de metadatos para cualquier inquilino. Al enviar una solicitud manipulada al endpoint /resetMemoryCache, un atacante puede borrar configuraciones, entornos y datos de clúster almacenados en caché. Esta vulnerabilidad se corrigió en la versión 2.10.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aiven:klaw:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.2",
            "matchCriteriaId" : "80AFF9B7-33B4-4D2B-A37A-0E0EBD9F1584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Aiven-Open/klaw/commit/617ed96b1db111ed498d89132321bf39f486e3a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Aiven-Open/klaw/releases/tag/v2.10.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Aiven-Open/klaw/security/advisories/GHSA-rp26-qv9w-xr5q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26010",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:21.117",
      "lastModified" : "2026-02-13T21:34:48.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8."
      }, {
        "lang" : "es",
        "value" : "OpenMetadata es una plataforma de metadatos unificada. Anterior a la 1.11.8, las llamadas emitidas por la UI contra /api/v1/ingestionPipelines filtraban JWTs utilizados por ingestion-bot para ciertos servicios (Glue / Redshift / Postgres). Cualquier usuario de solo lectura puede obtener acceso a una cuenta altamente privilegiada, típicamente la que tiene el Rol de Bot de Ingestión. Esto permite cambios destructivos en las instancias de OpenMetadata y una posible fuga de datos (por ejemplo, datos de muestra o metadatos de servicio que no estarían disponibles según los roles/políticas). Esta vulnerabilidad está corregida en la versión 1.11.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.8",
            "matchCriteriaId" : "FED5927F-D11C-4CD5-9571-17B671A160A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26014",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T21:16:21.257",
      "lastModified" : "2026-02-25T17:40:28.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a \"forbidden attack\". Upgrade to v3.0.11, v3.1.1, or later."
      }, {
        "lang" : "es",
        "value" : "Pion DTLS es una implementación en Go de Datagram Transport Layer Security. Las versiones v1.0.0 a v3.0.10 y 3.1.0 de Pion DTLS usan generación de nonce aleatorio con cifrados AES GCM, lo que facilita a los atacantes remotos obtener la clave de autenticación y falsificar datos aprovechando la reutilización de un nonce en una sesión y un 'ataque prohibido'. Actualice a v3.0.11, v3.1.1, o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pion:dtls:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "637DA08C-B336-461A-88BE-F52B88D93F00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pion/dtls/commit/61762dee8217991882c5eb79856b9e7a73ee349f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pion/dtls/commit/90e241cfec2985715efdd3d005972847462a67d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pion/dtls/pull/796",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/pion/dtls/releases/tag/v3.0.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pion/dtls/releases/tag/v3.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pion/dtls/security/advisories/GHSA-9f3f-wv7r-qc8r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26157",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-11T21:16:21.400",
      "lastModified" : "2026-05-05T21:16:21.700",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en BusyBox. La sanitización incompleta de rutas en sus utilidades de extracción de archivos permite a un atacante crear archivos maliciosos que, al ser extraídos y bajo condiciones específicas, pueden escribir en archivos fuera del directorio previsto. Esto puede llevar a una sobrescritura arbitraria de archivos, lo que podría permitir la ejecución de código mediante la modificación de archivos de sistema sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:13831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26157",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2439039",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.busybox.net/busybox/commit/archival?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26158",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-11T21:16:21.607",
      "lastModified" : "2026-05-05T21:16:21.820",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unvalidated hardlink or symlink entries. If the tar archive is extracted with elevated privileges, this flaw can lead to privilege escalation, enabling an attacker to gain unauthorized access to critical system files."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en BusyBox. Esta vulnerabilidad permite a un atacante modificar archivos fuera del directorio de extracción previsto al crear un archivo tar malicioso que contiene entradas de hardlink o symlink no validadas. Si el archivo tar se extrae con privilegios elevados, esta falla puede conducir a una escalada de privilegios, permitiendo a un atacante obtener acceso no autorizado a archivos críticos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:13831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26158",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2439040",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.busybox.net/busybox/commit/archival?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26012",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T22:15:51.703",
      "lastModified" : "2026-02-13T21:41:01.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphers/organization-details is accessible to any organization member and internally uses Cipher::find_by_org to retrieve all ciphers. These ciphers are returned with CipherSyncType::Organization without enforcing collection-level access control. This vulnerability is fixed in 1.35.3."
      }, {
        "lang" : "es",
        "value" : "vaultwarden es un servidor compatible con Bitwarden no oficial escrito en Rust, anteriormente conocido como bitwarden_rs. Antes de 1.35.3, un miembro regular de la organización puede recuperar todos los cifrados dentro de una organización, independientemente de los permisos de colección. El endpoint /ciphers/organization-details es accesible para cualquier miembro de la organización e internamente utiliza Cipher::find_by_org para recuperar todos los cifrados. Estos cifrados son devueltos con CipherSyncType::Organization sin aplicar el control de acceso a nivel de colección. Esta vulnerabilidad está corregida en 1.35.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dani-garcia:vaultwarden:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.3",
            "matchCriteriaId" : "79A968D5-FAC8-49BF-8FA6-8F54218D1875"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h265-g7rm-h337",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26019",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T22:15:51.910",
      "lastModified" : "2026-02-19T19:25:25.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langchain/community is a web crawler that recursively follows links from a starting URL. Its preventOutside option (enabled by default) is intended to restrict crawling to the same site as the base URL. The implementation used String.startsWith() to compare URLs, which does not perform semantic URL validation. An attacker who controls content on a crawled page could include links to domains that share a string prefix with the target, causing the crawler to follow links to attacker-controlled or internal infrastructure. Additionally, the crawler performed no validation against private or reserved IP addresses. A crawled page could include links targeting cloud metadata services, localhost, or RFC 1918 addresses, and the crawler would fetch them without restriction. This vulnerability is fixed in 1.1.14."
      }, {
        "lang" : "es",
        "value" : "LangChain es un framework para construir aplicaciones impulsadas por LLM. Antes de la versión 1.1.14, la clase RecursiveUrlLoader en @langchain/community es un rastreador web que sigue enlaces recursivamente desde una URL inicial. Su opción preventOutside (habilitada por defecto) está destinada a restringir el rastreo al mismo sitio que la URL base. La implementación utilizaba String.startsWith() para comparar URLs, lo que no realiza una validación semántica de URL. Un atacante que controla contenido en una página rastreada podría incluir enlaces a dominios que comparten un prefijo de cadena con el objetivo, haciendo que el rastreador siga enlaces a infraestructura controlada por el atacante o interna. Además, el rastreador no realizaba ninguna validación contra direcciones IP privadas o reservadas. Una página rastreada podría incluir enlaces dirigidos a servicios de metadatos en la nube, localhost o direcciones RFC 1918, y el rastreador los obtendría sin restricción. Esta vulnerabilidad está corregida en la versión 1.1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langchain:langchain_community:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.14",
            "matchCriteriaId" : "44439283-CF4F-44F1-B029-8A83E327DC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langchainjs/commit/d5e3db0d01ab321ec70a875805b2f74aefdadf9d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/pull/9990",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-gf3v-fwqg-4vh7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26021",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T22:15:52.077",
      "lastModified" : "2026-02-13T21:43:27.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "set-in provides the set value of nested associative structure given array of keys. A prototype pollution vulnerability exists in the the npm package set-in (>=2.0.1, < 2.0.5). Despite a previous fix that attempted to mitigate prototype pollution by checking whether user input contained a forbidden key, it is still possible to pollute Object.prototype via a crafted input using Array.prototype. This has been fixed in version 2.0.5."
      }, {
        "lang" : "es",
        "value" : "set-in proporciona el valor establecido de una estructura asociativa anidada dado un array de claves. Una vulnerabilidad de contaminación de prototipos existe en el paquete npm set-in (&gt;=2.0.1, &lt; 2.0.5). A pesar de una corrección anterior que intentó mitigar la contaminación de prototipos al verificar si la entrada del usuario contenía una clave prohibida, todavía es posible contaminar Object.prototype a través de una entrada manipulada usando Array.prototype. Esto ha sido corregido en la versión 2.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:set-in_project:set-in:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.1",
            "versionEndExcluding" : "2.0.5",
            "matchCriteriaId" : "67272E90-9D93-4A5B-9060-3D84BA6E4A5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ahdinosaur/set-in/commit/b8e1dabfdbd35c8d604b6324e01d03f280256c3d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ahdinosaur/set-in/security/advisories/GHSA-2c4m-g7rx-63q7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26023",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T22:15:52.233",
      "lastModified" : "2026-02-13T15:04:10.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been found in the web application chat frontend when using echarts. User or llm inputs containing echarts containing a specific javascript payload will be executed. This vulnerability is fixed in 1.13.0."
      }, {
        "lang" : "es",
        "value" : "Dify es una plataforma de desarrollo de aplicaciones LLM de código abierto. Antes de la versión 1.13.0, se ha encontrado una vulnerabilidad de cross-site scripting en el frontend de chat de la aplicación web al usar echarts. Las entradas de usuario o de LLM que contengan echarts con una carga útil de javascript específica se ejecutarán. Esta vulnerabilidad está corregida en la versión 1.13.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dify:dify:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.4",
            "matchCriteriaId" : "DB2DB277-79E5-4440-A74A-F518A9322D43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langgenius/dify/commit/378a1d7d08bd0ac5c75eaadc075a0f35211fcb8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langgenius/dify/releases/tag/1.13.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/langgenius/dify/security/advisories/GHSA-qqjx-5h5w-x5vj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26029",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T22:15:52.373",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability exists in sf-mcp-server due to unsafe use of child_process.exec when constructing Salesforce CLI commands with user-controlled input. Successful exploitation allows attackers to execute arbitrary shell commands with the privileges of the MCP server process."
      }, {
        "lang" : "es",
        "value" : "sf-mcp-server es una implementación del servidor Salesforce MCP para Claude para Escritorio. Una vulnerabilidad de inyección de comandos existe en sf-mcp-server debido al uso inseguro de child_process.exec al construir comandos de Salesforce CLI con entrada controlada por el usuario. La explotación exitosa permite a los atacantes ejecutar comandos de shell arbitrarios con los privilegios del proceso del servidor MCP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akutishevsky/sf-mcp-server/commit/99fba0171b8c22b5ee3c0405053ccfd2910a066d",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/akutishevsky/sf-mcp-server/security/advisories/GHSA-h4w9-g9c5-vfwq",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/akutishevsky/sf-mcp-server/security/advisories/GHSA-h4w9-g9c5-vfwq",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26031",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-11T22:15:52.540",
      "lastModified" : "2026-02-12T17:11:21.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unauthorised users were able to access the full list of enrolled students (by email) in batches. This vulnerability is fixed in 2.44.0."
      }, {
        "lang" : "es",
        "value" : "Frappe Learning Management System (LMS) es un sistema de aprendizaje que ayuda a los usuarios a estructurar su contenido. Previo a la versión 2.44.0, se identificó un problema de seguridad en Frappe Learning, donde usuarios no autorizados pudieron acceder a la lista completa de estudiantes matriculados (por correo electrónico) en lotes. Esta vulnerabilidad se corrigió en la versión 2.44.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.44.0",
            "matchCriteriaId" : "9F019743-47B3-4552-BE77-AFD92A153FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/lms/releases/tag/v2.44.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/frappe/lms/security/advisories/GHSA-3gw9-gwjm-vcq5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1669",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2026-02-11T23:16:03.750",
      "lastModified" : "2026-02-26T23:23:59.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references."
      }, {
        "lang" : "es",
        "value" : "Lectura arbitraria de archivos en el mecanismo de carga de modelos (integración HDF5) en las versiones de Keras 3.0.0 a 3.13.1 en todas las plataformas compatibles permite a un atacante remoto leer archivos locales y divulgar información sensible a través de un archivo de modelo .keras manipulado que utiliza referencias de conjuntos de datos externos de HDF5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keras:keras:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.13.1",
            "matchCriteriaId" : "F9A0900F-16FA-498D-B7BA-34BC78CA98F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/google/security-research/security/advisories",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20601",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:03.907",
      "lastModified" : "2026-03-04T19:16:18.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user permission."
      }, {
        "lang" : "es",
        "value" : "Un problema de permisos se abordó con restricciones adicionales. Este problema está solucionado en macOS Tahoe 26.3. Una app podría monitorear las pulsaciones de teclas sin el permiso del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20602",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.003",
      "lastModified" : "2026-04-02T19:21:08.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to cause a denial-of-service."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con un manejo mejorado de las cachés. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Una aplicación podría causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20603",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.110",
      "lastModified" : "2026-02-18T15:18:41.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An app with root privileges may be able to access private information."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó con una mejora en la ocultación de información sensible. Este problema se solucionó en macOS Tahoe 26.3. Una aplicación con privilegios de root podría acceder a información privada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20605",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.210",
      "lastModified" : "2026-04-02T19:21:08.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to crash a system process."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión de memoria mejorada. Este problema se corrigió en macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Una aplicación podría bloquear un proceso del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20606",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.310",
      "lastModified" : "2026-04-02T19:21:08.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to bypass certain Privacy preferences."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó al eliminar el código vulnerable. Este problema está solucionado en macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, iOS 26.3 y iPadOS 26.3. Una aplicación podría eludir ciertas preferencias de Privacidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20608",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.407",
      "lastModified" : "2026-04-02T19:21:09.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó mediante una mejor gestión de estado. Este problema está solucionado en macOS Tahoe 26.3, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3, Safari 26.3. El procesamiento de contenido web creado con fines maliciosos puede provocar un cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20609",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.510",
      "lastModified" : "2026-04-02T19:21:09.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión de memoria mejorada. Este problema se solucionó en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Procesar un archivo creado con fines maliciosos puede provocar una denegación de servicio o potencialmente revelar el contenido de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20610",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.643",
      "lastModified" : "2026-02-13T15:45:52.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó con un manejo mejorado de los enlaces simbólicos. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación podría obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20611",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.747",
      "lastModified" : "2026-04-02T19:21:09.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de acceso fuera de límites con una comprobación de límites mejorada. Este problema se corrigió en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. El procesamiento de un archivo multimedia creado maliciosamente puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-173/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20612",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.857",
      "lastModified" : "2026-04-02T19:21:09.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de privacidad con comprobaciones mejoradas. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20614",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:04.957",
      "lastModified" : "2026-04-02T19:21:10.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de manejo de rutas con validación mejorada. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Una app podría obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20615",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.060",
      "lastModified" : "2026-04-02T19:21:10.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de manejo de rutas con validación mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3. Una aplicación podría obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20616",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.160",
      "lastModified" : "2026-04-02T19:21:10.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. Processing a maliciously crafted USD file may lead to unexpected app termination."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de escritura fuera de límites con una comprobación de límites mejorada. Este problema se corrigió en iOS 18.7.5 y iPadOS 18.7.5, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3. El procesamiento de un archivo USD creado con fines maliciosos puede provocar la terminación inesperada de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-176/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20617",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.263",
      "lastModified" : "2026-04-02T19:21:10.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó una condición de carrera con una gestión de estado mejorada. Este problema está solucionado en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20618",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.367",
      "lastModified" : "2026-02-18T16:22:30.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema con un manejo mejorado de archivos temporales. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20619",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.463",
      "lastModified" : "2026-02-13T19:45:07.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Se solucionó un problema de registro con una supresión de datos mejorada. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20620",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.577",
      "lastModified" : "2026-04-02T19:21:11.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An attacker may be able to cause unexpected system termination or read kernel memory."
      }, {
        "lang" : "es",
        "value" : "Un problema de lectura fuera de límites se abordó con una validación de entrada mejorada. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Un atacante podría causar una terminación inesperada del sistema o leer memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20621",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.683",
      "lastModified" : "2026-04-02T19:21:11.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to cause unexpected system termination or corrupt kernel memory."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con un manejo de memoria mejorado. Este problema se corrigió en macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría causar una terminación inesperada del sistema o corromper la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20623",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.787",
      "lastModified" : "2026-02-13T19:44:50.387",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data."
      }, {
        "lang" : "es",
        "value" : "Un problema de permisos fue abordado al eliminar el código vulnerable. Este problema está corregido en macOS Tahoe 26.3. Una aplicación podría acceder a datos de usuario protegidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20624",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.880",
      "lastModified" : "2026-04-02T19:21:11.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección se abordó con una validación mejorada. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Una app podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20625",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:05.977",
      "lastModified" : "2026-04-02T19:21:12.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Un problema de análisis en el manejo de rutas de directorio se abordó con una validación de rutas mejorada. Este problema está solucionado en macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20626",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.083",
      "lastModified" : "2026-04-02T19:21:12.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó con comprobaciones mejoradas. Este problema se solucionó en macOS Sequoia 15.7.4, iOS 26.3 y iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Una aplicación maliciosa podría obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20627",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.187",
      "lastModified" : "2026-04-02T19:21:12.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Existía un problema en el manejo de las variables de entorno. Este problema se abordó con una validación mejorada. Este problema está solucionado en watchOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20628",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.287",
      "lastModified" : "2026-04-02T19:21:12.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox."
      }, {
        "lang" : "es",
        "value" : "Un problema de permisos fue abordado con restricciones adicionales. Este problema está solucionado en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría ser capaz de escapar de su sandbox."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20629",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.417",
      "lastModified" : "2026-02-17T16:20:27.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de privacidad con un manejo mejorado de los archivos temporales. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20630",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.510",
      "lastModified" : "2026-02-12T22:04:44.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de permisos con restricciones adicionales. Este problema está solucionado en macOS Tahoe 26.3. Una app podría acceder a datos de usuario protegidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-277"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20634",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.610",
      "lastModified" : "2026-04-02T19:21:13.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión de memoria mejorada. Este problema se solucionó en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Procesar una imagen manipulada maliciosamente puede resultar en la divulgación de la memoria del proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20635",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.723",
      "lastModified" : "2026-04-02T19:21:13.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión de memoria mejorada. Este problema se solucionó en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3, Safari 26.3. El procesamiento de contenido web creado con fines maliciosos puede provocar un cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20636",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.820",
      "lastModified" : "2026-04-02T19:21:14.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión de memoria mejorada. Este problema se corrigió en iOS 26.3 y iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. El procesamiento de contenido web creado con fines maliciosos puede provocar un cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20638",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:06.923",
      "lastModified" : "2026-02-13T14:48:06.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying information leaked to the extensions."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con comprobaciones mejoradas. Este problema está solucionado en iOS 26.3 y iPadOS 26.3. Un usuario con las extensiones de la aplicación Live Caller ID desactivadas podría haber tenido información de identificación filtrada a las extensiones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20640",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.023",
      "lastModified" : "2026-02-17T13:30:27.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to iPhone may be able to take and view screenshots of sensitive data from the iPhone during iPhone Mirroring with Mac."
      }, {
        "lang" : "es",
        "value" : "Un problema de interfaz de usuario inconsistente se abordó con una gestión de estado mejorada. Este problema se corrigió en iOS 26.3 y iPadOS 26.3. Un atacante con acceso físico al iPhone podría tomar y ver capturas de pantalla de datos sensibles del iPhone durante la duplicación de iPhone con Mac."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20641",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.123",
      "lastModified" : "2026-04-02T19:21:15.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to identify what other apps a user has installed."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de privacidad con comprobaciones mejoradas. Este problema está solucionado en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría identificar qué otras aplicaciones tiene instaladas un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20642",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.227",
      "lastModified" : "2026-02-18T15:18:42.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access photos from the lock screen."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de validación de entrada. Este problema está corregido en iOS 26.3 y iPadOS 26.3. Una persona con acceso físico a un dispositivo iOS podría acceder a fotos desde la pantalla de bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20644",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.327",
      "lastModified" : "2026-04-02T19:21:16.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión de memoria mejorada. Este problema se solucionó en macOS Tahoe 26.3, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3, Safari 26.3. El procesamiento de contenido web creado maliciosamente puede provocar un cierre inesperado del proceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20645",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.430",
      "lastModified" : "2026-04-02T19:21:16.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Un problema de interfaz de usuario inconsistente se abordó con una gestión de estado mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, iOS 18.7.5 y iPadOS 18.7.5. Un atacante con acceso físico a un dispositivo bloqueado podría ver información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20646",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.530",
      "lastModified" : "2026-02-13T20:17:40.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location information."
      }, {
        "lang" : "es",
        "value" : "Un problema de registro fue abordado con una ocultación de datos mejorada. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación maliciosa podría leer información de ubicación sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20647",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.630",
      "lastModified" : "2026-02-13T14:47:31.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó con protección de datos mejorada. Este problema se corrige en macOS Tahoe 26.3. Una app podría acceder a datos de usuario sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20648",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.730",
      "lastModified" : "2026-02-13T14:47:19.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de privacidad al mover datos sensibles a una ubicación protegida. Este problema se corrigió en macOS Tahoe 26.3. Una aplicación maliciosa podría acceder a las notificaciones de otros dispositivos iCloud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20649",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.823",
      "lastModified" : "2026-04-02T19:21:17.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de registro con una mejora en la redacción de datos. Este problema se solucionó en watchOS 26.3, iOS 26.3 y iPadOS 26.3, tvOS 26.3, macOS Tahoe 26.3. Un usuario podría ver información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20650",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:07.927",
      "lastModified" : "2026-04-02T19:21:17.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets."
      }, {
        "lang" : "es",
        "value" : "Un problema de denegación de servicio se abordó con validación mejorada. Este problema se corrigió en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Un atacante en una posición de red privilegiada podría realizar un ataque de denegación de servicio utilizando paquetes Bluetooth manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20652",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.033",
      "lastModified" : "2026-04-02T19:21:17.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con un manejo de memoria mejorado. Este problema está solucionado en macOS Tahoe 26.3, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3, Safari 26.3. Un atacante remoto podría causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20653",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.130",
      "lastModified" : "2026-04-02T19:21:18.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Un problema de análisis en el manejo de rutas de directorio se abordó con una validación de rutas mejorada. Este problema está solucionado en macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20654",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.233",
      "lastModified" : "2026-04-02T19:21:18.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una gestión mejorada de la memoria. Este problema se corrigió en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Una aplicación podría causar una terminación inesperada del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20655",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.330",
      "lastModified" : "2026-04-02T19:21:18.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de autorización con una gestión de estado mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, iOS 18.7.5 y iPadOS 18.7.5. Un atacante con acceso físico a un dispositivo bloqueado podría ver información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20656",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.427",
      "lastModified" : "2026-04-02T19:21:18.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history."
      }, {
        "lang" : "es",
        "value" : "Un problema de lógica se abordó con validación mejorada. Este problema se corrigió en iOS 18.7.5 y iPadOS 18.7.5, Safari 26.3, macOS Tahoe 26.3. Una aplicación podría acceder al historial de Safari de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20658",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.530",
      "lastModified" : "2026-02-25T19:43:20.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A package validation issue was addressed by blocking the vulnerable package. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Un problema de validación de paquetes fue abordado al bloquear el paquete vulnerable. Este problema está corregido en macOS Tahoe 26.3. Una aplicación podría obtener privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20660",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.620",
      "lastModified" : "2026-04-02T19:21:19.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A remote user may be able to write arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de manejo de rutas con lógica mejorada. Este problema está solucionado en macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3, Safari 26.3. Un usuario remoto podría escribir archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126795",
        "source" : "product-security@apple.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20661",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.727",
      "lastModified" : "2026-04-02T19:21:19.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de autorización con una gestión de estado mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, iOS 18.7.5 y iPadOS 18.7.5. Un atacante con acceso físico a un dispositivo bloqueado podría ver información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20662",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.823",
      "lastModified" : "2026-02-13T18:16:19.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical access to a locked device may be able to view sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de autorización con una gestión de estado mejorada. Este problema está corregido en macOS Sequoia 15.7.4, macOS Tahoe 26.3. Un atacante con acceso físico a un dispositivo bloqueado podría ver información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "3CC47CB1-E0E4-4AC2-A81A-BFF83FAE9650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20663",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:08.923",
      "lastModified" : "2026-04-02T19:21:19.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was resolved by sanitizing logging. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to enumerate a user's installed apps."
      }, {
        "lang" : "es",
        "value" : "El problema se resolvió mediante la sanitización del registro. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, iOS 18.7.5 y iPadOS 18.7.5. Una aplicación podría enumerar las aplicaciones instaladas de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20666",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.020",
      "lastModified" : "2026-02-12T18:27:31.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de autorización con una gestión de estado mejorada. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación podría acceder a datos de usuario sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20667",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.113",
      "lastModified" : "2026-04-02T19:21:20.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app may be able to break out of its sandbox."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con comprobaciones mejoradas. Este problema está solucionado en watchOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 26.3 y iPadOS 26.3. Una aplicación podría escapar de su sandbox."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20669",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.217",
      "lastModified" : "2026-02-12T20:16:04.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Un problema de análisis en el manejo de rutas de directorio se abordó con una validación de rutas mejorada. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación podría acceder a datos de usuario sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20671",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.317",
      "lastModified" : "2026-04-02T19:21:20.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to intercept network traffic."
      }, {
        "lang" : "es",
        "value" : "Un problema de lógica se solucionó con comprobaciones mejoradas. Este problema está solucionado en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Un atacante en una posición de red privilegiada podría interceptar el tráfico de red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20673",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.423",
      "lastModified" : "2026-04-02T19:21:20.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. Turning off \"Load remote content in messages” may not apply to all mail previews."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con comprobaciones mejoradas. Este problema está solucionado en macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, macOS Tahoe 26.3, macOS Sonoma 14.8.4. Desactivar 'Cargar contenido remoto en mensajes' podría no aplicarse a todas las previsualizaciones de correo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20674",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.757",
      "lastModified" : "2026-02-13T18:16:19.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de privacidad al eliminar datos sensibles. Este problema está solucionado en iOS 26.3 y iPadOS 26.3. Un atacante con acceso físico a un dispositivo bloqueado podría ver información sensible del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20675",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.870",
      "lastModified" : "2026-04-02T19:21:21.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may lead to disclosure of user information."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con comprobaciones de límites mejoradas. Este problema se solucionó en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. El procesamiento de una imagen manipulada maliciosamente puede llevar a la divulgación de información del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "E899D2A7-973C-4A46-B479-C245E5DFABE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-174/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20676",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:09.990",
      "lastModified" : "2026-04-02T19:21:21.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions."
      }, {
        "lang" : "es",
        "value" : "Este problema se abordó mediante una gestión de estado mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. Un sitio web podría rastrear usuarios a través de las extensiones web de Safari."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "13054182-3C0A-47D3-AABE-2B248BA17814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126354",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20677",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:10.107",
      "lastModified" : "2026-04-02T19:21:21.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A shortcut may be able to bypass sandbox restrictions."
      }, {
        "lang" : "es",
        "value" : "Se abordó una condición de carrera con una gestión mejorada de los enlaces simbólicos. Este problema se solucionó en macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 y iPadOS 18.7.5, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Un atajo podría eludir las restricciones de sandbox."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20678",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:10.217",
      "lastModified" : "2026-04-02T19:21:21.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de autorización con una gestión de estado mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, iOS 18.7.5 y iPadOS 18.7.5. Una aplicación podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20680",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:10.350",
      "lastModified" : "2026-04-02T19:21:22.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. A sandboxed app may be able to access sensitive user data."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con restricciones adicionales sobre la observabilidad de los estados de las aplicaciones. Este problema está solucionado en macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 y iPadOS 18.7.5, iOS 26.3 y iPadOS 26.3. Una aplicación en entorno aislado podría acceder a datos sensibles del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.8.4",
            "matchCriteriaId" : "8D9F0DB6-C9A6-47C1-B131-0284A3989EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "A5F7A1AF-3DD7-4FA1-BF78-4855F83BB463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "0488A377-7971-4703-8823-05BF1E23CF48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126349",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126350",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20681",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:10.460",
      "lastModified" : "2026-02-13T20:17:40.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.3. An app may be able to access information about a user's contacts."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de privacidad con una redacción mejorada de datos privados para entradas de registro. Este problema está solucionado en macOS Tahoe 26.3. Una aplicación podría acceder a información sobre los contactos de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20682",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:10.557",
      "lastModified" : "2026-03-25T16:16:20.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker may be able to discover a user’s deleted notes."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una gestión de estado mejorada. Este problema está solucionado en iOS 26.3 y iPadOS 26.3, iOS 18.7.5 y iPadOS 18.7.5. Un atacante podría descubrir las notas eliminadas de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5DF4C0EE-C67C-4BA1-BB50-C51DEC72E486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "00E2601B-7453-4C8B-A307-EF7BC5BF2E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "273784FD-F8F0-466D-AF6E-5511FF3781B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "951073F9-924E-4D9C-8DA1-64E284326CC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126347",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20700",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2026-02-11T23:16:10.670",
      "lastModified" : "2026-03-25T17:39:37.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de corrupción de memoria con una gestión de estado mejorada. Este problema está solucionado en watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3 y iPadOS 26.3. Un atacante con capacidad de escritura en memoria podría ejecutar código arbitrario. Apple tiene conocimiento de un informe que indica que este problema podría haber sido explotado en un ataque extremadamente sofisticado contra individuos específicos y dirigidos en versiones de iOS anteriores a iOS 26. CVE-2025-14174 y CVE-2025-43529 también se emitieron en respuesta a este informe."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-12",
      "cisaActionDue" : "2026-03-05",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Apple Multiple Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "73ED2212-C513-4BE8-8EDB-40DF4323558E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "DEC63AFD-9C97-45CD-80CF-CC60DF064838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "E1EEEE88-5ADA-4C55-9C7C-397E904408DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "60137BD4-65B6-4962-B1E5-5F4EE279489B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "388EDB3F-A14E-4922-B88A-F1CB6DE50A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.3",
            "matchCriteriaId" : "F406F3D2-0AF3-4F83-A123-2AC07B3B094E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/126346",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126348",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126351",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126352",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/126353",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20700",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26215",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-11T23:16:10.797",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "manga-image-translator version beta-0.3 and prior in shared API mode contains an unsafe deserialization vulnerability that can lead to unauthenticated remote code execution. The FastAPI endpoints /simple_execute/{method} and /execute/{method} deserialize attacker-controlled request bodies using pickle.loads() without validation. Although a nonce-based authorization check is intended to restrict access, the nonce defaults to an empty string and the check is skipped, allowing remote attackers to execute arbitrary code in the server context by sending a crafted pickle payload."
      }, {
        "lang" : "es",
        "value" : "manga-image-translator versión beta-0.3 y anteriores en modo API compartido contiene una vulnerabilidad de deserialización insegura que puede conducir a la ejecución remota de código no autenticada. Los endpoints de FastAPI /simple_execute/{method} y /execute/{method} deserializan cuerpos de solicitud controlados por el atacante utilizando pickle.loads() sin validación. Aunque una comprobación de autorización basada en nonce está destinada a restringir el acceso, el nonce por defecto es una cadena vacía y la comprobación se omite, permitiendo a atacantes remotos ejecutar código arbitrario en el contexto del servidor enviando una carga útil pickle manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/manga-image-translator-pickle-rce/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/zyddnys/manga-image-translator/blob/a537cb12b41daf2065795058c2753d87e73fa0fe/manga_translator/mode/share.py#L112",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/zyddnys/manga-image-translator/blob/a537cb12b41daf2065795058c2753d87e73fa0fe/manga_translator/mode/share.py#L130",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/zyddnys/manga-image-translator/issues/1116",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/zyddnys/manga-image-translator/issues/946",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/manga-image-translator-shared-api-unsafe-deserialization-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1729",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T02:15:48.993",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators."
      }, {
        "lang" : "es",
        "value" : "El tema AdForest para WordPress es vulnerable a omisión de autenticación en todas las versiones hasta la 6.0.12, inclusive. Esto se debe a que el plugin no verifica correctamente la identidad de un usuario antes de autenticarlos a través de la función 'sb_login_user_with_otp_fun'. Esto hace posible que atacantes no autenticados inicien sesión como usuarios arbitrarios, incluyendo administradores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://themeforest.net/item/adforest-classified-wordpress-theme/19481695",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/34fd42cb-3868-4b1c-bc56-575faf01e8f3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0969",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2026-02-12T03:15:46.667",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. This vulnerability, CVE-2026-0969, is fixed in next-mdx-remote 6.0.0."
      }, {
        "lang" : "es",
        "value" : "La función serialize utilizada para compilar MDX en next-mdx-remote es vulnerable a ejecución de código arbitrario debido a la sanitización insuficiente del contenido MDX. Esta vulnerabilidad, CVE-2026-0969, está corregida en next-mdx-remote 6.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2026-01-arbitrary-code-execution-in-react-server-side-rendering-of-untrusted-mdx-content/77155",
        "source" : "security@hashicorp.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23856",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-12T03:15:46.833",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell iDRAC Service Module (iSM) para Windows, versiones anteriores a la 6.0.3.1, y Dell iDRAC Service Module (iSM) para Linux, versiones anteriores a la 5.4.1.1, contienen una vulnerabilidad de control de acceso inadecuado. Un atacante con privilegios bajos con acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000426282/dsa-2026-077-security-update-for-dell-idrac-service-module-vulnerability",
        "source" : "security_alert@emc.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23857",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-12T03:15:47.003",
      "lastModified" : "2026-02-18T19:33:06.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "El Framework de Dell Update Package (DUP), versiones 23.12.00 a 24.12.00, contiene una vulnerabilidad de manejo inadecuado de permisos o privilegios insuficientes. Un atacante con privilegios bajos con acceso local podría potencialmente explotar esta vulnerabilidad, lo que lleva a una elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:update_package_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.12.00",
            "versionEndExcluding" : "25.02.00",
            "matchCriteriaId" : "FA606C82-5DDD-4677-A640-C7BA6D1F7644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000426781/dsa-2026-081-security-update-for-dell-update-package-dup-framework-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1537",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T04:15:47.413",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the load_step() function in all versions up to, and including, 5.2.6. This makes it possible for unauthenticated attackers to view booking information including customer names, email addresses, phone numbers, appointment times, and service details."
      }, {
        "lang" : "es",
        "value" : "El plugin LatePoint – Calendar Booking Plugin for Appointments and Events para WordPress es vulnerable al acceso no autorizado de datos debido a una falta de verificación de capacidad en la función load_step() en todas las versiones hasta la 5.2.6, inclusive. Esto hace posible que atacantes no autenticados vean información de reservas, incluyendo nombres de clientes, direcciones de correo electrónico, números de teléfono, horas de citas y detalles del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.2.5/lib/helpers/steps_helper.php#L231",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.2.5/lib/models/model.php#L562",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c18ad885-52a8-467b-83f2-aeb0c8be8be0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26234",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T04:15:47.600",
      "lastModified" : "2026-02-20T15:14:52.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, enabling cache poisoning, potential phishing, and redirecting users to malicious domains."
      }, {
        "lang" : "es",
        "value" : "JUNG Smart Visu Server 1.1.1050 contiene una vulnerabilidad de manipulación de encabezado de solicitud que permite a atacantes no autenticados anular URL de solicitud inyectando valores arbitrarios en el encabezado X-Forwarded-Host. Los atacantes pueden manipular solicitudes proxy para generar respuestas contaminadas, lo que permite el envenenamiento de caché, posible phishing y redirigir a los usuarios a dominios maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-644"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.830",
            "versionEndIncluding" : "1.1.1050",
            "matchCriteriaId" : "6A6F6D45-15C5-4CDD-8652-51706EDD87D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jung-group:smart_visu_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72946C8-4DEB-44E6-A22B-21AD3AC95A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulncheck.com/advisories/jung-smart-visu-server-improper-neutralization-of-http-headers-for-scripting-syntax",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5970.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5970.php",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26235",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T04:15:47.770",
      "lastModified" : "2026-02-20T19:52:03.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication."
      }, {
        "lang" : "es",
        "value" : "JUNG Smart Visu Server 1.1.1050 contiene una vulnerabilidad de denegación de servicio que permite a atacantes no autenticados apagar o reiniciar el servidor de forma remota. Los atacantes pueden enviar una única solicitud POST para activar el reinicio del servidor sin requerir ninguna autenticación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jung-group:smart_visu_server_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1050",
            "matchCriteriaId" : "D2C772EA-A71D-433C-8AF8-844395CE6AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jung-group:smart_visu_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72946C8-4DEB-44E6-A22B-21AD3AC95A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulncheck.com/advisories/jung-smart-visu-server-jung-smart-visu-server-missing-authentication",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5971.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5971.php",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25676",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-12T05:17:04.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges."
      }, {
        "lang" : "es",
        "value" : "El instalador de M-Track Duo HD versión 1.0.0 contiene un problema con la ruta de búsqueda de DLL, lo que puede llevar a la carga insegura de Bibliotecas de Enlace Dinámico. Como resultado, se puede ejecutar código arbitrario con privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN88690363/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.m-audio.com/audio-midi-interfaces/m-track-duo-hd.html",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26085",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.020",
      "lastModified" : "2026-02-12T05:17:06.020",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26086",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.100",
      "lastModified" : "2026-02-12T05:17:06.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26087",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.157",
      "lastModified" : "2026-02-12T05:17:06.157",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26088",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.213",
      "lastModified" : "2026-02-12T05:17:06.213",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26089",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.267",
      "lastModified" : "2026-02-12T05:17:06.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26090",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.327",
      "lastModified" : "2026-02-12T05:17:06.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26091",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.373",
      "lastModified" : "2026-02-12T05:17:06.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26092",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-12T05:17:06.433",
      "lastModified" : "2026-02-12T05:17:06.433",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2391",
      "sourceIdentifier" : "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
      "published" : "2026-02-12T05:17:11.187",
      "lastModified" : "2026-02-24T20:13:51.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "### Summary\nThe `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion. This is a bypass of the array limit enforcement, similar to the bracket notation bypass addressed in GHSA-6rw7-vpxm-498p (CVE-2025-15284).\n\n### Details\nWhen the `comma` option is set to `true` (not the default, but configurable in applications), qs allows parsing comma-separated strings as arrays (e.g., `?param=a,b,c` becomes `['a', 'b', 'c']`). However, the limit check for `arrayLimit` (default: 20) and the optional throwOnLimitExceeded occur after the comma-handling logic in `parseArrayValue`, enabling a bypass. This permits creation of arbitrarily large arrays from a single parameter, leading to excessive memory allocation.\n\n**Vulnerable code** (lib/parse.js: lines ~40-50):\n```js\nif (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {\n    return val.split(',');\n}\n\nif (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {\n    throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');\n}\n\nreturn val;\n```\nThe `split(',')` returns the array immediately, skipping the subsequent limit check. Downstream merging via `utils.combine` does not prevent allocation, even if it marks overflows for sparse arrays.This discrepancy allows attackers to send a single parameter with millions of commas (e.g., `?param=,,,,,,,,...`), allocating massive arrays in memory without triggering limits. It bypasses the intent of `arrayLimit`, which is enforced correctly for indexed (`a[0]=`) and bracket (`a[]=`) notations (the latter fixed in v6.14.1 per GHSA-6rw7-vpxm-498p).\n\n### PoC\n**Test 1 - Basic bypass:**\n```\nnpm install qs\n```\n\n```js\nconst qs = require('qs');\n\nconst payload = 'a=' + ','.repeat(25);  // 26 elements after split (bypasses arrayLimit: 5)\nconst options = { comma: true, arrayLimit: 5, throwOnLimitExceeded: true };\n\ntry {\n  const result = qs.parse(payload, options);\n  console.log(result.a.length);  // Outputs: 26 (bypass successful)\n} catch (e) {\n  console.log('Limit enforced:', e.message);  // Not thrown\n}\n```\n**Configuration:**\n- `comma: true`\n- `arrayLimit: 5`\n- `throwOnLimitExceeded: true`\n\nExpected: Throws \"Array limit exceeded\" error.\nActual: Parses successfully, creating an array of length 26.\n\n\n### Impact\nDenial of Service (DoS) via memory exhaustion."
      }, {
        "lang" : "es",
        "value" : "### Resumen\nLa opción `arrayLimit` en qs no aplica límites para valores separados por comas cuando `comma: true` está habilitado, permitiendo a los atacantes causar denegación de servicio a través del agotamiento de memoria. Esto es un bypass de la aplicación del límite de array, similar al bypass de notación de corchetes abordado en GHSA-6rw7-vpxm-498p (CVE-2025-15284).\n\n### Detalles\nCuando la opción `comma` se establece en `true` (no es el valor predeterminado, pero es configurable en las aplicaciones), qs permite analizar cadenas separadas por comas como arrays (por ejemplo, `?param=a,b,c` se convierte en `['a', 'b', 'c']`). Sin embargo, la verificación de límite para `arrayLimit` (predeterminado: 20) y la opción throwOnLimitExceeded ocurren después de la lógica de manejo de comas en `parseArrayValue`, lo que permite un bypass. Esto permite la creación de arrays arbitrariamente grandes a partir de un solo parámetro, lo que lleva a una asignación excesiva de memoria.\n\nCódigo vulnerable (lib/parse.js: líneas ~40-50):\n```js\nif (val &amp;&amp; typeof val === 'string' &amp;&amp; options.comma &amp;&amp; val.indexOf(',') &gt; -1) {\n    return val.split(',');\n}\n\nif (options.throwOnLimitExceeded &amp;&amp; currentArrayLength &gt;= options.arrayLimit) {\n    throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');\n}\n\nreturn val;\n```\nEl `split(',')` devuelve el array inmediatamente, omitiendo la verificación de límite subsiguiente. La fusión posterior a través de `utils.combine` no evita la asignación, incluso si marca desbordamientos para arrays dispersos. Esta discrepancia permite a los atacantes enviar un solo parámetro con millones de comas (por ejemplo, `?param=,,,,,,,,...`), asignando arrays masivos en memoria sin activar los límites. Bypassea la intención de `arrayLimit`, que se aplica correctamente para las notaciones indexadas (`a[0]=`) y de corchetes (`a[]=`) (esta última corregida en v6.14.1 según GHSA-6rw7-vpxm-498p).\n\n### PoC\nPrueba 1 - Bypass básico:\n```\nnpm install qs\n```\n\n```js\nconst qs = require('qs');\n\nconst payload = 'a=' + ','.repeat(25);  // 26 elements after split (bypasses arrayLimit: 5)\nconst options = { comma: true, arrayLimit: 5, throwOnLimitExceeded: true };\n\ntry {\n  const result = qs.parse(payload, options);\n  console.log(result.a.length);  // Outputs: 26 (bypass successful)\n} catch (e) {\n  console.log('Limit enforced:', e.message);  // Not thrown\n}\n```\nConfiguración:\n- `comma: true`\n- `arrayLimit: 5`\n- `throwOnLimitExceeded: true`\n\nEsperado: Lanza el error 'Array limit exceeded'.\nReal: Analiza con éxito, creando un array de longitud 26.\n\n### Impacto\nDenegación de Servicio (DoS) a través del agotamiento de memoria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qs_project:qs:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.14.2",
            "matchCriteriaId" : "94E3C0EE-F451-4D63-8670-0E428FED05AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ljharb/qs/commit/f6a7abff1f13d644db9b05fe4f2c98ada6bf8482",
        "source" : "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883",
        "source" : "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2327",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-02-12T06:16:02.243",
      "lastModified" : "2026-02-23T14:08:11.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\\*+$/ in the linkify function. An attacker can supply a long sequence of * characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "Versiones del paquete markdown-it desde la 13.0.0 y anteriores a la 14.1.1 son vulnerables a la Denegación de Servicio por Expresiones Regulares (ReDoS) debido al uso de la expresión regular /\\*+$/ en la función linkify. Un atacante puede proporcionar una secuencia larga de caracteres * seguida de un carácter no coincidente, lo que desencadena un retroceso excesivo y puede conducir a una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markdown-it_project:markdown-it:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "14.1.1",
            "matchCriteriaId" : "20B951B3-39A2-4AFA-93E7-D2A42D6C5535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917",
        "source" : "report@snyk.io",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/markdown-it/markdown-it/blob/14.1.0/lib/rules_inline/linkify.mjs%23L33",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/markdown-it/markdown-it/commit/4b4bbcae5e0990a5b172378e507b33a59012ed26",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/ltduc147/c9abecae1b291ede4f692f2ab988c917",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-MARKDOWNIT-10666750",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21722",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2026-02-12T09:16:08.763",
      "lastModified" : "2026-02-27T15:16:27.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange.\n\nThis did not leak any annotations that would not otherwise be visible on the public dashboard."
      }, {
        "lang" : "es",
        "value" : "Los paneles públicos con anotaciones habilitadas no limitaban su rango de tiempo de anotaciones al rango de tiempo bloqueado del panel público. Esto significaba que se podía leer todo el historial de anotaciones visibles en el panel específico, incluso aquellas fuera del rango de tiempo bloqueado.\n\nEsto no filtraba ninguna anotación que de otro modo no sería visible en el panel público."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "11.6.10",
            "matchCriteriaId" : "FC76AD1C-B27B-406D-A117-4A77843DB73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.1.6",
            "matchCriteriaId" : "D5BEDACC-A177-4E74-B3A7-262519FEE855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndIncluding" : "12.2.4",
            "matchCriteriaId" : "1A9AE662-36F4-4B97-8B4C-78E93587D100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.3.0",
            "versionEndIncluding" : "12.3.2",
            "matchCriteriaId" : "97D48B2B-3863-409D-BC93-778972C04854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:11.6.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CAA7A9-874F-4C6A-B955-4DFBA2834355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.1.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "47FF05E9-65D7-43E8-93B0-111BA4708041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.2.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF2D10C-CEE9-4D8C-9D46-F38DE3540FB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:12.3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "63FB712A-04AC-42FD-AC3C-1384932B662E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://grafana.com/security/security-advisories/cve-2026-21722",
        "source" : "security@grafana.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1356",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T10:16:01.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::load_image_source function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin Converter for Media – Optimize images | Convert WebP &amp; AVIF para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 6.5.1, inclusive, a través de la función PassthruLoader::load_image_source. Esto hace posible que atacantes no autenticados realicen peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede utilizarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3445904/webp-converter-for-media",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/188d812c-2955-4b0c-ae1c-b42c0f60b73b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2276",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-12T11:15:50.113",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded JavaScript code, which is stored and subsequently executed when other users view the image. Exploiting this vulnerability allows arbitrary code to be executed in the context of the victim's browser, which could lead to the disclosure of sensitive information or the abuse of the affected user's session."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) reflejada en la aplicación web de Wix, donde el endpoint ' https://manage.wix.com/account/account-settings ', responsable de la carga de imágenes SVG, no sanitiza correctamente el contenido. Un atacante autenticado podría cargar un archivo SVG que contiene código JavaScript incrustado, que se almacena y se ejecuta posteriormente cuando otros usuarios ven la imagen. La explotación de esta vulnerabilidad permite que se ejecute código arbitrario en el contexto del navegador de la víctima, lo que podría llevar a la divulgación de información sensible o al abuso de la sesión del usuario afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-wix-web-application",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1316",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T13:15:49.707",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media[].href' parameter in all versions up to, and including, 5.97.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers (if 'Enable for Guests' is enabled) to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Customer Reviews for WooCommerce para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'media[].href' en todas las versiones hasta la 5.97.0, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida inadecuado. Esto hace posible que atacantes no autenticados (si 'Enable for Guests' está habilitado) inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3446777/customer-reviews-woocommerce",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f8b34144-5516-46df-b093-95f4bf76b896?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1671",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T13:15:49.880",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Activity Log for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the winter_activity_log_action() function in all versions up to, and including, 1.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view potentially sensitive information (e.g., the password of a higher level user, such as an administrator) contained in the exposed log files."
      }, {
        "lang" : "es",
        "value" : "El plugin Activity Log for WordPress para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobación de capacidad faltante en la función winter_activity_log_action() en todas las versiones hasta la 1.2.8, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, vean información potencialmente sensible (por ejemplo, la contraseña de un usuario de nivel superior, como un administrador) contenida en los archivos de registro expuestos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3459369/winterlock",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5cec4c17-24c1-4ed3-a3d3-9404ad7af420?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1320",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T14:16:01.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' HTTP header in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Secure Copy Content Protection y Content Locking para WordPress es vulnerable a cross-site scripting almacenado a través del encabezado HTTP 'X-Forwarded-For' en todas las versiones hasta la 4.9.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449531/secure-copy-content-protection",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c4dd681d-90cb-44dc-adf0-d7e269d15a60?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2003",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-12T14:16:02.067",
      "lastModified" : "2026-02-20T19:53:43.333",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper validation of type \"oidvector\" in PostgreSQL allows a database user to disclose a few bytes of server memory.  We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected."
      }, {
        "lang" : "es",
        "value" : "La validación incorrecta del tipo 'oidvector' en PostgreSQL permite a un usuario de base de datos divulgar unos pocos bytes de memoria del servidor. No hemos descartado la viabilidad de ataques que dispongan la presencia de información confidencial en los bytes divulgados, pero parecen poco probables. Las versiones anteriores a PostgreSQL 18.2, 17.8, 16.12, 15.16 y 14.21 están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.21",
            "matchCriteriaId" : "4BCEAB7B-E4FC-4F9F-A1F9-62EA7DD6D6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.16",
            "matchCriteriaId" : "4B408DAF-2DCD-45FE-94EE-BC84947A41C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.12",
            "matchCriteriaId" : "6353A59B-FE67-4DD5-B0E6-C10F0D2358D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.8",
            "matchCriteriaId" : "E2CCF450-C726-403A-975F-B5717E92A769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2",
            "matchCriteriaId" : "6B872502-5316-4E79-8FA1-24E5D8222C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.postgresql.org/support/security/CVE-2026-2003/",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2004",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-12T14:16:02.213",
      "lastModified" : "2026-02-20T19:53:53.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected."
      }, {
        "lang" : "es",
        "value" : "Falta de validación del tipo de entrada en la función estimadora de selectividad de la extensión intarray de PostgreSQL permite a un creador de objetos ejecutar código arbitrario como el usuario del sistema operativo que ejecuta la base de datos. Las versiones anteriores a PostgreSQL 18.2, 17.8, 16.12, 15.16 y 14.21 están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.21",
            "matchCriteriaId" : "4BCEAB7B-E4FC-4F9F-A1F9-62EA7DD6D6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.16",
            "matchCriteriaId" : "4B408DAF-2DCD-45FE-94EE-BC84947A41C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.12",
            "matchCriteriaId" : "6353A59B-FE67-4DD5-B0E6-C10F0D2358D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.8",
            "matchCriteriaId" : "E2CCF450-C726-403A-975F-B5717E92A769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2",
            "matchCriteriaId" : "6B872502-5316-4E79-8FA1-24E5D8222C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.postgresql.org/support/security/CVE-2026-2004/",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2005",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-12T14:16:02.350",
      "lastModified" : "2026-02-20T19:54:02.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en el heap en PostgreSQL pgcrypto permite a un proveedor de texto cifrado ejecutar código arbitrario como el usuario del sistema operativo que ejecuta la base de datos. Las versiones anteriores a PostgreSQL 18.2, 17.8, 16.12, 15.16 y 14.21 están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.21",
            "matchCriteriaId" : "4BCEAB7B-E4FC-4F9F-A1F9-62EA7DD6D6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.16",
            "matchCriteriaId" : "4B408DAF-2DCD-45FE-94EE-BC84947A41C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.12",
            "matchCriteriaId" : "6353A59B-FE67-4DD5-B0E6-C10F0D2358D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.8",
            "matchCriteriaId" : "E2CCF450-C726-403A-975F-B5717E92A769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2",
            "matchCriteriaId" : "6B872502-5316-4E79-8FA1-24E5D8222C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.postgresql.org/support/security/CVE-2026-2005/",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2006",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-12T14:16:02.470",
      "lastModified" : "2026-02-20T19:54:12.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun.  That suffices to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected."
      }, {
        "lang" : "es",
        "value" : "La falta de validación de la longitud de caracteres multibyte en la manipulación de texto de PostgreSQL permite a un usuario de base de datos emitir consultas especialmente diseñadas que logran un desbordamiento de búfer. Esto basta para ejecutar código arbitrario como el usuario del sistema operativo que ejecuta la base de datos. Las versiones anteriores a PostgreSQL 18.2, 17.8, 16.12, 15.16 y 14.21 están afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.21",
            "matchCriteriaId" : "4BCEAB7B-E4FC-4F9F-A1F9-62EA7DD6D6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.16",
            "matchCriteriaId" : "4B408DAF-2DCD-45FE-94EE-BC84947A41C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.12",
            "matchCriteriaId" : "6353A59B-FE67-4DD5-B0E6-C10F0D2358D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.8",
            "matchCriteriaId" : "E2CCF450-C726-403A-975F-B5717E92A769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2",
            "matchCriteriaId" : "6B872502-5316-4E79-8FA1-24E5D8222C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.postgresql.org/support/security/CVE-2026-2006/",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2007",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-12T14:16:02.600",
      "lastModified" : "2026-02-20T19:54:44.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string.  The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation.  PostgreSQL 18.1 and 18.0 are affected."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el heap en PostgreSQL pg_trgm permite a un usuario de base de datos lograr impactos desconocidos mediante una cadena de entrada manipulada. El atacante tiene control limitado sobre los patrones de bytes a escribir, pero no hemos descartado la viabilidad de ataques que conduzcan a la escalada de privilegios. PostgreSQL 18.1 y 18.0 están afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2",
            "matchCriteriaId" : "6B872502-5316-4E79-8FA1-24E5D8222C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.postgresql.org/support/security/CVE-2026-2007/",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1104",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-12T15:16:08.993",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to create and download full-site backup archives containing the entire WordPress installation, including database exports and configuration files."
      }, {
        "lang" : "es",
        "value" : "El plugin FastDup – Fastest WordPress Migration &amp; Duplicator para WordPress es vulnerable a la creación y descarga de copias de seguridad no autorizadas debido a una comprobación de capacidad faltante en los endpoints de la API REST en todas las versiones hasta la 2.7.1, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, crear y descargar archivos de copia de seguridad de sitio completo que contienen la instalación completa de WordPress, incluyendo exportaciones de la base de datos y archivos de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/fastdup/trunk/includes/Endpoint/PackageApi.php#L371",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449530/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/29c0fb4d-c38c-4c78-9e15-797f3c3a4b30?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26214",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T16:16:17.183",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "disclosure@vulncheck.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled (the default configuration). In GalaxyFDSClientImpl.createHttpClient(), the SDK configures Apache HttpClient with SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER, which accepts any valid TLS certificate regardless of hostname mismatch. Because HTTPS is enabled by default in FDSClientConfiguration, all applications using the SDK with default settings are affected. This vulnerability allows a man-in-the-middle attacker to intercept and modify SDK communications to Xiaomi FDS cloud storage endpoints, potentially exposing authentication credentials, file contents, and API responses. The XiaoMi/galaxy-fds-sdk-android open source project has reached end-of-life status."
      }, {
        "lang" : "es",
        "value" : "Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) versión 3.0.8 y anteriores deshabilitan la verificación de nombre de host TLS cuando HTTPS está habilitado (la configuración predeterminada). En GalaxyFDSClientImpl.createHttpClient(), el SDK configura Apache HttpClient con SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER, que acepta cualquier certificado TLS válido independientemente de la falta de coincidencia del nombre de host. Debido a que HTTPS está habilitado por defecto en FDSClientConfiguration, todas las aplicaciones que usan el SDK con la configuración predeterminada se ven afectadas. Esta vulnerabilidad permite a un atacante man-in-the-middle interceptar y modificar las comunicaciones del SDK a los puntos finales de almacenamiento en la nube de Xiaomi FDS, exponiendo potencialmente las credenciales de autenticación, el contenido de los archivos y las respuestas de la API. El proyecto de código abierto XiaoMi/galaxy-fds-sdk-android ha alcanzado el estado de fin de vida útil."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-297"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XavLimSG/Vulnerability-Research/blob/main/CVE-2026-26214/CVE-2026-26214.md",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/XiaoMi/galaxy-fds-sdk-android",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/xiaomi-galaxy-fds-android-sdk-tls-hostname-verification-disabled-enables-mitm",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26216",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T16:16:17.447",
      "lastModified" : "2026-02-20T16:52:49.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crawl4AI anteriores a la 0.8.0 contienen una vulnerabilidad de ejecución remota de código en el despliegue de la API de Docker. El endpoint /crawl acepta un parámetro hooks que contiene código Python que se ejecuta usando exec(). La función incorporada __import__ se incluyó en las funciones incorporadas permitidas, lo que permite a atacantes remotos no autenticados importar módulos arbitrarios y ejecutar comandos del sistema. La explotación exitosa permite el compromiso total del servidor, incluyendo la ejecución arbitraria de comandos, acceso de lectura y escritura de archivos, exfiltración de datos sensibles y movimiento lateral dentro de redes internas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "8A143EE5-8015-4179-B40B-AB6ABF79E951"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/unclecode/crawl4ai/blob/main/docs/blog/release-v0.8.0.md",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/unclecode/crawl4ai/security/advisories/GHSA-5882-5rx9-xgxp",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/crawl4ai-docker-api-unauthenticated-remote-code-execution-via-hooks-parameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26217",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T16:16:17.620",
      "lastModified" : "2026-02-20T16:54:08.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing unauthenticated remote attackers to read arbitrary files from the server filesystem. An attacker can access sensitive files such as /etc/passwd, /etc/shadow, application configuration files, and environment variables via /proc/self/environ, potentially exposing credentials, API keys, and internal application structure."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crawl4AI anteriores a la 0.8.0 contienen una vulnerabilidad de inclusión de archivos locales en la implementación de la API de Docker. Los puntos finales /execute_js, /screenshot, /pdf y /html aceptan URL file://, lo que permite a atacantes remotos no autenticados leer archivos arbitrarios del sistema de archivos del servidor. Un atacante puede acceder a archivos confidenciales como /etc /passwd, /etc /shadow, archivos de configuración de aplicaciones y variables de entorno a través de /proc/self /environ, lo que podría exponer credenciales, claves API y la estructura interna de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "8A143EE5-8015-4179-B40B-AB6ABF79E951"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/unclecode/crawl4ai/blob/main/docs/blog/release-v0.8.0.md",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/unclecode/crawl4ai/security/advisories/GHSA-vx9w-5cx4-9796",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/crawl4ai-docker-api-local-file-inclusion-via-file-url-handling",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21434",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T19:15:51.333",
      "lastModified" : "2026-02-19T22:53:24.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "webtransport-go is an implementation of the WebTransport protocol. From 0.3.0 to 0.9.0, an attacker can cause excessive memory consumption in webtransport-go's session implementation by sending a WT_CLOSE_SESSION capsule containing an excessively large Application Error Message. The implementation does not enforce the draft-mandated limit of 1024 bytes on this field, allowing a peer to send an arbitrarily large message payload that is fully read and stored in memory. This allows an attacker to consume an arbitrary amount of memory. The attacker must transmit the full payload to achieve the memory consumption, but the lack of any upper bound makes large-scale attacks feasible given sufficient bandwidth. This vulnerability is fixed in 0.10.0."
      }, {
        "lang" : "es",
        "value" : "webtransport-go es una implementación del protocolo WebTransport. Desde 0.3.0 hasta 0.9.0, un atacante puede causar un consumo excesivo de memoria en la implementación de sesión de webtransport-go al enviar una cápsula WT_CLOSE_SESSION que contiene un Mensaje de Error de Aplicación excesivamente grande. La implementación no aplica el límite de 1024 bytes exigido por el borrador en este campo, lo que permite a un par enviar una carga útil de mensaje arbitrariamente grande que se lee y almacena completamente en memoria. Esto permite a un atacante consumir una cantidad arbitraria de memoria. El atacante debe transmitir la carga útil completa para lograr el consumo de memoria, pero la falta de cualquier límite superior hace que los ataques a gran escala sean factibles dado un ancho de banda suficiente. Esta vulnerabilidad está corregida en 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quic-go:webtransport-go:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "655FC296-1611-47D3-A71F-E5C093D2F463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quic-go/webtransport-go/releases/tag/v0.10.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/quic-go/webtransport-go/security/advisories/GHSA-g6x7-jq8p-6q9q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21435",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T19:15:51.503",
      "lastModified" : "2026-02-19T22:51:49.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "webtransport-go is an implementation of the WebTransport protocol. Prior to v0.10.0, an attacker can cause a denial of service in webtransport-go by preventing or indefinitely delaying WebTransport session closure. A malicious peer can withhold QUIC flow control credit on the CONNECT stream, blocking transmission of the WT_CLOSE_SESSION capsule and causing the close operation to hang. This vulnerability is fixed in v0.10.0."
      }, {
        "lang" : "es",
        "value" : "webtransport-go es una implementación del protocolo WebTransport. Antes de la v0.10.0, un atacante puede causar una denegación de servicio en webtransport-go al impedir o retrasar indefinidamente el cierre de la sesión WebTransport. Un par malicioso puede retener el crédito de control de flujo QUIC en el flujo CONNECT, bloqueando la transmisión de la cápsula WT_CLOSE_SESSION y haciendo que la operación de cierre se cuelgue. Esta vulnerabilidad está corregida en la v0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quic-go:webtransport-go:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "D64C55F6-7FB5-4D98-9E14-99F89DD9F3E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quic-go/webtransport-go/releases/tag/v0.10.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/quic-go/webtransport-go/security/advisories/GHSA-px4r-g4p3-hhqv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21438",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T19:15:51.677",
      "lastModified" : "2026-02-19T22:50:30.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "webtransport-go is an implementation of the WebTransport protocol. Prior to 0.10.0, an attacker can cause unbounded memory consumption repeatedly creating and closing many WebTransport streams. Closed streams were not removed from an internal session map, preventing garbage collection of their resources. This vulnerability is fixed in v0.10.0."
      }, {
        "lang" : "es",
        "value" : "webtransport-go es una implementación del protocolo WebTransport. Antes de la versión 0.10.0, un atacante podía causar un consumo de memoria ilimitado creando y cerrando repetidamente muchas transmisiones WebTransport. Las transmisiones cerradas no se eliminaban de un mapa de sesión interno, lo que impedía la recolección de basura de sus recursos. Esta vulnerabilidad está corregida en la v0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        }, {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quic-go:webtransport-go:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "D64C55F6-7FB5-4D98-9E14-99F89DD9F3E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quic-go/webtransport-go/releases/tag/v0.10.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/quic-go/webtransport-go/security/advisories/GHSA-2f2x-8mwp-p2gc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22821",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T19:15:51.883",
      "lastModified" : "2026-02-20T18:20:33.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4."
      }, {
        "lang" : "es",
        "value" : "mreporting es el plugin de GLPI de informes más completo. Antes de la versión 1.9.4, existe una posible inyección SQL al cambiar la fecha. Esta vulnerabilidad está corregida en la versión 1.9.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:more_reporting:*:*:*:*:*:glpi:*:*",
            "versionEndExcluding" : "1.9.4",
            "matchCriteriaId" : "F58196A1-5ADF-43F2-822F-C26037D06249"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pluginsGLPI/mreporting/commit/6f4a3caf9c1f7bbed1d910795d6e918d039f1f72",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/mreporting/security/advisories/GHSA-24q7-h59q-33w8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26218",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T19:15:52.120",
      "lastModified" : "2026-02-25T16:41:25.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default password. Deployments that initialize or reset the database using the provided schema and fail to change the default administrative credentials may allow unauthenticated attackers to log in as an administrator and gain full administrative control of the application."
      }, {
        "lang" : "es",
        "value" : "newbee-mall incluye cuentas de administrador precargadas en su script de inicialización de base de datos. Estas cuentas se aprovisionan con una contraseña predeterminada predecible. Las implementaciones que inicializan o restablecen la base de datos utilizando el esquema proporcionado y no cambian las credenciales administrativas predeterminadas pueden permitir a atacantes no autenticados iniciar sesión como administrador y obtener control administrativo total de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newbee-mall_project:newbee-mall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "5713EBA1-D599-4500-B0B1-59C9CBB5DFA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/newbee-ltd/newbee-mall/issues/119",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/newbee-mall-default-seeded-administrator-credentials-allow-account-takeover",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26219",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T19:15:52.300",
      "lastModified" : "2026-02-25T16:40:13.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or computational cost controls, enabling attackers who obtain password hashes through database exposure, backup leakage, or other compromise vectors to rapidly recover plaintext credentials via offline attacks."
      }, {
        "lang" : "es",
        "value" : "newbee-mall almacena y verifica las contraseñas de usuario utilizando un algoritmo de hash MD5 sin sal. La implementación no incorpora sales por usuario ni controles de coste computacional, lo que permite a los atacantes que obtienen hashes de contraseñas a través de la exposición de la base de datos, la fuga de copias de seguridad u otros vectores de compromiso recuperar rápidamente credenciales en texto plano mediante ataques fuera de línea."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newbee-mall_project:newbee-mall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "5713EBA1-D599-4500-B0B1-59C9CBB5DFA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/newbee-ltd/newbee-mall/issues/119",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/newbee-mall-unsalted-md5-password-hashing-enables-offline-credential-cracking",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24044",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:09.237",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Element Server Suite Community Edition (ESS Community) deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook (using matrix-tools container before 0.5.7) is using an insecure Matrix server key generation method, allowing network attackers to potentially recreate the same key pair, allowing them to impersonate the victim server. The secret is generated by the secrets initialization hook, in the ESS Community Helm Chart values, if both initSecrets.enabled is not set to false and synapse.signingKey is not defined. Given a server key in Matrix authenticates both requests originating from and events constructed on a given server, this potentially impacts confidentiality, integrity and availability of rooms which have a vulnerable server present as a member. The confidentiality of past conversations in end-to-end encrypted rooms is not impacted. The key generation issue was fixed in matrix-tools 0.5.7, released as part of ESS Community Helm Chart 25.12.1."
      }, {
        "lang" : "es",
        "value" : "Element Server Suite Community Edition (ESS Community) despliega una pila de Matrix utilizando los gráficos Helm proporcionados y la distribución de Kubernetes. El hook de inicialización de secretos del gráfico Helm de ESS Community (utilizando el contenedor matrix-tools anterior a la versión 0.5.7) está utilizando un método inseguro de generación de claves de servidor de Matrix, permitiendo a los atacantes de red recrear potencialmente el mismo par de claves, lo que les permite suplantar al servidor víctima. El secreto es generado por el hook de inicialización de secretos, en los valores del gráfico Helm de ESS Community, si tanto initSecrets.enabled no está configurado como falso y synapse.signingKey no está definido. Dado que una clave de servidor en Matrix autentica tanto las solicitudes originadas desde como los eventos construidos en un servidor dado, esto impacta potencialmente la confidencialidad, integridad y disponibilidad de las salas que tienen un servidor vulnerable presente como miembro. La confidencialidad de las conversaciones pasadas en salas cifradas de extremo a extremo no se ve afectada. El problema de generación de claves fue solucionado en matrix-tools 0.5.7, lanzado como parte del gráfico Helm de ESS Community 25.12.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-336"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/element-hq/ess-helm/blob/main/docs/maintenance.md#fixing-cve-2026-24044elementsec-2025-1670-manually",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/element-hq/ess-helm/releases/tag/25.12.2",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/element-hq/ess-helm/security/advisories/GHSA-qwcj-h6m8-vp6q",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24894",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.020",
      "lastModified" : "2026-02-20T18:31:06.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrankenPHP is a modern application server for PHP. Prior to 1.11.2, when running FrankenPHP in worker mode, the $_SESSION superglobal is not correctly reset between requests. This allows a subsequent request processed by the same worker to access the $_SESSION data of the previous request (potentially belonging to a different user) before session_start() is called. This vulnerability is fixed in 1.11.2."
      }, {
        "lang" : "es",
        "value" : "FrankenPHP es un moderno servidor de aplicaciones para PHP. Antes de la versión 1.11.2, al ejecutar FrankenPHP en modo worker, la superglobal $_SESSION no se restablece correctamente entre solicitudes. Esto permite que una solicitud subsiguiente procesada por el mismo worker acceda a los datos de $_SESSION de la solicitud anterior (potencialmente perteneciente a un usuario diferente) antes de que se llame a session_start(). Esta vulnerabilidad se corrige en la versión 1.11.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-384"
        }, {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:frankenphp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "E2C3D161-7DC3-4241-9EBA-481806A802B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/php/frankenphp/commit/24d6c991a7761b638190eb081deae258143e9735",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/php/frankenphp/releases/tag/v1.11.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/php/frankenphp/security/advisories/GHSA-r3xh-3r3w-47gp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24895",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.170",
      "lastModified" : "2026-02-20T18:30:00.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrankenPHP is a modern application server for PHP. Prior to 1.11.2, FrankenPHP’s CGI path splitting logic improperly handles Unicode characters during case conversion. The logic computes the split index (for finding .php) on a lowercased copy of the request path but applies that byte index to the original path. Because strings.ToLower() in Go can increase the byte length of certain UTF-8 characters (e.g., Ⱥ expands when lowercased), the computed index may not align with the correct position in the original string. This results in an incorrect SCRIPT_NAME and SCRIPT_FILENAME, potentially causing FrankenPHP to execute a file other than the one intended by the URI. This vulnerability is fixed in 1.11.2."
      }, {
        "lang" : "es",
        "value" : "FrankenPHP es un moderno servidor de aplicaciones para PHP. Antes de 1.11.2, la lógica de división de rutas CGI de FrankenPHP maneja incorrectamente los caracteres Unicode durante la conversión de mayúsculas y minúsculas. La lógica calcula el índice de división (para encontrar .php) en una copia en minúsculas de la ruta de la solicitud, pero aplica ese índice de bytes a la ruta original. Debido a que strings.ToLower() en Go puede aumentar la longitud en bytes de ciertos caracteres UTF-8 (por ejemplo, ? se expande al convertirse a minúsculas), el índice calculado puede no alinearse con la posición correcta en la cadena original. Esto resulta en un SCRIPT_NAME y SCRIPT_FILENAME incorrectos, potencialmente causando que FrankenPHP ejecute un archivo diferente al previsto por la URI. Esta vulnerabilidad está corregida en 1.11.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-180"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:frankenphp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "E2C3D161-7DC3-4241-9EBA-481806A802B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/php/frankenphp/commit/04fdc0c1e8fde94e2c1ad86217e962c88d27c53e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/php/frankenphp/releases/tag/v1.11.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/php/frankenphp/security/advisories/GHSA-g966-83w7-6w38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25227",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.313",
      "lastModified" : "2026-02-19T15:25:12.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view * Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server container through the test endpoint, which is intended to preview how a property mapping/policy works. authentik 2025.8.6, 2025.10.4, and 2025.12.4 fix this issue."
      }, {
        "lang" : "es",
        "value" : "authentik es un proveedor de identidad de código abierto. Desde 2021.3.1 hasta antes de 2025.8.6, 2025.10.4 y 2025.12.4, al usar permisos delegados, un Usuario que tiene el permiso Can view * Property Mapping o Can view Expression Policy es capaz de ejecutar código arbitrario dentro del contenedor del servidor authentik a través del endpoint de prueba, el cual está destinado a previsualizar cómo funciona un mapeo de propiedades/política. authentik 2025.8.6, 2025.10.4 y 2025.12.4 solucionan este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2021.3.1",
            "versionEndExcluding" : "2025.8.6",
            "matchCriteriaId" : "9B75021A-6847-4AB0-8D73-BE045EC341B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.10.0",
            "versionEndExcluding" : "2025.10.4",
            "matchCriteriaId" : "4B646FA7-6B60-4018-9EA8-0C3C4F18BC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.12.0",
            "versionEndExcluding" : "2025.12.4",
            "matchCriteriaId" : "A59D4BC9-5FAE-4A4F-A109-D754BD80A10C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/goauthentik/authentik/commit/c691afaef164cf73c10a26a944ef2f11dbb1ac80",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.10.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.12.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.8.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/security/advisories/GHSA-qvxx-mfm6-626f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25748",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.473",
      "lastModified" : "2026-02-19T15:23:42.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible to bypass authentication when using forward authentication in the authentik Proxy Provider when used in conjunction with Traefik or Caddy as reverse proxy. When a malicious cookie was used, none of the authentik-specific X-Authentik-* headers were set which depending on application can grant access to an attacker. authentik 2025.10.4 and 2025.12.4 fix this issue."
      }, {
        "lang" : "es",
        "value" : "authentik es un proveedor de identidad de código abierto. Antes de las versiones 2025.10.4 y 2025.12.4, con una cookie malformada era posible eludir la autenticación al usar la autenticación de reenvío en el Proveedor de Proxy de authentik cuando se utilizaba junto con Traefik o Caddy como proxy inverso. Cuando se utilizaba una cookie maliciosa, ninguno de los encabezados X-Authentik-* específicos de authentik se establecía, lo que, dependiendo de la aplicación, podía conceder acceso a un atacante. authentik 2025.10.4 y 2025.12.4 solucionan este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.10.4",
            "matchCriteriaId" : "D68BD58B-CB50-411F-862F-FF4F4F984239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.12.0",
            "versionEndExcluding" : "2025.12.4",
            "matchCriteriaId" : "A59D4BC9-5FAE-4A4F-A109-D754BD80A10C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.10.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.12.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/security/advisories/GHSA-fj56-5763-j8pp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25767",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.623",
      "lastModified" : "2026-02-20T18:35:38.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LavinMQ is a high-performance message queue & streaming server. Before 2.6.8, an authenticated user, with the “Policymaker” tag, could create shovels bypassing access controls. an authenticated user with the \"Policymaker\" management tag could exploit it to read messages from vhosts they are not authorized to access or publish messages to vhosts they are not authorized to access. This vulnerability is fixed in 2.6.8."
      }, {
        "lang" : "es",
        "value" : "LavinMQ es un servidor de cola de mensajes y streaming de alto rendimiento. Antes de la versión 2.6.8, un usuario autenticado, con la etiqueta 'Policymaker', podía crear 'shovels' eludiendo los controles de acceso. Un usuario autenticado con la etiqueta de gestión 'Policymaker' podría explotarlo para leer mensajes de 'vhosts' a los que no está autorizado a acceder o publicar mensajes en 'vhosts' a los que no está autorizado a acceder. Esta vulnerabilidad está corregida en la versión 2.6.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:84codes:lavinmq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.8",
            "matchCriteriaId" : "D27D43CF-66DA-452C-A820-C7302EAB3558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudamqp/lavinmq/commit/3a83e5894495b60c7c32a79c3dbc9bd9fa237d9a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloudamqp/lavinmq/commit/be03da31f3db1a2552f7094ff58e953ef50cdc82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloudamqp/lavinmq/pull/1670",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cloudamqp/lavinmq/pull/1687",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cloudamqp/lavinmq/security/advisories/GHSA-wh37-6vrr-r9wg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25768",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.773",
      "lastModified" : "2026-02-20T18:37:35.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have access to. This vulnerability is fixed in 2.6.6."
      }, {
        "lang" : "es",
        "value" : "LavinMQ es un servidor de cola de mensajes y streaming de alto rendimiento. Antes de la versión 2.6.6, un usuario autenticado podía acceder a metadatos en el broker a los que no debería tener acceso. Esta vulnerabilidad está corregida en la versión 2.6.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:84codes:lavinmq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.6",
            "matchCriteriaId" : "925D25C8-F795-497E-8A99-75ED1BBC1D95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudamqp/lavinmq/commit/e871f8d0a53685f04e39e6410a2421c1f82803b0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloudamqp/lavinmq/pull/1669",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/cloudamqp/lavinmq/security/advisories/GHSA-r2mh-8vq6-qf7m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25922",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:10.910",
      "lastModified" : "2026-02-18T20:59:27.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source that has the option Verify Assertion Signature under Verification Certificate enabled and not Verify Response Signature, or does not have the Encryption Certificate setting under Advanced Protocol settings configured, it was possible for an attacker to inject a malicious assertion before the signed assertion that authentik would use instead. authentik 2025.8.6, 2025.10.4, and 2025.12.4 fix this issue."
      }, {
        "lang" : "es",
        "value" : "authentik es un proveedor de identidad de código abierto. Antes de 2025.8.6, 2025.10.4 y 2025.12.4, al usar una Fuente SAML que tiene la opción Verificar Firma de Aserción bajo Certificado de Verificación habilitada y no Verificar Firma de Respuesta, o no tiene la configuración de Certificado de Cifrado bajo la configuración de Protocolo Avanzado configurada, era posible para un atacante inyectar una aserción maliciosa antes de la aserción firmada que authentik usaría en su lugar. authentik 2025.8.6, 2025.10.4 y 2025.12.4 solucionan este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.8.6",
            "matchCriteriaId" : "903E7E1D-C429-4016-BE4D-4336F534BB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.10.0",
            "versionEndExcluding" : "2025.10.4",
            "matchCriteriaId" : "4B646FA7-6B60-4018-9EA8-0C3C4F18BC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.12.0",
            "versionEndExcluding" : "2025.12.4",
            "matchCriteriaId" : "A59D4BC9-5FAE-4A4F-A109-D754BD80A10C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.10.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.12.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/releases/tag/version%2F2025.8.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/security/advisories/GHSA-jh35-c4cc-wjm4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25933",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:11.067",
      "lastModified" : "2026-02-19T21:30:53.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arduino App Lab is a cross-platform IDE for developing Arduino Apps. Prior to 0.4.0, a vulnerability was identified in the Terminal component of the arduino-app-lab application. The issue stems from insufficient sanitization and validation of input data received from connected hardware devices, specifically in the _info.Serial and _info.Address metadata fields. The problem occurs during device information handling. When a board is connected, the application collects identifying attributes to establish a terminal session. Because strict validation is not enforced for the Serial and Address parameters, an attacker with control over the connected hardware can supply specially crafted strings containing shell metacharacters. The exploitation requires direct physical access to a previously tampered board. When the host system processes these fields, any injected payload is executed with the privileges of the user running arduino-app-lab. This vulnerability is fixed in 0.4.0."
      }, {
        "lang" : "es",
        "value" : "Arduino App Lab es un IDE multiplataforma para desarrollar aplicaciones de Arduino. Antes de la versión 0.4.0, se identificó una vulnerabilidad en el componente Terminal de la aplicación arduino-app-lab. El problema se origina por la sanitización y validación insuficientes de los datos de entrada recibidos de los dispositivos de hardware conectados, específicamente en los campos de metadatos _info.Serial y _info.Address. El problema ocurre durante el manejo de la información del dispositivo. Cuando se conecta una placa, la aplicación recopila atributos de identificación para establecer una sesión de terminal. Debido a que no se aplica una validación estricta para los parámetros Serial y Address, un atacante con control sobre el hardware conectado puede proporcionar cadenas especialmente diseñadas que contengan metacaracteres de shell. La explotación requiere acceso físico directo a una placa previamente manipulada. Cuando el sistema anfitrión procesa estos campos, cualquier carga útil inyectada se ejecuta con los privilegios del usuario que ejecuta arduino-app-lab. Esta vulnerabilidad se corrigió en la versión 0.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arduino:app_lab:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "244EB8A1-C8D1-40CA-A05C-ADA31BBD1252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/arduino/arduino-app-lab/releases/tag/al-0.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/arduino/arduino-app-lab/security/advisories/GHSA-3652-939f-f7g4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25949",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T20:16:11.227",
      "lastModified" : "2026-02-20T18:44:41.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest (STARTTLS) prelude and then stalling, causing connections to remain open indefinitely, leading to a denial of service. This vulnerability is fixed in 3.6.8."
      }, {
        "lang" : "es",
        "value" : "Traefik es un proxy inverso HTTP y un balanceador de carga. Antes de la versión 3.6.8, existe una posible vulnerabilidad en Traefik al gestionar solicitudes STARTTLS. Un cliente no autenticado puede eludir el respondingTimeouts.readTimeout del punto de entrada de Traefik enviando el preámbulo de 8 bytes de Postgres SSLRequest (STARTTLS) y luego estancándose, lo que provoca que las conexiones permanezcan abiertas indefinidamente, lo que lleva a una denegación de servicio. Esta vulnerabilidad se corrige en la versión 3.6.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.8",
            "matchCriteriaId" : "05ADF4F6-5356-4E37-9CBB-0C5058E249D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/commit/31e566e9f1d7888ccb6fbc18bfed427203c35678",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v3.6.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-89p3-4642-cr2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0619",
      "sourceIdentifier" : "product-security@silabs.com",
      "published" : "2026-02-12T21:16:02.500",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to trigger a denial of service. A hard reset is required to recover the device."
      }, {
        "lang" : "es",
        "value" : "Un bucle infinito alcanzable a través de un desbordamiento de enteros está presente en el SDK de Matter de Silicon Labs, lo que permite a un atacante desencadenar una denegación de servicio. Se requiere un reinicio forzado para recuperar el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "product-security@silabs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@silabs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.silabs.com/068Vm00000gUB2g",
        "source" : "product-security@silabs.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25996",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T21:16:02.820",
      "lastModified" : "2026-03-16T18:02:26.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences. Therefore, a maliciously forged – partially or completely – event payload, coming from an observed container, might inject the escape sequences into the terminal of ig operators, with various effects. The columns output mode is the default when running ig run interactively."
      }, {
        "lang" : "es",
        "value" : "Inspektor Gadget es un conjunto de herramientas y framework para la recopilación de datos y la inspección del sistema en clústeres de Kubernetes y hosts Linux utilizando eBPF. Los campos de cadena de los eventos eBPF en modo de salida de columnas se renderizan en la terminal sin ninguna sanitización de caracteres de control o secuencias de escape ANSI. Por lo tanto, una carga útil de evento forjada maliciosamente – parcial o completamente –, proveniente de un contenedor observado, podría inyectar las secuencias de escape en la terminal de los operadores de ig, con diversos efectos. El modo de salida de columnas es el predeterminado al ejecutar ig run de forma interactiva."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:inspektor_gadget:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.49.1",
            "matchCriteriaId" : "EC39D2AC-694C-4CD7-B0F4-B985092E1D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/inspektor-gadget/inspektor-gadget/commit/d59cf72971f9b7110d9c179dc8ae8b7a11dbd6d2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/inspektor-gadget/inspektor-gadget/releases/tag/v0.49.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/inspektor-gadget/inspektor-gadget/security/advisories/GHSA-34r5-6j7w-235f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26000",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T21:16:02.990",
      "lastModified" : "2026-02-19T19:22:44.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious page. This vulnerability is fixed in 17.9.0, 17.4.6, and 16.10.13."
      }, {
        "lang" : "es",
        "value" : "La Plataforma XWiki es una plataforma wiki genérica que ofrece servicios en tiempo de ejecución para aplicaciones construidas sobre ella. Antes de las versiones 17.9.0, 17.4.6 y 16.10.13, era posible, usando comentarios, inyectar CSS que transformaría toda la wiki en un área de enlaces que llevaría a una página maliciosa. Esta vulnerabilidad está corregida en las versiones 17.9.0, 17.4.6 y 16.10.13."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.10.13",
            "matchCriteriaId" : "BD27F4BE-5B60-4344-AABC-5B0ACB0979B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.4.6",
            "matchCriteriaId" : "B4E1AB52-A76A-42E2-B103-B57336D534A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.9.0",
            "matchCriteriaId" : "7B71A850-0DFE-4298-BF53-2AF0D6A0DBC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/releases/tag/xwiki-platform-17.4.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-74rh-c5rh-88vg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26005",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T21:16:03.173",
      "lastModified" : "2026-02-18T14:59:54.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Play allows creating video entries that reference external video URLs without uploading the video files to the server. However, by specifying an internal network host in the video URL, an SSRF can be triggered, causing GET requests to be sent to internal servers. An attacker can exploit this to scan the internal network. Even a regular (non-privileged) user can carry out the attack."
      }, {
        "lang" : "es",
        "value" : "ClipBucket v5 es una plataforma de código abierto para compartir videos. Anterior a la versión 5.5.3 - #45, en Clip Bucket V5, la función 'Remote Play' permite crear entradas de video que referencian URLs de videos externos sin subir los archivos de video al servidor. Sin embargo, al especificar un host de red interno en la URL del video, se puede activar un SSRF, lo que provoca que se envíen solicitudes GET a servidores internos. Un atacante puede explotar esto para escanear la red interna. Incluso un usuario regular (no privilegiado) puede llevar a cabo el ataque."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3",
            "versionEndExcluding" : "5.5.3-45",
            "matchCriteriaId" : "192CAFEB-B38F-4FE1-8C93-33AEF06A2502"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/commit/a9e0f2322fb37501dfd4f44079fc7826a132503a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-69xj-2pq3-5r4v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26011",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T21:16:03.340",
      "lastModified" : "2026-02-23T17:00:05.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulnerability exists in Nav2 AMCL's particle filter clustering logic. By publishing a single crafted geometry_msgs/PoseWithCovarianceStamped message with extreme covariance values to the /initialpose topic, an unauthenticated attacker on the same ROS 2 DDS domain can trigger a negative index write (set->clusters[-1]) into heap memory preceding the allocated buffer. In Release builds, the sole boundary check (assert) is compiled out, leaving zero runtime protection. This primitive allows controlled corruption of the heap chunk metadata(at least the size of the heap chunk where the set->clusters is in is controllable by the attacker), potentially leading to further exploitation. At minimum, it provides a reliable single-packet denial of service that kills localization and halts all navigation."
      }, {
        "lang" : "es",
        "value" : "navigation2 es un Framework y Sistema de Navegación de ROS 2. En 1.3.11 y versiones anteriores, existe una vulnerabilidad crítica de escritura fuera de límites en el heap en la lógica de agrupamiento del filtro de partículas de Nav2 AMCL. Al publicar un único mensaje manipulado geometry_msgs/PoseWithCovarianceStamped con valores de covarianza extremos en el tema /initialpose, un atacante no autenticado en el mismo dominio DDS de ROS 2 puede desencadenar una escritura de índice negativo (set-&gt;clusters[-1]) en la memoria del heap que precede al búfer asignado. En las compilaciones de lanzamiento, la única comprobación de límites (assert) se elimina en la compilación, dejando cero protección en tiempo de ejecución. Esta primitiva permite la corrupción controlada de los metadatos del fragmento del heap (al menos el tamaño del fragmento del heap donde se encuentra set-&gt;clusters es controlable por el atacante), lo que podría conducir a una explotación posterior. Como mínimo, proporciona una denegación de servicio fiable de un solo paquete que detiene la localización y toda la navegación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennav:nav2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.11",
            "matchCriteriaId" : "2D42D969-E358-4720-94FB-BE2112F7F424"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ros-navigation/navigation2/commit/d09ea82477ce9234678a6febf6890235e0a7ce12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ros-navigation/navigation2/releases/tag/1.3.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ros-navigation/navigation2/security/advisories/GHSA-mgj5-g2p6-gc5x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ros-navigation/navigation2/security/advisories/GHSA-mgj5-g2p6-gc5x",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26020",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T21:16:03.500",
      "lastModified" : "2026-02-17T20:10:42.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.48, an authenticated user could achieve Remote Code Execution (RCE) on the backend server by embedding a disabled block inside a graph. The BlockInstallationBlock — a development tool capable of writing and importing arbitrary Python code — was marked disabled=True, but graph validation did not enforce this flag. This allowed any authenticated user to bypass the restriction by including the block as a node in a graph, rather than calling the block's execution endpoint directly (which did enforce the flag). This vulnerability is fixed in 0.6.48."
      }, {
        "lang" : "es",
        "value" : "AutoGPT es una plataforma que permite a los usuarios crear, desplegar y gestionar agentes de inteligencia artificial continuos que automatizan flujos de trabajo complejos. Antes de la versión 0.6.48, un usuario autenticado podría lograr Ejecución Remota de Código (RCE) en el servidor de backend al incrustar un bloque deshabilitado dentro de un grafo. El BlockInstallationBlock — una herramienta de desarrollo capaz de escribir e importar código Python arbitrario — estaba marcado como disabled=True, pero la validación del grafo no aplicaba esta bandera. Esto permitía a cualquier usuario autenticado eludir la restricción al incluir el bloque como un nodo en un grafo, en lugar de llamar directamente al punto final de ejecución del bloque (que sí aplicaba la bandera). Esta vulnerabilidad está corregida en la versión 0.6.48."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agpt:autogpt_platform:*:beta:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.48",
            "matchCriteriaId" : "FD36801A-02E5-4B2A-B721-2105F207C9A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/commit/062fe1aa709217136b896c8b950e0f04435afb32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-4crw-9p35-9x54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1358",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-12T22:16:04.213",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Airleader Master versions 6.381 and prior allow for file uploads without\n restriction to multiple webpages running maximum privileges. This could\n allow an unauthenticated user to potentially obtain remote code \nexecution on the server."
      }, {
        "lang" : "es",
        "value" : "Airleader Master versiones 6.381 y anteriores permiten la carga de archivos sin restricción a múltiples páginas web ejecutándose con privilegios máximos. Esto podría permitir a un usuario no autenticado obtener potencialmente la ejecución remota de código en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://airleader.us/contact/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-10.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-10",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-044.txt",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-12T22:16:05.493",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device(). NOTE: a third party reports \"exploitation may not be feasible under normal conditions and may depend on specific implementation details within resolve_device.\""
      }, {
        "lang" : "es",
        "value" : "grub-btrfs hasta el 31-01-2026 (en Arch Linux y distribuciones derivadas) permite la inyección de comandos del sistema operativo en initramfs porque no sanea el parámetro $root de resolve_device()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://archlinux.org/packages/extra/any/grub-btrfs/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Antynea/grub-btrfs/tree/master",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/cardosource/CVE-2026-25828",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26055",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:06.190",
      "lastModified" : "2026-04-01T20:57:00.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send AdmissionReview requests to the webhook, bypassing Kubernetes API Server authentication. This enables attackers to trigger WASM module execution in the ATC controller context without proper authorization."
      }, {
        "lang" : "es",
        "value" : "Yoke es un desplegador de paquetes de infraestructura como código (IaC) inspirado en Helm. En la versión 0.19.0 y anteriores, existe una vulnerabilidad en el componente Air Traffic Controller (ATC) de Yoke. Los puntos finales del webhook de ATC carecen de mecanismos de autenticación adecuados, lo que permite que cualquier pod dentro de la red del clúster envíe directamente solicitudes de AdmissionReview al webhook, eludiendo la autenticación del Kubernetes API Server. Esto permite a los atacantes activar la ejecución de módulos WASM en el contexto del controlador ATC sin la autorización adecuada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokecd:yoke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.19.0",
            "matchCriteriaId" : "02DD229D-6652-4DF6-9FC9-999E84AE5AD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yokecd/yoke/security/advisories/GHSA-965m-v4cc-6334",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26056",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:06.347",
      "lastModified" : "2026-04-01T20:53:39.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a malicious URL through the overrides.yoke.cd/flight annotation. The ATC controller downloads and executes the WASM module without proper URL validation, enabling attackers to create arbitrary Kubernetes resources or potentially escalate privileges to cluster-admin level."
      }, {
        "lang" : "es",
        "value" : "Yoke es un desplegador de paquetes de infraestructura como código (IaC) inspirado en Helm. En la versión 0.19.0 y anteriores, existe una vulnerabilidad en el componente Air Traffic Controller (ATC) de Yoke. Permite a los usuarios con permisos de creación/actualización de CR ejecutar código WASM arbitrario en el contexto del controlador ATC inyectando una URL maliciosa a través de la anotación overrides.yoke.cd/flight. El controlador ATC descarga y ejecuta el módulo WASM sin una validación de URL adecuada, lo que permite a los atacantes crear recursos arbitrarios de Kubernetes o potencialmente escalar privilegios a nivel de cluster-admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokecd:yoke:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.19.0",
            "matchCriteriaId" : "02DD229D-6652-4DF6-9FC9-999E84AE5AD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yokecd/yoke/security/advisories/GHSA-wj8p-jj64-h7ff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26068",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:06.507",
      "lastModified" : "2026-02-25T15:47:26.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code execution on the operator host. This vulnerability is fixed in 3.21.1."
      }, {
        "lang" : "es",
        "value" : "emp3r0r es un C2 centrado en el sigilo, diseñado por usuarios de Linux para entornos Linux. Antes de la versión 3.21.1, los metadatos no confiables del agente (Transport, Hostname) eran aceptados durante el registro (check-in) y posteriormente interpolados en cadenas de comandos de shell de tmux ejecutadas a través de /bin/sh -c. Esto permite la inyección de comandos y la ejecución remota de código en el host del operador. Esta vulnerabilidad está corregida en la versión 3.21.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jm33-m0:emp3r0r:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.1",
            "matchCriteriaId" : "D36AFE21-D613-40DC-A48C-81A01F786437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jm33-m0/emp3r0r/commit/0cd64e4a26e7839a9a54bca3d756a665fcb7fda0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jm33-m0/emp3r0r/releases/tag/v3.21.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/jm33-m0/emp3r0r/security/advisories/GHSA-h5p4-4xp4-vjpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26069",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:06.670",
      "lastModified" : "2026-02-23T16:58:36.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the exporter exposed the configured Readarr API key as the alias metric label value. Users were affected only if all of the following conditions are met, Readarr scraping feature was enabled and no alias configured, the exporter’s /metrics endpoint was accessible to external or unauthorized users, and the Readarr instance is externally accessible. If the /metrics endpoint was publicly accessible, the Readarr API key could have been disclosed via exported metrics data. This vulnerability is fixed in 3.0.2."
      }, {
        "lang" : "es",
        "value" : "Scraparr es un Prometheus Exporter para varios componentes de la *arr Suite. Desde la 3.0.0-beta hasta antes de la 3.0.2, cuando la integración de Readarr estaba habilitada, el exportador exponía la clave API de Readarr configurada como el valor de la etiqueta de métrica de alias. Los usuarios se veían afectados solo si se cumplían todas las siguientes condiciones, la función de scraping de Readarr estaba habilitada y no se había configurado ningún alias, el endpoint /metrics del exportador era accesible para usuarios externos o no autorizados, y la instancia de Readarr es accesible externamente. Si el endpoint /metrics era públicamente accesible, la clave API de Readarr podría haber sido divulgada a través de los datos de métricas exportados. Esta vulnerabilidad está corregida en la 3.0.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thecfu:scraparr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "D37F8E09-6959-4D8C-8453-229481CFC19F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thecfu/scraparr/commit/194116bb8fb0b6ea26421b3e7a7b326973f56cd0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/thecfu/scraparr/releases/tag/v3.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/thecfu/scraparr/security/advisories/GHSA-hx24-222f-w5cj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26075",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:06.817",
      "lastModified" : "2026-02-23T16:52:24.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisition requests from the server, there are certain security issues. In addition to implementing internal network isolation in the deployment environment, this optimization has added stricter internal network address detection. This vulnerability is fixed in 4.14.7."
      }, {
        "lang" : "es",
        "value" : "FastGPT es una plataforma de creación de Agentes de IA. Debido a que los nodos de adquisición de páginas web de FastGPT, los nodos HTTP, etc., necesitan iniciar solicitudes de adquisición de datos desde el servidor, existen ciertos problemas de seguridad. Además de implementar el aislamiento de red interno en el entorno de despliegue, esta optimización ha añadido una detección más estricta de direcciones de red internas. Esta vulnerabilidad se corrige en 4.14.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastgpt:fastgpt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.7",
            "matchCriteriaId" : "4B82EB8E-E295-4AC5-B171-838B7FB3A5F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/labring/FastGPT/releases/tag/v4.14.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/labring/FastGPT/security/advisories/GHSA-g345-7pqp-c395",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26076",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:06.960",
      "lastModified" : "2026-02-23T15:51:55.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases (2-4 times above normal) in cpu usage. When having NTS enabled on an ntpd-rs server, an attacker can create malformed NTS packets that take significantly more effort for the server to respond to by requesting a large number of cookies. This can lead to degraded server performance even when a server could otherwise handle the load. This vulnerability is fixed in 1.7.1."
      }, {
        "lang" : "es",
        "value" : "ntpd-rs es una implementación completa del Protocolo de Tiempo de Red. Antes de la versión 1.7.1, un atacante puede inducir remotamente aumentos moderados (2-4 veces por encima de lo normal) en el uso de la CPU. Cuando NTS está habilitado en un servidor ntpd-rs, un atacante puede crear paquetes NTS malformados que requieren un esfuerzo significativamente mayor para que el servidor responda al solicitar un gran número de cookies. Esto puede llevar a una degradación del rendimiento del servidor incluso cuando un servidor podría manejar la carga de otra manera. Esta vulnerabilidad está corregida en la versión 1.7.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tweedegolf:ntpd-rs:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "2C768535-5DA1-435E-819F-F942E3D20460"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pendulum-project/ntpd-rs/commit/fa73af14d17b666b1142b9fee3ba22c18a841d24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pendulum-project/ntpd-rs/releases/tag/v1.7.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-c7j7-rmvr-fjmv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26185",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T22:16:07.100",
      "lastModified" : "2026-02-20T21:09:03.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enumeration vulnerability exists in the password reset functionality. When an invalid reset_url parameter is provided, the response time differs by approximately 500ms between existing and non-existing users, enabling reliable user enumeration. This vulnerability is fixed in 11.14.1."
      }, {
        "lang" : "es",
        "value" : "Directus es una API en tiempo real y un panel de control de aplicaciones para gestionar contenido de bases de datos SQL. Antes de 11.14.1, existe una vulnerabilidad de enumeración de usuarios basada en tiempo en la funcionalidad de restablecimiento de contraseña. Cuando se proporciona un parámetro reset_url no válido, el tiempo de respuesta difiere en aproximadamente 500 ms entre usuarios existentes y no existentes, lo que permite una enumeración de usuarios fiable. Esta vulnerabilidad se ha corregido en 11.14.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "11.15.0",
            "matchCriteriaId" : "FF40998A-BAB1-4E2B-8DBA-3521985A8F04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/directus/directus/commit/e69aa7a5248c6e3e822cb1ac354dee295df90b2a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/pull/26485",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/directus/directus/releases/tag/v11.14.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-jr94-gj3h-c8rf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26224",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T22:16:07.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege escalation vulnerability. A root-executed diagnostic script creates and writes files in /tmp without enforcing secure directory handling, introducing a time-of-check to time-of-use (TOCTOU) race condition. A local unprivileged user can exploit a symlink-based race condition to cause arbitrary file writes to privileged system locations, resulting in privilege escalation to root."
      }, {
        "lang" : "es",
        "value" : "Intego Log Reporter, una utilidad de diagnóstico de macOS incluida con los productos de seguridad de Intego que recopila registros del sistema y de aplicaciones para análisis de soporte, contiene una vulnerabilidad de escalada de privilegios local. Un script de diagnóstico ejecutado como root crea y escribe archivos en /tmp sin aplicar un manejo seguro del directorio, introduciendo una condición de carrera de tiempo de verificación a tiempo de uso (TOCTOU). Un usuario local sin privilegios puede explotar una condición de carrera basada en symlink para causar escrituras de archivos arbitrarias en ubicaciones privilegiadas del sistema, lo que resulta en una escalada de privilegios a root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.quarkslab.com/intego_lpe_macos_1.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://blog.quarkslab.com/resources/2026-02-10_intego_1/40945709530779-How-to-Use-the-Intego-Log-Reporter.pdf",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.intego.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/intego-log-reporter-toctou-local-privilege-escalation",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26225",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-12T22:16:07.477",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root."
      }, {
        "lang" : "es",
        "value" : "Intego Personal Backup, una utilidad de copia de seguridad de macOS que permite a los usuarios crear copias de seguridad programadas y clones de sistema arrancables, contiene una vulnerabilidad de escalada de privilegios local. Las definiciones de tareas de copia de seguridad se almacenan en una ubicación escribible por usuarios no privilegiados mientras se procesan con privilegios elevados. Al crear un archivo de tarea serializado malicioso, un atacante local puede desencadenar escrituras de archivos arbitrarias en ubicaciones sensibles del sistema, lo que lleva a la escalada de privilegios a root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.quarkslab.com/intego_lpe_macos_1.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://integosupport.zendesk.com/hc/en-us/articles/40945636077467-Personal-Backup-X9-Release-Notes",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.intego.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.intego.com/bootable-mac-backups",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/intego-personal-backup-task-file-privilege-escalation",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26188",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-12T23:16:09.760",
      "lastModified" : "2026-02-20T21:08:10.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject arbitrary HTML/JS into the Craft Control Panel (CP) builder and integrations views. User-controlled form labels and integration metadata are rendered with dangerouslySetInnerHTML without sanitization, leading to stored XSS that executes when any admin views the builder/integration screens. This vulnerability is fixed in 5.14.7."
      }, {
        "lang" : "es",
        "value" : "El plugin Solspace Freeform para Craft CMS 5.x es una herramienta de creación de formularios súper flexible. Un usuario autenticado y con bajos privilegios (capaz de crear/editar formularios) puede inyectar HTML/JS arbitrario en las vistas del constructor y de integraciones del Panel de Control (CP) de Craft. Las etiquetas de formulario controladas por el usuario y los metadatos de integración se renderizan con dangerouslySetInnerHTML sin sanitización, lo que lleva a un XSS almacenado que se ejecuta cuando cualquier administrador ve las pantallas del constructor/integración. Esta vulnerabilidad está corregida en la versión 5.14.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solspace:freeform:*:*:*:*:*:craft_cms:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.14.7",
            "matchCriteriaId" : "36F61891-6F61-4D3D-BACF-D1835425BEF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/solspace/craft-freeform/commit/b9adad6cdf1eba5400aae8b1ae39bd7d4d33af5e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/solspace/craft-freeform/releases/tag/v5.14.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/solspace/craft-freeform/security/advisories/GHSA-jp3q-wwp3-pwv9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1721",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-02-13T03:15:52.467",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Summary\n\nA Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handler. The `error_description` query parameter was directly interpolated into an HTML script tag without proper escaping, allowing attackers to execute arbitrary JavaScript in the context of the victim's session.\n\n\n\n\nRoot cause\n\nThe OAuth callback handler in `site/ai-playground/src/server.ts` directly interpolated the `authError` value, sourced from the `error_description` query parameter,  into an inline `<script>` tag.\n\n\nImpact\n\nAn attacker could craft a malicious link that, when clicked by a victim, would:\n\n  *  Steal user chat message history - Access all LLM interactions stored in the user's session.\n\n\n  *  Access connected MCP Servers - Interact with any MCP servers connected to the victim's session (public or authenticated/private), potentially allowing the attacker to perform actions on the victim's behalf\n\n\n\n\n\nMitigation:\n\n  *  PR:  https://github.com/cloudflare/agents/pull/841 https://github.com/cloudflare/agents/pull/841 \n\n\n\n\n  *  Agents-sdk users should upgrade to agents@0.3.10\n\n\n\n\n  *  Developers using configureOAuthCallback with custom error handling in their own applications should ensure all user-controlled input is escaped before interpolation."
      }, {
        "lang" : "es",
        "value" : "Resumen\n\nUna vulnerabilidad de Cross-Site Scripting Reflejado (XSS) fue descubierta en el manejador de callback de OAuth del AI Playground. El parámetro de consulta `error_description` fue directamente interpolado en una etiqueta de script HTML sin el escape adecuado, permitiendo a los atacantes ejecutar JavaScript arbitrario en el contexto de la sesión de la víctima.\n\nCausa raíz\n\nEl manejador de callback de OAuth en `site/ai-playground/src/server.ts` interpoló directamente el valor `authError`, obtenido del parámetro de consulta `error_description`, en una etiqueta `"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/agents/pull/841",
        "source" : "cna@cloudflare.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25108",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-13T04:15:53.410",
      "lastModified" : "2026-02-24T21:38:18.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command."
      }, {
        "lang" : "es",
        "value" : "FileZen contiene una vulnerabilidad de inyección de comandos del sistema operativo. Cuando la opción de verificación de antivirus de FileZen está habilitada, un usuario autenticado puede enviar una solicitud HTTP especialmente diseñada para ejecutar un comando arbitrario del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-24",
      "cisaActionDue" : "2026-03-17",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Soliton Systems K.K FileZen OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soliton:filezen:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.1",
            "versionEndExcluding" : "5.0.11",
            "matchCriteriaId" : "4C8030A0-947B-4FFA-B406-FF1C1A9C8812"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN84622767/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.soliton.co.jp/support/2026/006657.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-25108",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26249",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:53.607",
      "lastModified" : "2026-02-13T04:15:53.607",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26250",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:53.690",
      "lastModified" : "2026-02-13T04:15:53.690",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26251",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:53.757",
      "lastModified" : "2026-02-13T04:15:53.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26252",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:53.817",
      "lastModified" : "2026-02-13T04:15:53.817",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26253",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:53.877",
      "lastModified" : "2026-02-13T04:15:53.877",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26254",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:53.940",
      "lastModified" : "2026-02-13T04:15:53.940",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26255",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:54.007",
      "lastModified" : "2026-02-13T04:15:54.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26256",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:54.073",
      "lastModified" : "2026-02-13T04:15:54.073",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26257",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-13T04:15:54.217",
      "lastModified" : "2026-02-13T04:15:54.217",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0872",
      "sourceIdentifier" : "psirt@thalesgroup.com",
      "published" : "2026-02-13T09:16:07.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation.This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Validación de Certificados Incorrecta en Thales SafeNet Agent for Windows Logon en Windows permite la Suplantación de Firma por Validación Incorrecta. Este problema afecta a SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@thalesgroup.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@thalesgroup.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.thalesgroup.com/csm?sys_kb_id=247fd4a42b4a7290061af3f5f291bff1&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=5ecb72c73b927610381ecfaf55e45a0b&sysparm_article=KB0030173",
        "source" : "psirt@thalesgroup.com"
      }, {
        "url" : "https://thalesdocs.com/sta/agents/wla-windows_logon/wla-preinstallation_passwordless/index.html",
        "source" : "psirt@thalesgroup.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20796",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-02-13T11:16:10.280",
      "lastModified" : "2026-02-23T15:53:11.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /common_teams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Mattermost 10.11.x &lt;= 10.11.9 no validan correctamente la membresía del canal en el momento de la recuperación de datos, lo que permite a un usuario desactivado conocer nombres de equipos a los que no debería tener acceso a través de una condición de carrera en el endpoint de la API /common_teams. ID de Aviso de Mattermost: MMSA-2025-00549"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.0",
            "versionEndExcluding" : "10.11.10",
            "matchCriteriaId" : "92B0F8BD-06A1-4B39-95C5-4FB5A195F1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22892",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-02-13T11:16:10.693",
      "lastModified" : "2026-02-18T21:34:16.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to via the /create-issue API endpoint by providing the post ID of an inaccessible post.. Mattermost Advisory ID: MMSA-2025-00550"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Mattermost 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 no validan los permisos de usuario al crear incidencias de Jira a partir de publicaciones de Mattermost, lo que permite a un atacante autenticado con acceso al plugin de Jira leer el contenido de las publicaciones y los archivos adjuntos de canales a los que no tienen acceso a través del endpoint de la API /create-issue proporcionando el ID de publicación de una publicación inaccesible. ID de aviso de Mattermost: MMSA-2025-00550"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.0",
            "versionEndExcluding" : "10.11.10",
            "matchCriteriaId" : "92B0F8BD-06A1-4B39-95C5-4FB5A195F1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.3",
            "matchCriteriaId" : "0910E4A8-6DBD-407F-B262-38E4DE9657D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.2",
            "matchCriteriaId" : "D98EAFB2-8055-4893-835B-30A99ED97892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2443",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-13T12:16:09.107",
      "lastModified" : "2026-03-23T20:16:25.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en libsoup, una librería HTTP ampliamente utilizada en sistemas basados en GNOME. Al procesar encabezados HTTP Range especialmente diseñados, la librería podría validar incorrectamente los rangos de bytes solicitados. En ciertas configuraciones de compilación, esto podría permitir a un atacante remoto acceder a porciones de la memoria del servidor más allá de la respuesta prevista. La explotación requiere una configuración vulnerable y acceso a un servidor que utilice el componente SoupServer incrustado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5BAC4F4-3ACD-4F4D-920C-F920FD2C5472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-2443",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2439671",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libsoup/-/issues/487",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1618",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2026-02-13T14:16:09.910",
      "lastModified" : "2026-03-02T13:38:12.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación usando una ruta o canal alternativo en Universal Software Inc. FlexCity/Kiosk permite la escalada de privilegios. Este problema afecta a FlexCity/Kiosk: desde 1.0 antes de 1.0.36."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uni-yaz:flexcity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.36",
            "matchCriteriaId" : "1622F35A-B519-4678-B1C5-43548BCA9A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-26-0065",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1619",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2026-02-13T14:16:10.067",
      "lastModified" : "2026-03-02T13:38:01.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización mediante clave controlada por el usuario en Universal Software Inc. FlexCity/Kiosk permite la explotación de identificadores de confianza. Este problema afecta a FlexCity/Kiosk: desde 1.0 antes de 1.0.36."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uni-yaz:flexcity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.0.36",
            "matchCriteriaId" : "1622F35A-B519-4678-B1C5-43548BCA9A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-26-0065",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23111",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-13T14:16:10.283",
      "lastModified" : "2026-04-03T14:16:23.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()\n\nnft_map_catchall_activate() has an inverted element activity check\ncompared to its non-catchall counterpart nft_mapelem_activate() and\ncompared to what is logically required.\n\nnft_map_catchall_activate() is called from the abort path to re-activate\ncatchall map elements that were deactivated during a failed transaction.\nIt should skip elements that are already active (they don't need\nre-activation) and process elements that are inactive (they need to be\nrestored). Instead, the current code does the opposite: it skips inactive\nelements and processes active ones.\n\nCompare the non-catchall activate callback, which is correct:\n\n  nft_mapelem_activate():\n    if (nft_set_elem_active(ext, iter->genmask))\n        return 0;   /* skip active, process inactive */\n\nWith the buggy catchall version:\n\n  nft_map_catchall_activate():\n    if (!nft_set_elem_active(ext, genmask))\n        continue;   /* skip inactive, process active */\n\nThe consequence is that when a DELSET operation is aborted,\nnft_setelem_data_activate() is never called for the catchall element.\nFor NFT_GOTO verdict elements, this means nft_data_hold() is never\ncalled to restore the chain->use reference count. Each abort cycle\npermanently decrements chain->use. Once chain->use reaches zero,\nDELCHAIN succeeds and frees the chain while catchall verdict elements\nstill reference it, resulting in a use-after-free.\n\nThis is exploitable for local privilege escalation from an unprivileged\nuser via user namespaces + nftables on distributions that enable\nCONFIG_USER_NS and CONFIG_NF_TABLES.\n\nFix by removing the negation so the check matches nft_mapelem_activate():\nskip active elements, process inactive ones."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetfilter: nf_tables: corrección de la comprobación genmask invertida en nft_map_catchall_activate()\n\nnft_map_catchall_activate() tiene una comprobación de actividad de elemento invertida en comparación con su contraparte no-catchall nft_mapelem_activate() y en comparación con lo que se requiere lógicamente.\n\nnft_map_catchall_activate() es llamada desde la ruta de aborto para reactivar elementos de mapa catchall que fueron desactivados durante una transacción fallida. Debería omitir los elementos que ya están activos (no necesitan reactivación) y procesar los elementos que están inactivos (necesitan ser restaurados). En cambio, el código actual hace lo contrario: omite los elementos inactivos y procesa los activos.\n\nCompare la devolución de llamada de activación no-catchall, que es correcta:\n\n  nft_mapelem_activate():\n    if (nft_set_elem_active(ext, iter-&gt;genmask))\n        return 0;   /* omitir activos, procesar inactivos */\n\nCon la versión catchall con errores:\n\n  nft_map_catchall_activate():\n    if (!nft_set_elem_active(ext, genmask))\n        continue;   /* omitir inactivos, procesar activos */\n\nLa consecuencia es que cuando una operación DELSET es abortada, nft_setelem_data_activate() nunca es llamada para el elemento catchall. Para los elementos de veredicto NFT_GOTO, esto significa que nft_data_hold() nunca es llamada para restaurar el contador de referencias chain-&gt;use. Cada ciclo de aborto decrementa permanentemente chain-&gt;use. Una vez que chain-&gt;use llega a cero, DELCHAIN tiene éxito y libera la cadena mientras que los elementos de veredicto catchall aún la referencian, resultando en un uso después de liberación.\n\nEsto es explotable para escalada de privilegios local desde un usuario sin privilegios a través de espacios de nombres de usuario + nftables en distribuciones que habilitan CONFIG_USER_NS y CONFIG_NF_TABLES.\n\nCorrección eliminando la negación para que la comprobación coincida con nft_mapelem_activate(): omitir elementos activos, procesar inactivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.19.316",
            "versionEndExcluding" : "4.20",
            "matchCriteriaId" : "76EC9BF9-9775-4D90-B594-4C2AB71E1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.262",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "5CE7F771-8144-4AEC-B6E3-5F4830BD8EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.188",
            "versionEndExcluding" : "5.11",
            "matchCriteriaId" : "6D42E8C7-CD33-432A-AC09-DC524C88ECE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.121",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "2EA37A2D-57E0-4A43-A252-503102E540FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.36",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "1D546C31-A384-495B-8C0A-A791FD646888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.10",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "3E002324-2B5E-4373-A29E-1D5D0FC97F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.1",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "08EA1902-1FF1-4739-8B3E-5340B3E41010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0B0BF6-0EEF-4FAD-927D-7A0DD77BEE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1444ff890b4653add12f734ffeffc173d42862dd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/42c574c1504aa089a0a142e4c13859327570473d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8b68a45f9722f2babe9e7bad00aa74638addf081",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8c760ba4e36c750379d13569f23f5a6e185333f5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b9b6573421de51829f7ec1cce76d85f5f6fbbd7f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f41c5d151078c5348271ffaf8e7410d96f2d82f8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23112",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-13T14:16:10.403",
      "lastModified" : "2026-05-04T09:16:00.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec\n\nnvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU\nlength or offset exceeds sg_cnt and then use bogus sg->length/offset\nvalues, leading to _copy_to_iter() GPF/KASAN. Guard sg_idx, remaining\nentries, and sg->length/offset before building the bvec."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnvmet-tcp: añadir comprobaciones de límites en nvmet_tcp_build_pdu_iovec\n\nnvmet_tcp_build_pdu_iovec() podría exceder cmd-&gt;req.sg cuando una longitud o desplazamiento de PDU excede sg_cnt y luego usar valores sg-&gt;length/offset erróneos, lo que lleva a _copy_to_iter() GPF/KASAN. Proteger sg_idx, las entradas restantes y sg-&gt;length/offset antes de construir el bvec."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.10.250",
            "matchCriteriaId" : "F3FE195C-31F6-4C73-A636-498693B92336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "D16F6370-B70F-471C-8363-3A17B0BB1DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0b9981751be14b59b4473383c731c833738aebdb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/1385be357e8acd09b36e026567f3a9d5c61139de",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/19672ae68d52ff75347ebe2420dde1b07adca09f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/42afe8ed8ad2de9c19457156244ef3e1eca94b5d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/52a0a98549344ca20ad81a4176d68d28e3c05a5c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ab200d71553bdcf4de554a5985b05b2dd606bc57",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dca1a6ba0da9f472ef040525fab10fd9956db59f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1578",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2026-02-13T15:15:57.853",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "La aplicación HP para Android es potencialmente vulnerable a cross-site scripting (XSS) al usar una versión desactualizada de la aplicación a través de dispositivos móviles. HP está lanzando actualizaciones para mitigar estas vulnerabilidades potenciales."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "hp-security-alert@hp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "hp-security-alert@hp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_14083522-14083606-16/hpsbgn04082",
        "source" : "hp-security-alert@hp.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25531",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T15:15:57.990",
      "lastModified" : "2026-02-13T20:43:30.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into projects they cannot access. This vulnerability is fixed in 1.2.50."
      }, {
        "lang" : "es",
        "value" : "Kanboard es un software de gestión de proyectos enfocado en la metodología Kanban. Antes de 1.2.50, la corrección para CVE-2023-33968 es incompleta. El endpoint TaskCreationController::duplicateProjects() no valida los permisos de usuario para los proyectos de destino, permitiendo a los usuarios autenticados duplicar tareas en proyectos a los que no pueden acceder. Esta vulnerabilidad está corregida en 1.2.50."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.50",
            "matchCriteriaId" : "C1B88FC0-3CFD-4A8C-A9E4-9AAF4F1D51EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kanboard/kanboard/commit/df7b7a21ee071f36466d8b38e40d0b0b8b8d394d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/releases/tag/v1.2.50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kanboard/kanboard/security/advisories/GHSA-vrm3-3337-whp9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26221",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-13T16:16:11.683",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service can send crafted .NET Remoting requests to default HTTP channel endpoints on TCP/8900 (e.g., TimerServiceAPI.rem and TimerServiceEvents.rem for Workflow) to trigger unsafe object unmarshalling, enabling arbitrary file read/write. By writing attacker-controlled content into web-accessible locations or chaining with other OnBase features, this can lead to remote code execution. The same primitive can be abused by supplying a UNC path to coerce outbound NTLM authentication (SMB coercion) to an attacker-controlled host."
      }, {
        "lang" : "es",
        "value" : "Hyland OnBase contiene una exposición de .NET Remoting sin autenticación en el Servicio de Temporizador de Flujo de Trabajo de OnBase (Hyland.Core.Workflow.NTService.exe). Un atacante que puede alcanzar el servicio puede enviar solicitudes de .NET Remoting manipuladas a los puntos finales de canal HTTP predeterminados en TCP/8900 (p. ej., TimerServiceAPI.rem y TimerServiceEvents.rem para Flujo de Trabajo) para activar la deserialización insegura de objetos, lo que permite la lectura/escritura arbitraria de archivos. Al escribir contenido controlado por el atacante en ubicaciones accesibles por la web o encadenando con otras características de OnBase, esto puede llevar a la ejecución remota de código. La misma primitiva puede ser abusada al proporcionar una ruta UNC para forzar la autenticación NTLM saliente (coerción SMB) a un host controlado por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.hyland.com/resources/bulletins-and-notices/223223-security-update-onbase-workflow-timer-service-bulletin-ob2025-03",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.hyland.com/en/solutions/products/onbase",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/hyland-onbase-timer-services-unauthenticated-net-remoting-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26226",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-13T17:16:14.073",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams. User-controlled values from Mermaid style and classDef directives are interpolated into SVG attribute values without proper escaping, allowing crafted input to break out of an attribute context and inject arbitrary SVG elements/attributes into the rendered output. When the generated SVG is embedded in a web page, this can result in script execution in the context of the embedding origin."
      }, {
        "lang" : "es",
        "value" : "Las versiones de beautiful-mermaid anteriores a la 0.1.3 contienen un problema de inyección de atributos SVG que puede llevar a cross-site scripting (XSS) al renderizar diagramas de Mermaid controlados por el atacante. Los valores controlados por el usuario de las directivas de estilo y classDef de Mermaid se interpolan en los valores de los atributos SVG sin un escape adecuado, permitiendo que una entrada manipulada escape de un contexto de atributo e inyecte elementos/atributos SVG arbitrarios en la salida renderizada. Cuando el SVG generado se incrusta en una página web, esto puede resultar en la ejecución de scripts en el contexto del origen de incrustación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lukilabs/beautiful-mermaid/pull/8",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/lukilabs/beautiful-mermaid/releases/tag/v0.1.3",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://neo.projectdiscovery.io/share/cec71dc7-a8eb-417e-b8b4-666644796c1e",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/beautiful-mermaid-svg-attribute-injection",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26268",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T17:16:14.227",
      "lastModified" : "2026-02-18T17:59:35.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which may cause out-of-sandbox RCE next time they are triggered. No user interaction was required as Git executes these commands automatically. Fixed in version 2.5."
      }, {
        "lang" : "es",
        "value" : "Cursor es un editor de código diseñado para programar con IA. El escape de la sandbox mediante la escritura de la configuración .git era posible en versiones anteriores a la 2.5. Un agente malicioso (es decir, inyección de prompt) podría escribir en configuraciones .git protegidas de forma inadecuada, incluyendo los git hooks, lo que podría causar RCE fuera de la sandbox la próxima vez que se activen. No se requería interacción del usuario, ya que Git ejecuta estos comandos automáticamente. Corregido en la versión 2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5",
            "matchCriteriaId" : "1D4650BA-96CA-44D8-B3E5-B69D13EF7D1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cursor/cursor/security/advisories/GHSA-8pcm-8jpx-hv8r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2026",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-02-13T17:16:14.383",
      "lastModified" : "2026-02-24T20:26:42.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad donde permisos de archivo débiles en el directorio del Agente Nessus en hosts Windows podrían permitir acceso no autorizado, lo que podría permitir ataques de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.4",
            "matchCriteriaId" : "40C13B04-7C39-4F68-B415-5DC9A037B49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndExcluding" : "11.1.2",
            "matchCriteriaId" : "BCB0FDAF-4DA1-4C48-8179-AF1C6FF7007E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2026-05",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21870",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T18:16:19.783",
      "lastModified" : "2026-02-18T18:49:07.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. In 1.4.2, 1.5.0.rc2, and earlier, an off-by-one stack-based buffer overflow in the ubasic interpreter causes a crash (SIGABRT) when processing string literals longer than the buffer limit. The tokenizer_string function in src/bacnet/basic/program/ubasic/tokenizer.c incorrectly handles null termination for maximum-length strings. It writes a null byte to dest[40] when the buffer size is only 40 (indices 0-39), triggering a stack overflow."
      }, {
        "lang" : "es",
        "value" : "La librería de la pila de protocolo BACnet proporciona servicios de comunicación de capa de aplicación, capa de red y capa de acceso al medio (MAC) de BACnet. En las versiones 1.4.2, 1.5.0.rc2 y anteriores, un desbordamiento de búfer basado en pila por un byte en el intérprete ubasic provoca un fallo (SIGABRT) al procesar literales de cadena más largos que el límite del búfer. La función tokenizer_string en src/bacnet/basic/program/ubasic/tokenizer.c maneja incorrectamente la terminación nula para cadenas de longitud máxima. Escribe un byte nulo en dest[40] cuando el tamaño del búfer es solo 40 (índices 0-39), desencadenando un desbordamiento de pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "3BF2BFCC-54CE-412E-947A-B5C834161829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B47182E-6B7F-4C53-904A-EB37C9C0A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF491863-1A31-4A23-A6AC-DF7545FCAA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/commit/4e1176394a5ae50d2fd0b5790d9bff806dc08465",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/pull/1196",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-pc83-wp6w-93mx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21878",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:28.650",
      "lastModified" : "2026-02-18T18:49:16.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary directories. This affects apps/readfile/main.c and ports/posix/bacfile-posix.c. This vulnerability is fixed in 1.5.0.rc3."
      }, {
        "lang" : "es",
        "value" : "BACnet Stack es una librería C de pila de protocolos BACnet de código abierto para sistemas embebidos. Antes de la versión 1.5.0.rc3, se ha descubierto una vulnerabilidad en la funcionalidad de escritura de archivos de BACnet Stack donde no hay validación de las rutas de archivo proporcionadas por el usuario, lo que permite a los atacantes escribir archivos en directorios arbitrarios. Esto afecta a apps/readfile/main.c y ports/posix/bacfile-posix.c. Esta vulnerabilidad está corregida en la versión 1.5.0.rc3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B47182E-6B7F-4C53-904A-EB37C9C0A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF491863-1A31-4A23-A6AC-DF7545FCAA48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/commit/c5dc00a77b4bc2550befa67a930b333e299c18f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-p8rx-c26w-545j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25964",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:28.810",
      "lastModified" : "2026-02-17T16:07:02.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a Path Traversal vulnerability in the RecipeImport workflow of Tandoor Recipes allows authenticated users with import permissions to read arbitrary files on the server. This vulnerability stems from a lack of input validation in the file_path parameter and insufficient checks in the Local storage backend, enabling an attacker to bypass storage directory restrictions and access sensitive system files (e.g., /etc/passwd) or application configuration files (e.g., settings.py), potentially leading to full system compromise. This vulnerability is fixed in 2.5.1."
      }, {
        "lang" : "es",
        "value" : "Tandoor Recipes es una aplicación para gestionar recetas, planificar comidas y crear listas de la compra. Anteriormente a la 2.5.1, una vulnerabilidad de salto de ruta en el flujo de trabajo RecipeImport de Tandoor Recipes permite a usuarios autenticados con permisos de importación leer archivos arbitrarios en el servidor. Esta vulnerabilidad se debe a una falta de validación de entrada en el parámetro file_path y a comprobaciones insuficientes en el backend de almacenamiento local, lo que permite a un atacante eludir las restricciones del directorio de almacenamiento y acceder a archivos sensibles del sistema (p. ej., / etc/ passwd) o a archivos de configuración de la aplicación (p. ej., settings.py), lo que podría llevar a un compromiso total del sistema. Esta vulnerabilidad se ha corregido en la versión 2.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tandoor:recipes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "21860AB5-9F47-4015-958B-26FE480AE53B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TandoorRecipes/recipes/commit/f7f3524609451ab0b5a4fd760ad0af147d8ed794",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TandoorRecipes/recipes/releases/tag/2.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-6485-jr28-52xx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25991",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:28.953",
      "lastModified" : "2026-02-17T16:10:27.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Request Forgery (SSRF) vulnerability in the Cookmate recipe import feature of Tandoor Recipes. The application fails to validate the destination URL after following HTTP redirects, allowing any authenticated user (including standard users without administrative privileges) to force the server to connect to arbitrary internal or external resources. The vulnerability lies in cookbook/integration/cookmate.py, within the Cookmate integration class. This vulnerability can be leveraged to scan internal network ports, access cloud instance metadata (e.g., AWS/GCP Metadata Service), or disclose the server's real IP address. This vulnerability is fixed in 2.5.1."
      }, {
        "lang" : "es",
        "value" : "Tandoor Recipes es una aplicación para gestionar recetas, planificar comidas y crear listas de la compra. Antes de la versión 2.5.1, existe una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) ciega en la función de importación de recetas de Cookmate de Tandoor Recipes. La aplicación no valida la URL de destino después de seguir redirecciones HTTP, permitiendo a cualquier usuario autenticado (incluidos usuarios estándar sin privilegios administrativos) forzar al servidor a conectarse a recursos internos o externos arbitrarios. La vulnerabilidad reside en cookbook/integration/cookmate.py, dentro de la clase de integración de Cookmate. Esta vulnerabilidad puede ser explotada para escanear puertos de red internos, acceder a metadatos de instancias en la nube (por ejemplo, Servicio de Metadatos de AWS/GCP) o revelar la dirección IP real del servidor. Esta vulnerabilidad está corregida en la versión 2.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tandoor:recipes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "21860AB5-9F47-4015-958B-26FE480AE53B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TandoorRecipes/recipes/commit/fdf22c5e745740db1fec29d6b4bd3df5d340e6ab",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TandoorRecipes/recipes/releases/tag/2.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-j6xg-85mh-qqf7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26187",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:29.100",
      "lastModified" : "2026-02-18T21:32:15.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local block adapter (pkg/block/local/adapter.go) allows authenticated users to read and write files outside their designated storage boundaries. The verifyRelPath function used strings.HasPrefix() to verify that requested paths fall within the configured storage directory. This check was insufficient because it validated only the path prefix without requiring a path separator, allowing access to sibling directories with similar names. Also, the adapter verified that resolved paths stayed within the adapter's base path, but did not verify that object identifiers stayed within their designated storage namespace. This allowed attackers to use path traversal sequences in the object identifier to access files in other namespaces. Fixed in version v1.77.0."
      }, {
        "lang" : "es",
        "value" : "lakeFS es una herramienta de código abierto que transforma el almacenamiento de objetos en repositorios similares a Git. Antes de la versión 1.77.0, el adaptador de bloque local (pkg/block/local/adapter.go) permitía a los usuarios autenticados leer y escribir archivos fuera de sus límites de almacenamiento designados. La función verifyRelPath utilizaba strings.HasPrefix() para verificar que las rutas solicitadas estuvieran dentro del directorio de almacenamiento configurado. Esta verificación era insuficiente porque validaba solo el prefijo de la ruta sin requerir un separador de ruta, lo que permitía el acceso a directorios hermanos con nombres similares. Además, el adaptador verificaba que las rutas resueltas permanecieran dentro de la ruta base del adaptador, pero no verificaba que los identificadores de objeto permanecieran dentro de su espacio de nombres de almacenamiento designado. Esto permitía a los atacantes utilizar secuencias de salto de ruta en el identificador de objeto para acceder a archivos en otros espacios de nombres. Corregido en la versión v1.77.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lakefs:lakefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.77.0",
            "matchCriteriaId" : "F1A8EEB4-D5B5-419E-AFB3-DE354DB020F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/treeverse/lakeFS/commit/cbc106275357302a834280f133265dc39f1384ce",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/treeverse/lakeFS/releases/tag/v1.77.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/treeverse/lakeFS/security/advisories/GHSA-699m-4v95-rmpm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26190",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:29.253",
      "lastModified" : "2026-02-18T19:11:12.333",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without any authentication, allowing unauthenticated access to all business operations including data manipulation and credential management. This vulnerability is fixed in 2.5.27 and 2.6.10."
      }, {
        "lang" : "es",
        "value" : "Milvus es una base de datos vectorial de código abierto construida para aplicaciones de IA generativa. Antes de 2.5.27 y 2.6.10, Milvus expone el puerto TCP 9091 por defecto, lo que permite eludir la autenticación. El endpoint de depuración /expr utiliza un token de autenticación predeterminado débil y predecible derivado de etcd.rootPath (por defecto: by-dev), lo que permite la evaluación arbitraria de expresiones. La API REST completa (/api/v1/*) está registrada en el puerto de métricas/gestión sin ninguna autenticación, lo que permite el acceso no autenticado a todas las operaciones comerciales, incluida la manipulación de datos y la gestión de credenciales. Esta vulnerabilidad se corrige en 2.5.27 y 2.6.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milvus:milvus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.27",
            "matchCriteriaId" : "47F8F103-3983-4099-A154-D8F4A04A1EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:milvus:milvus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.10",
            "matchCriteriaId" : "34DA261B-809B-41E7-A1AA-486B04758216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/milvus-io/milvus/commit/92b74dd2e286006a83b4a5f07951027b32e718a9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/milvus-io/milvus/releases/tag/v2.5.27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/milvus-io/milvus/releases/tag/v2.6.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/milvus-io/milvus/security/advisories/GHSA-7ppg-37fh-vcr6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26208",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:29.420",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application attempts to deserialize the App.txt settings file using Newtonsoft.Json with TypeNameHandling set to Objects. This allows an attacker to supply a crafted JSON file containing a gadget chain (e.g., ObjectDataProvider) to execute arbitrary code when the application launches and subsequently saves its settings. This vulnerability is fixed in Beta 0.9.26020."
      }, {
        "lang" : "es",
        "value" : "ADB Explorer es una interfaz de usuario fluida para ADB en Windows. Antes de la Beta 0.9.26020, ADB Explorer es vulnerable a deserialización insegura que conduce a ejecución remota de código. La aplicación intenta deserializar el archivo de configuración App.txt usando Newtonsoft.Json con TypeNameHandling configurado en Objects. Esto permite a un atacante proporcionar un archivo JSON manipulado que contiene una cadena de gadgets (por ejemplo, ObjectDataProvider) para ejecutar código arbitrario cuando la aplicación se inicia y posteriormente guarda su configuración. Esta vulnerabilidad está corregida en la Beta 0.9.26020."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/commit/776f132cede86e1405520f2a28c78276dda5ab5a",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/issues/294",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26020",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-49qx-wpxj-p4mh",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26264",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T19:17:31.143",
      "lastModified" : "2026-02-18T18:48:15.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and a crash (DoS). The issue is in wp.c within wp_decode_service_request. When decoding the optional priority context tag, the code passes apdu_len - apdu_size to bacnet_unsigned_context_decode without validating that apdu_size <= apdu_len. If a truncated APDU reaches this path, apdu_len - apdu_size underflows, resulting in a large size being used for decoding and an out‑of‑bounds read. This vulnerability is fixed in 1.5.0rc4 and 1.4.3rc2."
      }, {
        "lang" : "es",
        "value" : "BACnet Stack es una librería C de pila de protocolo de código abierto BACnet para sistemas embebidos. Antes de 1.5.0rc4 y 1.4.3rc2, una solicitud WriteProperty malformada puede desencadenar un desbordamiento negativo de longitud en la pila BACnet, lo que lleva a una lectura fuera de límites y un fallo (DoS). El problema está en wp.c dentro de wp_decode_service_request. Al decodificar la etiqueta de contexto de prioridad opcional, el código pasa apdu_len - apdu_size a bacnet_unsigned_context_decode sin validar que apdu_size &lt;= apdu_len. Si una APDU truncada alcanza esta ruta, apdu_len - apdu_size sufre un desbordamiento negativo, lo que resulta en un tamaño grande siendo utilizado para la decodificación y una lectura fuera de límites. Esta vulnerabilidad está corregida en 1.5.0rc4 y 1.4.3rc2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "9BAD4B36-9061-453C-9C23-231993F1E69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.4.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D20F1C-637A-4398-AD64-43C05692782D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B47182E-6B7F-4C53-904A-EB37C9C0A439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CF491863-1A31-4A23-A6AC-DF7545FCAA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bacnetstack:bacnet_stack:1.5.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB57C9E-9ABF-41FD-8D30-7C319ED23227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/commit/4cc8067c86f26e2b08b2c8f4d27f8e07de4d4708",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-phjh-v45p-gmjj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2441",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-13T19:17:31.310",
      "lastModified" : "2026-02-23T13:24:55.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en CSS en Google Chrome anterior a 145.0.7632.75 permitía a un atacante remoto ejecutar código arbitrario dentro de una sandbox a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-02-17",
      "cisaActionDue" : "2026-03-10",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Google Chromium CSS Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.75",
            "matchCriteriaId" : "B5E4C967-2545-4F81-8447-5C84EF1A0D07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.76",
            "matchCriteriaId" : "E0946EB1-5A1A-494A-93CB-5B5E2DCC600B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/483569511",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://github.com/huseyinstif/CVE-2026-2441-PoC/blob/main/poc.html",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-2441",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26269",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T20:17:41.377",
      "lastModified" : "2026-02-18T21:29:03.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto, de línea de comandos. Antes de la versión 9.1.2148, existe una vulnerabilidad de desbordamiento de búfer de pila en la integración de NetBeans de Vim al procesar el comando specialKeys, afectando a las compilaciones de Vim que habilitan y usan la característica de NetBeans. El desbordamiento de búfer de pila existe en special_keys() (en src/netbeans.c). El bucle while (*tok) escribe dos bytes por iteración en un búfer de pila de 64 bytes (keybuf) sin verificación de límites. Un servidor NetBeans malicioso puede desbordar keybuf con un solo comando specialKeys. El problema ha sido solucionado a partir del parche de Vim v9.1.2148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.2148",
            "matchCriteriaId" : "19A1D55B-E01D-4324-B9FA-7FD3C9E65EE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.1.2148",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/13/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26333",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-13T21:16:52.440",
      "lastModified" : "2026-02-26T22:46:30.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs (including EndeavorServer.rem and RemoteFileReceiver.rem) and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An unauthenticated remote attacker can invoke the exposed remoting endpoints to perform arbitrary file read and write operations via the WebClient class. This allows retrieval of sensitive files such as WebRoot\\\\web.config, which may disclose IIS machineKey validation and decryption keys. An attacker can use these keys to generate a malicious ASP.NET ViewState payload and achieve remote code execution within the IIS application context. Additionally, supplying a UNC path can trigger outbound SMB authentication from the service account, potentially exposing NTLMv2 hashes for relay or offline cracking."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Calero VeraSMART anteriores a 2022 R1 exponen un servicio HTTP de .NET Remoting sin autenticación en el puerto TCP 8001. El servicio publica ObjectURIs predeterminados (incluyendo EndeavorServer.rem y RemoteFileReceiver.rem) y permite el uso de formateadores SOAP y binarios con TypeFilterLevel configurado en Full. Un atacante remoto sin autenticación puede invocar los puntos finales de remoting expuestos para realizar operaciones arbitrarias de lectura y escritura de archivos a través de la clase WebClient. Esto permite la recuperación de archivos sensibles como WebRoot\\\\web . config, que pueden revelar las claves de validación y descifrado de machineKey de IIS. Un atacante puede usar estas claves para generar una carga útil maliciosa de ASP.NET ViewState y lograr la ejecución remota de código dentro del contexto de la aplicación IIS. Además, proporcionar una ruta UNC puede desencadenar la autenticación SMB saliente desde la cuenta de servicio, exponiendo potencialmente hashes NTLMv2 para retransmisión o cracking fuera de línea."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calero:verasmart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.0",
            "matchCriteriaId" : "1FF22584-B88C-4D9D-9146-DA0F2B5474CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calero:verasmart:2022.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE2CF2D-DA80-4CC0-97AC-496CB509935C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.calero.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/calero-verasmart-2022-r1-net-remoting-arbitrary-file-read-leading-to-viewstate-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26334",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-13T21:16:52.787",
      "lastModified" : "2026-02-26T22:45:49.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys are used to encrypt the password of the service account stored in C:\\\\VeraSMART Data\\\\app.settings. An attacker with local access to the system can extract the hardcoded keys from the Veramark.Framework.dll module and decrypt the stored credentials. The recovered credentials can then be used to authenticate to the Windows host, potentially resulting in local privilege escalation depending on the privileges of the configured service account."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Calero VeraSMART anteriores a 2026 R1 contienen claves de cifrado AES estáticas codificadas de forma rígida dentro de Veramark.Framework.dll (clase Veramark.Core.Config). Estas claves se utilizan para cifrar la contraseña de la cuenta de servicio almacenada en C:\\\\VeraSMART Data\\\\app.settings. Un atacante con acceso local al sistema puede extraer las claves codificadas de forma rígida del módulo Veramark.Framework.dll y descifrar las credenciales almacenadas. Las credenciales recuperadas pueden luego utilizarse para autenticarse en el host de Windows, lo que podría resultar en una escalada de privilegios local dependiendo de los privilegios de la cuenta de servicio configurada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calero:verasmart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.0",
            "matchCriteriaId" : "21B7878D-6DE8-43AD-84E5-154CE5AC45DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calero:verasmart:2026.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78EE9518-1AEA-48AB-AAE9-A75CE4C93BE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.calero.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/calero-verasmart-2026-r1-hardcoded-static-aes-keys-allow-decryption-of-service-credentials",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26335",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-13T21:16:52.927",
      "lastModified" : "2026-02-26T22:45:37.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\\\Program Files (x86)\\\\Veramark\\\\VeraSMART\\\\WebRoot\\\\web.config. An attacker who obtains these keys can craft a valid ASP.NET ViewState payload that passes integrity validation and is accepted by the application, resulting in server-side deserialization and remote code execution in the context of the IIS application."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Calero VeraSMART anteriores a 2022 R1 utilizan valores estáticos de machineKey de ASP.NET/IIS configurados para la aplicación web VeraSMART y almacenados en C:\\\\Program Files (x86)\\\\Veramark\\\\VeraSMART\\\\WebRoot\\\\web .config. Un atacante que obtiene estas claves puede crear una carga útil de ViewState de ASP.NET válida que pasa la validación de integridad y es aceptada por la aplicación, lo que resulta en deserialización del lado del servidor y ejecución remota de código en el contexto de la aplicación IIS."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calero:verasmart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.0",
            "matchCriteriaId" : "1FF22584-B88C-4D9D-9146-DA0F2B5474CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calero:verasmart:2022.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE2CF2D-DA80-4CC0-97AC-496CB509935C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.calero.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/calero-verasmart-2022-r1-static-iis-machine-keys-enable-viewstate-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1841",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-13T22:16:10.833",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 11.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2026-27072 is likely a duplicate of this issue."
      }, {
        "lang" : "es",
        "value" : "El plugin PixelYourSite – Your smart PIXEL (TAG) &amp; API Manager para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'pysTrafficSource' y el parámetro 'pys_landing_page' en todas las versiones hasta la 11.2.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/pixelyoursite/tags/11.1.5.2/includes/enrich/class_enrich_order.php#L252",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/pixelyoursite/tags/11.1.5.2/includes/enrich/class_enrich_order.php#L255",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/pixelyoursite/tags/11.1.5.2/includes/enrich/class_enrich_order.php#L265",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/pixelyoursite/tags/11.1.5.2/includes/enrich/class_enrich_order.php#L266",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3454364/pixelyoursite",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1844",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-13T22:16:11.007",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 12.4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin PixelYourSite PRO para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'pysTrafficSource' y el parámetro 'pys_landing_page' en todas las versiones hasta la 12.4.0.2, inclusive, debido a una sanitización insuficiente de la entrada y un escape de la salida inadecuado. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pixelyoursite.com/plugins/pixelyoursite-professional",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0fa6a112-ee69-43eb-bded-daba2c2c4dc5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26273",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T22:16:11.330",
      "lastModified" : "2026-02-18T21:01:56.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset token within a hidden HTML input field on the password reset page. This allows any unauthenticated attacker to retrieve the reset token for any user by simply querying the user's email, leading to full Account Takeover (ATO) without requiring access to the victim's email inbox. This vulnerability is fixed in 1.6.3."
      }, {
        "lang" : "es",
        "value" : "Known es una plataforma de publicación social. Antes de 1.6.3, existe una vulnerabilidad crítica de autenticación rota en Known 1.6.2 y versiones anteriores. La aplicación filtra el token de restablecimiento de contraseña dentro de un campo de entrada HTML oculto en la página de restablecimiento de contraseña. Esto permite a cualquier atacante no autenticado recuperar el token de restablecimiento para cualquier usuario simplemente consultando el correo electrónico del usuario, lo que lleva a una toma de control total de la cuenta (ATO) sin requerir acceso a la bandeja de entrada de correo electrónico de la víctima. Esta vulnerabilidad está corregida en 1.6.3."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:withknown:known:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "12596360-0063-45F0-ADAE-20BDFEA8FABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/idno/known/commit/8439a0747471559fb1ea9f074b929d390f27e66a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/idno/known/releases/tag/1.6.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/idno/known/security/advisories/GHSA-78wq-6gcv-w28r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24853",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-13T23:16:11.800",
      "lastModified" : "2026-02-24T20:32:18.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This vulnerability is fixed in 0.55.0."
      }, {
        "lang" : "es",
        "value" : "Caido es un kit de herramientas de auditoría de seguridad web. Antes de la versión 0.55.0, Caido bloquea los dominios no incluidos en la lista blanca para acceder a través del puerto 8080, y muestra 'Host/IP no tiene permiso para conectarse a Caido' en todos los puntos finales. Pero esto es eludible inyectando una cabecera X-Forwarded-Host: 127.0.0.1:8080. Esta vulnerabilidad está corregida en la versión 0.55.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caido:caido:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.55.0",
            "matchCriteriaId" : "4F383B1E-8E9B-445B-8BDD-00C22BACA524"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caido/caido/security/advisories/GHSA-3q5q-p8vj-8783",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26295",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.107",
      "lastModified" : "2026-02-14T04:15:57.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26296",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.190",
      "lastModified" : "2026-02-14T04:15:57.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26297",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.247",
      "lastModified" : "2026-02-14T04:15:57.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26298",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.307",
      "lastModified" : "2026-02-14T04:15:57.307",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26299",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.363",
      "lastModified" : "2026-02-14T04:15:57.363",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26300",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.427",
      "lastModified" : "2026-02-14T04:15:57.427",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26301",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.487",
      "lastModified" : "2026-02-14T04:15:57.487",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26302",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.540",
      "lastModified" : "2026-02-14T04:15:57.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26303",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-14T04:15:57.600",
      "lastModified" : "2026-02-14T04:15:57.600",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0692",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:16.923",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's `WC_Geolocation::get_ip_address()` function to validate IPN requests, which trusts user-controllable headers like X-Real-IP and X-Forwarded-For to determine the client IP address. This makes it possible for unauthenticated attackers to bypass IP allowlist restrictions by spoofing a whitelisted BlueSnap IP address and send forged IPN (Instant Payment Notification) data to manipulate order statuses (mark orders as paid, failed, refunded, or on-hold) without proper authorization."
      }, {
        "lang" : "es",
        "value" : "El plugin BlueSnap Payment Gateway para WooCommerce para WordPress es vulnerable a la Falta de autorización en todas las versiones hasta la 3.3.0, inclusive. Esto se debe a que el plugin se basa en la función 'WC_Geolocation::get_ip_address()' de WooCommerce para validar las solicitudes IPN, la cual confía en encabezados controlables por el usuario como X-Real-IP y X-Forwarded-For para determinar la dirección IP del cliente. Esto hace posible que atacantes no autenticados eludan las restricciones de la lista de permitidos de IP suplantando una dirección IP de BlueSnap en la lista blanca y envíen datos IPN (Notificación de Pago Instantánea) falsificados para manipular estados de pedidos (marcar pedidos como pagados, fallidos, reembolsados o en espera) sin la autorización adecuada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/bluesnap-payment-gateway-for-woocommerce/tags/3.4.0/includes/class-wc-bluesnap-ipn-webhooks.php#L417",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/bluesnap-payment-gateway-for-woocommerce/trunk/includes/class-wc-bluesnap-ipn-webhooks.php#L417",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/dc676e18-c895-4f6a-bce9-1f92207af885?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1164",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:17.593",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Easy Voice Mail para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'message' en todas las versiones hasta la 1.2.5, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-voice-mail/tags/1.2.5/admin/easy-voice-mail-admin.php#L149",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-voice-mail/tags/1.2.5/public/easy-voice-mail-public.php#L44",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3467995/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c7adf1fc-5123-49f8-92e5-b187b74f0e35?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1754",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:19.143",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin personal-authors-category para WordPress es vulnerable a Cross-Site Scripting Reflejado a través de la ruta URL en todas las versiones hasta la 0.3, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar con éxito a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/personal-authors-category/trunk/personal-authors-category.php#L169",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/personal-authors-category/trunk/personal-authors-category.php#L233",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6f57d5ec-bc2d-4dc4-b1b2-c5919986d198?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1904",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:19.327",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'accordion' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple Wp colorfull Accordion para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'title' en el shortcode 'accordion' en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-wp-colorfull-accordion/tags/1.0/Simple-Wp-colorfull-Accordion.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-wp-colorfull-accordion/trunk/Simple-Wp-colorfull-Accordion.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8444743c-ba57-4a51-990c-eb9058829d09?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1912",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:19.543",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in the 'ctdoi' shortcode in all versions up to, and including, 0.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Citations tools para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'code' en el shortcode 'ctdoi' en todas las versiones hasta e incluyendo la 0.3.2 debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/citations-tools/tags/0.3.2/citations-tools.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d1ee155a-3b4d-4b32-a1ec-86e0575e0ad8?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1983",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:20.140",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing nonce validation on the event deletion functionality. This makes it possible for unauthenticated attackers to delete arbitrary events via a forged request granted they can trick an administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin SEATT: Simple Event Attendance para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.5.0, inclusive. Esto se debe a la falta de validación de nonce en la funcionalidad de eliminación de eventos. Esto permite a atacantes no autenticados eliminar eventos arbitrarios mediante una petición falsificada, siempre que puedan engañar a un administrador para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-event-attendance/tags/1.5.0/seatt_events_admin.php#L23",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-event-attendance/trunk/seatt_events_admin.php#L23",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cdfc1110-7bbd-45f0-97ef-271c45d222c1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2027",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:21.313",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AMP Custom CSS setting in all versions up to, and including, 1.0.49 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El AMP Enhancer – Capa de Compatibilidad para el Plugin Oficial de AMP para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de CSS Personalizado de AMP en todas las versiones hasta la, y incluyendo, la 1.0.49 debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/indonumberone/b373b970da88e87a218aed58d92ccfb2",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/amp-enhancer/tags/1.0.49/admin/amp-enhancer-custom-css/amp-enhancer-custom-css.php#L13",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/amp-enhancer/trunk/admin/amp-enhancer-custom-css/amp-enhancer-custom-css.php#L13",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/14014260-e872-48d8-8788-f89dbeec2080?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2144",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T05:16:21.973",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugin storing the magic login QR code image with a predictable, static filename (QR_Code.png) in the publicly accessible WordPress uploads directory during the email sending process. The file is only deleted after wp_mail() completes, creating an exploitable race condition window. This makes it possible for unauthenticated attackers to trigger a login link request for any user, including administrators, and then exploit the race condition between QR code file creation and deletion to obtain the login URL encoded in the QR code, thereby gaining unauthorized access to the targeted user's account."
      }, {
        "lang" : "es",
        "value" : "El plugin Magic Login Mail o QR Code para WordPress es vulnerable a la Escalada de Privilegios en todas las versiones hasta la 2.05, inclusive. Esto se debe a que el plugin almacena la imagen del código QR de inicio de sesión mágico con un nombre de archivo predecible y estático (QR_Code.png) en el directorio de subidas de WordPress de acceso público durante el proceso de envío de correo electrónico. El archivo solo se elimina después de que wp_mail() se completa, creando una ventana de condición de carrera explotable. Esto hace posible que atacantes no autenticados activen una solicitud de enlace de inicio de sesión para cualquier usuario, incluidos los administradores, y luego exploten la condición de carrera entre la creación y eliminación del archivo del código QR para obtener la URL de inicio de sesión codificada en el código QR, obteniendo así acceso no autorizado a la cuenta del usuario objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/magic-login-mail/trunk/lib/class-magicloginmail.php#L250",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/magic-login-mail/trunk/lib/class-magicloginmail.php#L325",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3460417/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/65066a17-653b-4444-9bd0-894ea8c1acb1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2469",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-02-14T05:16:22.270",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the id() function in ImapConnection.php due to improperly escaping user input before including it in IMAP ID commands. This allows attackers to read or delete victim's emails, terminate the victim's session or execute any valid IMAP command on victim's mailbox by including quote characters \" or CRLF sequences \\r\\n in the input."
      }, {
        "lang" : "es",
        "value" : "Versiones del paquete directorytree/imapengine anteriores a la 1.22.3 son vulnerables a la Neutralización Incorrecta de Elementos Especiales en la Salida Utilizada por un Componente Descendente ('Inyección') a través de la función id() en ImapConnection.PHP debido al escape incorrecto de la entrada del usuario antes de incluirla en los comandos IMAP ID. Esto permite a los atacantes leer o eliminar los correos electrónicos de la víctima, terminar la sesión de la víctima o ejecutar cualquier comando IMAP válido en el buzón de la víctima al incluir caracteres de comillas \" o secuencias CRLF \\r\\n en la entrada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/wanamirulhakim/74b41589cdea3c07c3375e5946960778",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/DirectoryTree/ImapEngine/commit/87fca56affd9527e6907a705e6d600c5174d9a5a",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/DirectoryTree/ImapEngine/pull/150",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-PHP-DIRECTORYTREEIMAPENGINE-15274300",
        "source" : "report@snyk.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1932",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T06:16:06.007",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment REST API endpoint in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to modify the status of any appointment."
      }, {
        "lang" : "es",
        "value" : "El plugin Appointment Booking Calendar – plugin Bookr para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en el endpoint de la API REST update-appointment en todas las versiones hasta la 1.0.2, e incluyéndola. Esto hace posible que atacantes no autenticados modifiquen el estado de cualquier cita."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/bookr/tags/1.0.2/includes/rest-api/controller/appointment-controller.php#L47",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/bookr/trunk/includes/rest-api/controller/appointment-controller.php#L47",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2ab4baab-9e91-4ed5-9749-4a14e8180e71?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0557",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:08.053",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpda_app' shortcode in all versions up to, and including, 5.5.63 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Data Access para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'wpda_app' del plugin en todas las versiones hasta la 5.5.63, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con nivel de acceso de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.5.64/WPDataAccess/Data_Apps/WPDA_App_Container.php?marks=151-152#L151",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/97ddb0e9-1bb8-48ed-9fa3-d2b5f260263b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0559",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:08.240",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stm_lms_courses_grid_display' shortcode in all versions up to, and including, 3.7.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress MasterStudy LMS – para cursos y educación en línea es vulnerable a cross-site scripting almacenado a través del shortcode 'stm_lms_courses_grid_display' del plugin en todas las versiones hasta la 3.7.11, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3435814/masterstudy-lms-learning-management-system",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b1146350-4491-4fa0-8b78-6dbc00903160?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0693",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:08.417",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category descriptions in all versions up to, and including, 1.2.4. This is due to the plugin unconditionally removing the `wp_kses_data` output filter for term_description, link_description, link_notes, and user_description fields without checking user capabilities. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in category descriptions that will execute whenever a user accesses a page where the category description is displayed. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Allow HTML en Category Descriptions para WordPress es vulnerable a cross-site scripting almacenado a través de las descripciones de categoría en todas las versiones hasta la 1.2.4, inclusive. Esto se debe a que el plugin elimina incondicionalmente el filtro de salida `wp_kses_data` para los campos term_description, link_description, link_notes y user_description sin verificar las capacidades del usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superior, inyecten scripts web arbitrarios en las descripciones de categoría que se ejecutarán cada vez que un usuario acceda a una página donde se muestre la descripción de la categoría. Esto solo afecta a instalaciones multisitio y a instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/allow-html-in-category-descriptions/tags/1.2.4/html-in-category-descriptions.php#L23",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/allow-html-in-category-descriptions/trunk/html-in-category-descriptions.php#L23",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b63c9a5a-fa3e-46c7-9d9c-7c209fc5713a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0727",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:08.590",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'wp_aas_save_attachment_data' and 'wp_aas_get_attachment_edit_form' functions. This makes it possible for authenticated attackers, with contributor level access and above, to read and modify attachment metadata including file paths, titles, captions, alt text, and custom links for any attachment on the site."
      }, {
        "lang" : "es",
        "value" : "El plugin Accordion y Accordion Slider para WordPress es vulnerable a una omisión de autorización en todas las versiones hasta la 1.4.5, inclusive. Esto se debe a que el plugin no verifica correctamente que un usuario está autorizado para realizar una acción en las funciones 'wp_aas_save_attachment_data' y 'wp_aas_get_attachment_edit_form'. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador o superior, lean y modifiquen metadatos de adjuntos, incluyendo rutas de archivo, títulos, leyendas, texto alternativo y enlaces personalizados para cualquier adjunto en el sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/accordion-and-accordion-slider/tags/1.4.6/includes/admin/class-wp-aas-admin.php#L294",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c5108f3-d80c-4646-8d40-3bdd1361c6ab?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0735",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:08.770",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_language_switch' parameter in all versions up to, and including, 1.6.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin User Language Switch para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'tab_color_picker_language_switch' en todas las versiones hasta la 1.6.10, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/user-language-switch/tags/1.6.10/uls-options.php#L365",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/user-language-switch/trunk/uls-options.php#L365",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c6f61e13-20fb-4cef-bae7-2cd5fa038175?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0736",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:08.940",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_inpost_head_script[synth_header_script]' post meta field in all versions up to, and including, 2.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Chatbot para WordPress de Collect.chat para WordPress es vulnerable a cross-site scripting almacenado a través del campo de metadatos de publicación '_inpost_head_script[synth_header_script]' en todas las versiones hasta la 2.4.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/collectchat/tags/2.4.8/collect.php#L282",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/collectchat/tags/2.4.8/collect.php#L388",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/collectchat/trunk/collect.php#L282",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/collectchat/trunk/collect.php#L388",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3460985/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fb62f4c2-ce9f-4958-8b83-cc0d5f4d4647?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0745",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:09.113",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'download_language()' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin User Language Switch para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 1.6.10, inclusive, debido a la falta de validación de URL en la función 'download_language()'. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, realicen peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede utilizarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/user-language-switch.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/user-language-switch/tags/1.6.10/uls-options.php#L451",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/user-language-switch/trunk/uls-options.php#L451",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/user-language-switch/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d8d15be-6a7b-485e-a338-ccf1a6eb226c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0751",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:09.283",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricing_plan_select_text_font_family' parameter in all versions up to, and including, 1.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Payment Page | Payment Form para Stripe para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'pricing_plan_select_text_font_family' en todas las versiones hasta e incluyendo la 1.4.6 debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Autor o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/payment-page/tags/1.4.6/app/PaymentForm.php#L310",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/payment-page/trunk/app/PaymentForm.php#L310",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464131/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0982cc3e-87d7-49d2-afa3-8c18355d7968?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0753",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:09.450",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Super Simple Contact Form para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'sscf_name' en todas las versiones hasta la 1.6.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/super-simple-contact-form.1.6.2.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/super-simple-contact-form/tags/1.6.2/super-simple-contact-form.php#L152",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/super-simple-contact-form/trunk/super-simple-contact-form.php#L152",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/super-simple-contact-form/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e10c0d8d-718d-45dd-9ac3-a2673a6a16af?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1096",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:09.627",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Best-wp-google-map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'latitude' and 'longitudinal' parameters of the 'google_map_view' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Best-wp-google-map para WordPress es vulnerable a cross-site scripting almacenado a través de los parámetros 'latitude' y 'longitudinal' del shortcode 'google_map_view' en todas las versiones hasta la 2.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/best-wp-google-map/tags/2.1/plug-hook.php#L27",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/best-wp-google-map/trunk/plug-hook.php#L27",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/best-wp-google-map/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b3219b17-03b8-44c3-bf35-36b8b7457f8a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1187",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:09.800",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZoomifyWP Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'filename' parameter of the 'zoomify' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin ZoomifyWP Free para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'filename' del shortcode 'zoomify' en todas las versiones hasta la 1.1, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/tz-zoomifywp-free/tags/1.1/zoomifyWP-free.php#L54",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tz-zoomifywp-free/trunk/zoomifyWP-free.php#L54",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/tz-zoomifywp-free/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f1fa59e0-c946-40d3-a817-c9924b4588fa?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1303",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:09.970",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capability checks on the `mailchimp_campaigns_manager_disconnect_app` function that is hooked to the AJAX action of the same name. This makes it possible for authenticated attackers, with Subscriber-level access and above, to disconnect the site from its MailChimp synchronization app, disrupting automated email campaigns and marketing integrations."
      }, {
        "lang" : "es",
        "value" : "El plugin MailChimp Campaigns para WordPress es vulnerable a la falta de autorización en todas las versiones hasta la 3.2.4, inclusive. Esto se debe a la falta de comprobaciones de capacidad en la función 'mailchimp_campaigns_manager_disconnect_app' que está conectada a la acción AJAX del mismo nombre. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, desconecten el sitio de su aplicación de sincronización de MailChimp, interrumpiendo las campañas de correo electrónico automatizadas y las integraciones de marketing."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/olalaweb-mailchimp-campaign-manager/tags/3.2.4/mailchimp-campaigns-manager.php#L636",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/olalaweb-mailchimp-campaign-manager/trunk/mailchimp-campaigns-manager.php#L636",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2057ec2-9f03-4ae9-b200-aa5a318b461e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1306",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:10.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend JavaScript making it trivially accessible to unauthenticated attackers."
      }, {
        "lang" : "es",
        "value" : "El plugin midi-Synth para WordPress es vulnerable a la carga arbitraria de archivos debido a la falta de validación del tipo de archivo y de la extensión de archivo en la acción AJAX 'export' en todas las versiones hasta la 1.1.0, inclusive. Esto permite a los atacantes no autenticados cargar archivos arbitrarios en el servidor del sitio afectado, lo que podría hacer posible la ejecución remota de código siempre que el atacante pueda obtener un nonce válido. El nonce está expuesto en el JavaScript de frontend, lo que lo hace trivialmente accesible para los atacantes no autenticados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynth.php#L110",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynth.php#L121",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynthConvert.php#L421",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynthConvert.php#L492",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3460788%40midi-synth&new=3460788%40midi-synth&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d5b695d7-c690-4748-b218-5699d1aa63bf?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1394",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:10.343",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Quick Contact Us para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0, inclusive. Esto se debe a la falta de validación de nonce en la funcionalidad de actualización de ajustes. Esto hace posible que atacantes no autenticados actualicen los ajustes del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-quick-contact-us/tags/1.0/wp-quick-contact-us.php#L228",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-quick-contact-us/trunk/wp-quick-contact-us.php#L228",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ab1053e4-5135-49cc-a81b-9cf66e93bfef?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1792",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:10.553",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Geo Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL path in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Geo Widget para WordPress es vulnerable a cross-site scripting almacenado a través de la ruta URL en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/geowidget/tags/1.0/GeoWidget.php#L265",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5d3029bb-74d0-4594-80c9-b7cb6c049216?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1795",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:10.733",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Address Bar Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL Path in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Address Bar Ads para WordPress es vulnerable a Cross-Site Scripting Reflejado a través de la ruta URL en todas las versiones hasta la 1.0.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "http://plugins.trac.wordpress.org/browser/address-bar-ads/trunk/address_bar_ads.php#L444",
        "source" : "security@wordfence.com"
      }, {
        "url" : "http://plugins.trac.wordpress.org/browser/address-bar-ads/trunk/address_bar_ads.php#L448",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6728fca7-f66d-4b8a-a16f-db60a315b434?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1796",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:10.903",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The StyleBidet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin StyleBidet para WordPress es vulnerable a Cross-Site Scripting Reflejado a través de la ruta URL en todas las versiones hasta la 1.0.0, inclusive, debido a la sanitización insuficiente de entrada y el escape de salida. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/stylebidet/tags/1.0.0/stylebidet.php#L309",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/030d4038-cf31-4ad9-a89a-6cf5f6177c2e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1901",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:11.113",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QuestionPro Surveys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'questionpro' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin QuestionPro Surveys para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'questionpro' en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/questionpro-surveys/tags/1.0/index.php#L31",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/questionpro-surveys/trunk/index.php#L31",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3121bb03-7bc0-4005-9814-bc46ce9d4a9d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1903",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:11.283",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout' attribute of the 'sb_ravelry_designs' shortcode in all versions up to, and including, 1.0.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Ravelry Designs Widget para WordPress es vulnerable a cross-site scripting almacenado a través del atributo 'layout' del shortcode 'sb_ravelry_designs' en todas las versiones hasta la 1.0.0, inclusive. Esto se debe a una sanitización de entrada insuficiente y un escape de salida en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.svn.wordpress.org/ravelry-designs-widget/trunk/ravelry-designs-widget.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ravelry-designs-widget/tags/1.0.0/ravelry-designs-widget.php#L119",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ravelry-designs-widget/trunk/ravelry-designs-widget.php#L119",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6290559d-5902-455c-bc33-7aa3c820162b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1905",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:11.460",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sphere Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in the 'show_sphere_image' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Sphere Manager para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'width' en el shortcode 'show_sphere_image' en todas las versiones hasta la 1.0.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/sphere-manager/tags/1.0.2/plugin.php#L232",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/sphere-manager/trunk/plugin.php#L232",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a27dfc37-81cf-4e95-a331-02fc952e34af?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1910",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:11.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UpMenu – Online ordering for restaurants plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lang' attribute of the 'upmenu-menu' shortcode in all versions up to, and including, 3.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin UpMenu – Online ordering para restaurants para WordPress es vulnerable a cross-site scripting almacenado a través del atributo 'lang' del shortcode 'upmenu-menu' en todas las versiones hasta la 3.1, inclusive. Esto se debe a una sanitización de entrada insuficiente y un escape de salida inadecuado en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/upmenu/tags/3.1/upmenu.php#L720",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/upmenu/trunk/upmenu.php#L720",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bbb9483b-ee00-4e40-8fa3-eefbbfeb9516?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1915",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:11.803",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Plyr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poster' parameter in the 'plyr' shortcode in all versions up to, and including, 0.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple Plyr para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'poster' en el shortcode 'plyr' en todas las versiones hasta la 0.0.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-plyr/tags/0.0.1/simple-plyr.php#L38",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/efe832cc-d097-41e4-a856-16f19a735358?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1939",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:11.977",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Percent to Infograph plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `percent_to_graph` shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Percent a Infograph para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'percent_to_graph' en todas las versiones hasta la 1.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/percent-to-infograph/tags/1.0/percent_infograph.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/percent-to-infograph/trunk/percent_infograph.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f6e6fcb-1688-424e-b0fa-1c0ace474c2c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1944",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:12.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CallbackKiller service widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cbk_save() function in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to modify the plugin's site ID settings via the 'cbk_save_v1' AJAX action."
      }, {
        "lang" : "es",
        "value" : "El plugin de widget de servicio CallbackKiller para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función cbk_save() en todas las versiones hasta la 1.2, inclusive. Esto hace posible que atacantes no autenticados modifiquen la configuración del ID de sitio del plugin a través de la acción AJAX cbk_save_v1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/callbackkiller-service-widget/tags/1.2/callbackkiller-widget.php#L133",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/callbackkiller-service-widget/tags/1.2/callbackkiller-widget.php#L34",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/callbackkiller-service-widget/trunk/callbackkiller-widget.php#L133",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/callbackkiller-service-widget/trunk/callbackkiller-widget.php#L34",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/98a7572d-9642-4150-8112-c0fa2b25ae05?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1985",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:12.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gutenberg block in all versions up to, and including, 1.0.2. This is due to the plugin failing to sanitize and validate the URL scheme when storing link URLs for 3D model blocks, allowing `javascript:` URLs. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages via the link URL parameter that will execute whenever a user clicks on the 3D model."
      }, {
        "lang" : "es",
        "value" : "El plugin Press3D para WordPress es vulnerable a cross-site scripting almacenado a través del bloque Gutenberg de Modelo 3D en todas las versiones hasta la 1.0.2, inclusive. Esto se debe a que el plugin no sanitiza ni valida el esquema de URL al almacenar las URL de enlace para los bloques de modelo 3D, permitiendo URL 'javascript:'. Esto hace posible que atacantes autenticados, con acceso de nivel de Autor y superior, inyecten scripts web arbitrarios en las páginas a través del parámetro de URL de enlace que se ejecutarán cada vez que un usuario haga clic en el modelo 3D."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/79.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://developer.wordpress.org/reference/functions/esc_url/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/press3d/tags/1.0.2/press3d.php#L1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/press3d/trunk/press3d.php#L1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e153bb3d-e175-48bd-894c-7ccb8f09fec4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1987",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:12.493",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.1.6. This is due to the `scheduler_widget_ajax_save_event()` function lacking proper authorization checks and ownership verification when updating events. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify any event in the scheduler via the `id` parameter granted they have knowledge of the event ID."
      }, {
        "lang" : "es",
        "value" : "El plugin Scheduler Widget para WordPress es vulnerable a una referencia directa insegura a objetos (IDOR) en todas las versiones hasta la 0.1.6, inclusive. Esto se debe a que la función 'scheduler_widget_ajax_save_event()' carece de comprobaciones de autorización adecuadas y verificación de propiedad al actualizar eventos. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, modificar cualquier evento en el programador a través del parámetro 'id' siempre que conozcan el ID del evento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/639.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://cwe.mitre.org/data/definitions/862.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/05-Authorization_Testing/04-Testing_for_Insecure_Direct_Object_References",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/scheduler-widget/tags/0.1.6/scheduler-widget.php#L158",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/scheduler-widget/trunk/scheduler-widget.php#L158",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fd5f370c-743f-41f1-80ab-7f0805cae38c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1988",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:12.670",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.5 via the `flexipsg_carousel` shortcode. This is due to the `theme` parameter being directly concatenated into a file path without proper sanitization or validation, allowing directory traversal. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server via the `theme` parameter granted they can create posts with shortcodes."
      }, {
        "lang" : "es",
        "value" : "El plugin Flexi Product Slider y Grid para WooCommerce para WordPress es vulnerable a la inclusión local de ficheros en todas las versiones hasta la 1.0.5, inclusive, a través del shortcode 'flexipsg_carousel'. Esto se debe a que el parámetro 'theme' se concatena directamente en una ruta de fichero sin una sanitización o validación adecuadas, lo que permite el salto de directorio. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, incluyan y ejecuten ficheros PHP arbitrarios en el servidor a través del parámetro 'theme' siempre que puedan crear publicaciones con shortcodes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/22.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://cwe.mitre.org/data/definitions/98.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/flexi-product-slider-grid/tags/1.0.5/includes/class-flexipsg-shortcode.php#L82",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/flexi-product-slider-grid/trunk/includes/class-flexipsg-shortcode.php#L82",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ffdd5446-5835-4976-b764-9b5c75251438?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2022",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:12.847",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'rednao_smart_forms_get_campaigns' AJAX action in all versions up to, and including, 2.6.99. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve donation campaign data including campaign IDs and names."
      }, {
        "lang" : "es",
        "value" : "El plugin Smart Forms para WordPress es vulnerable a acceso no autorizado de datos debido a una comprobación de capacidad ausente en la acción AJAX 'rednao_smart_forms_get_campaigns' en todas las versiones hasta la 2.6.99, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, recuperen datos de campañas de donación, incluyendo IDs y nombres de campañas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/smart-forms/trunk/integration/smart-donations-integration-ajax.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/smart-forms/trunk/smartforms.php#L90",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/381ec109-ca51-4011-b7e0-aec636540d59?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2024",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T07:16:13.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PhotoStack Gallery plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 0.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin PhotoStack Gallery para WordPress es vulnerable a inyección SQL a través del parámetro 'postid' en todas las versiones hasta la 0.4.1, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto permite a atacantes no autenticados añadir consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/photostack-gallery/trunk/photo_gallery.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/photostack-gallery/trunk/photo_gallery.php#L113",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/photostack-gallery/trunk/photo_gallery.php#L142",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9232b77e-e23f-4e91-8ea3-5e740956f51e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0550",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T09:16:11.683",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mycred_load_coupon' shortcode in all versions up to, and including, 2.9.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin myCred para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'mycred_load_coupon' del plugin en todas las versiones hasta la 2.9.7.3, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3440785/mycred/trunk/addons/coupons/includes/mycred-coupon-shortcodes.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1249",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T09:16:11.850",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery in versions 5.3 to 5.10 via the 'load_lyrics_ajax_callback' function. This makes it possible for authenticated attackers, with author level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin MP3 Audio Player – Music Player, Podcast Player &amp; Radio de Sonaar para WordPress es vulnerable a falsificación de petición del lado del servidor en las versiones 5.3 a la 5.10 a través de la función 'load_lyrics_ajax_callback'. Esto permite a atacantes autenticados, con acceso de nivel de autor y superior, realizar peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede utilizarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3453076/mp3-music-player-by-sonaar/trunk/sonaar-music.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/261aad1e-43fc-4927-a97d-85a001863023?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1254",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T09:16:12.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6. This is due to the plugin not properly verifying that a user is authorized to modify specific posts before updating them via the REST API. This makes it possible for authenticated attackers, with contributor level access and above, to update the title, excerpt, and content of arbitrary posts by passing post IDs in the modulaImages field when editing a gallery."
      }, {
        "lang" : "es",
        "value" : "El plugin Modula Image Gallery – Photo Grid &amp; Video Gallery para WordPress es vulnerable a una omisión de autorización en todas las versiones hasta la 2.13.6, inclusive. Esto se debe a que el plugin no verifica correctamente que un usuario está autorizado para modificar publicaciones específicas antes de actualizarlas a través de la API REST. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, actualicen el título, el extracto y el contenido de publicaciones arbitrarias al pasar IDs de publicaciones en el campo modulaImages al editar una galería."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3447757/modula-best-grid-gallery/trunk/includes/admin/class-modula-cpt.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9b86d26e-cda0-4558-9967-3ec6f5eff510?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1258",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T09:16:12.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mail Mint plugin for WordPress is vulnerable to blind SQL Injection via the 'forms', 'automation', 'email/templates', and 'contacts/import/tutorlms/map' API endpoints in all versions up to, and including, 1.19.2 . This is due to insufficient escaping on the user supplied 'order-by', 'order-type', and 'selectedCourses' parameters and lack of sufficient preparation on the existing SQL queries. This makes it possible for authenticated attackers, with administrator level access and above, to append additional SQL queries into already existing queries."
      }, {
        "lang" : "es",
        "value" : "El plugin Mail Mint para WordPress es vulnerable a inyección SQL ciega a través de los endpoints de la API 'forms', 'automation', 'email/templates' y 'contacts/import/tutorlms/map' en todas las versiones hasta la 1.19.2, inclusive. Esto se debe a un escape insuficiente en los parámetros 'order-by', 'order-type' y 'selectedCourses' suministrados por el usuario y a la falta de preparación suficiente en las consultas SQL existentes. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superior, añadan consultas SQL adicionales a consultas ya existentes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449536/mail-mint/trunk/app/API/Actions/Admin/Email/TemplateAction.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449536/mail-mint/trunk/app/Database/models/FormModel.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449536/mail-mint/trunk/app/Internal/Automation/Core/DataStore/AutomationStore.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449536/mail-mint/trunk/app/Utilities/Helper/Import.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/dfb59bca-0653-4e75-8da1-e78e5d659422?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1843",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T09:16:12.360",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Super Page Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Activity Log in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Super Page Cache para WordPress es vulnerable a cross-site scripting almacenado a través del Registro de Actividad en todas las versiones hasta la 5.2.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3454474/wp-cloudflare-page-cache",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a0c68e1e-5255-4e79-a6d9-a2021836e584?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1512",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T10:16:06.627",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all versions up to, and including, 6.5.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Essential Addons para Elementor – Popular Elementor Templates &amp; Widgets para WordPress es vulnerable a cross-site scripting almacenado a través del widget Info Box del plugin en todas las versiones hasta la 6.5.9, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida deficiente en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3456806/essential-addons-for-elementor-lite/tags/6.5.10/includes/Elements/Info_Box.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d652f383-ca3d-440e-a30f-64a50efd65e1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2312",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-14T12:15:56.123",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Media Library Folders plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 8.3.6 via the delete_maxgalleria_media() and maxgalleria_rename_image() functions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to delete or rename attachments owned by other users (including administrators). The rename flow also deletes all postmeta for the target attachment, causing data loss."
      }, {
        "lang" : "es",
        "value" : "El plugin Media Library Folders para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 8.3.6, inclusive, a través de las funciones delete_maxgalleria_media() y maxgalleria_rename_image() debido a la falta de validación en una clave controlada por el usuario. Esto permite a atacantes autenticados, con acceso de nivel Autor y superior, eliminar o renombrar archivos adjuntos propiedad de otros usuarios (incluidos los administradores). El flujo de renombrado también elimina todos los postmeta para el archivo adjunto objetivo, causando pérdida de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3459947/media-library-plus",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ccf77cb1-b6b6-49de-8de4-20eddd3b5e62?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23113",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:06.380",
      "lastModified" : "2026-04-18T09:16:14.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop\n\nCurrently this is checked before running the pending work. Normally this\nis quite fine, as work items either end up blocking (which will create a\nnew worker for other items), or they complete fairly quickly. But syzbot\nreports an issue where io-wq takes seemingly forever to exit, and with a\nbit of debugging, this turns out to be because it queues a bunch of big\n(2GB - 4096b) reads with a /dev/msr* file. Since this file type doesn't\nsupport ->read_iter(), loop_rw_iter() ends up handling them. Each read\nreturns 16MB of data read, which takes 20 (!!) seconds. With a bunch of\nthese pending, processing the whole chain can take a long time. Easily\nlonger than the syzbot uninterruptible sleep timeout of 140 seconds.\nThis then triggers a complaint off the io-wq exit path:\n\nINFO: task syz.4.135:6326 blocked for more than 143 seconds.\n      Not tainted syzkaller #0\n      Blocked by coredump.\n\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\ntask:syz.4.135       state:D stack:26824 pid:6326  tgid:6324  ppid:5957   task_flags:0x400548 flags:0x00080000\nCall Trace:\n <TASK>\n context_switch kernel/sched/core.c:5256 [inline]\n __schedule+0x1139/0x6150 kernel/sched/core.c:6863\n __schedule_loop kernel/sched/core.c:6945 [inline]\n schedule+0xe7/0x3a0 kernel/sched/core.c:6960\n schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75\n do_wait_for_common kernel/sched/completion.c:100 [inline]\n __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121\n io_wq_exit_workers io_uring/io-wq.c:1328 [inline]\n io_wq_put_and_exit+0x271/0x8a0 io_uring/io-wq.c:1356\n io_uring_clean_tctx+0x10d/0x190 io_uring/tctx.c:203\n io_uring_cancel_generic+0x69c/0x9a0 io_uring/cancel.c:651\n io_uring_files_cancel include/linux/io_uring.h:19 [inline]\n do_exit+0x2ce/0x2bd0 kernel/exit.c:911\n do_group_exit+0xd3/0x2a0 kernel/exit.c:1112\n get_signal+0x2671/0x26d0 kernel/signal.c:3034\n arch_do_signal_or_restart+0x8f/0x7e0 arch/x86/kernel/signal.c:337\n __exit_to_user_mode_loop kernel/entry/common.c:41 [inline]\n exit_to_user_mode_loop+0x8c/0x540 kernel/entry/common.c:75\n __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]\n syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]\n syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]\n syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]\n do_syscall_64+0x4ee/0xf80 arch/x86/entry/syscall_64.c:100\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fa02738f749\nRSP: 002b:00007fa0281ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca\nRAX: fffffffffffffe00 RBX: 00007fa0275e6098 RCX: 00007fa02738f749\nRDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0275e6098\nRBP: 00007fa0275e6090 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fa0275e6128 R14: 00007fff14e4fcb0 R15: 00007fff14e4fd98\n\nThere's really nothing wrong here, outside of processing these reads\nwill take a LONG time. However, we can speed up the exit by checking the\nIO_WQ_BIT_EXIT inside the io_worker_handle_work() loop, as syzbot will\nexit the ring after queueing up all of these reads. Then once the first\nitem is processed, io-wq will simply cancel the rest. That should avoid\nsyzbot running into this complaint again."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nio_uring/io-wq: verificar IO_WQ_BIT_EXIT dentro del bucle de ejecución de trabajo\n\nActualmente esto se verifica antes de ejecutar el trabajo pendiente. Normalmente esto está bastante bien, ya que los elementos de trabajo o terminan bloqueándose (lo que creará un nuevo trabajador para otros elementos), o se completan bastante rápido. Pero syzbot informa un problema donde io-wq tarda aparentemente una eternidad en salir, y con un poco de depuración, esto resulta ser porque encola un montón de lecturas grandes (2GB - 4096b) con un archivo /dev/msr*. Dado que este tipo de archivo no soporta -&gt;read_iter(), loop_rw_iter() termina manejándolos. Cada lectura devuelve 16MB de datos leídos, lo que toma 20 (!!) segundos. Con un montón de estos pendientes, procesar toda la cadena puede tomar mucho tiempo. Fácilmente más largo que el tiempo de espera de suspensión ininterrumpible de syzbot de 140 segundos. Esto entonces desencadena una queja de la ruta de salida de io-wq:\n\nINFO: tarea syz.4.135:6326 bloqueada por más de 143 segundos.\n      No contaminado syzkaller #0\n      Bloqueado por coredump.\n'echo 0 &gt; /proc/sys/kernel/hung_task_timeout_secs' deshabilita este mensaje.\ntask:syz.4.135       estado:D stack:26824 pid:6326  tgid:6324  ppid:5957   task_flags:0x400548 flags:0x00080000\nTraza de Llamada:\n \n context_switch kernel/sched/core.c:5256 [en línea]\n __schedule+0x1139/0x6150 kernel/sched/core.c:6863\n __schedule_loop kernel/sched/core.c:6945 [en línea]\n schedule+0xe7/0x3a0 kernel/sched/core.c:6960\n schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75\n do_wait_for_common kernel/sched/completion.c:100 [en línea]\n __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121\n io_wq_exit_workers io_uring/io-wq.c:1328 [en línea]\n io_wq_put_and_exit+0x271/0x8a0 io_uring/io-wq.c:1356\n io_uring_clean_tctx+0x10d/0x190 io_uring/tctx.c:203\n io_uring_cancel_generic+0x69c/0x9a0 io_uring/cancel.c:651\n io_uring_files_cancel include/linux/io_uring.h:19 [en línea]\n do_exit+0x2ce/0x2bd0 kernel/exit.c:911\n do_group_exit+0xd3/0x2a0 kernel/exit.c:1112\n get_signal+0x2671/0x26d0 kernel/signal.c:3034\n arch_do_signal_or_restart+0x8f/0x7e0 arch/x86/kernel/signal.c:337\n __exit_to_user_mode_loop kernel/entry/common.c:41 [en línea]\n exit_to_user_mode_loop+0x8c/0x540 kernel/entry/common.c:75\n __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [en línea]\n syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [en línea]\n syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [en línea]\n syscall_exit_to_user_mode include/linux/entry-common.h:194 [en línea]\n do_syscall_64+0x4ee/0xf80 arch/x86/entry/syscall_64.c:100\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fa02738f749\nRSP: 002b:00007fa0281ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca\nRAX: fffffffffffffe00 RBX: 00007fa0275e6098 RCX: 00007fa02738f749\nRDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0275e6098\nRBP: 00007fa0275e6090 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fa0275e6128 R14: 00007fff14e4fcb0 R15: 00007fff14e4fd98\n\nRealmente no hay nada malo aquí, aparte de que procesar estas lecturas tomará MUCHO tiempo. Sin embargo, podemos acelerar la salida verificando el IO_WQ_BIT_EXIT dentro del bucle io_worker_handle_work(), ya que syzbot saldrá del anillo después de encolar todas estas lecturas. Luego, una vez que se procesa el primer elemento, io-wq simplemente cancelará el resto. Eso debería evitar que syzbot se encuentre con esta queja de nuevo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.12.1",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "405C58E5-6DB2-4F7A-9D83-41C17D9DA63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "75EB504D-4A83-4C67-9C8D-FD9C6C8EB4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "06AE06A6-A0C3-4556-BFFA-3D6E4BAC43C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE63934-38CF-4311-AD72-624E86AF3889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/10dc959398175736e495f71c771f8641e1ca1907",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/27e47500fac23d15b7dc93ff650bc4844d2581bd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/2e8ca1078b14142db2ce51cbd18ff9971560046b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/85eb83694a91c89d9abe615d717c0053c3efa714",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bdf0bf73006ea8af9327cdb85cfdff4c23a5f966",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d05d99573f81a091547b1778b9a50120f5d6c68a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23114",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:06.500",
      "lastModified" : "2026-03-18T13:41:42.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: ptrace: Fix SVE writes on !SME systems\n\nWhen SVE is supported but SME is not supported, a ptrace write to the\nNT_ARM_SVE regset can place the tracee into an invalid state where\n(non-streaming) SVE register data is stored in FP_STATE_SVE format but\nTIF_SVE is clear. This can result in a later warning from\nfpsimd_restore_current_state(), e.g.\n\n  WARNING: CPU: 0 PID: 7214 at arch/arm64/kernel/fpsimd.c:383 fpsimd_restore_current_state+0x50c/0x748\n\nWhen this happens, fpsimd_restore_current_state() will set TIF_SVE,\nplacing the task into the correct state. This occurs before any other\ncheck of TIF_SVE can possibly occur, as other checks of TIF_SVE only\nhappen while the FPSIMD/SVE/SME state is live. Thus, aside from the\nwarning, there is no functional issue.\n\nThis bug was introduced during rework to error handling in commit:\n\n  9f8bf718f2923 (\"arm64/fpsimd: ptrace: Gracefully handle errors\")\n\n... where the setting of TIF_SVE was moved into a block which is only\nexecuted when system_supports_sme() is true.\n\nFix this by removing the system_supports_sme() check. This ensures that\nTIF_SVE is set for (SVE-formatted) writes to NT_ARM_SVE, at the cost of\nunconditionally manipulating the tracee's saved svcr value. The\nmanipulation of svcr is benign and inexpensive, and we already do\nsimilar elsewhere (e.g. during signal handling), so I don't think it's\nworth guarding this with system_supports_sme() checks.\n\nAside from the above, there is no functional change. The 'type' argument\nto sve_set_common() is only set to ARM64_VEC_SME (in ssve_set())) when\nsystem_supports_sme(), so the ARM64_VEC_SME case in the switch statement\nis still unreachable when !system_supports_sme(). When\nCONFIG_ARM64_SME=n, the only caller of sve_set_common() is sve_set(),\nand the compiler can constant-fold for the case where type is\nARM64_VEC_SVE, removing the logic for other cases."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\narm64/fpsimd: ptrace: Corrige escrituras SVE en sistemas sin SME\n\nCuando SVE es compatible pero SME no lo es, una escritura de ptrace al regset NT_ARM_SVE puede colocar al tracee en un estado inválido donde los datos del registro SVE (no streaming) se almacenan en formato FP_STATE_SVE pero TIF_SVE está en cero. Esto puede resultar en una advertencia posterior de fpsimd_restore_current_state(), por ejemplo:\n\n  WARNING: CPU: 0 PID: 7214 at arch/arm64/kernel/fpsimd.c:383 fpsimd_restore_current_state+0x50c/0x748\n\nCuando esto sucede, fpsimd_restore_current_state() establecerá TIF_SVE, colocando la tarea en el estado correcto. Esto ocurre antes de que cualquier otra verificación de TIF_SVE pueda ocurrir, ya que otras verificaciones de TIF_SVE solo suceden mientras el estado FPSIMD/SVE/SME está activo. Por lo tanto, aparte de la advertencia, no hay ningún problema funcional.\n\nEste error fue introducido durante una revisión del manejo de errores en el commit:\n\n  9f8bf718f2923 ('arm64/fpsimd: ptrace: Manejar errores con gracia')\n\n... donde la configuración de TIF_SVE se movió a un bloque que solo se ejecuta cuando system_supports_sme() es verdadero.\n\nEsto se soluciona eliminando la verificación de system_supports_sme(). Esto asegura que TIF_SVE se establezca para escrituras (con formato SVE) a NT_ARM_SVE, a costa de manipular incondicionalmente el valor svcr guardado del tracee. La manipulación de svcr es inofensiva y de bajo costo, y ya hacemos algo similar en otros lugares (por ejemplo, durante el manejo de señales), por lo que no creo que valga la pena condicionar esto a verificaciones de system_supports_sme().\n\nAparte de lo anterior, no hay ningún cambio funcional. El argumento 'type' de sve_set_common() solo se establece en ARM64_VEC_SME (en ssve_set()) cuando system_supports_sme(), por lo que el caso ARM64_VEC_SME en la declaración switch sigue siendo inalcanzable cuando system_supports_sme() es falso. Cuando CONFIG_ARM64_SME=n, el único llamador de sve_set_common() es sve_set(), y el compilador puede realizar plegado de constantes para el caso en que 'type' es ARM64_VEC_SVE, eliminando la lógica para otros casos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "467E1359-7F6A-4790-AC45-172024944460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/128a7494a9f15aad60cc6b7e3546bf481ac54a13",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4f39984176e7edcaba3432b6c649c6fe93bf2f80",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23115",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:06.607",
      "lastModified" : "2026-03-18T13:41:27.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: Fix not set tty->port race condition\n\nRevert commit bfc467db60b7 (\"serial: remove redundant\ntty_port_link_device()\") because the tty_port_link_device() is not\nredundant: the tty->port has to be confured before we call\nuart_configure_port(), otherwise user-space can open console without TTY\nlinked to the driver.\n\nThis tty_port_link_device() was added explicitly to avoid this exact\nissue in commit fb2b90014d78 (\"tty: link tty and port before configuring\nit as console\"), so offending commit basically reverted the fix saying\nit is redundant without addressing the actual race condition presented\nthere.\n\nReproducible always as tty->port warning on Qualcomm SoC with most of\ndevices disabled, so with very fast boot, and one serial device being\nthe console:\n\n  printk: legacy console [ttyMSM0] enabled\n  printk: legacy console [ttyMSM0] enabled\n  printk: legacy bootconsole [qcom_geni0] disabled\n  printk: legacy bootconsole [qcom_geni0] disabled\n  ------------[ cut here ]------------\n  tty_init_dev: ttyMSM driver does not set tty->port. This would crash the kernel. Fix the driver!\n  WARNING: drivers/tty/tty_io.c:1414 at tty_init_dev.part.0+0x228/0x25c, CPU#2: systemd/1\n  Modules linked in: socinfo tcsrcc_eliza gcc_eliza sm3_ce fuse ipv6\n  CPU: 2 UID: 0 PID: 1 Comm: systemd Tainted: G S                  6.19.0-rc4-next-20260108-00024-g2202f4d30aa8 #73 PREEMPT\n  Tainted: [S]=CPU_OUT_OF_SPEC\n  Hardware name: Qualcomm Technologies, Inc. Eliza (DT)\n  ...\n  tty_init_dev.part.0 (drivers/tty/tty_io.c:1414 (discriminator 11)) (P)\n  tty_open (arch/arm64/include/asm/atomic_ll_sc.h:95 (discriminator 3) drivers/tty/tty_io.c:2073 (discriminator 3) drivers/tty/tty_io.c:2120 (discriminator 3))\n  chrdev_open (fs/char_dev.c:411)\n  do_dentry_open (fs/open.c:962)\n  vfs_open (fs/open.c:1094)\n  do_open (fs/namei.c:4634)\n  path_openat (fs/namei.c:4793)\n  do_filp_open (fs/namei.c:4820)\n  do_sys_openat2 (fs/open.c:1391 (discriminator 3))\n  ...\n  Starting Network Name Resolution...\n\nApparently the flow with this small Yocto-based ramdisk user-space is:\n\ndriver (qcom_geni_serial.c):                  user-space:\n============================                  ===========\nqcom_geni_serial_probe()\n uart_add_one_port()\n  serial_core_register_port()\n   serial_core_add_one_port()\n    uart_configure_port()\n     register_console()\n    |\n    |                                         open console\n    |                                          ...\n    |                                          tty_init_dev()\n    |                                           driver->ports[idx] is NULL\n    |\n    tty_port_register_device_attr_serdev()\n     tty_port_link_device() <- set driver->ports[idx]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nserial: Corrige la condición de carrera de tty-&gt;port no establecido\n\nRevertir el commit bfc467db60b7 ('serial: eliminar tty_port_link_device() redundante') porque tty_port_link_device() no es redundante: el tty-&gt;port tiene que ser configurado antes de que llamemos a uart_configure_port(), de lo contrario, el espacio de usuario puede abrir la consola sin un TTY vinculado al controlador.\n\nEste tty_port_link_device() fue añadido explícitamente para evitar este problema exacto en el commit fb2b90014d78 ('tty: vincular tty y puerto antes de configurarlo como consola'), por lo que el commit ofensivo básicamente revirtió la corrección diciendo que es redundante sin abordar la condición de carrera real presentada allí.\n\nReproducible siempre como advertencia de tty-&gt;port en SoC de Qualcomm con la mayoría de los dispositivos deshabilitados, por lo que con un arranque muy rápido, y un dispositivo serie siendo la consola:\n\n  printk: consola heredada [ttyMSM0] habilitada\n  printk: consola heredada [ttyMSM0] habilitada\n  printk: consola de arranque heredada [qcom_geni0] deshabilitada\n  printk: consola de arranque heredada [qcom_geni0] deshabilitada\n  ------------[ cortar aquí ]------------\n  tty_init_dev: el controlador ttyMSM no establece tty-&gt;port. Esto haría que el kernel se bloquee. ¡Arregle el controlador!\n  ADVERTENCIA: drivers/tty/tty_io.c:1414 en tty_init_dev.part.0+0x228/0x25c, CPU#2: systemd/1\n  Módulos vinculados: socinfo tcsrcc_eliza gcc_eliza sm3_ce fuse ipv6\n  CPU: 2 UID: 0 PID: 1 Comm: systemd Tainted: G S                  6.19.0-rc4-next-20260108-00024-g2202f4d30aa8 #73 PREEMPT\n  Tainted: [S]=CPU_OUT_OF_SPEC\n  Nombre del hardware: Qualcomm Technologies, Inc. Eliza (DT)\n  ...\n  tty_init_dev.part.0 (drivers/tty/tty_io.c:1414 (discriminador 11)) (P)\n  tty_open (arch/arm64/include/asm/atomic_ll_sc.h:95 (discriminador 3) drivers/tty/tty_io.c:2073 (discriminador 3) drivers/tty/tty_io.c:2120 (discriminador 3))\n  chrdev_open (fs/char_dev.c:411)\n  do_dentry_open (fs/open.c:962)\n  vfs_open (fs/open.c:1094)\n  do_open (fs/namei.c:4634)\n  path_openat (fs/namei.c:4793)\n  do_filp_open (fs/namei.c:4820)\n  do_sys_openat2 (fs/open.c:1391 (discriminador 3))\n  ...\n  Iniciando la resolución de nombres de red...\n\nAparentemente, el flujo con este pequeño espacio de usuario de ramdisk basado en Yocto es:\n\ncontrolador (qcom_geni_serial.c):                  espacio de usuario:\n============================                  ===========\nqcom_geni_serial_probe()\n uart_add_one_port()\n  serial_core_register_port()\n   serial_core_add_one_port()\n    uart_configure_port()\n     register_console()\n    |\n    |                                         abrir consola\n    |                                          ...\n    |                                          tty_init_dev()\n    |                                           driver-&gt;ports[idx] es NULL\n    |\n    tty_port_register_device_attr_serdev()\n     tty_port_link_device() &lt;- establece driver-&gt;ports[idx]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "D7B7374A-5B63-4FDE-89D3-C2AF57547341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2501c49306238b54a2de0f93de43d50ab6e76c84",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/32f37e57583f869140cff445feedeea8a5fea986",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23116",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:06.713",
      "lastModified" : "2026-03-18T13:40:31.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu\n\nFor i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset\nand clock enable bits, but is ungated and reset together with the VPUs.\nSo we can't reset G1 or G2 separately, it may led to the system hang.\nRemove rst_mask and clk_mask of imx8mq_vpu_blk_ctl_domain_data.\nLet imx8mq_vpu_power_notifier() do really vpu reset."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\npmdomain: imx8m-blk-ctrl: Eliminar máscara separada de rst y clk para vpu 8mq\n\nPara la plataforma i.MX8MQ, el ADB en el dominio VPUMIX no tiene bits separados de reinicio y habilitación de reloj, sino que se desactiva y reinicia junto con las VPUs. Por lo tanto, no podemos reiniciar G1 o G2 por separado, podría llevar a la congelación del sistema. Eliminar rst_mask y clk_mask de imx8mq_vpu_blk_ctl_domain_data. Dejar que imx8mq_vpu_power_notifier() realice realmente el reinicio de la vpu."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.18",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "3E9EC47F-0DAF-443F-AC55-E8DC35F75C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3de49966499634454fd59e0e6fecd50baab7febd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5c56a6f4b5a4f87c094c92a30fa17e28e37ec2ab",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8859e336d233e61a4c40d40dc6a9f21e8b9b719c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cad7003d951e8899db58ee2fef211586af726f09",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fd675de6bddf7e9bdf42ae3929d4c27ba6d1ef76",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23117",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:06.830",
      "lastModified" : "2026-03-18T13:40:23.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nice: add missing ice_deinit_hw() in devlink reinit path\n\ndevlink-reload results in ice_init_hw failed error, and then removing\nthe ice driver causes a NULL pointer dereference.\n\n[  +0.102213] ice 0000:ca:00.0: ice_init_hw failed: -16\n...\n[  +0.000001] Call Trace:\n[  +0.000003]  <TASK>\n[  +0.000006]  ice_unload+0x8f/0x100 [ice]\n[  +0.000081]  ice_remove+0xba/0x300 [ice]\n\nCommit 1390b8b3d2be (\"ice: remove duplicate call to ice_deinit_hw() on\nerror paths\") removed ice_deinit_hw() from ice_deinit_dev(). As a result\nice_devlink_reinit_down() no longer calls ice_deinit_hw(), but\nice_devlink_reinit_up() still calls ice_init_hw(). Since the control\nqueues are not uninitialized, ice_init_hw() fails with -EBUSY.\n\nAdd ice_deinit_hw() to ice_devlink_reinit_down() to correspond with\nice_init_hw() in ice_devlink_reinit_up()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nice: añadir la llamada faltante a ice_deinit_hw() en la ruta de reinicio de devlink\n\ndevlink-reload resulta en un error de fallo de ice_init_hw, y luego la eliminación del controlador ice causa una desreferencia de puntero NULL.\n\n[ +0.102213] ice 0000:ca:00.0: ice_init_hw falló: -16\n...\n[ +0.000001] Traza de Llamadas:\n[ +0.000003] \n[ +0.000006] ice_unload+0x8f/0x100 [ice]\n[ +0.000081] ice_remove+0xba/0x300 [ice]\n\nEl commit 1390b8b3d2be ('ice: eliminar llamada duplicada a ice_deinit_hw() en rutas de error') eliminó ice_deinit_hw() de ice_deinit_dev(). Como resultado, ice_devlink_reinit_down() ya no llama a ice_deinit_hw(), pero ice_devlink_reinit_up() todavía llama a ice_init_hw(). Dado que las colas de control no están desinicializadas, ice_init_hw() falla con -EBUSY.\n\nAñadir ice_deinit_hw() a ice_devlink_reinit_down() para corresponder con ice_init_hw() en ice_devlink_reinit_up()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.2",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "C68BE47E-77B0-441F-9B37-B225FFDB0D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/42fb5f3deb582cb96440e4683745017dbabb83d6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a3d99e2fbf01446d31a0d0dfc46444e915a1f6d4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23118",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:06.933",
      "lastModified" : "2026-03-25T11:16:18.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix data-race warning and potential load/store tearing\n\nFix the following:\n\n        BUG: KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet\n\nwhich is reporting an issue with the reads and writes to ->last_tx_at in:\n\n        conn->peer->last_tx_at = ktime_get_seconds();\n\nand:\n\n        keepalive_at = peer->last_tx_at + RXRPC_KEEPALIVE_TIME;\n\nThe lockless accesses to these to values aren't actually a problem as the\nread only needs an approximate time of last transmission for the purposes\nof deciding whether or not the transmission of a keepalive packet is\nwarranted yet.\n\nAlso, as ->last_tx_at is a 64-bit value, tearing can occur on a 32-bit\narch.\n\nFix both of these by switching to an unsigned int for ->last_tx_at and only\nstoring the LSW of the time64_t.  It can then be reconstructed at need\nprovided no more than 68 years has elapsed since the last transmission."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nrxrpc: Corregir la advertencia de condición de carrera de datos y el potencial desgarro de carga/almacenamiento\n\nCorregir lo siguiente:\n\n        BUG: KCSAN: condición de carrera de datos en rxrpc_peer_keepalive_worker / rxrpc_send_data_packet\n\nque está informando un problema con las lecturas y escrituras a -&gt;last_tx_at en:\n\n        conn-&gt;peer-&gt;last_tx_at = ktime_get_seconds();\n\ny:\n\n        keepalive_at = peer-&gt;last_tx_at + RXRPC_KEEPALIVE_TIME;\n\nLos accesos sin bloqueo a estos dos valores no son realmente un problema, ya que la lectura solo necesita un tiempo aproximado de la última transmisión con el propósito de decidir si la transmisión de un paquete keepalive está justificada o no.\n\nAdemás, como -&gt;last_tx_at es un valor de 64 bits, puede ocurrir desgarro en una arquitectura de 32 bits.\n\nCorregir ambos cambiando a un unsigned int para -&gt;last_tx_at y almacenando solo el LSW del time64_t. Luego puede ser reconstruido cuando sea necesario, siempre que no hayan transcurrido más de 68 años desde la última transmisión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "713E32F5-ABC9-4956-92EE-0E2944AD563A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5d5fe8bcd331f1e34e0943ec7c18432edfcf0e8b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a426f29ac3fa3465093567ab763ada46762fb57c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/c08cf314191cd0f8699089715efb9eff030f0086",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f8cf1368e0a5491b27189a695c36f64e48f3d19d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23119",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.043",
      "lastModified" : "2026-03-18T13:39:51.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: provide a net pointer to __skb_flow_dissect()\n\nAfter 3cbf4ffba5ee (\"net: plumb network namespace into __skb_flow_dissect\")\nwe have to provide a net pointer to __skb_flow_dissect(),\neither via skb->dev, skb->sk, or a user provided pointer.\n\nIn the following case, syzbot was able to cook a bare skb.\n\nWARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0 net/core/flow_dissector.c:1131, CPU#1: syz.2.1418/11053\nCall Trace:\n <TASK>\n  bond_flow_dissect drivers/net/bonding/bond_main.c:4093 [inline]\n  __bond_xmit_hash+0x2d7/0xba0 drivers/net/bonding/bond_main.c:4157\n  bond_xmit_hash_xdp drivers/net/bonding/bond_main.c:4208 [inline]\n  bond_xdp_xmit_3ad_xor_slave_get drivers/net/bonding/bond_main.c:5139 [inline]\n  bond_xdp_get_xmit_slave+0x1fd/0x710 drivers/net/bonding/bond_main.c:5515\n  xdp_master_redirect+0x13f/0x2c0 net/core/filter.c:4388\n  bpf_prog_run_xdp include/net/xdp.h:700 [inline]\n  bpf_test_run+0x6b2/0x7d0 net/bpf/test_run.c:421\n  bpf_prog_test_run_xdp+0x795/0x10e0 net/bpf/test_run.c:1390\n  bpf_prog_test_run+0x2c7/0x340 kernel/bpf/syscall.c:4703\n  __sys_bpf+0x562/0x860 kernel/bpf/syscall.c:6182\n  __do_sys_bpf kernel/bpf/syscall.c:6274 [inline]\n  __se_sys_bpf kernel/bpf/syscall.c:6272 [inline]\n  __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:6272\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbonding: proporcionar un puntero de red a __skb_flow_dissect()\n\nDespués de 3cbf4ffba5ee ('net: integrar el espacio de nombres de red en __skb_flow_dissect')\ntenemos que proporcionar un puntero de red a __skb_flow_dissect(),\nya sea a través de skb-&gt;dev, skb-&gt;sk, o un puntero proporcionado por el usuario.\n\nEn el siguiente caso, syzbot pudo 'cocinar' un skb básico.\n\nADVERTENCIA: net/core/flow_dissector.c:1131 en __skb_flow_dissect+0xb57/0x68b0 net/core/flow_dissector.c:1131, CPU#1: syz.2.1418/11053\nTraza de Llamadas:\n \n  bond_flow_dissect drivers/net/bonding/bond_main.c:4093 [en línea]\n  __bond_xmit_hash+0x2d7/0xba0 drivers/net/bonding/bond_main.c:4157\n  bond_xmit_hash_xdp drivers/net/bonding/bond_main.c:4208 [en línea]\n  bond_xdp_xmit_3ad_xor_slave_get drivers/net/bonding/bond_main.c:5139 [en línea]\n  bond_xdp_get_xmit_slave+0x1fd/0x710 drivers/net/bonding/bond_main.c:5515\n  xdp_master_redirect+0x13f/0x2c0 net/core/filter.c:4388\n  bpf_prog_run_xdp include/net/xdp.h:700 [en línea]\n  bpf_test_run+0x6b2/0x7d0 net/bpf/test_run.c:421\n  bpf_prog_test_run_xdp+0x795/0x10e0 net/bpf/test_run.c:1390\n  bpf_prog_test_run+0x2c7/0x340 kernel/bpf/syscall.c:4703\n  __sys_bpf+0x562/0x860 kernel/bpf/syscall.c:6182\n  __do_sys_bpf kernel/bpf/syscall.c:6274 [en línea]\n  __se_sys_bpf kernel/bpf/syscall.c:6272 [en línea]\n  __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:6272\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [en línea]\n  do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C8F8CE97-601F-43DD-8822-7399EEB63A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0efee0b992f28bd5ee01c7a86ef6a307c42eb907",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3be945abdd228fd00f6afcf8d137002867a4651b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5f9b329096596b7e53e07d041d7fca4cbe1be752",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8e53780732ee881394406f79da5263b81eb48f7e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bc3c8d2493c6f4d2038844dc8b7ee93de050f7fa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/de97735a40a144974bf3896ee4cc0270db2e47db",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f4faaa1297ecf3255a8591fff2633df05bd5ec84",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23120",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.157",
      "lastModified" : "2026-03-18T13:39:35.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nl2tp: avoid one data-race in l2tp_tunnel_del_work()\n\nWe should read sk->sk_socket only when dealing with kernel sockets.\n\nsyzbot reported the following data-race:\n\nBUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release\n\nwrite to 0xffff88811c182b20 of 8 bytes by task 5365 on cpu 0:\n  sk_set_socket include/net/sock.h:2092 [inline]\n  sock_orphan include/net/sock.h:2118 [inline]\n  sk_common_release+0xae/0x230 net/core/sock.c:4003\n  udp_lib_close+0x15/0x20 include/net/udp.h:325\n  inet_release+0xce/0xf0 net/ipv4/af_inet.c:437\n  __sock_release net/socket.c:662 [inline]\n  sock_close+0x6b/0x150 net/socket.c:1455\n  __fput+0x29b/0x650 fs/file_table.c:468\n  ____fput+0x1c/0x30 fs/file_table.c:496\n  task_work_run+0x131/0x1a0 kernel/task_work.c:233\n  resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]\n  __exit_to_user_mode_loop kernel/entry/common.c:44 [inline]\n  exit_to_user_mode_loop+0x1fe/0x740 kernel/entry/common.c:75\n  __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]\n  syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]\n  syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]\n  syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]\n  do_syscall_64+0x1e1/0x2b0 arch/x86/entry/syscall_64.c:100\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nread to 0xffff88811c182b20 of 8 bytes by task 827 on cpu 1:\n  l2tp_tunnel_del_work+0x2f/0x1a0 net/l2tp/l2tp_core.c:1418\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3340\n  worker_thread+0x582/0x770 kernel/workqueue.c:3421\n  kthread+0x489/0x510 kernel/kthread.c:463\n  ret_from_fork+0x149/0x290 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n\nvalue changed: 0xffff88811b818000 -> 0x0000000000000000"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nl2tp: evitar una carrera de datos en l2tp_tunnel_del_work()\n\nDeberíamos leer sk-&gt;sk_socket solo cuando se trata de sockets del kernel.\n\nsyzbot informó la siguiente carrera de datos:\n\nBUG: KCSAN: carrera de datos en l2tp_tunnel_del_work / sk_common_release\n\nescritura en 0xffff88811c182b20 de 8 bytes por la tarea 5365 en la cpu 0:\n  sk_set_socket include/net/sock.h:2092 [inline]\n  sock_orphan include/net/sock.h:2118 [inline]\n  sk_common_release+0xae/0x230 net/core/sock.c:4003\n  udp_lib_close+0x15/0x20 include/net/udp.h:325\n  inet_release+0xce/0xf0 net/ipv4/af_inet.c:437\n  __sock_release net/socket.c:662 [inline]\n  sock_close+0x6b/0x150 net/socket.c:1455\n  __fput+0x29b/0x650 fs/file_table.c:468\n  ____fput+0x1c/0x30 fs/file_table.c:496\n  task_work_run+0x131/0x1a0 kernel/task_work.c:233\n  resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]\n  __exit_to_user_mode_loop kernel/entry/common.c:44 [inline]\n  exit_to_user_mode_loop+0x1fe/0x740 kernel/entry/common.c:75\n  __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]\n  syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]\n  syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]\n  syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]\n  do_syscall_64+0x1e1/0x2b0 arch/x86/entry/syscall_64.c:100\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nlectura en 0xffff88811c182b20 de 8 bytes por la tarea 827 en la cpu 1:\n  l2tp_tunnel_del_work+0x2f/0x1a0 net/l2tp/l2tp_core.c:1418\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3340\n  worker_thread+0x582/0x770 kernel/workqueue.c:3421\n  kthread+0x489/0x510 kernel/kthread.c:463\n  ret_from_fork+0x149/0x290 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n\nvalor cambiado: 0xffff88811b818000 -&gt; 0x0000000000000000"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.16.57",
            "versionEndExcluding" : "3.17",
            "matchCriteriaId" : "38BA6B6B-1C08-4FA2-9202-D6F0F7E2F21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15.8",
            "versionEndExcluding" : "4.16",
            "matchCriteriaId" : "252FC08B-7067-4768-8ACD-ABFE62451433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16.1",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "A1944CE8-6BD5-4834-8128-59789B6959EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F60469AF-0A23-41D3-BC6A-C0D9A45A2CBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2A106F-944D-42C5-BB4B-E81B97A57CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "B14098E0-F40A-4C8E-B285-E96E6E604582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.16:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "01CC5953-3A04-4AA8-B8F9-18BFE5EF7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/32d417497b79efb403d75f4c185fe6fd9d64b94f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/36c40a80109f1771d59558050b1a71e13c60c759",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3d6d414b214ce31659bded2f8df50c93a3769474",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/68e92085427c84e7679ddb53c0d68836d220b6e7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7a29f6bf60f2590fe5e9c4decb451e19afad2bcf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eae074dab764ea181bbed5e88626889319177498",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23121",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.280",
      "lastModified" : "2026-03-18T13:39:23.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmISDN: annotate data-race around dev->work\n\ndev->work can re read locklessly in mISDN_read()\nand mISDN_poll(). Add READ_ONCE()/WRITE_ONCE() annotations.\n\nBUG: KCSAN: data-race in mISDN_ioctl / mISDN_read\n\nwrite to 0xffff88812d848280 of 4 bytes by task 10864 on cpu 1:\n  misdn_add_timer drivers/isdn/mISDN/timerdev.c:175 [inline]\n  mISDN_ioctl+0x2fb/0x550 drivers/isdn/mISDN/timerdev.c:233\n  vfs_ioctl fs/ioctl.c:51 [inline]\n  __do_sys_ioctl fs/ioctl.c:597 [inline]\n  __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583\n  __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583\n  x64_sys_call+0x14b0/0x3000 arch/x86/include/generated/asm/syscalls_64.h:17\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nread to 0xffff88812d848280 of 4 bytes by task 10857 on cpu 0:\n  mISDN_read+0x1f2/0x470 drivers/isdn/mISDN/timerdev.c:112\n  do_loop_readv_writev fs/read_write.c:847 [inline]\n  vfs_readv+0x3fb/0x690 fs/read_write.c:1020\n  do_readv+0xe7/0x210 fs/read_write.c:1080\n  __do_sys_readv fs/read_write.c:1165 [inline]\n  __se_sys_readv fs/read_write.c:1162 [inline]\n  __x64_sys_readv+0x45/0x50 fs/read_write.c:1162\n  x64_sys_call+0x2831/0x3000 arch/x86/include/generated/asm/syscalls_64.h:20\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nvalue changed: 0x00000000 -> 0x00000001"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmISDN: anotar condición de carrera de datos alrededor de dev-&gt;work\n\ndev-&gt;work puede ser releído sin bloqueo en mISDN_read() y mISDN_poll(). Añadir anotaciones READ_ONCE()/WRITE_ONCE().\n\nERROR: KCSAN: condición de carrera de datos en mISDN_ioctl / mISDN_read\n\nescritura en 0xffff88812d848280 de 4 bytes por la tarea 10864 en la CPU 1:\n  misdn_add_timer drivers/isdn/mISDN/timerdev.c:175 [inline]\n  mISDN_ioctl+0x2fb/0x550 drivers/isdn/mISDN/timerdev.c:233\n  vfs_ioctl fs/ioctl.c:51 [inline]\n  __do_sys_ioctl fs/ioctl.c:597 [inline]\n  __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583\n  __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583\n  x64_sys_call+0x14b0/0x3000 arch/x86/include/generated/asm/syscalls_64.h:17\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nlectura en 0xffff88812d848280 de 4 bytes por la tarea 10857 en la CPU 0:\n  mISDN_read+0x1f2/0x470 drivers/isdn/mISDN/timerdev.c:112\n  do_loop_readv_writev fs/read_write.c:847 [inline]\n  vfs_readv+0x3fb/0x690 fs/read_write.c:1020\n  do_readv+0xe7/0x210 fs/read_write.c:1080\n  __do_sys_readv fs/read_write.c:1165 [inline]\n  __se_sys_readv fs/read_write.c:1162 [inline]\n  __x64_sys_readv+0x45/0x50 fs/read_write.c:1162\n  x64_sys_call+0x2831/0x3000 arch/x86/include/generated/asm/syscalls_64.h:20\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nvalor cambiado: 0x00000000 -&gt; 0x00000001"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "2E8EF460-108F-4F75-A76F-D36A1C2AA384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/13f3b3b87068898056db4c79ee67052fbde11d43",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7ac345a93af31358e18e9606eb7b354691bf6757",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8175dbf174d487afab81e936a862a8d9b8a1ccb6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aa6e33cd74ca4965f2bbcb025e0b672fb0168a69",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/accc3f8266d2a49881dbcf78c459477f4efa0ff3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d5d99cb9e0839093cd53aa3b28176fce2f820ca0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23122",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.390",
      "lastModified" : "2026-03-18T14:50:49.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: Reduce TSN TX packet buffer from 7KB to 5KB per queue\n\nThe previous 7 KB per queue caused TX unit hangs under heavy\ntimestamping load. Reducing to 5 KB avoids these hangs and matches\nthe TSN recommendation in I225/I226 SW User Manual Section 7.5.4.\n\nThe 8 KB \"freed\" by this change is currently unused. This reduction\nis not expected to impact throughput, as the i226 is PCIe-limited\nfor small TSN packets rather than TX-buffer-limited."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nigc: Reducir el búfer de paquetes TX TSN de 7KB a 5KB por cola\n\nLos 7 KB anteriores por cola causaban bloqueos de la unidad TX bajo una carga pesada de marca de tiempo. La reducción a 5 KB evita estos bloqueos y coincide con la recomendación TSN en la Sección 7.5.4 del Manual de Usuario de SW I225/I226.\n\nLos 8 KB 'liberados' por este cambio actualmente no se utilizan. Esta reducción no se espera que impacte el rendimiento, ya que el i226 está limitado por PCIe para paquetes TSN pequeños en lugar de estar limitado por el búfer TX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "467E1359-7F6A-4790-AC45-172024944460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/88037973c8ef6032bf84e9955595f8b20bc14c21",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ad1b6c1e63d25f5465b7a8aa403bdcee84b86f9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23123",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.500",
      "lastModified" : "2026-03-18T14:50:40.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ninterconnect: debugfs: initialize src_node and dst_node to empty strings\n\nThe debugfs_create_str() API assumes that the string pointer is either NULL\nor points to valid kmalloc() memory. Leaving the pointer uninitialized can\ncause problems.\n\nInitialize src_node and dst_node to empty strings before creating the\ndebugfs entries to guarantee that reads and writes are safe."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad se ha resuelto:\n\ninterconnect: debugfs: inicializar src_node y dst_node a cadenas vacías\n\nLa API debugfs_create_str() asume que el puntero de cadena es NULL o apunta a memoria kmalloc() válida. Dejar el puntero sin inicializar puede causar problemas.\n\nInicializar src_node y dst_node a cadenas vacías antes de crear las entradas debugfs para garantizar que las lecturas y escrituras sean seguras."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "5BC7DC6F-F752-49B5-82B2-A8F4BF9C3EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5d7c7e1fb3ec24fdd0f9faa27b666d6789e891e8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8cc27f5c6dd17dd090f3a696683f04336c162ff5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/935d0938b570589c8b0a1733d2cba3c39d027f25",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aa79a5a959c7c414bd6fba01ea8dbaddd44f13e7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23124",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.633",
      "lastModified" : "2026-03-18T14:50:31.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: annotate data-race in ndisc_router_discovery()\n\nsyzbot found that ndisc_router_discovery() could read and write\nin6_dev->ra_mtu without holding a lock [1]\n\nThis looks fine, IFLA_INET6_RA_MTU is best effort.\n\nAdd READ_ONCE()/WRITE_ONCE() to document the race.\n\nNote that we might also reject illegal MTU values\n(mtu < IPV6_MIN_MTU || mtu > skb->dev->mtu) in a future patch.\n\n[1]\nBUG: KCSAN: data-race in ndisc_router_discovery / ndisc_router_discovery\n\nread to 0xffff888119809c20 of 4 bytes by task 25817 on cpu 1:\n  ndisc_router_discovery+0x151d/0x1c90 net/ipv6/ndisc.c:1558\n  ndisc_rcv+0x2ad/0x3d0 net/ipv6/ndisc.c:1841\n  icmpv6_rcv+0xe5a/0x12f0 net/ipv6/icmp.c:989\n  ip6_protocol_deliver_rcu+0xb2a/0x10d0 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0xf0/0x1d0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ip6_input+0x5e/0x140 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x27c/0x470 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [inline]\n  ip6_rcv_finish+0x336/0x340 net/ipv6/ip6_input.c:79\n...\n\nwrite to 0xffff888119809c20 of 4 bytes by task 25816 on cpu 0:\n  ndisc_router_discovery+0x155a/0x1c90 net/ipv6/ndisc.c:1559\n  ndisc_rcv+0x2ad/0x3d0 net/ipv6/ndisc.c:1841\n  icmpv6_rcv+0xe5a/0x12f0 net/ipv6/icmp.c:989\n  ip6_protocol_deliver_rcu+0xb2a/0x10d0 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0xf0/0x1d0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ip6_input+0x5e/0x140 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x27c/0x470 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [inline]\n  ip6_rcv_finish+0x336/0x340 net/ipv6/ip6_input.c:79\n...\n\nvalue changed: 0x00000000 -> 0xe5400659"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nipv6: anotar condición de carrera de datos en ndisc_router_discovery()\n\nsyzbot encontró que ndisc_router_discovery() podía leer y escribir in6_dev-&gt;ra_mtu sin mantener un bloqueo [1]\n\nEsto parece estar bien, IFLA_INET6_RA_MTU es de mejor esfuerzo.\n\nAñadir READ_ONCE()/WRITE_ONCE() para documentar la condición de carrera.\n\nTenga en cuenta que también podríamos rechazar valores MTU ilegales (mtu &lt; IPV6_MIN_MTU || mtu &gt; skb-&gt;dev-&gt;mtu) en un parche futuro.\n\n[1]\nERROR: KCSAN: condición de carrera de datos en ndisc_router_discovery / ndisc_router_discovery\n\nlectura a 0xffff888119809c20 de 4 bytes por la tarea 25817 en la cpu 1:\n  ndisc_router_discovery+0x151d/0x1c90 net/ipv6/ndisc.c:1558\n  ndisc_rcv+0x2ad/0x3d0 net/ipv6/ndisc.c:1841\n  icmpv6_rcv+0xe5a/0x12f0 net/ipv6/icmp.c:989\n  ip6_protocol_deliver_rcu+0xb2a/0x10d0 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0xf0/0x1d0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ip6_input+0x5e/0x140 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x27c/0x470 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [inline]\n  ip6_rcv_finish+0x336/0x340 net/ipv6/ip6_input.c:79\n...\n\nescritura a 0xffff888119809c20 de 4 bytes por la tarea 25816 en la cpu 0:\n  ndisc_router_discovery+0x155a/0x1c90 net/ipv6/ndisc.c:1559\n  ndisc_rcv+0x2ad/0x3d0 net/ipv6/ndisc.c:1841\n  icmpv6_rcv+0xe5a/0x12f0 net/ipv6/icmp.c:989\n  ip6_protocol_deliver_rcu+0xb2a/0x10d0 net/ipv6/ip6_input.c:438\n  ip6_input_finish+0xf0/0x1d0 net/ipv6/ip6_input.c:489\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n  ip6_input+0x5e/0x140 net/ipv6/ip6_input.c:500\n  ip6_mc_input+0x27c/0x470 net/ipv6/ip6_input.c:590\n  dst_input include/net/dst.h:474 [inline]\n  ip6_rcv_finish+0x336/0x340 net/ipv6/ip6_input.c:79\n...\n\nvalor cambiado: 0x00000000 -&gt; 0xe5400659"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "3F9487DA-0705-4945-A8B3-1460DE840D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2619499169fb1c2ac4974b0f2d87767fb543582b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2a2b9d25f801afecf2f83cacce98afa8fd73e3c9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4630897eb1a039b5d7b737b8dc9521d9d4b568b5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9a063f96d87efc3a6cc667f8de096a3d38d74bb5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e3c1040252e598f7b4e33a42dc7c38519bc22428",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fad8f4ff7928f4d52a062ffdcffa484989c79c47",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23125",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.740",
      "lastModified" : "2026-03-18T14:50:20.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT\n\nA null-ptr-deref was reported in the SCTP transmit path when SCTP-AUTH key\ninitialization fails:\n\n  ==================================================================\n  KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]\n  CPU: 0 PID: 16 Comm: ksoftirqd/0 Tainted: G W 6.6.0 #2\n  RIP: 0010:sctp_packet_bundle_auth net/sctp/output.c:264 [inline]\n  RIP: 0010:sctp_packet_append_chunk+0xb36/0x1260 net/sctp/output.c:401\n  Call Trace:\n\n  sctp_packet_transmit_chunk+0x31/0x250 net/sctp/output.c:189\n  sctp_outq_flush_data+0xa29/0x26d0 net/sctp/outqueue.c:1111\n  sctp_outq_flush+0xc80/0x1240 net/sctp/outqueue.c:1217\n  sctp_cmd_interpreter.isra.0+0x19a5/0x62c0 net/sctp/sm_sideeffect.c:1787\n  sctp_side_effects net/sctp/sm_sideeffect.c:1198 [inline]\n  sctp_do_sm+0x1a3/0x670 net/sctp/sm_sideeffect.c:1169\n  sctp_assoc_bh_rcv+0x33e/0x640 net/sctp/associola.c:1052\n  sctp_inq_push+0x1dd/0x280 net/sctp/inqueue.c:88\n  sctp_rcv+0x11ae/0x3100 net/sctp/input.c:243\n  sctp6_rcv+0x3d/0x60 net/sctp/ipv6.c:1127\n\nThe issue is triggered when sctp_auth_asoc_init_active_key() fails in\nsctp_sf_do_5_1C_ack() while processing an INIT_ACK. In this case, the\ncommand sequence is currently:\n\n- SCTP_CMD_PEER_INIT\n- SCTP_CMD_TIMER_STOP (T1_INIT)\n- SCTP_CMD_TIMER_START (T1_COOKIE)\n- SCTP_CMD_NEW_STATE (COOKIE_ECHOED)\n- SCTP_CMD_ASSOC_SHKEY\n- SCTP_CMD_GEN_COOKIE_ECHO\n\nIf SCTP_CMD_ASSOC_SHKEY fails, asoc->shkey remains NULL, while\nasoc->peer.auth_capable and asoc->peer.peer_chunks have already been set by\nSCTP_CMD_PEER_INIT. This allows a DATA chunk with auth = 1 and shkey = NULL\nto be queued by sctp_datamsg_from_user().\n\nSince command interpretation stops on failure, no COOKIE_ECHO should been\nsent via SCTP_CMD_GEN_COOKIE_ECHO. However, the T1_COOKIE timer has already\nbeen started, and it may enqueue a COOKIE_ECHO into the outqueue later. As\na result, the DATA chunk can be transmitted together with the COOKIE_ECHO\nin sctp_outq_flush_data(), leading to the observed issue.\n\nSimilar to the other places where it calls sctp_auth_asoc_init_active_key()\nright after sctp_process_init(), this patch moves the SCTP_CMD_ASSOC_SHKEY\nimmediately after SCTP_CMD_PEER_INIT, before stopping T1_INIT and starting\nT1_COOKIE. This ensures that if shared key generation fails, authenticated\nDATA cannot be sent. It also allows the T1_INIT timer to retransmit INIT,\ngiving the client another chance to process INIT_ACK and retry key setup."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nsctp: mover SCTP_CMD_ASSOC_SHKEY justo después de SCTP_CMD_PEER_INIT\n\nSe informó de una desreferencia de puntero nulo (null-ptr-deref) en la ruta de transmisión SCTP cuando falla la inicialización de la clave SCTP-AUTH:\n\n  ==================================================================\n  KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]\n  CPU: 0 PID: 16 Comm: ksoftirqd/0 Tainted: G W 6.6.0 #2\n  RIP: 0010:sctp_packet_bundle_auth net/sctp/output.c:264 [inline]\n  RIP: 0010:sctp_packet_append_chunk+0xb36/0x1260 net/sctp/output.c:401\n  Call Trace:\n\n  sctp_packet_transmit_chunk+0x31/0x250 net/sctp/output.c:189\n  sctp_outq_flush_data+0xa29/0x26d0 net/sctp/outqueue.c:1111\n  sctp_outq_flush+0xc80/0x1240 net/sctp/outqueue.c:1217\n  sctp_cmd_interpreter.isra.0+0x19a5/0x62c0 net/sctp/sm_sideeffect.c:1787\n  sctp_side_effects net/sctp/sm_sideeffect.c:1198 [inline]\n  sctp_do_sm+0x1a3/0x670 net/sctp/sm_sideeffect.c:1169\n  sctp_assoc_bh_rcv+0x33e/0x640 net/sctp/associola.c:1052\n  sctp_inq_push+0x1dd/0x280 net/sctp/inqueue.c:88\n  sctp_rcv+0x11ae/0x3100 net/sctp/input.c:243\n  sctp6_rcv+0x3d/0x60 net/sctp/ipv6.c:1127\n\nEl problema se activa cuando sctp_auth_asoc_init_active_key() falla en sctp_sf_do_5_1C_ack() mientras se procesa un INIT_ACK. En este caso, la secuencia de comandos es actualmente:\n\n- SCTP_CMD_PEER_INIT\n- SCTP_CMD_TIMER_STOP (T1_INIT)\n- SCTP_CMD_TIMER_START (T1_COOKIE)\n- SCTP_CMD_NEW_STATE (COOKIE_ECHOED)\n- SCTP_CMD_ASSOC_SHKEY\n- SCTP_CMD_GEN_COOKIE_ECHO\n\nSi SCTP_CMD_ASSOC_SHKEY falla, asoc-&gt;shkey permanece NULL, mientras que asoc-&gt;peer.auth_capable y asoc-&gt;peer.peer_chunks ya han sido establecidos por SCTP_CMD_PEER_INIT. Esto permite que un fragmento DATA con auth = 1 y shkey = NULL sea encolado por sctp_datamsg_from_user().\n\nDado que la interpretación de comandos se detiene en caso de fallo, no debería haberse enviado ningún COOKIE_ECHO a través de SCTP_CMD_GEN_COOKIE_ECHO. Sin embargo, el temporizador T1_COOKIE ya se ha iniciado, y puede encolar un COOKIE_ECHO en la cola de salida (outqueue) más tarde. Como resultado, el fragmento DATA puede transmitirse junto con el COOKIE_ECHO en sctp_outq_flush_data(), lo que lleva al problema observado.\n\nDe forma similar a otros lugares donde llama a sctp_auth_asoc_init_active_key() justo después de sctp_process_init(), este parche mueve el SCTP_CMD_ASSOC_SHKEY inmediatamente después de SCTP_CMD_PEER_INIT, antes de detener T1_INIT e iniciar T1_COOKIE. Esto asegura que si la generación de clave compartida falla, los datos autenticados (authenticated DATA) no puedan ser enviados. También permite que el temporizador T1_INIT retransmita INIT, dando al cliente otra oportunidad de procesar INIT_ACK y reintentar la configuración de la clave."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.24",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "AE477F32-00B6-4DD0-AF74-26E02721FC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0c4adb1f391a7b92a0405e9d7c05624c0d9f8a65",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5a309bedf02ee08b0653215f06c94d61ec7a214a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/784428ab1889eb185a1459e9d6bc52df33d572ef",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a80c9d945aef55b23b54838334345f20251dad83",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bf2b543b3cc4ebb4ab5bca4f8dfa5612035d45b8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e7e81abbcc5620c9532080538f9709a6ea382855",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e94294798548e8cfbd80869e1d2f97efce92582c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23126",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.853",
      "lastModified" : "2026-03-18T14:50:12.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: fix a race issue related to the operation on bpf_bound_progs list\n\nThe netdevsim driver lacks a protection mechanism for operations on the\nbpf_bound_progs list. When the nsim_bpf_create_prog() performs\nlist_add_tail, it is possible that nsim_bpf_destroy_prog() is\nsimultaneously performs list_del. Concurrent operations on the list may\nlead to list corruption and trigger a kernel crash as follows:\n\n[  417.290971] kernel BUG at lib/list_debug.c:62!\n[  417.290983] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n[  417.290992] CPU: 10 PID: 168 Comm: kworker/10:1 Kdump: loaded Not tainted 6.19.0-rc5 #1\n[  417.291003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[  417.291007] Workqueue: events bpf_prog_free_deferred\n[  417.291021] RIP: 0010:__list_del_entry_valid_or_report+0xa7/0xc0\n[  417.291034] Code: a8 ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 48 a1 eb ae e8 ed fb a8 ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 80 a1 eb ae e8 d9 fb a8 ff <0f> 0b 48 89 d1 48 c7 c7 d0 a1 eb ae 48 89 f2 48 89 c6 e8 c2 fb a8\n[  417.291040] RSP: 0018:ffffb16a40807df8 EFLAGS: 00010246\n[  417.291046] RAX: 000000000000006d RBX: ffff8e589866f500 RCX: 0000000000000000\n[  417.291051] RDX: 0000000000000000 RSI: ffff8e59f7b23180 RDI: ffff8e59f7b23180\n[  417.291055] RBP: ffffb16a412c9000 R08: 0000000000000000 R09: 0000000000000003\n[  417.291059] R10: ffffb16a40807c80 R11: ffffffffaf9edce8 R12: ffff8e594427ac20\n[  417.291063] R13: ffff8e59f7b44780 R14: ffff8e58800b7a05 R15: 0000000000000000\n[  417.291074] FS:  0000000000000000(0000) GS:ffff8e59f7b00000(0000) knlGS:0000000000000000\n[  417.291079] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  417.291083] CR2: 00007fc4083efe08 CR3: 00000001c3626006 CR4: 0000000000770ee0\n[  417.291088] PKRU: 55555554\n[  417.291091] Call Trace:\n[  417.291096]  <TASK>\n[  417.291103]  nsim_bpf_destroy_prog+0x31/0x80 [netdevsim]\n[  417.291154]  __bpf_prog_offload_destroy+0x2a/0x80\n[  417.291163]  bpf_prog_dev_bound_destroy+0x6f/0xb0\n[  417.291171]  bpf_prog_free_deferred+0x18e/0x1a0\n[  417.291178]  process_one_work+0x18a/0x3a0\n[  417.291188]  worker_thread+0x27b/0x3a0\n[  417.291197]  ? __pfx_worker_thread+0x10/0x10\n[  417.291207]  kthread+0xe5/0x120\n[  417.291214]  ? __pfx_kthread+0x10/0x10\n[  417.291221]  ret_from_fork+0x31/0x50\n[  417.291230]  ? __pfx_kthread+0x10/0x10\n[  417.291236]  ret_from_fork_asm+0x1a/0x30\n[  417.291246]  </TASK>\n\nAdd a mutex lock, to prevent simultaneous addition and deletion operations\non the list."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetdevsim: soluciona un problema de condición de carrera relacionado con la operación en la lista bpf_bound_progs\n\nEl controlador netdevsim carece de un mecanismo de protección para las operaciones en la lista bpf_bound_progs. Cuando nsim_bpf_create_prog() realiza list_add_tail, es posible que nsim_bpf_destroy_prog() realice simultáneamente list_del. Operaciones concurrentes en la lista pueden llevar a la corrupción de la lista y desencadenar un fallo del kernel de la siguiente manera:\n\n[  417.290971] kernel BUG at lib/list_debug.c:62!\n[  417.290983] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n[  417.290992] CPU: 10 PID: 168 Comm: kworker/10:1 Kdump: loaded Not tainted 6.19.0-rc5 #1\n[  417.291003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[  417.291007] Workqueue: events bpf_prog_free_deferred\n[  417.291021] RIP: 0010:__list_del_entry_valid_or_report+0xa7/0xc0\n[  417.291034] Code: a8 ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 48 a1 eb ae e8 ed fb a8 ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 80 a1 eb ae e8 d9 fb a8 ff &lt;0f&gt; 0b 48 89 d1 48 c7 c7 d0 a1 eb ae 48 89 f2 48 89 c6 e8 c2 fb a8\n[  417.291040] RSP: 0018:ffffb16a40807df8 EFLAGS: 00010246\n[  417.291046] RAX: 000000000000006d RBX: ffff8e589866f500 RCX: 0000000000000000\n[  417.291051] RDX: 0000000000000000 RSI: ffff8e59f7b23180 RDI: ffff8e59f7b23180\n[  417.291055] RBP: ffffb16a412c9000 R08: 0000000000000000 R09: 0000000000000003\n[  417.291059] R10: ffffb16a40807c80 R11: ffffffffaf9edce8 R12: ffff8e594427ac20\n[  417.291063] R13: ffff8e59f7b44780 R14: ffff8e58800b7a05 R15: 0000000000000000\n[  417.291074] FS:  0000000000000000(0000) GS:ffff8e59f7b00000(0000) knlGS:0000000000000000\n[  417.291079] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  417.291083] CR2: 00007fc4083efe08 CR3: 00000001c3626006 CR4: 0000000000770ee0\n[  417.291088] PKRU: 55555554\n[  417.291091] Call Trace:\n[  417.291096]  \n[  417.291103]  nsim_bpf_destroy_prog+0x31/0x80 [netdevsim]\n[  417.291154]  __bpf_prog_offload_destroy+0x2a/0x80\n[  417.291163]  bpf_prog_dev_bound_destroy+0x6f/0xb0\n[  417.291171]  bpf_prog_free_deferred+0x18e/0x1a0\n[  417.291178]  process_one_work+0x18a/0x3a0\n[  417.291188]  worker_thread+0x27b/0x3a0\n[  417.291197]  ? __pfx_worker_thread+0x10/0x10\n[  417.291207]  kthread+0xe5/0x120\n[  417.291214]  ? __pfx_kthread+0x10/0x10\n[  417.291221]  ret_from_fork+0x31/0x50\n[  417.291230]  ? __pfx_kthread+0x10/0x10\n[  417.291236]  ret_from_fork_asm+0x1a/0x30\n[  417.291246]  \n\nSe añade un bloqueo mutex para evitar operaciones simultáneas de adición y eliminación en la lista."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "A41CFBA5-2B99-4E6A-B45C-AD4395A55B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3f560cfc7706029294132482fff5d1bc7884b70d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/68462ecc40ea8f780fb3c74ebfddd05506bb731b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b97d5eedf4976cc94321243be83b39efe81a0e15",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d77379ca82efcb2fe563359cc795027d680410db",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f1f9cfd2f46a73b7de2982d01be822eac3a0efaa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23127",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:07.963",
      "lastModified" : "2026-03-18T14:49:58.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix refcount warning on event->mmap_count increment\n\nWhen calling refcount_inc(&event->mmap_count) inside perf_mmap_rb(), the\nfollowing warning is triggered:\n\n        refcount_t: addition on 0; use-after-free.\n        WARNING: lib/refcount.c:25\n\nPoC:\n\n    struct perf_event_attr attr = {0};\n    int fd = syscall(__NR_perf_event_open, &attr, 0, -1, -1, 0);\n    mmap(NULL, 0x3000, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);\n    int victim = syscall(__NR_perf_event_open, &attr, 0, -1, fd,\n                         PERF_FLAG_FD_OUTPUT);\n    mmap(NULL, 0x3000, PROT_READ | PROT_WRITE, MAP_SHARED, victim, 0);\n\nThis occurs when creating a group member event with the flag\nPERF_FLAG_FD_OUTPUT. The group leader should be mmap-ed and then mmap-ing\nthe event triggers the warning.\n\nSince the event has copied the output_event in perf_event_set_output(),\nevent->rb is set. As a result, perf_mmap_rb() calls\nrefcount_inc(&event->mmap_count) when event->mmap_count = 0.\n\nDisallow the case when event->mmap_count = 0. This also prevents two\nevents from updating the same user_page."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nperf: Corrección de la advertencia de refcount en el incremento de event-&gt;mmap_count\n\nAl llamar a refcount_inc(&amp;event-&gt;mmap_count) dentro de perf_mmap_rb(), se activa la siguiente advertencia:\n\n        refcount_t: adición en 0; uso después de liberación.\n        ADVERTENCIA: lib/refcount.c:25\n\nPoC:\n\n    struct perf_event_attr attr = {0};\n    int fd = syscall(__NR_perf_event_open, &amp;attr, 0, -1, -1, 0);\n    mmap(NULL, 0x3000, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);\n    int victim = syscall(__NR_perf_event_open, &amp;attr, 0, -1, fd,\n                         PERF_FLAG_FD_OUTPUT);\n    mmap(NULL, 0x3000, PROT_READ | PROT_WRITE, MAP_SHARED, victim, 0);\n\nEsto ocurre al crear un evento miembro de grupo con la bandera PERF_FLAG_FD_OUTPUT. El líder del grupo debe ser mapeado con mmap y luego mapear el evento con mmap activa la advertencia.\n\nDado que el evento ha copiado el output_event en perf_event_set_output(), event-&gt;rb está establecido. Como resultado, perf_mmap_rb() llama a refcount_inc(&amp;event-&gt;mmap_count) cuando event-&gt;mmap_count = 0.\n\nNo permitir el caso cuando event-&gt;mmap_count = 0. Esto también evita que dos eventos actualicen la misma user_page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "7B26C1E1-97A9-48B8-81C6-B6A3A0FC6C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/23c0e4bd93d0b250775162faf456470485ac9fc7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d06bf78e55d5159c1b00072e606ab924ffbbad35",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23128",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:08.060",
      "lastModified" : "2026-03-18T14:46:26.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: Set __nocfi on swsusp_arch_resume()\n\nA DABT is reported[1] on an android based system when resume from hiberate.\nThis happens because swsusp_arch_suspend_exit() is marked with SYM_CODE_*()\nand does not have a CFI hash, but swsusp_arch_resume() will attempt to\nverify the CFI hash when calling a copy of swsusp_arch_suspend_exit().\n\nGiven that there's an existing requirement that the entrypoint to\nswsusp_arch_suspend_exit() is the first byte of the .hibernate_exit.text\nsection, we cannot fix this by marking swsusp_arch_suspend_exit() with\nSYM_FUNC_*(). The simplest fix for now is to disable the CFI check in\nswsusp_arch_resume().\n\nMark swsusp_arch_resume() as __nocfi to disable the CFI check.\n\n[1]\n[   22.991934][    T1] Unable to handle kernel paging request at virtual address 0000000109170ffc\n[   22.991934][    T1] Mem abort info:\n[   22.991934][    T1]   ESR = 0x0000000096000007\n[   22.991934][    T1]   EC = 0x25: DABT (current EL), IL = 32 bits\n[   22.991934][    T1]   SET = 0, FnV = 0\n[   22.991934][    T1]   EA = 0, S1PTW = 0\n[   22.991934][    T1]   FSC = 0x07: level 3 translation fault\n[   22.991934][    T1] Data abort info:\n[   22.991934][    T1]   ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000\n[   22.991934][    T1]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[   22.991934][    T1]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[   22.991934][    T1] [0000000109170ffc] user address but active_mm is swapper\n[   22.991934][    T1] Internal error: Oops: 0000000096000007 [#1] PREEMPT SMP\n[   22.991934][    T1] Dumping ftrace buffer:\n[   22.991934][    T1]    (ftrace buffer empty)\n[   22.991934][    T1] Modules linked in:\n[   22.991934][    T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.6.98-android15-8-g0b1d2aee7fc3-dirty-4k #1 688c7060a825a3ac418fe53881730b355915a419\n[   22.991934][    T1] Hardware name: Unisoc UMS9360-base Board (DT)\n[   22.991934][    T1] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[   22.991934][    T1] pc : swsusp_arch_resume+0x2ac/0x344\n[   22.991934][    T1] lr : swsusp_arch_resume+0x294/0x344\n[   22.991934][    T1] sp : ffffffc08006b960\n[   22.991934][    T1] x29: ffffffc08006b9c0 x28: 0000000000000000 x27: 0000000000000000\n[   22.991934][    T1] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000820\n[   22.991934][    T1] x23: ffffffd0817e3000 x22: ffffffd0817e3000 x21: 0000000000000000\n[   22.991934][    T1] x20: ffffff8089171000 x19: ffffffd08252c8c8 x18: ffffffc080061058\n[   22.991934][    T1] x17: 00000000529c6ef0 x16: 00000000529c6ef0 x15: 0000000000000004\n[   22.991934][    T1] x14: ffffff8178c88000 x13: 0000000000000006 x12: 0000000000000000\n[   22.991934][    T1] x11: 0000000000000015 x10: 0000000000000001 x9 : ffffffd082533000\n[   22.991934][    T1] x8 : 0000000109171000 x7 : 205b5d3433393139 x6 : 392e32322020205b\n[   22.991934][    T1] x5 : 000000010916f000 x4 : 000000008164b000 x3 : ffffff808a4e0530\n[   22.991934][    T1] x2 : ffffffd08058e784 x1 : 0000000082326000 x0 : 000000010a283000\n[   22.991934][    T1] Call trace:\n[   22.991934][    T1]  swsusp_arch_resume+0x2ac/0x344\n[   22.991934][    T1]  hibernation_restore+0x158/0x18c\n[   22.991934][    T1]  load_image_and_restore+0xb0/0xec\n[   22.991934][    T1]  software_resume+0xf4/0x19c\n[   22.991934][    T1]  software_resume_initcall+0x34/0x78\n[   22.991934][    T1]  do_one_initcall+0xe8/0x370\n[   22.991934][    T1]  do_initcall_level+0xc8/0x19c\n[   22.991934][    T1]  do_initcalls+0x70/0xc0\n[   22.991934][    T1]  do_basic_setup+0x1c/0x28\n[   22.991934][    T1]  kernel_init_freeable+0xe0/0x148\n[   22.991934][    T1]  kernel_init+0x20/0x1a8\n[   22.991934][    T1]  ret_from_fork+0x10/0x20\n[   22.991934][    T1] Code: a9400a61 f94013e0 f9438923 f9400a64 (b85fc110)\n\n[catalin.marinas@arm.com: commit log updated by Mark Rutland]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\narm64: Establecer __nocfi en swsusp_arch_resume()\n\nSe informa de un DABT[1] en un sistema basado en Android al reanudar desde la hibernación. Esto ocurre porque swsusp_arch_suspend_exit() está marcado con SYM_CODE_*() y no tiene un hash CFI, pero swsusp_arch_resume() intentará verificar el hash CFI al llamar a una copia de swsusp_arch_suspend_exit().\n\nDado que existe un requisito de que el punto de entrada a swsusp_arch_suspend_exit() es el primer byte de la sección .hibernate_exit.text, no podemos solucionar esto marcando swsusp_arch_suspend_exit() con SYM_FUNC_*(). La solución más sencilla por ahora es deshabilitar la verificación CFI en swsusp_arch_resume().\n\nMarcar swsusp_arch_resume() como __nocfi para deshabilitar la verificación CFI.\n\n[1]\n[   22.991934][    T1] Unable to handle kernel paging request at virtual address 0000000109170ffc\n[   22.991934][    T1] Mem abort info:\n[   22.991934][    T1]   ESR = 0x0000000096000007\n[   22.991934][    T1]   EC = 0x25: DABT (current EL), IL = 32 bits\n[   22.991934][    T1]   SET = 0, FnV = 0\n[   22.991934][    T1]   EA = 0, S1PTW = 0\n[   22.991934][    T1]   FSC = 0x07: level 3 translation fault\n[   22.991934][    T1] Data abort info:\n[   22.991934][    T1]   ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000\n[   22.991934][    T1]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[   22.991934][    T1]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[   22.991934][    T1] [0000000109170ffc] user address but active_mm is swapper\n[   22.991934][    T1] Internal error: Oops: 0000000096000007 [#1] PREEMPT SMP\n[   22.991934][    T1] Dumping ftrace buffer:\n[   22.991934][    T1]    (ftrace buffer empty)\n[   22.991934][    T1] Modules linked in:\n[   22.991934][    T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.6.98-android15-8-g0b1d2aee7fc3-dirty-4k #1 688c7060a825a3ac418fe53881730b355915a419\n[   22.991934][    T1] Hardware name: Unisoc UMS9360-base Board (DT)\n[   22.991934][    T1] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[   22.991934][    T1] pc : swsusp_arch_resume+0x2ac/0x344\n[   22.991934][    T1] lr : swsusp_arch_resume+0x294/0x344\n[   22.991934][    T1] sp : ffffffc08006b960\n[   22.991934][    T1] x29: ffffffc08006b9c0 x28: 0000000000000000 x27: 0000000000000000\n[   22.991934][    T1] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000820\n[   22.991934][    T1] x23: ffffffd0817e3000 x22: ffffffd0817e3000 x21: 0000000000000000\n[   22.991934][    T1] x20: ffffff8089171000 x19: ffffffd08252c8c8 x18: ffffffc080061058\n[   22.991934][    T1] x17: 00000000529c6ef0 x16: 00000000529c6ef0 x15: 0000000000000004\n[   22.991934][    T1] x14: ffffff8178c88000 x13: 0000000000000006 x12: 0000000000000000\n[   22.991934][    T1] x11: 0000000000000015 x10: 0000000000000001 x9 : ffffffd082533000\n[   22.991934][    T1] x8 : 0000000109171000 x7 : 205b5d3433393139 x6 : 392e32322020205b\n[   22.991934][    T1] x5 : 000000010916f000 x4 : 000000008164b000 x3 : ffffff808a4e0530\n[   22.991934][    T1] x2 : ffffffd08058e784 x1 : 0000000082326000 x0 : 000000010a283000\n[   22.991934][    T1] Call trace:\n[   22.991934][    T1]  swsusp_arch_resume+0x2ac/0x344\n[   22.991934][    T1]  hibernation_restore+0x158/0x18c\n[   22.991934][    T1]  load_image_and_restore+0xb0/0xec\n[   22.991934][    T1]  software_resume+0xf4/0x19c\n[   22.991934][    T1]  software_resume_initcall+0x34/0x78\n[   22.991934][    T1]  do_one_initcall+0xe8/0x370\n[   22.991934][    T1]  do_initcall_level+0xc8/0x19c\n[   22.991934][    T1]  do_initcalls+0x70/0xc0\n[   22.991934][    T1]  do_basic_setup+0x1c/0x28\n[   22.991934][    T1]  kernel_init_freeable+0xe0/0x148\n[   22.991934][    T1]  kernel_init+0x20/0x1a8\n[   22.991934][    T1]  ret_from_fork+0x10/0x20\n[   22.991934][    T1] Code: a9400a61 f94013e0 f9438923 f9400a64 (b85fc110)\n\n[catalin.marinas@arm.com: commit log updated by Mark Rutland]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "F80B8D0C-6CE9-4354-AA9D-2A7DFD7B3620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/122b7cb80f7d468fcc2d18cf7eb320f09f310a96",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6e32070d29d1a35d8f4b3c03babf6c0e5efd1d08",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8557bdd9af8dd04911fba56ff92b17842b0b5c7f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9773a886f26766a8db92d4b342b620a82c2de7dd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e2f8216ca2d8e61a23cb6ec355616339667e0ba6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23129",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:08.173",
      "lastModified" : "2026-03-18T14:17:11.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndpll: Prevent duplicate registrations\n\nModify the internal registration helpers dpll_xa_ref_{dpll,pin}_add()\nto reject duplicate registration attempts.\n\nPreviously, if a caller attempted to register the same pin multiple\ntimes (with the same ops, priv, and cookie) on the same device, the core\nsilently increments the reference count and return success. This behavior\nis incorrect because if the caller makes these duplicate registrations\nthen for the first one dpll_pin_registration is allocated and for others\nthe associated dpll_pin_ref.refcount is incremented. During the first\nunregistration the associated dpll_pin_registration is freed and for\nothers WARN is fired.\n\nFix this by updating the logic to return `-EEXIST` if a matching\nregistration is found to enforce a strict \"register once\" policy."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndpll: Prevenir registros duplicados\n\nModificar las funciones auxiliares de registro internas dpll_xa_ref_{dpll,pin}_add() para rechazar intentos de registro duplicados.\n\nAnteriormente, si un llamador intentaba registrar el mismo pin múltiples veces (con las mismas ops, priv y cookie) en el mismo dispositivo, el núcleo incrementaba silenciosamente el contador de referencias y devolvía éxito. Este comportamiento es incorrecto porque si el llamador realiza estos registros duplicados, entonces para el primero se asigna dpll_pin_registration y para los demás se incrementa el dpll_pin_ref.refcount asociado. Durante la primera anulación de registro se libera el dpll_pin_registration asociado y para los demás se dispara una advertencia.\n\nEsto se soluciona actualizando la lógica para devolver -EEXIST si se encuentra un registro coincidente, para aplicar una política estricta de 'registrar una vez'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/236a657422a564859dcd0db7bdb486abb21a721a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dfec0501dba8f4711ef142a6a890e4812b7af88c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f3ddbaaaaf4d0633b40482f471753f9c71294a4a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23130",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:08.277",
      "lastModified" : "2026-03-17T21:17:11.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix dead lock while flushing management frames\n\nCommit [1] converted the management transmission work item into a\nwiphy work. Since a wiphy work can only run under wiphy lock\nprotection, a race condition happens in below scenario:\n\n1. a management frame is queued for transmission.\n2. ath12k_mac_op_flush() gets called to flush pending frames associated\n   with the hardware (i.e, vif being NULL). Then in ath12k_mac_flush()\n   the process waits for the transmission done.\n3. Since wiphy lock has been taken by the flush process, the transmission\n   work item has no chance to run, hence the dead lock.\n\n>From user view, this dead lock results in below issue:\n\n wlp8s0: authenticate with xxxxxx (local address=xxxxxx)\n wlp8s0: send auth to xxxxxx (try 1/3)\n wlp8s0: authenticate with xxxxxx (local address=xxxxxx)\n wlp8s0: send auth to xxxxxx (try 1/3)\n wlp8s0: authenticated\n wlp8s0: associate with xxxxxx (try 1/3)\n wlp8s0: aborting association with xxxxxx by local choice (Reason: 3=DEAUTH_LEAVING)\n ath12k_pci 0000:08:00.0: failed to flush mgmt transmit queue, mgmt pkts pending 1\n\nThe dead lock can be avoided by invoking wiphy_work_flush() to proactively\nrun the queued work item. Note actually it is already present in\nath12k_mac_op_flush(), however it does not protect the case where vif\nbeing NULL. Hence move it ahead to cover this case as well.\n\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nwifi: ath12k: solucionar interbloqueo al vaciar tramas de gestión\n\nEl commit [1] convirtió el elemento de trabajo de transmisión de gestión en un trabajo wiphy. Dado que un trabajo wiphy solo puede ejecutarse bajo la protección del bloqueo wiphy, ocurre una condición de carrera en el siguiente escenario:\n\n1. una trama de gestión se pone en cola para transmisión.\n2. se llama a ath12k_mac_op_flush() para vaciar las tramas pendientes asociadas con el hardware (es decir, vif es NULL). Luego, en ath12k_mac_flush(), el proceso espera a que la transmisión finalice.\n3. Dado que el bloqueo wiphy ha sido tomado por el proceso de vaciado, el elemento de trabajo de transmisión no tiene oportunidad de ejecutarse, de ahí el interbloqueo.\n\nDesde la perspectiva del usuario, este interbloqueo resulta en el siguiente problema:\n\n wlp8s0: autenticar con xxxxxx (dirección local=xxxxxx)\n wlp8s0: enviar autenticación a xxxxxx (intento 1/3)\n wlp8s0: autenticar con xxxxxx (dirección local=xxxxxx)\n wlp8s0: enviar autenticación a xxxxxx (intento 1/3)\n wlp8s0: autenticado\n wlp8s0: asociar con xxxxxx (intento 1/3)\n wlp8s0: abortando asociación con xxxxxx por elección local (Razón: 3=DEAUTH_LEAVING)\n ath12k_pci 0000:08:00.0: falló al vaciar la cola de transmisión de gestión, paquetes de gestión pendientes 1\n\nEl interbloqueo puede evitarse invocando wiphy_work_flush() para ejecutar proactivamente el elemento de trabajo en cola. Nótese que en realidad ya está presente en ath12k_mac_op_flush(), sin embargo, no protege el caso en que vif es NULL. Por lo tanto, se mueve hacia adelante para cubrir también este caso.\n\nProbado en: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.14",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "637FC0E5-B7C6-43C6-A4E0-7B6079EA140E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/06ac2aa13f701a0296e92f5f54ae24224d426b28",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f88e9fc30a261d63946ddc6cc6a33405e6aa27c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23131",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T15:16:08.387",
      "lastModified" : "2026-03-17T21:17:04.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names\n\nThe hp-bioscfg driver attempts to register kobjects with empty names when\nthe HP BIOS returns attributes with empty name strings. This causes\nmultiple kernel warnings:\n\n  kobject: (00000000135fb5e6): attempted to be registered with empty name!\n  WARNING: CPU: 14 PID: 3336 at lib/kobject.c:219 kobject_add_internal+0x2eb/0x310\n\nAdd validation in hp_init_bios_buffer_attribute() to check if the\nattribute name is empty after parsing it from the WMI buffer. If empty,\nlog a debug message and skip registration of that attribute, allowing the\nmodule to continue processing other valid attributes."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nplatform/x86: hp-bioscfg: Corrección de advertencias de kobject para nombres de atributos vacíos\n\nEl controlador hp-bioscfg intenta registrar kobjects con nombres vacíos cuando la BIOS de HP devuelve atributos con cadenas de nombre vacías. Esto causa múltiples advertencias del kernel:\n\nkobject: (00000000135fb5e6): ¡se intentó registrar con nombre vacío!\nWARNING: CPU: 14 PID: 3336 en lib/kobject.c:219 kobject_add_internal+0x2eb/0x310\n\nAñadir validación en hp_init_bios_buffer_attribute() para verificar si el nombre del atributo está vacío después de analizarlo desde el búfer WMI. Si está vacío, registrar un mensaje de depuración y omitir el registro de ese atributo, permitiendo que el módulo continúe procesando otros atributos válidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "5BC7DC6F-F752-49B5-82B2-A8F4BF9C3EAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/29917c80aa96a25cbcf5876fd774a1cfd72b01a9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6476be59b7162b891b7bddbd0c2924d87379ef6c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/800b2767905d6b409b8bbe357121970f0b489a89",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fdee1b09721605f532352628d0a24623e7062efb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23132",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.163",
      "lastModified" : "2026-03-17T21:16:41.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind\n\nFix several issues in dw_dp_bind() error handling:\n\n1. Missing return after drm_bridge_attach() failure - the function\n   continued execution instead of returning an error.\n\n2. Resource leak: drm_dp_aux_register() is not a devm function, so\n   drm_dp_aux_unregister() must be called on all error paths after\n   aux registration succeeds. This affects errors from:\n   - drm_bridge_attach()\n   - phy_init()\n   - devm_add_action_or_reset()\n   - platform_get_irq()\n   - devm_request_threaded_irq()\n\n3. Bug fix: platform_get_irq() returns the IRQ number or a negative\n   error code, but the error path was returning ERR_PTR(ret) instead\n   of ERR_PTR(dp->irq).\n\nUse a goto label for cleanup to ensure consistent error handling."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/bridge: synopsys: dw-dp: corregir rutas de error de dw_dp_bind\n\nCorregir varios problemas en el manejo de errores de dw_dp_bind():\n\n1. Retorno faltante después de un fallo de drm_bridge_attach(): la función continuó la ejecución en lugar de devolver un error.\n\n2. Fuga de recursos: drm_dp_aux_register() no es una función devm, por lo que drm_dp_aux_unregister() debe ser llamada en todas las rutas de error después de que el registro auxiliar tenga éxito. Esto afecta a los errores de:\n   - drm_bridge_attach()\n   - phy_init()\n   - devm_add_action_or_reset()\n   - platform_get_irq()\n   - devm_request_threaded_irq()\n\n3. Corrección de error: platform_get_irq() devuelve el número IRQ o un código de error negativo, pero la ruta de error estaba devolviendo ERR_PTR(ret) en lugar de ERR_PTR(dp-&gt;irq).\n\nUsar una etiqueta goto para la limpieza para asegurar un manejo de errores consistente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "7B26C1E1-97A9-48B8-81C6-B6A3A0FC6C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1a0f69e3c28477b97d3609569b7e8feb4b6162e8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/569ed6a73e927a34cae4ae6de1464c0737a5ec44",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23133",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.270",
      "lastModified" : "2026-03-17T21:16:34.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: fix dma_free_coherent() pointer\n\ndma_alloc_coherent() allocates a DMA mapped buffer and stores the\naddresses in XXX_unaligned fields.  Those should be reused when freeing\nthe buffer rather than the aligned addresses."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: ath10k: corrección del puntero dma_free_coherent()\n\ndma_alloc_coherent() asigna un búfer mapeado por DMA y almacena las direcciones en campos XXX_unaligned. Esas deberían ser reutilizadas al liberar el búfer en lugar de las direcciones alineadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "F7890100-2475-49B0-BE7F-02AA4C41DFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/07f363f305793baecad41816f73056252f3df61e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1928851334ecfd6e0d663121ab69ac639d4217a6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5d6fa4d2c9799c09389588da5118a72d97d87e92",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9282a1e171ad8d2205067e8ec3bbe4e3cef4f29f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b0ad924332a96550a84b8c0ae5483e7042d65fa9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e2dda298ef809aa201ea7c0904c4d064f6c497cb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fc8da65f9fe1bc6802f8240b342cfff4f5c7e841",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23134",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.377",
      "lastModified" : "2026-03-17T21:16:27.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nslab: fix kmalloc_nolock() context check for PREEMPT_RT\n\nOn PREEMPT_RT kernels, local_lock becomes a sleeping lock. The current\ncheck in kmalloc_nolock() only verifies we're not in NMI or hard IRQ\ncontext, but misses the case where preemption is disabled.\n\nWhen a BPF program runs from a tracepoint with preemption disabled\n(preempt_count > 0), kmalloc_nolock() proceeds to call\nlocal_lock_irqsave() which attempts to acquire a sleeping lock,\ntriggering:\n\n  BUG: sleeping function called from invalid context\n  in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6128\n  preempt_count: 2, expected: 0\n\nFix this by checking !preemptible() on PREEMPT_RT, which directly\nexpresses the constraint that we cannot take a sleeping lock when\npreemption is disabled. This encompasses the previous checks for NMI\nand hard IRQ contexts while also catching cases where preemption is\ndisabled."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nslab: corrección de la verificación de contexto de kmalloc_nolock() para PREEMPT_RT\n\nEn kernels PREEMPT_RT, local_lock se convierte en un bloqueo de suspensión. La verificación actual en kmalloc_nolock() solo verifica que no estamos en un contexto NMI o de IRQ dura, pero omite el caso en que la preemption está deshabilitada.\n\nCuando un programa BPF se ejecuta desde un tracepoint con la preemption deshabilitada (preempt_count &gt; 0), kmalloc_nolock() procede a llamar a local_lock_irqsave(), que intenta adquirir un bloqueo de suspensión, lo que desencadena:\n\n  BUG: función de suspensión llamada desde contexto inválido\n  in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6128\n  preempt_count: 2, esperado: 0\n\nSolucione esto verificando !preemptible() en PREEMPT_RT, lo que expresa directamente la restricción de que no podemos tomar un bloqueo de suspensión cuando la preemption está deshabilitada. Esto abarca las verificaciones anteriores para contextos NMI e IRQ dura, al mismo tiempo que detecta casos en los que la preemption está deshabilitada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "7B26C1E1-97A9-48B8-81C6-B6A3A0FC6C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/99a3e3a1cfc93b8fe318c0a3a5cfb01f1d4ad53c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f60ba4a97ae3f94e4818722ed2e4d260bbb17b44",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23135",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.483",
      "lastModified" : "2026-03-17T21:16:17.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix dma_free_coherent() pointer\n\ndma_alloc_coherent() allocates a DMA mapped buffer and stores the\naddresses in XXX_unaligned fields.  Those should be reused when freeing\nthe buffer rather than the aligned addresses."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: ath12k: corrección del puntero dma_free_coherent()\n\ndma_alloc_coherent() asigna un búfer mapeado por DMA y almacena las direcciones en campos XXX_unaligned. Esas deberían ser reutilizadas al liberar el búfer en lugar de las direcciones alineadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "DA5AD755-3F64-45B9-8709-1D24A061B353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.68",
            "matchCriteriaId" : "52F38E19-0FDD-4992-9D6D-D4169D689598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.8",
            "matchCriteriaId" : "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/24585a13c41ea7253ee59aac74441fb570f5824a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/36e0bc5e8b282564906fca636c4ebc99814de4e7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4846b32be324f4dd3653f38a3f69c049543d52ae",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bb97131fbf9b708dd9616ac2bdc793ad102b5c48",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23136",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.590",
      "lastModified" : "2026-04-03T14:16:24.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: reset sparse-read state in osd_fault()\n\nWhen a fault occurs, the connection is abandoned, reestablished, and any\npending operations are retried. The OSD client tracks the progress of a\nsparse-read reply using a separate state machine, largely independent of\nthe messenger's state.\n\nIf a connection is lost mid-payload or the sparse-read state machine\nreturns an error, the sparse-read state is not reset. The OSD client\nwill then interpret the beginning of a new reply as the continuation of\nthe old one. If this makes the sparse-read machinery enter a failure\nstate, it may never recover, producing loops like:\n\n  libceph:  [0] got 0 extents\n  libceph: data len 142248331 != extent len 0\n  libceph: osd0 (1)...:6801 socket error on read\n  libceph: data len 142248331 != extent len 0\n  libceph: osd0 (1)...:6801 socket error on read\n\nTherefore, reset the sparse-read state in osd_fault(), ensuring retries\nstart from a clean state."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlibceph: restablecer el estado de lectura dispersa en osd_fault()\n\nCuando ocurre un fallo, la conexión es abandonada, restablecida, y cualquier operación pendiente es reintentada. El cliente OSD rastrea el progreso de una respuesta de lectura dispersa usando una máquina de estados separada, en gran medida independiente del estado del mensajero.\n\nSi se pierde una conexión a mitad de la carga útil o la máquina de estados de lectura dispersa devuelve un error, el estado de lectura dispersa no se restablece. El cliente OSD interpretará entonces el comienzo de una nueva respuesta como la continuación de la antigua. Si esto hace que la maquinaria de lectura dispersa entre en un estado de fallo, puede que nunca se recupere, produciendo bucles como:\n\n  libceph: [0] got 0 extents\n  libceph: data len 142248331 != extent len 0\n  libceph: osd0 (1)...:6801 socket error on read\n  libceph: data len 142248331 != extent len 0\n  libceph: osd0 (1)...:6801 socket error on read\n\nPor lo tanto, restablecer el estado de lectura dispersa en osd_fault(), asegurando que los reintentos comiencen desde un estado limpio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "C7862A85-FBED-4DC9-B719-015D8BFE5459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/10b7c72810364226f7b27916ea3e2a4f870bc04b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/11194b416ef95012c2cfe5f546d71af07b639e93",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/90a60fe61908afa0eaf7f8fcf1421b9b50e5f7ff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e94075e950a6598e710b9f7dffea5aa388f40313",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23137",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.703",
      "lastModified" : "2026-03-17T21:15:45.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nof: unittest: Fix memory leak in unittest_data_add()\n\nIn unittest_data_add(), if of_resolve_phandles() fails, the allocated\nunittest_data is not freed, leading to a memory leak.\n\nFix this by using scope-based cleanup helper __free(kfree) for automatic\nresource cleanup. This ensures unittest_data is automatically freed when\nit goes out of scope in error paths.\n\nFor the success path, use retain_and_null_ptr() to transfer ownership\nof the memory to the device tree and prevent double freeing."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nof: unittest: Corrección de fuga de memoria en unittest_data_add()\n\nEn unittest_data_add(), si of_resolve_phandles() falla, el unittest_data asignado no se libera, lo que provoca una fuga de memoria.\n\nEsto se soluciona usando un ayudante de limpieza basado en el ámbito __free(kfree) para la limpieza automática de recursos. Esto asegura que unittest_data se libera automáticamente cuando sale del ámbito en rutas de error.\n\nPara la ruta de éxito, use retain_and_null_ptr() para transferir la propiedad de la memoria al árbol de dispositivos y evitar la doble liberación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "CE21EC83-E3EF-4E6F-862D-1E8DA63CBCD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f09b0f705bd7197863b90256ef533a6414d1db2c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23138",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.830",
      "lastModified" : "2026-03-25T11:16:19.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Add recursion protection in kernel stack trace recording\n\nA bug was reported about an infinite recursion caused by tracing the rcu\nevents with the kernel stack trace trigger enabled. The stack trace code\ncalled back into RCU which then called the stack trace again.\n\nExpand the ftrace recursion protection to add a set of bits to protect\nevents from recursion. Each bit represents the context that the event is\nin (normal, softirq, interrupt and NMI).\n\nHave the stack trace code use the interrupt context to protect against\nrecursion.\n\nNote, the bug showed an issue in both the RCU code as well as the tracing\nstacktrace code. This only handles the tracing stack trace side of the\nbug. The RCU fix will be handled separately."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nrastreo: Añadir protección contra recursión en la grabación de trazas de pila del kernel\n\nSe informó de un error sobre una recursión infinita causada por el rastreo de los eventos rcu con el disparador de traza de pila del kernel habilitado. El código de traza de pila volvió a llamar a RCU, que luego volvió a llamar a la traza de pila.\n\nExpandir la protección contra recursión de ftrace para añadir un conjunto de bits para proteger los eventos de la recursión. Cada bit representa el contexto en el que se encuentra el evento (normal, softirq, interrupción y NMI).\n\nHacer que el código de traza de pila use el contexto de interrupción para proteger contra la recursión.\n\nNota, el error mostró un problema tanto en el código RCU como en el código de traza de pila de rastreo. Esto solo aborda el lado de la traza de pila de rastreo del error. La corrección de RCU se manejará por separado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "08660591-2858-4B60-A629-CCACFFE66894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/19e18e6dabb1bbba76d2809ca7d8ae9e1f5975fe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/5b7f91acffd2c4c000971553d22efa1e1bb4feae",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5f1ef0dfcb5b7f4a91a9b0e0ba533efd9f7e2cdb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9b03768037d91ce727effb1c5d92d2c7781bf692",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23139",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:53.950",
      "lastModified" : "2026-04-03T14:16:24.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conncount: update last_gc only when GC has been performed\n\nCurrently last_gc is being updated everytime a new connection is\ntracked, that means that it is updated even if a GC wasn't performed.\nWith a sufficiently high packet rate, it is possible to always bypass\nthe GC, causing the list to grow infinitely.\n\nUpdate the last_gc value only when a GC has been actually performed."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetfilter: nf_conncount: actualizar last_gc solo cuando se ha realizado la GC\n\nActualmente, last_gc se actualiza cada vez que se rastrea una nueva conexión, lo que significa que se actualiza incluso si no se realizó una GC. Con una tasa de paquetes suficientemente alta, es posible eludir siempre la GC, haciendo que la lista crezca infinitamente.\n\nActualizar el valor de last_gc solo cuando se ha realizado realmente una GC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "5681D252-2924-4757-931E-0C14EC054EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/26a82dce2beee39c43c109d9647e16f49cb02a35",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2c7c71113ed6d3e2f3aca4c088f22283016ff34f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3cd717359e56f82f06cbf8279b47a7d79880c6f3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7811ba452402d58628e68faedf38745b3d485e3c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8bdafdf4900040a81422056cabe5e00a37bd101a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9f45588993d7f115280fc726119ca86fba32a811",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c4cde57c8affdcca5bcff53a1047e15d268bdca1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23140",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.060",
      "lastModified" : "2026-03-17T21:13:55.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, test_run: Subtract size of xdp_frame from allowed metadata size\n\nThe xdp_frame structure takes up part of the XDP frame headroom,\nlimiting the size of the metadata. However, in bpf_test_run, we don't\ntake this into account, which makes it possible for userspace to supply\na metadata size that is too large (taking up the entire headroom).\n\nIf userspace supplies such a large metadata size in live packet mode,\nthe xdp_update_frame_from_buff() call in xdp_test_run_init_page() call\nwill fail, after which packet transmission proceeds with an\nuninitialised frame structure, leading to the usual Bad Stuff.\n\nThe commit in the Fixes tag fixed a related bug where the second check\nin xdp_update_frame_from_buff() could fail, but did not add any\nadditional constraints on the metadata size. Complete the fix by adding\nan additional check on the metadata size. Reorder the checks slightly to\nmake the logic clearer and add a comment."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbpf, test_run: Restar el tamaño de xdp_frame del tamaño de metadatos permitido\n\nLa estructura xdp_frame ocupa parte del headroom del frame XDP, limitando el tamaño de los metadatos. Sin embargo, en bpf_test_run, no tenemos esto en cuenta, lo que hace posible que el userspace suministre un tamaño de metadatos que es demasiado grande (ocupando todo el headroom).\n\nSi el userspace suministra un tamaño de metadatos tan grande en modo de paquete en vivo, la llamada a xdp_update_frame_from_buff() en la llamada a xdp_test_run_init_page() fallará, después de lo cual la transmisión de paquetes procede con una estructura de frame no inicializada, lo que lleva a las 'Cosas Malas' habituales.\n\nEl commit en la etiqueta Fixes corrigió un error relacionado donde la segunda comprobación en xdp_update_frame_from_buff() podría fallar, pero no añadió ninguna restricción adicional sobre el tamaño de los metadatos. Completar la corrección añadiendo una comprobación adicional sobre el tamaño de los metadatos. Reordenar ligeramente las comprobaciones para hacer la lógica más clara y añadir un comentario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.18",
            "versionEndExcluding" : "6.1.161",
            "matchCriteriaId" : "D8396A00-9DF6-4F41-B27A-476CA41851D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.121",
            "matchCriteriaId" : "BB7A164B-7422-4A1C-82FB-5FCAEE53C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.66",
            "matchCriteriaId" : "F72B884C-B44F-40E4-9895-CE421AC663D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.6",
            "matchCriteriaId" : "879529BC-5B4C-4EBE-BF1D-1A31404A8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/31e37f44b60679d90b9f999c91371b15291be8e0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6447e697cfa8a43a8e491cb81bcc390d0f28f8ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7c81ad5e580bd8441f8a521a8d34824ce6582ae5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e558cca217790286e799a8baacd1610bda31b261",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e7440935063949d6f2c10f7328d960d0ff4bce90",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23141",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.163",
      "lastModified" : "2026-03-25T11:16:19.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: send: check for inline extents in range_is_hole_in_parent()\n\nBefore accessing the disk_bytenr field of a file extent item we need\nto check if we are dealing with an inline extent.\nThis is because for inline extents their data starts at the offset of\nthe disk_bytenr field. So accessing the disk_bytenr\nmeans we are accessing inline data or in case the inline data is less\nthan 8 bytes we can actually cause an invalid\nmemory access if this inline extent item is the first item in the leaf\nor access metadata from other items."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbtrfs: send: verificar extents en línea en range_is_hole_in_parent()\n\nAntes de acceder al campo disk_bytenr de un elemento de extent de archivo, necesitamos verificar si estamos tratando con un extent en línea.\nEsto se debe a que para los extents en línea, sus datos comienzan en el desplazamiento del campo disk_bytenr. Así que acceder al disk_bytenr significa que estamos accediendo a datos en línea o, en caso de que los datos en línea sean menores de 8 bytes, podemos realmente causar un acceso a memoria inválido si este elemento de extent en línea es el primer elemento en la hoja o acceder a metadatos de otros elementos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "E7BC335C-8761-4A07-975D-299AB3719ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/08b096c1372cd69627f4f559fb47c9fb67a52b39",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/39f83f10772310ba4a77f2b5256aaf36994ef7e8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d948055bd46a9c14d1d4217aed65c5c258c32903",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/db00636643e66898d79f2530ac9c56ebd5eca369",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f2dc6ab3a14c2d2eb0b14783427eb9b03bf631c9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23142",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.273",
      "lastModified" : "2026-03-17T21:13:41.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure\n\nWhen a DAMOS-scheme DAMON sysfs directory setup fails after setup of\naccess_pattern/ directory, subdirectories of access_pattern/ directory are\nnot cleaned up.  As a result, DAMON sysfs interface is nearly broken until\nthe system reboots, and the memory for the unremoved directory is leaked.\n\nCleanup the directories under such failures."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm/damon/sysfs-scheme: limpieza de los subdirectorios de access_pattern en caso de fallo en la configuración del directorio del esquema\n\nCuando la configuración de un directorio sysfs de DAMON con esquema DAMOS falla después de la configuración del directorio access_pattern/, los subdirectorios del directorio access_pattern/ no se limpian. Como resultado, la interfaz sysfs de DAMON queda casi rota hasta que el sistema se reinicia, y la memoria del directorio no eliminado se fuga.\n\nLimpiar los directorios en caso de tales fallos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.18",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "3E9EC47F-0DAF-443F-AC55-E8DC35F75C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/16236b0b4a08fa3e326cf1373ef789dabdc2e30d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/392b3d9d595f34877dd745b470c711e8ebcd225c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/725d4fdaa01bd1161782081f419e1568cc7432e0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ae8ac0066b48ed957bdcab58f0d3543549c57a29",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e9711bd0e64812c694a228cf58c9e6032decee54",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23143",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.383",
      "lastModified" : "2026-03-17T21:13:32.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio_net: Fix misalignment bug in struct virtnet_info\n\nUse the new TRAILING_OVERLAP() helper to fix a misalignment bug\nalong with the following warning:\n\ndrivers/net/virtio_net.c:429:46: warning: structure containing a flexible array member is not at the end of another structure [-Wflex-array-member-not-at-end]\n\nThis helper creates a union between a flexible-array member (FAM)\nand a set of members that would otherwise follow it (in this case\n`u8 rss_hash_key_data[VIRTIO_NET_RSS_MAX_KEY_SIZE];`). This\noverlays the trailing members (rss_hash_key_data) onto the FAM\n(hash_key_data) while keeping the FAM and the start of MEMBERS aligned.\nThe static_assert() ensures this alignment remains.\n\nNotice that due to tail padding in flexible `struct\nvirtio_net_rss_config_trailer`, `rss_trailer.hash_key_data`\n(at offset 83 in struct virtnet_info) and `rss_hash_key_data` (at\noffset 84 in struct virtnet_info) are misaligned by one byte. See\nbelow:\n\nstruct virtio_net_rss_config_trailer {\n        __le16                     max_tx_vq;            /*     0     2 */\n        __u8                       hash_key_length;      /*     2     1 */\n        __u8                       hash_key_data[];      /*     3     0 */\n\n        /* size: 4, cachelines: 1, members: 3 */\n        /* padding: 1 */\n        /* last cacheline: 4 bytes */\n};\n\nstruct virtnet_info {\n...\n        struct virtio_net_rss_config_trailer rss_trailer; /*    80     4 */\n\n        /* XXX last struct has 1 byte of padding */\n\n        u8                         rss_hash_key_data[40]; /*    84    40 */\n...\n        /* size: 832, cachelines: 13, members: 48 */\n        /* sum members: 801, holes: 8, sum holes: 31 */\n        /* paddings: 2, sum paddings: 5 */\n};\n\nAfter changes, those members are correctly aligned at offset 795:\n\nstruct virtnet_info {\n...\n        union {\n                struct virtio_net_rss_config_trailer rss_trailer; /*   792     4 */\n                struct {\n                        unsigned char __offset_to_hash_key_data[3]; /*   792     3 */\n                        u8         rss_hash_key_data[40]; /*   795    40 */\n                };                                       /*   792    43 */\n        };                                               /*   792    44 */\n...\n        /* size: 840, cachelines: 14, members: 47 */\n        /* sum members: 801, holes: 8, sum holes: 35 */\n        /* padding: 4 */\n        /* paddings: 1, sum paddings: 4 */\n        /* last cacheline: 8 bytes */\n};\n\nAs a result, the RSS key passed to the device is shifted by 1\nbyte: the last byte is cut off, and instead a (possibly\nuninitialized) byte is added at the beginning.\n\nAs a last note `struct virtio_net_rss_config_hdr *rss_hdr;` is also\nmoved to the end, since it seems those three members should stick\naround together. :)"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvirtio_net: Corrige un error de desalineación en la estructura virtnet_info\n\nUsa el nuevo ayudante TRAILING_OVERLAP() para corregir un error de desalineación junto con la siguiente advertencia:\n\ndrivers/net/virtio_net.c:429:46: advertencia: la estructura que contiene un miembro de array flexible no está al final de otra estructura [-Wflex-array-member-not-at-end]\n\nEste ayudante crea una unión entre un miembro de array flexible (FAM) y un conjunto de miembros que de otro modo lo seguirían (en este caso 'u8 rss_hash_key_data[VIRTIO_NET_RSS_MAX_KEY_SIZE];'). Esto superpone los miembros finales (rss_hash_key_data) sobre el FAM (hash_key_data) mientras mantiene el FAM y el inicio de los MIEMBROS alineados. El static_assert() asegura que esta alineación se mantenga.\n\nNótese que debido al relleno de cola en la estructura flexible 'struct virtio_net_rss_config_trailer', 'rss_trailer.hash_key_data' (en el desplazamiento 83 en la estructura virtnet_info) y 'rss_hash_key_data' (en el desplazamiento 84 en la estructura virtnet_info) están desalineados por un byte. Ver a continuación:\n\n```\nstruct virtio_net_rss_config_trailer {\n        __le16                     max_tx_vq;            /*     0     2 */\n        __u8                       hash_key_length;      /*     2     1 */\n        __u8                       hash_key_data[];      /*     3     0 */\n\n        /* size: 4, cachelines: 1, members: 3 */\n        /* padding: 1 */\n        /* last cacheline: 4 bytes */\n};\n```\n\n```\nstruct virtnet_info {\n...\n        struct virtio_net_rss_config_trailer rss_trailer; /*    80     4 */\n\n        /* XXX last struct has 1 byte of padding */\n\n        u8                         rss_hash_key_data[40]; /*    84    40 */\n...\n        /* size: 832, cachelines: 13, members: 48 */\n        /* sum members: 801, holes: 8, sum holes: 31 */\n        /* paddings: 2, sum paddings: 5 */\n};\n```\n\nDespués de los cambios, esos miembros están correctamente alineados en el desplazamiento 795:\n\n```\nstruct virtnet_info {\n...\n        union {\n                struct virtio_net_rss_config_trailer rss_trailer; /*   792     4 */\n                struct {\n                        unsigned char __offset_to_hash_key_data[3]; /*   792     3 */\n                        u8         rss_hash_key_data[40]; /*   795    40 */\n                };                                       /*   792    43 */\n        };                                               /*   792    44 */\n...\n        /* size: 840, cachelines: 14, members: 47 */\n        /* sum members: 801, holes: 8, sum holes: 35 */\n        /* padding: 4 */\n        /* paddings: 1, sum paddings: 4 */\n        /* last cacheline: 8 bytes */\n};\n```\n\nComo resultado, la clave RSS pasada al dispositivo se desplaza 1 byte: el último byte se corta y, en su lugar, se añade un byte (posiblemente no inicializado) al principio.\n\nComo última nota, 'struct virtio_net_rss_config_hdr *rss_hdr;' también se mueve al final, ya que parece que esos tres miembros deberían permanecer juntos. :)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "2446B98C-005E-4681-A566-03D3F408B450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4156c3745f06bc197094b9ee97a9584e69ed00bf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ae48108c2310f1dd700e0dbb655c2f1d92ed00fc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23144",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.490",
      "lastModified" : "2026-03-17T21:13:24.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/sysfs: cleanup attrs subdirs on context dir setup failure\n\nWhen a context DAMON sysfs directory setup is failed after setup of attrs/\ndirectory, subdirectories of attrs/ directory are not cleaned up.  As a\nresult, DAMON sysfs interface is nearly broken until the system reboots,\nand the memory for the unremoved directory is leaked.\n\nCleanup the directories under such failures."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm/damon/sysfs: limpieza de subdirectorios de attrs en caso de fallo en la configuración del directorio de contexto\n\nCuando la configuración de un directorio sysfs de DAMON de contexto falla después de la configuración del directorio attrs/, los subdirectorios del directorio attrs/ no se limpian. Como resultado, la interfaz sysfs de DAMON queda casi rota hasta que el sistema se reinicia, y la memoria para el directorio no eliminado se fuga.\n\nLimpiar los directorios en caso de tales fallos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.18",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "3E9EC47F-0DAF-443F-AC55-E8DC35F75C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "7456F614-6AA8-4C08-8229-BA342D4AFBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "99FF3E05-0E7A-44E9-8E47-BF6F1F8EC436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/43964644348f6b1add3055c4a6cae8f77d892a6e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5651c0c391c0029541794f9c4c9597faecfd401f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/78b4eb99751ebd37ceade78810bf94de80f7fb3a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9814cc832b88bd040fc2a1817c2b5469d0f7e862",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/db7dfe78fc81bdd2b532d77f340fe453f2360426",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23145",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.597",
      "lastModified" : "2026-03-17T21:13:17.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix iloc.bh leak in ext4_xattr_inode_update_ref\n\nThe error branch for ext4_xattr_inode_update_ref forget to release the\nrefcount for iloc.bh. Find this when review code."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\next4: corregir la fuga de iloc.bh en ext4_xattr_inode_update_ref\n\nLa rama de error para ext4_xattr_inode_update_ref olvidó liberar el refcount para iloc.bh. Esto se encontró al revisar el código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.301",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "ABCD8233-CFD6-4194-AA34-BD9E287307E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.246",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "F97128D0-8B7B-4C48-BEB6-2CB58EDB5BC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.195",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "1D7F17D7-D52A-4802-ABE5-E37E21A8DE31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.157",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "4ADA2900-A980-4762-9956-4806C46E94F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.113",
            "versionEndExcluding" : "6.6.122",
            "matchCriteriaId" : "C3EB3129-3B5E-481C-A81B-8F2E50F2F0E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.54",
            "versionEndExcluding" : "6.12.67",
            "matchCriteriaId" : "E5231312-DF3F-466D-811A-2CE69C074C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.4",
            "versionEndExcluding" : "6.18.7",
            "matchCriteriaId" : "4E33CB5E-CC4D-432C-954F-DA3EBF2C541D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23146",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.703",
      "lastModified" : "2026-03-17T21:13:01.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work\n\nhci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling\nhci_uart_register_dev(), which calls proto->open() to initialize\nhu->priv. However, if a TTY write wakeup occurs during this window,\nhci_uart_tx_wakeup() may schedule write_work before hu->priv is\ninitialized, leading to a NULL pointer dereference in\nhci_uart_write_work() when proto->dequeue() accesses hu->priv.\n\nThe race condition is:\n\n  CPU0                              CPU1\n  ----                              ----\n  hci_uart_set_proto()\n    set_bit(HCI_UART_PROTO_INIT)\n    hci_uart_register_dev()\n                                    tty write wakeup\n                                      hci_uart_tty_wakeup()\n                                        hci_uart_tx_wakeup()\n                                          schedule_work(&hu->write_work)\n      proto->open(hu)\n        // initializes hu->priv\n                                    hci_uart_write_work()\n                                      hci_uart_dequeue()\n                                        proto->dequeue(hu)\n                                          // accesses hu->priv (NULL!)\n\nFix this by moving set_bit(HCI_UART_PROTO_INIT) after proto->open()\nsucceeds, ensuring hu->priv is initialized before any work can be\nscheduled."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nBluetooth: hci_uart: corrección de desreferencia de puntero nulo en hci_uart_write_work\n\nhci_uart_set_proto() establece HCI_UART_PROTO_INIT antes de llamar a hci_uart_register_dev(), que llama a proto-&gt;open() para inicializar hu-&gt;priv. Sin embargo, si una activación de escritura TTY ocurre durante esta ventana, hci_uart_tx_wakeup() puede programar write_work antes de que hu-&gt;priv sea inicializado, lo que lleva a una desreferencia de puntero NULL en hci_uart_write_work() cuando proto-&gt;dequeue() accede a hu-&gt;priv.\n\nLa condición de carrera es:\n\n  CPU0                              CPU1\n  ----                              ----\n  hci_uart_set_proto()\n    set_bit(HCI_UART_PROTO_INIT)\n    hci_uart_register_dev()\n                                    activación de escritura tty\n                                      hci_uart_tty_wakeup()\n                                        hci_uart_tx_wakeup()\n                                          schedule_work(&amp;hu-&gt;write_work)\n      proto-&gt;open(hu)\n        // inicializa hu-&gt;priv\n                                    hci_uart_write_work()\n                                      hci_uart_dequeue()\n                                        proto-&gt;dequeue(hu)\n                                          // accede a hu-&gt;priv (¡NULL!)\n\nEsto se soluciona moviendo set_bit(HCI_UART_PROTO_INIT) después de que proto-&gt;open() se complete con éxito, asegurando que hu-&gt;priv esté inicializado antes de que se pueda programar cualquier trabajo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.293",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "4D6F83CA-7E5C-4A91-9D8C-71CC85535E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.237",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "339F6FF4-79D2-49BC-9E0D-68FB6F1201E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.181",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "FDF3BBC9-1D58-4300-AD4C-591A4919AAC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.135",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "B08612A5-165F-449C-B5B5-6830D99A6A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.88",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "0D79ED79-3597-4CCE-95EF-DED9FD319AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.24",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "D8AE027B-66A3-434F-AC67-50F44A6A41EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13.12",
            "versionEndExcluding" : "6.14",
            "matchCriteriaId" : "A1F1E5FF-68CB-46CE-BC4F-8E19FA72A921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.14.3",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "0FBCCA71-8616-4922-B963-927778DB4B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/03e8c90c62233382042b7bd0fa8b8900552fdb62",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/0c3cd7a0b862c37acbee6d9502107146cc944398",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/186d147cf7689ba1f9b3ddb753ab634a84940cc9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/53e54cb31e667fca05b1808b990eac0807d1dab0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/937a573423ce5a96fdb1fd425dc6b8d8d4ab5779",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b0a900939e7e4866d9b90e9112514b72c451e873",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ccc683f597ceb28deb966427ae948e5ac739a909",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23147",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.813",
      "lastModified" : "2026-03-17T21:12:52.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: zlib: fix the folio leak on S390 hardware acceleration\n\n[BUG]\nAfter commit aa60fe12b4f4 (\"btrfs: zlib: refactor S390x HW acceleration\nbuffer preparation\"), we no longer release the folio of the page cache\nof folio returned by btrfs_compress_filemap_get_folio() for S390\nhardware acceleration path.\n\n[CAUSE]\nBefore that commit, we call kumap_local() and folio_put() after handling\neach folio.\n\nAlthough the timing is not ideal (it release previous folio at the\nbeginning of the loop, and rely on some extra cleanup out of the loop),\nit at least handles the folio release correctly.\n\nMeanwhile the refactored code is easier to read, it lacks the call to\nrelease the filemap folio.\n\n[FIX]\nAdd the missing folio_put() for copy_data_into_buffer()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbtrfs: zlib: corregir la fuga de folio en la aceleración de hardware S390\n\n[BUG]\nDespués del commit aa60fe12b4f4 ('btrfs: zlib: refactorizar la preparación del búfer de aceleración de hardware S390x'), ya no liberamos el folio de la caché de páginas del folio devuelto por btrfs_compress_filemap_get_folio() para la ruta de aceleración de hardware S390.\n\n[CAUSA]\nAntes de ese commit, llamábamos a kumap_local() y folio_put() después de manejar cada folio.\n\nAunque el momento no es ideal (libera el folio anterior al principio del bucle y depende de una limpieza adicional fuera del bucle), al menos maneja la liberación del folio correctamente.\n\nMientras que el código refactorizado es más fácil de leer, carece de la llamada para liberar el folio del filemap.\n\n[SOLUCIÓN]\nAñadir el folio_put() faltante para copy_data_into_buffer()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "DFE8933C-F032-4E9A-9180-7A359697E8A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0d0f1314e8f86f5205f71f9e31e272a1d008e40b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e80617a5e1c246da2f112a1a072cdd535046adfe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23148",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:54.913",
      "lastModified" : "2026-04-03T14:16:24.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference\n\nThere is a race condition in nvmet_bio_done() that can cause a NULL\npointer dereference in blk_cgroup_bio_start():\n\n1. nvmet_bio_done() is called when a bio completes\n2. nvmet_req_complete() is called, which invokes req->ops->queue_response(req)\n3. The queue_response callback can re-queue and re-submit the same request\n4. The re-submission reuses the same inline_bio from nvmet_req\n5. Meanwhile, nvmet_req_bio_put() (called after nvmet_req_complete)\n   invokes bio_uninit() for inline_bio, which sets bio->bi_blkg to NULL\n6. The re-submitted bio enters submit_bio_noacct_nocheck()\n7. blk_cgroup_bio_start() dereferences bio->bi_blkg, causing a crash:\n\n  BUG: kernel NULL pointer dereference, address: 0000000000000028\n  #PF: supervisor read access in kernel mode\n  RIP: 0010:blk_cgroup_bio_start+0x10/0xd0\n  Call Trace:\n   submit_bio_noacct_nocheck+0x44/0x250\n   nvmet_bdev_execute_rw+0x254/0x370 [nvmet]\n   process_one_work+0x193/0x3c0\n   worker_thread+0x281/0x3a0\n\nFix this by reordering nvmet_bio_done() to call nvmet_req_bio_put()\nBEFORE nvmet_req_complete(). This ensures the bio is cleaned up before\nthe request can be re-submitted, preventing the race condition."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnvmet: corregir condición de carrera en nvmet_bio_done() que lleva a una desreferencia de puntero NULL\n\nExiste una condición de carrera en nvmet_bio_done() que puede causar una desreferencia de puntero NULL en blk_cgroup_bio_start():\n\n1. nvmet_bio_done() es llamada cuando un bio se completa\n2. nvmet_req_complete() es llamada, lo que invoca req-&gt;ops-&gt;queue_response(req)\n3. La devolución de llamada queue_response puede volver a encolar y volver a enviar la misma solicitud\n4. El reenvío reutiliza el mismo inline_bio de nvmet_req\n5. Mientras tanto, nvmet_req_bio_put() (llamada después de nvmet_req_complete) invoca bio_uninit() para inline_bio, lo que establece bio-&gt;bi_blkg en NULL\n6. El bio reenviado entra en submit_bio_noacct_nocheck()\n7. blk_cgroup_bio_start() desreferencia bio-&gt;bi_blkg, causando un fallo:\n\n  ERROR: desreferencia de puntero NULL del kernel, dirección: 0000000000000028\n  #PF: acceso de lectura de supervisor en modo kernel\n  RIP: 0010:blk_cgroup_bio_start+0x10/0xd0\n  Rastro de Llamada:\n   submit_bio_noacct_nocheck+0x44/0x250\n   nvmet_bdev_execute_rw+0x254/0x370 [nvmet]\n   process_one_work+0x193/0x3c0\n   worker_thread+0x281/0x3a0\n\nCorregir esto reordenando nvmet_bio_done() para llamar a nvmet_req_bio_put() ANTES de nvmet_req_complete(). Esto asegura que el bio se limpie antes de que la solicitud pueda ser reenviada, previniendo la condición de carrera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.37",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "FFABC310-8043-45B8-9F6C-094B74C9CA4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15.6",
            "versionEndExcluding" : "6.16",
            "matchCriteriaId" : "BEF58D78-987C-49EA-8F22-0EF0F89F0A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16.1",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "A28A864A-0812-4D37-96BC-20142FCA21ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6238B17D-C12B-458F-A138-97039BFC4595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "85421F4E-C863-4ABF-B4B4-E887CC2F7F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3827F0D4-5FEE-4181-B267-5A45E7CA11FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.16:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9C2DE5-43B8-4D73-BDB5-EA55C7671A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0fcee2cfc4b2e16e62ff8e0cc2cd8dd24efad65e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/68207ceefd71cc74ce4e983fa9bd10c3122e349b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ee10b06980acca1d46e0fa36d6fb4a9578eab6e4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23149",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.023",
      "lastModified" : "2026-03-17T21:12:29.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()\n\nSince GEM bo handles are u32 in the uapi and the internal implementation\nuses idr_alloc() which uses int ranges, passing a new handle larger than\nINT_MAX trivially triggers a kernel warning:\n\nidr_alloc():\n...\n\tif (WARN_ON_ONCE(start < 0))\n\t\treturn -EINVAL;\n...\n\nFix it by rejecting new handles above INT_MAX and at the same time make\nthe end limit calculation more obvious by moving into int domain."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm: No permitir que el espacio de usuario active advertencias del kernel en drm_gem_change_handle_ioctl()\n\nDado que los identificadores GEM bo son u32 en la uapi y la implementación interna utiliza idr_alloc() que usa rangos int, pasar un nuevo identificador mayor que INT_MAX desencadena trivialmente una advertencia del kernel:\n\nidr_alloc():\n...\n\tif (WARN_ON_ONCE(start &lt; 0))\n\t\treturn -EINVAL;\n...\n\nSe soluciona rechazando los nuevos identificadores superiores a INT_MAX y al mismo tiempo haciendo más obvio el cálculo del límite final al moverlo al dominio int."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "64A5E20D-6D91-446C-A826-4E89EFEA0278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/12f15d52d38ac53f7c70ea3d4b3d76afed04e064",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ae8831ee0fb2f5f41f39722e7b3749d65bb78d08",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23150",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.123",
      "lastModified" : "2026-03-17T21:12:01.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().\n\nsyzbot reported various memory leaks related to NFC, struct\nnfc_llcp_sock, sk_buff, nfc_dev, etc. [0]\n\nThe leading log hinted that nfc_llcp_send_ui_frame() failed\nto allocate skb due to sock_error(sk) being -ENXIO.\n\nENXIO is set by nfc_llcp_socket_release() when struct\nnfc_llcp_local is destroyed by local_cleanup().\n\nThe problem is that there is no synchronisation between\nnfc_llcp_send_ui_frame() and local_cleanup(), and skb\ncould be put into local->tx_queue after it was purged in\nlocal_cleanup():\n\n  CPU1                          CPU2\n  ----                          ----\n  nfc_llcp_send_ui_frame()      local_cleanup()\n  |- do {                       '\n     |- pdu = nfc_alloc_send_skb(..., &err)\n     |                          .\n     |                          |- nfc_llcp_socket_release(local, false, ENXIO);\n     |                          |- skb_queue_purge(&local->tx_queue);      |\n     |                          '                                          |\n     |- skb_queue_tail(&local->tx_queue, pdu);                             |\n    ...                                                                    |\n     |- pdu = nfc_alloc_send_skb(..., &err)                                |\n                                       ^._________________________________.'\n\nlocal_cleanup() is called for struct nfc_llcp_local only\nafter nfc_llcp_remove_local() unlinks it from llcp_devices.\n\nIf we hold local->tx_queue.lock then, we can synchronise\nthe thread and nfc_llcp_send_ui_frame().\n\nLet's do that and check list_empty(&local->list) before\nqueuing skb to local->tx_queue in nfc_llcp_send_ui_frame().\n\n[0]:\n[   56.074943][ T6096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)\n[   64.318868][ T5813] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak)\nBUG: memory leak\nunreferenced object 0xffff8881272f6800 (size 1024):\n  comm \"syz.0.17\", pid 6096, jiffies 4294942766\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    27 00 03 40 00 00 00 00 00 00 00 00 00 00 00 00  '..@............\n  backtrace (crc da58d84d):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4979 [inline]\n    slab_alloc_node mm/slub.c:5284 [inline]\n    __do_kmalloc_node mm/slub.c:5645 [inline]\n    __kmalloc_noprof+0x3e3/0x6b0 mm/slub.c:5658\n    kmalloc_noprof include/linux/slab.h:961 [inline]\n    sk_prot_alloc+0x11a/0x1b0 net/core/sock.c:2239\n    sk_alloc+0x36/0x360 net/core/sock.c:2295\n    nfc_llcp_sock_alloc+0x37/0x130 net/nfc/llcp_sock.c:979\n    llcp_sock_create+0x71/0xd0 net/nfc/llcp_sock.c:1044\n    nfc_sock_create+0xc9/0xf0 net/nfc/af_nfc.c:31\n    __sock_create+0x1a9/0x340 net/socket.c:1605\n    sock_create net/socket.c:1663 [inline]\n    __sys_socket_create net/socket.c:1700 [inline]\n    __sys_socket+0xb9/0x1a0 net/socket.c:1747\n    __do_sys_socket net/socket.c:1761 [inline]\n    __se_sys_socket net/socket.c:1759 [inline]\n    __x64_sys_socket+0x1b/0x30 net/socket.c:1759\n    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94\n    entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nBUG: memory leak\nunreferenced object 0xffff88810fbd9800 (size 240):\n  comm \"syz.0.17\", pid 6096, jiffies 4294942850\n  hex dump (first 32 bytes):\n    68 f0 ff 08 81 88 ff ff 68 f0 ff 08 81 88 ff ff  h.......h.......\n    00 00 00 00 00 00 00 00 00 68 2f 27 81 88 ff ff  .........h/'....\n  backtrace (crc 6cc652b1):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4979 [inline]\n    slab_alloc_node mm/slub.c:5284 [inline]\n    kmem_cache_alloc_node_noprof+0x36f/0x5e0 mm/slub.c:5336\n    __alloc_skb+0x203/0x240 net/core/skbuff.c:660\n    alloc_skb include/linux/skbuff.h:1383 [inline]\n    alloc_skb_with_frags+0x69/0x3f0 net/core/sk\n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnfc: llcp: Corrección de fuga de memoria en nfc_llcp_send_ui_frame().\n\nsyzbot informó de varias fugas de memoria relacionadas con NFC, struct\nnfc_llcp_sock, sk_buff, nfc_dev, etc. [0]\n\nEl registro principal sugirió que nfc_llcp_send_ui_frame() falló\nal asignar skb debido a que sock_error(sk) era -ENXIO.\n\nENXIO es establecido por nfc_llcp_socket_release() cuando struct\nnfc_llcp_local es destruido por local_cleanup().\n\nEl problema es que no hay sincronización entre\nnfc_llcp_send_ui_frame() y local_cleanup(), y skb\npodría ser puesto en local-&gt;tx_queue después de que fuera purgado en\nlocal_cleanup():\n\n  CPU1                          CPU2\n  ----                          ----\n  nfc_llcp_send_ui_frame()      local_cleanup()\n  |- do {                       '\n     |- pdu = nfc_alloc_send_skb(..., &amp;err)\n     |                          .\n     |                          |- nfc_llcp_socket_release(local, false, ENXIO);\n     |                          |- skb_queue_purge(&amp;local-&gt;tx_queue);      |\n     |                          '                                          |\n     |- skb_queue_tail(&amp;local-&gt;tx_queue, pdu);                             |\n    ...                                                                    |\n     |- pdu = nfc_alloc_send_skb(..., &amp;err)                                |\n                                       ^._________________________________.'\n\nlocal_cleanup() es llamado para struct nfc_llcp_local solo\ndespués de que nfc_llcp_remove_local() lo desvincula de llcp_devices.\n\nSi mantenemos local-&gt;tx_queue.lock entonces, podemos sincronizar\nel hilo y nfc_llcp_send_ui_frame().\n\nHagamos eso y verifiquemos list_empty(&amp;local-&gt;list) antes\nde encolar skb en local-&gt;tx_queue en nfc_llcp_send_ui_frame().\n\n[0]:\n[   56.074943][ T6096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)\n[   64.318868][ T5813] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak)\nBUG: memory leak\nunreferenced object 0xffff8881272f6800 (size 1024):\n  comm 'syz.0.17', pid 6096, jiffies 4294942766\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    27 00 03 40 00 00 00 00 00 00 00 00 00 00 00 00  '..@............\n  backtrace (crc da58d84d):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4979 [inline]\n    slab_alloc_node mm/slub.c:5284 [inline]\n    __do_kmalloc_node mm/slub.c:5645 [inline]\n    __kmalloc_noprof+0x3e3/0x6b0 mm/slub.c:5658\n    kmalloc_noprof include/linux/slab.h:961 [inline]\n    sk_prot_alloc+0x11a/0x1b0 net/core/sock.c:2239\n    sk_alloc+0x36/0x360 net/core/sock.c:2295\n    nfc_llcp_sock_alloc+0x37/0x130 net/nfc/llcp_sock.c:979\n    llcp_sock_create+0x71/0xd0 net/nfc/llcp_sock.c:1044\n    nfc_sock_create+0xc9/0xf0 net/nfc/af_nfc.c:31\n    __sock_create+0x1a9/0x340 net/socket.c:1605\n    sock_create net/socket.c:1663 [inline]\n    __sys_socket_create net/socket.c:1700 [inline]\n    __sys_socket+0xb9/0x1a0 net/socket.c:1747\n    __do_sys_socket net/socket.c:1761 [inline]\n    __se_sys_socket net/socket.c:1759 [inline]\n    __x64_sys_socket+0x1b/0x30 net/socket.c:1759\n    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94\n    entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nBUG: memory leak\nunreferenced object 0xffff88810fbd9800 (size 240):\n  comm 'syz.0.17', pid 6096, jiffies 4294942850\n  hex dump (first 32 bytes):\n    68 f0 ff 08 81 88 ff ff 68 f0 ff 08 81 88 ff ff  h.......h.......\n    00 00 00 00 00 00 00 00 00 68 2f 27 81 88 ff ff  .........h/'....\n  backtrace (crc 6cc652b1):\n    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]\n    slab_post_alloc_hook mm/slub.c:4979 [inline]\n    slab_alloc_node mm/slub.c:5284 [inline]\n    kmem_cache_alloc_node_noprof+0x36f/0x5e0 mm/slub.c:5336\n    __alloc_skb+0x203/0x240 net/core/skbuff.c:660\n    alloc_skb include/linux/skbuff.h:1383 [inline]\n    alloc_skb_with_frags+0x69/0x3f0 net/core/sk\n---tru"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "C1D3B462-A229-4130-A191-F09550344C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/165c34fb6068ff153e3fc99a932a80a9d5755709",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3098e5c8af0f4c8f7eebbb370798df8aa2e12ba5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/61858cbce6ca4bef9ed116c689a4be9520841339",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/65e976e1f474ae3bf5681d7abafb8f3fdb34b8cc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6734ff1ac6beba1d0c22dc9a3dc1849b773b511f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ab660cb8e17aa93426d1e821c2cce60e4b9bc56a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f8d002626d434f5fea9085e2557711c16a15cec6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23151",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.233",
      "lastModified" : "2026-03-17T21:11:37.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix memory leak in set_ssp_complete\n\nFix memory leak in set_ssp_complete() where mgmt_pending_cmd structures\nare not freed after being removed from the pending list.\n\nCommit 302a1f674c00 (\"Bluetooth: MGMT: Fix possible UAFs\") replaced\nmgmt_pending_foreach() calls with individual command handling but missed\nadding mgmt_pending_free() calls in both error and success paths of\nset_ssp_complete(). Other completion functions like set_le_complete()\nwere fixed correctly in the same commit.\n\nThis causes a memory leak of the mgmt_pending_cmd structure and its\nassociated parameter data for each SSP command that completes.\n\nAdd the missing mgmt_pending_free(cmd) calls in both code paths to fix\nthe memory leak. Also fix the same issue in set_advertising_complete()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nBluetooth: MGMT: Corrección de fuga de memoria en set_ssp_complete\n\nCorrige la fuga de memoria en set_ssp_complete() donde las estructuras mgmt_pending_cmd no son liberadas después de ser eliminadas de la lista de pendientes.\n\nEl commit 302a1f674c00 ('Bluetooth: MGMT: Corrige posibles UAFs') reemplazó las llamadas a mgmt_pending_foreach() con el manejo individual de comandos, pero omitió añadir llamadas a mgmt_pending_free() tanto en las rutas de error como de éxito de set_ssp_complete(). Otras funciones de completado como set_le_complete() fueron corregidas correctamente en el mismo commit.\n\nEsto causa una fuga de memoria de la estructura mgmt_pending_cmd y sus datos de parámetros asociados para cada comando SSP que se completa.\n\nAñade las llamadas faltantes a mgmt_pending_free(cmd) en ambas rutas de código para corregir la fuga de memoria. También corrige el mismo problema en set_advertising_complete()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.59",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "A53284ED-D418-4297-9CC1-383716BAE112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16.10",
            "versionEndExcluding" : "6.17",
            "matchCriteriaId" : "1C91278E-7FC3-4EFB-AE2C-E82D42F4D3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.1",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "8A25DDAF-7C27-4AFF-A350-9BD6DD15CBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC8B11D-82DC-4958-8DC7-BF5CC829A5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1850a558d116d7e3e2ef36d06a56f59b640cc214",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1b9c17fd0a7fdcbe69ec5d6fe8e50bc5ed7f01f2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3b6318505378828ee415d6ef678db6a74c077504",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23152",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.340",
      "lastModified" : "2026-03-17T21:11:25.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: correctly decode TTLM with default link map\n\nTID-To-Link Mapping (TTLM) elements do not contain any link mapping\npresence indicator if a default mapping is used and parsing needs to be\nskipped.\n\nNote that access points should not explicitly report an advertised TTLM\nwith a default mapping as that is the implied mapping if the element is\nnot included, this is even the case when switching back to the default\nmapping. However, mac80211 would incorrectly parse the frame and would\nalso read one byte beyond the end of the element."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: mac80211: decodificar correctamente TTLM con mapa de enlace predeterminado\n\nLos elementos de Mapeo de TID a Enlace (TTLM) no contienen ningún indicador de presencia de mapeo de enlace si se utiliza un mapeo predeterminado y el análisis debe omitirse.\n\nTenga en cuenta que los puntos de acceso no deberían informar explícitamente un TTLM anunciado con un mapeo predeterminado, ya que ese es el mapeo implícito si el elemento no está incluido; este es incluso el caso al volver al mapeo predeterminado. Sin embargo, mac80211 analizaría incorrectamente la trama y también leería un byte más allá del final del elemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "CD7EEEB5-795A-4192-B77D-FD5568D03E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1eab33aa63c993685dd341e03bd5b267dd7403fa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aabc36857bd39da65fe2d047bfaf63a0a09917d4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23153",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.443",
      "lastModified" : "2026-03-18T14:16:24.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nfirewire: core: fix race condition against transaction list\n\nThe list of transaction is enumerated without acquiring card lock when\nprocessing AR response event. This causes a race condition bug when\nprocessing AT request completion event concurrently.\n\nThis commit fixes the bug by put timer start for split transaction\nexpiration into the scope of lock. The value of jiffies in card structure\nis referred before acquiring the lock."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfirewire: core: corrige condición de carrera contra la lista de transacciones\n\nLa lista de transacciones se enumera sin adquirir el bloqueo de la tarjeta al procesar el evento de respuesta AR. Esto causa un error de condición de carrera al procesar el evento de finalización de solicitud AT concurrentemente.\n\nEste commit corrige el error al poner el inicio del temporizador para la expiración de transacciones divididas dentro del alcance del bloqueo. Se consulta el valor de jiffies en la estructura de la tarjeta antes de adquirir el bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "64A5E20D-6D91-446C-A826-4E89EFEA0278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/20e01bba2ae4898ce65cdcacd1bd6bec5111abd9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b038874e31fc3caa0b0d5abd259dd54b918ad4a1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23154",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.550",
      "lastModified" : "2026-03-25T11:16:19.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix segmentation of forwarding fraglist GRO\n\nThis patch enhances GSO segment handling by properly checking\nthe SKB_GSO_DODGY flag for frag_list GSO packets, addressing\nlow throughput issues observed when a station accesses IPv4\nservers via hotspots with an IPv6-only upstream interface.\n\nSpecifically, it fixes a bug in GSO segmentation when forwarding\nGRO packets containing a frag_list. The function skb_segment_list\ncannot correctly process GRO skbs that have been converted by XLAT,\nsince XLAT only translates the header of the head skb. Consequently,\nskbs in the frag_list may remain untranslated, resulting in protocol\ninconsistencies and reduced throughput.\n\nTo address this, the patch explicitly sets the SKB_GSO_DODGY flag\nfor GSO packets in XLAT's IPv4/IPv6 protocol translation helpers\n(bpf_skb_proto_4_to_6 and bpf_skb_proto_6_to_4). This marks GSO\npackets as potentially modified after protocol translation. As a\nresult, GSO segmentation will avoid using skb_segment_list and\ninstead falls back to skb_segment for packets with the SKB_GSO_DODGY\nflag. This ensures that only safe and fully translated frag_list\npackets are processed by skb_segment_list, resolving protocol\ninconsistencies and improving throughput when forwarding GRO packets\nconverted by XLAT."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: corrige la segmentación de reenvío de fraglist GRO\n\nEste parche mejora el manejo de segmentos GSO al verificar correctamente el flag SKB_GSO_DODGY para paquetes GSO con frag_list, abordando problemas de bajo rendimiento observados cuando una estación accede a servidores IPv4 a través de hotspots con una interfaz upstream solo IPv6.\n\nEspecíficamente, corrige un error en la segmentación GSO al reenviar paquetes GRO que contienen un frag_list. La función skb_segment_list no puede procesar correctamente los skbs GRO que han sido convertidos por XLAT, ya que XLAT solo traduce la cabecera del skb principal. Consecuentemente, los skbs en el frag_list pueden permanecer sin traducir, lo que resulta en inconsistencias de protocolo y un rendimiento reducido.\n\nPara abordar esto, el parche establece explícitamente el flag SKB_GSO_DODGY para paquetes GSO en los helpers de traducción de protocolo IPv4/IPv6 de XLAT (bpf_skb_proto_4_to_6 y bpf_skb_proto_6_to_4). Esto marca los paquetes GSO como potencialmente modificados después de la traducción de protocolo. Como resultado, la segmentación GSO evitará usar skb_segment_list y en su lugar recurrirá a skb_segment para paquetes con el flag SKB_GSO_DODGY. Esto asegura que solo los paquetes frag_list seguros y completamente traducidos sean procesados por skb_segment_list, resolviendo inconsistencias de protocolo y mejorando el rendimiento al reenviar paquetes GRO convertidos por XLAT."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "FC0CC93B-3AF5-44E4-8C46-C8C4910361E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2cbef9ea5a0ac51863ede35c45f26931a85d3888",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/3d48d59235c494d34e32052f768393111c0806ef",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3e62db1e3140449608975e29e0979cc5f3b1cc07",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/426ca15c7f6cb6562a081341ca88893a50c59fa2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9122d7280b2303e835cdfec156bd932ac1f586ed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23155",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.653",
      "lastModified" : "2026-04-18T09:16:14.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: gs_usb: gs_usb_receive_bulk_callback(): fix error message\n\nSinc commit 79a6d1bfe114 (\"can: gs_usb: gs_usb_receive_bulk_callback():\nunanchor URL on usb_submit_urb() error\") a failing resubmit URB will print\nan info message.\n\nIn the case of a short read where netdev has not yet been assigned,\ninitialize as NULL to avoid dereferencing an undefined value. Also report\nthe error value of the failed resubmit."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: gs_usb: gs_usb_receive_bulk_callback(): corregir mensaje de error\n\nDesde el commit 79a6d1bfe114 ('can: gs_usb: gs_usb_receive_bulk_callback(): desanclar URL en error de usb_submit_urb()'), un URB de reenvío fallido imprimirá un mensaje de información.\n\nEn el caso de una lectura corta donde netdev aún no ha sido asignado, inicializar como NULL para evitar desreferenciar un valor indefinido. También informar el valor de error del reenvío fallido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.6.122:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B92AB2-1FB7-4D1D-8D0C-B6FE241FB4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.12.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0724BD-589D-42C4-9456-646D8CBCF8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356361D-D06B-4A76-8D92-0B20D30F3D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7a431df418ee6b79841e0b4c7c265a791e3d0a75",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23156",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.760",
      "lastModified" : "2026-03-18T14:40:43.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: fix error propagation in efivar_entry_get()\n\nefivar_entry_get() always returns success even if the underlying\n__efivar_entry_get() fails, masking errors.\n\nThis may result in uninitialized heap memory being copied to userspace\nin the efivarfs_file_read() path.\n\nFix it by returning the error from __efivar_entry_get()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nefivarfs: corrección de la propagación de errores en efivar_entry_get()\n\nefivar_entry_get() siempre devuelve éxito incluso si la función subyacente __efivar_entry_get() falla, enmascarando errores.\n\nEsto puede resultar en que memoria de pila no inicializada sea copiada al espacio de usuario en la ruta de efivarfs_file_read().\n\nSe soluciona devolviendo el error desde __efivar_entry_get()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "83DE4E0F-B87E-49B8-B0C7-D01CE9B22054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3960f1754664661a970dc9ebbab44ff93a0b4c42",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4b22ec1685ce1fc0d862dcda3225d852fb107995",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/510a16f1c5c1690b33504052bc13fbc2772c23f8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/89b8ca709eeeabcc11ebba64806677873a2787a8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e4e15a0a4403c96d9898d8398f0640421df9cb16",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23157",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.863",
      "lastModified" : "2026-03-25T11:16:19.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not strictly require dirty metadata threshold for metadata writepages\n\n[BUG]\nThere is an internal report that over 1000 processes are\nwaiting at the io_schedule_timeout() of balance_dirty_pages(), causing\na system hang and trigger a kernel coredump.\n\nThe kernel is v6.4 kernel based, but the root problem still applies to\nany upstream kernel before v6.18.\n\n[CAUSE]\nFrom Jan Kara for his wisdom on the dirty page balance behavior first.\n\n  This cgroup dirty limit was what was actually playing the role here\n  because the cgroup had only a small amount of memory and so the dirty\n  limit for it was something like 16MB.\n\n  Dirty throttling is responsible for enforcing that nobody can dirty\n  (significantly) more dirty memory than there's dirty limit. Thus when\n  a task is dirtying pages it periodically enters into balance_dirty_pages()\n  and we let it sleep there to slow down the dirtying.\n\n  When the system is over dirty limit already (either globally or within\n  a cgroup of the running task), we will not let the task exit from\n  balance_dirty_pages() until the number of dirty pages drops below the\n  limit.\n\n  So in this particular case, as I already mentioned, there was a cgroup\n  with relatively small amount of memory and as a result with dirty limit\n  set at 16MB. A task from that cgroup has dirtied about 28MB worth of\n  pages in btrfs btree inode and these were practically the only dirty\n  pages in that cgroup.\n\nSo that means the only way to reduce the dirty pages of that cgroup is\nto writeback the dirty pages of btrfs btree inode, and only after that\nthose processes can exit balance_dirty_pages().\n\nNow back to the btrfs part, btree_writepages() is responsible for\nwriting back dirty btree inode pages.\n\nThe problem here is, there is a btrfs internal threshold that if the\nbtree inode's dirty bytes are below the 32M threshold, it will not\ndo any writeback.\n\nThis behavior is to batch as much metadata as possible so we won't write\nback those tree blocks and then later re-COW them again for another\nmodification.\n\nThis internal 32MiB is higher than the existing dirty page size (28MiB),\nmeaning no writeback will happen, causing a deadlock between btrfs and\ncgroup:\n\n- Btrfs doesn't want to write back btree inode until more dirty pages\n\n- Cgroup/MM doesn't want more dirty pages for btrfs btree inode\n  Thus any process touching that btree inode is put into sleep until\n  the number of dirty pages is reduced.\n\nThanks Jan Kara a lot for the analysis of the root cause.\n\n[ENHANCEMENT]\nSince kernel commit b55102826d7d (\"btrfs: set AS_KERNEL_FILE on the\nbtree_inode\"), btrfs btree inode pages will only be charged to the root\ncgroup which should have a much larger limit than btrfs' 32MiB\nthreshold.\nSo it should not affect newer kernels.\n\nBut for all current LTS kernels, they are all affected by this problem,\nand backporting the whole AS_KERNEL_FILE may not be a good idea.\n\nEven for newer kernels I still think it's a good idea to get\nrid of the internal threshold at btree_writepages(), since for most cases\ncgroup/MM has a better view of full system memory usage than btrfs' fixed\nthreshold.\n\nFor internal callers using btrfs_btree_balance_dirty() since that\nfunction is already doing internal threshold check, we don't need to\nbother them.\n\nBut for external callers of btree_writepages(), just respect their\nrequests and write back whatever they want, ignoring the internal\nbtrfs threshold to avoid such deadlock on btree inode dirty page\nbalancing."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  btrfs: no requerir estrictamente el umbral de metadatos sucios para la escritura de páginas de metadatos  [ERROR] Existe un informe interno de que más de 1000 procesos están esperando en el io_schedule_timeout() de balance_dirty_pages(), causando un cuelgue del sistema y desencadenando un volcado de memoria del kernel.  El kernel está basado en el kernel v6.4, pero el problema raíz todavía se aplica a cualquier kernel upstream anterior a la v6.18.  [CAUSA] De Jan Kara por su sabiduría sobre el comportamiento de balanceo de páginas sucias primero.    Este límite de suciedad del cgroup era lo que realmente estaba desempeñando el papel aquí porque el cgroup tenía solo una pequeña cantidad de memoria y por lo tanto el límite de suciedad para él era de aproximadamente 16MB.    La limitación de suciedad es responsable de asegurar que nadie pueda ensuciar (significativamente) más memoria sucia de lo que hay de límite de suciedad. Así, cuando una tarea está ensuciando páginas, entra periódicamente en balance_dirty_pages() y la dejamos dormir allí para ralentizar el ensuciamiento.    Cuando el sistema ya está por encima del límite de suciedad (ya sea globalmente o dentro de un cgroup de la tarea en ejecución), no permitiremos que la tarea salga de balance_dirty_pages() hasta que el número de páginas sucias caiga por debajo del límite.    Así que en este caso particular, como ya mencioné, había un cgroup con una cantidad de memoria relativamente pequeña y como resultado con un límite de suciedad establecido en 16MB. Una tarea de ese cgroup ha ensuciado páginas por un valor de aproximadamente 28MB en el inodo btree de btrfs y estas eran prácticamente las únicas páginas sucias en ese cgroup.  Así que eso significa que la única forma de reducir las páginas sucias de ese cgroup es realizar el writeback de las páginas sucias del inodo btree de btrfs, y solo después de eso esos procesos pueden salir de balance_dirty_pages().  Ahora volviendo a la parte de btrfs, btree_writepages() es responsable de realizar el writeback de las páginas sucias del inodo btree.  El problema aquí es que hay un umbral interno de btrfs que si los bytes sucios del inodo btree están por debajo del umbral de 32M, no realizará ningún writeback.  Este comportamiento es para agrupar la mayor cantidad posible de metadatos para que no escribamos de vuelta esos bloques de árbol y luego los volvamos a copiar en escritura (re-COW) para otra modificación.  Estos 32MiB internos son más altos que el tamaño de página sucia existente (28MiB), lo que significa que no se realizará ningún writeback, causando un interbloqueo entre btrfs y cgroup:  - Btrfs no quiere realizar el writeback del inodo btree hasta que haya más páginas sucias  - Cgroup/MM no quiere más páginas sucias para el inodo btree de btrfs   Así, cualquier proceso que toque ese inodo btree es puesto a dormir hasta que el número de páginas sucias se reduzca.  Muchas gracias a Jan Kara por el análisis de la causa raíz.  [MEJORA] Desde el commit del kernel b55102826d7d ('btrfs: establecer AS_KERNEL_FILE en el btree_inode'), las páginas del inodo btree de btrfs solo se cargarán al cgroup raíz, el cual debería tener un límite mucho mayor que el umbral de 32MiB de btrfs. Así que no debería afectar a kernels más nuevos.  Pero para todos los kernels LTS actuales, todos están afectados por este problema, y realizar un backport de todo el AS_KERNEL_FILE puede no ser una buena idea.  Incluso para kernels más nuevos, sigo pensando que es una buena idea eliminar el umbral interno en btree_writepages(), ya que en la mayoría de los casos cgroup/MM tiene una mejor visión del uso de la memoria de todo el sistema que el umbral fijo de btrfs.  Para los llamadores internos que usan btrfs_btree_balance_dirty(), ya que esa función ya está realizando una comprobación de umbral interna, ---truncado---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.29",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "A25D17E8-22B0-4A6C-B1FD-1EA80C78268F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0c3666ec188640c20e254011e7adf4464c32ee58",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4357e02cafabe01c2d737ceb4c4c6382fc2ee10a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4e159150a9a56d66d247f4b5510bed46fe58aa1c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/629666d20c7dcd740e193ec0631fdff035b1f7d6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bb9be3f713652e330df00f3724c18c7a5469e7ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23158",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:55.967",
      "lastModified" : "2026-03-18T14:19:55.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: virtuser: fix UAF in configfs release path\n\nThe gpio-virtuser configfs release path uses guard(mutex) to protect\nthe device structure. However, the device is freed before the guard\ncleanup runs, causing mutex_unlock() to operate on freed memory.\n\nSpecifically, gpio_virtuser_device_config_group_release() destroys\nthe mutex and frees the device while still inside the guard(mutex)\nscope. When the function returns, the guard cleanup invokes\nmutex_unlock(&dev->lock), resulting in a slab use-after-free.\n\nLimit the mutex lifetime by using a scoped_guard() only around the\nactivation check, so that the lock is released before mutex_destroy()\nand kfree() are called."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngpio: virtuser: corregir uso después de liberación en la ruta de liberación de configfs\n\nLa ruta de liberación de configfs de gpio-virtuser usa guard(mutex) para proteger la estructura del dispositivo. Sin embargo, el dispositivo es liberado antes de que se ejecute la limpieza del guard, causando que mutex_unlock() opere sobre memoria liberada.\n\nEspecíficamente, gpio_virtuser_device_config_group_release() destruye el mutex y libera el dispositivo mientras aún está dentro del ámbito de guard(mutex). Cuando la función retorna, la limpieza del guard invoca mutex_unlock(&amp;dev-&gt;lock), resultando en un uso después de liberación de slab.\n\nLimitar la vida útil del mutex usando un scoped_guard() solo alrededor de la verificación de activación, para que el bloqueo sea liberado antes de que se llamen a mutex_destroy() y kfree()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "219DC3F4-AB51-4D26-AD8C-80422D7E6103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/53ad4a948a4586359b841d607c08fb16c5503230",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7bec90f605cfb138006f5ba575f2310593347110",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/815a8e3bf72811d402b30bd4a53cde5e9df7a563",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23159",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.070",
      "lastModified" : "2026-03-18T14:13:18.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: sched: Fix perf crash with new is_user_task() helper\n\nIn order to do a user space stacktrace the current task needs to be a user\ntask that has executed in user space. It use to be possible to test if a\ntask is a user task or not by simply checking the task_struct mm field. If\nit was non NULL, it was a user task and if not it was a kernel task.\n\nBut things have changed over time, and some kernel tasks now have their\nown mm field.\n\nAn idea was made to instead test PF_KTHREAD and two functions were used to\nwrap this check in case it became more complex to test if a task was a\nuser task or not[1]. But this was rejected and the C code simply checked\nthe PF_KTHREAD directly.\n\nIt was later found that not all kernel threads set PF_KTHREAD. The io-uring\nhelpers instead set PF_USER_WORKER and this needed to be added as well.\n\nBut checking the flags is still not enough. There's a very small window\nwhen a task exits that it frees its mm field and it is set back to NULL.\nIf perf were to trigger at this moment, the flags test would say its a\nuser space task but when perf would read the mm field it would crash with\nat NULL pointer dereference.\n\nNow there are flags that can be used to test if a task is exiting, but\nthey are set in areas that perf may still want to profile the user space\ntask (to see where it exited). The only real test is to check both the\nflags and the mm field.\n\nInstead of making this modification in every location, create a new\nis_user_task() helper function that does all the tests needed to know if\nit is safe to read the user space memory or not.\n\n[1] https://lore.kernel.org/all/20250425204120.639530125@goodmis.org/"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nperf: sched: Soluciona el fallo de perf con la nueva función auxiliar is_user_task()\n\nPara realizar un seguimiento de pila (stacktrace) del espacio de usuario, la tarea actual debe ser una tarea de usuario que se haya ejecutado en el espacio de usuario. Solía ser posible comprobar si una tarea es una tarea de usuario o no simplemente verificando el campo mm de task_struct. Si no era NULL, era una tarea de usuario y si no, era una tarea del kernel.\n\nPero las cosas han cambiado con el tiempo, y algunas tareas del kernel ahora tienen su propio campo mm.\n\nSe propuso la idea de probar PF_KTHREAD en su lugar y se utilizaron dos funciones para encapsular esta verificación en caso de que se volviera más complejo probar si una tarea era una tarea de usuario o no[1]. Pero esto fue rechazado y el código C simplemente verificó PF_KTHREAD directamente.\n\nMás tarde se descubrió que no todos los hilos del kernel establecen PF_KTHREAD. Los auxiliares de io-uring, en cambio, establecen PF_USER_WORKER y esto también necesitaba ser añadido.\n\nPero verificar las banderas (flags) todavía no es suficiente. Hay una ventana muy pequeña cuando una tarea sale en la que libera su campo mm y este se vuelve a establecer en NULL. Si perf se activara en este momento, la prueba de las banderas diría que es una tarea del espacio de usuario, pero cuando perf leyera el campo mm, fallaría con una desreferencia de puntero NULL.\n\nAhora hay banderas que se pueden usar para probar si una tarea está saliendo, pero se establecen en áreas que perf aún podría querer perfilar en la tarea del espacio de usuario (para ver dónde salió). La única prueba real es verificar tanto las banderas como el campo mm.\n\nEn lugar de realizar esta modificación en cada ubicación, cree una nueva función auxiliar is_user_task() que realice todas las pruebas necesarias para saber si es seguro leer la memoria del espacio de usuario o no.\n\n[1] https://lore.kernel.org/all/20250425204120.639530125@goodmis.org/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.116",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "C7B0307B-B830-41F5-A46B-78B12251F41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.57",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "571DBB6B-9F41-4903-BA8D-1097EC4629E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.7",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "4D53B981-624A-4600-B8E0-DA90B41D49CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5aac392fcd3d981d7997f1a0766829e1afdeac2e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/76ed27608f7dd235b727ebbb12163438c2fbb617",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d84a4836dc246b7dc244e46a08ff992956b68db0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23160",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.177",
      "lastModified" : "2026-03-18T14:12:40.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nocteon_ep: Fix memory leak in octep_device_setup()\n\nIn octep_device_setup(), if octep_ctrl_net_init() fails, the function\nreturns directly without unmapping the mapped resources and freeing the\nallocated configuration memory.\n\nFix this by jumping to the unsupported_dev label, which performs the\nnecessary cleanup. This aligns with the error handling logic of other\npaths in this function.\n\nCompile tested only. Issue found using a prototype static analysis tool\nand code review."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nocteon_ep: Corrección de fuga de memoria en octep_device_setup()\n\nEn octep_device_setup(), si octep_ctrl_net_init() falla, la función retorna directamente sin desmapear los recursos mapeados y liberar la memoria de configuración asignada.\n\nEsto se corrige saltando a la etiqueta unsupported_dev, la cual realiza la limpieza necesaria. Esto se alinea con la lógica de manejo de errores de otras rutas en esta función.\n\nProbado únicamente en compilación. Problema encontrado usando una herramienta prototipo de análisis estático y revisión de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "D2B0B202-ECA1-40EF-8247-836A7D4E2A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5058d3f8f17202e673f90af1446252322bd0850f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8016dc5ee19a77678c264f8ba368b1e873fa705b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d753f3c3f9d7a6e6dbb4d3a97b73007d71624551",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fdfd28e13c244d7c3345e74f339fd1b67605b694",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23161",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.277",
      "lastModified" : "2026-04-03T14:16:24.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/shmem, swap: fix race of truncate and swap entry split\n\nThe helper for shmem swap freeing is not handling the order of swap\nentries correctly.  It uses xa_cmpxchg_irq to erase the swap entry, but it\ngets the entry order before that using xa_get_order without lock\nprotection, and it may get an outdated order value if the entry is split\nor changed in other ways after the xa_get_order and before the\nxa_cmpxchg_irq.\n\nAnd besides, the order could grow and be larger than expected, and cause\ntruncation to erase data beyond the end border.  For example, if the\ntarget entry and following entries are swapped in or freed, then a large\nfolio was added in place and swapped out, using the same entry, the\nxa_cmpxchg_irq will still succeed, it's very unlikely to happen though.\n\nTo fix that, open code the Xarray cmpxchg and put the order retrieval and\nvalue checking in the same critical section.  Also, ensure the order won't\nexceed the end border, skip it if the entry goes across the border.\n\nSkipping large swap entries crosses the end border is safe here.  Shmem\ntruncate iterates the range twice, in the first iteration,\nfind_lock_entries already filtered such entries, and shmem will swapin the\nentries that cross the end border and partially truncate the folio (split\nthe folio or at least zero part of it).  So in the second loop here, if we\nsee a swap entry that crosses the end order, it must at least have its\ncontent erased already.\n\nI observed random swapoff hangs and kernel panics when stress testing\nZSWAP with shmem.  After applying this patch, all problems are gone."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nmm/shmem, swap: corrige la condición de carrera entre el truncamiento y la división de entradas de swap\n\nLa función auxiliar para la liberación de swap de shmem no está manejando correctamente el orden de las entradas de swap. Utiliza xa_cmpxchg_irq para borrar la entrada de swap, pero obtiene el orden de la entrada antes de eso usando xa_get_order sin protección de bloqueo, y puede obtener un valor de orden obsoleto si la entrada se divide o cambia de otras maneras después de xa_get_order y antes de xa_cmpxchg_irq.\n\nY además, el orden podría crecer y ser mayor de lo esperado, y causar que el truncamiento borre datos más allá del límite final. Por ejemplo, si la entrada objetivo y las entradas siguientes se intercambian (swap in) o se liberan, y luego se añadió un folio grande en su lugar y se intercambió (swap out), usando la misma entrada, el xa_cmpxchg_irq seguirá teniendo éxito, aunque es muy poco probable que ocurra.\n\nPara solucionar eso, se implementa directamente el cmpxchg de Xarray y se coloca la recuperación del orden y la verificación del valor en la misma sección crítica. Además, se asegura que el orden no exceda el límite final, se omite si la entrada cruza el límite.\n\nOmitir entradas de swap grandes que cruzan el límite final es seguro aquí. El truncamiento de shmem itera el rango dos veces; en la primera iteración, find_lock_entries ya filtró dichas entradas, y shmem intercambiará (swap in) las entradas que cruzan el límite final y truncará parcialmente el folio (dividirá el folio o al menos pondrá a cero parte de él). Así que, en el segundo bucle aquí, si vemos una entrada de swap que cruza el orden final, al menos ya debe tener su contenido borrado.\n\nObservé bloqueos aleatorios de swapoff y 'kernel panics' al realizar pruebas de estrés de ZSWAP con shmem. Después de aplicar este parche, todos los problemas desaparecieron."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "99E9F57D-2677-42E9-A3C5-5657D35646BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8a1968bd997f45a9b11aefeabdd1232e1b6c7184",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a99f9a4669a04662c8f9efe0e62cafc598153139",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b23bee8cdb7aabce5701a7f57414db5a354ae8ed",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23162",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.383",
      "lastModified" : "2026-03-18T15:07:36.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/nvm: Fix double-free on aux add failure\n\nAfter a successful auxiliary_device_init(), aux_dev->dev.release\n(xe_nvm_release_dev()) is responsible for the kfree(nvm). When\nthere is failure with auxiliary_device_add(), driver will call\nauxiliary_device_uninit(), which call put_device(). So that the\n.release callback will be triggered to free the memory associated\nwith the auxiliary_device.\n\nMove the kfree(nvm) into the auxiliary_device_init() failure path\nand remove the err goto path to fix below error.\n\n\"\n[   13.232905] ==================================================================\n[   13.232911] BUG: KASAN: double-free in xe_nvm_init+0x751/0xf10 [xe]\n[   13.233112] Free of addr ffff888120635000 by task systemd-udevd/273\n\n[   13.233120] CPU: 8 UID: 0 PID: 273 Comm: systemd-udevd Not tainted 6.19.0-rc2-lgci-xe-kernel+ #225 PREEMPT(voluntary)\n...\n[   13.233125] Call Trace:\n[   13.233126]  <TASK>\n[   13.233127]  dump_stack_lvl+0x7f/0xc0\n[   13.233132]  print_report+0xce/0x610\n[   13.233136]  ? kasan_complete_mode_report_info+0x5d/0x1e0\n[   13.233139]  ? xe_nvm_init+0x751/0xf10 [xe]\n...\n\"\n\nv2: drop err goto path. (Alexander)\n\n(cherry picked from commit a3187c0c2bbd947ffff97f90d077ac88f9c2a215)"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/xe/nvm: Corrige doble liberación en fallo de adición de aux\n\nDespués de una exitosa auxiliary_device_init(), aux_dev-&gt;dev.release (xe_nvm_release_dev()) es responsable de la kfree(nvm). Cuando hay un fallo con auxiliary_device_add(), el controlador llamará a auxiliary_device_uninit(), que llama a put_device(). De modo que la devolución de llamada .release se activará para liberar la memoria asociada con el auxiliary_device.\n\nMueve la kfree(nvm) a la ruta de fallo de auxiliary_device_init() y elimina la ruta err goto para corregir el error a continuación.\n\n[   13.232905] ==================================================================\n[   13.232911] BUG: KASAN: double-free in xe_nvm_init+0x751/0xf10 [xe]\n[   13.233112] Free of addr ffff888120635000 by task systemd-udevd/273\n\n[   13.233120] CPU: 8 UID: 0 PID: 273 Comm: systemd-udevd Not tainted 6.19.0-rc2-lgci-xe-kernel+ #225 PREEMPT(voluntary)\n...\n[   13.233125] Call Trace:\n[   13.233126]  \n[   13.233127]  dump_stack_lvl+0x7f/0xc0\n[   13.233132]  print_report+0xce/0x610\n[   13.233136]  ? kasan_complete_mode_report_info+0x5d/0x1e0\n[   13.233139]  ? xe_nvm_init+0x751/0xf10 [xe]\n...\n\nv2: elimina la ruta err goto. (Alexander)\n\n(seleccionado de la confirmación a3187c0c2bbd947ffff97f90d077ac88f9c2a215)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.1",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "8A25DDAF-7C27-4AFF-A350-9BD6DD15CBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7CC8B11D-82DC-4958-8DC7-BF5CC829A5E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.17:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "3963C3A0-CEA1-4F5C-8011-3A593ABB684D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/32887d8e4bc0696b3cb6c5915a42b39cfd3434f4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8a44241b0b83a6047c5448da1fff03fcc29496b5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23163",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.483",
      "lastModified" : "2026-03-18T15:04:01.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove\n\nOn APUs such as Raven and Renoir (GC 9.1.0, 9.2.2, 9.3.0), the ih1 and\nih2 interrupt ring buffers are not initialized. This is by design, as\nthese secondary IH rings are only available on discrete GPUs. See\nvega10_ih_sw_init() which explicitly skips ih1/ih2 initialization when\nAMD_IS_APU is set.\n\nHowever, amdgpu_gmc_filter_faults_remove() unconditionally uses ih1 to\nget the timestamp of the last interrupt entry. When retry faults are\nenabled on APUs (noretry=0), this function is called from the SVM page\nfault recovery path, resulting in a NULL pointer dereference when\namdgpu_ih_decode_iv_ts_helper() attempts to access ih->ring[].\n\nThe crash manifests as:\n\n  BUG: kernel NULL pointer dereference, address: 0000000000000004\n  RIP: 0010:amdgpu_ih_decode_iv_ts_helper+0x22/0x40 [amdgpu]\n  Call Trace:\n   amdgpu_gmc_filter_faults_remove+0x60/0x130 [amdgpu]\n   svm_range_restore_pages+0xae5/0x11c0 [amdgpu]\n   amdgpu_vm_handle_fault+0xc8/0x340 [amdgpu]\n   gmc_v9_0_process_interrupt+0x191/0x220 [amdgpu]\n   amdgpu_irq_dispatch+0xed/0x2c0 [amdgpu]\n   amdgpu_ih_process+0x84/0x100 [amdgpu]\n\nThis issue was exposed by commit 1446226d32a4 (\"drm/amdgpu: Remove GC HW\nIP 9.3.0 from noretry=1\") which changed the default for Renoir APU from\nnoretry=1 to noretry=0, enabling retry fault handling and thus\nexercising the buggy code path.\n\nFix this by adding a check for ih1.ring_size before attempting to use\nit. Also restore the soft_ih support from commit dd299441654f (\"drm/amdgpu:\nRework retry fault removal\").  This is needed if the hardware doesn't\nsupport secondary HW IH rings.\n\nv2: additional updates (Alex)\n\n(cherry picked from commit 6ce8d536c80aa1f059e82184f0d1994436b1d526)"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amdgpu: corrige la desreferenciación de puntero NULL en amdgpu_gmc_filter_faults_remove\n\nEn APUs como Raven y Renoir (GC 9.1.0, 9.2.2, 9.3.0), los búferes de anillo de interrupción ih1 e ih2 no están inicializados. Esto es intencional, ya que estos anillos IH secundarios solo están disponibles en GPUs discretas. Véase vega10_ih_sw_init() que explícitamente omite la inicialización de ih1/ih2 cuando AMD_IS_APU está configurado.\n\nSin embargo, amdgpu_gmc_filter_faults_remove() usa incondicionalmente ih1 para obtener la marca de tiempo de la última entrada de interrupción. Cuando las fallas de reintento están habilitadas en APUs (noretry=0), esta función es llamada desde la ruta de recuperación de fallas de página SVM, lo que resulta en una desreferenciación de puntero NULL cuando amdgpu_ih_decode_iv_ts_helper() intenta acceder a ih-&gt;ring[].\n\nEl fallo se manifiesta como:\n\n  BUG: desreferenciación de puntero NULL del kernel, dirección: 0000000000000004\n  RIP: 0010:amdgpu_ih_decode_iv_ts_helper+0x22/0x40 [amdgpu]\n  Call Trace:\n   amdgpu_gmc_filter_faults_remove+0x60/0x130 [amdgpu]\n   svm_range_restore_pages+0xae5/0x11c0 [amdgpu]\n   amdgpu_vm_handle_fault+0xc8/0x340 [amdgpu]\n   gmc_v9_0_process_interrupt+0x191/0x220 [amdgpu]\n   amdgpu_irq_dispatch+0xed/0x2c0 [amdgpu]\n   amdgpu_ih_process+0x84/0x100 [amdgpu]\n\nEste problema fue expuesto por el commit 1446226d32a4 ('drm/amdgpu: Eliminar GC HW IP 9.3.0 de noretry=1') que cambió el valor predeterminado para la APU Renoir de noretry=1 a noretry=0, habilitando el manejo de fallas de reintento y, por lo tanto, ejercitando la ruta de código defectuosa.\n\nSolucione esto añadiendo una comprobación para ih1.ring_size antes de intentar usarlo. También restaure el soporte soft_ih del commit dd299441654f ('drm/amdgpu: Reestructurar la eliminación de fallas de reintento'). Esto es necesario si el hardware no soporta anillos IH de hardware secundarios.\n\nv2: actualizaciones adicionales (Alex)\n\n(seleccionado de commit 6ce8d536c80aa1f059e82184f0d1994436b1d526)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "D2B0B202-ECA1-40EF-8247-836A7D4E2A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/7611d7faccc1218be477671f892a89b25c0cb352",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8b1ecc9377bc641533cd9e76dfa3aee3cd04a007",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ac251d17d8af58ddc3daba65eaf0a99e63dc4284",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c74e2dbb5316898fb2113a8ea3a93b27698dbf68",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23164",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.590",
      "lastModified" : "2026-03-18T15:03:29.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nrocker: fix memory leak in rocker_world_port_post_fini()\n\nIn rocker_world_port_pre_init(), rocker_port->wpriv is allocated with\nkzalloc(wops->port_priv_size, GFP_KERNEL). However, in\nrocker_world_port_post_fini(), the memory is only freed when\nwops->port_post_fini callback is set:\n\n    if (!wops->port_post_fini)\n        return;\n    wops->port_post_fini(rocker_port);\n    kfree(rocker_port->wpriv);\n\nSince rocker_ofdpa_ops does not implement port_post_fini callback\n(it is NULL), the wpriv memory allocated for each port is never freed\nwhen ports are removed. This leads to a memory leak of\nsizeof(struct ofdpa_port) bytes per port on every device removal.\n\nFix this by always calling kfree(rocker_port->wpriv) regardless of\nwhether the port_post_fini callback exists."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nrocker: corregir fuga de memoria en rocker_world_port_post_fini()\n\nEn rocker_world_port_pre_init(), rocker_port-&gt;wpriv se asigna con kzalloc(wops-&gt;port_priv_size, GFP_KERNEL). Sin embargo, en rocker_world_port_post_fini(), la memoria solo se libera cuando la devolución de llamada wops-&gt;port_post_fini está establecida:\n\n    si (!wops-&gt;port_post_fini)\n        retornar;\n    wops-&gt;port_post_fini(rocker_port);\n    kfree(rocker_port-&gt;wpriv);\n\nDado que rocker_ofdpa_ops no implementa la devolución de llamada port_post_fini (es NULL), la memoria wpriv asignada para cada puerto nunca se libera cuando se eliminan los puertos. Esto conduce a una fuga de memoria de sizeof(struct ofdpa_port) bytes por puerto en cada eliminación de dispositivo.\n\nSolucione esto llamando siempre a kfree(rocker_port-&gt;wpriv) independientemente de si existe la devolución de llamada port_post_fini."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "6CE9DC81-478D-4196-99ED-64EB5DBF5D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2a3a64d75d2d0727da285749476761ebcad557a3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ce2e85889939c02740b4245301aa5c35fc94887",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8d7ba71e46216b8657a82ca2ec118bc93812a4d0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b11e6f926480ab0939fec44781f28558c54be4e7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d448bf96889f1905e740c554780f5c9fa0440566",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d8723917efda3b4f4c3de78d1ec1e1af015c0be1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dce375f4afc348c310d171abcde7ec1499a4c26a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23165",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.693",
      "lastModified" : "2026-03-18T15:02:51.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix deadlock in RSS config read\n\nSince cited commit, core locks the net_device's rss_lock when handling\n ethtool -x command, so driver's implementation should not lock it\n again.  Remove the latter."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nsfc: soluciona interbloqueo en la lectura de configuración RSS\n\nDesde el commit citado, el núcleo bloquea el rss_lock del net_device al manejar el comando ethtool -x, por lo que la implementación del controlador no debería bloquearlo de nuevo. Eliminar esto último."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "1A54A699-D04F-4433-B541-AEB7951FD812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/590c8179ffb01c17644181408821b55b8704c50c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/944c614b0a7afa5b87612c3fb557b95a50ad654c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23166",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.797",
      "lastModified" : "2026-03-18T15:02:35.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix NULL pointer dereference in ice_vsi_set_napi_queues\n\nAdd NULL pointer checks in ice_vsi_set_napi_queues() to prevent crashes\nduring resume from suspend when rings[q_idx]->q_vector is NULL.\n\nTested adaptor:\n60:00.0 Ethernet controller [0200]: Intel Corporation Ethernet Controller E810-XXV for SFP [8086:159b] (rev 02)\n        Subsystem: Intel Corporation Ethernet Network Adapter E810-XXV-2 [8086:4003]\n\nSR-IOV state: both disabled and enabled can reproduce this issue.\n\nkernel version: v6.18\n\nReproduce steps:\nBoot up and execute suspend like systemctl suspend or rtcwake.\n\nLog:\n<1>[  231.443607] BUG: kernel NULL pointer dereference, address: 0000000000000040\n<1>[  231.444052] #PF: supervisor read access in kernel mode\n<1>[  231.444484] #PF: error_code(0x0000) - not-present page\n<6>[  231.444913] PGD 0 P4D 0\n<4>[  231.445342] Oops: Oops: 0000 [#1] SMP NOPTI\n<4>[  231.446635] RIP: 0010:netif_queue_set_napi+0xa/0x170\n<4>[  231.447067] Code: 31 f6 31 ff c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 85 c9 74 0b <48> 83 79 30 00 0f 84 39 01 00 00 55 41 89 d1 49 89 f8 89 f2 48 89\n<4>[  231.447513] RSP: 0018:ffffcc780fc078c0 EFLAGS: 00010202\n<4>[  231.447961] RAX: ffff8b848ca30400 RBX: ffff8b848caf2028 RCX: 0000000000000010\n<4>[  231.448443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8b848dbd4000\n<4>[  231.448896] RBP: ffffcc780fc078e8 R08: 0000000000000000 R09: 0000000000000000\n<4>[  231.449345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001\n<4>[  231.449817] R13: ffff8b848dbd4000 R14: ffff8b84833390c8 R15: 0000000000000000\n<4>[  231.450265] FS:  00007c7b29e9d740(0000) GS:ffff8b8c068e2000(0000) knlGS:0000000000000000\n<4>[  231.450715] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n<4>[  231.451179] CR2: 0000000000000040 CR3: 000000030626f004 CR4: 0000000000f72ef0\n<4>[  231.451629] PKRU: 55555554\n<4>[  231.452076] Call Trace:\n<4>[  231.452549]  <TASK>\n<4>[  231.452996]  ? ice_vsi_set_napi_queues+0x4d/0x110 [ice]\n<4>[  231.453482]  ice_resume+0xfd/0x220 [ice]\n<4>[  231.453977]  ? __pfx_pci_pm_resume+0x10/0x10\n<4>[  231.454425]  pci_pm_resume+0x8c/0x140\n<4>[  231.454872]  ? __pfx_pci_pm_resume+0x10/0x10\n<4>[  231.455347]  dpm_run_callback+0x5f/0x160\n<4>[  231.455796]  ? dpm_wait_for_superior+0x107/0x170\n<4>[  231.456244]  device_resume+0x177/0x270\n<4>[  231.456708]  dpm_resume+0x209/0x2f0\n<4>[  231.457151]  dpm_resume_end+0x15/0x30\n<4>[  231.457596]  suspend_devices_and_enter+0x1da/0x2b0\n<4>[  231.458054]  enter_state+0x10e/0x570\n\nAdd defensive checks for both the ring pointer and its q_vector\nbefore dereferencing, allowing the system to resume successfully even when\nq_vectors are unmapped."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nice: Corrige la desreferencia de puntero NULL en ice_vsi_set_napi_queues\n\nAñade comprobaciones de puntero NULL en ice_vsi_set_napi_queues() para evitar fallos durante la reanudación desde la suspensión cuando rings[q_idx]-&gt;q_vector es NULL.\n\nAdaptador probado:\n60:00.0 Controlador Ethernet [0200]: Intel Corporation Ethernet Controller E810-XXV para SFP [8086:159b] (rev 02)\n        Subsistema: Intel Corporation Ethernet Network Adapter E810-XXV-2 [8086:4003]\n\nEstado de SR-IOV: tanto deshabilitado como habilitado pueden reproducir este problema.\n\nversión del kernel: v6.18\n\nPasos para reproducir:\nArrancar y ejecutar la suspensión como systemctl suspend o rtcwake.\n\nRegistro:\n&lt;1&gt;[  231.443607] BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000040\n&lt;1&gt;[  231.444052] #PF: acceso de lectura de supervisor en modo kernel\n&lt;1&gt;[  231.444484] #PF: código_de_error(0x0000) - página no presente\n&lt;6&gt;[  231.444913] PGD 0 P4D 0\n&lt;4&gt;[  231.445342] Oops: Oops: 0000 [#1] SMP NOPTI\n&lt;4&gt;[  231.446635] RIP: 0010:netif_queue_set_napi+0xa/0x170\n&lt;4&gt;[  231.447067] Code: 31 f6 31 ff c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 85 c9 74 0b &lt;48&gt; 83 79 30 00 0f 84 39 01 00 00 55 41 89 d1 49 89 f8 89 f2 48 89\n&lt;4&gt;[  231.447513] RSP: 0018:ffffcc780fc078c0 EFLAGS: 00010202\n&lt;4&gt;[  231.447961] RAX: ffff8b848ca30400 RBX: ffff8b848caf2028 RCX: 0000000000000010\n&lt;4&gt;[  231.448443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8b848dbd4000\n&lt;4&gt;[  231.448896] RBP: ffffcc780fc078e8 R08: 0000000000000000 R09: 0000000000000000\n&lt;4&gt;[  231.449345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001\n&lt;4&gt;[  231.449817] R13: ffff8b848dbd4000 R14: ffff8b84833390c8 R15: 0000000000000000\n&lt;4&gt;[  231.450265] FS:  00007c7b29e9d740(0000) GS:ffff8b8c068e2000(0000) knlGS:0000000000000000\n&lt;4&gt;[  231.450715] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n&lt;4&gt;[  231.451179] CR2: 0000000000000040 CR3: 000000030626f004 CR4: 0000000000f72ef0\n&lt;4&gt;[  231.451629] PKRU: 55555554\n&lt;4&gt;[  231.452076] Traza de llamada:\n&lt;4&gt;[  231.452549]  \n&lt;4&gt;[  231.452996]  ? ice_vsi_set_napi_queues+0x4d/0x110 [ice]\n&lt;4&gt;[  231.453482]  ice_resume+0xfd/0x220 [ice]\n&lt;4&gt;[  231.453977]  ? __pfx_pci_pm_resume+0x10/0x10\n&lt;4&gt;[  231.454425]  pci_pm_resume+0x8c/0x140\n&lt;4&gt;[  231.454872]  ? __pfx_pci_pm_resume+0x10/0x10\n&lt;4&gt;[  231.455347]  dpm_run_callback+0x5f/0x160\n&lt;4&gt;[  231.455796]  ? dpm_wait_for_superior+0x107/0x170\n&lt;4&gt;[  231.456244]  device_resume+0x177/0x270\n&lt;4&gt;[  231.456708]  dpm_resume+0x209/0x2f0\n&lt;4&gt;[  231.457151]  dpm_resume_end+0x15/0x30\n&lt;4&gt;[  231.457596]  suspend_devices_and_enter+0x1da/0x2b0\n&lt;4&gt;[  231.458054]  enter_state+0x10e/0x570\n\nAñade comprobaciones defensivas tanto para el puntero del anillo como para su q_vector antes de desreferenciar, permitiendo que el sistema se reanude con éxito incluso cuando los q_vectors no están mapeados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.10",
            "versionEndExcluding" : "6.11",
            "matchCriteriaId" : "20B10614-CE0D-494A-9FEA-F01A6985C9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11.1",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "AD81BD2F-4651-47F4-8CE3-D4217B34D3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4770BA57-3F3F-493B-8608-EC3B25254949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.11:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5298B3-04B4-4F3E-B186-01A58B5C75A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/36126ddbe924727add05a594dedf230d3b575e4d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9bb30be4d89ff9a8d7ab1aa0eb2edaca83431f85",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d75c7b7c3c2b8e3569043099e6bdcefc983856c5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23167",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:56.910",
      "lastModified" : "2026-03-18T15:01:30.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: Fix race between rfkill and nci_unregister_device().\n\nsyzbot reported the splat below [0] without a repro.\n\nIt indicates that struct nci_dev.cmd_wq had been destroyed before\nnci_close_device() was called via rfkill.\n\nnci_dev.cmd_wq is only destroyed in nci_unregister_device(), which\n(I think) was called from virtual_ncidev_close() when syzbot close()d\nan fd of virtual_ncidev.\n\nThe problem is that nci_unregister_device() destroys nci_dev.cmd_wq\nfirst and then calls nfc_unregister_device(), which removes the\ndevice from rfkill by rfkill_unregister().\n\nSo, the device is still visible via rfkill even after nci_dev.cmd_wq\nis destroyed.\n\nLet's unregister the device from rfkill first in nci_unregister_device().\n\nNote that we cannot call nfc_unregister_device() before\nnci_close_device() because\n\n  1) nfc_unregister_device() calls device_del() which frees\n     all memory allocated by devm_kzalloc() and linked to\n     ndev->conn_info_list\n\n  2) nci_rx_work() could try to queue nci_conn_info to\n     ndev->conn_info_list which could be leaked\n\nThus, nfc_unregister_device() is split into two functions so we\ncan remove rfkill interfaces only before nci_close_device().\n\n[0]:\nDEBUG_LOCKS_WARN_ON(1)\nWARNING: kernel/locking/lockdep.c:238 at hlock_class kernel/locking/lockdep.c:238 [inline], CPU#0: syz.0.8675/6349\nWARNING: kernel/locking/lockdep.c:238 at check_wait_context kernel/locking/lockdep.c:4854 [inline], CPU#0: syz.0.8675/6349\nWARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x39d/0x2cf0 kernel/locking/lockdep.c:5187, CPU#0: syz.0.8675/6349\nModules linked in:\nCPU: 0 UID: 0 PID: 6349 Comm: syz.0.8675 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026\nRIP: 0010:hlock_class kernel/locking/lockdep.c:238 [inline]\nRIP: 0010:check_wait_context kernel/locking/lockdep.c:4854 [inline]\nRIP: 0010:__lock_acquire+0x3a4/0x2cf0 kernel/locking/lockdep.c:5187\nCode: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 8b 3a de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f\nRSP: 0018:ffffc9000c767680 EFLAGS: 00010046\nRAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000\nRDX: ffffc90013080000 RSI: ffffffff8dde3a8b RDI: ffffffff8ff24ca0\nRBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4\nR10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 00000000000012a2\nR13: ffff888030338ba8 R14: ffff888030338000 R15: ffff888030338b30\nFS:  00007fa5995f66c0(0000) GS:ffff8881256f8000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f7e72f842d0 CR3: 00000000485a0000 CR4: 00000000003526f0\nCall Trace:\n <TASK>\n lock_acquire+0x106/0x330 kernel/locking/lockdep.c:5868\n touch_wq_lockdep_map+0xcb/0x180 kernel/workqueue.c:3940\n __flush_workqueue+0x14b/0x14f0 kernel/workqueue.c:3982\n nci_close_device+0x302/0x630 net/nfc/nci/core.c:567\n nci_dev_down+0x3b/0x50 net/nfc/nci/core.c:639\n nfc_dev_down+0x152/0x290 net/nfc/core.c:161\n nfc_rfkill_set_block+0x2d/0x100 net/nfc/core.c:179\n rfkill_set_block+0x1d2/0x440 net/rfkill/core.c:346\n rfkill_fop_write+0x461/0x5a0 net/rfkill/core.c:1301\n vfs_write+0x29a/0xb90 fs/read_write.c:684\n ksys_write+0x150/0x270 fs/read_write.c:738\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fa59b39acb9\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fa5995f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007fa59b615fa0 RCX: 00007fa59b39acb9\nRDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007\nRBP: 00007fa59b408bf7 R08: \n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  nfc: nci: Solucionar condición de carrera entre rfkill y nci_unregister_device().  syzbot informó del 'splat' a continuación [0] sin una reproducción.  Indica que la estructura nci_dev.cmd_wq había sido destruida antes de que se llamara a nci_close_device() a través de rfkill.  nci_dev.cmd_wq solo se destruye en nci_unregister_device(), que (creo) fue llamada desde virtual_ncidev_close() cuando syzbot cerró un 'fd' de virtual_ncidev.  El problema es que nci_unregister_device() destruye nci_dev.cmd_wq primero y luego llama a nfc_unregister_device(), que elimina el dispositivo de rfkill mediante rfkill_unregister().  Así, el dispositivo sigue siendo visible a través de rfkill incluso después de que nci_dev.cmd_wq sea destruida.  Desregistremos el dispositivo de rfkill primero en nci_unregister_device().  Tenga en cuenta que no podemos llamar a nfc_unregister_device() antes de nci_close_device() porque    1) nfc_unregister_device() llama a device_del() que libera toda la memoria asignada por devm_kzalloc() y vinculada a ndev-&gt;conn_info_list    2) nci_rx_work() podría intentar encolar nci_conn_info a ndev-&gt;conn_info_list lo que podría provocar una fuga de memoria  Por lo tanto, nfc_unregister_device() se divide en dos funciones para que podamos eliminar las interfaces de rfkill solo antes de nci_close_device().  [0]: DEBUG_LOCKS_WARN_ON(1) ADVERTENCIA: kernel/locking/lockdep.c:238 en hlock_class kernel/locking/lockdep.c:238 [inline], CPU#0: syz.0.8675/6349 ADVERTENCIA: kernel/locking/lockdep.c:238 en check_wait_context kernel/locking/lockdep.c:4854 [inline], CPU#0: syz.0.8675/6349 ADVERTENCIA: kernel/locking/lockdep.c:238 en __lock_acquire+0x39d/0x2cf0 kernel/locking/lockdep.c:5187, CPU#0: syz.0.8675/6349 Módulos enlazados: CPU: 0 UID: 0 PID: 6349 Comm: syz.0.8675 No contaminado syzkaller #0 PREEMPT(full) Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 RIP: 0010:hlock_class kernel/locking/lockdep.c:238 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4854 [inline] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 kernel/locking/lockdep.c:5187 Código: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 8b 3a de 8d &lt;67&gt; 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f RSP: 0018:ffffc9000c767680 EFLAGS: 00010046 RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 RDX: ffffc90013080000 RSI: ffffffff8dde3a8b RDI: ffffffff8ff24ca0 RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 00000000000012a2 R13: ffff888030338ba8 R14: ffff888030338000 R15: ffff888030338b30 FS:  00007fa5995f66c0(0000) GS:ffff8881256f8000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7e72f842d0 CR3: 00000000485a0000 CR4: 00000000003526f0 Ruta de llamada:    lock_acquire+0x106/0x330 kernel/locking/lockdep.c:5868  touch_wq_lockdep_map+0xcb/0x180 kernel/workqueue.c:3940  __flush_workqueue+0x14b/0x14f0 kernel/workqueue.c:3982  nci_close_device+0x302/0x630 net/nfc/nci/core.c:567  nci_dev_down+0x3b/0x50 net/nfc/nci/core.c:639  nfc_dev_down+0x152/0x290 net/nfc/core.c:161  nfc_rfkill_set_block+0x2d/0x100 net/nfc/core.c:179  rfkill_set_block+0x1d2/0x440 net/rfkill/core.c:346  rfkill_fop_write+0x461/0x5a0 net/rfkill/core.c:1301  vfs_write+0x29a/0xb90 fs/read_write.c:684    ---truncado---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "F5D77C54-7B3F-4C98-BED6-0D950E9E7A26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/126cd30cad37bc7c2c85fe2df2a522d4edf0a5c5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/546eba0b10989de9ccc7fd619e874a30561e2b88",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ea4d96419fb20f15a52ce657d49f1e7c91eb7ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c3369fc5e6120a72169e71acd72e987907a682af",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cd4412d5905ee580e96c48360dc98fcd9e6f3208",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d2492688bb9fed6ab6e313682c387ae71a66ebae",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eaa5da5130deda26420273d4610cf6e4f794ed75",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23168",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:57.023",
      "lastModified" : "2026-03-18T15:00:47.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nflex_proportions: make fprop_new_period() hardirq safe\n\nBernd has reported a lockdep splat from flexible proportions code that is\nessentially complaining about the following race:\n\n<timer fires>\nrun_timer_softirq - we are in softirq context\n  call_timer_fn\n    writeout_period\n      fprop_new_period\n        write_seqcount_begin(&p->sequence);\n\n        <hardirq is raised>\n        ...\n        blk_mq_end_request()\n\t  blk_update_request()\n\t    ext4_end_bio()\n\t      folio_end_writeback()\n\t\t__wb_writeout_add()\n\t\t  __fprop_add_percpu_max()\n\t\t    if (unlikely(max_frac < FPROP_FRAC_BASE)) {\n\t\t      fprop_fraction_percpu()\n\t\t\tseq = read_seqcount_begin(&p->sequence);\n\t\t\t  - sees odd sequence so loops indefinitely\n\nNote that a deadlock like this is only possible if the bdi has configured\nmaximum fraction of writeout throughput which is very rare in general but\nfrequent for example for FUSE bdis.  To fix this problem we have to make\nsure write section of the sequence counter is irqsafe."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nflex_proportions: hacer que fprop_new_period() sea seguro para hardirq\n\nBernd ha reportado un lockdep splat del código de proporciones flexibles que esencialmente se queja de la siguiente condición de carrera:\n\n\nrun_timer_softirq - estamos en contexto de softirq\n  call_timer_fn\n    writeout_period\n      fprop_new_period\n        write_seqcount_begin(&amp;p-&gt;sequence);\n\n        \n        ...\n        blk_mq_end_request()\n\t  blk_update_request()\n\t    ext4_end_bio()\n\t      folio_end_writeback()\n\t\t__wb_writeout_add()\n\t\t  __fprop_add_percpu_max()\n\t\t    if (unlikely(max_frac &lt; FPROP_FRAC_BASE)) {\n\t\t      fprop_fraction_percpu()\n\t\t\tseq = read_seqcount_begin(&amp;p-&gt;sequence);\n\t\t\t  - ve una secuencia impar por lo que entra en un bucle indefinido\n\nTenga en cuenta que un interbloqueo como este solo es posible si el bdi ha configurado una fracción máxima de rendimiento de escritura, lo cual es muy raro en general pero frecuente, por ejemplo, para bdis FUSE. Para solucionar este problema, tenemos que asegurarnos de que la sección de escritura del contador de secuencia sea irqsafe."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "83DE4E0F-B87E-49B8-B0C7-D01CE9B22054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0acc9ba7a1b5ba4d998c5753e709be904e179b75",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/78ede9ebd679dadf480dce6f7b798e3603f88348",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/884b2590ffcc7222cbbd6298051f4c243cc36f5d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b91a84299d72ae0e05551e851e47cd3008bd025b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dd9e2f5b38f1fdd49b1ab6d3a85f81c14369eacc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23169",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:57.147",
      "lastModified" : "2026-04-03T14:16:24.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix race in mptcp_pm_nl_flush_addrs_doit()\n\nsyzbot and Eulgyu Kim reported crashes in mptcp_pm_nl_get_local_id()\nand/or mptcp_pm_nl_is_backup()\n\nRoot cause is list_splice_init() in mptcp_pm_nl_flush_addrs_doit()\nwhich is not RCU ready.\n\nlist_splice_init_rcu() can not be called here while holding pernet->lock\nspinlock.\n\nMany thanks to Eulgyu Kim for providing a repro and testing our patches."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmptcp: corrección de condición de carrera en mptcp_pm_nl_flush_addrs_doit()\n\nsyzbot y Eulgyu Kim reportaron fallos en mptcp_pm_nl_get_local_id() y/o mptcp_pm_nl_is_backup()\n\nLa causa raíz es list_splice_init() en mptcp_pm_nl_flush_addrs_doit() que no está preparada para RCU.\n\nlist_splice_init_rcu() no puede ser llamada aquí mientras se mantiene el spinlock pernet-&gt;lock.\n\nMuchas gracias a Eulgyu Kim por proporcionar una reproducción y probar nuestros parches."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.125",
            "matchCriteriaId" : "74B70CDE-7B74-4280-BBCC-8889B8F28466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "F1A7E514-FB3C-4B6B-8046-07D5A8F04644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1f1b9523527df02685dde603f20ff6e603d8e4a1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/338d40bab283da2639780ee3e458fb61f1567d8c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/455e882192c9833f176f3fbbbb2f036b6c5bf555",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/51223bdd0f60b06cfc7f25885c4d4be917adba94",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7896dbe990d56d5bb8097863b2645355633665eb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e2a9eeb69f7d4ca4cf4c70463af77664fdb6ab1d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23170",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:57.247",
      "lastModified" : "2026-03-18T14:57:32.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imx/tve: fix probe device leak\n\nMake sure to drop the reference taken to the DDC device during probe on\nprobe failure (e.g. probe deferral) and on driver unbind."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/imx/tve: solución a la fuga de dispositivo de sondeo\n\nAsegúrese de liberar la referencia tomada al dispositivo DDC durante el sondeo en caso de fallo del sondeo (p. ej., aplazamiento del sondeo) y al desvincular el controlador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndExcluding" : "5.10.249",
            "matchCriteriaId" : "FA9D1D05-1C8C-4322-9A41-41AB90AB4399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.199",
            "matchCriteriaId" : "A247FBA6-BEB9-484F-B892-DD5517949CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "6579E0D4-0641-479D-A4C3-0EF618798C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/4aaff8f6ab38f81e00ab8aa1fcfb7eb20cd87ba1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/52755c5680ce333b33d0750a200fbc99420ed2b2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/77365382585b40559d63538d09e26e4b2af28fbc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9a15d3fdc22d48f597792aee0cf1bf0947fc62e6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ca68745e820ecd210e3ab018497c9e6b69025c4b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e535c23513c63f02f67e3e09e0787907029efeaf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f212652982c6725986cfa42fbf10d1dfa92c010e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23171",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:57.353",
      "lastModified" : "2026-04-03T14:16:25.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: fix use-after-free due to enslave fail after slave array update\n\nFix a use-after-free which happens due to enslave failure after the new\nslave has been added to the array. Since the new slave can be used for Tx\nimmediately, we can use it after it has been freed by the enslave error\ncleanup path which frees the allocated slave memory. Slave update array is\nsupposed to be called last when further enslave failures are not expected.\nMove it after xdp setup to avoid any problems.\n\nIt is very easy to reproduce the problem with a simple xdp_pass prog:\n ip l add bond1 type bond mode balance-xor\n ip l set bond1 up\n ip l set dev bond1 xdp object xdp_pass.o sec xdp_pass\n ip l add dumdum type dummy\n\nThen run in parallel:\n while :; do ip l set dumdum master bond1 1>/dev/null 2>&1; done;\n mausezahn bond1 -a own -b rand -A rand -B 1.1.1.1 -c 0 -t tcp \"dp=1-1023, flags=syn\"\n\nThe crash happens almost immediately:\n [  605.602850] Oops: general protection fault, probably for non-canonical address 0xe0e6fc2460000137: 0000 [#1] SMP KASAN NOPTI\n [  605.602916] KASAN: maybe wild-memory-access in range [0x07380123000009b8-0x07380123000009bf]\n [  605.602946] CPU: 0 UID: 0 PID: 2445 Comm: mausezahn Kdump: loaded Tainted: G    B               6.19.0-rc6+ #21 PREEMPT(voluntary)\n [  605.602979] Tainted: [B]=BAD_PAGE\n [  605.602998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n [  605.603032] RIP: 0010:netdev_core_pick_tx+0xcd/0x210\n [  605.603063] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3e 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 08 49 8d 7d 30 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 25 01 00 00 49 8b 45 30 4c 89 e2 48 89 ee 48 89\n [  605.603111] RSP: 0018:ffff88817b9af348 EFLAGS: 00010213\n [  605.603145] RAX: dffffc0000000000 RBX: ffff88817d28b420 RCX: 0000000000000000\n [  605.603172] RDX: 00e7002460000137 RSI: 0000000000000008 RDI: 07380123000009be\n [  605.603199] RBP: ffff88817b541a00 R08: 0000000000000001 R09: fffffbfff3ed8c0c\n [  605.603226] R10: ffffffff9f6c6067 R11: 0000000000000001 R12: 0000000000000000\n [  605.603253] R13: 073801230000098e R14: ffff88817d28b448 R15: ffff88817b541a84\n [  605.603286] FS:  00007f6570ef67c0(0000) GS:ffff888221dfa000(0000) knlGS:0000000000000000\n [  605.603319] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n [  605.603343] CR2: 00007f65712fae40 CR3: 000000011371b000 CR4: 0000000000350ef0\n [  605.603373] Call Trace:\n [  605.603392]  <TASK>\n [  605.603410]  __dev_queue_xmit+0x448/0x32a0\n [  605.603434]  ? __pfx_vprintk_emit+0x10/0x10\n [  605.603461]  ? __pfx_vprintk_emit+0x10/0x10\n [  605.603484]  ? __pfx___dev_queue_xmit+0x10/0x10\n [  605.603507]  ? bond_start_xmit+0xbfb/0xc20 [bonding]\n [  605.603546]  ? _printk+0xcb/0x100\n [  605.603566]  ? __pfx__printk+0x10/0x10\n [  605.603589]  ? bond_start_xmit+0xbfb/0xc20 [bonding]\n [  605.603627]  ? add_taint+0x5e/0x70\n [  605.603648]  ? add_taint+0x2a/0x70\n [  605.603670]  ? end_report.cold+0x51/0x75\n [  605.603693]  ? bond_start_xmit+0xbfb/0xc20 [bonding]\n [  605.603731]  bond_start_xmit+0x623/0xc20 [bonding]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbonding: corrige el uso después de liberación debido a un fallo de enslave después de la actualización del array de esclavos\n\nCorrige un uso después de liberación que ocurre debido a un fallo de enslave después de que el nuevo esclavo ha sido añadido al array. Dado que el nuevo esclavo puede ser usado para Tx inmediatamente, podemos usarlo después de que ha sido liberado por la ruta de limpieza de errores de enslave que libera la memoria del esclavo asignada. Se supone que la actualización del array de esclavos debe ser llamada al final cuando no se esperan más fallos de enslave. Muévelo después de la configuración de xdp para evitar cualquier problema.\n\nEs muy fácil reproducir el problema con un programa xdp_pass simple:\n ip l add bond1 type bond mode balance-xor\n ip l set bond1 up\n ip l set dev bond1 xdp object xdp_pass.o sec xdp_pass\n ip l add dumdum type dummy\n\nLuego ejecuta en paralelo:\n while :; do ip l set dumdum master bond1 1&gt;/dev/null 2&gt;&amp;1; done;\n mausezahn bond1 -a own -b rand -A rand -B 1.1.1.1 -c 0 -t tcp 'dp=1-1023, flags=syn'\n\nEl fallo ocurre casi inmediatamente:\n [  605.602850] Oops: general protection fault, probably for non-canonical address 0xe0e6fc2460000137: 0000 [#1] SMP KASAN NOPTI\n [  605.602916] KASAN: maybe wild-memory-access in range [0x07380123000009b8-0x07380123000009bf]\n [  605.602946] CPU: 0 UID: 0 PID: 2445 Comm: mausezahn Kdump: loaded Tainted: G    B               6.19.0-rc6+ #21 PREEMPT(voluntary)\n [  605.602979] Tainted: [B]=BAD_PAGE\n [  605.602998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n [  605.603032] RIP: 0010:netdev_core_pick_tx+0xcd/0x210\n [  605.603063] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3e 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 08 49 8d 7d 30 48 89 fa 48 c1 ea 03 &lt;80&gt; 3c 02 00 0f 85 25 01 00 00 49 8b 45 30 4c 89 e2 48 89 ee 48 89\n [  605.603111] RSP: 0018:ffff88817b9af348 EFLAGS: 00010213\n [  605.603145] RAX: dffffc0000000000 RBX: ffff88817d28b420 RCX: 0000000000000000\n [  605.603172] RDX: 00e7002460000137 RSI: 0000000000000008 RDI: 07380123000009be\n [  605.603199] RBP: ffff88817b541a00 R08: 0000000000000001 R09: fffffbfff3ed8c0c\n [  605.603226] R10: ffffffff9f6c6067 R11: 0000000000000001 R12: 0000000000000000\n [  605.603253] R13: 073801230000098e R14: ffff88817d28b448 R15: ffff88817b541a84\n [  605.603286] FS:  00007f6570ef67c0(0000) GS:ffff888221dfa000(0000) knlGS:0000000000000000\n [  605.603319] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n [  605.603343] CR2: 00007f65712fae40 CR3: 000000011371b000 CR4: 0000000000350ef0\n [  605.603373] Call Trace:\n [  605.603392]  \n [  605.603410]  __dev_queue_xmit+0x448/0x32a0\n [  605.603434]  ? __pfx_vprintk_emit+0x10/0x10\n [  605.603461]  ? __pfx_vprintk_emit+0x10/0x10\n [  605.603484]  ? __pfx___dev_queue_xmit+0x10/0x10\n [  605.603507]  ? bond_start_xmit+0xbfb/0xc20 [bonding]\n [  605.603546]  ? _printk+0xcb/0x100\n [  605.603566]  ? __pfx__printk+0x10/0x10\n [  605.603589]  ? bond_start_xmit+0xbfb/0xc20 [bonding]\n [  605.603627]  ? add_taint+0x5e/0x70\n [  605.603648]  ? add_taint+0x2a/0x70\n [  605.603670]  ? end_report.cold+0x51/0x75\n [  605.603693]  ? bond_start_xmit+0xbfb/0xc20 [bonding]\n [  605.603731]  bond_start_xmit+0x623/0xc20 [bonding]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "031C7E01-871A-404A-8849-89C7AEC73CD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/bd25b092a06a3e05f7e8bd6da6fa7318777d8c3d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e9acda52fd2ee0cdca332f996da7a95c5fd25294",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23172",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:57.457",
      "lastModified" : "2026-04-03T14:16:25.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: fix potential skb->frags overflow in RX path\n\nWhen receiving data in the DPMAIF RX path,\nthe t7xx_dpmaif_set_frag_to_skb() function adds\npage fragments to an skb without checking if the number of\nfragments has exceeded MAX_SKB_FRAGS. This could lead to a buffer overflow\nin skb_shinfo(skb)->frags[] array, corrupting adjacent memory and\npotentially causing kernel crashes or other undefined behavior.\n\nThis issue was identified through static code analysis by comparing with a\nsimilar vulnerability fixed in the mt76 driver commit b102f0c522cf (\"mt76:\nfix array overflow on receiving too many fragments for a packet\").\n\nThe vulnerability could be triggered if the modem firmware sends packets\nwith excessive fragments. While under normal protocol conditions (MTU 3080\nbytes, BAT buffer 3584 bytes),\na single packet should not require additional\nfragments, the kernel should not blindly trust firmware behavior.\nMalicious, buggy, or compromised firmware could potentially craft packets\nwith more fragments than the kernel expects.\n\nFix this by adding a bounds check before calling skb_add_rx_frag() to\nensure nr_frags does not exceed MAX_SKB_FRAGS.\n\nThe check must be performed before unmapping to avoid a page leak\nand double DMA unmap during device teardown."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: wwan: t7xx: corrige un potencial desbordamiento de skb-&gt;frags en la ruta RX\n\nAl recibir datos en la ruta RX de DPMAIF, la función t7xx_dpmaif_set_frag_to_skb() añade fragmentos de página a un skb sin comprobar si el número de fragmentos ha excedido MAX_SKB_FRAGS. Esto podría conducir a un desbordamiento de búfer en el array skb_shinfo(skb)-&gt;frags[], corrompiendo memoria adyacente y potencialmente causando fallos del kernel u otro comportamiento indefinido.\n\nEste problema fue identificado a través de análisis de código estático comparando con una vulnerabilidad similar corregida en el commit b102f0c522cf del controlador mt76 ('mt76: corrige el desbordamiento del array al recibir demasiados fragmentos para un paquete').\n\nLa vulnerabilidad podría ser activada si el firmware del módem envía paquetes con fragmentos excesivos. Si bien bajo condiciones normales del protocolo (MTU 3080 bytes, búfer BAT 3584 bytes), un solo paquete no debería requerir fragmentos adicionales, el kernel no debería confiar ciegamente en el comportamiento del firmware. Firmware malicioso, con errores o comprometido podría potencialmente crear paquetes con más fragmentos de los que el kernel espera.\n\nSolucione esto añadiendo una comprobación de límites antes de llamar a skb_add_rx_frag() para asegurar que nr_frags no exceda MAX_SKB_FRAGS.\n\nLa comprobación debe realizarse antes de desmapear para evitar una fuga de página y un doble desmapeo DMA durante el desmontaje del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "9157E107-BB12-45A1-9689-48547A53C91F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2a0522f564acd34442652ea083091c329fa7c5d5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2c0fb0f60bc1545c52da61bc6bd4855c1e7814ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/af4b8577d0b388cc3d0039eb0cdd9ca5bbbc9276",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f0813bcd2d9d97fdbdf2efb9532ab03ae92e99e6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f9747a7521a48afded5bff2faf1f2dcfff48c577",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23173",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T16:15:57.560",
      "lastModified" : "2026-03-18T14:46:21.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: TC, delete flows only for existing peers\n\nWhen deleting TC steering flows, iterate only over actual devcom\npeers instead of assuming all possible ports exist. This avoids\ntouching non-existent peers and ensures cleanup is limited to\ndevices the driver is currently connected to.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000008\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 133c8a067 P4D 0\n Oops: Oops: 0002 [#1] SMP\n CPU: 19 UID: 0 PID: 2169 Comm: tc Not tainted 6.18.0+ #156 NONE\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\n RIP: 0010:mlx5e_tc_del_fdb_peers_flow+0xbe/0x200 [mlx5_core]\n Code: 00 00 a8 08 74 a8 49 8b 46 18 f6 c4 02 74 9f 4c 8d bf a0 12 00 00 4c 89 ff e8 0e e7 96 e1 49 8b 44 24 08 49 8b 0c 24 4c 89 ff <48> 89 41 08 48 89 08 49 89 2c 24 49 89 5c 24 08 e8 7d ce 96 e1 49\n RSP: 0018:ff11000143867528 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: dead000000000122 RCX: 0000000000000000\n RDX: ff11000143691580 RSI: ff110001026e5000 RDI: ff11000106f3d2a0\n RBP: dead000000000100 R08: 00000000000003fd R09: 0000000000000002\n R10: ff11000101c75690 R11: ff1100085faea178 R12: ff11000115f0ae78\n R13: 0000000000000000 R14: ff11000115f0a800 R15: ff11000106f3d2a0\n FS:  00007f35236bf740(0000) GS:ff110008dc809000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000008 CR3: 0000000157a01001 CR4: 0000000000373eb0\n Call Trace:\n  <TASK>\n  mlx5e_tc_del_flow+0x46/0x270 [mlx5_core]\n  mlx5e_flow_put+0x25/0x50 [mlx5_core]\n  mlx5e_delete_flower+0x2a6/0x3e0 [mlx5_core]\n  tc_setup_cb_reoffload+0x20/0x80\n  fl_reoffload+0x26f/0x2f0 [cls_flower]\n  ? mlx5e_tc_reoffload_flows_work+0xc0/0xc0 [mlx5_core]\n  ? mlx5e_tc_reoffload_flows_work+0xc0/0xc0 [mlx5_core]\n  tcf_block_playback_offloads+0x9e/0x1c0\n  tcf_block_unbind+0x7b/0xd0\n  tcf_block_setup+0x186/0x1d0\n  tcf_block_offload_cmd.isra.0+0xef/0x130\n  tcf_block_offload_unbind+0x43/0x70\n  __tcf_block_put+0x85/0x160\n  ingress_destroy+0x32/0x110 [sch_ingress]\n  __qdisc_destroy+0x44/0x100\n  qdisc_graft+0x22b/0x610\n  tc_get_qdisc+0x183/0x4d0\n  rtnetlink_rcv_msg+0x2d7/0x3d0\n  ? rtnl_calcit.isra.0+0x100/0x100\n  netlink_rcv_skb+0x53/0x100\n  netlink_unicast+0x249/0x320\n  ? __alloc_skb+0x102/0x1f0\n  netlink_sendmsg+0x1e3/0x420\n  __sock_sendmsg+0x38/0x60\n  ____sys_sendmsg+0x1ef/0x230\n  ? copy_msghdr_from_user+0x6c/0xa0\n  ___sys_sendmsg+0x7f/0xc0\n  ? ___sys_recvmsg+0x8a/0xc0\n  ? __sys_sendto+0x119/0x180\n  __sys_sendmsg+0x61/0xb0\n  do_syscall_64+0x55/0x640\n  entry_SYSCALL_64_after_hwframe+0x4b/0x53\n RIP: 0033:0x7f35238bb764\n Code: 15 b9 86 0c 00 f7 d8 64 89 02 b8 ff ff ff ff eb bf 0f 1f 44 00 00 f3 0f 1e fa 80 3d e5 08 0d 00 00 74 13 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4c c3 0f 1f 00 55 48 89 e5 48 83 ec 20 89 55\n RSP: 002b:00007ffed4c35638 EFLAGS: 00000202 ORIG_RAX: 000000000000002e\n RAX: ffffffffffffffda RBX: 000055a2efcc75e0 RCX: 00007f35238bb764\n RDX: 0000000000000000 RSI: 00007ffed4c356a0 RDI: 0000000000000003\n RBP: 00007ffed4c35710 R08: 0000000000000010 R09: 00007f3523984b20\n R10: 0000000000000004 R11: 0000000000000202 R12: 00007ffed4c35790\n R13: 000000006947df8f R14: 000055a2efcc75e0 R15: 00007ffed4c35780"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/mlx5e: TC, eliminar flujos solo para pares existentes\n\nAl eliminar flujos de direccionamiento TC, iterar solo sobre pares devcom reales en lugar de asumir que todos los puertos posibles existen. Esto evita tocar pares no existentes y asegura que la limpieza se limite a los dispositivos a los que el controlador está conectado actualmente.\n\nERROR: desreferencia de puntero NULL del kernel, dirección: 0000000000000008\n#PF: acceso de escritura de supervisor en modo kernel\n#PF: error_code(0x0002) - página no presente\nPGD 133c8a067 P4D 0\nOops: Oops: 0002 [#1] SMP\nCPU: 19 UID: 0 PID: 2169 Comm: tc No contaminado 6.18.0+ #156 NINGUNO\nNombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nRIP: 0010:mlx5e_tc_del_fdb_peers_flow+0xbe/0x200 [mlx5_core]\nCódigo: 00 00 a8 08 74 a8 49 8b 46 18 f6 c4 02 74 9f 4c 8d bf a0 12 00 00 4c 89 ff e8 0e e7 96 e1 49 8b 44 24 08 49 8b 0c 24 4c 89 ff &lt;48&gt; 89 41 08 48 89 08 49 89 2c 24 49 89 5c 24 08 e8 7d ce 96 e1 49\nRSP: 0018:ff11000143867528 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: dead000000000122 RCX: 0000000000000000\nRDX: ff11000143691580 RSI: ff110001026e5000 RDI: ff11000106f3d2a0\nRBP: dead000000000100 R08: 00000000000003fd R09: 0000000000000002\nR10: ff11000101c75690 R11: ff1100085faea178 R12: ff11000115f0ae78\nR13: 0000000000000000 R14: ff11000115f0a800 R15: ff11000106f3d2a0\nFS: 00007f35236bf740(0000) GS:ff110008dc809000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000008 CR3: 0000000157a01001 CR4: 0000000000373eb0\nTraza de Llamada:\n \n mlx5e_tc_del_flow+0x46/0x270 [mlx5_core]\n mlx5e_flow_put+0x25/0x50 [mlx5_core]\n mlx5e_delete_flower+0x2a6/0x3e0 [mlx5_core]\n tc_setup_cb_reoffload+0x20/0x80\n fl_reoffload+0x26f/0x2f0 [cls_flower]\n ? mlx5e_tc_reoffload_flows_work+0xc0/0xc0 [mlx5_core]\n ? mlx5e_tc_reoffload_flows_work+0xc0/0xc0 [mlx5_core]\n tcf_block_playback_offloads+0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "FFC21C9B-41A4-4214-AFB1-32C8AFC571B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2652e2f1253c53f9a3ce84cc972568b32c892734",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/62e1d8920f6920543f4b095a65fb964448c9901d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f67666938ae626cbda63fbf5176b3583c07e7124",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fdf8437016f578f18b160c6e14f13ab96bfbc3ba",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23174",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.103",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: handle changing device dma map requirements\n\nThe initial state of dma_needs_unmap may be false, but change to true\nwhile mapping the data iterator. Enabling swiotlb is one such case that\ncan change the result. The nvme driver needs to save the mapped dma\nvectors to be unmapped later, so allocate as needed during iteration\nrather than assume it was always allocated at the beginning. This fixes\na NULL dereference from accessing an uninitialized dma_vecs when the\ndevice dma unmapping requirements change mid-iteration."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnvme-pci: manejar los requisitos cambiantes del mapa dma del dispositivo\n\nEl estado inicial de dma_needs_unmap puede ser falso, pero cambiar a verdadero mientras se mapea el iterador de datos. Habilitar swiotlb es uno de esos casos que puede cambiar el resultado. El controlador nvme necesita guardar los vectores dma mapeados para ser desmapeados más tarde, así que asignar según sea necesario durante la iteración en lugar de asumir que siempre fue asignado al principio. Esto corrige una desreferencia NULL al acceder a un dma_vecs no inicializado cuando los requisitos de desmapeo dma del dispositivo cambian a mitad de la iteración."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/071be3b0b6575d45be9df9c5b612f5882bfc5e88",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f3ed399e9aa6f36e92d2d0fe88b387915e9705fe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23175",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.210",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw: Execute ndo_set_rx_mode callback in a work queue\n\nCommit 1767bb2d47b7 (\"ipv6: mcast: Don't hold RTNL for\nIPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP.\") removed the RTNL lock for\nIPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP operations. However, this\nchange triggered the following call trace on my BeagleBone Black board:\n  WARNING: net/8021q/vlan_core.c:236 at vlan_for_each+0x120/0x124, CPU#0: rpcbind/481\n  RTNL: assertion failed at net/8021q/vlan_core.c (236)\n  Modules linked in:\n  CPU: 0 UID: 997 PID: 481 Comm: rpcbind Not tainted 6.19.0-rc7-next-20260130-yocto-standard+ #35 PREEMPT\n  Hardware name: Generic AM33XX (Flattened Device Tree)\n  Call trace:\n   unwind_backtrace from show_stack+0x28/0x2c\n   show_stack from dump_stack_lvl+0x30/0x38\n   dump_stack_lvl from __warn+0xb8/0x11c\n   __warn from warn_slowpath_fmt+0x130/0x194\n   warn_slowpath_fmt from vlan_for_each+0x120/0x124\n   vlan_for_each from cpsw_add_mc_addr+0x54/0x98\n   cpsw_add_mc_addr from __hw_addr_ref_sync_dev+0xc4/0xec\n   __hw_addr_ref_sync_dev from __dev_mc_add+0x78/0x88\n   __dev_mc_add from igmp6_group_added+0x84/0xec\n   igmp6_group_added from __ipv6_dev_mc_inc+0x1fc/0x2f0\n   __ipv6_dev_mc_inc from __ipv6_sock_mc_join+0x124/0x1b4\n   __ipv6_sock_mc_join from do_ipv6_setsockopt+0x84c/0x1168\n   do_ipv6_setsockopt from ipv6_setsockopt+0x88/0xc8\n   ipv6_setsockopt from do_sock_setsockopt+0xe8/0x19c\n   do_sock_setsockopt from __sys_setsockopt+0x84/0xac\n   __sys_setsockopt from ret_fast_syscall+0x0/0x54\n\nThis trace occurs because vlan_for_each() is called within\ncpsw_ndo_set_rx_mode(), which expects the RTNL lock to be held.\nSince modifying vlan_for_each() to operate without the RTNL lock is not\nstraightforward, and because ndo_set_rx_mode() is invoked both with and\nwithout the RTNL lock across different code paths, simply adding\nrtnl_lock() in cpsw_ndo_set_rx_mode() is not a viable solution.\n\nTo resolve this issue, we opt to execute the actual processing within\na work queue, following the approach used by the icssg-prueth driver.\n\nPlease note: To reproduce this issue, I manually reverted the changes to\nam335x-bone-common.dtsi from commit c477358e66a3 (\"ARM: dts: am335x-bone:\nswitch to new cpsw switch drv\") in order to revert to the legacy cpsw\ndriver."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: cpsw: Ejecutar la devolución de llamada ndo_set_rx_mode en una cola de trabajo\n\nEl commit 1767bb2d47b7 ('ipv6: mcast: No retener RTNL para IPV6_ADD_MEMBERSHIP y MCAST_JOIN_GROUP.') eliminó el bloqueo RTNL para las operaciones IPV6_ADD_MEMBERSHIP y MCAST_JOIN_GROUP. Sin embargo, este cambio desencadenó el siguiente rastreo de llamadas en mi placa BeagleBone Black:\n  WARNING: net/8021q/vlan_core.c:236 en vlan_for_each+0x120/0x124, CPU#0: rpcbind/481\n  RTNL: aserción fallida en net/8021q/vlan_core.c (236)\n  Módulos enlazados:\n  CPU: 0 UID: 997 PID: 481 Comm: rpcbind No contaminado 6.19.0-rc7-next-20260130-yocto-standard+ #35 PREEMPT\n  Nombre del hardware: Generic AM33XX (Flattened Device Tree)\n  Rastreo de llamadas:\n   unwind_backtrace desde show_stack+0x28/0x2c\n   show_stack desde dump_stack_lvl+0x30/0x38\n   dump_stack_lvl desde __warn+0xb8/0x11c\n   __warn desde warn_slowpath_fmt+0x130/0x194\n   warn_slowpath_fmt desde vlan_for_each+0x120/0x124\n   vlan_for_each desde cpsw_add_mc_addr+0x54/0x98\n   cpsw_add_mc_addr desde __hw_addr_ref_sync_dev+0xc4/0xec\n   __hw_addr_ref_sync_dev desde __dev_mc_add+0x78/0x88\n   __dev_mc_add desde igmp6_group_added+0x84/0xec\n   igmp6_group_added desde __ipv6_dev_mc_inc+0x1fc/0x2f0\n   __ipv6_dev_mc_inc desde __ipv6_sock_mc_join+0x124/0x1b4\n   __ipv6_sock_mc_join desde do_ipv6_setsockopt+0x84c/0x1168\n   do_ipv6_setsockopt desde ipv6_setsockopt+0x88/0xc8\n   ipv6_setsockopt desde do_sock_setsockopt+0xe8/0x19c\n   do_sock_setsockopt desde __sys_setsockopt+0x84/0xac\n   __sys_setsockopt desde ret_fast_syscall+0x0/0x54\n\nEste rastreo ocurre porque se llama a vlan_for_each() dentro de cpsw_ndo_set_rx_mode(), que espera que el bloqueo RTNL esté retenido. Dado que modificar vlan_for_each() para operar sin el bloqueo RTNL no es sencillo, y debido a que ndo_set_rx_mode() se invoca tanto con como sin el bloqueo RTNL a través de diferentes rutas de código, simplemente añadir rtnl_lock() en cpsw_ndo_set_rx_mode() no es una solución viable.\n\nPara resolver este problema, optamos por ejecutar el procesamiento real dentro de una cola de trabajo, siguiendo el enfoque utilizado por el controlador icssg-prueth.\n\nTenga en cuenta: Para reproducir este problema, revertí manualmente los cambios en am335x-bone-common.dtsi del commit c477358e66a3 ('ARM: dts: am335x-bone: cambiar a nuevo controlador de switch cpsw') para revertir al controlador cpsw heredado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0b8c878d117319f2be34c8391a77e0f4d5c94d79",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/488009aa62bb1217ea0624fd5108b79adef4e148",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23176",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.320",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: toshiba_haps: Fix memory leaks in add/remove routines\n\ntoshiba_haps_add() leaks the haps object allocated by it if it returns\nan error after allocating that object successfully.\n\ntoshiba_haps_remove() does not free the object pointed to by\ntoshiba_haps before clearing that pointer, so it becomes unreachable\nallocated memory.\n\nAddress these memory leaks by using devm_kzalloc() for allocating\nthe memory in question."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nplatform/x86: toshiba_haps: Corrige fugas de memoria en las rutinas de añadir/eliminar\n\ntoshiba_haps_add() fuga el objeto haps asignado por ella si devuelve un error después de asignar ese objeto con éxito.\n\ntoshiba_haps_remove() no libera el objeto apuntado por toshiba_haps antes de borrar ese puntero, por lo que se convierte en memoria asignada inalcanzable.\n\nAborda estas fugas de memoria utilizando devm_kzalloc() para asignar la memoria en cuestión."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/128497456756e1b952bd5a912cd073836465109d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/17f37c4cdf42a9e4915216b9e130fc8baef4cc64",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/5bce10f0f9435afaae3fc4df9a52b01d9b3853dc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/bf0474356875d005d420f8c6b9ac168566e72e87",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ca9ff71c15bc8e48529c2033294a519a7749b272",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f2093e87ddec13e7a920f326c078a5f765ba89c3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f93ae43780b759a70734be9bc82c1adcf7f33208",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23177",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.430",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm, shmem: prevent infinite loop on truncate race\n\nWhen truncating a large swap entry, shmem_free_swap() returns 0 when the\nentry's index doesn't match the given index due to lookup alignment.  The\nfailure fallback path checks if the entry crosses the end border and\naborts when it happens, so truncate won't erase an unexpected entry or\nrange.  But one scenario was ignored.\n\nWhen `index` points to the middle of a large swap entry, and the large\nswap entry doesn't go across the end border, find_get_entries() will\nreturn that large swap entry as the first item in the batch with\n`indices[0]` equal to `index`.  The entry's base index will be smaller\nthan `indices[0]`, so shmem_free_swap() will fail and return 0 due to the\n\"base < index\" check.  The code will then call shmem_confirm_swap(), get\nthe order, check if it crosses the END boundary (which it doesn't), and\nretry with the same index.\n\nThe next iteration will find the same entry again at the same index with\nsame indices, leading to an infinite loop.\n\nFix this by retrying with a round-down index, and abort if the index is\nsmaller than the truncate range."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm, shmem: evitar bucle infinito en una condición de carrera de truncamiento\n\nAl truncar una entrada de intercambio grande, shmem_free_swap() devuelve 0 cuando el índice de la entrada no coincide con el índice dado debido a la alineación de búsqueda. La ruta de retroceso en caso de fallo comprueba si la entrada cruza el borde final y aborta cuando esto ocurre, por lo que el truncamiento no borrará una entrada o rango inesperado. Pero un escenario fue ignorado.\n\nCuando 'index' apunta al medio de una entrada de intercambio grande, y la entrada de intercambio grande no cruza el borde final, find_get_entries() devolverá esa entrada de intercambio grande como el primer elemento en el lote con 'indices[0]' igual a 'index'. El índice base de la entrada será menor que 'indices[0]', por lo que shmem_free_swap() fallará y devolverá 0 debido a la comprobación \"base &lt; index\". El código entonces llamará a shmem_confirm_swap(), obtendrá el orden, comprobará si cruza el límite END (lo cual no hace), y reintentará con el mismo índice.\n\nLa siguiente iteración encontrará la misma entrada de nuevo en el mismo índice con los mismos índices, lo que lleva a un bucle infinito.\n\nSolucione esto reintentando con un índice redondeado a la baja, y abortar si el índice es menor que el rango de truncamiento."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2030dddf95451b4e7a389f052091e7c4b7b274c6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/7b6a0f121d50234aab3e7ab9a62ebe826d40a32a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/dfc3ab6bd64860f8022d69903be299d09be86e11",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23178",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.537",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()\n\n`i2c_hid_xfer` is used to read `recv_len + sizeof(__le16)` bytes of data\ninto `ihid->rawbuf`.\n\nThe former can come from the userspace in the hidraw driver and is only\nbounded by HID_MAX_BUFFER_SIZE(16384) by default (unless we also set\n`max_buffer_size` field of `struct hid_ll_driver` which we do not).\n\nThe latter has size determined at runtime by the maximum size of\ndifferent report types you could receive on any particular device and\ncan be a much smaller value.\n\nFix this by truncating `recv_len` to `ihid->bufsize - sizeof(__le16)`.\n\nThe impact is low since access to hidraw devices requires root."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nHID: i2c-hid: corrige un potencial desbordamiento de búfer en i2c_hid_get_report()\n\n'i2c_hid_xfer' se utiliza para leer 'recv_len + sizeof(__le16)' bytes de datos en 'ihid-&gt;rawbuf'.\n\nEl primero puede provenir del espacio de usuario en el controlador hidraw y está limitado únicamente por HID_MAX_BUFFER_SIZE(16384) por defecto (a menos que también configuremos el campo 'max_buffer_size' de 'struct hid_ll_driver', lo cual no hacemos).\n\nEl segundo tiene un tamaño determinado en tiempo de ejecución por el tamaño máximo de los diferentes tipos de informes que se podrían recibir en cualquier dispositivo particular y puede ser un valor mucho menor.\n\nEsto se soluciona truncando 'recv_len' a 'ihid-&gt;bufsize - sizeof(__le16)'.\n\nEl impacto es bajo ya que el acceso a los dispositivos hidraw requiere root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2124279f1f8c32c1646ce98e75a1a39b23b7db76",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/2497ff38c530b1af0df5130ca9f5ab22c5e92f29",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/786ec171788bdf9dda38789163f1b1fbb47f2d1e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/cff3f619fd1cb40cdd89971df9001f075613d219",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f9c9ad89d845f88a1509e9d672f65d234425fde9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23179",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.643",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()\n\nWhen the socket is closed while in TCP_LISTEN a callback is run to\nflush all outstanding packets, which in turns calls\nnvmet_tcp_listen_data_ready() with the sk_callback_lock held.\nSo we need to check if we are in TCP_LISTEN before attempting\nto get the sk_callback_lock() to avoid a deadlock."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnvmet-tcp: corregir cuelgue en nvmet_tcp_listen_data_ready()\n\nCuando el socket se cierra mientras está en TCP_LISTEN, se ejecuta una devolución de llamada para vaciar todos los paquetes pendientes, lo que a su vez llama a nvmet_tcp_listen_data_ready() con el sk_callback_lock retenido. Así que necesitamos verificar si estamos en TCP_LISTEN antes de intentar obtener el sk_callback_lock() para evitar un interbloqueo."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1c90f930e7b410dd2d75a2a19a85e19c64e98ad5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/2fa8961d3a6a1c2395d8d560ffed2c782681bade",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6e0c7503a5803d568d56a9f9bca662cd94a14908",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23180",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.747",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: add bounds check for if_id in IRQ handler\n\nThe IRQ handler extracts if_id from the upper 16 bits of the hardware\nstatus register and uses it to index into ethsw->ports[] without\nvalidation. Since if_id can be any 16-bit value (0-65535) but the ports\narray is only allocated with sw_attr.num_ifs elements, this can lead to\nan out-of-bounds read potentially.\n\nAdd a bounds check before accessing the array, consistent with the\nexisting validation in dpaa2_switch_rx()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndpaa2-switch: añadir comprobación de límites para if_id en el manejador IRQ\n\nEl manejador IRQ extrae if_id de los 16 bits superiores del registro de estado del hardware y lo utiliza para indexar en ethsw-&gt;ports[] sin validación. Dado que if_id puede ser cualquier valor de 16 bits (0-65535) pero el array de puertos solo se asigna con elementos sw_attr.num_ifs, esto puede llevar a una posible lectura fuera de límites.\n\nAñadir una comprobación de límites antes de acceder al array, consistente con la validación existente en dpaa2_switch_rx()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1b381a638e1851d8cfdfe08ed9cdbec5295b18c9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/2447edc367800ba914acf7ddd5d250416b45fb31",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/31a7a0bbeb006bac2d9c81a2874825025214b6d8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/34b56c16efd61325d80bf1d780d0e176be662f59",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/77611cab5bdfff7a070ae574bbfba20a1de99d1b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f89e33c9c37f0001b730e23b3b05ab7b1ecface2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23181",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.853",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: sync read disk super and set block size\n\nWhen the user performs a btrfs mount, the block device is not set\ncorrectly. The user sets the block size of the block device to 0x4000\nby executing the BLKBSZSET command.\nSince the block size change also changes the mapping->flags value, this\nfurther affects the result of the mapping_min_folio_order() calculation.\n\nLet's analyze the following two scenarios:\n\nScenario 1: Without executing the BLKBSZSET command, the block size is\n0x1000, and mapping_min_folio_order() returns 0;\n\nScenario 2: After executing the BLKBSZSET command, the block size is\n0x4000, and mapping_min_folio_order() returns 2.\n\ndo_read_cache_folio() allocates a folio before the BLKBSZSET command\nis executed. This results in the allocated folio having an order value\nof 0. Later, after BLKBSZSET is executed, the block size increases to\n0x4000, and the mapping_min_folio_order() calculation result becomes 2.\n\nThis leads to two undesirable consequences:\n\n1. filemap_add_folio() triggers a VM_BUG_ON_FOLIO(folio_order(folio) <\nmapping_min_folio_order(mapping)) assertion.\n\n2. The syzbot report [1] shows a null pointer dereference in\ncreate_empty_buffers() due to a buffer head allocation failure.\n\nSynchronization should be established based on the inode between the\nBLKBSZSET command and read cache page to prevent inconsistencies in\nblock size or mapping flags before and after folio allocation.\n\n[1]\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nRIP: 0010:create_empty_buffers+0x4d/0x480 fs/buffer.c:1694\nCall Trace:\n folio_create_buffers+0x109/0x150 fs/buffer.c:1802\n block_read_full_folio+0x14c/0x850 fs/buffer.c:2403\n filemap_read_folio+0xc8/0x2a0 mm/filemap.c:2496\n do_read_cache_folio+0x266/0x5c0 mm/filemap.c:4096\n do_read_cache_page mm/filemap.c:4162 [inline]\n read_cache_page_gfp+0x29/0x120 mm/filemap.c:4195\n btrfs_read_disk_super+0x192/0x500 fs/btrfs/volumes.c:1367"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbtrfs: sincronizar la lectura del superbloque del disco y establecer el tamaño de bloque\n\nCuando el usuario realiza un montaje btrfs, el dispositivo de bloques no se configura correctamente. El usuario establece el tamaño de bloque del dispositivo de bloques a 0x4000 ejecutando el comando BLKBSZSET.\nDado que el cambio de tamaño de bloque también modifica el valor de mapping-&gt;flags, esto afecta aún más el resultado del cálculo de mapping_min_folio_order().\n\nAnalicemos los dos escenarios siguientes:\n\nEscenario 1: Sin ejecutar el comando BLKBSZSET, el tamaño de bloque es 0x1000, y mapping_min_folio_order() devuelve 0;\n\nEscenario 2: Después de ejecutar el comando BLKBSZSET, el tamaño de bloque es 0x4000, y mapping_min_folio_order() devuelve 2.\n\ndo_read_cache_folio() asigna un folio antes de que se ejecute el comando BLKBSZSET. Esto resulta en que el folio asignado tiene un valor de orden de 0. Posteriormente, después de ejecutar BLKBSZSET, el tamaño de bloque aumenta a 0x4000, y el resultado del cálculo de mapping_min_folio_order() se convierte en 2.\n\nEsto conduce a dos consecuencias indeseables:\n\n1. filemap_add_folio() activa una aserción VM_BUG_ON_FOLIO(folio_order(folio) &lt; mapping_min_folio_order(mapping)).\n\n2. El informe de syzbot [1] muestra una desreferencia de puntero nulo en create_empty_buffers() debido a un fallo en la asignación de un buffer head.\n\nSe debe establecer una sincronización basada en el inodo entre el comando BLKBSZSET y la página de caché de lectura para evitar inconsistencias en el tamaño de bloque o las banderas de mapeo antes y después de la asignación de folio.\n\n[1]\nKASAN: desreferencia de puntero nulo en el rango [0x0000000000000000-0x0000000000000007]\nRIP: 0010:create_empty_buffers+0x4d/0x480 fs/buffer.c:1694\nRastro de Llamada:\n folio_create_buffers+0x109/0x150 fs/buffer.c:1802\n block_read_full_folio+0x14c/0x850 fs/buffer.c:2403\n filemap_read_folio+0xc8/0x2a0 mm/filemap.c:2496\n do_read_cache_folio+0x266/0x5c0 mm/filemap.c:4096\n do_read_cache_page mm/filemap.c:4162 [inline]\n read_cache_page_gfp+0x29/0x120 mm/filemap.c:4195\n btrfs_read_disk_super+0x192/0x500 fs/btrfs/volumes.c:1367"
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3f29d661e5686f3aa14e6f11537ff5c49846f2e2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/ccb3c75d57039adb3170ae54a0d470e359705984",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23182",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:55.960",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: tegra: Fix a memory leak in tegra_slink_probe()\n\nIn tegra_slink_probe(), when platform_get_irq() fails, it directly\nreturns from the function with an error code, which causes a memory leak.\n\nReplace it with a goto label to ensure proper cleanup."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nspi: tegra: Corrección de una fuga de memoria en tegra_slink_probe()\n\nEn tegra_slink_probe(), cuando platform_get_irq() falla, retorna directamente de la función con un código de error, lo que provoca una fuga de memoria.\n\nReemplazarlo con una etiqueta goto para garantizar una limpieza adecuada."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/075415ae18b5b3e4d0187962d538653154216fe7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/126a09f4fcd2b895a818ca43fde078d907c1ac9a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/327b71326cc1834bc031e8f52a470a18dfd9caa6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/41d9a6795b95d6ea28439ac1e9ce8c95bbca20fc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/6a04dc650cef8d52a1ccb4ae245dbe318ffff32e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/b8eec12aa666c11f8a6ad1488c568f85c58875fa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23183",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.067",
      "lastModified" : "2026-04-15T14:34:27.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/dmem: fix NULL pointer dereference when setting max\n\nAn issue was triggered:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000000\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: Oops: 0000 [#1] SMP NOPTI\n CPU: 15 UID: 0 PID: 658 Comm: bash Tainted: 6.19.0-rc6-next-2026012\n Tainted: [O]=OOT_MODULE\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\n RIP: 0010:strcmp+0x10/0x30\n RSP: 0018:ffffc900017f7dc0 EFLAGS: 00000246\n RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888107cd4358\n RDX: 0000000019f73907 RSI: ffffffff82cc381a RDI: 0000000000000000\n RBP: ffff8881016bef0d R08: 000000006c0e7145 R09: 0000000056c0e714\n R10: 0000000000000001 R11: ffff888107cd4358 R12: 0007ffffffffffff\n R13: ffff888101399200 R14: ffff888100fcb360 R15: 0007ffffffffffff\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000000 CR3: 0000000105c79000 CR4: 00000000000006f0\n Call Trace:\n  <TASK>\n  dmemcg_limit_write.constprop.0+0x16d/0x390\n  ? __pfx_set_resource_max+0x10/0x10\n  kernfs_fop_write_iter+0x14e/0x200\n  vfs_write+0x367/0x510\n  ksys_write+0x66/0xe0\n  do_syscall_64+0x6b/0x390\n  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n RIP: 0033:0x7f42697e1887\n\nIt was trriggered setting max without limitation, the command is like:\n\"echo test/region0 > dmem.max\". To fix this issue, add check whether\noptions is valid after parsing the region_name."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncgroup/dmem: corrección de desreferencia de puntero NULL al establecer el máximo\n\nUn problema se desencadenó:\n\n BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000000\n #PF: acceso de lectura de supervisor en modo kernel\n #PF: código_de_error(0x0000) - página no presente\n PGD 0 P4D 0\n Oops: Oops: 0000 [#1] SMP NOPTI\n CPU: 15 UID: 0 PID: 658 Comm: bash Tainted: 6.19.0-rc6-next-2026012\n Tainted: [O]=OOT_MODULE\n Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996),\n RIP: 0010:strcmp+0x10/0x30\n RSP: 0018:ffffc900017f7dc0 EFLAGS: 00000246\n RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888107cd4358\n RDX: 0000000019f73907 RSI: ffffffff82cc381a RDI: 0000000000000000\n RBP: ffff8881016bef0d R08: 000000006c0e7145 R09: 0000000056c0e714\n R10: 0000000000000001 R11: ffff888107cd4358 R12: 0007ffffffffffff\n R13: ffff888101399200 R14: ffff888100fcb360 R15: 0007ffffffffffff\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000000 CR3: 0000000105c79000 CR4: 00000000000006f0\n Rastro de Llamada:\n  \n  dmemcg_limit_write.constprop.0+0x16d/0x390\n  ? __pfx_set_resource_max+0x10/0x10\n  kernfs_fop_write_iter+0x14e/0x200\n  vfs_write+0x367/0x510\n  ksys_write+0x66/0xe0\n  do_syscall_64+0x6b/0x390\n  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n RIP: 0033:0x7f42697e1887\n\nSe desencadenó al establecer el máximo sin limitación, el comando es como:\n\"echo test/region0 &gt; dmem.max\". Para solucionar este problema, añadir una comprobación de si las opciones son válidas después de analizar el region_name."
      } ],
      "metrics" : { },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/43151f812886be1855d2cba059f9c93e4729460b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/c13816e8fa23deec6a8d7465d9e637fd02683b5c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23184",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.167",
      "lastModified" : "2026-04-03T14:16:26.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: fix UAF in binder_netlink_report()\n\nOneway transactions sent to frozen targets via binder_proc_transaction()\nreturn a BR_TRANSACTION_PENDING_FROZEN error but they are still treated\nas successful since the target is expected to thaw at some point. It is\nthen not safe to access 't' after BR_TRANSACTION_PENDING_FROZEN errors\nas the transaction could have been consumed by the now thawed target.\n\nThis is the case for binder_netlink_report() which derreferences 't'\nafter a pending frozen error, as pointed out by the following KASAN\nreport:\n\n  ==================================================================\n  BUG: KASAN: slab-use-after-free in binder_netlink_report.isra.0+0x694/0x6c8\n  Read of size 8 at addr ffff00000f98ba38 by task binder-util/522\n\n  CPU: 4 UID: 0 PID: 522 Comm: binder-util Not tainted 6.19.0-rc6-00015-gc03e9c42ae8f #1 PREEMPT\n  Hardware name: linux,dummy-virt (DT)\n  Call trace:\n   binder_netlink_report.isra.0+0x694/0x6c8\n   binder_transaction+0x66e4/0x79b8\n   binder_thread_write+0xab4/0x4440\n   binder_ioctl+0x1fd4/0x2940\n   [...]\n\n  Allocated by task 522:\n   __kmalloc_cache_noprof+0x17c/0x50c\n   binder_transaction+0x584/0x79b8\n   binder_thread_write+0xab4/0x4440\n   binder_ioctl+0x1fd4/0x2940\n   [...]\n\n  Freed by task 488:\n   kfree+0x1d0/0x420\n   binder_free_transaction+0x150/0x234\n   binder_thread_read+0x2d08/0x3ce4\n   binder_ioctl+0x488/0x2940\n   [...]\n  ==================================================================\n\nInstead, make a transaction copy so the data can be safely accessed by\nbinder_netlink_report() after a pending frozen error. While here, add a\ncomment about not using t->buffer in binder_netlink_report()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbinder: corregir UAF en binder_netlink_report()\n\nLas transacciones unidireccionales enviadas a objetivos congelados a través de binder_proc_transaction() devuelven un error BR_TRANSACTION_PENDING_FROZEN pero aún se tratan como exitosas ya que se espera que el objetivo se descongele en algún momento. Por lo tanto, no es seguro acceder a 't' después de errores BR_TRANSACTION_PENDING_FROZEN, ya que la transacción podría haber sido consumida por el objetivo ahora descongelado.\n\nEste es el caso de binder_netlink_report() que desreferencia 't' después de un error de congelación pendiente, como lo señala el siguiente informe KASAN:\n\n  ==================================================================\n  ERROR: KASAN: uso después de liberación de slab en binder_netlink_report.isra.0+0x694/0x6c8\n  Lectura de tamaño 8 en la dirección ffff00000f98ba38 por la tarea binder-util/522\n\n  CPU: 4 UID: 0 PID: 522 Comm: binder-util No contaminado 6.19.0-rc6-00015-gc03e9c42ae8f #1 PREEMPT\n  Nombre del hardware: linux,dummy-virt (DT)\n  Rastro de llamada:\n   binder_netlink_report.isra.0+0x694/0x6c8\n   binder_transaction+0x66e4/0x79b8\n   binder_thread_write+0xab4/0x4440\n   binder_ioctl+0x1fd4/0x2940\n   [...]\n\n  Asignado por la tarea 522:\n   __kmalloc_cache_noprof+0x17c/0x50c\n   binder_transaction+0x584/0x79b8\n   binder_thread_write+0xab4/0x4440\n   binder_ioctl+0x1fd4/0x2940\n   [...]\n\n  Liberado por la tarea 488:\n   kfree+0x1d0/0x420\n   binder_free_transaction+0x150/0x234\n   binder_thread_read+0x2d08/0x3ce4\n   binder_ioctl+0x488/0x2940\n   [...]\n  ==================================================================\n\nEn su lugar, haga una copia de la transacción para que los datos puedan ser accedidos de forma segura por binder_netlink_report() después de un error de congelación pendiente. Ya que estamos, añada un comentario sobre no usar t-&gt;buffer en binder_netlink_report()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "32F6354D-FB80-4DEC-B5BD-29DA22C31C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5e8a3d01544282e50d887d76f30d1496a0a53562",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a6050dedb6f1cc23e518e3a132ab74a0aad6df90",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23185",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.273",
      "lastModified" : "2026-04-03T14:16:26.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mld: cancel mlo_scan_start_wk\n\nmlo_scan_start_wk is not canceled on disconnection. In fact, it is not\ncanceled anywhere except in the restart cleanup, where we don't really\nhave to.\n\nThis can cause an init-after-queue issue: if, for example, the work was\nqueued and then drv_change_interface got executed.\n\nThis can also cause use-after-free: if the work is executed after the\nvif is freed."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: iwlwifi: mld: cancelar mlo_scan_start_wk\n\nmlo_scan_start_wk no se cancela en la desconexión. De hecho, no se\ncancela en ningún otro lugar excepto en la limpieza de reinicio, donde\nrealmente no es necesario.\n\nEsto puede causar un problema de inicialización después de la cola: si,\npor ejemplo, el trabajo fue puesto en cola y luego se ejecutó\ndrv_change_interface.\n\nEsto también puede causar uso después de liberación: si el trabajo se\nejecuta después de que se libera el vif."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "006F0E3E-7CDC-49C8-880D-47A126A6F299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5ff641011ab7fb63ea101251087745d9826e8ef5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9b9f52f052f4953fecd2190ae2dde3aa76d10962",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23186",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.373",
      "lastModified" : "2026-03-18T15:10:00.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()\n\nThe acpi_power_meter driver's .notify() callback function,\nacpi_power_meter_notify(), calls hwmon_device_unregister() under a lock\nthat is also acquired by callbacks in sysfs attributes of the device\nbeing unregistered which is prone to deadlocks between sysfs access and\ndevice removal.\n\nAddress this by moving the hwmon device removal in\nacpi_power_meter_notify() outside the lock in question, but notice\nthat doing it alone is not sufficient because two concurrent\nMETER_NOTIFY_CONFIG notifications may be attempting to remove the\nsame device at the same time.  To prevent that from happening, add a\nnew lock serializing the execution of the switch () statement in\nacpi_power_meter_notify().  For simplicity, it is a static mutex\nwhich should not be a problem from the performance perspective.\n\nThe new lock also allows the hwmon_device_register_with_info()\nin acpi_power_meter_notify() to be called outside the inner lock\nbecause it prevents the other notifications handled by that function\nfrom manipulating the \"resource\" object while the hwmon device based\non it is being registered.  The sending of ACPI netlink messages from\nacpi_power_meter_notify() is serialized by the new lock too which\ngenerally helps to ensure that the order of handling firmware\nnotifications is the same as the order of sending netlink messages\nrelated to them.\n\nIn addition, notice that hwmon_device_register_with_info() may fail\nin which case resource->hwmon_dev will become an error pointer,\nso add checks to avoid attempting to unregister the hwmon device\npointer to by it in that case to acpi_power_meter_notify() and\nacpi_power_meter_remove()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nhwmon: (acpi_power_meter) Soluciona interbloqueos relacionados con acpi_power_meter_notify()\n\nLa función de callback .notify() del controlador acpi_power_meter, acpi_power_meter_notify(), llama a hwmon_device_unregister() bajo un bloqueo que también es adquirido por callbacks en atributos sysfs del dispositivo que se está desregistrando, lo cual es propenso a interbloqueos entre el acceso a sysfs y la eliminación del dispositivo.\n\nAborda esto moviendo la eliminación del dispositivo hwmon en acpi_power_meter_notify() fuera del bloqueo en cuestión, pero ten en cuenta que hacerlo solo no es suficiente porque dos notificaciones METER_NOTIFY_CONFIG concurrentes pueden estar intentando eliminar el mismo dispositivo al mismo tiempo. Para evitar que eso suceda, añade un nuevo bloqueo serializando la ejecución de la sentencia switch () en acpi_power_meter_notify(). Para simplificar, es un mutex estático lo cual no debería ser un problema desde la perspectiva del rendimiento.\n\nEl nuevo bloqueo también permite que hwmon_device_register_with_info() en acpi_power_meter_notify() sea llamado fuera del bloqueo interno porque evita que las otras notificaciones manejadas por esa función manipulen el objeto 'resource' mientras el dispositivo hwmon basado en él está siendo registrado. El envío de mensajes netlink ACPI desde acpi_power_meter_notify() también es serializado por el nuevo bloqueo, lo cual generalmente ayuda a asegurar que el orden de manejo de las notificaciones de firmware es el mismo que el orden de envío de los mensajes netlink relacionados con ellas.\n\nAdemás, ten en cuenta que hwmon_device_register_with_info() puede fallar, en cuyo caso resource-&gt;hwmon_dev se convertirá en un puntero de error, así que añade comprobaciones para evitar intentar desregistrar el dispositivo hwmon al que apunta en ese caso a acpi_power_meter_notify() y acpi_power_meter_remove()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "3D999201-C599-4A3B-A14D-669CF95A41B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/615901b57b7ef8eb655f71358f7e956e42bcd16b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8860ddf0e07be37169d4ef9f2618e39fca934a66",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23187",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.490",
      "lastModified" : "2026-03-19T18:04:36.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains\n\nFix out-of-range access of bc->domains in imx8m_blk_ctrl_remove()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\npmdomain: imx8m-blk-ctrl: corrige el acceso fuera de rango de bc-&gt;domains\n\nCorrige el acceso fuera de rango de bc-&gt;domains en imx8m_blk_ctrl_remove()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/071159ff5c0bf2e5efff79501e23faf3775cbcd1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4390dcdabb5fca4647bf56a5a6b050bbdfa5760f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6bd8b4a92a901fae1a422e6f914801063c345e8d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7842b5dfcac888ece025a2321257d74b2264b099",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eb54ce033b344b531b374496e68a2554b2b56b5a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23188",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.600",
      "lastModified" : "2026-03-19T18:04:07.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: r8152: fix resume reset deadlock\n\nrtl8152 can trigger device reset during reset which\npotentially can result in a deadlock:\n\n **** DPM device timeout after 10 seconds; 15 seconds until panic ****\n Call Trace:\n <TASK>\n schedule+0x483/0x1370\n schedule_preempt_disabled+0x15/0x30\n __mutex_lock_common+0x1fd/0x470\n __rtl8152_set_mac_address+0x80/0x1f0\n dev_set_mac_address+0x7f/0x150\n rtl8152_post_reset+0x72/0x150\n usb_reset_device+0x1d0/0x220\n rtl8152_resume+0x99/0xc0\n usb_resume_interface+0x3e/0xc0\n usb_resume_both+0x104/0x150\n usb_resume+0x22/0x110\n\nThe problem is that rtl8152 resume calls reset under\ntp->control mutex while reset basically re-enters rtl8152\nand attempts to acquire the same tp->control lock once\nagain.\n\nReset INACCESSIBLE device outside of tp->control mutex\nscope to avoid recursive mutex_lock() deadlock."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: usb: r8152: corregir interbloqueo de reinicio de reanudación\n\nrtl8152 puede desencadenar un reinicio del dispositivo durante el reinicio, lo que potencialmente puede resultar en un interbloqueo:\n\n** Tiempo de espera agotado del dispositivo DPM después de 10 segundos; 15 segundos hasta el pánico **\nRastreo de llamadas:\n\nschedule+0x483/0x1370\nschedule_preempt_disabled+0x15/0x30\n__mutex_lock_common+0x1fd/0x470\n__rtl8152_set_mac_address+0x80/0x1f0\ndev_set_mac_address+0x7f/0x150\nrtl8152_post_reset+0x72/0x150\nusb_reset_device+0x1d0/0x220\nrtl8152_resume+0x99/0xc0\nusb_resume_interface+0x3e/0xc0\nusb_resume_both+0x104/0x150\nusb_resume+0x22/0x110\n\nEl problema es que la reanudación de rtl8152 llama a reset bajo el mutex tp-&gt;control mientras que reset básicamente reingresa a rtl8152 e intenta adquirir el mismo bloqueo tp-&gt;control una vez más.\n\nReiniciar el dispositivo INACCESIBLE fuera del ámbito del mutex tp-&gt;control para evitar el interbloqueo recursivo de mutex_lock()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "4CF24CBE-557F-47D8-9FF4-305CAB4A0A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1b2efc593dca99d8e8e6f6d6c7ccd9a972679702",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/61c8091b7937f91f9bc0b7f6b578de270fe35dc7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6d06bc83a5ae8777a5f7a81c32dd75b8d9b2fe04",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23189",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.703",
      "lastModified" : "2026-03-18T17:18:58.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix NULL pointer dereference in ceph_mds_auth_match()\n\nThe CephFS kernel client has regression starting from 6.18-rc1.\nWe have issue in ceph_mds_auth_match() if fs_name == NULL:\n\n    const char fs_name = mdsc->fsc->mount_options->mds_namespace;\n    ...\n    if (auth->match.fs_name && strcmp(auth->match.fs_name, fs_name)) {\n            / fsname mismatch, try next one */\n            return 0;\n    }\n\nPatrick Donnelly suggested that: In summary, we should definitely start\ndecoding `fs_name` from the MDSMap and do strict authorizations checks\nagainst it. Note that the `-o mds_namespace=foo` should only be used for\nselecting the file system to mount and nothing else. It's possible\nno mds_namespace is specified but the kernel will mount the only\nfile system that exists which may have name \"foo\".\n\nThis patch reworks ceph_mdsmap_decode() and namespace_equals() with\nthe goal of supporting the suggested concept. Now struct ceph_mdsmap\ncontains m_fs_name field that receives copy of extracted FS name\nby ceph_extract_encoded_string(). For the case of \"old\" CephFS file\nsystems, it is used \"cephfs\" name.\n\n[ idryomov: replace redundant %*pE with %s in ceph_mdsmap_decode(),\n  get rid of a series of strlen() calls in ceph_namespace_match(),\n  drop changes to namespace_equals() body to avoid treating empty\n  mds_namespace as equal, drop changes to ceph_mdsc_handle_fsmap()\n  as namespace_equals() isn't an equivalent substitution there ]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nceph: soluciona la desreferencia de puntero NULL en ceph_mds_auth_match()\n\nEl cliente del kernel de CephFS tiene una regresión a partir de 6.18-rc1.\nTenemos un problema en ceph_mds_auth_match() si fs_name == NULL:\n\n    const char fs_name = mdsc-&gt;fsc-&gt;mount_options-&gt;mds_namespace;\n    ...\n    if (auth-&gt;match.fs_name &amp;&amp; strcmp(auth-&gt;match.fs_name, fs_name)) {\n            / el nombre de sistema de archivos no coincide, intentar el siguiente */\n            return 0;\n    }\n\nPatrick Donnelly sugirió que: En resumen, definitivamente deberíamos empezar a decodificar 'fs_name' del MDSMap y realizar controles de autorización estrictos contra él. Tenga en cuenta que '-o mds_namespace=foo' solo debe usarse para seleccionar el sistema de archivos a montar y nada más. Es posible que no se especifique ningún mds_namespace, pero el kernel montará el único sistema de archivos que existe, el cual puede tener el nombre 'foo'.\n\nEste parche reelabora ceph_mdsmap_decode() y namespace_equals() con el objetivo de apoyar el concepto sugerido. Ahora la estructura ceph_mdsmap contiene el campo m_fs_name que recibe una copia del nombre de FS extraído por ceph_extract_encoded_string(). Para el caso de sistemas de archivos CephFS 'antiguos', se utiliza el nombre 'cephfs'.\n\n[ idryomov: reemplazar el redundante %*pE con %s en ceph_mdsmap_decode(), eliminar una serie de llamadas a strlen() en ceph_namespace_match(), descartar cambios en el cuerpo de namespace_equals() para evitar tratar un mds_namespace vacío como igual, descartar cambios en ceph_mdsc_handle_fsmap() ya que namespace_equals() no es una sustitución equivalente allí ]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.58",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "ACE64C6D-2601-447E-8A2B-0D932A7C5C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.8",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "6B6161FA-39A8-4DBD-9D3F-130200A2D241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/57b36ffc8881dd455d875f85c105901974af2130",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7987cce375ac8ce98e170a77aa2399f2cf6eb99f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c6f8326f26bd20d648d9a55afd68148d1b6afe28",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23190",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.810",
      "lastModified" : "2026-03-18T17:11:17.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: amd: fix memory leak in acp3x pdm dma ops"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nASoC: amd: corrección de fuga de memoria en las operaciones DMA de pdm acp3x"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8",
            "versionEndExcluding" : "5.10.250",
            "matchCriteriaId" : "5948D876-1EEE-4A85-B904-850676F5806E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "D16F6370-B70F-471C-8363-3A17B0BB1DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0e0120214b5dcb0bf6b2171bb4e68e38968b2861",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/279cb9180510f7e13c3a4dfde8c16a8fbc7c5709",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6d33640404968fe9f14a1252b337362b62fff490",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7f67ba5413f98d93116a756e7f17cd2c1d6c2bd6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9f23800c7eed06cb8ccae8a225f5e3d421b0d4cc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c9c14d2abe4c5546fcd3a7347fadc4aad2b308d8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d7ead6512650447a4cd6db774a2379acb259650c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23191",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:56.917",
      "lastModified" : "2026-04-03T14:16:26.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: aloop: Fix racy access at PCM trigger\n\nThe PCM trigger callback of aloop driver tries to check the PCM state\nand stop the stream of the tied substream in the corresponding cable.\nSince both check and stop operations are performed outside the cable\nlock, this may result in UAF when a program attempts to trigger\nfrequently while opening/closing the tied stream, as spotted by\nfuzzers.\n\nFor addressing the UAF, this patch changes two things:\n- It covers the most of code in loopback_check_format() with\n  cable->lock spinlock, and add the proper NULL checks.  This avoids\n  already some racy accesses.\n- In addition, now we try to check the state of the capture PCM stream\n  that may be stopped in this function, which was the major pain point\n  leading to UAF."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nALSA: aloop: Corrige el acceso con condiciones de carrera en el disparador PCM\n\nLa función de devolución de llamada del disparador PCM del controlador aloop intenta verificar el estado de PCM y detener el flujo del subflujo vinculado en el cable correspondiente. Dado que tanto las operaciones de verificación como las de detención se realizan fuera del bloqueo del cable, esto puede resultar en UAF cuando un programa intenta disparar frecuentemente mientras abre/cierra el flujo vinculado, como detectaron los fuzzers.\n\nPara abordar el UAF, este parche cambia dos cosas:\n- Cubre la mayor parte del código en loopback_check_format() con el spinlock cable-&gt;lock, y añade las comprobaciones de NULL adecuadas. Esto ya evita algunos accesos con condiciones de carrera.\n- Además, ahora intentamos verificar el estado del flujo PCM de captura que puede ser detenido en esta función, lo cual era el principal punto problemático que conducía al UAF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.37",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "57FD0C99-9777-4D7D-8B2A-229D38298229"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/5727ccf9d19ca414cb76d9b647883822e2789c2e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/826af7fa62e347464b1b4e0ba2fe19a92438084f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bad15420050db1803767e58756114800cce91ea4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23192",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.020",
      "lastModified" : "2026-04-03T14:16:26.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nlinkwatch: use __dev_put() in callers to prevent UAF\n\nAfter linkwatch_do_dev() calls __dev_put() to release the linkwatch\nreference, the device refcount may drop to 1. At this point,\nnetdev_run_todo() can proceed (since linkwatch_sync_dev() sees an\nempty list and returns without blocking), wait for the refcount to\nbecome 1 via netdev_wait_allrefs_any(), and then free the device\nvia kobject_put().\n\nThis creates a use-after-free when __linkwatch_run_queue() tries to\ncall netdev_unlock_ops() on the already-freed device.\n\nNote that adding netdev_lock_ops()/netdev_unlock_ops() pair in\nnetdev_run_todo() before kobject_put() would not work, because\nnetdev_lock_ops() is conditional - it only locks when\nnetdev_need_ops_lock() returns true. If the device doesn't require\nops_lock, linkwatch won't hold any lock, and netdev_run_todo()\nacquiring the lock won't provide synchronization.\n\nFix this by moving __dev_put() from linkwatch_do_dev() to its\ncallers. The device reference logically pairs with de-listing the\ndevice, so it's reasonable for the caller that did the de-listing\nto release it. This allows placing __dev_put() after all device\naccesses are complete, preventing UAF.\n\nThe bug can be reproduced by adding mdelay(2000) after\nlinkwatch_do_dev() in __linkwatch_run_queue(), then running:\n\n  ip tuntap add mode tun name tun_test\n  ip link set tun_test up\n  ip link set tun_test carrier off\n  ip link set tun_test carrier on\n  sleep 0.5\n  ip tuntap del mode tun name tun_test\n\nKASAN report:\n\n ==================================================================\n BUG: KASAN: use-after-free in netdev_need_ops_lock include/net/netdev_lock.h:33 [inline]\n BUG: KASAN: use-after-free in netdev_unlock_ops include/net/netdev_lock.h:47 [inline]\n BUG: KASAN: use-after-free in __linkwatch_run_queue+0x865/0x8a0 net/core/link_watch.c:245\n Read of size 8 at addr ffff88804de5c008 by task kworker/u32:10/8123\n\n CPU: 0 UID: 0 PID: 8123 Comm: kworker/u32:10 Not tainted syzkaller #0 PREEMPT(full)\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n Workqueue: events_unbound linkwatch_event\n Call Trace:\n  <TASK>\n  __dump_stack lib/dump_stack.c:94 [inline]\n  dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120\n  print_address_description mm/kasan/report.c:378 [inline]\n  print_report+0x156/0x4c9 mm/kasan/report.c:482\n  kasan_report+0xdf/0x1a0 mm/kasan/report.c:595\n  netdev_need_ops_lock include/net/netdev_lock.h:33 [inline]\n  netdev_unlock_ops include/net/netdev_lock.h:47 [inline]\n  __linkwatch_run_queue+0x865/0x8a0 net/core/link_watch.c:245\n  linkwatch_event+0x8f/0xc0 net/core/link_watch.c:304\n  process_one_work+0x9c2/0x1840 kernel/workqueue.c:3257\n  process_scheduled_works kernel/workqueue.c:3340 [inline]\n  worker_thread+0x5da/0xe40 kernel/workqueue.c:3421\n  kthread+0x3b3/0x730 kernel/kthread.c:463\n  ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n  </TASK>\n =================================================================="
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nlinkwatch: usar __dev_put() en las funciones que llaman para prevenir UAF\n\nDespués de que linkwatch_do_dev() llama a __dev_put() para liberar la referencia de linkwatch, el contador de referencias del dispositivo puede bajar a 1. En este punto, netdev_run_todo() puede continuar (ya que linkwatch_sync_dev() ve una lista vacía y regresa sin bloquear), esperar a que el contador de referencias llegue a 1 a través de netdev_wait_allrefs_any(), y luego liberar el dispositivo a través de kobject_put().\n\nEsto crea un uso después de liberación cuando __linkwatch_run_queue() intenta llamar a netdev_unlock_ops() en el dispositivo ya liberado.\n\nTenga en cuenta que añadir el par netdev_lock_ops()/netdev_unlock_ops() en netdev_run_todo() antes de kobject_put() no funcionaría, porque netdev_lock_ops() es condicional - solo bloquea cuando netdev_need_ops_lock() devuelve verdadero. Si el dispositivo no requiere ops_lock, linkwatch no mantendrá ningún bloqueo, y netdev_run_todo() al adquirir el bloqueo no proporcionará sincronización.\n\nSolucione esto moviendo __dev_put() de linkwatch_do_dev() a sus funciones que llaman. La referencia del dispositivo se empareja lógicamente con la eliminación del dispositivo de la lista, por lo que es razonable que la función que realizó la eliminación de la lista lo libere. Esto permite colocar __dev_put() después de que todos los accesos al dispositivo estén completos, previniendo UAF.\n\nEl error puede reproducirse añadiendo mdelay(2000) después de linkwatch_do_dev() en __linkwatch_run_queue(), luego ejecutando:\n\n  ip tuntap add mode tun name tun_test\n  ip link set tun_test up\n  ip link set tun_test carrier off\n  ip link set tun_test carrier on\n  sleep 0.5\n  ip tuntap del mode tun name tun_test\n\nInforme KASAN:\n\n ==================================================================\n BUG: KASAN: uso después de liberación in netdev_need_ops_lock include/net/netdev_lock.h:33 [inline]\n BUG: KASAN: uso después de liberación in netdev_unlock_ops include/net/netdev_lock.h:47 [inline]\n BUG: KASAN: uso después de liberación in __linkwatch_run_queue+0x865/0x8a0 net/core/link_watch.c:245\n Read of size 8 at addr ffff88804de5c008 by task kworker/u32:10/8123\n\n CPU: 0 UID: 0 PID: 8123 Comm: kworker/u32:10 Not tainted syzkaller #0 PREEMPT(full)\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n Workqueue: events_unbound linkwatch_event\n Call Trace:\n  \n  __dump_stack lib/dump_stack.c:94 [inline]\n  dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120\n  print_address_description mm/kasan/report.c:378 [inline]\n  print_report+0x156/0x4c9 mm/kasan/report.c:482\n  kasan_report+0xdf/0x1a0 mm/kasan/report.c:595\n  netdev_need_ops_lock include/net/netdev_lock.h:33 [inline]\n  netdev_unlock_ops include/net/netdev_lock.h:47 [inline]\n  __linkwatch_run_queue+0x865/0x8a0 net/core/link_watch.c:245\n  linkwatch_event+0x8f/0xc0 net/core/link_watch.c:304\n  process_one_work+0x9c2/0x1840 kernel/workqueue.c:3257\n  process_scheduled_works kernel/workqueue.c:3340 [inline]\n  worker_thread+0x5da/0xe40 kernel/workqueue.c:3421\n  kthread+0x3b3/0x730 kernel/kthread.c:463\n  ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158\n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n  \n =================================================================="
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15.1",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "DB827D86-B9E2-42C5-80F8-48024FAFEF2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A1ECC65A-EE37-4479-8E99-4BB68A22A31F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4C9D071F-B28E-46EC-AC61-22B913390211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "13FC0DDE-E513-465E-9E81-515702D49B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D240580-3048-49B2-9E27-F115A9DF8224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "90320558-E553-4EF5-8A0B-0F5D20113BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "C300BA32-5854-4B59-A00A-18A402F291D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2718ae6af7445ba2ee0abf6365ca43a9a3b16aeb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/83b67cc9be9223183caf91826d9c194d7fb128fa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23193",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.123",
      "lastModified" : "2026-04-03T14:16:26.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()\n\nIn iscsit_dec_session_usage_count(), the function calls complete() while\nholding the sess->session_usage_lock. Similar to the connection usage count\nlogic, the waiter signaled by complete() (e.g., in the session release\npath) may wake up and free the iscsit_session structure immediately.\n\nThis creates a race condition where the current thread may attempt to\nexecute spin_unlock_bh() on a session structure that has already been\ndeallocated, resulting in a KASAN slab-use-after-free.\n\nTo resolve this, release the session_usage_lock before calling complete()\nto ensure all dereferences of the sess pointer are finished before the\nwaiter is allowed to proceed with deallocation."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nscsi: target: iscsi: Corrección de uso después de liberación en iscsit_dec_session_usage_count()\n\nEn iscsit_dec_session_usage_count(), la función llama a complete() mientras mantiene el sess-&gt;session_usage_lock. Similar a la lógica de conteo de uso de la conexión, el hilo en espera señalado por complete() (por ejemplo, en la ruta de liberación de la sesión) puede despertar y liberar la estructura iscsit_session inmediatamente.\n\nEsto crea una condición de carrera donde el hilo actual puede intentar ejecutar spin_unlock_bh() en una estructura de sesión que ya ha sido desasignada, lo que resulta en un KASAN slab-uso después de liberación.\n\nPara resolver esto, liberar el session_usage_lock antes de llamar a complete() para asegurar que todas las desreferencias del puntero sess hayan terminado antes de que se permita al hilo en espera proceder con la desasignación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "5.10.250",
            "matchCriteriaId" : "2A068B57-89F0-436B-8831-F30BCBF37F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "D16F6370-B70F-471C-8363-3A17B0BB1DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/11ebafffce31efc6abeb28c509017976fc49f1ca",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2b64015550a13bcc72910be0565548d9a754d46d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/41b86a9ec037bd3435d68dd3692f0891a207e7e7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4530f4e4d0e6a207110b0ffed0c911bca43531a4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/84dc6037390b8607c5551047d3970336cb51ba9a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d8dbdc146e9e9a976931b78715be2e91299049f9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fd8b0900173307039d3a84644c2fee041a7ed4fb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23194",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.233",
      "lastModified" : "2026-03-19T17:47:30.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nrust_binder: correctly handle FDA objects of length zero\n\nFix a bug where an empty FDA (fd array) object with 0 fds would cause an\nout-of-bounds error. The previous implementation used `skip == 0` to\nmean \"this is a pointer fixup\", but 0 is also the correct skip length\nfor an empty FDA. If the FDA is at the end of the buffer, then this\nresults in an attempt to write 8-bytes out of bounds. This is caught and\nresults in an EINVAL error being returned to userspace.\n\nThe pattern of using `skip == 0` as a special value originates from the\nC-implementation of Binder. As part of fixing this bug, this pattern is\nreplaced with a Rust enum.\n\nI considered the alternate option of not pushing a fixup when the length\nis zero, but I think it's cleaner to just get rid of the zero-is-special\nstuff.\n\nThe root cause of this bug was diagnosed by Gemini CLI on first try. I\nused the following prompt:\n\n> There appears to be a bug in @drivers/android/binder/thread.rs where\n> the Fixups oob bug is triggered with 316 304 316 324. This implies\n> that we somehow ended up with a fixup where buffer A has a pointer to\n> buffer B, but the pointer is located at an index in buffer A that is\n> out of bounds. Please investigate the code to find the bug. You may\n> compare with @drivers/android/binder.c that implements this correctly."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nrust_binder: manejar correctamente los objetos FDA de longitud cero\n\nSe corrige un error donde un objeto FDA (matriz de descriptores de archivo) vacío con 0 descriptores de archivo causaría un error de fuera de límites. La implementación anterior utilizaba 'skip == 0' para significar 'esto es una corrección de puntero', pero 0 es también la longitud de salto correcta para un FDA vacío. Si el FDA está al final del búfer, entonces esto resulta en un intento de escribir 8 bytes fuera de los límites. Esto es detectado y resulta en que se devuelve un error EINVAL al espacio de usuario.\n\nEl patrón de usar 'skip == 0' como un valor especial se origina en la implementación en C de Binder. Como parte de la corrección de este error, este patrón es reemplazado con un enum de Rust.\n\nConsideré la opción alternativa de no aplicar una corrección cuando la longitud es cero, pero creo que es más limpio simplemente eliminar lo de \"cero es especial\".\n\nLa causa raíz de este error fue diagnosticada por Gemini CLI al primer intento. Utilicé el siguiente prompt:\n\n&gt; Parece haber un error en @drivers/android/binder/thread.rs donde el error de fuera de límites (oob) de Fixups se activa con 316 304 316 324. Esto implica que de alguna manera terminamos con una corrección donde el búfer A tiene un puntero al búfer B, pero el puntero está ubicado en un índice en el búfer A que está fuera de los límites. Por favor, investigue el código para encontrar el error. Puede comparar con @drivers/android/binder.c que implementa esto correctamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "32F6354D-FB80-4DEC-B5BD-29DA22C31C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/598fe3ff32e43918ed8a062f55432b3d23e6340c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8f589c9c3be539d6c2b393c82940c3783831082f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23195",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.337",
      "lastModified" : "2026-04-03T14:16:26.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/dmem: avoid pool UAF\n\nAn UAF issue was observed:\n\nBUG: KASAN: slab-use-after-free in page_counter_uncharge+0x65/0x150\nWrite of size 8 at addr ffff888106715440 by task insmod/527\n\nCPU: 4 UID: 0 PID: 527 Comm: insmod    6.19.0-rc7-next-20260129+ #11\nTainted: [O]=OOT_MODULE\nCall Trace:\n<TASK>\ndump_stack_lvl+0x82/0xd0\nkasan_report+0xca/0x100\nkasan_check_range+0x39/0x1c0\npage_counter_uncharge+0x65/0x150\ndmem_cgroup_uncharge+0x1f/0x260\n\nAllocated by task 527:\n\nFreed by task 0:\n\nThe buggy address belongs to the object at ffff888106715400\nwhich belongs to the cache kmalloc-512 of size 512\nThe buggy address is located 64 bytes inside of\nfreed 512-byte region [ffff888106715400, ffff888106715600)\n\nThe buggy address belongs to the physical page:\n\nMemory state around the buggy address:\nffff888106715300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\nffff888106715380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n>ffff888106715400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\t\t\t\t     ^\nffff888106715480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\nffff888106715500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\nThe issue occurs because a pool can still be held by a caller after its\nassociated memory region is unregistered. The current implementation frees\nthe pool even if users still hold references to it (e.g., before uncharge\noperations complete).\n\nThis patch adds a reference counter to each pool, ensuring that a pool is\nonly freed when its reference count drops to zero."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncgroup/dmem: evitar UAF de pool\n\nSe observó un problema de UAF:\n\nERROR: KASAN: slab-uso después de liberación en page_counter_uncharge+0x65/0x150\nEscritura de tamaño 8 en addr ffff888106715440 por la tarea insmod/527\n\nCPU: 4 UID: 0 PID: 527 Comm: insmod    6.19.0-rc7-next-20260129+ #11\nTainted: [O]=OOT_MODULE\nTraza de Llamada:\n\ndump_stack_lvl+0x82/0xd0\nkasan_report+0xca/0x100\nkasan_check_range+0x39/0x1c0\npage_counter_uncharge+0x65/0x150\ndmem_cgroup_uncharge+0x1f/0x260\n\nAsignado por la tarea 527:\n\nLiberado por la tarea 0:\n\nLa dirección errónea pertenece al objeto en ffff888106715400\nque pertenece a la caché kmalloc-512 de tamaño 512\nLa dirección errónea está ubicada 64 bytes dentro de\nregión liberada de 512 bytes [ffff888106715400, ffff888106715600)\n\nLa dirección errónea pertenece a la página física:\n\nEstado de la memoria alrededor de la dirección errónea:\nffff888106715300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\nffff888106715380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n&gt;ffff888106715400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\t\t\t\t     ^\nffff888106715480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\nffff888106715500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\nEl problema ocurre porque un pool aún puede ser retenido por un llamador después de que su región de memoria asociada es desregistrada. La implementación actual libera el pool incluso si los usuarios aún mantienen referencias a él (p. ej., antes de que las operaciones de descarga se completen).\n\nEste parche añade un contador de referencias a cada pool, asegurando que un pool solo se libera cuando su contador de referencias llega a cero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.14",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "4A68C73F-9B63-4EBC-9C52-F9679DAE3D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/99a2ef500906138ba58093b9893972a5c303c734",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d3081353acaa6a638dcf75726066ea556a2de8d5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23196",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.440",
      "lastModified" : "2026-03-19T17:45:26.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer\n\nAdd DMA buffer readiness check before reading DMA buffer to avoid\nunexpected NULL pointer accessing."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nHID: Intel-thc-hid: Intel-thc: Añadir comprobación de seguridad para la lectura del búfer DMA\n\nAñadir comprobación de disponibilidad del búfer DMA antes de leer el búfer DMA para evitar el acceso inesperado a punteros NULL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.14",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "4A68C73F-9B63-4EBC-9C52-F9679DAE3D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1e84a807c98a71f767fd1f609637bc5944f916cb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a9a917998d172ec117f9e9de1919174153c0ace4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23197",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.540",
      "lastModified" : "2026-03-19T17:45:01.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: imx: preserve error state in block data length handler\n\nWhen a block read returns an invalid length, zero or >I2C_SMBUS_BLOCK_MAX,\nthe length handler sets the state to IMX_I2C_STATE_FAILED. However,\ni2c_imx_master_isr() unconditionally overwrites this with\nIMX_I2C_STATE_READ_CONTINUE, causing an endless read loop that overruns\nbuffers and crashes the system.\n\nGuard the state transition to preserve error states set by the length\nhandler."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ni2c: imx: preservar el estado de error en el manejador de longitud de datos de bloque\n\nCuando una lectura de bloque devuelve una longitud no válida, cero o &gt;I2C_SMBUS_BLOCK_MAX, el manejador de longitud establece el estado a IMX_I2C_STATE_FAILED. Sin embargo, i2c_imx_master_isr() sobrescribe incondicionalmente esto con IMX_I2C_STATE_READ_CONTINUE, causando un bucle de lectura infinito que desborda los búferes y bloquea el sistema.\n\nProteger la transición de estado para preservar los estados de error establecidos por el manejador de longitud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3f9b508b3eecc00a243edf320bd83834d6a9b482",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b126097b0327437048bd045a0e4d273dea2910dd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23198",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.640",
      "lastModified" : "2026-04-03T14:16:27.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Don't clobber irqfd routing type when deassigning irqfd\n\nWhen deassigning a KVM_IRQFD, don't clobber the irqfd's copy of the IRQ's\nrouting entry as doing so breaks kvm_arch_irq_bypass_del_producer() on x86\nand arm64, which explicitly look for KVM_IRQ_ROUTING_MSI.  Instead, to\nhandle a concurrent routing update, verify that the irqfd is still active\nbefore consuming the routing information.  As evidenced by the x86 and\narm64 bugs, and another bug in kvm_arch_update_irqfd_routing() (see below),\nclobbering the entry type without notifying arch code is surprising and\nerror prone.\n\nAs a bonus, checking that the irqfd is active provides a convenient\nlocation for documenting _why_ KVM must not consume the routing entry for\nan irqfd that is in the process of being deassigned: once the irqfd is\ndeleted from the list (which happens *before* the eventfd is detached), it\nwill no longer receive updates via kvm_irq_routing_update(), and so KVM\ncould deliver an event using stale routing information (relative to\nKVM_SET_GSI_ROUTING returning to userspace).\n\nAs an even better bonus, explicitly checking for the irqfd being active\nfixes a similar bug to the one the clobbering is trying to prevent: if an\nirqfd is deactivated, and then its routing is changed,\nkvm_irq_routing_update() won't invoke kvm_arch_update_irqfd_routing()\n(because the irqfd isn't in the list).  And so if the irqfd is in bypass\nmode, IRQs will continue to be posted using the old routing information.\n\nAs for kvm_arch_irq_bypass_del_producer(), clobbering the routing type\nresults in KVM incorrectly keeping the IRQ in bypass mode, which is\nespecially problematic on AMD as KVM tracks IRQs that are being posted to\na vCPU in a list whose lifetime is tied to the irqfd.\n\nWithout the help of KASAN to detect use-after-free, the most common\nsympton on AMD is a NULL pointer deref in amd_iommu_update_ga() due to\nthe memory for irqfd structure being re-allocated and zeroed, resulting\nin irqfd->irq_bypass_data being NULL when read by\navic_update_iommu_vcpu_affinity():\n\n  BUG: kernel NULL pointer dereference, address: 0000000000000018\n  #PF: supervisor read access in kernel mode\n  #PF: error_code(0x0000) - not-present page\n  PGD 40cf2b9067 P4D 40cf2b9067 PUD 408362a067 PMD 0\n  Oops: Oops: 0000 [#1] SMP\n  CPU: 6 UID: 0 PID: 40383 Comm: vfio_irq_test\n  Tainted: G     U  W  O        6.19.0-smp--5dddc257e6b2-irqfd #31 NONE\n  Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE\n  Hardware name: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 34.78.2-0 09/05/2025\n  RIP: 0010:amd_iommu_update_ga+0x19/0xe0\n  Call Trace:\n   <TASK>\n   avic_update_iommu_vcpu_affinity+0x3d/0x90 [kvm_amd]\n   __avic_vcpu_load+0xf4/0x130 [kvm_amd]\n   kvm_arch_vcpu_load+0x89/0x210 [kvm]\n   vcpu_load+0x30/0x40 [kvm]\n   kvm_arch_vcpu_ioctl_run+0x45/0x620 [kvm]\n   kvm_vcpu_ioctl+0x571/0x6a0 [kvm]\n   __se_sys_ioctl+0x6d/0xb0\n   do_syscall_64+0x6f/0x9d0\n   entry_SYSCALL_64_after_hwframe+0x4b/0x53\n  RIP: 0033:0x46893b\n    </TASK>\n  ---[ end trace 0000000000000000 ]---\n\nIf AVIC is inhibited when the irfd is deassigned, the bug will manifest as\nlist corruption, e.g. on the next irqfd assignment.\n\n  list_add corruption. next->prev should be prev (ffff8d474d5cd588),\n                       but was 0000000000000000. (next=ffff8d8658f86530).\n  ------------[ cut here ]------------\n  kernel BUG at lib/list_debug.c:31!\n  Oops: invalid opcode: 0000 [#1] SMP\n  CPU: 128 UID: 0 PID: 80818 Comm: vfio_irq_test\n  Tainted: G     U  W  O        6.19.0-smp--f19dc4d680ba-irqfd #28 NONE\n  Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE\n  Hardware name: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 34.78.2-0 09/05/2025\n  RIP: 0010:__list_add_valid_or_report+0x97/0xc0\n  Call Trace:\n   <TASK>\n   avic_pi_update_irte+0x28e/0x2b0 [kvm_amd]\n   kvm_pi_update_irte+0xbf/0x190 [kvm]\n   kvm_arch_irq_bypass_add_producer+0x72/0x90 [kvm]\n   irq_bypass_register_consumer+0xcd/0x170 [irqbypa\n---truncated---"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:  KVM: No sobrescribir el tipo de enrutamiento de irqfd al desasignar irqfd  Al desasignar un KVM_IRQFD, no sobrescribir la copia del irqfd de la entrada de enrutamiento de la IRQ, ya que hacerlo rompe kvm_arch_irq_bypass_del_producer() en x86 y arm64, que buscan explícitamente KVM_IRQ_ROUTING_MSI. En su lugar, para manejar una actualización de enrutamiento concurrente, verificar que el irqfd sigue activo antes de consumir la información de enrutamiento. Como lo demuestran los errores de x86 y arm64, y otro error en kvm_arch_update_irqfd_routing() (ver abajo), sobrescribir el tipo de entrada sin notificar al código de arquitectura es sorprendente y propenso a errores.  Como ventaja adicional, verificar que el irqfd está activo proporciona una ubicación conveniente para documentar _por qué_ KVM no debe consumir la entrada de enrutamiento para un irqfd que está en proceso de ser desasignado: una vez que el irqfd se elimina de la lista (lo que ocurre *antes* de que el eventfd se desvincule), ya no recibirá actualizaciones a través de kvm_irq_routing_update(), y así KVM podría entregar un evento utilizando información de enrutamiento obsoleta (en relación con KVM_SET_GSI_ROUTING que regresa al espacio de usuario).  Como una ventaja aún mejor, verificar explícitamente que el irqfd está activo corrige un error similar al que el sobrescrito intenta prevenir: si un irqfd se desactiva y luego se cambia su enrutamiento, kvm_irq_routing_update() no invocará a kvm_arch_update_irqfd_routing() (porque el irqfd no está en la lista). Y así, si el irqfd está en modo de bypass, las IRQ seguirán siendo publicadas utilizando la información de enrutamiento antigua.  En cuanto a kvm_arch_irq_bypass_del_producer(), sobrescribir el tipo de enrutamiento resulta en que KVM mantiene incorrectamente la IRQ en modo de bypass, lo cual es especialmente problemático en AMD, ya que KVM rastrea las IRQ que se están publicando a una vCPU en una lista cuya vida útil está ligada al irqfd.  Sin la ayuda de KASAN para detectar el uso después de liberación, el síntoma más común en AMD es una desreferencia de puntero NULL en amd_iommu_update_ga() debido a que la memoria para la estructura irqfd se reasigna y se pone a cero, lo que resulta en que irqfd-&gt;irq_bypass_data sea NULL cuando es leído por avic_update_iommu_vcpu_affinity():    BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000018   #PF: acceso de lectura de supervisor en modo kernel   #PF: error_code(0x0000) - página no presente   PGD 40cf2b9067 P4D 40cf2b9067 PUD 408362a067 PMD 0   Oops: Oops: 0000 [#1] SMP   CPU: 6 UID: 0 PID: 40383 Comm: vfio_irq_test   Tainted: G     U  W  O        6.19.0-smp--5dddc257e6b2-irqfd #31 NONE   Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE   Nombre de hardware: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 34.78.2-0 09/05/2025   RIP: 0010:amd_iommu_update_ga+0x19/0xe0   Traza de Llamada:        avic_update_iommu_vcpu_affinity+0x3d/0x90 [kvm_amd]    __avic_vcpu_load+0xf4/0x130 [kvm_amd]    kvm_arch_vcpu_load+0x89/0x210 [kvm]    vcpu_load+0x30/0x40 [kvm]    kvm_arch_vcpu_ioctl_run+0x45/0x620 [kvm]    kvm_vcpu_ioctl+0x571/0x6a0 [kvm]    __se_sys_ioctl+0x6d/0xb0    do_syscall_64+0x6f/0x9d0    entry_SYSCALL_64_after_hwframe+0x4b/0x53   RIP: 0033:0x46893b        ---[ fin de la traza 0000000000000000 ]---  Si AVIC se inhibe cuando el irqfd es desasignado, el error se manifestará como corrupción de lista, por ejemplo, en la siguiente asignación de irqfd.    Corrupción de list_add. next-&gt;prev debería ser prev (ffff8d474d5cd588),                        pero era 0000000000000000. (next=ffff8d8658f86530).   ------------[ cortar aquí ]------------   BUG del kernel en lib/list_debug.c:31!   Oops: código de operación inválido: 0000 [#1] SMP   CPU: 128 UID: 0 PID: 80818 Comm: vfio_irq_test   Tainted: G     U  W  O        6.19.0-smp--f19dc4d680ba-irqfd #28 NONE---truncado---"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4",
            "versionEndExcluding" : "5.10.250",
            "matchCriteriaId" : "64C6C107-F69A-4A05-B55A-A1B035E4F348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "D16F6370-B70F-471C-8363-3A17B0BB1DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2284bc168b148a17b5ca3b37b3d95c411f18a08d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4385b2f2843549bfb932e0dcf76bf4b065543a3c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6d14ba1e144e796b5fc81044f08cfba9024ca195",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/959a063e7f12524bc1871ad1f519787967bbcd45",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b4d37cdb77a0015f51fee083598fa227cc07aaf1",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b61f9b2fcf181451d0a319889478cc53c001123e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ff48c9312d042bfbe826ca675e98acc6c623211c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23199",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.743",
      "lastModified" : "2026-03-19T16:41:57.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nprocfs: avoid fetching build ID while holding VMA lock\n\nFix PROCMAP_QUERY to fetch optional build ID only after dropping mmap_lock\nor per-VMA lock, whichever was used to lock VMA under question, to avoid\ndeadlock reported by syzbot:\n\n -> #1 (&mm->mmap_lock){++++}-{4:4}:\n        __might_fault+0xed/0x170\n        _copy_to_iter+0x118/0x1720\n        copy_page_to_iter+0x12d/0x1e0\n        filemap_read+0x720/0x10a0\n        blkdev_read_iter+0x2b5/0x4e0\n        vfs_read+0x7f4/0xae0\n        ksys_read+0x12a/0x250\n        do_syscall_64+0xcb/0xf80\n        entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n -> #0 (&sb->s_type->i_mutex_key#8){++++}-{4:4}:\n        __lock_acquire+0x1509/0x26d0\n        lock_acquire+0x185/0x340\n        down_read+0x98/0x490\n        blkdev_read_iter+0x2a7/0x4e0\n        __kernel_read+0x39a/0xa90\n        freader_fetch+0x1d5/0xa80\n        __build_id_parse.isra.0+0xea/0x6a0\n        do_procmap_query+0xd75/0x1050\n        procfs_procmap_ioctl+0x7a/0xb0\n        __x64_sys_ioctl+0x18e/0x210\n        do_syscall_64+0xcb/0xf80\n        entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n other info that might help us debug this:\n\n  Possible unsafe locking scenario:\n\n        CPU0                    CPU1\n        ----                    ----\n   rlock(&mm->mmap_lock);\n                                lock(&sb->s_type->i_mutex_key#8);\n                                lock(&mm->mmap_lock);\n   rlock(&sb->s_type->i_mutex_key#8);\n\n  *** DEADLOCK ***\n\nThis seems to be exacerbated (as we haven't seen these syzbot reports\nbefore that) by the recent:\n\n\t777a8560fd29 (\"lib/buildid: use __kernel_read() for sleepable context\")\n\nTo make this safe, we need to grab file refcount while VMA is still locked, but\nother than that everything is pretty straightforward. Internal build_id_parse()\nAPI assumes VMA is passed, but it only needs the underlying file reference, so\njust add another variant build_id_parse_file() that expects file passed\ndirectly.\n\n[akpm@linux-foundation.org: fix up kerneldoc]"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nprocfs: evitar la obtención del ID de compilación mientras se mantiene el bloqueo VMA\n\nCorregir PROCMAP_QUERY para obtener el ID de compilación opcional solo después de liberar mmap_lock o el bloqueo por VMA, el que se haya utilizado para bloquear el VMA en cuestión, para evitar el interbloqueo informado por syzbot:\n\n -&gt; #1 (&amp;mm-&gt;mmap_lock){++++}-{4:4}:\n        __might_fault+0xed/0x170\n        _copy_to_iter+0x118/0x1720\n        copy_page_to_iter+0x12d/0x1e0\n        filemap_read+0x720/0x10a0\n        blkdev_read_iter+0x2b5/0x4e0\n        vfs_read+0x7f4/0xae0\n        ksys_read+0x12a/0x250\n        do_syscall_64+0xcb/0xf80\n        entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n -&gt; #0 (&amp;sb-&gt;s_type-&gt;i_mutex_key#8){++++}-{4:4}:\n        __lock_acquire+0x1509/0x26d0\n        lock_acquire+0x185/0x340\n        down_read+0x98/0x490\n        blkdev_read_iter+0x2a7/0x4e0\n        __kernel_read+0x39a/0xa90\n        freader_fetch+0x1d5/0xa80\n        __build_id_parse.isra.0+0xea/0x6a0\n        do_procmap_query+0xd75/0x1050\n        procfs_procmap_ioctl+0x7a/0xb0\n        __x64_sys_ioctl+0x18e/0x210\n        do_syscall_64+0xcb/0xf80\n        entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n otra información que podría ayudarnos a depurar esto:\n\n  Posible escenario de bloqueo inseguro:\n\n        CPU0                    CPU1\n        ----                    ----\n   rlock(&amp;mm-&gt;mmap_lock);\n                                lock(&amp;sb-&gt;s_type-&gt;i_mutex_key#8);\n                                lock(&amp;mm-&gt;mmap_lock);\n   rlock(&amp;sb-&gt;s_type-&gt;i_mutex_key#8);\n\n  * INTERBLOQUEO *\n\nEsto parece exacerbarse (ya que no habíamos visto estos informes de syzbot antes de eso) por el reciente:\n\n\t777a8560fd29 (\"lib/buildid: use __kernel_read() for sleepable context\")\n\nPara que esto sea seguro, necesitamos tomar el recuento de referencias del archivo mientras el VMA aún está bloqueado, pero aparte de eso, todo es bastante sencillo. La API interna build_id_parse() asume que se pasa el VMA, pero solo necesita la referencia de archivo subyacente, así que solo hay que añadir otra variante build_id_parse_file() que espera que el archivo se pase directamente.\n\n[akpm@linux-foundation.org: corregir kerneldoc]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "4CF24CBE-557F-47D8-9FF4-305CAB4A0A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/b5cbacd7f86f4f62b8813688c8e73be94e8e1951",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b9b97e6aeb534315f9646b2090d1a5024c6a4e82",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cbc03ce3e6ce7e21214c3f02218213574c1a2d08",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23200",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.847",
      "lastModified" : "2026-03-19T16:41:38.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF\n\nsyzbot reported a kernel BUG in fib6_add_rt2node() when adding an IPv6\nroute. [0]\n\nCommit f72514b3c569 (\"ipv6: clear RA flags when adding a static\nroute\") introduced logic to clear RTF_ADDRCONF from existing routes\nwhen a static route with the same nexthop is added. However, this\ncauses a problem when the existing route has a gateway.\n\nWhen RTF_ADDRCONF is cleared from a route that has a gateway, that\nroute becomes eligible for ECMP, i.e. rt6_qualify_for_ecmp() returns\ntrue. The issue is that this route was never added to the\nfib6_siblings list.\n\nThis leads to a mismatch between the following counts:\n\n- The sibling count computed by iterating fib6_next chain, which\n  includes the newly ECMP-eligible route\n\n- The actual siblings in fib6_siblings list, which does not include\n  that route\n\nWhen a subsequent ECMP route is added, fib6_add_rt2node() hits\nBUG_ON(sibling->fib6_nsiblings != rt->fib6_nsiblings) because the\ncounts don't match.\n\nFix this by only clearing RTF_ADDRCONF when the existing route does\nnot have a gateway. Routes without a gateway cannot qualify for ECMP\nanyway (rt6_qualify_for_ecmp() requires fib_nh_gw_family), so clearing\nRTF_ADDRCONF on them is safe and matches the original intent of the\ncommit.\n\n[0]:\nkernel BUG at net/ipv6/ip6_fib.c:1217!\nOops: invalid opcode: 0000 [#1] SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6010 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nRIP: 0010:fib6_add_rt2node+0x3433/0x3470 net/ipv6/ip6_fib.c:1217\n[...]\nCall Trace:\n <TASK>\n fib6_add+0x8da/0x18a0 net/ipv6/ip6_fib.c:1532\n __ip6_ins_rt net/ipv6/route.c:1351 [inline]\n ip6_route_add+0xde/0x1b0 net/ipv6/route.c:3946\n ipv6_route_ioctl+0x35c/0x480 net/ipv6/route.c:4571\n inet6_ioctl+0x219/0x280 net/ipv6/af_inet6.c:577\n sock_do_ioctl+0xdc/0x300 net/socket.c:1245\n sock_ioctl+0x576/0x790 net/socket.c:1366\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nipv6: Solucionar desajuste en el recuento de hermanos ECMP al borrar RTF_ADDRCONF\n\nsyzbot informó un BUG del kernel en fib6_add_rt2node() al añadir una ruta IPv6. [0]\n\nEl commit f72514b3c569 ('ipv6: borrar flags RA al añadir una ruta estática') introdujo lógica para borrar RTF_ADDRCONF de rutas existentes cuando se añade una ruta estática con el mismo nexthop. Sin embargo, esto causa un problema cuando la ruta existente tiene una puerta de enlace.\n\nCuando se borra RTF_ADDRCONF de una ruta que tiene una puerta de enlace, esa ruta se vuelve elegible para ECMP, es decir, rt6_qualify_for_ecmp() devuelve verdadero. El problema es que esta ruta nunca fue añadida a la lista fib6_siblings.\n\nEsto lleva a un desajuste entre los siguientes recuentos:\n\n- El recuento de hermanos calculado al iterar la cadena fib6_next, que incluye la ruta recién elegible para ECMP\n\n- Los hermanos reales en la lista fib6_siblings, que no incluye esa ruta\n\nCuando se añade una ruta ECMP subsiguiente, fib6_add_rt2node() encuentra BUG_ON(sibling-&gt;fib6_nsiblings != rt-&gt;fib6_nsiblings) porque los recuentos no coinciden.\n\nSolucione esto borrando RTF_ADDRCONF solo cuando la ruta existente no tiene una puerta de enlace. Las rutas sin una puerta de enlace no pueden calificar para ECMP de todos modos (rt6_qualify_for_ecmp() requiere fib_nh_gw_family), por lo tanto, borrar RTF_ADDRCONF en ellas es seguro y coincide con la intención original del commit.\n\n[0]:\nBUG del kernel en net/ipv6/ip6_fib.c:1217!\nOops: código de operación inválido: 0000 [#1] SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6010 Comm: syz.0.17 No contaminado syzkaller #0 PREEMPT(full)\nNombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\nRIP: 0010:fib6_add_rt2node+0x3433/0x3470 net/ipv6/ip6_fib.c:1217\n[...]\nTraza de llamada:\n \n fib6_add+0x8da/0x18a0 net/ipv6/ip6_fib.c:1532\n __ip6_ins_rt net/ipv6/route.c:1351 [en línea]\n ip6_route_add+0xde/0x1b0 net/ipv6/route.c:3946\n ipv6_route_ioctl+0x35c/0x480 net/ipv6/route.c:4571\n inet6_ioctl+0x219/0x280 net/ipv6/af_inet6.c:577\n sock_do_ioctl+0xdc/0x300 net/socket.c:1245\n sock_ioctl+0x576/0x790 net/socket.c:1366\n vfs_ioctl fs/ioctl.c:51 [en línea]\n __do_sys_ioctl fs/ioctl.c:597 [en línea]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [en línea]\n do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.120",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "589180AE-205F-411A-BB02-6DCA1C9766FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.63",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "BEECD823-DAFD-40C2-AFA9-F4E308AB7796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.13",
            "versionEndExcluding" : "6.18",
            "matchCriteriaId" : "7C298528-1754-41BD-B4E9-84A37AB7BA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.2",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "0EF65418-FC18-4809-98E5-14B1A2C57DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/50b7c7a255858a85c4636a1e990ca04591153dca",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b8ad2d53f706aeea833d23d45c0758398fede580",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bbf4a17ad9ffc4e3d7ec13d73ecd59dea149ed25",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d8143c54ceeba232dc8a13aa0afa14a44b371d93",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23201",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:57.950",
      "lastModified" : "2026-03-19T16:35:58.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix oops due to invalid pointer for kfree() in parse_longname()\n\nThis fixes a kernel oops when reading ceph snapshot directories (.snap),\nfor example by simply running `ls /mnt/my_ceph/.snap`.\n\nThe variable str is guarded by __free(kfree), but advanced by one for\nskipping the initial '_' in snapshot names. Thus, kfree() is called\nwith an invalid pointer.  This patch removes the need for advancing the\npointer so kfree() is called with correct memory pointer.\n\nSteps to reproduce:\n\n1. Create snapshots on a cephfs volume (I've 63 snaps in my testcase)\n\n2. Add cephfs mount to fstab\n$ echo \"samba-fileserver@.files=/volumes/datapool/stuff/3461082b-ecc9-4e82-8549-3fd2590d3fb6      /mnt/test/stuff   ceph     acl,noatime,_netdev    0       0\" >> /etc/fstab\n\n3. Reboot the system\n$ systemctl reboot\n\n4. Check if it's really mounted\n$ mount | grep stuff\n\n5. List snapshots (expected 63 snapshots on my system)\n$ ls /mnt/test/stuff/.snap\n\nNow ls hangs forever and the kernel log shows the oops."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nceph: corrige un oops debido a un puntero inválido para kfree() en parse_longname()\n\nEsto corrige un oops del kernel al leer directorios de instantáneas de ceph (.snap), por ejemplo, simplemente ejecutando 'ls /mnt/my_ceph/.snap'.\n\nLa variable str está protegida por __free(kfree), pero se avanza en uno para saltar el '_' inicial en los nombres de las instantáneas. Por lo tanto, se llama a kfree() con un puntero inválido. Este parche elimina la necesidad de avanzar el puntero para que se llame a kfree() con el puntero de memoria correcto.\n\nPasos para reproducir:\n\n1. Crea instantáneas en un volumen cephfs (tengo 63 instantáneas en mi caso de prueba)\n\n2. Añade el montaje cephfs a fstab\n$ echo 'samba-fileserver@.files=/volumes/datapool/stuff/3461082b-ecc9-4e82-8549-3fd2590d3fb6      /mnt/test/stuff   ceph     acl,noatime,_netdev    0       0' &gt;&gt; /etc/fstab\n\n3. Reinicia el sistema\n$ systemctl reboot\n\n4. Comprueba si está realmente montado\n$ mount | grep stuff\n\n5. Lista las instantáneas (se esperan 63 instantáneas en mi sistema)\n$ ls /mnt/test/stuff/.snap\n\nAhora ls se cuelga indefinidamente y el registro del kernel muestra el oops."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.42",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "4E35130D-49A4-4F25-AFAF-52726A775239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.15.10",
            "versionEndExcluding" : "6.16",
            "matchCriteriaId" : "8E12C24E-0833-48D3-9A8D-574823A693F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.16.1",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "496F2923-911F-4FFD-B9A0-4B9D70EBA1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8c9af7339de419819cfc641d551675d38ff99abf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bc8dedae022ce3058659c3addef3ec4b41d15e00",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e258ed369c9e04caa7d2fd49785d753ae4034cb6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23202",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.050",
      "lastModified" : "2026-03-19T16:35:07.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer\n\nThe curr_xfer field is read by the IRQ handler without holding the lock\nto check if a transfer is in progress. When clearing curr_xfer in the\ncombined sequence transfer loop, protect it with the spinlock to prevent\na race with the interrupt handler.\n\nProtect the curr_xfer clearing at the exit path of\ntegra_qspi_combined_seq_xfer() with the spinlock to prevent a race\nwith the interrupt handler that reads this field.\n\nWithout this protection, the IRQ handler could read a partially updated\ncurr_xfer value, leading to NULL pointer dereference or use-after-free."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nspi: tegra210-quad: Proteger curr_xfer en tegra_qspi_combined_seq_xfer\n\nEl campo curr_xfer es leído por el manejador IRQ sin mantener el bloqueo para verificar si una transferencia está en curso. Al limpiar curr_xfer en el bucle de transferencia de secuencia combinada, protegerlo con el spinlock para evitar una condición de carrera con el manejador de interrupciones.\n\nProteger la limpieza de curr_xfer en la ruta de salida de tegra_qspi_combined_seq_xfer() con el spinlock para evitar una condición de carrera con el manejador de interrupciones que lee este campo.\n\nSin esta protección, el manejador IRQ podría leer un valor curr_xfer parcialmente actualizado, lo que llevaría a una desreferencia de puntero NULL o uso después de liberación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.198",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "9086ED9F-28EF-4E81-ACC8-DD9C0694960D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.160",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "BD2D07F5-E7EF-418E-8FCC-7EA75E155311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.120",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "589180AE-205F-411A-BB02-6DCA1C9766FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.63",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "BEECD823-DAFD-40C2-AFA9-F4E308AB7796"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.13",
            "versionEndExcluding" : "6.18",
            "matchCriteriaId" : "7C298528-1754-41BD-B4E9-84A37AB7BA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.2",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "0EF65418-FC18-4809-98E5-14B1A2C57DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3bc293d5b56502068481478842f57b3d96e432c7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6fd446178a610a48e80e5c5b487b0707cd01daac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/712cde8d916889e282727cdf304a43683adf899e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/762e2ce71c8f0238e9eaf05d14da803d9a24422f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9fa4262a80f751d14a6a39d2c03f57db68da2618",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bf4528ab28e2bf112c3a2cdef44fd13f007781cd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23203",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.177",
      "lastModified" : "2026-03-19T16:34:57.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: Execute ndo_set_rx_mode callback in a work queue\n\nCommit 1767bb2d47b7 (\"ipv6: mcast: Don't hold RTNL for\nIPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP.\") removed the RTNL lock for\nIPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP operations. However, this\nchange triggered the following call trace on my BeagleBone Black board:\n  WARNING: net/8021q/vlan_core.c:236 at vlan_for_each+0x120/0x124, CPU#0: rpcbind/496\n  RTNL: assertion failed at net/8021q/vlan_core.c (236)\n  Modules linked in:\n  CPU: 0 UID: 997 PID: 496 Comm: rpcbind Not tainted 6.19.0-rc6-next-20260122-yocto-standard+ #8 PREEMPT\n  Hardware name: Generic AM33XX (Flattened Device Tree)\n  Call trace:\n   unwind_backtrace from show_stack+0x28/0x2c\n   show_stack from dump_stack_lvl+0x30/0x38\n   dump_stack_lvl from __warn+0xb8/0x11c\n   __warn from warn_slowpath_fmt+0x130/0x194\n   warn_slowpath_fmt from vlan_for_each+0x120/0x124\n   vlan_for_each from cpsw_add_mc_addr+0x54/0xd8\n   cpsw_add_mc_addr from __hw_addr_ref_sync_dev+0xc4/0xec\n   __hw_addr_ref_sync_dev from __dev_mc_add+0x78/0x88\n   __dev_mc_add from igmp6_group_added+0x84/0xec\n   igmp6_group_added from __ipv6_dev_mc_inc+0x1fc/0x2f0\n   __ipv6_dev_mc_inc from __ipv6_sock_mc_join+0x124/0x1b4\n   __ipv6_sock_mc_join from do_ipv6_setsockopt+0x84c/0x1168\n   do_ipv6_setsockopt from ipv6_setsockopt+0x88/0xc8\n   ipv6_setsockopt from do_sock_setsockopt+0xe8/0x19c\n   do_sock_setsockopt from __sys_setsockopt+0x84/0xac\n   __sys_setsockopt from ret_fast_syscall+0x0/0x5\n\nThis trace occurs because vlan_for_each() is called within\ncpsw_ndo_set_rx_mode(), which expects the RTNL lock to be held.\nSince modifying vlan_for_each() to operate without the RTNL lock is not\nstraightforward, and because ndo_set_rx_mode() is invoked both with and\nwithout the RTNL lock across different code paths, simply adding\nrtnl_lock() in cpsw_ndo_set_rx_mode() is not a viable solution.\n\nTo resolve this issue, we opt to execute the actual processing within\na work queue, following the approach used by the icssg-prueth driver."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: cpsw_new: Ejecutar la devolución de llamada ndo_set_rx_mode en una cola de trabajo\n\nEl commit 1767bb2d47b7 ('ipv6: mcast: No mantener RTNL para IPV6_ADD_MEMBERSHIP y MCAST_JOIN_GROUP.') eliminó el bloqueo RTNL para las operaciones IPV6_ADD_MEMBERSHIP y MCAST_JOIN_GROUP. Sin embargo, este cambio desencadenó el siguiente rastreo de llamadas en mi placa BeagleBone Black:\n  WARNING: net/8021q/vlan_core.c:236 en vlan_for_each+0x120/0x124, CPU#0: rpcbind/496\n  RTNL: aserción fallida en net/8021q/vlan_core.c (236)\n  Módulos enlazados:\n  CPU: 0 UID: 997 PID: 496 Comm: rpcbind No contaminado 6.19.0-rc6-next-20260122-yocto-standard+ #8 PREEMPT\n  Nombre del hardware: Generic AM33XX (Flattened Device Tree)\n  Rastreo de llamadas:\n   unwind_backtrace desde show_stack+0x28/0x2c\n   show_stack desde dump_stack_lvl+0x30/0x38\n   dump_stack_lvl desde __warn+0xb8/0x11c\n   __warn desde warn_slowpath_fmt+0x130/0x194\n   warn_slowpath_fmt desde vlan_for_each+0x120/0x124\n   vlan_for_each desde cpsw_add_mc_addr+0x54/0xd8\n   cpsw_add_mc_addr desde __hw_addr_ref_sync_dev+0xc4/0xec\n   __hw_addr_ref_sync_dev desde __dev_mc_add+0x78/0x88\n   __dev_mc_add desde igmp6_group_added+0x84/0xec\n   igmp6_group_added desde __ipv6_dev_mc_inc+0x1fc/0x2f0\n   __ipv6_dev_mc_inc desde __ipv6_sock_mc_join+0x124/0x1b4\n   __ipv6_sock_mc_join desde do_ipv6_setsockopt+0x84c/0x1168\n   do_ipv6_setsockopt desde ipv6_setsockopt+0x88/0xc8\n   ipv6_setsockopt desde do_sock_setsockopt+0xe8/0x19c\n   do_sock_setsockopt desde __sys_setsockopt+0x84/0xac\n   __sys_setsockopt desde ret_fast_syscall+0x0/0x5\n\nEste rastreo ocurre porque se llama a vlan_for_each() dentro de cpsw_ndo_set_rx_mode(), que espera que el bloqueo RTNL esté mantenido. Dado que modificar vlan_for_each() para operar sin el bloqueo RTNL no es sencillo, y debido a que ndo_set_rx_mode() se invoca tanto con como sin el bloqueo RTNL a través de diferentes rutas de código, simplemente añadir rtnl_lock() en cpsw_ndo_set_rx_mode() no es una solución viable.\n\nPara resolver este problema, optamos por ejecutar el procesamiento real dentro de una cola de trabajo, siguiendo el enfoque utilizado por el controlador icssg-prueth."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "006F0E3E-7CDC-49C8-880D-47A126A6F299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/c0b5dc73a38f954e780f93a549b8fe225235c07a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d5b3a669866977dc87fd56fcf00a70df1536d258",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23204",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.297",
      "lastModified" : "2026-04-03T14:16:27.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_u32: use skb_header_pointer_careful()\n\nskb_header_pointer() does not fully validate negative @offset values.\n\nUse skb_header_pointer_careful() instead.\n\nGangMin Kim provided a report and a repro fooling u32_classify():\n\nBUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0\nnet/sched/cls_u32.c:221"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/sched: cls_u32: usar skb_header_pointer_careful()\n\nskb_header_pointer() no valida completamente los valores negativos de @offset.\n\nUsar skb_header_pointer_careful() en su lugar.\n\nGangMin Kim proporcionó un informe y una reproducción engañando a u32_classify():\n\nBUG: KASAN: slab-out-of-bounds en u32_classify+0x1180/0x11b0\nnet/sched/cls_u32.c:221"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.35.1",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "CDD3DE1F-BBB8-495C-81E8-5D36799A6116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.35:-:*:*:*:*:*:*",
            "matchCriteriaId" : "11B11B98-42CE-41C8-A40E-FAA230FD2A76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.35:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA4BC3D2-70FF-4EED-9DC8-B378F88F4D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.35:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A7ACC123-06D8-4A3F-8730-AA7FF6EFBD35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.35:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6891F7-2B07-4A96-A0D6-AC528B7E0DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.35:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "657BCE5D-DC8B-4BE2-AED8-BC52C738F999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.35:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "160E9402-241A-44AE-A92A-9629CA656F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/13336a6239b9d7c6e61483017bb8bdfe3ceb10a5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8a672f177ebe19c93d795fbe967846084fbc7943",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cabd1a976375780dabab888784e356f574bbaed8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cfa745830e45ecb75c061aa34330ee0cac941cc7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e41a23e61259f5526af875c3b86b3d42a9bae0e5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23205",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.403",
      "lastModified" : "2026-03-18T17:10:59.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix memory leak in smb2_open_file()\n\nReproducer:\n\n  1. server: directories are exported read-only\n  2. client: mount -t cifs //${server_ip}/export /mnt\n  3. client: dd if=/dev/zero of=/mnt/file bs=512 count=1000 oflag=direct\n  4. client: umount /mnt\n  5. client: sleep 1\n  6. client: modprobe -r cifs\n\nThe error message is as follows:\n\n  =============================================================================\n  BUG cifs_small_rq (Not tainted): Objects remaining on __kmem_cache_shutdown()\n  -----------------------------------------------------------------------------\n\n  Object 0x00000000d47521be @offset=14336\n  ...\n  WARNING: mm/slub.c:1251 at __kmem_cache_shutdown+0x34e/0x440, CPU#0: modprobe/1577\n  ...\n  Call Trace:\n   <TASK>\n   kmem_cache_destroy+0x94/0x190\n   cifs_destroy_request_bufs+0x3e/0x50 [cifs]\n   cleanup_module+0x4e/0x540 [cifs]\n   __se_sys_delete_module+0x278/0x400\n   __x64_sys_delete_module+0x5f/0x70\n   x64_sys_call+0x2299/0x2ff0\n   do_syscall_64+0x89/0x350\n   entry_SYSCALL_64_after_hwframe+0x76/0x7e\n  ...\n  kmem_cache_destroy cifs_small_rq: Slab cache still has objects when called from cifs_destroy_request_bufs+0x3e/0x50 [cifs]\n  WARNING: mm/slab_common.c:532 at kmem_cache_destroy+0x16b/0x190, CPU#0: modprobe/1577"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nsmb/cliente: corrige una fuga de memoria en smb2_open_file()\n\nReproductor:\n\n  1. servidor: los directorios se exportan de solo lectura\n  2. cliente: mount -t cifs //${server_ip}/export /mnt\n  3. cliente: dd if=/dev/zero of=/mnt/file bs=512 count=1000 oflag=direct\n  4. cliente: umount /mnt\n  5. cliente: sleep 1\n  6. cliente: modprobe -r cifs\n\nEl mensaje de error es el siguiente:\n\n  =============================================================================\n  BUG cifs_small_rq (No contaminado): Objetos restantes en __kmem_cache_shutdown()\n  -----------------------------------------------------------------------------\n\n  Object 0x00000000d47521be @offset=14336\n  ...\n  ADVERTENCIA: mm/slub.c:1251 en __kmem_cache_shutdown+0x34e/0x440, CPU#0: modprobe/1577\n  ...\n  Traza de Llamada:\n   \n   kmem_cache_destroy+0x94/0x190\n   cifs_destroy_request_bufs+0x3e/0x50 [cifs]\n   cleanup_module+0x4e/0x540 [cifs]\n   __se_sys_delete_module+0x278/0x400\n   __x64_sys_delete_module+0x5f/0x70\n   x64_sys_call+0x2299/0x2ff0\n   do_syscall_64+0x89/0x350\n   entry_SYSCALL_64_after_hwframe+0x76/0x7e\n  ...\n  kmem_cache_destroy cifs_small_rq: La caché de slab aún tiene objetos cuando se llama desde cifs_destroy_request_bufs+0x3e/0x50 [cifs]\n  ADVERTENCIA: mm/slab_common.c:532 en kmem_cache_destroy+0x16b/0x190, CPU#0: modprobe/1577"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.141",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "00623C11-0443-4B37-8CA8-ED9E2C277A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.93",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "256DA482-7687-4432-B13E-8503C2B68F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.31",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "046F65ED-1039-4099-926A-7D989329B28C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.14.9",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "A420E6FD-A5EF-4EB6-991E-DA6CB5C3316F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3a6d6b332f92990958602c1e35ce0173e2dd62e9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/743f70406264348c0830f38409eb6c40a42fb2db",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9ee608a64e37cea5b4b13e436c559dd0fb2ad1b5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b64e3b5d8d759dd4333992e4ba4dadf9359952c8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e3a43633023e3cacaca60d4b8972d084a2b06236",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23206",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.507",
      "lastModified" : "2026-03-19T16:34:27.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero\n\nThe driver allocates arrays for ports, FDBs, and filter blocks using\nkcalloc() with ethsw->sw_attr.num_ifs as the element count. When the\ndevice reports zero interfaces (either due to hardware configuration\nor firmware issues), kcalloc(0, ...) returns ZERO_SIZE_PTR (0x10)\ninstead of NULL.\n\nLater in dpaa2_switch_probe(), the NAPI initialization unconditionally\naccesses ethsw->ports[0]->netdev, which attempts to dereference\nZERO_SIZE_PTR (address 0x10), resulting in a kernel panic.\n\nAdd a check to ensure num_ifs is greater than zero after retrieving\ndevice attributes. This prevents the zero-sized allocations and\nsubsequent invalid pointer dereference."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndpaa2-switch: evitar la desreferencia de ZERO_SIZE_PTR cuando num_ifs es cero\n\nEl controlador asigna arreglos para puertos, FDBs y bloques de filtro usando kcalloc() con ethsw-&gt;sw_attr.num_ifs como el recuento de elementos. Cuando el dispositivo reporta cero interfaces (ya sea debido a la configuración del hardware o a problemas de firmware), kcalloc(0, ...) devuelve ZERO_SIZE_PTR (0x10) en lugar de NULL.\n\nMás tarde en dpaa2_switch_probe(), la inicialización de NAPI accede incondicionalmente a ethsw-&gt;ports[0]-&gt;netdev, lo que intenta desreferenciar ZERO_SIZE_PTR (dirección 0x10), resultando en un pánico del kernel.\n\nAñadir una verificación para asegurar que num_ifs sea mayor que cero después de recuperar los atributos del dispositivo. Esto evita las asignaciones de tamaño cero y la subsiguiente desreferencia de puntero inválido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "87005985-2B34-4396-9F44-650DB23E2D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/155eb99aff2920153bf21217ae29565fff81e6af",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2fcccca88456b592bd668db13aa1d29ed257ca2b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4acc40db06ffd0fd92683505342b00c8a7394c60",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/80165ff16051448d6f840585ebe13f2400415df3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b97415c4362f739e25ec6f71012277086fabdf6f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ed48a84a72fefb20a82dd90a7caa7807e90c6f66",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23207",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.610",
      "lastModified" : "2026-04-02T12:16:19.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: tegra210-quad: Protect curr_xfer check in IRQ handler\n\nNow that all other accesses to curr_xfer are done under the lock,\nprotect the curr_xfer NULL check in tegra_qspi_isr_thread() with the\nspinlock. Without this protection, the following race can occur:\n\n  CPU0 (ISR thread)              CPU1 (timeout path)\n  ----------------               -------------------\n  if (!tqspi->curr_xfer)\n    // sees non-NULL\n                                 spin_lock()\n                                 tqspi->curr_xfer = NULL\n                                 spin_unlock()\n  handle_*_xfer()\n    spin_lock()\n    t = tqspi->curr_xfer  // NULL!\n    ... t->len ...        // NULL dereference!\n\nWith this patch, all curr_xfer accesses are now properly synchronized.\n\nAlthough all accesses to curr_xfer are done under the lock, in\ntegra_qspi_isr_thread() it checks for NULL, releases the lock and\nreacquires it later in handle_cpu_based_xfer()/handle_dma_based_xfer().\nThere is a potential for an update in between, which could cause a NULL\npointer dereference.\n\nTo handle this, add a NULL check inside the handlers after acquiring\nthe lock. This ensures that if the timeout path has already cleared\ncurr_xfer, the handler will safely return without dereferencing the\nNULL pointer."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nspi: tegra210-quad: Proteger la comprobación de curr_xfer en el manejador IRQ\n\nAhora que todos los demás accesos a curr_xfer se realizan bajo el bloqueo, proteger la comprobación de NULL de curr_xfer en tegra_qspi_isr_thread() con el spinlock. Sin esta protección, la siguiente condición de carrera puede ocurrir:\n\n  CPU0 (hilo ISR)              CPU1 (ruta de tiempo de espera)\n  ----------------               -------------------\n  if (!tqspi-&gt;curr_xfer)\n    // ve no-NULL\n                                 spin_lock()\n                                 tqspi-&gt;curr_xfer = NULL\n                                 spin_unlock()\n  handle_*_xfer()\n    spin_lock()\n    t = tqspi-&gt;curr_xfer  // ¡NULL!\n    ... t-&gt;len ...        // ¡Desreferencia de NULL!\n\nCon este parche, todos los accesos a curr_xfer están ahora correctamente sincronizados.\n\nAunque todos los accesos a curr_xfer se realizan bajo el bloqueo, en tegra_qspi_isr_thread() comprueba si es NULL, libera el bloqueo y lo vuelve a adquirir más tarde en handle_cpu_based_xfer()/handle_dma_based_xfer(). Existe la posibilidad de una actualización intermedia, lo que podría causar una desreferencia de puntero NULL.\n\nPara manejar esto, añadir una comprobación de NULL dentro de los manejadores después de adquirir el bloqueo. Esto asegura que si la ruta de tiempo de espera ya ha limpiado curr_xfer, el manejador regresará de forma segura sin desreferenciar el puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.198",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "DAE43607-A681-44B2-AFC5-C3A01428F4B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.160",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "95004F71-D948-4577-8590-EF2413F4B63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.120",
            "versionEndExcluding" : "6.7",
            "matchCriteriaId" : "92DADBAB-4CEC-4775-8A77-A145264C5F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.63",
            "versionEndExcluding" : "6.13",
            "matchCriteriaId" : "D41DF6E7-9FF0-4097-B10C-CFA7D39C4A5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.17.13",
            "versionEndExcluding" : "6.18",
            "matchCriteriaId" : "7C298528-1754-41BD-B4E9-84A37AB7BA32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18.2",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "0EF65418-FC18-4809-98E5-14B1A2C57DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2ac3a105e51496147c0e44e49466eecfcc532d57",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/84e926c1c272a35ddb9b86842d32fa833a60dfc7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/edf9088b6e1d6d88982db7eb5e736a0e4fbcc09e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23208",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.703",
      "lastModified" : "2026-03-18T20:49:35.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Prevent excessive number of frames\n\nIn this case, the user constructed the parameters with maxpacksize 40\nfor rate 22050 / pps 1000, and packsize[0] 22 packsize[1] 23. The buffer\nsize for each data URB is maxpacksize * packets, which in this example\nis 40 * 6 = 240; When the user performs a write operation to send audio\ndata into the ALSA PCM playback stream, the calculated number of frames\nis packsize[0] * packets = 264, which exceeds the allocated URB buffer\nsize, triggering the out-of-bounds (OOB) issue reported by syzbot [1].\n\nAdded a check for the number of single data URB frames when calculating\nthe number of frames to prevent [1].\n\n[1]\nBUG: KASAN: slab-out-of-bounds in copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\nWrite of size 264 at addr ffff88804337e800 by task syz.0.17/5506\nCall Trace:\n copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\n prepare_playback_urb+0x953/0x13d0 sound/usb/pcm.c:1611\n prepare_outbound_urb+0x377/0xc50 sound/usb/endpoint.c:333"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nALSA: usb-audio: Prevenir un número excesivo de tramas\n\nEn este caso, el usuario construyó los parámetros con maxpacksize 40 para una tasa de 22050 / pps 1000, y packsize[0] 22 packsize[1] 23. El tamaño del búfer para cada URB de datos es maxpacksize * paquetes, que en este ejemplo es 40 * 6 = 240; Cuando el usuario realiza una operación de escritura para enviar datos de audio al flujo de reproducción ALSA PCM, el número calculado de tramas es packsize[0] * paquetes = 264, lo que excede el tamaño del búfer URB asignado, desencadenando el problema de fuera de límites (OOB) reportado por syzbot [1].\n\nSe añadió una comprobación para el número de tramas URB de datos individuales al calcular el número de tramas para prevenir [1].\n\n[1]\nBUG: KASAN: slab-out-of-bounds en copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\nEscritura de tamaño 264 en la dirección ffff88804337e800 por la tarea syz.0.17/5506\nTraza de Llamada:\n copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\n prepare_playback_urb+0x953/0x13d0 sound/usb/pcm.c:1611\n prepare_outbound_urb+0x377/0xc50 sound/usb/endpoint.c:333"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.186",
            "versionEndExcluding" : "4.14.188",
            "matchCriteriaId" : "CD1BFF88-C8CF-4AA8-8E24-D13928FE0DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.19.130",
            "versionEndExcluding" : "4.19.132",
            "matchCriteriaId" : "87999705-F22E-4389-898A-B4B8DDDBDA7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.49",
            "versionEndExcluding" : "5.4.51",
            "matchCriteriaId" : "C5C83907-C9A6-43D6-AA4A-8B82C0E60FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.6",
            "versionEndExcluding" : "5.7.8",
            "matchCriteriaId" : "958FE7C1-BD9E-4C9D-91F6-19A8E0EB9B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7A0D4259-1C3D-46AC-B61A-63E751C16AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.4.229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088154F3-4B59-4FF5-9177-F2B91EBA283E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9.229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE6AD3D-3D2D-4D6F-809E-52224BC0C930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/282aba56713bbc58155716b55ca7222b2d9cf3c8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/480a1490c595a242f27493a4544b3efb21b29f6a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/62932d9ed639a9fa71b4ac1a56766a4b43abb7e4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c4dc012b027c9eb101583011089dea14d744e314",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d67dde02049e632ba58d3c44a164a74b6a737154",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e0ed5a36fb3ab9e7b9ee45cd17f09f6d5f594360",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ef5749ef8b307bf8717945701b1b79d036af0a15",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23209",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.803",
      "lastModified" : "2026-04-03T14:16:27.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: fix error recovery in macvlan_common_newlink()\n\nvalis provided a nice repro to crash the kernel:\n\nip link add p1 type veth peer p2\nip link set address 00:00:00:00:00:20 dev p1\nip link set up dev p1\nip link set up dev p2\n\nip link add mv0 link p2 type macvlan mode source\nip link add invalid% link p2 type macvlan mode source macaddr add 00:00:00:00:00:20\n\nping -c1 -I p1 1.2.3.4\n\nHe also gave a very detailed analysis:\n\n<quote valis>\n\nThe issue is triggered when a new macvlan link is created  with\nMACVLAN_MODE_SOURCE mode and MACVLAN_MACADDR_ADD (or\nMACVLAN_MACADDR_SET) parameter, lower device already has a macvlan\nport and register_netdevice() called from macvlan_common_newlink()\nfails (e.g. because of the invalid link name).\n\nIn this case macvlan_hash_add_source is called from\nmacvlan_change_sources() / macvlan_common_newlink():\n\nThis adds a reference to vlan to the port's vlan_source_hash using\nmacvlan_source_entry.\n\nvlan is a pointer to the priv data of the link that is being created.\n\nWhen register_netdevice() fails, the error is returned from\nmacvlan_newlink() to rtnl_newlink_create():\n\n        if (ops->newlink)\n                err = ops->newlink(dev, &params, extack);\n        else\n                err = register_netdevice(dev);\n        if (err < 0) {\n                free_netdev(dev);\n                goto out;\n        }\n\nand free_netdev() is called, causing a kvfree() on the struct\nnet_device that is still referenced in the source entry attached to\nthe lower device's macvlan port.\n\nNow all packets sent on the macvlan port with a matching source mac\naddress will trigger a use-after-free in macvlan_forward_source().\n\n</quote valis>\n\nWith all that, my fix is to make sure we call macvlan_flush_sources()\nregardless of @create value whenever \"goto destroy_macvlan_port;\"\npath is taken.\n\nMany thanks to valis for following up on this issue."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmacvlan: arreglar la recuperación de errores en macvlan_common_newlink()\n\nvalis proporcionó una buena reproducción para colapsar el kernel:\n\nip link add p1 type veth peer p2\nip link set address 00:00:00:00:00:20 dev p1\nip link set up dev p1\nip link set up dev p2\n\nip link add mv0 link p2 type macvlan mode source\nip link add invalid% link p2 type macvlan mode source macaddr add 00:00:00:00:00:20\n\nping -c1 -I p1 1.2.3.4\n\nTambién proporcionó un análisis muy detallado:\n\n'El problema se activa cuando se crea un nuevo enlace macvlan con el modo MACVLAN_MODE_SOURCE y el parámetro MACVLAN_MACADDR_ADD (o MACVLAN_MACADDR_SET), el dispositivo inferior ya tiene un puerto macvlan y register_netdevice() llamado desde macvlan_common_newlink() falla (por ejemplo, debido al nombre de enlace no válido).\n\nEn este caso, macvlan_hash_add_source es llamado desde macvlan_change_sources() / macvlan_common_newlink():\n\nEsto añade una referencia a vlan al vlan_source_hash del puerto usando macvlan_source_entry.\n\nvlan es un puntero a los datos privados del enlace que se está creando.\n\nCuando register_netdevice() falla, el error es devuelto desde macvlan_newlink() a rtnl_newlink_create():\n\n        if (ops-&gt;newlink)\n                err = ops-&gt;newlink(dev, &amp;params, extack);\n        else\n                err = register_netdevice(dev);\n        if (err &lt; 0) {\n                free_netdev(dev);\n                goto out;\n        }\n\ny se llama a free_netdev(), causando un kvfree() en la estructura net_device que todavía está referenciada en la entrada de origen adjunta al puerto macvlan del dispositivo inferior.\n\nAhora, todos los paquetes enviados en el puerto macvlan con una dirección MAC de origen coincidente activarán un uso después de liberación en macvlan_forward_source().'\n\nCon todo eso, mi solución es asegurarme de que llamamos a macvlan_flush_sources() independientemente del valor de @create cada vez que se toma la ruta \"goto destroy_macvlan_port;\".\n\nMuchas gracias a valis por hacer seguimiento de este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.1",
            "versionEndExcluding" : "5.10.250",
            "matchCriteriaId" : "93494E82-FEAE-4F5D-9065-D14C28E8B045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "D16F6370-B70F-471C-8363-3A17B0BB1DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "592761F7-6672-484E-8490-1187F4CDD13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "B0288B1E-67AB-40F4-98C7-8C686510F664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "73A5C6E1-051D-4FDC-8034-BE2896C639F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "F96570B2-47BE-4DEF-AAD8-909913366EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/11ba9f0dc865136174cb98834280fb21bbc950c7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5dae6b36a7cb7a4fcf4121b95e9ca7f96f816c8a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/986967a162142710076782d5b93daab93a892980",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c43d0e787cbba569ec9d11579ed370b50fab6c9c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cdedcd5aa3f3cb8b7ae0f87ab3a936d0bd583d66",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/da5c6b8ae47e414be47e5e04def15b25d5c962dc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f8db6475a83649689c087a8f52486fcc53e627e9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23210",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-14T17:15:58.910",
      "lastModified" : "2026-04-02T12:16:19.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix PTP NULL pointer dereference during VSI rebuild\n\nFix race condition where PTP periodic work runs while VSI is being\nrebuilt, accessing NULL vsi->rx_rings.\n\nThe sequence was:\n1. ice_ptp_prepare_for_reset() cancels PTP work\n2. ice_ptp_rebuild() immediately queues PTP work\n3. VSI rebuild happens AFTER ice_ptp_rebuild()\n4. PTP work runs and accesses NULL vsi->rx_rings\n\nFix: Keep PTP work cancelled during rebuild, only queue it after\nVSI rebuild completes in ice_rebuild().\n\nAdded ice_ptp_queue_work() helper function to encapsulate the logic\nfor queuing PTP work, ensuring it's only queued when PTP is supported\nand the state is ICE_PTP_READY.\n\nError log:\n[  121.392544] ice 0000:60:00.1: PTP reset successful\n[  121.392692] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[  121.392712] #PF: supervisor read access in kernel mode\n[  121.392720] #PF: error_code(0x0000) - not-present page\n[  121.392727] PGD 0\n[  121.392734] Oops: Oops: 0000 [#1] SMP NOPTI\n[  121.392746] CPU: 8 UID: 0 PID: 1005 Comm: ice-ptp-0000:60 Tainted: G S                  6.19.0-rc6+ #4 PREEMPT(voluntary)\n[  121.392761] Tainted: [S]=CPU_OUT_OF_SPEC\n[  121.392773] RIP: 0010:ice_ptp_update_cached_phctime+0xbf/0x150 [ice]\n[  121.393042] Call Trace:\n[  121.393047]  <TASK>\n[  121.393055]  ice_ptp_periodic_work+0x69/0x180 [ice]\n[  121.393202]  kthread_worker_fn+0xa2/0x260\n[  121.393216]  ? __pfx_ice_ptp_periodic_work+0x10/0x10 [ice]\n[  121.393359]  ? __pfx_kthread_worker_fn+0x10/0x10\n[  121.393371]  kthread+0x10d/0x230\n[  121.393382]  ? __pfx_kthread+0x10/0x10\n[  121.393393]  ret_from_fork+0x273/0x2b0\n[  121.393407]  ? __pfx_kthread+0x10/0x10\n[  121.393417]  ret_from_fork_asm+0x1a/0x30\n[  121.393432]  </TASK>"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nice: Soluciona la desreferencia de puntero NULL de PTP durante la reconstrucción de VSI\n\nSoluciona la condición de carrera donde el trabajo periódico de PTP se ejecuta mientras VSI está siendo reconstruido, accediendo a vsi-&gt;rx_rings NULL.\n\nLa secuencia fue:\n1. ice_ptp_prepare_for_reset() cancela el trabajo de PTP\n2. ice_ptp_rebuild() encola inmediatamente el trabajo de PTP\n3. La reconstrucción de VSI ocurre DESPUÉS de ice_ptp_rebuild()\n4. El trabajo de PTP se ejecuta y accede a vsi-&gt;rx_rings NULL\n\nCorrección: Mantener el trabajo de PTP cancelado durante la reconstrucción, solo encolarlo después de que la reconstrucción de VSI se complete en ice_rebuild().\n\nSe añadió la función auxiliar ice_ptp_queue_work() para encapsular la lógica de encolamiento del trabajo de PTP, asegurando que solo se encole cuando PTP es compatible y el estado es ICE_PTP_READY.\n\nRegistro de error:\n[  121.392544] ice 0000:60:00.1: Reinicio de PTP exitoso\n[  121.392692] BUG: desreferencia de puntero NULL del kernel, dirección: 0000000000000000\n[  121.392712] #PF: acceso de lectura de supervisor en modo kernel\n[  121.392720] #PF: error_code(0x0000) - página no presente\n[  121.392727] PGD 0\n[  121.392734] Oops: Oops: 0000 [#1] SMP NOPTI\n[  121.392746] CPU: 8 UID: 0 PID: 1005 Comm: ice-ptp-0000:60 Tainted: G S                  6.19.0-rc6+ #4 PREEMPT(voluntary)\n[  121.392761] Tainted: [S]=CPU_OUT_OF_SPEC\n[  121.392773] RIP: 0010:ice_ptp_update_cached_phctime+0xbf/0x150 [ice]\n[  121.393042] Traza de Llamada:\n[  121.393047] \n[  121.393055] ice_ptp_periodic_work+0x69/0x180 [ice]\n[  121.393202] kthread_worker_fn+0xa2/0x260\n[  121.393216] ? __pfx_ice_ptp_periodic_work+0x10/0x10 [ice]\n[  121.393359] ? __pfx_kthread_worker_fn+0x10/0x10\n[  121.393371] kthread+0x10d/0x230\n[  121.393382] ? __pfx_kthread+0x10/0x10\n[  121.393393] ret_from_fork+0x273/0x2b0\n[  121.393407] ? __pfx_kthread+0x10/0x10\n[  121.393417] ret_from_fork_asm+0x1a/0x30\n[  121.393432] "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "241EA55E-C309-4617-A483-BA8E77746F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/7565d4df66b6619b50dc36618d8b8f1787d77e19",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ba0c7fff6616025a7d3a9e887e7ce16b06dc34b9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/fc6f36eaaedcf4b81af6fe1a568f018ffd530660",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1490",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-15T04:15:53.783",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS (PTR record) spoofing on the 'checkWithoutToken' function in all versions up to, and including, 6.71. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. Note: This is only exploitable on sites with an invalid API key."
      }, {
        "lang" : "es",
        "value" : "El plugin de protección contra el correo no deseado, Antispam, Cortafuegos de CleanTalk para WordPress es vulnerable a la instalación arbitraria de plugins no autorizada debido a una omisión de autorización mediante suplantación de DNS inverso (registro PTR) en la función 'checkWithoutToken' en todas las versiones hasta la 6.71, inclusive. Esto permite a atacantes no autenticados instalar y activar plugins arbitrarios, lo que puede aprovecharse para lograr la ejecución remota de código si otro plugin vulnerable está instalado y activado. Nota: Esto solo es explotable en sitios con una clave API no válida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-350"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/trunk/lib/Cleantalk/ApbctWP/RemoteCalls.php#L69",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/trunk/lib/Cleantalk/Common/Helper.php#L64",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3454488/cleantalk-spam-protect#file473",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb603be6-4a12-49e1-b8cc-b2062eb97f16?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1750",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-15T04:15:54.113",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a missing capability check in the 'save_custom_user_profile_fields' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to supply the 'ec_store_admin_access' parameter during a profile update and gain store manager access to the site."
      }, {
        "lang" : "es",
        "value" : "El plugin Ecwid by Lightspeed Ecommerce Shopping Cart para WordPress es vulnerable a la escalada de privilegios en todas las versiones hasta la 7.0.7, inclusive. Esto se debe a una comprobación de capacidad faltante en la función 'save_custom_user_profile_fields'. Esto permite que atacantes autenticados, con permisos mínimos como un suscriptor, suministren el parámetro 'ec_store_admin_access' durante una actualización de perfil y obtengan acceso de administrador de tienda al sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ecwid-shopping-cart/tags/7.0.7/includes/class-ec-store-admin-access.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3460721/ecwid-shopping-cart#file2",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d29f77c-b86d-4058-b528-27631e8a1f2e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1793",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-15T04:15:54.260",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Element Pack Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, and including, 8.3.17 via the SVG widget and a lack of sufficient file validation in the 'render_svg' function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information."
      }, {
        "lang" : "es",
        "value" : "El plugin Element Pack Addons para Elementor para WordPress es vulnerable a lecturas de archivos arbitrarios en todas las versiones hasta, e incluyendo, 8.3.17 a través del widget SVG y una falta de validación suficiente de archivos en la función 'render_svg'. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, lean el contenido de archivos arbitrarios en el servidor, que pueden contener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/tags/8.3.16/modules/svg-image/widgets/svg-image.php#L850",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3452826/bdthemes-element-pack-lite#file1135",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/58f9bef5-6596-40b2-bcb6-d686e87d8d8f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2539",
      "sourceIdentifier" : "cve@asrg.io",
      "published" : "2026-02-15T11:15:54.897",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool (e.g., SDR) can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication."
      }, {
        "lang" : "es",
        "value" : "El protocolo de comunicación RF en el sistema de alarma de coche Micca KE700 no cifra sus tramas de datos. Un atacante con una herramienta de intercepción de radio (p. ej., SDR) puede capturar el número aleatorio y los contadores transmitidos en texto claro, lo cual es información sensible necesaria para la autenticación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve@asrg.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:H/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "HIGH",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@asrg.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://asrg.io/security-advisories/cve-2026-2539-micca-ke700-cleartext-transmission-of-key-fob-id/",
        "source" : "cve@asrg.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2540",
      "sourceIdentifier" : "cve@asrg.io",
      "published" : "2026-02-15T11:15:55.070",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes in a specific sequence. As a result, the system can be forced to accept previously used (stale) rolling codes and execute a command. Successful exploitation allows an attacker to clone the alarm key. This grants the attacker unauthorized access to the vehicle to unlock or lock the doors."
      }, {
        "lang" : "es",
        "value" : "El sistema Micca KE700 contiene lógica de resincronización defectuosa y es vulnerable a ataques de repetición. Este ataque requiere el envío de dos códigos previamente capturados en una secuencia específica. Como resultado, el sistema puede ser forzado a aceptar códigos rotatorios previamente usados (obsoletos) y ejecutar un comando. La explotación exitosa permite a un atacante clonar la llave de la alarma. Esto otorga al atacante acceso no autorizado al vehículo para desbloquear o bloquear las puertas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve@asrg.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:M/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@asrg.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        }, {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "references" : [ {
        "url" : "https://asrg.io/security-advisories/cve-2026-2540/",
        "source" : "cve@asrg.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2541",
      "sourceIdentifier" : "cve@asrg.io",
      "published" : "2026-02-15T11:15:55.223",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an attacker to predict the next valid rolling code, granting unauthorized access to the vehicle."
      }, {
        "lang" : "es",
        "value" : "El sistema Micca KE700 se basa en una porción de 6 bits de un identificador para la autenticación dentro de códigos rotatorios, lo que proporciona solo 64 combinaciones posibles. Esta baja entropía permite a un atacante realizar un ataque de fuerza bruta contra un componente del código rotatorio. La explotación exitosa simplifica a un atacante predecir el siguiente código rotatorio válido, lo que otorga acceso no autorizado al vehículo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve@asrg.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:H/U:X",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "HIGH",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@asrg.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "references" : [ {
        "url" : "https://asrg.io/security-advisories/cve-2026-2541/",
        "source" : "cve@asrg.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2516",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-15T13:16:16.423",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in the library SHFOLDER.dll. Such manipulation leads to uncontrolled search path. The attack needs to be performed locally. Attacks of this nature are highly complex. It is indicated that the exploitability is difficult. The exploit is publicly available and might be used. Upgrading the affected component is recommended. The vendor explains: \"[W]e have already addressed similar DLL search path vulnerability patterns through prior security updates. (...) Users are advised to use the latest version provided by the vendor.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Unidocs ezPDF DRM Reader y ezPDF Reader 2.0/3.0.0.4 en 32 bits. Esto afecta una parte desconocida en la biblioteca SHFOLDER.dll. Dicha manipulación conduce a una ruta de búsqueda incontrolada. El ataque necesita ser realizado localmente. Los ataques de esta naturaleza son altamente complejos. Se indica que la explotabilidad es difícil. El exploit está disponible públicamente y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        }, {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.unidocs.com/programs/ezPDF_DRM_Reader/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gofile.me/7bU54/ZG47Lh7Yx",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/submit/736172",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/vuln/346107",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/vuln/346107/cti",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2517",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-15T13:16:16.690",
      "lastModified" : "2026-02-18T20:48:40.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Open5GS hasta 2.7.6. Esta vulnerabilidad afecta la función ogs_gtp2_parse_tft en la biblioteca lib/gtp/v2/types.c del componente SMF. Realizar una manipulación del argumento pf[0].content.length resulta en denegación de servicio. El ataque es posible de llevar a cabo remotamente. El exploit ha sido publicado y puede ser utilizado para ataques. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4281",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4281#issue-3807802287",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738332",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26366",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-15T16:15:53.870",
      "lastModified" : "2026-02-26T22:44:42.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory password change. Unauthenticated attackers can use these default credentials to gain administrative access to sensitive smart home configuration and control functions."
      }, {
        "lang" : "es",
        "value" : "El servidor eNet SMART HOME 2.2.1 y 2.3.1 se envía con credenciales predeterminadas (usuario:usuario, admin:admin) que permanecen activas después de la instalación y puesta en marcha sin forzar un cambio de contraseña obligatorio. Atacantes no autenticados pueden usar estas credenciales predeterminadas para obtener acceso administrativo a funciones sensibles de configuración y control del hogar inteligente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B230A5E-D3D3-4F14-8F2C-6230798C0A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A70BE-E277-40FC-9E03-C5D31F9DAD5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulncheck.com/advisories/jung-enet-smart-home-server-use-of-default-credent",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5972.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26367",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-15T16:15:54.060",
      "lastModified" : "2026-03-02T15:16:35.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits any authenticated low-privileged user (UG_USER) to delete arbitrary user accounts, except for the built-in admin account. The application does not enforce role-based access control on this function, allowing a standard user to submit a crafted POST request to /jsonrpc/management specifying another username to have that account removed without elevated permissions or additional confirmation."
      }, {
        "lang" : "es",
        "value" : "eNet SMART HOME server 2.2.1 y 2.3.1 contiene una vulnerabilidad de autorización faltante en el método JSON-RPC deleteUserAccount que permite a cualquier usuario autenticado con privilegios bajos (UG_USER) eliminar cuentas de usuario arbitrarias, excepto la cuenta de administrador integrada. La aplicación no aplica control de acceso basado en roles en esta función, permitiendo a un usuario estándar enviar una solicitud POST manipulada a /jsonrpc/management especificando otro nombre de usuario para que esa cuenta sea eliminada sin permisos elevados ni confirmación adicional."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B230A5E-D3D3-4F14-8F2C-6230798C0A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A70BE-E277-40FC-9E03-C5D31F9DAD5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulncheck.com/advisories/jung-enet-smart-home-server-arbitrary-user-deletio",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5973.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26368",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-15T16:15:54.237",
      "lastModified" : "2026-02-28T01:33:46.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG_USER) to reset the password of arbitrary accounts, including those in the UG_ADMIN and UG_SUPER_ADMIN groups, without supplying the current password or having sufficient privileges. By sending a crafted JSON-RPC request to /jsonrpc/management, an attacker can overwrite existing credentials, resulting in direct account takeover with full administrative access and persistent privilege escalation."
      }, {
        "lang" : "es",
        "value" : "eNet SMART HOME servidor 2.2.1 y 2.3.1 contiene una vulnerabilidad de autorización faltante en el método JSON-RPC resetUserPassword que permite a cualquier usuario autenticado con bajos privilegios (UG_USER) restablecer la contraseña de cuentas arbitrarias, incluidas las de los grupos UG_ADMIN y UG_SUPER_ADMIN, sin proporcionar la contraseña actual o tener privilegios suficientes. Al enviar una solicitud JSON-RPC manipulada a /jsonrpc/management, un atacante puede sobrescribir credenciales existentes, lo que resulta en una toma de control directa de la cuenta con acceso administrativo completo y escalada de privilegios persistente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B230A5E-D3D3-4F14-8F2C-6230798C0A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A70BE-E277-40FC-9E03-C5D31F9DAD5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulncheck.com/advisories/jung-enet-smart-home-server-account-takeover-via-r",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5974.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26369",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-15T16:15:54.407",
      "lastModified" : "2026-02-28T01:34:28.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged user (UG_USER) can send a crafted POST request to /jsonrpc/management specifying their own username to elevate their account to the UG_ADMIN group, bypassing intended access controls and gaining administrative capabilities such as modifying device configurations, network settings, and other smart home system functions."
      }, {
        "lang" : "es",
        "value" : "eNet SMART HOME servidor 2.2.1 y 2.3.1 contiene una vulnerabilidad de escalada de privilegios debido a comprobaciones de autorización insuficientes en el método JSON-RPC setUserGroup. Un usuario con pocos privilegios (UG_USER) puede enviar una solicitud POST manipulada a /jsonrpc/management especificando su propio nombre de usuario para elevar su cuenta al grupo UG_ADMIN, eludiendo los controles de acceso previstos y obteniendo capacidades administrativas como modificar configuraciones de dispositivos, ajustes de red y otras funciones del sistema de hogar inteligente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B230A5E-D3D3-4F14-8F2C-6230798C0A61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jung-group:enet_smart_home:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80A70BE-E277-40FC-9E03-C5D31F9DAD5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vulncheck.com/advisories/jung-enet-smart-home-server-privilege-escalation-v",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5975.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2521",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-15T23:16:05.803",
      "lastModified" : "2026-02-18T19:42:51.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Open5GS hasta la versión 2.7.6. Este problema afecta a la función sgwc_s5c_handle_create_session_response del componente SGW-C. La ejecución de una manipulación puede llevar a corrupción de memoria. El ataque puede realizarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. El proyecto fue informado del problema con antelación a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4282",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4282#issue-3807902188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738334",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2522",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T00:16:07.550",
      "lastModified" : "2026-02-18T19:42:15.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Open5GS hasta la versión 2.7.6. Afecta a una función desconocida del archivo /src/mme/esm-build.c del componente MME. La manipulación conduce a corrupción de memoria. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4283#issue-3807916595",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2523",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T01:15:53.767",
      "lastModified" : "2026-02-18T19:07:48.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_context_request of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Open5GS hasta la versión 2.7.6. El elemento afectado es la función smf_gn_handle_create_pdp_context_request del archivo /src/smf/gn-handler.c del componente SMF. La manipulación resulta en una aserción alcanzable. Es posible lanzar el ataque de forma remota. El exploit ahora es público y puede ser utilizado. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.6",
            "matchCriteriaId" : "9C77332A-BAA3-4FE7-A237-B87F175C6F48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4285",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4285#issue-3809055236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346111",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346111",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738342",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2524",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T01:15:54.000",
      "lastModified" : "2026-02-18T19:07:38.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of the component MME. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Open5GS 2.7.6. El elemento afectado es la función mme_s11_handle_create_session_response del componente MME. Esta manipulación causa denegación de servicio. El ataque puede iniciarse remotamente. El exploit ha sido publicado y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:2.7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CAE39B-3444-4255-AF36-12AD680CFED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4284",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/4284#issue-3808462406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346112",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346112",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.738369",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2525",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T02:16:06.153",
      "lastModified" : "2026-02-19T19:48:12.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Free5GC hasta la versión 4.1.0. Esto afecta a una función desconocida del componente PFCP UDP Endpoint. Dicha manipulación conduce a una denegación de servicio. El ataque puede lanzarse de forma remota. El exploit ha sido revelado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "EF0DB381-157B-4D05-B3D3-A2419F1D0E05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/796",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/issues/796#issue-3812169865",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346113",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346113",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.739509",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2526",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T02:16:06.423",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Wavlink WL-WN579A3 up to 20210219. This impacts the function multi_ssid of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument SSID2G2 results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Wavlink WL-WN579A3 hasta 20210219. Esto afecta a la función multi_ssid del archivo /cgi-bin/wireless.cgi. Realizar una manipulación del argumento SSID2G2 resulta en inyección de comandos. El ataque puede ser iniciado remotamente. El exploit se ha hecho público y podría ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-02-19",
            "matchCriteriaId" : "F3B74656-54E8-43C6-A75F-E45F87CA4302"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EAFBB8-31E1-4B0F-A5E7-7CD5D9E90132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/multi_ssid.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346114",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346114",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748073",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2527",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T02:16:06.620",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Wavlink WL-WN579A3 hasta 20210219. Se ve afectada una función desconocida del archivo /cgi-bin/login.cgi. La ejecución de una manipulación del argumento key puede llevar a una inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-02-19",
            "matchCriteriaId" : "F3B74656-54E8-43C6-A75F-E45F87CA4302"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EAFBB8-31E1-4B0F-A5E7-7CD5D9E90132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/login.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346115",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346115",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748074",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2528",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T02:16:06.807",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function Delete_Mac_list of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Wavlink WL-WN579A3 hasta 20210219. La función Delete_Mac_list del archivo /cgi-bin/wireless.cgi está afectada por esta vulnerabilidad. La manipulación del argumento delete_list conduce a una inyección de comandos. Es posible la explotación remota del ataque. El exploit está disponible públicamente y podría ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-02-19",
            "matchCriteriaId" : "F3B74656-54E8-43C6-A75F-E45F87CA4302"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EAFBB8-31E1-4B0F-A5E7-7CD5D9E90132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/Delete_Mac_list.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346116",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346116",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748075",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2529",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T02:16:07.000",
      "lastModified" : "2026-02-18T20:02:39.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list results in command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Wavlink WL-WN579A3 hasta 20210219. Afectada por este problema es la función DeleteMac del archivo /cgi-bin/wireless.cgi. La manipulación del argumento delete_list resulta en inyección de comandos. El ataque puede ser ejecutado de forma remota. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-02-19",
            "matchCriteriaId" : "F3B74656-54E8-43C6-A75F-E45F87CA4302"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EAFBB8-31E1-4B0F-A5E7-7CD5D9E90132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/DeleteMac.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346117",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748076",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2530",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T04:15:51.677",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Wavlink WL-WN579A3 hasta 20210219. Esta afecta la función AddMac del archivo /cgi-bin/wireless.cgi. Esta manipulación del argumento macAddr causa inyección de comandos. El ataque puede llevarse a cabo de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-02-19",
            "matchCriteriaId" : "F3B74656-54E8-43C6-A75F-E45F87CA4302"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EAFBB8-31E1-4B0F-A5E7-7CD5D9E90132"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/AddMac.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346118",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346118",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748077",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2531",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T04:15:51.897",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the component File Upload. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The name of the patch is 74d6f0fd4b630218519a700fbee1c05c7fd4b1ed. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en MindsDB hasta la versión 25.14.1. Esta vulnerabilidad afecta a la función clear_filename del archivo mindsdb/utilities/security.py del componente Carga de Archivos. Dicha manipulación conduce a una falsificación de petición del lado del servidor. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El nombre del parche es 74d6f0fd4b630218519a700fbee1c05c7fd4b1ed. Es una buena práctica aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindsdb:mindsdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.14.1",
            "matchCriteriaId" : "C5A5BAA0-6C6C-4B6B-9714-AC9D1A3D264B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mindsdb/mindsdb/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/issues/12163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/pull/12213",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/themavik/mindsdb/commit/74d6f0fd4b630218519a700fbee1c05c7fd4b1ed",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346119",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346119",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2532",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T04:15:52.093",
      "lastModified" : "2026-02-28T00:38:08.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en lintsinghua DeepAudit hasta 3.0.3. Este problema afecta algún procesamiento desconocido del archivo backend/app/API/v1/endpoints/embedding_config.py del componente Manejador de Dirección IP. Realizar una manipulación resulta en falsificación de petición del lado del servidor. Es posible iniciar el ataque remotamente. Actualizar a la versión 3.0.4 y 3.1.0 es capaz de abordar este problema. El parche se llama da853fdd8cbe9d42053b45d83f25708ba29b8b27. Se sugiere actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lintsinghua:deepaudit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "7693F7E8-5BBD-4B68-99BF-85A143DE1D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lintsinghua/DeepAudit/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lintsinghua/DeepAudit/commit/da853fdd8cbe9d42053b45d83f25708ba29b8b27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lintsinghua/DeepAudit/issues/144",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/lintsinghua/DeepAudit/pull/145",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/lintsinghua/DeepAudit/releases/tag/v3.0.4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346120",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346120",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2533",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T04:15:52.283",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/tosei_datasend.php. Executing a manipulation of the argument adr_txt_1 can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tosei Self-service Washing Machine 4.02. Afecta a una función desconocida del archivo /cgi-bin/tosei_datasend.php. La manipulación del argumento adr_txt_1 puede llevar a una inyección de comandos. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346121",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346121",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.748771",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.yuque.com/yuqueyonghuexlgkz/zepczx/depg9z4c5b1t4mgd",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2534",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T04:15:52.470",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptest_bandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Comfast CF-N1 V2 2.6.0.2. El elemento afectado es la función sub_44AC4C del archivo /cgi-bin/mbox-config?method=SET&amp;section=ptest_bandwidth. La manipulación del argumento bandwidth conduce a inyección de comandos. El ataque puede iniciarse remotamente. El exploit ha sido divulgado al público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comfast:cf-n1_firmware:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4ABBA6-6406-4E29-8DD8-6A96C7CFDC7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comfast:cf-n1:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EA826E-566F-49A2-AF70-3B16037396DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/ComFast%20Router_1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346122",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346122",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748783",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2535",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T05:16:07.777",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET&section=ptest_channel. The manipulation of the argument channel results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Comfast CF-N1 V2 2.6.0.2. El elemento afectado es la función sub_44AB9C del archivo /cgi-bin/mbox-config?method=SET&amp;section=ptest_channel. La manipulación del argumento channel resulta en inyección de comandos. El ataque puede lanzarse de forma remota. El exploit se ha hecho público y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comfast:cf-n1_firmware:2.6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4ABBA6-6406-4E29-8DD8-6A96C7CFDC7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comfast:cf-n1:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7EA826E-566F-49A2-AF70-3B16037396DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/ComFast%20Router_2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346123",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346123",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.748784",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2536",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T06:16:22.063",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the component Workflow Engine. This manipulation of the argument File causes xml external entity reference. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en opencc JFlow hasta 20260129. Esto afecta a la función Imp_Done del archivo src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java del componente Workflow Engine. Esta manipulación del argumento File causa una referencia a entidad externa XML. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó al proyecto del problema tempranamente a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        }, {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/opencc/JFlow/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gitee.com/opencc/JFlow/issues/IDN7GT",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346124",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346124",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.748807",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.748808",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2537",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T06:16:22.320",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component HTTP POST Request Handler. Such manipulation of the argument timestr leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Comfast CF-E4 2.6.0.1. Esto afecta a una función desconocida del archivo /cgi-bin/mbox-config?method=SET&amp;section=ntp_timezone del componente Manejador de Solicitudes POST HTTP. Dicha manipulación del argumento timestr conduce a una inyección de comandos. El ataque puede lanzarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comfast:cf-e4_firmware:2.6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2F7A0A-65DF-476D-AD4F-9C05337F0A9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comfast:cf-e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84528815-C0BD-4551-B5FB-FE41FC721D6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/COMFAST/blob/main/RCE.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346125",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346125",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749196",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0929",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-16T07:17:00.197",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RegistrationMagic  WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress RegistrationMagic anterior a la versión 6.0.7.2 no cuenta con comprobaciones de capacidad adecuadas, permitiendo a los suscriptores y superiores crear formularios en el sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c0f17d83-6199-4676-90ec-4fba1e7fcf0f/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2538",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T07:17:00.537",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll. Performing a manipulation results in uncontrolled search path. Attacking locally is a requirement. The attack's complexity is rated as high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Afectada es una función desconocida en la biblioteca Msimg32.dll. Realizar una manipulación resulta en una ruta de búsqueda incontrolada. Atacar localmente es un requisito. La complejidad del ataque se califica como alta. La explotabilidad se dice que es difícil. El proveedor fue contactado temprano sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        }, {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cyber-Wo0dy/report/blob/main/notepad2/4.2.25/notepad2_dll_hijacking.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346126",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346126",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749345",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2542",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T07:17:00.803",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\\Program Files\\Total VPN\\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. This attack is characterized by high complexity. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Total VPN 0.5.29.0 en Windows. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo C:\\Program Files\\Total VPN\\win-service.exe. Ejecutar una manipulación puede llevar a una ruta de búsqueda sin comillas. Es posible lanzar el ataque en el host local. Este ataque se caracteriza por alta complejidad. La explotación parece ser difícil. Se contactó al proveedor temprano sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        }, {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cyber-Wo0dy/report/blob/main/totalvpn/0.5.29.0/totalvpn_unquoted_service_path.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346127",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346127",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749365",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2543",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T07:17:01.007",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file inc/mod/pages.php of the component Password Change Handler. The manipulation of the argument Password leads to unverified password change. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en vichan-devel vichan hasta 5.1.5. Esta vulnerabilidad afecta código desconocido del archivo inc/mod/pages.php del componente Password Change Handler. La manipulación del argumento Password conduce a un cambio de contraseña no verificado. El ataque puede iniciarse de forma remota. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        }, {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lakshayyverma/CVE-Discovery/blob/main/vichan.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346152",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346152",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749716",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2544",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T08:16:05.287",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en yued-fe LuLu UI hasta la versión 3.0.0. Este problema afecta a la función child_process.exec del archivo run.js. La manipulación resulta en inyección de comandos del sistema operativo. El ataque puede lanzarse remotamente. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lakshayyverma/CVE-Discovery/blob/main/lulu.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346153",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346153",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749722",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2545",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T08:16:05.587",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketSearch. This manipulation of the argument Profile causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en LigeroSmart hasta 6.1.26. Afectada es una función desconocida del archivo /otrs/index.pl?Action=AgentTicketSearch. Esta manipulación del argumento Profile causa cross-site scripting. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposición del público y podría ser usado para ataques. El proyecto fue informado del problema tempranamente a través de un informe de problema pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ligerosmart:ligerosmart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.26",
            "matchCriteriaId" : "A6446F8A-7F90-4333-A60D-2CAAC185002A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LigeroSmart/ligerosmart/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/282",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/282#issue-3879165194",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346154",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346154",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749758",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2546",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T09:16:08.437",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument SortBy leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en LigeroSmart hasta la versión 6.1.26. El elemento afectado es una función desconocida del archivo /otrs/index.pl. Dicha manipulación del argumento SortBy conduce a cross-site scripting. El ataque puede ser lanzado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ligerosmart:ligerosmart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.26",
            "matchCriteriaId" : "A6446F8A-7F90-4333-A60D-2CAAC185002A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LigeroSmart/ligerosmart/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/283#issue-3879199951",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346155",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346155",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749784",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2547",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T09:16:08.660",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function AgentDashboard of the file /otrs/index.pl. Performing a manipulation of the argument Subaction results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en LigeroSmart hasta 6.1.26. El elemento afectado es la función AgentDashboard del archivo /otrs/index.pl. Realizar una manipulación del argumento Subaction resulta en cross site scripting. La explotación remota del ataque es posible. El exploit ahora es público y puede ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ligerosmart:ligerosmart:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.26",
            "matchCriteriaId" : "A6446F8A-7F90-4333-A60D-2CAAC185002A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LigeroSmart/ligerosmart/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/284",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LigeroSmart/ligerosmart/issues/284#issue-3879280231",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749788",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2548",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T09:16:08.853",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub_40F820 of the file rc. Executing a manipulation of the argument upnp_waniface/upnp_ssdp_interval/upnp_max_age can lead to command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en WAYOS FBM-220G 24.10.19. Esto afecta a la función sub_40F820 del archivo rc. La ejecución de una manipulación del argumento upnp_waniface/upnp_ssdp_interval/upnp_max_age puede conducir a una inyección de comandos. El ataque puede ejecutarse de forma remota. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/wayos/wayos.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346157",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346157",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749802",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/wayos/wayos.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0997",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-02-16T10:16:07.793",
      "lastModified" : "2026-02-18T20:23:34.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrary channels via crafted API requests.. Mattermost Advisory ID: MMSA-2025-00558"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Mattermost 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 y las versiones del plugin de Mattermost Zoom &lt;=1.11.0 no validan al usuario autenticado al procesar {{/plugins/zoom/api/v1/channel-preference}}, lo que permite a cualquier usuario con sesión iniciada cambiar las restricciones de las reuniones de Zoom para canales arbitrarios a través de solicitudes de API manipuladas. ID de aviso de Mattermost: MMSA-2025-00558."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.0",
            "versionEndExcluding" : "10.11.10",
            "matchCriteriaId" : "92B0F8BD-06A1-4B39-95C5-4FB5A195F1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndExcluding" : "11.1.3",
            "matchCriteriaId" : "F28AD5DC-E336-4DD3-BC31-AC924190433C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.2",
            "matchCriteriaId" : "D98EAFB2-8055-4893-835B-30A99ED97892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:zoom:*:*:*:*:*:mattermost:*:*",
            "versionEndIncluding" : "1.11.0",
            "matchCriteriaId" : "795B314D-69ED-4BB3-9F72-C9441FFA3852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0998",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-02-16T10:16:07.983",
      "lastModified" : "2026-02-18T20:22:51.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via direct API calls with manipulated user IDs and post data.. Mattermost Advisory ID: MMSA-2025-00534"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Mattermost 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 y las versiones del plugin de Mattermost Zoom &lt;=1.11.0 no validan la identidad del usuario y la propiedad de la publicación en el endpoint {{/api/v1/askPMI}}, lo que permite a usuarios no autorizados iniciar reuniones de Zoom como cualquier usuario y sobrescribir publicaciones arbitrarias a través de llamadas directas a la API con ID de usuario y datos de publicación manipulados. ID de aviso de Mattermost: MMSA-2025-00534"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.0",
            "versionEndExcluding" : "10.11.10",
            "matchCriteriaId" : "92B0F8BD-06A1-4B39-95C5-4FB5A195F1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndExcluding" : "11.1.3",
            "matchCriteriaId" : "F28AD5DC-E336-4DD3-BC31-AC924190433C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.2",
            "matchCriteriaId" : "D98EAFB2-8055-4893-835B-30A99ED97892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:zoom:*:*:*:*:*:mattermost:*:*",
            "versionEndIncluding" : "1.11.0",
            "matchCriteriaId" : "795B314D-69ED-4BB3-9F72-C9441FFA3852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0999",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-02-16T10:16:08.140",
      "lastModified" : "2026-02-18T20:20:07.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-only login requirements via userID-based authentication. Mattermost Advisory ID: MMSA-2025-00548"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Mattermost 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 no validan correctamente las restricciones del método de inicio de sesión, lo que permite a un usuario autenticado eludir los requisitos de inicio de sesión solo por SSO mediante autenticación basada en ID de usuario. ID de aviso de Mattermost: MMSA-2025-00548"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-303"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.0",
            "versionEndExcluding" : "10.11.10",
            "matchCriteriaId" : "92B0F8BD-06A1-4B39-95C5-4FB5A195F1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndExcluding" : "11.1.3",
            "matchCriteriaId" : "F28AD5DC-E336-4DD3-BC31-AC924190433C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.2",
            "matchCriteriaId" : "D98EAFB2-8055-4893-835B-30A99ED97892"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2549",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T10:16:08.403",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1. This impacts an unknown function of the file BookController.java. The manipulation leads to improper access controls. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en zhanghuanhao LibrarySystem ??????? hasta la versión 1.1.1. Esto afecta a una función desconocida del archivo BookController.java. La manipulación conduce a controles de acceso inadecuados. El ataque puede llevarse a cabo remotamente. El exploit ha sido divulgado al público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhanghuanhao/LibrarySystem/issues/32",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/zhanghuanhao/LibrarySystem/issues/32#issue-3879640487",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346158",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346158",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749873",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2550",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T10:16:08.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en EFM iptime A6004MX 14.18.2. Afectada es la función commit_vpncli_file_upload del archivo /cgi/timepro.cgi. La manipulación resulta en carga sin restricciones. El ataque puede ser realizado desde remoto. El exploit ha sido hecho público y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-LX88/cve-new/issues/3",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346159",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346159",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749986",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2577",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-02-16T10:16:08.827",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by default and does not require authentication for incoming connections. An unauthenticated remote attacker with network access to the bridge can connect to the WebSocket server to hijack the WhatsApp session. This allows the attacker to send messages on behalf of the user, intercept all incoming messages and media in real-time, and capture authentication QR codes."
      }, {
        "lang" : "es",
        "value" : "El componente de puente de WhatsApp en Nanobot enlaza el servidor WebSocket a todas las interfaces de red (0.0.0.0) en el puerto 3001 por defecto y no requiere autenticación para las conexiones entrantes. Un atacante remoto no autenticado con acceso de red al puente puede conectarse al servidor WebSocket para secuestrar la sesión de WhatsApp. Esto permite al atacante enviar mensajes en nombre del usuario, interceptar todos los mensajes y medios entrantes en tiempo real, y capturar códigos QR de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HKUDS/nanobot/releases/tag/v0.1.3.post7",
        "source" : "vulnreport@tenable.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2026-09",
        "source" : "vulnreport@tenable.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2415",
      "sourceIdentifier" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
      "published" : "2026-02-16T11:15:56.047",
      "lastModified" : "2026-03-13T12:47:32.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}\n is used in an email template, it will  be replaced with the buyer's \nname for the final email. This mechanism contained two security-relevant\n bugs:\n\n\n\n  *  \nIt was possible to exfiltrate information about the pretix system through specially crafted placeholder names such as {{event.__init__.__code__.co_filename}}.\n This way, an attacker with the ability to control email templates \n(usually every user of the pretix backend) could retrieve sensitive \ninformation from the system configuration, including even database \npasswords or API keys. pretix does include mechanisms to prevent the usage of such \nmalicious placeholders, however due to a mistake in the code, they were \nnot fully effective for the email subject.\n\n\n\n\n  *  \nPlaceholders in subjects and plain text bodies of emails were \nwrongfully evaluated twice. Therefore, if the first evaluation of a \nplaceholder again contains a placeholder, this second placeholder was \nrendered. This allows the rendering of placeholders controlled by the \nticket buyer, and therefore the exploitation of the first issue as a \nticket buyer. Luckily, the only buyer-controlled placeholder available \nin pretix by default (that is not validated in a way that prevents the \nissue) is {invoice_company}, which is very unusual (but not\n impossible) to be contained in an email subject template. In addition \nto broadening the attack surface of the first issue, this could \ntheoretically also leak information about an order to one of the \nattendees within that order. However, we also consider this scenario \nvery unlikely under typical conditions.\n\n\nOut of caution, we recommend that you rotate all passwords and API keys contained in your  pretix.cfg https://docs.pretix.eu/self-hosting/config/  file."
      }, {
        "lang" : "es",
        "value" : "Los correos electrónicos enviados por pretix pueden utilizar marcadores de posición que se llenarán con datos del cliente. Por ejemplo, cuando {name} se usa en una plantilla de correo electrónico, será reemplazado con el nombre del comprador para el correo electrónico final. Este mecanismo contenía dos errores relevantes para la seguridad:\n\n*   Fue posible exfiltrar información sobre el sistema pretix a través de nombres de marcadores de posición especialmente diseñados, como {{event.__init__.__code__.co_filename}}. De esta manera, un atacante con la capacidad de controlar las plantillas de correo electrónico (generalmente cada usuario del backend de pretix) podría recuperar información sensible de la configuración del sistema, incluyendo incluso contraseñas de base de datos o claves API. pretix sí incluye mecanismos para prevenir el uso de tales marcadores de posición maliciosos, sin embargo, debido a un error en el código, no fueron completamente efectivos para el asunto del correo electrónico.\n\n*   Los marcadores de posición en los asuntos y cuerpos de texto plano de los correos electrónicos fueron evaluados erróneamente dos veces. Por lo tanto, si la primera evaluación de un marcador de posición contenía de nuevo un marcador de posición, este segundo marcador de posición era renderizado. Esto permite la renderización de marcadores de posición controlados por el comprador de entradas, y por lo tanto la explotación del primer problema como comprador de entradas. Afortunadamente, el único marcador de posición controlado por el comprador disponible en pretix por defecto (que no está validado de una manera que prevenga el problema) es {invoice_company}, lo cual es muy inusual (pero no imposible) que esté contenido en una plantilla de asunto de correo electrónico. Además de ampliar la superficie de ataque del primer problema, esto podría teóricamente también filtrar información sobre un pedido a uno de los asistentes dentro de ese pedido. Sin embargo, también consideramos este escenario muy improbable bajo condiciones típicas.\n\nPor precaución, recomendamos que rote todas las contraseñas y claves API contenidas en su archivo pretix.cfg https://docs.pretix.eu/self-hosting/config/."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Red",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-627"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretix:pretix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "676E56F1-348F-410C-BFDD-9124BD51E34B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pretix.eu/about/en/blog/20260216-release-2026-1-1/",
        "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2451",
      "sourceIdentifier" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
      "published" : "2026-02-16T11:15:56.290",
      "lastModified" : "2026-03-13T12:39:56.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}\n is used in an email template, it will  be replaced with the buyer's \nname for the final email. This mechanism contained a security-relevant bug:\n\nIt was possible to exfiltrate information about the pretix system through specially crafted placeholder names such as {{event.__init__.__code__.co_filename}}.\n This way, an attacker with the ability to control email templates \n(usually every user of the pretix backend) could retrieve sensitive \ninformation from the system configuration, including even database \npasswords or API keys. pretix does include mechanisms to prevent the usage of such \nmalicious placeholders, however due to a mistake in the code, they were \nnot fully effective for this plugin.\n\nOut of caution, we recommend that you rotate all passwords and API keys contained in your pretix.cfg file."
      }, {
        "lang" : "es",
        "value" : "Los correos electrónicos enviados por pretix pueden utilizar marcadores de posición que se rellenarán con datos del cliente. Por ejemplo, cuando se utiliza {name} en una plantilla de correo electrónico, se reemplazará con el nombre del comprador para el correo electrónico final. Este mecanismo contenía un error de seguridad relevante:\n\nEra posible exfiltrar información sobre el sistema pretix a través de nombres de marcadores de posición especialmente diseñados, como {{event.__init__.__code__.co_filename}}. De esta manera, un atacante con la capacidad de controlar plantillas de correo electrónico (normalmente, cualquier usuario del backend de pretix) podría recuperar información sensible de la configuración del sistema, incluyendo incluso contraseñas de base de datos o claves API. pretix sí incluye mecanismos para evitar el uso de tales marcadores de posición maliciosos; sin embargo, debido a un error en el código, no fueron completamente efectivos para este plugin.\n\nPor precaución, recomendamos que rote todas las contraseñas y claves API contenidas en su archivo pretix.cfg."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Red",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-627"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretix:double_opt_in_step:*:*:*:*:*:pretix:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "D4C3DD73-2354-492A-91D8-52574EA6E26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretix:pretix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "676E56F1-348F-410C-BFDD-9124BD51E34B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pretix.eu/about/en/blog/20260216-release-2026-1-1/",
        "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2452",
      "sourceIdentifier" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
      "published" : "2026-02-16T11:15:56.420",
      "lastModified" : "2026-03-12T17:29:01.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}\n is used in an email template, it will  be replaced with the buyer's \nname for the final email. This mechanism contained a security-relevant bug:\n\nIt was possible to exfiltrate information about the pretix system through specially crafted placeholder names such as {{event.__init__.__code__.co_filename}}.\n This way, an attacker with the ability to control email templates \n(usually every user of the pretix backend) could retrieve sensitive \ninformation from the system configuration, including even database \npasswords or API keys. pretix does include mechanisms to prevent the usage of such \nmalicious placeholders, however due to a mistake in the code, they were \nnot fully effective for this plugin.\n\nOut of caution, we recommend that you rotate all passwords and API keys contained in your  pretix.cfg https://docs.pretix.eu/self-hosting/config/  file."
      }, {
        "lang" : "es",
        "value" : "Los correos electrónicos enviados por pretix pueden utilizar marcadores de posición que se rellenarán con datos del cliente. Por ejemplo, cuando se utiliza {name} en una plantilla de correo electrónico, se reemplazará con el nombre del comprador para el correo electrónico final. Este mecanismo contenía un error de seguridad relevante:\n\nEra posible exfiltrar información sobre el sistema pretix a través de nombres de marcadores de posición especialmente diseñados, como {{event.__init__.__code__.co_filename}}. De esta manera, un atacante con la capacidad de controlar plantillas de correo electrónico (normalmente cualquier usuario del backend de pretix) podría recuperar información sensible de la configuración del sistema, incluyendo incluso contraseñas de base de datos o claves API. pretix sí incluye mecanismos para evitar el uso de tales marcadores de posición maliciosos, sin embargo, debido a un error en el código, no fueron completamente efectivos para este plugin.\n\nPor precaución, recomendamos que rote todas las contraseñas y claves API contenidas en su archivo pretix.cfg https://docs.pretix.eu/self-hosting/config/."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Red",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-627"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretix:newsletters:*:*:*:*:*:pretix:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "D9C0752B-D6CB-429E-BB2A-F0B9381AE7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretix:newsletters:2.0.0:*:*:*:*:pretix:*:*",
            "matchCriteriaId" : "B4F6FD9A-DA1C-4943-82E8-F4B657FAEDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretix:pretix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "676E56F1-348F-410C-BFDD-9124BD51E34B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pretix.eu/about/en/blog/20260216-release-2026-1-1/",
        "source" : "655498c3-6ec5-4f0b-aea6-853b334d05a6",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2551",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T11:15:56.550",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in ZenTao up to 21.7.8. Affected by this vulnerability is the function delete of the file editor/control.php of the component Backup Handler. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en ZenTao hasta la versión 21.7.8. Afectada por esta vulnerabilidad es la función delete del archivo editor/control.php del componente Backup Handler. Esta manipulación del argumento fileName causa salto de ruta. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zentao:zentao:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.7.8",
            "matchCriteriaId" : "BCE67271-2680-4919-A9B7-233015FBB0A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346160",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346160",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749983",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2552",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T12:16:22.277",
      "lastModified" : "2026-02-20T18:00:00.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component Committer. Such manipulation of the argument filePath leads to path traversal. Upgrading to version 21.7.9 can resolve this issue. The affected component should be upgraded."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en ZenTao hasta la versión 21.7.8. Afecta a la función delete del archivo editor/control.PHP del componente Committer. Dicha manipulación del argumento filePath conduce a un salto de ruta. La actualización a la versión 21.7.9 puede resolver este problema. El componente afectado debe ser actualizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zentao:zentao:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.7.8",
            "matchCriteriaId" : "BCE67271-2680-4919-A9B7-233015FBB0A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/11#issuecomment-3876278793",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346161",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346161",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ez-lbz/ez-lbz.github.io/issues/11",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2553",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T12:16:22.480",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en tushar-2223 Hotel-Management-System hasta bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. Esto afecta una parte desconocida del archivo /home.PHP del componente HTTP POST Request Handler. Realizar una manipulación del argumento Name/Email resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido publicado al público y puede ser usado para ataques. Entrega continua con lanzamientos continuos es utilizada por este producto. Por lo tanto, no hay detalles de versión de lanzamientos afectados ni actualizados disponibles. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Stolichnayer/SQLi-Hotel-Management-System",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Stolichnayer/SQLi-Hotel-Management-System?tab=readme-ov-file#%EF%B8%8F-steps-to-reproduce",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346162",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346162",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.750080",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2555",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T12:16:22.667",
      "lastModified" : "2026-02-18T21:43:53.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/llm/controller/AiragKnowledgeController.java of the component Retrieval-Augmented Generation. Executing a manipulation can lead to deserialization. The attack can be launched remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una debilidad ha sido identificada en JeecgBoot 3.9.1. Esta vulnerabilidad afecta la función importDocumentFromZip del archivo org/jeecg/modules/airag/llm/controller/AiragKnowledgeController.java del componente Generación Aumentada por Recuperación. Ejecutar una manipulación puede conducir a la deserialización. El ataque puede ser lanzado remotamente. Ataques de esta naturaleza son altamente complejos. Se afirma que la explotabilidad es difícil. El proyecto fue informado del problema tempranamente a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9801069C-5C0E-4DE8-8CD4-A9589D1227A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jeecgboot/JeecgBoot/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jeecgboot/JeecgBoot/issues/9335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750232",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jeecgboot/JeecgBoot/issues/9335",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1046",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-02-16T13:16:00.793",
      "lastModified" : "2026-03-23T17:27:17.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577"
      }, {
        "lang" : "es",
        "value" : "Las versiones &lt;=6.0 6.2.0 5.2.13.0 de la Aplicación de escritorio Mattermost no validan los enlaces de ayuda, lo que permite que un servidor Mattermost malicioso ejecute ejecutables arbitrarios en el sistema de un usuario al hacer clic el usuario en ciertos elementos del menú de Ayuda. ID de aviso de Mattermost: MMSA-2026-00577"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-939"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13.2",
            "versionEndExcluding" : "5.13.3",
            "matchCriteriaId" : "AC95A24C-5114-4A60-A792-8785203293C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "6A567559-94D1-4F5E-9D34-1E8A441B6657"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2556",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T13:16:00.940",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in cskefu up to 8.0.1. This issue affects some unknown processing of the file com/cskefu/cc/controller/resource/MediaController.java of the component Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en cskefu hasta 8.0.1. Este problema afecta algún procesamiento desconocido del archivo com/cskefu/cc/controller/resource/MediaController.java del componente Endpoint. La manipulación del argumento url conduce a falsificación de petición del lado del servidor. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cskefu:cskefu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "084002DF-72E7-48FC-9C9A-2107773906CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/Vrs6dRx79ondtCxldz2cvupdnMe",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346164",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346164",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750708",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1333",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2026-02-16T14:16:18.003",
      "lastModified" : "2026-02-26T18:15:50.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de variable no inicializada que afecta el procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versión SOLIDWORKS Desktop 2025 hasta la versión SOLIDWORKS Desktop 2026 podría permitir a un atacante ejecutar código arbitrario al abrir un archivo EPRT especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-457"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFD2148-C6C4-4CF2-9F55-B2CA6718764E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*",
            "matchCriteriaId" : "D287DF59-F58D-4E20-94CE-AC215210869E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEE42D4-395E-4123-A6C3-6FB629E04DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*",
            "matchCriteriaId" : "A83323FC-7F94-474C-A88D-9D7EBD2245CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*",
            "matchCriteriaId" : "78B93E6F-8D54-48E7-9316-BCCCE84CC4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*",
            "matchCriteriaId" : "41D92A14-FC5A-458D-9905-96ED8B1AF37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757A6BA-3930-429F-9A74-9CEA0A38BFDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "593E69C3-57C6-498E-ABB8-4DA5C511E500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1333",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1334",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2026-02-16T14:16:18.160",
      "lastModified" : "2026-02-26T18:16:03.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lectura fuera de límites que afecta el procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versión SOLIDWORKS Desktop 2025 hasta la versión SOLIDWORKS Desktop 2026 podría permitir a un atacante ejecutar código arbitrario al abrir un archivo EPRT especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFD2148-C6C4-4CF2-9F55-B2CA6718764E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*",
            "matchCriteriaId" : "D287DF59-F58D-4E20-94CE-AC215210869E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEE42D4-395E-4123-A6C3-6FB629E04DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*",
            "matchCriteriaId" : "A83323FC-7F94-474C-A88D-9D7EBD2245CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*",
            "matchCriteriaId" : "78B93E6F-8D54-48E7-9316-BCCCE84CC4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*",
            "matchCriteriaId" : "41D92A14-FC5A-458D-9905-96ED8B1AF37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757A6BA-3930-429F-9A74-9CEA0A38BFDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "593E69C3-57C6-498E-ABB8-4DA5C511E500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1334",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1335",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2026-02-16T14:16:18.303",
      "lastModified" : "2026-02-26T18:15:57.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de límites que afecta al procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versión SOLIDWORKS Desktop 2025 hasta la versión SOLIDWORKS Desktop 2026 podría permitir a un atacante ejecutar código arbitrario al abrir un archivo EPRT especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFD2148-C6C4-4CF2-9F55-B2CA6718764E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*",
            "matchCriteriaId" : "D287DF59-F58D-4E20-94CE-AC215210869E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEE42D4-395E-4123-A6C3-6FB629E04DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*",
            "matchCriteriaId" : "A83323FC-7F94-474C-A88D-9D7EBD2245CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*",
            "matchCriteriaId" : "78B93E6F-8D54-48E7-9316-BCCCE84CC4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*",
            "matchCriteriaId" : "41D92A14-FC5A-458D-9905-96ED8B1AF37F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757A6BA-3930-429F-9A74-9CEA0A38BFDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "593E69C3-57C6-498E-ABB8-4DA5C511E500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1335",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2557",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T14:16:18.440",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in cskefu up to 8.0.1. Impacted is the function Upload of the file com/cskefu/cc/controller/resource/MediaController.java of the component File Upload. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en cskefu hasta 8.0.1. Afectada es la función Upload del archivo com/cskefu/cc/controller/resource/MediaController.java del componente Carga de Archivos. La manipulación resulta en cross site scripting. El ataque puede ser lanzado remotamente. El exploit ahora es público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cskefu:cskefu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.1",
            "matchCriteriaId" : "084002DF-72E7-48FC-9C9A-2107773906CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/ZqvtdTniToQMw0xZL94cTpuTnac",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346165",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346165",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2558",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T14:16:18.650",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in GeekAI up to 4.2.4. The affected element is the function Download of the file api/handler/net_handler.go. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en GeekAI hasta 4.2.4. El elemento afectado es la función Download del archivo API/handler/net_handler.go. Esta manipulación del argumento url causa falsificación de petición del lado del servidor. Es posible la explotación remota del ataque. El exploit ha sido publicado y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yangjian102621/geekai/issues/256",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/yangjian102621/geekai/issues/256#issue-3888814886",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346166",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346166",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.750730",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2560",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T14:16:18.840",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in kalcaddle kodbox up to 1.64.05. The impacted element is the function run of the file plugins/fileThumb/lib/VideoResize.class.php of the component Media File Preview Plugin. Such manipulation of the argument localFile leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en kalcaddle kodbox hasta la versión 1.64.05. El elemento afectado es la función run del archivo plugins/fileThumb/lib/VideoResize.class.php del componente Media File Preview Plugin. Dicha manipulación del argumento localFile conduce a inyección de comandos del sistema operativo. El ataque puede ser ejecutado de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/DReazer/d7380aca4ade9fd73b688633901367ed",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gist.github.com/DReazer/d7380aca4ade9fd73b688633901367ed#proof-of-concept-poc",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346167",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346167",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.750944",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2032",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-16T15:18:34.620",
      "lastModified" : "2026-04-13T15:17:19.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1."
      }, {
        "lang" : "es",
        "value" : "Scripts maliciosos que interrumpen la carga de la página de nueva pestaña podrían causar desincronización entre la barra de direcciones y el contenido de la página, permitiendo al atacante suplantar HTML arbitrario bajo un dominio de confianza. Esta vulnerabilidad afecta a Firefox para iOS &lt; 147.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "147.2.1",
            "matchCriteriaId" : "68B7231D-8AED-4E0F-96C6-28773D3853B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2012152",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2447",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-16T15:18:34.740",
      "lastModified" : "2026-04-13T15:17:19.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el heap en libvpx. Esta vulnerabilidad afecta a Firefox &lt; 147.0.4, Firefox ESR &lt; 140.7.1, Firefox ESR &lt; 115.32.1, Thunderbird &lt; 140.7.2, y Thunderbird &lt; 147.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.32.1",
            "matchCriteriaId" : "10DDACEE-1B24-4550-BDBA-E7328511E4F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "147.0.4",
            "matchCriteriaId" : "8207D55C-A047-4625-A6F1-85C31A996EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "116.0",
            "versionEndExcluding" : "140.7.1",
            "matchCriteriaId" : "143B897A-3086-46E7-801F-69F8523CB94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "140.7.2",
            "matchCriteriaId" : "1D43EC07-2D22-4E0C-89B6-1D7DC685B48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "141.0",
            "versionEndExcluding" : "147.0.2",
            "matchCriteriaId" : "5CCE2C85-FB91-46E3-B6D3-B2E38760776E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014390",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2561",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T15:18:34.840",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This affects the function web_get_ddns_uptime of the file /jdcapi of the component jdcweb_rpc. Performing a manipulation results in Remote Privilege Escalation. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en JingDong JD Cloud Box AX6600 hasta la versión 4.5.1.r4533. Esto afecta a la función web_get_ddns_uptime del archivo /jdcapi del componente jdcweb_rpc. Realizar una manipulación resulta en una escalada de privilegios remota. El ataque es posible de ser llevado a cabo de forma remota. El exploit ha sido hecho público y podría ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jdcloud:ax6600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.1.r4533",
            "matchCriteriaId" : "AAD2DA42-EBF5-46D3-8D2C-C1E1C9BFE345"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jdcloud:ax6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C4FCF2-BA40-43F2-ADB1-C8A58052600B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.feishu.cn/wiki/URLywnBj2i2dpBk3dcQcWqFZnSK",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346168",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346168",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2562",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T15:18:35.020",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast_streen of the file /jdcapi of the component jdcweb_rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en JingDong JD Cloud Box AX6600 hasta la versión 4.5.1.r4533. Esto afecta a la función cast_streen del archivo /jdcapi del componente jdcweb_rpc. La ejecución de una manipulación del argumento File puede conducir a una Escalada de Privilegios Remota. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jdcloud:ax6600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.1.r4533",
            "matchCriteriaId" : "AAD2DA42-EBF5-46D3-8D2C-C1E1C9BFE345"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jdcloud:ax6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C4FCF2-BA40-43F2-ADB1-C8A58052600B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.feishu.cn/wiki/Umb6w4PasizunKkagYschZP1nff",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346169",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346169",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1783",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-16T16:19:17.880",
      "lastModified" : "2026-02-16T16:19:17.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2563",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T16:19:18.070",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the function set_stcreenen_deabled_status/get_status of the file /f/service/controlDevice of the component jdcapp_rpc. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en JingDong JD Cloud Box AX6600 hasta 4.5.1.r4533. Afectada es la función set_stcreenen_deabled_status/get_status del archivo /f/service/controlDevice del componente jdcapp_rpc. La manipulación conduce a una Escalada de Privilegios Remota. Es posible iniciar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jdcloud:ax6600_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.1.r4533",
            "matchCriteriaId" : "AAD2DA42-EBF5-46D3-8D2C-C1E1C9BFE345"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jdcloud:ax6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6C4FCF2-BA40-43F2-ADB1-C8A58052600B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.feishu.cn/wiki/T3pjwxZtYiU4Gfkl6iUc3CzVnRe",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346170",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346170",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750987",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.750992",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-16T17:18:08.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmarterTools SmarterMail before 9526 allows XSS via MAPI requests."
      }, {
        "lang" : "es",
        "value" : "SmarterTools SmarterMail antes de 9526 permite XSS a través de solicitudes MAPI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.smartertools.com/smartermail/release-notes#9526",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.smartertools.com/smartermail/release-notes/current",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2026/Feb/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2101",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2026-02-16T17:18:09.003",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) reflejado que afecta a ENOVIAvpm Web Access desde ENOVIAvpm Versión 1 Release 16 hasta ENOVIAvpm Versión 1 Release 19 permite a un atacante ejecutar código de script arbitrario en la sesión del navegador del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-2101",
        "source" : "3DS.Information-Security@3ds.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2564",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T17:18:09.150",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /OutsideCmd. La manipulación resulta en recuperación de contraseña débil. Es posible lanzar el ataque remotamente. Ataques de esta naturaleza son altamente complejos. La explotación parece ser difícil. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346171",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346171",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.741776",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2565",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T17:18:09.360",
      "lastModified" : "2026-02-18T19:42:27.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Wavlink WL-NU516U1 20251208. Affected by this issue is the function sub_40785C of the file /cgi-bin/adm.cgi. This manipulation of the argument time_zone causes stack-based buffer overflow. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation is known to be difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Wavlink WL-NU516U1 20251208. Afectada por este problema es la función sub_40785C del archivo /cgi-bin/adm.cgi. Esta manipulación del argumento time_zone causa desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El ataque se considera que tiene alta complejidad. La explotación se sabe que es difícil. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:M/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.2,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-12-08",
            "matchCriteriaId" : "422DDC2F-7D66-4EA7-BD8A-FE781A94898D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/time_zone.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346172",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346172",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751133",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2566",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T18:19:45.017",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260. This affects the function sub_406194 of the file /cgi-bin/adm.cgi. Such manipulation of the argument firmware_url leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Wavlink WL-NU516U1 hasta 130/260. Esto afecta la función sub_406194 del archivo /cgi-bin/adm.cgi. Dicha manipulación del argumento firmware_url conduce a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/firmware_url.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346173",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346173",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.751908",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2567",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-16T18:19:45.217",
      "lastModified" : "2026-02-18T19:41:03.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub_401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Wavlink WL-NU516U1 20251208. Esta vulnerabilidad afecta la función sub_401218 del archivo /cgi-bin/nas.cgi. Realizar una manipulación del argumento User1Passwd resulta en un desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-12-08",
            "matchCriteriaId" : "422DDC2F-7D66-4EA7-BD8A-FE781A94898D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/nas.cgi_User1Passwd.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346174",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346174",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752016",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2001",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-16T20:19:36.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'Notice::install_activate_plugin' function in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the affected site's server which may make remote code execution possible."
      }, {
        "lang" : "es",
        "value" : "El plugin WowRevenue para WordPress es vulnerable a la instalación no autorizada de plugins debido a una comprobación de capacidad faltante en la función 'Notice::install_activate_plugin' en todas las versiones hasta la 2.1.3, inclusive. Esto permite a atacantes autenticados, con acceso de nivel de suscriptor y superior, instalar plugins arbitrarios en el servidor del sitio afectado, lo que podría posibilitar la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/revenue/tags/2.1.3/includes/notice/class-notice.php#L909",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6d881f00-5985-45d5-9aab-d143a010d739?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2474",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-02-16T21:22:18.107",
      "lastModified" : "2026-03-04T02:27:15.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom().\n\nThe function does not validate that the length parameter is non-negative. If a negative value (e.g. -1) is supplied, the expression length + 1u causes an integer wraparound, resulting in a zero-byte allocation. The subsequent call to getrandom(data, length, GRND_NONBLOCK) passes the original negative value, which is implicitly converted to a large unsigned value (typically SIZE_MAX). This can result in writes beyond the allocated buffer, leading to heap memory corruption and application crash (denial of service).\n\nIn common usage, the length argument is typically hardcoded by the caller, which reduces the likelihood of attacker-controlled exploitation. Applications that pass untrusted input to this parameter may be affected."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crypt::URandom de 0.41 anteriores a 0.55 para Perl son vulnerables a un desbordamiento de búfer de montón en la función XS crypt_urandom_getrandom().\n\nLa función no valida que el parámetro de longitud no sea negativo. Si se proporciona un valor negativo (p. ej., -1), la expresión length + 1u causa un desbordamiento de enteros, lo que resulta en una asignación de cero bytes. La llamada subsiguiente a getrandom(data, length, GRND_NONBLOCK) pasa el valor negativo original, que se convierte implícitamente a un valor sin signo grande (típicamente SIZE_MAX). Esto puede resultar en escrituras más allá del búfer asignado, lo que lleva a corrupción de memoria en el montón y a un fallo de la aplicación (denegación de servicio).\n\nEn el uso común, el argumento de longitud suele estar codificado de forma rígida por el llamador, lo que reduce la probabilidad de explotación controlada por el atacante. Las aplicaciones que pasan entrada no confiable a este parámetro pueden verse afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ddick:crypt\\:\\:urandom:*:*:*:*:*:perl:*:*",
            "versionStartIncluding" : "0.41",
            "versionEndExcluding" : "0.55",
            "matchCriteriaId" : "4FFA138E-FEF2-445E-A513-9C69AEFC03CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://metacpan.org/release/DDICK/Crypt-URandom-0.54/source/URandom.xs#L35-79",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://metacpan.org/release/DDICK/Crypt-URandom-0.55/source/Changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes", "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2439",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-02-16T22:22:41.470",
      "lastModified" : "2026-03-10T18:12:46.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generate_session_id function in Concierge::Sessions::Base defaults to using the uuidgen command to generate a UUID, with a fallback to using Perl's built-in rand function. Neither of these methods are secure, and attackers are able to guess session_ids that can grant them access to systems. Specifically,\n\n  *  There is no warning when uuidgen fails. The software can be quietly using the fallback rand() function with no warnings if the command fails for any reason.\n  *  The uuidgen command will generate a time-based UUID if the system does not have a high-quality random number source, because the call does not explicitly specify the --random option. Note that the system time is shared in HTTP responses.\n  *  UUIDs are identifiers whose mere possession grants access, as per RFC 9562.\n  *  The output of the built-in rand() function is predictable and unsuitable for security applications."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Concierge::Sessions desde la 0.8.1 anteriores a la 0.8.5 para Perl generan identificadores de sesión inseguros. La función generate_session_id en Concierge::Sessions::Base por defecto utiliza el comando uuidgen para generar un UUID, con un mecanismo de respaldo que usa la función rand incorporada de Perl. Ninguno de estos métodos es seguro, y los atacantes pueden adivinar los identificadores de sesión que pueden otorgarles acceso a los sistemas. Específicamente,\n\n  * No hay ninguna advertencia cuando uuidgen falla. El software puede estar utilizando silenciosamente la función de respaldo rand() sin advertencias si el comando falla por cualquier motivo.\n  * El comando uuidgen generará un UUID basado en el tiempo si el sistema no tiene una fuente de números aleatorios de alta calidad, porque la llamada no especifica explícitamente la opción --random. Tenga en cuenta que la hora del sistema se comparte en las respuestas HTTP.\n  * Los UUID son identificadores cuya mera posesión otorga acceso, según la RFC 9562.\n  * La salida de la función rand() incorporada es predecible e inadecuada para aplicaciones de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        }, {
          "lang" : "en",
          "value" : "CWE-340"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bva:concierge\\:\\:sessions:*:*:*:*:*:perl:*:*",
            "versionStartIncluding" : "0.8.1",
            "versionEndExcluding" : "0.8.5",
            "matchCriteriaId" : "CDB9F71D-07E7-4EF3-8C7A-BF35F9175DB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bwva/Concierge-Sessions/commit/20bb28e92e8fba307c4ff8264701c215be65e73b",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://metacpan.org/release/BVA/Concierge-Sessions-v0.8.4/diff/BVA/Concierge-Sessions-v0.8.5#lib/Concierge/Sessions/Base.pm",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://perldoc.perl.org/5.42.0/functions/rand",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.metacpan.org/docs/guides/random-data-for-security.html",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc9562.html#name-security-considerations",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26220",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-17T03:16:01.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to pickle.loads() without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "La versión 1.1.0 y anteriores de LightLLM contienen una vulnerabilidad de ejecución remota de código no autenticada en el modo de desagregación PD (prefill-decode). El nodo maestro PD expone puntos finales WebSocket que reciben tramas binarias y pasan los datos directamente a pickle.loads() sin autenticación ni validación. Un atacante remoto que puede alcanzar el maestro PD puede enviar una carga útil manipulada para lograr la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/lightllm-pickle-rce/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/ModelTC/LightLLM/issues/1213",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/ModelTC/lightllm/blob/a27dfc88c2144ed51a6e160b6fbe20aad66c8fe0/lightllm/server/api_http.py#L310",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/ModelTC/lightllm/blob/a27dfc88c2144ed51a6e160b6fbe20aad66c8fe0/lightllm/server/api_http.py#L331",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://lightllm-en.readthedocs.io/en/latest/index.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/lightllm-pd-mode-unsafe-deserialization-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2002",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T05:16:17.080",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form_name parameter in all versions up to, and including, 1.50.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The plugin allows admins to give form management permissions to lower level users, which could make this exploitable by users such as subscribers."
      }, {
        "lang" : "es",
        "value" : "El plugin Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro form_name en todas las versiones hasta la 1.50.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. El plugin permite a los administradores otorgar permisos de gestión de formularios a usuarios de nivel inferior, lo que podría hacer que esto sea explotable por usuarios como los suscriptores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3458187%40forminator%2Ftrunk&old=3443402%40forminator%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4ada2055-3c4a-4b6f-8803-2eac8ede5ec7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2592",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T05:16:17.430",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16. This is due to the payment callback handler 'Return_from_ZarinPal_Gateway' failing to validate that the authority token provided in the callback URL belongs to the specific order being marked as paid. This makes it possible for unauthenticated attackers to potentially mark orders as paid without proper payment by reusing a valid authority token from a different transaction of the same amount."
      }, {
        "lang" : "es",
        "value" : "El plugin Zarinpal Gateway para WooCommerce para WordPress es vulnerable a Control de Acceso Inadecuado para la Actualización del Estado de Pago en todas las versiones hasta la 5.0.16 inclusive. Esto se debe a que el manejador de devolución de llamada de pago 'Return_from_ZarinPal_Gateway' no valida que el token de autoridad proporcionado en la URL de devolución de llamada pertenezca al pedido específico que se está marcando como pagado. Esto hace posible que atacantes no autenticados puedan marcar pedidos como pagados sin el pago adecuado al reutilizar un token de autoridad válido de una transacción diferente del mismo importe."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/zarinpal-woocommerce-payment-gateway/trunk/class-wc-gateway-zarinpal.php#L359",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/zarinpal-woocommerce-payment-gateway/trunk/class-wc-gateway-zarinpal.php#L370",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/zarinpal-woocommerce-payment-gateway/trunk/class-wc-gateway-zarinpal.php#L380",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/zarinpal-woocommerce-payment-gateway/trunk/class-wc-gateway-zarinpal.php#L409",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/zarinpal-woocommerce-payment-gateway/trunk/class-wc-gateway-zarinpal.php#L412",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3445917/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e33fcd17-318b-408e-86bf-b4ece46121cc?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1657",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T06:16:18.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including, 4.2.8.4. This is due to the plugin registering the upload_file_media AJAX action as publicly accessible (nopriv-enabled) without implementing any authentication, authorization, or nonce verification despite a nonce being created. This makes it possible for unauthenticated attackers to upload image files to the WordPress uploads directory and create Media Library attachments via the ep_upload_file_media endpoint."
      }, {
        "lang" : "es",
        "value" : "El plugin EventPrime para WordPress es vulnerable a la carga no autorizada de archivos de imagen en todas las versiones hasta la 4.2.8.4, inclusive. Esto se debe a que el plugin registra la acción AJAX upload_file_media como públicamente accesible (con nopriv habilitado) sin implementar ninguna autenticación, autorización o verificación de nonce a pesar de que se crea un nonce. Esto hace posible que atacantes no autenticados carguen archivos de imagen al directorio de cargas de WordPress y creen adjuntos en la Biblioteca de Medios a través del endpoint ep_upload_file_media."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/tags/4.2.8.1/includes/class-ep-ajax.php#L1659",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/tags/4.2.8.1/includes/class-eventprime-event-calendar-management.php#L557",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/trunk/includes/class-ep-ajax.php#L1659",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/trunk/includes/class-eventprime-event-calendar-management.php#L557",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3455239%40eventprime-event-calendar-management%2Ftrunk&old=3452796%40eventprime-event-calendar-management%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/42aa82ff-0d37-4040-b8fc-84d29534a4b7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0829",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-17T07:16:31.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the site without any security checks. This lets attackers use the WordPress site as an open relay for spam or phishing emails to anyone. Attackers can also guess file IDs to access and share uploaded files without permission, exposing sensitive information."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Frontend File Manager Plugin hasta la versión 23.5 permite a usuarios no autenticados enviar correos electrónicos a través del sitio sin ninguna verificación de seguridad. Esto permite a los atacantes usar el sitio de WordPress como un relé abierto para correo no deseado o correos electrónicos de phishing a cualquier persona. Los atacantes también pueden adivinar IDs de archivos para acceder y compartir archivos subidos sin permiso, exponiendo información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/57d62cea-cfb8-4421-a209-e64a015ad225/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1216",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T10:15:57.757",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSS Aggregator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'template' parameter in all versions up to, and including, 5.0.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin RSS Aggregator para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'template' en todas las versiones hasta la 5.0.10, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en atributos proporcionados por el usuario. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar con éxito a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/tags/5.0.10/core/src/Store/DisplaysStore.php#L106",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/core/src/Store/DisplaysStore.php#L106",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3439384%40wp-rss-aggregator%2Ftrunk&old=3421137%40wp-rss-aggregator%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/47a10dd4-515c-42d9-82ea-c84f8f7574c5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25903",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-17T10:15:57.950",
      "lastModified" : "2026-03-30T15:20:58.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components that have specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges required to add the annotated component to the flow configuration, but framework authorization did not check restricted status when updating a component previously added. The missing authorization requires a more privileged user to add a restricted component to the flow configuration, but permits a less privileged user to make property configuration changes. Apache NiFi installations that do not implement different levels of authorization for Restricted components are not subject to this vulnerability because the framework enforces write permissions as the security boundary. Upgrading to Apache NiFi 2.8.0 is the recommended mitigation."
      }, {
        "lang" : "es",
        "value" : "Apache NiFi 1.1.0 hasta 2.7.2 carecen de autorización al actualizar propiedades de configuración en componentes de extensión que tienen Permisos Requeridos específicos basados en la anotación Restricted. La anotación Restricted indica privilegios adicionales requeridos para añadir el componente anotado a la configuración del flujo, pero la autorización del framework no verificó el estado restringido al actualizar un componente añadido previamente. La autorización faltante requiere que un usuario más privilegiado añada un componente restringido a la configuración del flujo, pero permite a un usuario menos privilegiado realizar cambios en la configuración de propiedades. Las instalaciones de Apache NiFi que no implementan diferentes niveles de autorización para componentes Restricted no están sujetas a esta vulnerabilidad porque el framework impone permisos de escritura como el límite de seguridad. Actualizar a Apache NiFi 2.8.0 es la mitigación recomendada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:I/V:C/RE:M/U:Amber",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "IRRECOVERABLE",
            "valueDensity" : "CONCENTRATED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "2.8.0",
            "matchCriteriaId" : "B9B62893-9A7C-4499-8515-12D3617D09C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/jf6bkt9sk6xvshy8xyxv3vtlxd340345",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2247",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-17T12:16:15.443",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability (SQLi) in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section from the mobile application.\n\nIn the URL of the generated PDF, the session token used does not expire, so it remains valid for days after its generation, and unusual characters can be entered after the ‘id_alu’ parameter, resulting in two types of SQLi: boolean-based blind and time-based blind. Exploiting this vulnerability could allow an attacker to access confidential information in the database."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL (SQLi) en Clicldeu SaaS, específicamente en la generación de informes, que ocurre cuando un atacante remoto previamente autenticado ejecuta una carga útil maliciosa en la URL generada después de descargar el boletín de calificaciones del estudiante en la sección 'Day-to-day' desde la aplicación móvil.\n\nEn la URL del PDF generado, el token de sesión utilizado no caduca, por lo que permanece válido durante días después de su generación, y se pueden introducir caracteres inusuales después del parámetro 'id_alu', lo que resulta en dos tipos de SQLi: ciego basado en booleanos y ciego basado en tiempo. Explotar esta vulnerabilidad podría permitir a un atacante acceder a información confidencial en la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-clickedus-saas-platform",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2608",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T12:16:15.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action."
      }, {
        "lang" : "es",
        "value" : "El plugin Kadence Blocks — Page Builder Toolkit para el Editor Gutenberg para WordPress es vulnerable a acceso no autorizado debido a una comprobación de capacidad faltante en una función en todas las versiones hasta la 3.5.32, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, realicen una acción no autorizada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?old_path=/kadence-blocks/tags/3.5.32&new_path=/kadence-blocks/tags/3.6.0&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://vdp.patchstack.com/database/wordpress/plugin/kadence-blocks/vulnerability/wordpress-gutenberg-blocks-with-ai-by-kadence-wp-plugin-3-5-32-incorrect-authorization-to-authenticated-contributor-post-publication-vulnerability",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/05dd1686-76e3-498b-80b8-c4befc545fc8?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2615",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T13:16:17.113",
      "lastModified" : "2026-02-18T19:36:44.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Wavlink WL-NU516U1 up to 20251208. The affected element is the function singlePortForwardDelete of the file /cgi-bin/firewall.cgi. Executing a manipulation of the argument del_flag can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Wavlink WL-NU516U1 hasta 20251208. El elemento afectado es la función singlePortForwardDelete del archivo /cgi-bin/cortafuegos.cgi. La ejecución de una manipulación del argumento del_flag puede conducir a inyección de comandos. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede usarse. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-12-08",
            "matchCriteriaId" : "422DDC2F-7D66-4EA7-BD8A-FE781A94898D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/singlePortForwardDelete.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/singlePortForwardDelete.md#exp",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751047",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23861",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-17T14:16:01.773",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere for PowerMax vApp, versión(es) 9.2.4.x, contiene una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting'). Un atacante con pocos privilegios y acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la ejecución de código HTML o JavaScript malicioso en el navegador web de un usuario víctima en el contexto de la aplicación web vulnerable. La explotación puede llevar a revelación de información, robo de sesión o falsificación de solicitudes del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000402262/dsa-2025-425-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-unisphere-360-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25087",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-17T14:16:01.947",
      "lastModified" : "2026-03-11T15:20:20.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use After Free vulnerability in Apache Arrow C++.\n\nThis issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) with pre-buffering enabled, if the IPC file contains data with variadic buffers (such as Binary View and String View data). Depending on the number of variadic buffers in a record batch column and on the temporal sequence of multi-threaded IO, a write to a dangling pointer could occur. The value (a `std::shared_ptr<Buffer>` object) that is written to the dangling pointer is not under direct control of the attacker.\n\nPre-buffering is disabled by default but can be enabled using a specific C++ API call (`RecordBatchFileReader::PreBufferMetadata`). The functionality is not exposed in language bindings (Python, Ruby, C GLib), so these bindings are not vulnerable.\n\nThe most likely consequence of this issue would be random crashes or memory corruption when reading specific kinds of IPC files. If the application allows ingesting IPC files from untrusted sources, this could plausibly be exploited for denial of service. Inducing more targeted kinds of misbehavior (such as confidential data extraction from the running process) depends on memory allocation and multi-threaded IO temporal patterns that are unlikely to be easily controlled by an attacker.\n\nAdvice for users of Arrow C++:\n\n1. check whether you enable pre-buffering on the IPC file reader (using `RecordBatchFileReader::PreBufferMetadata`)\n\n2. if so, either disable pre-buffering (which may have adverse performance consequences), or switch to Arrow 23.0.1 which is not vulnerable"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Use After Free en Apache Arrow C++.\n\nEste problema afecta a Apache Arrow C++ desde la versión 15.0.0 hasta la 23.0.0. Puede activarse al leer un archivo Arrow IPC (pero no un flujo IPC) con el pre-buffer activado, si el archivo IPC contiene datos con buffers variádicos (como datos Binary View y String View). Dependiendo del número de buffers variádicos en una columna de lote de registros y de la secuencia temporal de E/S multihilo, podría producirse una escritura en un puntero colgante. El valor (un objeto 'std::shared_ptr') que se escribe en el puntero colgante no está bajo el control directo del atacante.\n\nEl pre-buffer está deshabilitado por defecto pero puede habilitarse usando una llamada a la API de C++ específica ('RecordBatchFileReader::PreBufferMetadata'). La funcionalidad no está expuesta en los enlaces de lenguaje (Python, Ruby, C GLib), por lo que estos enlaces no son vulnerables.\n\nLa consecuencia más probable de este problema serían fallos aleatorios o corrupción de memoria al leer tipos específicos de archivos IPC. Si la aplicación permite la ingesta de archivos IPC de fuentes no confiables, esto podría ser plausiblemente explotado para denegación de servicio. Inducir tipos de comportamiento erróneo más específicos (como la extracción de datos confidenciales del proceso en ejecución) depende de la asignación de memoria y de los patrones temporales de E/S multihilo que es poco probable que sean fácilmente controlados por un atacante.\n\nConsejo para los usuarios de Arrow C++:\n\n1. verifique si habilita el pre-buffer en el lector de archivos IPC (usando 'RecordBatchFileReader::PreBufferMetadata')\n\n2. si es así, deshabilite el pre-buffer (lo que puede tener consecuencias adversas en el rendimiento), o cambie a Arrow 23.0.1 que no es vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:arrow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "23.0.1",
            "matchCriteriaId" : "E8AF4E4F-FF31-4DB2-A4F6-E74C99DE085B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/arrow/pull/48925",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/mpm4ld1qony30tchfpjtk5b11tcyvmwh",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/17/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22208",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-17T15:16:22.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contain a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaL_openlibs() without sandboxing or capability restrictions, exposing standard libraries such as 'os' and 'io' to untrusted portrayal catalogues. An attacker can provide a malicious S-100 portrayal catalogue containing Lua scripts that execute arbitrary commands with the privileges of the OpenS100 process when a user imports the catalogue and loads a chart."
      }, {
        "lang" : "es",
        "value" : "OpenS100 (el visor S-100 de implementación de referencia) anterior al commit 753cf29 contiene una vulnerabilidad de ejecución remota de código a través de un intérprete Lua sin restricciones. El Motor de Representación inicializa Lua usando luaL_openlibs() sin sandboxing ni restricciones de capacidad, exponiendo bibliotecas estándar como 'os' e 'io' a catálogos de representación no confiables. Un atacante puede proporcionar un catálogo de representación S-100 malicioso que contiene scripts Lua que ejecutan comandos arbitrarios con los privilegios del proceso OpenS100 cuando un usuario importa el catálogo y carga una carta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        }, {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/S-100ExpertTeam/OpenS100/commit/753cf294434e8d3961f20a567c4d99151e3b530d",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.mdpi.com/1424-8220/26/4/1246",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/opens100-portrayal-engine-unrestricted-lua-standard-library-access",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2616",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T15:16:24.717",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is advisable to modify the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Beetel 777VR1 hasta la versión 01.00.09. El elemento afectado es una función desconocida del componente Interfaz de Gestión Web. La manipulación conduce a credenciales codificadas de forma rígida. El ataque necesita ser iniciado dentro de la red local. El exploit ha sido divulgado al público y puede ser usado. Es aconsejable modificar los ajustes de configuración. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc#reproduction-steps",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346266",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry", "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.346266",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751314",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2617",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T16:20:29.987",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Service/SSH Service. The manipulation results in insecure default initialization of resource. The attack can only be performed from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Beetel 777VR1 hasta 01.00.09. Esto afecta una función desconocida del componente Servicio Telnet/Servicio SSH. La manipulación resulta en una inicialización predeterminada insegura de recurso. El ataque solo puede realizarse desde la red local. El exploit ha sido hecho público y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0#proofsteps-to-reproduce",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346267",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry", "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.346267",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751436",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?submit.751568",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23647",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-17T17:21:05.040",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Glory RBG-100 recycler systems using the ISPK-08 software component contain hard-coded operating system credentials that allow remote authentication to the underlying Linux system. Multiple local user accounts, including accounts with administrative privileges, were found to have fixed, embedded passwords. An attacker with network access to exposed services such as SSH may authenticate using these credentials and gain unauthorized access to the system. Successful exploitation allows remote access with elevated privileges and may result in full system compromise."
      }, {
        "lang" : "es",
        "value" : "Los sistemas recicladores Glory RBG-100 que utilizan el componente de software ISPK-08 contienen credenciales de sistema operativo codificadas de forma rígida que permiten la autenticación remota al sistema Linux subyacente. Se encontró que múltiples cuentas de usuario locales, incluyendo cuentas con privilegios administrativos, tenían contraseñas fijas e incrustadas. Un atacante con acceso de red a servicios expuestos como SSH puede autenticarse usando estas credenciales y obtener acceso no autorizado al sistema. La explotación exitosa permite el acceso remoto con privilegios elevados y puede resultar en un compromiso total del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.glory-global.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/glory-rbg-100-recycler-system-hard-coded-os-credentials",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23648",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-17T17:21:05.193",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Glory RBG-100 recycler systems using the ISPK-08 software component contain multiple system binaries with overly permissive file permissions. Several binaries executed by the root user are writable and executable by unprivileged local users. An attacker with local access can replace or modify these binaries to execute arbitrary commands with root privileges, enabling local privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Los sistemas recicladores Glory RBG-100 que utilizan el componente de software ISPK-08 contienen múltiples binarios del sistema con permisos de archivo excesivamente permisivos. Varios binarios ejecutados por el usuario root son escribibles y ejecutables por usuarios locales sin privilegios. Un atacante con acceso local puede reemplazar o modificar estos binarios para ejecutar comandos arbitrarios con privilegios de root, lo que permite la escalada de privilegios local."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.glory-global.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/glory-rbg-100-recycler-system-local-privilege-escalation-via-insecure-file-permissions",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2618",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T17:21:06.490",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Beetel 777VR1 up to 01.00.09. This impacts an unknown function of the component SSH Service. This manipulation causes risky cryptographic algorithm. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en Beetel 777VR1 hasta 01.00.09. Esto impacta una función desconocida del componente Servicio SSH. Esta manipulación causa algoritmo criptográfico riesgoso. El ataque es posible de ser llevado a cabo remotamente. El ataque es considerado tener alta complejidad. La explotabilidad se dice que es difícil. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        }, {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:beetel:777vr1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.09_55",
            "matchCriteriaId" : "DDB59B43-847F-4251-9CDC-96992B3D0C0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:beetel:777vr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF58180F-9493-4B69-8C29-F2FF33C73BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/8e8e559f80e2d596cb6154747f69a081",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Mitigation" ]
      }, {
        "url" : "https://gist.github.com/raghav20232023/8e8e559f80e2d596cb6154747f69a081#proof--steps-to-reproduce",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346268",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry", "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.346268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1452",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T18:20:34.007",
      "lastModified" : "2026-02-17T18:20:34.007",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24733",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-17T19:21:56.820",
      "lastModified" : "2026-03-11T16:16:29.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in Apache Tomcat.\n\n\nTomcat did not limit HTTP/0.9 requests to the GET method. If a security \nconstraint was configured to allow HEAD requests to a URI but deny GET \nrequests, the user could bypass that constraint on GET requests by \nsending a (specification invalid) HEAD request using HTTP/0.9.\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0.M1 through 9.0.112.\n\n\nOlder, EOL versions are also affected.\n\nUsers are recommended to upgrade to version 11.0.15 or later, 10.1.50 or later or 9.0.113 or later, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de validación de entrada inadecuada en Apache Tomcat.\n\nTomcat no limitaba las solicitudes HTTP/0.9 al método GET. Si una restricción de seguridad estaba configurada para permitir solicitudes HEAD a una URI pero denegar solicitudes GET, el usuario podía eludir esa restricción en las solicitudes GET enviando una solicitud HEAD (inválida según la especificación) usando HTTP/0.9.\n\nEste problema afecta a Apache Tomcat: desde 11.0.0-M1 hasta 11.0.14, desde 10.1.0-M1 hasta 10.1.49, desde 9.0.0.M1 hasta 9.0.112.\n\nLas versiones más antiguas, EOL, también están afectadas.\n\nSe recomienda a los usuarios actualizar a la versión 11.0.15 o posterior, 10.1.50 o posterior o 9.0.113 o posterior, lo que soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.1",
            "versionEndExcluding" : "9.0.113",
            "matchCriteriaId" : "B76D20D5-8512-40CD-8B59-B0D4FBFBE7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.1",
            "versionEndExcluding" : "10.1.50",
            "matchCriteriaId" : "8A9BCC2E-EB49-4C74-B150-564AEDE6D8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.0.15",
            "matchCriteriaId" : "9307BA8D-D3BD-41B0-89F3-124704B7EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "EF411DDA-2601-449A-9046-D250419A0E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4FBF97-DE16-4E5E-BE19-471E01818D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "3B266B1E-24B5-47EE-A421-E0E3CC0C7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "29614C3A-6FB3-41C7-B56E-9CC3F45B04F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AB156C-8FF6-4727-AF75-590D0DCB3F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "90CD7E85-4FF9-4158-AC78-4BFCBC882A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9FF07-1B93-4F8C-AC56-7CA74E61B724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA56B52-1015-40CD-B10C-393768094269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "501B0D4A-D636-4736-979B-D5023599CEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "94E7764F-BF9E-463E-B446-A9A8DB92BB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9F7EE-AF2A-43E5-B708-0198784AB45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "AC872C5F-63AF-4BB8-8629-334FC9704AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "94B95C95-DF3E-49C1-9CA0-4474DD7EF7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "310B0163-01DE-40DA-A2EA-FFA4A6100037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "75420449-A951-4133-A5F1-4C01F2DF843B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AA7FF6-E8E7-4BF6-983E-0A99B0183008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "57088BDD-A136-45EF-A8A1-2EBF79CEC2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "B32D1D7A-A04F-444E-8F45-BB9A9E4B0199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "0092FB35-3B00-484F-A24D-7828396A4FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "CB557E88-FA9D-4B69-AA6F-EAEE7F9B01AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "72D3C6F1-84FA-4F82-96C1-9A8DA1C1F30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "3521C81B-37D9-48FC-9540-D0D333B9A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "02A84634-A8F2-4BA9-B9F3-BEF36AEC5480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBBC1F1-C86B-40AF-B740-A99F6B27682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2206B2-F3FF-43F2-B3E2-3CAAC64C691D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "0495A538-4102-40D0-A35C-0179CFD52A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAD52CE-94F5-4F98-A027-9A7E68818CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "77BA6600-0890-4BA1-B447-EC1746BAB4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "7914D26B-CBD6-4846-9BD3-403708D69319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "123C6285-03BE-49FC-B821-8BDB25D02863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "8A28C2E2-B7BC-46CE-94E4-AE3EF172AA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "069B0D8E-8223-4C4E-A834-C6235D6C3450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "E6282085-5716-4874-B0B0-180ECDEE128F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "899B6FF0-8701-47E7-8EDA-428A6D48786D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F981F5-035A-4EDD-8A9F-481EE8BC7FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "03A171AF-2EC8-4422-912C-547CDB58CAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "538E68C4-0BA4-495F-AEF8-4EF6EE7963CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "49350A6E-5E1D-45B2-A874-3B8601B3ADCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50942F-DF54-46C0-8371-9A476DD3EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "D12C2C95-B79F-4AA4-8CE3-99A3EE7991AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "98792138-DD56-42DF-9612-3BDC65EEC117"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/6xk3t65qpn1myp618krtfotbjn1qt90f",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24734",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-17T19:21:56.953",
      "lastModified" : "2026-03-11T16:16:29.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat.\n\nWhen using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypassed.\n\nThis issue affects Apache Tomcat Native:  from 1.3.0 through 1.3.4, from 2.0.0 through 2.0.11; Apache Tomcat: from 11.0.0-M1 through 11.0.17, from 10.1.0-M7 through 10.1.51, from 9.0.83 through 9.0.114.\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39. Older EOL versions are not affected.\n\nApache Tomcat Native users are recommended to upgrade to versions 1.3.5 or later or 2.0.12 or later, which fix the issue.\n\nApache Tomcat users are recommended to upgrade to versions 11.0.18 or later, 10.1.52 or later or 9.0.115 or later which fix the issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de validación de entrada incorrecta en Apache Tomcat Native, Apache Tomcat.\n\nAl usar un respondedor OCSP, Tomcat Native (y el puerto FFM de Tomcat del código de Tomcat Native) no completó las verificaciones de verificación o frescura en la respuesta OCSP, lo que podría permitir que se eluda la revocación del certificado.\n\nEste problema afecta a Apache Tomcat Native: de 1.3.0 a 1.3.4, de 2.0.0 a 2.0.11; Apache Tomcat: de 11.0.0-M1 a 11.0.17, de 10.1.0-M7 a 10.1.51, de 9.0.83 a 9.0.114.\n\nLas siguientes versiones estaban al final de su vida útil (EOL) en el momento en que se creó el CVE, pero se sabe que están afectadas: de 1.1.23 a 1.1.34, de 1.2.0 a 1.2.39. Las versiones EOL más antiguas no están afectadas.\n\nSe recomienda a los usuarios de Apache Tomcat Native que actualicen a las versiones 1.3.5 o posteriores o 2.0.12 o posteriores, que solucionan el problema.\n\nSe recomienda a los usuarios de Apache Tomcat que actualicen a las versiones 11.0.18 o posteriores, 10.1.52 o posteriores o 9.0.115 o posteriores que solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.83",
            "versionEndExcluding" : "9.0.115",
            "matchCriteriaId" : "EED8CE88-42B0-40BA-995E-E3EDF9783C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.1",
            "versionEndExcluding" : "10.1.52",
            "matchCriteriaId" : "FCD4BF84-955F-45FA-AE8F-24E9F737C433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.0.18",
            "matchCriteriaId" : "F3767D80-0815-46B8-818D-803F79CDFF82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D402B5D-5901-43EB-8E6A-ECBD512CE367"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "33C71AE1-B38E-4783-BAC2-3CDA7B4D9EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BD4180-D3E8-42AB-96B1-3869ECF47F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "64668CCF-DBC9-442D-9E0F-FD40E1D0DDB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "FC64BB57-4912-481E-AE8D-C8FCD36142BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "49B43BFD-6B6C-4E6D-A9D8-308709DDFB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "919C16BD-79A7-4597-8D23-2CBDED2EF615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "81B27C03-D626-42EC-AE4E-1E66624908E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "BD81405D-81A5-4683-A355-B39C912DAD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCE3576-86BC-4BB8-A5FB-1274744DFD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "5571F54A-2EAC-41B6-BDA9-7D33CFE97F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9846609D-51FC-4CDD-97B3-8C6E07108F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "ED30E850-C475-4133-BDE3-74CB3768D787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "2E321FB4-0B0C-497A-BB75-909D888C93CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0CAE57-AF7A-40E6-9519-F5C9F422C1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB9D150-EED6-4AE9-BCBE-48932E50035E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "D334103F-F64E-4869-BCC8-670A5AFCC76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "941FCF7B-FFB6-4967-95C7-BB3D32C73DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1A9030-B397-4BA6-8E13-DA1503872DDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.1.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "6284B74A-1051-40A7-9D74-380FEEEC3F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AA7FF6-E8E7-4BF6-983E-0A99B0183008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "57088BDD-A136-45EF-A8A1-2EBF79CEC2CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "B32D1D7A-A04F-444E-8F45-BB9A9E4B0199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "0092FB35-3B00-484F-A24D-7828396A4FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "CB557E88-FA9D-4B69-AA6F-EAEE7F9B01AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "72D3C6F1-84FA-4F82-96C1-9A8DA1C1F30F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "3521C81B-37D9-48FC-9540-D0D333B9A4A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "02A84634-A8F2-4BA9-B9F3-BEF36AEC5480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBBC1F1-C86B-40AF-B740-A99F6B27682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2206B2-F3FF-43F2-B3E2-3CAAC64C691D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "0495A538-4102-40D0-A35C-0179CFD52A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAD52CE-94F5-4F98-A027-9A7E68818CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "77BA6600-0890-4BA1-B447-EC1746BAB4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "7914D26B-CBD6-4846-9BD3-403708D69319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "123C6285-03BE-49FC-B821-8BDB25D02863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "8A28C2E2-B7BC-46CE-94E4-AE3EF172AA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "069B0D8E-8223-4C4E-A834-C6235D6C3450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "E6282085-5716-4874-B0B0-180ECDEE128F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "899B6FF0-8701-47E7-8EDA-428A6D48786D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F981F5-035A-4EDD-8A9F-481EE8BC7FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "03A171AF-2EC8-4422-912C-547CDB58CAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "538E68C4-0BA4-495F-AEF8-4EF6EE7963CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "49350A6E-5E1D-45B2-A874-3B8601B3ADCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50942F-DF54-46C0-8371-9A476DD3EEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "D12C2C95-B79F-4AA4-8CE3-99A3EE7991AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "98792138-DD56-42DF-9612-3BDC65EEC117"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.5",
            "matchCriteriaId" : "35D1D254-3E3F-4885-A422-A58DE6210AF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.12",
            "matchCriteriaId" : "9EBE7E4E-2570-4EE4-9DF8-F691A8DBDEAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/292dlmx3fz1888v6v16221kpozq56gml",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-17T19:21:57.383",
      "lastModified" : "2026-03-16T16:16:13.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK A3002RU V2.1.1-B20211108.1455 contenía un desbordamiento de búfer basado en pila a través del parámetro 'routernamer'parameter en la función formDnsv6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a3002ru_firmware:2.1.1-b20211108.1455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66928591-1CC8-47F3-ADDC-5F303CE700AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a3002ru-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720DB583-0A2B-4538-88A4-F90D32FC67EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RU-boa-formDnsv6-StackOverflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-17T19:21:57.493",
      "lastModified" : "2026-03-11T16:16:39.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK A3002RU V2.1.1-B20211108.1455 contenía un desbordamiento de búfer basado en pila a través de los parámetros vpnUser o vpnPassword' en la función formFilter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a3002ru_firmware:2.1.1-b20211108.1455:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66928591-1CC8-47F3-ADDC-5F303CE700AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a3002ru-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720DB583-0A2B-4538-88A4-F90D32FC67EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RU-boa-formFilter-StackOverflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-17T19:21:57.603",
      "lastModified" : "2026-03-09T17:16:17.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function."
      }, {
        "lang" : "es",
        "value" : "TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 se descubrió que contenía un desbordamiento de búfer basado en pila a través del parámetro static_ipv6 en la función formIpv6Setup."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a3002ru_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0-b20220304.1804",
            "matchCriteriaId" : "6EE5A6AA-48D3-44A7-A2AD-AD652CCF95C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a3002ru-v3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEE75AC8-7F41-4A93-8AAB-75D157603DEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RUV3.0-boa-formIpv6Setup-StackOverflow",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2630",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-02-17T19:21:58.060",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the underlying server where Tenable Security Center is hosted."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos donde un atacante remoto y autenticado podría ejecutar código arbitrario en el servidor subyacente donde está alojado Tenable Security Center."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2026-06",
        "source" : "vulnreport@tenable.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0102",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-17T20:22:05.500",
      "lastModified" : "2026-02-19T15:39:08.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata."
      }, {
        "lang" : "es",
        "value" : "Bajo condiciones específicas, una página web maliciosa puede activar el llenado automático después de dos toques consecutivos, potencialmente sin el consentimiento claro o intencional del usuario. Esto podría resultar en la divulgación de datos de autocompletado almacenados, como direcciones, correo electrónico o metadatos de números de teléfono."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.3800.58",
            "matchCriteriaId" : "7625822C-F0EF-4A29-B90B-7B4E15C8E3C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22284",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-17T20:22:09.490",
      "lastModified" : "2026-02-26T22:03:40.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution."
      }, {
        "lang" : "es",
        "value" : "El software Dell SmartFabric OS10, versiones anteriores a la 10.5.6.12, contiene una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando ('inyección de comandos'). Un atacante con altos privilegios y acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la ejecución de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.6.12",
            "matchCriteriaId" : "2FBAD301-932A-4149-8BC9-99831E0A5932"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429181/dsa-2026-033-security-update-for-dell-networking-os10-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22762",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-17T20:22:09.647",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary file delete."
      }, {
        "lang" : "es",
        "value" : "Dell Avamar Server y Avamar Virtual Edition, versiones anteriores a 19.10 SP1 con CHF338912, contiene una vulnerabilidad de seguridad de limitación inadecuada de un nombre de ruta a un directorio restringido ('Salto de ruta'). Un atacante con muchos privilegios y acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que podría llevar a la eliminación arbitraria de archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000425796/dsa-2026-053-security-update-for-dell-avamar-server-and-dell-avamar-virtual-edition-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability",
        "source" : "security_alert@emc.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22769",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-17T20:22:09.800",
      "lastModified" : "2026-02-20T02:00:02.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible."
      }, {
        "lang" : "es",
        "value" : "Dell RecoverPoint para Máquinas Virtuales, en versiones anteriores a 6.0.3.1 HF1, contiene una vulnerabilidad de credenciales almacenadas en el código. Esto se considera crítico ya que un atacante en remoto no autenticado que conozca la credencial almacenada podría, potencialmente, explotar esta vulnerabilidad, lo que permitiría un acceso no autorizado al sistema operativo subyacente y persistencia a nivel de root. Dell recomienda que los clientes actualicen o apliquen uno de los remedios lo antes posible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2026-02-18",
      "cisaActionDue" : "2026-02-21",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability",
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0",
            "matchCriteriaId" : "CDBD4124-5704-4491-837E-C9F6C3B46602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A90920-381D-4D65-8DDA-A850B1765919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0ABCD5-9273-4799-A916-3518ED5EBB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p1:*:*:*:*:*:*",
            "matchCriteriaId" : "800D6F27-0B30-4E0A-94F6-B52367D50761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p2:*:*:*:*:*:*",
            "matchCriteriaId" : "97E4273C-646D-402A-B560-13B1F3024488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "20C3E4AB-B2BA-40CA-AD59-00F2A56C2107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp2_p1:*:*:*:*:*:*",
            "matchCriteriaId" : "12F25A3A-65DF-4D20-8A94-71A4763CDA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "497DD11A-28C7-4211-BB03-2AB916AEA8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp3_p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3E357BFB-EF68-4FC7-89A3-233567F41534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000426773/dsa-2026-079",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-22769",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26357",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-17T20:22:10.437",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax, versión(es) 9.2.4.x, tiene una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('Cross-site Scripting'). Un atacante con pocos privilegios con acceso remoto podría, potencialmente, explotar esta vulnerabilidad, lo que llevaría a la ejecución de código HTML o JavaScript malicioso en el navegador web de un usuario víctima en el contexto de la aplicación web vulnerable. La explotación puede llevar a revelación de información, robo de sesión, o falsificación de solicitudes del lado del cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000402262/dsa-2025-425-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-unisphere-360-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2620",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T20:22:10.593",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Huace Monitoring and Early Warning System 2.2. Affected by this issue is some unknown functionality of the file /Web/SysManage/ProjectRole.aspx. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el Sistema de Monitoreo y Alerta Temprana Huace 2.2. Está afectada por este problema alguna funcionalidad desconocida del archivo /Web/SysManage/ProjectRole.aspx. Manipular el identificador del argumento puede dar lugar a una inyección SQL. \nEs posible lanzar el ataque en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/red88-debug/CVEs/blob/main/Huace%20Monitoring%20and%20Early%20Warning%20SQL.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346271",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346271",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.751808",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23595",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-02-17T21:22:15.757",
      "lastModified" : "2026-02-28T01:31:52.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data."
      }, {
        "lang" : "es",
        "value" : "Una omisión de autenticación en la API de la aplicación permite la creación de una cuenta administrativa no autorizada. Un atacante remoto podría explotar esta vulnerabilidad para crear cuentas de usuario privilegiadas. La explotación exitosa podría permitir a un atacante obtener acceso administrativo, modificar configuraciones del sistema y acceder o manipular datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:aruba_networking_private_5g_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.3.0",
            "versionEndIncluding" : "1.24.3.3",
            "matchCriteriaId" : "BDECC3E6-DBAF-4074-BC96-4FC679303158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23596",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-02-17T21:22:15.913",
      "lastModified" : "2026-02-28T01:30:22.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API de gestión del producto afectado podría permitir a un atacante remoto no autenticado desencadenar reinicios del servicio. La explotación exitosa podría permitir a un atacante interrumpir los servicios y afectar negativamente la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:aruba_networking_private_5g_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.3.0",
            "versionEndIncluding" : "1.24.3.3",
            "matchCriteriaId" : "BDECC3E6-DBAF-4074-BC96-4FC679303158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23597",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-02-17T21:22:16.053",
      "lastModified" : "2026-03-02T13:29:10.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerabilities in the API error handling of an HPE Aruba Networking  5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades en el manejo de errores de una API de servidor HPE Aruba Networking 5G Core podrían permitir a un atacante en remoto no autenticado obtener información sensible. si se explota éxito podría permitir a un atacante acceder a detalles como cuentas de usuario, roles y configuración del sistema, así como obtener información sobre servicios internos y flujos de trabajo, aumentando el riesgo de acceso no autorizado e incremento de privilegios cuando se combina con otras vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:aruba_networking_private_5g_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.3.0",
            "versionEndIncluding" : "1.24.3.3",
            "matchCriteriaId" : "BDECC3E6-DBAF-4074-BC96-4FC679303158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23598",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-02-17T21:22:16.193",
      "lastModified" : "2026-02-28T01:30:07.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerabilities in the API error handling of an HPE Aruba Networking  5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidades en el manejo de errores de una API del servidor HPE Aruba Networking 5G Core podrían permitir a un atacante en remoto no autenticado obtener información sensible. Si se explota con éxito podría permitir a un atacante acceder a detalles como cuentas de usuario, roles y configuración del sistema, así como obtener información sobre servicios internos y flujos de trabajo, aumentando el riesgo de acceso no autorizado e incremento de privilegios cuando se combina con otras vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:aruba_networking_private_5g_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.3.0",
            "versionEndIncluding" : "1.24.3.3",
            "matchCriteriaId" : "BDECC3E6-DBAF-4074-BC96-4FC679303158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2621",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T21:22:16.633",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Sciyon Koyuan Thermoelectricity Heat Network Management System 3.0. This affects an unknown part of the file /SISReport/WebReport20/Proxy/AsyncTreeProxy.aspx. The manipulation of the argument PGUID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Sciyon Koyuan Thermoelectricity Heat Network Management System 3.0. Esto afecta una parte desconocida del archivo /SISReport/WebReport20/Proxy/AsyncTreeProxy.aspx. La manipulación del argumento PGUID lleva a inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/red88-debug/CVEs/blob/main/Koyuan%20Thermoelectricity%20Heat%20Network%20Management%20System%20SQL%20Injection%20Vulnerability.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346272",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346272",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.751809",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2622",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T21:22:16.820",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function content of the file blossom-backend/backend/src/main/java/com/blossom/backend/server/article/draft/ArticleController.java of the component Article Title Handler. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Blossom hasta 1.17.1. Esta vulnerabilidad afecta la función contenido del archivo blossom-backend/backend/src/main/java/com/blossom/backend/server/article/draft/ArticleController.java del componente Article Title Handler. La manipulación resulta en cross site scripting. El ataque puede ser lanzado n remoto. El exploit está publicado y puede ser usado. Se contactó pronto con el proveedor sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wangyunf:blossom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17.1",
            "matchCriteriaId" : "754FF13B-C45F-4A91-8DD8-33AA2EE9685E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/AXa1dpliBomr2Ox6dYJc6jJInEb",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751987",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2623",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T22:18:45.260",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Blossom up to 1.17.1. This issue affects the function put of the file blossom-backend/common/common-iaas/src/main/java/com/blossom/common/iaas/blos/BLOSManager.java of the component File Upload. This manipulation causes path traversal. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Blossom hasta la versión 1.17.1. Este problema afecta a la función 'put' del archivo blossom-backend/common/common-iaas/src/main/java/com/blossom/common/iaas/blos/BLOSManager.java del componente Carga de Archivos. Esta manipulación provoca un salto de ruta. El ataque puede iniciarse remotamente. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wangyunf:blossom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.17.1",
            "matchCriteriaId" : "754FF13B-C45F-4A91-8DD8-33AA2EE9685E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/WmA3dzNfto3AxlxoFlqcu5amnXe",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.751988",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2627",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T22:18:45.457",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\\Program Files\\Common Files\\microsoft shared\\ink\\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Softland FBackup hasta la versión 9.9. Esto afecta una función desconocida en la biblioteca C:\\Program Files\\Common Files\\microsoft shared\\ink\\HID.dll del componente Copia de seguridad/Restauración. La manipulación resulta en seguimiento de enlaces. El ataque debe ser abordado localmente. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado pronto sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thezdi/PoC/tree/main/FilesystemEoPs",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346279",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346279",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752050",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2629",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-17T22:18:45.653",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js of the component TTS Provider. This manipulation of the argument phrase causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en jishi node-sonos-http-api hasta 3776f0ee2261c924c7b7204de121a38100a08ca7. Afecta a la función Promise del archivo lib/tts-providers/mac-os.js del componente TTS Provider. Esta manipulación del argumento phrase provoca inyección de comandos del sistema operativo. Es posible iniciar el ataque en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Este producto realiza lanzamientos continuos para proporcionar una entrega continua. Por lo tanto, no se dispone de detalles de versión para las versiones afectadas ni actualizadas. El proyecto fue informado pronto del problema a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XavLimSG/Vulnerability-Research/blob/main/CVE-2026-2629/CVE-2026-2629.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/jishi/node-sonos-http-api/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/jishi/node-sonos-http-api/issues/915",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346280",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346280",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752762",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1670",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-17T23:16:19.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the \"forgot password\" recovery email address."
      }, {
        "lang" : "es",
        "value" : "Los productos afectados son vulnerables a una exposición de endpoint de API no autenticado, lo que podría permitir a un atacante cambiar en remoto la dirección de correo electrónico de recuperación de 'olvidé mi contraseña'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-048-04.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-04",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.honeywell.com/us/en/contact/support",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26119",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-17T23:16:22.880",
      "lastModified" : "2026-02-19T13:10:49.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Autenticación incorrecta en Windows Admin Center permite a un atacante autorizado escalar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2511",
            "matchCriteriaId" : "6E6B16F7-D308-4FCC-B230-6AFFB020AFE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26119",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2570",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-17T23:16:23.043",
      "lastModified" : "2026-02-17T23:16:23.043",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1344",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-02-18T00:16:18.040",
      "lastModified" : "2026-03-09T18:05:55.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de permisos de archivo inseguros en el Portal de Claves de Recuperación de Enforce."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:enforce_recovery_key_portal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.62.5",
            "matchCriteriaId" : "4F928A04-5110-47A8-9232-85F07CC5045E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-003",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22048",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2026-02-18T00:16:18.700",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources."
      }, {
        "lang" : "es",
        "value" : "Las versiones de StorageGRID (anteriormente StorageGRID Webscale) anteriores a la 11.9.0.12 y 12.0.0.4 con inicio de sesión único habilitado y configurado para usar Microsoft Entra ID (anteriormente Azure AD) como IdP son susceptibles a una vulnerabilidad de falsificación de petición del lado del servidor (SSRF). Un exploit exitoso podría permitir a un atacante autenticado con pocos privilegios eliminar datos de configuración o denegar el acceso a algunos recursos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@netapp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20260217-0001",
        "source" : "security-alert@netapp.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23599",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-02-18T00:16:18.833",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada local de privilegios ha sido descubierta en el software HPE Aruba Networking ClearPass OnGuard para Linux. La explotación exitosa de esta vulnerabilidad podría permitir a un atacante local lograr ejecución de código arbitrario con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05012en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27031",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:00.680",
      "lastModified" : "2026-02-18T04:16:00.680",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27032",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:00.780",
      "lastModified" : "2026-02-18T04:16:00.780",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27033",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:00.853",
      "lastModified" : "2026-02-18T04:16:00.853",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27034",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:00.920",
      "lastModified" : "2026-02-18T04:16:00.920",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27035",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:00.983",
      "lastModified" : "2026-02-18T04:16:00.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27036",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:01.057",
      "lastModified" : "2026-02-18T04:16:01.057",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27037",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:01.127",
      "lastModified" : "2026-02-18T04:16:01.127",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27038",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-18T04:16:01.193",
      "lastModified" : "2026-02-18T04:16:01.193",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-18T04:16:01.263",
      "lastModified" : "2026-03-25T21:27:04.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition."
      }, {
        "lang" : "es",
        "value" : "zlib anterior a 1.3.2 permite el consumo de CPU a través de crc32_combine64 y crc32_combine_gen64 porque x2nmodp puede realizar desplazamientos a la derecha dentro de un bucle que no tiene condición de terminación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.12",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "94CCDD7A-18CD-4961-848E-A827A3E2F3BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/madler/zlib/issues/904",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/madler/zlib/releases/tag/v1.3.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://ostif.org/zlib-audit-complete/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1277",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T05:16:24.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites via a crafted link."
      }, {
        "lang" : "es",
        "value" : "El plugin URL Shortify para WordPress es vulnerable a redirección abierta en todas las versiones hasta la 1.12.1, inclusive, debido a una validación insuficiente en el parámetro 'redirect_to' en el manejador de descarte promocional. Esto permite que atacantes no autenticados redirijan a los usuarios a sitios potencialmente maliciosos a través de un enlace manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/url-shortify/tags/1.11.4/lite/includes/Promo.php#L64",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3451740%40url-shortify&old=3445491%40url-shortify&sfp_email=&sfph_mail=#file1049",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c7c1dc51-47ca-4b2f-9ff9-275bd8b1c106?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1296",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T05:16:25.490",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the verify_username_password function. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Frontend Post Submission Manager Lite para WordPress es vulnerable a la redirección abierta en todas las versiones hasta la 1.2.7, inclusive, debido a validación insuficiente en el parámetro POST 'requested_page' en la función verify_username_password. Esto hace posible para atacantes no autenticados redirigir a los usuarios a sitios potencialmente maliciosos si logran engañarlos con éxito para que realicen una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/tags/1.2.6/includes/classes/class-fpsml-shortcode.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/trunk/includes/classes/class-fpsml-shortcode.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3458652%40frontend-post-submission-manager-lite&new=3458652%40frontend-post-submission-manager-lite&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/92c52129-7cf5-4a1b-80a1-b01140e6a72b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1714",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T05:16:27.327",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Email Relay Abuse in all versions up to, and including, 3.3.2. This is due to the lack of validation on the 'send_to', 'product_title', 'wlmessage', and 'wlemail' parameters in the 'woolentor_suggest_price_action' AJAX endpoint. This makes it possible for unauthenticated attackers to send arbitrary emails to any recipient with full control over the subject line, message content, and sender address (via CRLF injection in the 'wlemail' parameter), effectively turning the website into a full email relay for spam or phishing campaigns."
      }, {
        "lang" : "es",
        "value" : "El plugin ShopLentor – WooCommerce Builder for Elementor &amp; Gutenberg +21 Modules – All in One Solution para WordPress es vulnerable a Abuso de Retransmisión de Correo Electrónico en todas las versiones hasta la 3.3.2, inclusive. Esto se debe a la falta de validación en los parámetros 'send_to', 'product_title', 'wlmessage' y 'wlemail' en el endpoint AJAX 'woolentor_suggest_price_action'. Esto hace posible que atacantes no autenticados envíen correos electrónicos arbitrarios a cualquier destinatario con control total sobre la línea de asunto, el contenido del mensaje y la dirección del remitente (mediante inyección CRLF en el parámetro 'wlemail'), convirtiendo eficazmente el sitio web en un retransmisor de correo electrónico completo para campañas de correo no deseado o phishing."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/3.3.1/classes/class.ajax_actions.php#L170",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/3.3.1/classes/class.ajax_actions.php#L189",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/3.3.1/classes/class.ajax_actions.php#L192",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woolentor-addons/trunk/classes/class.ajax_actions.php#L170",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woolentor-addons/trunk/classes/class.ajax_actions.php#L189",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woolentor-addons/trunk/classes/class.ajax_actions.php#L192",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3461704/woolentor-addons/trunk/classes/class.ajax_actions.php?contextall=1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cf326914-6a38-4984-a2a7-66e05f41a96b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1925",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T05:16:28.803",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types."
      }, {
        "lang" : "es",
        "value" : "El plugin EmailKit – Email Customizer para WooCommerce &amp; WP para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidad en la función update_template_data en todas las versiones hasta la 1.6.2, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, modifiquen el título de cualquier entrada en el sitio, incluyendo entradas, páginas y tipos de entrada personalizados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/emailkit/tags/1.6.2/includes/Admin/EmailKitAjax.php#L150",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/emailkit/trunk/includes/Admin/EmailKitAjax.php#L150",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3456972/emailkit/trunk?contextall=1&old=3419280&old_path=%2Femailkit%2Ftrunk#file1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f131ea1e-d652-4854-abea-6a307ca8118f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1931",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T05:16:28.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Rent Fetch para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'keyword' en todas las versiones hasta la 0.32.4, inclusive, debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BrindleDigital/rentfetch/commit/3c7162b24a8be5e5399c1a5bbaf0b949127aca75",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/rentfetch/tags/0.32.4/lib/admin/options-sections/options-general-section.php#L225",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/rentfetch/trunk/lib/admin/options-sections/options-general-section.php#L225",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3458366%40rentfetch&new=3458366%40rentfetch&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3fffdda5-91ed-4b79-bc04-77a1c44e3b67?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2576",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T05:16:29.170",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory Plugin – Easy Listing Directories para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'payment' en todas las versiones hasta la 6.4.2, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes no autenticados añadan consultas SQL adicionales en consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/business-directory-plugin/tags/6.4.21/includes/controllers/pages/class-checkout.php#L126",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/business-directory-plugin/tags/6.4.21/includes/db/class-db-query-set.php#L37",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463307/business-directory-plugin/trunk/includes/db/class-db-query-set.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d8ec7d25-1574-416c-b5fd-3a71b1cc09d2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1072",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T06:16:33.740",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification text via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Keybase.io Verification para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.4.5, inclusive. Esto se debe a la falta de validación de nonce al actualizar la configuración del plugin. Esto hace posible que atacantes no autenticados actualicen el texto de verificación de Keybase a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-keybase-verification/tags/1.4.5/admin/code/write.php#L51",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-keybase-verification/trunk/admin/code/write.php#L51",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3455171%40wp-keybase-verification&new=3455171%40wp-keybase-verification&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4bbf55eb-7738-4c52-ac9d-a67d159e56cf?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1304",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T06:16:34.013",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Membership Plugin – Restrict Content for WordPress is vulnerable to Stored Cross-Site Scripting via multiple invoice settings fields in all versions up to, and including, 3.2.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin de membresía – Restrict Content para WordPress es vulnerable a cross-site scripting almacenado a través de múltiples campos de configuración de facturas en todas las versiones hasta la 3.2.18, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L896",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L905",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L914",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L923",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L932",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L941",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L950",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/includes/admin/settings/settings.php#L971",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/templates/invoice.php#L271",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.16/core/templates/invoice.php#L281",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3448964%40restrict-content&new=3448964%40restrict-content&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cdd563b7-a1b9-4d99-9a6e-c8acf9dda619?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1368",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-18T06:16:34.327",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Video Conferencing con Zoom anterior a la versión 4.6.6 contiene un manejador AJAX que tiene su verificación de nonce comentada, lo que permite a atacantes no autenticados generar firmas válidas del SDK de Zoom para cualquier ID de reunión y recuperar la clave del SDK de Zoom del sitio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/218e6655-c5aa-4bce-86b2-cad3bb20020c/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1639",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T06:16:34.530",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' and 'sort_by' parameters in all versions up to, and including, 5.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Taskbuilder – WordPress Project Management &amp; Task Management para WordPress es vulnerable a inyección SQL ciega basada en tiempo a través de los parámetros 'order' y 'sort_by' en todas las versiones hasta la 5.0.2, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, añadan consultas SQL adicionales en consultas ya existentes que pueden utilizarse para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.2/includes/admin/projects/projects_list.php#L136",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.2/includes/admin/projects/projects_list.php#L138",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.2/includes/admin/projects/projects_list.php#L14",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2cfdde5c-f0e3-4597-9789-3ff0347719c6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1906",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T06:16:34.913",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.0 via the `wpo_ips_edi_save_order_customer_peppol_identifiers` AJAX action due to missing capability checks and order ownership validation. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify Peppol/EDI endpoint identifiers (`peppol_endpoint_id`, `peppol_endpoint_eas`) for any customer by specifying an arbitrary `order_id` parameter on systems using Peppol invoicing. This can affect order routing on the Peppol network and may result in payment disruptions and data leakage."
      }, {
        "lang" : "es",
        "value" : "El plugin PDF Invoices &amp; Packing Slips para WooCommerce para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 5.6.0, inclusive, a través de la acción AJAX 'wpo_ips_edi_save_order_customer_peppol_identifiers' debido a la falta de comprobaciones de capacidad y validación de la propiedad del pedido. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, modificar los identificadores de punto final Peppol/EDI ('peppol_endpoint_id', 'peppol_endpoint_eas') para cualquier cliente al especificar un parámetro 'order_id' arbitrario en sistemas que utilizan facturación Peppol. Esto puede afectar el enrutamiento de pedidos en la red Peppol y puede resultar en interrupciones de pago y fuga de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-pdf-invoices-packing-slips/tags/5.6.0/includes/Admin.php#L72",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-pdf-invoices-packing-slips/tags/5.6.0/includes/Admin.php#L895",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips/#developers",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2e1922c6-e63b-47aa-97de-1e2382fa25d3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2023",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T06:16:35.223",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0. This is due to missing nonce validation in the ajax_save_custom_plugin() function, which is disabled by prefixing the check with 'false &&'. This makes it possible for unauthenticated attackers to create or modify custom plugin entries via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Plugin Info Card para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 6.2.0, inclusive. Esto se debe a la falta de validación de nonce en la función ajax_save_custom_plugin(), la cual está deshabilitada al prefijar la comprobación con 'false &amp;&amp;'. Esto hace posible que atacantes no autenticados creen o modifiquen entradas de plugins personalizadas a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DLXPlugins/wp-plugin-info-card/blob/0fe50d3ccb3d61d5d176fab9e9f280ac8bfd8614/php/Admin/Init.php#L390",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-plugin-info-card/tags/6.2.0/php/Admin/Init.php#L390",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-plugin-info-card/trunk/php/Admin/Init.php#L390",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3454992%40wp-plugin-info-card&new=3454992%40wp-plugin-info-card&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1213a21f-a9c1-4da3-99b5-4a5a0673073f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2641",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T06:16:35.517",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpression/parseExprList of the file parsers/v.c of the component V Language Parser. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en universal-ctags ctags hasta la versión 6.2.1. El elemento afectado es la función parseExpression/parseExprList del archivo parsers/v.c del componente V Language Parser. La ejecución de una manipulación puede llevar a una recursión incontrolada. Es posible lanzar el ataque en el host local. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Se informó al proyecto del problema con antelación a través de un informe de incidencia, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0116/blob/main/poc.v",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/universal-ctags/ctags/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/universal-ctags/ctags/issues/4369",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346397",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346397",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752768",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1640",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:09.153",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.2. This is due to missing authorization checks on the project and task comment submission functions (AJAX actions: wppm_submit_proj_comment and wppm_submit_task_comment). This makes it possible for authenticated attackers, with subscriber-level access and above, to create comments on any project or task (including private projects they cannot view or are not assigned to), and inject arbitrary HTML and CSS via the insufficiently sanitized comment_body parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Taskbuilder – WordPress Project Management &amp; Task Management para WordPress es vulnerable a una omisión de autorización en todas las versiones hasta la 5.0.2, inclusive. Esto se debe a la falta de comprobaciones de autorización en las funciones de envío de comentarios de proyectos y tareas (acciones AJAX: wppm_submit_proj_comment y wppm_submit_task_comment). Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, creen comentarios en cualquier proyecto o tarea (incluidos proyectos privados que no pueden ver o a los que no están asignados), e inyecten HTML y CSS arbitrarios a través del parámetro comment_body insuficientemente saneado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.2/includes/admin/projects/open_project/wppm_submit_project_comment.php#L6",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.2/includes/admin/tasks/open_task/wppm_submit_task_comment.php#L6",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/66095908-875f-486d-ae77-6015671872de?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1666",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:09.540",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'redirect_to' parameter in all versions up to, and including, 3.3.46. This is due to insufficient input sanitization and output escaping on the 'redirect_to' GET parameter in the login form shortcode. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Download Manager para WordPress es vulnerable a Cross-Site Scripting Reflejado a través del parámetro 'redirect_to' en todas las versiones hasta la 3.3.46, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en el parámetro GET 'redirect_to' en el shortcode del formulario de inicio de sesión. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar con éxito a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/download-manager/tags/3.3.46/src/User/Login.php#L137",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/download-manager/tags/3.3.46/src/User/views/login-form.php#L142",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3455081%40download-manager%2Ftrunk&old=3440008%40download-manager%2Ftrunk&sfp_email=&sfph_mail=#file25",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3cb84ba3-b403-4a9d-b1a7-92aa947310ac?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wpdownloadmanager.com/doc/short-codes/wpdm_login_form-user-login-form-short-code/",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1807",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:09.727",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The InteractiveCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'interactivecalculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin InteractiveCalculator para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'interactivecalculator' del plugin en todas las versiones hasta la 1.0.3, inclusive, debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/interactivecalculator/tags/1.0.1/interactivecalculator.php#L44",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3456849%40interactivecalculator&new=3456849%40interactivecalculator&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3456870%40interactivecalculator&new=3456870%40interactivecalculator&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5c38f080-59c7-4201-9e87-87ee9ab6b97b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1857",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:09.907",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.6.1. This is due to insufficient validation of the `endpoint` parameter in the `get_items()` function of the GetResponse REST API handler. The endpoint's permission check only requires `edit_posts` capability (Contributor role) rather than `manage_options` (Administrator). This makes it possible for authenticated attackers, with Contributor-level access and above, to make server-side requests to arbitrary endpoints on the configured GetResponse API server, retrieving sensitive data such as contacts, campaigns, and mailing lists using the site's stored API credentials. The stored API key is also leaked in the request headers."
      }, {
        "lang" : "es",
        "value" : "El plugin Gutenberg Blocks con AI por Kadence WP para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 3.6.1, inclusive. Esto se debe a una validación insuficiente del parámetro 'endpoint' en la función 'get_items()' del manejador de la API REST de GetResponse. La comprobación de permisos del endpoint solo requiere la capacidad 'edit_posts' (rol de Colaborador) en lugar de 'manage_options' (Administrador). Esto hace posible que atacantes autenticados, con acceso de nivel de Colaborador o superior, realicen peticiones del lado del servidor a endpoints arbitrarios en el servidor de la API de GetResponse configurado, recuperando datos sensibles como contactos, campañas y listas de correo utilizando las credenciales de la API almacenadas en el sitio. La clave de API almacenada también se filtra en las cabeceras de la petición."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.5.32/includes/advanced-form/getresponse-rest-api.php#L57",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.5.32/includes/advanced-form/getresponse-rest-api.php#L77",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3454881%40kadence-blocks%2Ftrunk&old=3453204%40kadence-blocks%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2ea8d38a-f5ce-40dd-a015-f56d60579e05?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1937",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:10.093",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the `yaymail_import_state` AJAX action in all versions up to, and including, 4.3.2. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site."
      }, {
        "lang" : "es",
        "value" : "El plugin YayMail – WooCommerce Email Customizer para WordPress es vulnerable a la modificación no autorizada de datos que puede conducir a una escalada de privilegios debido a una falta de verificación de capacidad en la acción AJAX 'yaymail_import_state' en todas las versiones hasta la 4.3.2, inclusive. Esto permite a atacantes autenticados, con acceso de nivel de 'Shop Manager' o superior, actualizar opciones arbitrarias en el sitio de WordPress. Esto puede ser aprovechado para actualizar el rol predeterminado para el registro a administrador y habilitar el registro de usuarios para que los atacantes obtengan acceso de usuario administrativo a un sitio vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/src/Models/MigrationModel.php#L143",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/trunk/src/Models/MigrationModel.php#L143",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3460087%40yaymail&new=3460087%40yaymail&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5a17ded3-340d-494f-be7e-2550dab360bc?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2019",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:10.273",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cart All In One For WooCommerce plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.1.21. This is due to insufficient input validation on the 'Assign page' field which is passed directly to the eval() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute arbitrary PHP code on the server."
      }, {
        "lang" : "es",
        "value" : "El plugin Cart All In One para WooCommerce para WordPress es vulnerable a Inyección de Código en todas las versiones hasta la 1.1.21, inclusive. Esto se debe a una validación de entrada insuficiente en el campo 'Assign page' que se pasa directamente a la función eval(). Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, ejecuten código PHP arbitrario en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-cart-all-in-one/tags/1.1.21/includes/frontend/sidebar-cart-icon.php#L245",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-cart-all-in-one/trunk/includes/frontend/sidebar-cart-icon.php#L245",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455202/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/25bdb89f-3478-4a1a-8bf0-46e88207eb21?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2281",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:10.450",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Private Comment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Label text' setting in all versions up to, and including, 0.0.4. This is due to insufficient input sanitization and output escaping on the plugin's label text option. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Private Comment para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración 'Label text' en todas las versiones hasta la 0.0.4, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en la opción de texto de etiqueta del plugin. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/private-comment/tags/0.0.3/private-comment.php#L128",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/private-comment/trunk/private-comment.php#L128",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3458294/private-comment/trunk/private-comment.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/94d75f18-67ab-4367-982b-73e256d5dbe2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2296",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:10.630",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 3.1.0. This is due to insufficient input validation of the 'operator' field in conditional logic rules within the evalConditions() function, which passes unsanitized user input directly to PHP's eval() function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject and execute arbitrary PHP code on the server via the conditional logic 'operator' parameter when saving addon form field rules."
      }, {
        "lang" : "es",
        "value" : "El plugin Product Addons para Woocommerce – Product Options with Custom Fields para WordPress es vulnerable a la Inyección de Código en todas las versiones hasta la 3.1.0, inclusive. Esto se debe a una validación de entrada insuficiente del campo 'operator' en las reglas de lógica condicional dentro de la función evalConditions(), que pasa la entrada de usuario no saneada directamente a la función eval() de PHP. Esto hace posible que atacantes autenticados, con acceso de nivel de 'Shop Manager' o superior, inyecten y ejecuten código PHP arbitrario en el servidor a través del parámetro 'operator' de la lógica condicional al guardar las reglas de los campos del formulario de complemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-custom-product-addons/tags/3.0.19/includes/process/conditional-logic.php#L104",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-custom-product-addons/tags/3.0.19/includes/process/conditional-logic.php#L84",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-custom-product-addons/trunk/includes/process/conditional-logic.php#L104",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woo-custom-product-addons/trunk/includes/process/conditional-logic.php#L84",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3458823%40woo-custom-product-addons&new=3458823%40woo-custom-product-addons&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b3c1edd7-2421-4dfa-8775-ca0497759d52?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2633",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T07:16:10.807",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.6.1. This is due to a missing capability check in the `process_image_data_ajax_callback()` function which handles the `kadence_import_process_image_data` AJAX action. The function's authorization check via `verify_ajax_call()` only validates `edit_posts` capability but fails to check for the `upload_files` capability. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary images from remote URLs to the WordPress Media Library, bypassing the standard WordPress capability restriction that prevents Contributors from uploading files."
      }, {
        "lang" : "es",
        "value" : "El plugin Gutenberg Blocks with AI by Kadence WP para WordPress es vulnerable a una autorización faltante en todas las versiones hasta la 3.6.1, inclusive. Esto se debe a una verificación de capacidad faltante en la función `process_image_data_ajax_callback()` que maneja la acción AJAX `kadence_import_process_image_data`. La verificación de autorización de la función a través de `verify_ajax_call()` solo valida la capacidad `edit_posts` pero no verifica la capacidad `upload_files`. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, carguen imágenes arbitrarias desde URLs remotas a la biblioteca de medios de WordPress, eludiendo la restricción de capacidad estándar de WordPress que impide a los Colaboradores cargar archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.5.32/includes/class-kadence-blocks-prebuilt-library.php#L1177",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.5.32/includes/class-kadence-blocks-prebuilt-library.php#L789",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3454881%40kadence-blocks%2Ftrunk&old=3453204%40kadence-blocks%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9c06e0a9-a13a-4cee-a1a5-c43c114b2dbf?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2642",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T07:16:10.980",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in ggreer the_silver_searcher up to 2.2.0. The impacted element is the function search_stream of the file src/search.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en ggreer the_silver_searcher hasta la versión 2.2.0. El elemento afectado es la función search_stream del archivo src/search.c. La manipulación conduce a una desreferencia de puntero nulo. Se requiere acceso local para llevar a cabo este ataque. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ggreer/the_silver_searcher/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/ggreer/the_silver_searcher/issues/1558",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0119/blob/main/segv1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346398",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346398",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752769",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2644",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T07:16:11.230",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File Parser. This manipulation of the argument variable index with the input 2147483648 causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en niklasso minisat hasta 2.2.0. Este problema afecta a la función Solver::value en la biblioteca core/SolverTypes.h del componente DIMACS File Parser. Esta manipulación del índice de la variable del argumento con la entrada 2147483648 causa una lectura fuera de límites. El ataque debe ser lanzado localmente. El exploit se ha puesto a disposición del público y podría ser usado para ataques. El proyecto fue informado del problema tempranamente a través de un informe de problema pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minisat:minisat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "596B266D-925F-4C87-8D27-C24D786332DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/niklasso/minisat/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/niklasso/minisat/issues/55",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/niklasso/minisat/issues/55#issue-3832527387",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1655",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:14.257",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EventPrime plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization checks in all versions up to, and including, 4.2.8.4. This is due to the save_frontend_event_submission function accepting a user-controlled event_id parameter and updating the corresponding event post without enforcing ownership or capability checks. This makes it possible for authenticated (Customer+) attackers to modify posts created by administrators by manipulating the event_id parameter granted they can obtain a valid nonce."
      }, {
        "lang" : "es",
        "value" : "El plugin EventPrime para WordPress es vulnerable a la modificación no autorizada de publicaciones debido a la falta de comprobaciones de autorización en todas las versiones hasta la 4.2.8.4, inclusive. Esto se debe a que la función save_frontend_event_submission acepta un parámetro event_id controlado por el usuario y actualiza la publicación de evento correspondiente sin aplicar comprobaciones de propiedad o capacidad. Esto permite a atacantes autenticados (Cliente+) modificar publicaciones creadas por administradores manipulando el parámetro event_id, siempre que puedan obtener un nonce válido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/tags/4.2.8.1/includes/class-ep-ajax.php#L741",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/tags/4.2.8.1/includes/class-ep-ajax.php#L798",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/trunk/includes/class-ep-ajax.php#L741",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/eventprime-event-calendar-management/trunk/includes/class-ep-ajax.php#L798",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3455239%40eventprime-event-calendar-management%2Ftrunk&old=3452796%40eventprime-event-calendar-management%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e2a2769-1309-4aad-8411-4445efea2b66?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1831",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:14.873",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and activation due to missing capability checks on the 'yaymail_install_yaysmtp' AJAX action and `/yaymail/v1/addons/activate` REST endpoint in all versions up to, and including, 4.3.2. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to install and activate the YaySMTP plugin."
      }, {
        "lang" : "es",
        "value" : "El plugin YayMail - WooCommerce Email Customizer para WordPress es vulnerable a la instalación y activación no autorizadas de plugins debido a la falta de comprobaciones de capacidad en la acción AJAX 'yaymail_install_yaysmtp' y el endpoint REST `/yaymail/v1/addons/activate` en todas las versiones hasta la 4.3.2, inclusive. Esto permite a atacantes autenticados, con acceso de nivel 'Shop Manager' o superior, instalar y activar el plugin YaySMTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/src/Ajax.php#L183",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/src/Controllers/AddonController.php#L76",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/trunk/src/Ajax.php#L183",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3460087%40yaymail&new=3460087%40yaymail&sfp_email=&sfph_mail=#file11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a568162a-5a2d-47ab-9dfe-2f2f5f324f0d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1860",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:15.043",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the `get_items_permissions_check()` permission callback on the `/kaliforms/v1/forms/{id}` REST API endpoint only checking for the `edit_posts` capability without verifying that the requesting user has ownership or authorization over the specific form resource. This makes it possible for authenticated attackers, with Contributor-level access and above, to read form configuration data belonging to other users (including administrators) by enumerating form IDs. Exposed data includes form field structures, Google reCAPTCHA secret keys (if configured), email notification templates, and server paths."
      }, {
        "lang" : "es",
        "value" : "El plugin Kali Forms para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 2.4.8, inclusive. Esto se debe a que el callback de permisos 'get_items_permissions_check()' en el endpoint de la API REST '/kaliforms/v1/forms/{id}' solo verifica la capacidad 'edit_posts' sin verificar que el usuario solicitante tenga la propiedad o autorización sobre el recurso de formulario específico. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, leer datos de configuración de formularios pertenecientes a otros usuarios (incluidos los administradores) mediante la enumeración de IDs de formulario. Los datos expuestos incluyen estructuras de campos de formulario, claves secretas de Google reCAPTCHA (si están configuradas), plantillas de notificación por correo electrónico y rutas del servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/kali-forms/tags/2.4.8/Inc/Backend/Rest/class-forms-rest-controller.php#L116",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kali-forms/tags/2.4.8/Inc/Backend/Rest/class-forms-rest-controller.php#L251",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kali-forms/tags/2.4.8/Inc/Backend/Rest/class-forms-rest-controller.php#L62",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3460047/kali-forms/trunk?contextall=1&old=3435823&old_path=%2Fkali-forms%2Ftrunk",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a1529c89-5c5e-4a2d-be31-b55d2907c9b6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1938",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:15.207",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized license key deletion due to a missing authorization check on the `/yaymail-license/v1/license/delete` REST endpoint in versions up to, and including, 4.3.2. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to delete the plugin's license key via the '/yaymail-license/v1/license/delete' endpoint granted they can obtain the REST API nonce."
      }, {
        "lang" : "es",
        "value" : "El plugin YayMail – WooCommerce Email Customizer para WordPress es vulnerable a la eliminación no autorizada de claves de licencia debido a una falta de verificación de autorización en el endpoint REST `/yaymail-license/v1/license/delete` en versiones hasta la 4.3.2, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel 'Shop Manager' o superior, eliminen la clave de licencia del plugin a través del endpoint '/yaymail-license/v1/license/delete' siempre que puedan obtener el nonce de la API REST."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/src/License/RestAPI.php#L142",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/trunk/src/License/RestAPI.php#L142",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3460087/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6ce57b12-2241-416b-b466-aa06ca8c7551?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1943",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:15.373",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 4.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Shop Manager-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin YayMail – WooCommerce Email Customizer para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración en todas las versiones hasta la 4.3.2, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida deficiente. Esto permite a atacantes autenticados, con permisos de nivel de 'Shop Manager' o superiores, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde 'unfiltered_html' ha sido deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/src/Controllers/TemplateController.php#L194",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/templates/elements/order-details.php#L123",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yaymail/tags/4.3.2/templates/elements/text.php#L38",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3460087%40yaymail&new=3460087%40yaymail&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/73b4e5a2-bf75-4df9-a816-2cc858947c39?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25421",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-18T08:16:15.540",
      "lastModified" : "2026-02-18T08:16:15.540",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Collision with another CVE."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2112",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:15.637",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce verification on the pending comment deletion action in the cleanup page. This makes it possible for unauthenticated attackers to delete all pending comments via a forged request granted they can trick an admin into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Dam Spam para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0.8, inclusive. Esto se debe a la falta de verificación de nonce en la acción de eliminación de comentarios pendientes en la página de limpieza. Esto hace posible que atacantes no autenticados eliminen todos los comentarios pendientes mediante una petición falsificada, siempre que puedan engañar a un administrador para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/webguyio/dam-spam/blob/52e12fb455e7b670af2e0713f9da84d2d1d309ac/settings/cleanup.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dam-spam/tags/1.0.6/settings/cleanup.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dam-spam/trunk/settings/cleanup.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3457369%40dam-spam&new=3457369%40dam-spam&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e336dc27-4a76-4197-929c-b221f42bfe69?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2419",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T08:16:15.817",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 via the 'download_path' configuration parameter. This is due to insufficient validation of the download path setting, which allows directory traversal sequences to bypass the WP_CONTENT_DIR prefix check. This makes it possible for authenticated attackers, with Administrator-level access and above, to configure the plugin to list and access arbitrary files on the server by exploiting the file browser functionality."
      }, {
        "lang" : "es",
        "value" : "El plugin WP-DownloadManager para WordPress es vulnerable a salto de ruta en todas las versiones hasta la 1.69, inclusive, a través del parámetro de configuración 'download_path'. Esto se debe a una validación insuficiente de la configuración de la ruta de descarga, lo que permite que las secuencias de salto de directorio eludan la verificación de prefijo WP_CONTENT_DIR. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, configuren el plugin para listar y acceder a archivos arbitrarios en el servidor explotando la funcionalidad del navegador de archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lesterchan/wp-downloadmanager/commit/416b9f5459496166c0395f9e055d4c4cf872404a",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-downloadmanager/tags/1.69/download-options.php#L42",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-options.php#L42",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0bb96da1-9c17-4264-ac29-b5ff8dec745d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1649",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T09:15:58.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ce_venue_name' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Community Events para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'ce_venue_name' en todas las versiones hasta la 1.5.7, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con acceso de nivel de administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/community-events/tags/1.5.7/community-events.php#L1403",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/community-events/tags/1.5.7/community-events.php#L779",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/community-events/trunk/community-events.php#L1403",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3456114%40community-events&new=3456114%40community-events&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c44232a9-7b97-449c-b584-ca3c26d63581?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1656",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T09:15:58.403",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check in all versions up to, and including, 6.4.20. This makes it possible for unauthenticated attackers to modify arbitrary listings, including changing titles, content, and email addresses, by directly referencing the listing ID in crafted requests to the wpbdp_ajax AJAX action."
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory para WordPress es vulnerable a una omisión de autorización debido a la falta de una verificación de autorización en todas las versiones hasta la 6.4.20, inclusive. Esto permite a atacantes no autenticados modificar listados arbitrarios, incluyendo el cambio de títulos, contenido y direcciones de correo electrónico, al referenciar directamente el ID del listado en solicitudes manipuladas a la acción AJAX wpbdp_ajax."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/business-directory-plugin/tags/6.4.20/includes/helpers/class-authenticated-listing-view.php#L20",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/business-directory-plugin/trunk/includes/helpers/class-authenticated-listing-view.php#L20",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3452627/business-directory-plugin/tags/6.4.21/includes/controllers/pages/class-submit-listing.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f894ce75-168c-4baa-8cae-d2e7f1a0a9ab?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1941",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T09:15:58.603",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_events' shortcode in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Event Aggregator para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'wp_events' del plugin en todas las versiones hasta la 1.8.7, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida en atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-event-aggregator/tags/1.8.7/includes/class-wp-event-aggregator-cpt.php#L56",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-event-aggregator/tags/1.8.7/includes/class-wp-event-aggregator-cpt.php#L567",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-event-aggregator/tags/1.8.7/includes/class-wp-event-aggregator-cpt.php#L761",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-event-aggregator/trunk/includes/class-wp-event-aggregator-cpt.php#L56",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-event-aggregator/trunk/includes/class-wp-event-aggregator-cpt.php#L567",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-event-aggregator/trunk/includes/class-wp-event-aggregator-cpt.php#L761",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455440/wp-event-aggregator#file18",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/50d8f1e0-2022-4fe1-b384-ca762a032d3c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2127",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T09:15:58.817",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to unauthorized arbitrary shortcode execution in all versions up to, and including, 1.70.4. This is due to a missing capability check on the `siteorigin_widget_preview_widget_action()` function which is registered via the `wp_ajax_so_widgets_preview` AJAX action. The function only verifies a nonce (`widgets_action`) but does not check user capabilities. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes by invoking the `SiteOrigin_Widget_Editor_Widget` via the preview endpoint. The required nonce is exposed on the public frontend when the Post Carousel widget is present on a page, embedded in the `data-ajax-url` HTML attribute."
      }, {
        "lang" : "es",
        "value" : "El plugin SiteOrigin Widgets Bundle para WordPress es vulnerable a la ejecución arbitraria no autorizada de shortcodes en todas las versiones hasta la 1.70.4, inclusive. Esto se debe a una verificación de capacidad faltante en la función `siteorigin_widget_preview_widget_action()` que está registrada a través de la acción AJAX `wp_ajax_so_widgets_preview`. La función solo verifica un nonce (`widgets_action`) pero no comprueba las capacidades del usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, ejecuten shortcodes arbitrarios invocando el `SiteOrigin_Widget_Editor_Widget` a través del endpoint de vista previa. El nonce requerido está expuesto en el frontend público cuando el widget Post Carousel está presente en una página, incrustado en el atributo HTML `data-ajax-url`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/so-widgets-bundle/tags/1.70.4/base/inc/actions.php#L6",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/so-widgets-bundle/tags/1.70.4/base/inc/actions.php#L75",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/so-widgets-bundle/tags/1.70.4/widgets/editor/editor.php#L120",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/so-widgets-bundle/tags/1.70.4/widgets/post-carousel/post-carousel.php#L590",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3460939%40so-widgets-bundle%2Ftrunk&old=3434183%40so-widgets-bundle%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bf92c64b-ca76-4af7-a1e4-585a60b03153?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2495",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T09:15:59.030",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPNakama – Team and multi-Client Collaboration, Editorial and Project Management plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the '/wp-json/WPNakama/v1/boards' REST API endpoint in all versions up to, and including, 0.6.5. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin WPNakama – Colaboración en equipo y multi-cliente, Editorial y Gestión de Proyectos para WordPress es vulnerable a inyección SQL a través del parámetro 'order' del endpoint de la API REST '/wp-json/WPNakama/v1/boards' en todas las versiones hasta la 0.6.5, inclusive. Esto se debe a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes no autenticados añadan consultas SQL adicionales en consultas ya existentes que pueden utilizarse para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpnakama/tags/0.6.5/inc/class-wpnakama-api.php#L209",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpnakama/tags/0.6.5/inc/class-wpnakama.php#L215",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpnakama/trunk/inc/class-wpnakama-api.php#L209",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpnakama/trunk/inc/class-wpnakama.php#L215",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3461315%40wpnakama&new=3461315%40wpnakama&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7ffa92be-9d38-40d9-954d-d890136b5aa1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2126",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T10:16:15.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 20260113. This is due to the `usp_get_submitted_category()` function accepting user-submitted category IDs from the POST body without validating them against the admin-configured allowed categories stored in `usp_options['categories']`. This makes it possible for unauthenticated attackers to assign submitted posts to arbitrary categories, including restricted ones, by crafting a direct POST request with manipulated `user-submitted-category[]` values, bypassing the frontend category restrictions."
      }, {
        "lang" : "es",
        "value" : "El plugin User Submitted Posts – Enable Users to Submit Posts from the Front End para WordPress es vulnerable a una autorización incorrecta en todas las versiones hasta, e incluyendo, 20260113. Esto se debe a que la función `usp_get_submitted_category()` acepta IDs de categoría enviadas por el usuario desde el cuerpo de la solicitud POST sin validarlas contra las categorías permitidas configuradas por el administrador y almacenadas en `usp_options['categories']`. Esto hace posible que atacantes no autenticados asignen publicaciones enviadas a categorías arbitrarias, incluyendo las restringidas, al crear una solicitud POST directa con valores `user-submitted-category[]` manipulados, eludiendo las restricciones de categoría del frontend."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/user-submitted-posts/tags/20260113/user-submitted-posts.php#L1431",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/user-submitted-posts/tags/20260113/user-submitted-posts.php#L298",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3463696%40user-submitted-posts%2Ftrunk&old=3456521%40user-submitted-posts%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/02c5e3ad-5cc3-40b1-a15a-10d53383abe6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1942",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T11:16:32.423",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the b2s_curation_draft AJAX action in all versions up to, and including, 8.7.4. The curationDraft() function only verifies current_user_can('read') without checking whether the user has edit_post permission for the target post. Combined with the plugin granting UI access and nonce exposure to all roles, this makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the title and content of arbitrary posts and pages by supplying a target post ID via the 'b2s-draft-id' parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Blog2Social: Social Media Auto Post &amp; Scheduler para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidad en la acción AJAX b2s_curation_draft en todas las versiones hasta la 8.7.4, inclusive. La función curationDraft() solo verifica current_user_can('read') sin comprobar si el usuario tiene permiso edit_post para la publicación objetivo. Combinado con el plugin que otorga acceso a la interfaz de usuario (UI) y exposición de nonce a todos los roles, esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, sobrescriban el título y el contenido de publicaciones y páginas arbitrarias suministrando un ID de publicación objetivo a través del parámetro 'b2s-draft-id'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/blog2social/tags/8.7.3/includes/Ajax/Post.php#L159",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/blog2social/tags/8.7.3/includes/B2S/Curation/Save.php#L39",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/blog2social/trunk/includes/Ajax/Post.php?rev=3462464",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/930e7fd6-ae0b-465a-aa93-04ef80011d32?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2426",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T11:16:32.603",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 via the 'file' parameter in the file deletion functionality. This is due to insufficient validation of user-supplied file paths, allowing directory traversal sequences. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files like wp-config.php are deleted."
      }, {
        "lang" : "es",
        "value" : "El plugin WP-DownloadManager para WordPress es vulnerable a salto de ruta en todas las versiones hasta la 1.69, inclusive, a través del parámetro 'file' en la funcionalidad de eliminación de archivos. Esto se debe a una validación insuficiente de las rutas de archivo proporcionadas por el usuario, lo que permite secuencias de salto de directorio. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, eliminen archivos arbitrarios en el servidor, lo que puede conducir a ejecución remota de código cuando se eliminan archivos críticos como wp-config.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lesterchan/wp-downloadmanager/commit/d3470a8971d9043438c8aad281cf37d14fefa208",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-downloadmanager/tags/1.69/download-manager.php#L215",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-manager.php#L215",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a3f791dd-7c24-45e3-b4f6-b8d7e594c568?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2653",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T11:16:32.770",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en admesh hasta 0.98.5. Este problema afecta a la función stl_check_normal_vector del archivo src/normals.c. Realizar una manipulación resulta en desbordamiento de búfer basado en montículo. El ataque debe ser iniciado desde una posición local. El exploit ha sido liberado al público y puede ser utilizado para ataques. Parece que este producto ya no se mantiene realmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admesh_project:admesh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.98.5",
            "matchCriteriaId" : "1D1F9409-94C8-44BC-8492-50A3C015D3AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/admesh/admesh/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/admesh/admesh/issues/65",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/admesh/admesh/issues/65#issuecomment-3804571402",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/user-attachments/files/24878279/id.000035.sig.06.src.000550.time.910126.execs.241742.op.havoc.rep.5.zip",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346450",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346450",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752596",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1317",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T13:16:20.167",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 7.37. This is due to insufficient escaping on the `file_name` parameter which is stored in the database during file upload and later used in raw SQL queries without proper sanitization. This makes it possible for authenticated attackers with Subscriber-level access or higher to append additional SQL queries into already existing queries via a malicious filename, which can be used to extract sensitive information from the database. The vulnerability can only be exploited when the 'Single Import/Export' option is enabled, and the server is running a PHP version < 8.0."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress WP Import – Ultimate CSV XML Importer para WordPress es vulnerable a inyección SQL en todas las versiones hasta la 7.37 (inclusive). Esto se debe a un escape insuficiente en el parámetro 'file_name', que se almacena en la base de datos durante la carga de archivos y se utiliza posteriormente en consultas SQL sin procesar sin una sanitización adecuada. Esto permite a atacantes autenticados con acceso de nivel Suscriptor o superior añadir consultas SQL adicionales a consultas ya existentes a través de un nombre de archivo malicioso, lo que puede utilizarse para extraer información sensible de la base de datos. La vulnerabilidad solo puede explotarse cuando la opción 'Single Import/Export' está habilitada y el servidor está ejecutando una versión de PHP &lt; 8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.34/managerExtensions/LogManager.php#L763",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.34/uploadModules/UrlUpload.php#L181",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3445414",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/fd80133d-03c7-4ecb-ad2c-98950f788ca6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1582",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T13:16:20.340",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP All Export plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.14 via the export download endpoint. This is due to a PHP type juggling vulnerability in the security token comparison which uses loose comparison (==) instead of strict comparison (===). This makes it possible for unauthenticated attackers to bypass authentication using \"magic hash\" values when the expected MD5 hash prefix happens to be numeric-looking (matching pattern ^0e\\d+$), allowing download of sensitive export files containing PII, business data, or database information."
      }, {
        "lang" : "es",
        "value" : "El plugin WP All Export para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta la 1.4.14, inclusive, a través del endpoint de descarga de exportación. Esto se debe a una vulnerabilidad de manipulación de tipos de PHP en la comparación del token de seguridad que utiliza una comparación laxa (==) en lugar de una comparación estricta (===). Esto hace posible que atacantes no autenticados eludan la autenticación utilizando valores de 'magic hash' cuando el prefijo del hash MD5 esperado resulta ser de aspecto numérico (coincidiendo con el patrón ^0e\\d+$), permitiendo la descarga de archivos de exportación sensibles que contienen PII, datos comerciales o información de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-all-export/tags/1.4.14/actions/wp_loaded.php#L19",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3455775/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9a92c682-b8b3-4d23-bd84-97d7440ee525?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2386",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T13:16:21.423",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 6.4.7. This is due to the tpae_create_page() AJAX handler authorizing users only with current_user_can('edit_posts') while accepting a user-controlled 'post_type' value passed directly to wp_insert_post() without post-type-specific capability checks. This makes it possible for authenticated attackers, with Author-level access and above, to create arbitrary draft posts for restricted post types (e.g., 'page' and 'nxt_builder') via the 'post_type' parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin The Plus Addons para Elementor – Addons para Elementor, Page Templates, Widgets, Mega Menu, WooCommerce para WordPress es vulnerable a una autorización incorrecta en todas las versiones hasta la 6.4.7, ambas inclusive. Esto se debe a que el manejador AJAX tpae_create_page() autoriza a los usuarios solo con current_user_can('edit_posts') mientras acepta un valor 'post_type' controlado por el usuario pasado directamente a wp_insert_post() sin comprobaciones de capacidad específicas del tipo de publicación. Esto hace posible que atacantes autenticados, con acceso de nivel Autor y superior, creen publicaciones borrador arbitrarias para tipos de publicación restringidos (por ejemplo, 'page' y 'nxt_builder') a través del parámetro 'post_type'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463156/the-plus-addons-for-elementor-page-builder",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4fc3e24a-8b51-4b6f-bacf-665ceb03bc05?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1435",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:05.700",
      "lastModified" : "2026-02-18T20:22:51.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins. The application generates a new 'sessionId' each time a user authenticates, but does not invalidate previously issued session identifiers, which remain valid even after multiple consecutive logins by the same user. As a result, a stolen or leaked 'sessionId' can continue to be used to authenticate valid requests. Exploiting this vulnerability would allow an attacker with access to the web service/API network (port 9000 or HTTP/S endpoint of the server) to reuse an old session token to gain unauthorized access to the application, interact with the API/web, and compromise the integrity of the affected account."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de sesión no invalidada correctamente en la interfaz web de Graylog, versión 2.2.3, debido a una gestión incorrecta de la invalidación de la sesión después de nuevos inicios de sesión. La aplicación genera un nuevo 'sessionId' cada vez que un usuario se autentica, pero no invalida los identificadores de sesión emitidos previamente, los cuales permanecen válidos incluso después de múltiples inicios de sesión consecutivos por el mismo usuario. Como resultado, un 'sessionId' robado o filtrado puede seguir siendo utilizado para autenticar solicitudes válidas. La explotación de esta vulnerabilidad permitiría a un atacante con acceso a la red del servicio web/API (puerto 9000 o punto final HTTP/S del servidor) reutilizar un token de sesión antiguo para obtener acceso no autorizado a la aplicación, interactuar con la API/web, y comprometer la integridad de la cuenta afectada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1436",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:05.850",
      "lastModified" : "2026-02-18T20:23:53.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive third-party information to be accessed, such as names, email addresses, internal identifiers, and last activity. The endpoint 'http://<IP>:12900/users/<my_user>' does not implement object-level authorization validations."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado (IDOR) en la API de Graylog, versión 2.2.3, que ocurre al modificar el ID de usuario en la URL. Un usuario autenticado puede acceder a los perfiles de otros usuarios sin las comprobaciones de autorización adecuadas. La explotación de esta vulnerabilidad permite listar usuarios válidos del sistema y acceder a información sensible de terceros, como nombres, direcciones de correo electrónico, identificadores internos y última actividad. El endpoint 'http://:12900/users/' no implementa validaciones de autorización a nivel de objeto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1437",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:05.993",
      "lastModified" : "2026-02-18T20:21:24.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker to inject and execute arbitrary JavaScript code when a user visits a specially crafted URL. Exploitation of this vulnerability may allow script execution in the victim's browser and limited manipulation of the affected user's session context, through the '/system/authentication/users/edit/' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) reflejada en la consola de la interfaz web de Graylog, versión 2.2.3, causada por una falta de sanitización y escape adecuados en la salida HTML. Varios puntos finales incluyen segmentos de la URL directamente en la respuesta sin aplicar codificación de salida, permitiendo a un atacante inyectar y ejecutar código JavaScript arbitrario cuando un usuario visita una URL especialmente diseñada. La explotación de esta vulnerabilidad puede permitir la ejecución de scripts en el navegador de la víctima y la manipulación limitada del contexto de sesión del usuario afectado, a través del punto final '/system/authentication/users/edit/'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1438",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:06.143",
      "lastModified" : "2026-02-18T20:21:08.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker to inject and execute arbitrary JavaScript code when a user visits a specially crafted URL. Exploitation of this vulnerability may allow script execution in the victim's browser and limited manipulation of the affected user's session context, through the  '/system/nodes/' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) reflejada en la consola de la interfaz web de Graylog, versión 2.2.3, causada por una falta de sanitización y escape adecuados en la salida HTML. Varios puntos finales incluyen segmentos de la URL directamente en la respuesta sin aplicar codificación de salida, permitiendo a un atacante inyectar y ejecutar código JavaScript arbitrario cuando un usuario visita una URL especialmente diseñada. La explotación de esta vulnerabilidad puede permitir la ejecución de scripts en el navegador de la víctima y la manipulación limitada del contexto de la sesión del usuario afectado, a través del punto final '/system/nodes/'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1439",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:06.290",
      "lastModified" : "2026-02-18T20:20:50.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker to inject and execute arbitrary JavaScript code when a user visits a specially crafted URL. Exploitation of this vulnerability may allow script execution in the victim's browser and limited manipulation of the affected user's session context, through the  '/\n\nalerts\n\n/' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) reflejado en la consola de la interfaz web de Graylog, versión 2.2.3, causada por una falta de sanitización y escape adecuados en la salida HTML. Varios endpoints incluyen segmentos de la URL directamente en la respuesta sin aplicar codificación de salida, permitiendo a un atacante inyectar y ejecutar código JavaScript arbitrario cuando un usuario visita una URL especialmente diseñada. La explotación de esta vulnerabilidad puede permitir la ejecución de scripts en el navegador de la víctima y la manipulación limitada del contexto de la sesión del usuario afectado, a través del endpoint '/alerts/'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1440",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:06.440",
      "lastModified" : "2026-02-18T20:20:33.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker to inject and execute arbitrary JavaScript code when a user visits a specially crafted URL. Exploitation of this vulnerability may allow script execution in the victim's browser and limited manipulation of the affected user's session context, through the  '/system/pipelines/' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) reflejada en la consola de la interfaz web de Graylog, versión 2.2.3, causada por una falta de sanitización y escape adecuados en la salida HTML. Varios endpoints incluyen segmentos de la URL directamente en la respuesta sin aplicar codificación de salida, permitiendo a un atacante inyectar y ejecutar código JavaScript arbitrario cuando un usuario visita una URL especialmente diseñada. La explotación de esta vulnerabilidad puede permitir la ejecución de scripts en el navegador de la víctima y la manipulación limitada del contexto de la sesión del usuario afectado, a través del endpoint '/system/pipelines/'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1441",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:06.590",
      "lastModified" : "2026-02-18T20:20:16.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker to inject and execute arbitrary JavaScript code when a user visits a specially crafted URL. Exploitation of this vulnerability may allow script execution in the victim's browser and limited manipulation of the affected user's session context, through the  '/system/index_sets/' endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) reflejada en la consola de la interfaz web de Graylog, versión 2.2.3, causada por una falta de sanitización y escape adecuados en la salida HTML. Varios endpoints incluyen segmentos de la URL directamente en la respuesta sin aplicar codificación de salida, permitiendo a un atacante inyectar y ejecutar código JavaScript arbitrario cuando un usuario visita una URL especialmente diseñada. La explotación de esta vulnerabilidad puede permitir la ejecución de scripts en el navegador de la víctima y manipulación limitada del contexto de la sesión del usuario afectado, a través del endpoint '/system/index_sets/'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graylog:graylog:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16887AF-88FA-4E84-8AD7-F3EBA153E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-graylog",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2464",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-18T14:16:07.120",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in the AMR Printer Management 1.01 Beta web service, which allows remote attackers to read arbitrary files from the underlying Windows system by using specially crafted path traversal sequences in requests directed to the web management service. The service is accessible without authentication and runs with elevated privileges, amplifying the impact of the vulnerability. An attacker can exploit this condition to access sensitive and privileged files on the system using path traversal payloads. Successful exploitation of this vulnerability could lead to the unauthorized disclosure of internal system information, compromising the confidentiality of the affected environment."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de ruta en el servicio web AMR Printer Management 1.01 Beta, que permite a atacantes remotos leer archivos arbitrarios del sistema Windows subyacente mediante el uso de secuencias de salto de ruta especialmente diseñadas en solicitudes dirigidas al servicio de gestión web. El servicio es accesible sin autenticación y se ejecuta con privilegios elevados, amplificando el impacto de la vulnerabilidad. Un atacante puede explotar esta condición para acceder a archivos sensibles y privilegiados en el sistema utilizando cargas útiles de salto de ruta. La explotación exitosa de esta vulnerabilidad podría conducir a la divulgación no autorizada de información interna del sistema, comprometiendo la confidencialidad del entorno afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-amr-printer-management-amr",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2654",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T14:16:07.277",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en huggingface smolagents 1.24.0. Afecta a la función requests.get/requests.post del componente LocalPythonExecutor. La ejecución de una manipulación puede conducir a una falsificación de petición del lado del servidor. Es posible lanzar el ataque remotamente. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huggingface:smolagents:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.24.0",
            "matchCriteriaId" : "C2A50B65-5D81-4F1A-9144-55A307BE61FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CH0ico/CVE_choco_smolagent/blob/main/report.md#proof-of-concept-execution",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CH0ico/CVE_choco_smolagent/tree/main",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346451",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346451",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752774",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2655",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T14:16:07.490",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::str_less::operator of the file include/chaiscript/chaiscript_defines.hpp. The manipulation results in use after free. The attack requires a local approach. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en ChaiScript hasta 6.1.0. El elemento impactado es la función chaiscript::str_less::operator del archivo include/chaiscript/chaiscript_defines.hpp. La manipulación resulta en use after free. El ataque requiere un enfoque local. El ataque requiere un alto nivel de complejidad. La explotabilidad se considera difícil. El exploit ahora es público y puede ser usado. El proyecto fue informado del problema tempranamente a través de un informe de problema pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaiscript:chaiscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "7C9648DA-18A7-412B-AEE5-903C40744AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChaiScript/ChaiScript/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/632#issue-3827824936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346453",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346453",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752788",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/632",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory", "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1404",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T15:18:40.850",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the filter parameters (e.g., 'filter_first_name') in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &amp; Membership Plugin para WordPress es vulnerable a cross-site scripting reflejado a través de los parámetros de filtro (por ejemplo, 'filter_first_name') en todas las versiones hasta la 2.11.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a los atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/assets/js/um-members.js#L515",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/templates/members.php#L348",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3458086/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba62b804-f101-4e29-8304-fb2b7dad333c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1426",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T15:18:41.023",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 via deserialization of untrusted input in the shortcode_check function within the Live Composer compatibility layer. This makes it possible for authenticated attackers, with Author-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Note: This vulnerability requires the Live Composer plugin to also be installed and active."
      }, {
        "lang" : "es",
        "value" : "El plugin Advanced AJAX Product Filters para WordPress es vulnerable a la inyección de objetos PHP en todas las versiones hasta la 3.1.9.6, inclusive, a través de la deserialización de entrada no confiable en la función shortcode_check dentro de la capa de compatibilidad de Live Composer. Esto hace posible que atacantes autenticados, con acceso de nivel de Autor y superior, inyecten un objeto PHP. No hay una cadena POP conocida presente en el software vulnerable, lo que significa que esta vulnerabilidad no tiene impacto a menos que otro plugin o tema que contenga una cadena POP esté instalado en el sitio. Si una cadena POP está presente a través de un plugin o tema adicional instalado en el sistema objetivo, puede permitir al atacante realizar acciones como eliminar archivos arbitrarios, recuperar datos sensibles o ejecutar código dependiendo de la cadena POP presente. Nota: Esta vulnerabilidad requiere que el plugin Live Composer también esté instalado y activo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/502.html",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-ajax-filters/trunk/includes/compatibility/live_composer.php#L25",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-ajax-filters/trunk/includes/compatibility/live_composer.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-ajax-filters/trunk/includes/compatibility/live_composer.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3449344/#file418",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/29e76d57-217f-4f21-8bc6-a86290783a19?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23211",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:42.360",
      "lastModified" : "2026-03-18T20:39:45.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm, swap: restore swap_space attr aviod kernel panic\n\ncommit 8b47299a411a (\"mm, swap: mark swap address space ro and add context\ndebug check\") made the swap address space read-only.  It may lead to\nkernel panic if arch_prepare_to_swap returns a failure under heavy memory\npressure as follows,\n\nel1_abort+0x40/0x64\nel1h_64_sync_handler+0x48/0xcc\nel1h_64_sync+0x84/0x88\nerrseq_set+0x4c/0xb8 (P)\n__filemap_set_wb_err+0x20/0xd0\nshrink_folio_list+0xc20/0x11cc\nevict_folios+0x1520/0x1be4\ntry_to_shrink_lruvec+0x27c/0x3dc\nshrink_one+0x9c/0x228\nshrink_node+0xb3c/0xeac\ndo_try_to_free_pages+0x170/0x4f0\ntry_to_free_pages+0x334/0x534\n__alloc_pages_direct_reclaim+0x90/0x158\n__alloc_pages_slowpath+0x334/0x588\n__alloc_frozen_pages_noprof+0x224/0x2fc\n__folio_alloc_noprof+0x14/0x64\nvma_alloc_zeroed_movable_folio+0x34/0x44\ndo_pte_missing+0xad4/0x1040\nhandle_mm_fault+0x4a4/0x790\ndo_page_fault+0x288/0x5f8\ndo_translation_fault+0x38/0x54\ndo_mem_abort+0x54/0xa8\n\nRestore swap address space as not ro to avoid the panic."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm, swap: restaurar el atributo swap_space para evitar un kernel panic\n\nEl commit 8b47299a411a ('mm, swap: marcar el espacio de direcciones de swap como ro y añadir verificación de depuración de contexto') hizo que el espacio de direcciones de swap fuera de solo lectura. Esto puede llevar a un kernel panic si arch_prepare_to_swap devuelve un fallo bajo una fuerte presión de memoria, como sigue,\n\nel1_abort+0x40/0x64\nel1h_64_sync_handler+0x48/0xcc\nel1h_64_sync+0x84/0x88\nerrseq_set+0x4c/0xb8 (P)\n__filemap_set_wb_err+0x20/0xd0\nshrink_folio_list+0xc20/0x11cc\nevict_folios+0x1520/0x1be4\ntry_to_shrink_lruvec+0x27c/0x3dc\nshrink_one+0x9c/0x228\nshrink_node+0xb3c/0xeac\ndo_try_to_free_pages+0x170/0x4f0\ntry_to_free_pages+0x334/0x534\n__alloc_pages_direct_reclaim+0x90/0x158\n__alloc_pages_slowpath+0x334/0x588\n__alloc_frozen_pages_noprof+0x224/0x2fc\n__folio_alloc_noprof+0x14/0x64\nvma_alloc_zeroed_movable_folio+0x34/0x44\ndo_pte_missing+0xad4/0x1040\nhandle_mm_fault+0x4a4/0x790\ndo_page_fault+0x288/0x5f8\ndo_translation_fault+0x38/0x54\ndo_mem_abort+0x54/0xa8\n\nRestaurar el espacio de direcciones de swap como no ro para evitar el pánico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "64A5E20D-6D91-446C-A826-4E89EFEA0278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/a0f3c0845a4ff68d403c568266d17e9cc553e561",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b0020cbd26380177b9fb8b7e75a8f7bdba79db20",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23212",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:42.470",
      "lastModified" : "2026-03-18T20:37:42.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: annotate data-races around slave->last_rx\n\nslave->last_rx and slave->target_last_arp_rx[...] can be read and written\nlocklessly. Add READ_ONCE() and WRITE_ONCE() annotations.\n\nsyzbot reported:\n\nBUG: KCSAN: data-race in bond_rcv_validate / bond_rcv_validate\n\nwrite to 0xffff888149f0d428 of 8 bytes by interrupt on cpu 1:\n  bond_rcv_validate+0x202/0x7a0 drivers/net/bonding/bond_main.c:3335\n  bond_handle_frame+0xde/0x5e0 drivers/net/bonding/bond_main.c:1533\n  __netif_receive_skb_core+0x5b1/0x1950 net/core/dev.c:6039\n  __netif_receive_skb_one_core net/core/dev.c:6150 [inline]\n  __netif_receive_skb+0x59/0x270 net/core/dev.c:6265\n  netif_receive_skb_internal net/core/dev.c:6351 [inline]\n  netif_receive_skb+0x4b/0x2d0 net/core/dev.c:6410\n...\n\nwrite to 0xffff888149f0d428 of 8 bytes by interrupt on cpu 0:\n  bond_rcv_validate+0x202/0x7a0 drivers/net/bonding/bond_main.c:3335\n  bond_handle_frame+0xde/0x5e0 drivers/net/bonding/bond_main.c:1533\n  __netif_receive_skb_core+0x5b1/0x1950 net/core/dev.c:6039\n  __netif_receive_skb_one_core net/core/dev.c:6150 [inline]\n  __netif_receive_skb+0x59/0x270 net/core/dev.c:6265\n  netif_receive_skb_internal net/core/dev.c:6351 [inline]\n  netif_receive_skb+0x4b/0x2d0 net/core/dev.c:6410\n  br_netif_receive_skb net/bridge/br_input.c:30 [inline]\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n...\n\nvalue changed: 0x0000000100005365 -> 0x0000000100005366"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbonding: anotar condiciones de carrera de datos alrededor de slave-&gt;last_rx\n\nslave-&gt;last_rx y slave-&gt;target_last_arp_rx[...] pueden ser leídos y escritos sin bloqueo. Añadir anotaciones READ_ONCE() y WRITE_ONCE().\n\nsyzbot informó:\n\nERROR: KCSAN: condición de carrera de datos en bond_rcv_validate / bond_rcv_validate\n\nescritura en 0xffff888149f0d428 de 8 bytes por interrupción en la CPU 1:\n  bond_rcv_validate+0x202/0x7a0 drivers/net/bonding/bond_main.c:3335\n  bond_handle_frame+0xde/0x5e0 drivers/net/bonding/bond_main.c:1533\n  __netif_receive_skb_core+0x5b1/0x1950 net/core/dev.c:6039\n  __netif_receive_skb_one_core net/core/dev.c:6150 [inline]\n  __netif_receive_skb+0x59/0x270 net/core/dev.c:6265\n  netif_receive_skb_internal net/core/dev.c:6351 [inline]\n  netif_receive_skb+0x4b/0x2d0 net/core/dev.c:6410\n...\n\nescritura en 0xffff888149f0d428 de 8 bytes por interrupción en la CPU 0:\n  bond_rcv_validate+0x202/0x7a0 drivers/net/bonding/bond_main.c:3335\n  bond_handle_frame+0xde/0x5e0 drivers/net/bonding/bond_main.c:1533\n  __netif_receive_skb_core+0x5b1/0x1950 net/core/dev.c:6039\n  __netif_receive_skb_one_core net/core/dev.c:6150 [inline]\n  __netif_receive_skb+0x59/0x270 net/core/dev.c:6265\n  netif_receive_skb_internal net/core/dev.c:6351 [inline]\n  netif_receive_skb+0x4b/0x2d0 net/core/dev.c:6410\n  br_netif_receive_skb net/bridge/br_input.c:30 [inline]\n  NF_HOOK include/linux/netfilter.h:318 [inline]\n...\n\nvalor cambiado: 0x0000000100005365 -&gt; 0x0000000100005366"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.19",
            "versionEndExcluding" : "6.1.162",
            "matchCriteriaId" : "C7C23F7A-B2D7-4094-9419-D02BB6EEF2A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.123",
            "matchCriteriaId" : "316D8D4E-FE44-4C76-8403-63CAF51EEFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.69",
            "matchCriteriaId" : "3F0D11B0-A3DA-4D8F-89B9-CFD2094EBA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.9",
            "matchCriteriaId" : "171CFCB2-8F49-4F9E-8A67-FAC6BF45B5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/8c0be3277e7aefb2f900fc37ca3fe7df362e26f5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a7516cb0165926d308187e231ccd330e5e3ebff7",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b956289b83887e0a306067b6003c3fcd81bfdf84",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/bd98324e327e41de04b13e372cc16f73150df254",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f6c3665b6dc53c3ab7d31b585446a953a74340ef",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23213",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:42.600",
      "lastModified" : "2026-03-18T20:35:21.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: Disable MMIO access during SMU Mode 1 reset\n\nDuring Mode 1 reset, the ASIC undergoes a reset cycle and becomes\ntemporarily inaccessible via PCIe. Any attempt to access MMIO registers\nduring this window (e.g., from interrupt handlers or other driver threads)\ncan result in uncompleted PCIe transactions, leading to NMI panics or\nsystem hangs.\n\nTo prevent this, set the `no_hw_access` flag to true immediately after\ntriggering the reset. This signals other driver components to skip\nregister accesses while the device is offline.\n\nA memory barrier `smp_mb()` is added to ensure the flag update is\nglobally visible to all cores before the driver enters the sleep/wait\nstate.\n\n(cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amd/pm: Deshabilitar el acceso MMIO durante el reinicio del Modo 1 de SMU\n\nDurante el reinicio del Modo 1, el ASIC se somete a un ciclo de reinicio y se vuelve temporalmente inaccesible a través de PCIe. Cualquier intento de acceder a los registros MMIO durante esta ventana (por ejemplo, desde manejadores de interrupciones u otros hilos del controlador) puede resultar en transacciones PCIe incompletas, lo que lleva a pánicos NMI o cuelgues del sistema.\n\nPara evitar esto, establecer la bandera 'no_hw_access' en verdadero inmediatamente después de activar el reinicio. Esto indica a otros componentes del controlador que omitan los accesos a registros mientras el dispositivo está fuera de línea.\n\nSe añade una barrera de memoria 'smp_mb()' para asegurar que la actualización de la bandera sea globalmente visible para todos los núcleos antes de que el controlador entre en el estado de suspensión/espera.\n\n(seleccionado de la confirmación 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.9",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "016492C6-1EA3-4066-9AEC-03A27A000C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0de604d0357d0d22cbf03af1077d174b641707b6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c1853ebbec980d5c05d431bfd6ded73b1363fd00",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cd7ff7fd3e4b77f0b5a292e0926532eaa07c5162",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23214",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:42.717",
      "lastModified" : "2026-03-18T20:34:47.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: reject new transactions if the fs is fully read-only\n\n[BUG]\nThere is a bug report where a heavily fuzzed fs is mounted with all\nrescue mount options, which leads to the following warnings during\nunmount:\n\n  BTRFS: Transaction aborted (error -22)\n  Modules linked in:\n  CPU: 0 UID: 0 PID: 9758 Comm: repro.out Not tainted\n  6.19.0-rc5-00002-gb71e635feefc #7 PREEMPT(full)\n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n  RIP: 0010:find_free_extent_update_loop fs/btrfs/extent-tree.c:4208 [inline]\n  RIP: 0010:find_free_extent+0x52f0/0x5d20 fs/btrfs/extent-tree.c:4611\n  Call Trace:\n   <TASK>\n   btrfs_reserve_extent+0x2cd/0x790 fs/btrfs/extent-tree.c:4705\n   btrfs_alloc_tree_block+0x1e1/0x10e0 fs/btrfs/extent-tree.c:5157\n   btrfs_force_cow_block+0x578/0x2410 fs/btrfs/ctree.c:517\n   btrfs_cow_block+0x3c4/0xa80 fs/btrfs/ctree.c:708\n   btrfs_search_slot+0xcad/0x2b50 fs/btrfs/ctree.c:2130\n   btrfs_truncate_inode_items+0x45d/0x2350 fs/btrfs/inode-item.c:499\n   btrfs_evict_inode+0x923/0xe70 fs/btrfs/inode.c:5628\n   evict+0x5f4/0xae0 fs/inode.c:837\n   __dentry_kill+0x209/0x660 fs/dcache.c:670\n   finish_dput+0xc9/0x480 fs/dcache.c:879\n   shrink_dcache_for_umount+0xa0/0x170 fs/dcache.c:1661\n   generic_shutdown_super+0x67/0x2c0 fs/super.c:621\n   kill_anon_super+0x3b/0x70 fs/super.c:1289\n   btrfs_kill_super+0x41/0x50 fs/btrfs/super.c:2127\n   deactivate_locked_super+0xbc/0x130 fs/super.c:474\n   cleanup_mnt+0x425/0x4c0 fs/namespace.c:1318\n   task_work_run+0x1d4/0x260 kernel/task_work.c:233\n   exit_task_work include/linux/task_work.h:40 [inline]\n   do_exit+0x694/0x22f0 kernel/exit.c:971\n   do_group_exit+0x21c/0x2d0 kernel/exit.c:1112\n   __do_sys_exit_group kernel/exit.c:1123 [inline]\n   __se_sys_exit_group kernel/exit.c:1121 [inline]\n   __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121\n   x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232\n   do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n   do_syscall_64+0xe8/0xf80 arch/x86/entry/syscall_64.c:94\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n  RIP: 0033:0x44f639\n  Code: Unable to access opcode bytes at 0x44f60f.\n  RSP: 002b:00007ffc15c4e088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\n  RAX: ffffffffffffffda RBX: 00000000004c32f0 RCX: 000000000044f639\n  RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001\n  RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004c32f0\n  R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\n   </TASK>\n\nSince rescue mount options will mark the full fs read-only, there should\nbe no new transaction triggered.\n\nBut during unmount we will evict all inodes, which can trigger a new\ntransaction, and triggers warnings on a heavily corrupted fs.\n\n[CAUSE]\nBtrfs allows new transaction even on a read-only fs, this is to allow\nlog replay happen even on read-only mounts, just like what ext4/xfs do.\n\nHowever with rescue mount options, the fs is fully read-only and cannot\nbe remounted read-write, thus in that case we should also reject any new\ntransactions.\n\n[FIX]\nIf we find the fs has rescue mount options, we should treat the fs as\nerror, so that no new transaction can be started."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbtrfs: rechazar nuevas transacciones si el fs es completamente de solo lectura\n\n[ERROR]\nHay un informe de error donde un fs fuertemente fuzzed se monta con todas las opciones de montaje de rescate, lo que lleva a las siguientes advertencias durante el desmontaje:\n\n  BTRFS: Transacción abortada (error -22)\n  Módulos enlazados:\n  CPU: 0 UID: 0 PID: 9758 Comm: repro.out No contaminado\n  6.19.0-rc5-00002-gb71e635feefc #7 PREEMPT(full)\n  Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n  RIP: 0010:find_free_extent_update_loop fs/btrfs/extent-tree.c:4208 [en línea]\n  RIP: 0010:find_free_extent+0x52f0/0x5d20 fs/btrfs/extent-tree.c:4611\n  Rastro de llamada:\n   \n   btrfs_reserve_extent+0x2cd/0x790 fs/btrfs/extent-tree.c:4705\n   btrfs_alloc_tree_block+0x1e1/0x10e0 fs/btrfs/extent-tree.c:5157\n   btrfs_force_cow_block+0x578/0x2410 fs/btrfs/ctree.c:517\n   btrfs_cow_block+0x3c4/0xa80 fs/btrfs/ctree.c:708\n   btrfs_search_slot+0xcad/0x2b50 fs/btrfs/ctree.c:2130\n   btrfs_truncate_inode_items+0x45d/0x2350 fs/btrfs/inode-item.c:499\n   btrfs_evict_inode+0x923/0xe70 fs/btrfs/inode.c:5628\n   evict+0x5f4/0xae0 fs/inode.c:837\n   __dentry_kill+0x209/0x660 fs/dcache.c:670\n   finish_dput+0xc9/0x480 fs/dcache.c:879\n   shrink_dcache_for_umount+0xa0/0x170 fs/dcache.c:1661\n   generic_shutdown_super+0x67/0x2c0 fs/super.c:621\n   kill_anon_super+0x3b/0x70 fs/super.c:1289\n   btrfs_kill_super+0x41/0x50 fs/btrfs/super.c:2127\n   deactivate_locked_super+0xbc/0x130 fs/super.c:474\n   cleanup_mnt+0x425/0x4c0 fs/namespace.c:1318\n   task_work_run+0x1d4/0x260 kernel/task_work.c:233\n   exit_task_work include/linux/task_work.h:40 [en línea]\n   do_exit+0x694/0x22f0 kernel/exit.c:971\n   do_group_exit+0x21c/0x2d0 kernel/exit.c:1112\n   __do_sys_exit_group kernel/exit.c:1123 [en línea]\n   __se_sys_exit_group kernel/exit.c:1121 [en línea]\n   __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121\n   x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232\n   do_syscall_x64 arch/x86/entry/syscall_64.c:63 [en línea]\n   do_syscall_64+0xe8/0xf80 arch/x86/entry/syscall_64.c:94\n   entry_SYSCALL_64_after_hwframe+0x77/0x7f\n  RIP: 0033:0x44f639\n  Código: No se pueden acceder a los bytes del código de operación en 0x44f60f.\n  RSP: 002b:00007ffc15c4e088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\n  RAX: ffffffffffffffda RBX: 00000000004c32f0 RCX: 000000000044f639\n  RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001\n  RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000\n  R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004c32f0\n  R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\n   \n\nDado que las opciones de montaje de rescate marcarán el fs completo como de solo lectura, no debería activarse ninguna nueva transacción.\n\nPero durante el desmontaje expulsaremos todos los inodos, lo que puede activar una nueva transacción, y activa advertencias en un fs fuertemente corrupto.\n\n[CAUSA]\nBtrfs permite nuevas transacciones incluso en un fs de solo lectura, esto es para permitir que la reproducción del registro ocurra incluso en montajes de solo lectura, al igual que lo hacen ext4/xfs.\n\nSin embargo, con las opciones de montaje de rescate, el fs es completamente de solo lectura y no puede ser remontado como lectura-escritura, por lo tanto, en ese caso también deberíamos rechazar cualquier nueva transacción.\n\n[SOLUCIÓN]\nSi encontramos que el fs tiene opciones de montaje de rescate, deberíamos tratar el fs como un error, para que no se pueda iniciar ninguna nueva transacción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "3483BE0E-C054-491B-B5C4-98ADBC2F04F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1972f44c189c8aacde308fa9284e474c1a5cbd9f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3228b2eceb6c3d7e237f8a5330113dbd164fb90d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a928eecf030a9a5dc5f5ca98332699f379b91963",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23215",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:42.843",
      "lastModified" : "2026-03-18T20:30:20.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/vmware: Fix hypercall clobbers\n\nFedora QA reported the following panic:\n\n  BUG: unable to handle page fault for address: 0000000040003e54\n  #PF: supervisor write access in kernel mode\n  #PF: error_code(0x0002) - not-present page\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20251119-3.fc43 11/19/2025\n  RIP: 0010:vmware_hypercall4.constprop.0+0x52/0x90\n  ..\n  Call Trace:\n   vmmouse_report_events+0x13e/0x1b0\n   psmouse_handle_byte+0x15/0x60\n   ps2_interrupt+0x8a/0xd0\n   ...\n\nbecause the QEMU VMware mouse emulation is buggy, and clears the top 32\nbits of %rdi that the kernel kept a pointer in.\n\nThe QEMU vmmouse driver saves and restores the register state in a\n\"uint32_t data[6];\" and as a result restores the state with the high\nbits all cleared.\n\nRDI originally contained the value of a valid kernel stack address\n(0xff5eeb3240003e54).  After the vmware hypercall it now contains\n0x40003e54, and we get a page fault as a result when it is dereferenced.\n\nThe proper fix would be in QEMU, but this works around the issue in the\nkernel to keep old setups working, when old kernels had not happened to\nkeep any state in %rdi over the hypercall.\n\nIn theory this same issue exists for all the hypercalls in the vmmouse\ndriver; in practice it has only been seen with vmware_hypercall3() and\nvmware_hypercall4().  For now, just mark RDI/RSI as clobbered for those\ntwo calls.  This should have a minimal effect on code generation overall\nas it should be rare for the compiler to want to make RDI/RSI live\nacross hypercalls."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nx86/vmware: Solución para las sobrescrituras de hiperllamadas\n\nFedora QA informó el siguiente pánico:\n\n  BUG: unable to handle page fault for address: 0000000040003e54\n  #PF: supervisor write access in kernel mode\n  #PF: error_code(0x0002) - not-present page\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20251119-3.fc43 11/19/2025\n  RIP: 0010:vmware_hypercall4.constprop.0+0x52/0x90\n  ..\n  Call Trace:\n   vmmouse_report_events+0x13e/0x1b0\n   psmouse_handle_byte+0x15/0x60\n   ps2_interrupt+0x8a/0xd0\n   ...\n\nporque la emulación de ratón QEMU VMware tiene errores y borra los 32 bits superiores de %rdi donde el kernel mantenía un puntero.\n\nEl controlador QEMU vmmouse guarda y restaura el estado del registro en un 'uint32_t data[6];' y, como resultado, restaura el estado con todos los bits altos borrados.\n\nRDI originalmente contenía el valor de una dirección de pila de kernel válida (0xff5eeb3240003e54). Después de la hiperllamada de vmware, ahora contiene 0x40003e54, y obtenemos un fallo de página como resultado cuando es desreferenciado.\n\nLa solución adecuada estaría en QEMU, pero esto evita el problema en el kernel para mantener las configuraciones antiguas funcionando, cuando los kernels antiguos no habían guardado ningún estado en %rdi durante la hiperllamada.\n\nEn teoría, este mismo problema existe para todas las hiperllamadas en el controlador vmmouse; en la práctica, solo se ha visto con vmware_hypercall3() y vmware_hypercall4(). Por ahora, simplemente marca RDI/RSI como sobrescritos para esas dos llamadas. Esto debería tener un efecto mínimo en la generación de código en general, ya que debería ser raro que el compilador quiera mantener RDI/RSI activos a través de hiperllamadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "4CF24CBE-557F-47D8-9FF4-305CAB4A0A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2687c848e57820651b9f69d30c4710f4219f7dbf",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2f467a92df61eb516a4ec36ee16234dd4e5ccf00",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/feb603a69f830acb58f78d604f0c29e63cd38f87",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23216",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:42.957",
      "lastModified" : "2026-03-18T20:28:20.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()\n\nIn iscsit_dec_conn_usage_count(), the function calls complete() while\nholding the conn->conn_usage_lock. As soon as complete() is invoked, the\nwaiter (such as iscsit_close_connection()) may wake up and proceed to free\nthe iscsit_conn structure.\n\nIf the waiter frees the memory before the current thread reaches\nspin_unlock_bh(), it results in a KASAN slab-use-after-free as the function\nattempts to release a lock within the already-freed connection structure.\n\nFix this by releasing the spinlock before calling complete()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nscsi: target: iscsi: Corrección de uso después de liberación en iscsit_dec_conn_usage_count()\n\nEn iscsit_dec_conn_usage_count(), la función llama a complete() mientras mantiene el conn-&gt;conn_usage_lock. Tan pronto como se invoca complete(), el proceso en espera (como iscsit_close_connection()) puede despertarse y proceder a liberar la estructura iscsit_conn.\n\nSi el proceso en espera libera la memoria antes de que el hilo actual alcance spin_unlock_bh(), resulta en un KASAN slab-uso después de liberación, ya que la función intenta liberar un bloqueo dentro de la estructura de conexión ya liberada.\n\nEsto se corrige liberando el spinlock antes de llamar a complete()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "5.10.250",
            "matchCriteriaId" : "2A068B57-89F0-436B-8831-F30BCBF37F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.200",
            "matchCriteriaId" : "D16F6370-B70F-471C-8363-3A17B0BB1DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.163",
            "matchCriteriaId" : "E9C856E1-4308-4C0B-A973-7DD375DF66C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.124",
            "matchCriteriaId" : "76183B9F-CABE-4E21-A3E3-F0EBF99DC3C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "F3791390-0628-4808-99EF-1ED8ABF60933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/275016a551ba1a068a3bd6171b18611726b67110",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/3835e49e146a4e6e7787b29465f1a23379b6ec44",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/48fe983e92de2c59d143fe38362ad17ba23ec7f3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/73b487d44bf4f92942629d578381f89c326ff77f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8518f072fc92921418cd9ed4268dd4f3e9a8fd75",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9411a89e9e7135cc459178fa77a3f1d6191ae903",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ba684191437380a07b27666eb4e72748be1ea201",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23217",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:43.080",
      "lastModified" : "2026-03-18T17:36:43.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: trace: fix snapshot deadlock with sbi ecall\n\nIf sbi_ecall.c's functions are traceable,\n\necho \"__sbi_ecall:snapshot\" > /sys/kernel/tracing/set_ftrace_filter\n\nmay get the kernel into a deadlock.\n\n(Functions in sbi_ecall.c are excluded from tracing if\nCONFIG_RISCV_ALTERNATIVE_EARLY is set.)\n\n__sbi_ecall triggers a snapshot of the ringbuffer. The snapshot code\nraises an IPI interrupt, which results in another call to __sbi_ecall\nand another snapshot...\n\nAll it takes to get into this endless loop is one initial __sbi_ecall.\nOn RISC-V systems without SSTC extension, the clock events in\ntimer-riscv.c issue periodic sbi ecalls, making the problem easy to\ntrigger.\n\nAlways exclude the sbi_ecall.c functions from tracing to fix the\npotential deadlock.\n\nsbi ecalls can easiliy be logged via trace events, excluding ecall\nfunctions from function tracing is not a big limitation."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nriscv: trace: corregir interbloqueo de instantánea con sbi ecall\n\nSi las funciones de sbi_ecall.c son rastreables,\n\necho '__sbi_ecall:snapshot' &gt; /sys/kernel/tracing/set_ftrace_filter\n\npuede llevar al kernel a un interbloqueo.\n\n(Las funciones en sbi_ecall.c se excluyen del rastreo si CONFIG_RISCV_ALTERNATIVE_EARLY está configurado.)\n\n__sbi_ecall activa una instantánea del ringbuffer. El código de la instantánea genera una interrupción IPI, lo que resulta en otra llamada a __sbi_ecall y otra instantánea...\n\nTodo lo que se necesita para entrar en este bucle infinito es una __sbi_ecall inicial. En sistemas RISC-V sin la extensión SSTC, los eventos de reloj en timer-riscv.c emiten sbi ecalls periódicas, haciendo que el problema sea fácil de activar.\n\nExcluir siempre las funciones de sbi_ecall.c del rastreo para corregir el interbloqueo potencial.\n\nLas sbi ecalls pueden registrarse fácilmente a través de eventos de rastreo, excluir las funciones ecall del rastreo de funciones no es una gran limitación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.10",
            "versionEndExcluding" : "6.11",
            "matchCriteriaId" : "20B10614-CE0D-494A-9FEA-F01A6985C9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11.1",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "EA8A5D78-6E70-4B4A-802B-44FFB0543B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4770BA57-3F3F-493B-8608-EC3B25254949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.11:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5298B3-04B4-4F3E-B186-01A58B5C75A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b1f8285bc8e3508c1fde23b5205f1270215d4984",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23218",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:43.187",
      "lastModified" : "2026-03-18T17:31:03.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc()\n\nFix incorrect NULL check in loongson_gpio_init_irqchip().\nThe function checks chip->parent instead of chip->irq.parents."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngpio: loongson-64bit: Corrección de verificación NULL incorrecta después de devm_kcalloc()\n\nCorrige la verificación NULL incorrecta en loongson_gpio_init_irqchip().\nLa función verifica chip-&gt;parent en lugar de chip-&gt;irq.parents."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.18",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "32F6354D-FB80-4DEC-B5BD-29DA22C31C55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/e34f77b09080c86c929153e2a72da26b4f8947ff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e71e3fa90a15134113f61343392e887cd1f4bf7c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23219",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T15:18:43.310",
      "lastModified" : "2026-03-18T17:30:31.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single\n\nWhen CONFIG_MEM_ALLOC_PROFILING_DEBUG is enabled, the following warning\nmay be noticed:\n\n[ 3959.023862] ------------[ cut here ]------------\n[ 3959.023891] alloc_tag was not cleared (got tag for lib/xarray.c:378)\n[ 3959.023947] WARNING: ./include/linux/alloc_tag.h:155 at alloc_tag_add+0x128/0x178, CPU#6: mkfs.ntfs/113998\n[ 3959.023978] Modules linked in: dns_resolver tun brd overlay exfat btrfs blake2b libblake2b xor xor_neon raid6_pq loop sctp ip6_udp_tunnel udp_tunnel ext4 crc16 mbcache jbd2 rfkill sunrpc vfat fat sg fuse nfnetlink sr_mod virtio_gpu cdrom drm_client_lib virtio_dma_buf drm_shmem_helper drm_kms_helper ghash_ce drm sm4 backlight virtio_net net_failover virtio_scsi failover virtio_console virtio_blk virtio_mmio dm_mirror dm_region_hash dm_log dm_multipath dm_mod i2c_dev aes_neon_bs aes_ce_blk [last unloaded: hwpoison_inject]\n[ 3959.024170] CPU: 6 UID: 0 PID: 113998 Comm: mkfs.ntfs Kdump: loaded Tainted: G        W           6.19.0-rc7+ #7 PREEMPT(voluntary)\n[ 3959.024182] Tainted: [W]=WARN\n[ 3959.024186] Hardware name: QEMU KVM Virtual Machine, BIOS unknown 2/2/2022\n[ 3959.024192] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 3959.024199] pc : alloc_tag_add+0x128/0x178\n[ 3959.024207] lr : alloc_tag_add+0x128/0x178\n[ 3959.024214] sp : ffff80008b696d60\n[ 3959.024219] x29: ffff80008b696d60 x28: 0000000000000000 x27: 0000000000000240\n[ 3959.024232] x26: 0000000000000000 x25: 0000000000000240 x24: ffff800085d17860\n[ 3959.024245] x23: 0000000000402800 x22: ffff0000c0012dc0 x21: 00000000000002d0\n[ 3959.024257] x20: ffff0000e6ef3318 x19: ffff800085ae0410 x18: 0000000000000000\n[ 3959.024269] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n[ 3959.024281] x14: 0000000000000000 x13: 0000000000000001 x12: ffff600064101293\n[ 3959.024292] x11: 1fffe00064101292 x10: ffff600064101292 x9 : dfff800000000000\n[ 3959.024305] x8 : 00009fff9befed6e x7 : ffff000320809493 x6 : 0000000000000001\n[ 3959.024316] x5 : ffff000320809490 x4 : ffff600064101293 x3 : ffff800080691838\n[ 3959.024328] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000d5bcd640\n[ 3959.024340] Call trace:\n[ 3959.024346]  alloc_tag_add+0x128/0x178 (P)\n[ 3959.024355]  __alloc_tagging_slab_alloc_hook+0x11c/0x1a8\n[ 3959.024362]  kmem_cache_alloc_lru_noprof+0x1b8/0x5e8\n[ 3959.024369]  xas_alloc+0x304/0x4f0\n[ 3959.024381]  xas_create+0x1e0/0x4a0\n[ 3959.024388]  xas_store+0x68/0xda8\n[ 3959.024395]  __filemap_add_folio+0x5b0/0xbd8\n[ 3959.024409]  filemap_add_folio+0x16c/0x7e0\n[ 3959.024416]  __filemap_get_folio_mpol+0x2dc/0x9e8\n[ 3959.024424]  iomap_get_folio+0xfc/0x180\n[ 3959.024435]  __iomap_get_folio+0x2f8/0x4b8\n[ 3959.024441]  iomap_write_begin+0x198/0xc18\n[ 3959.024448]  iomap_write_iter+0x2ec/0x8f8\n[ 3959.024454]  iomap_file_buffered_write+0x19c/0x290\n[ 3959.024461]  blkdev_write_iter+0x38c/0x978\n[ 3959.024470]  vfs_write+0x4d4/0x928\n[ 3959.024482]  ksys_write+0xfc/0x1f8\n[ 3959.024489]  __arm64_sys_write+0x74/0xb0\n[ 3959.024496]  invoke_syscall+0xd4/0x258\n[ 3959.024507]  el0_svc_common.constprop.0+0xb4/0x240\n[ 3959.024514]  do_el0_svc+0x48/0x68\n[ 3959.024520]  el0_svc+0x40/0xf8\n[ 3959.024526]  el0t_64_sync_handler+0xa0/0xe8\n[ 3959.024533]  el0t_64_sync+0x1ac/0x1b0\n[ 3959.024540] ---[ end trace 0000000000000000 ]---\n\nWhen __memcg_slab_post_alloc_hook() fails, there are two different\nfree paths depending on whether size == 1 or size != 1. In the\nkmem_cache_free_bulk() path, we do call alloc_tagging_slab_free_hook().\nHowever, in memcg_alloc_abort_single() we don't, the above warning will be\ntriggered on the next allocation.\n\nTherefore, add alloc_tagging_slab_free_hook() to the\nmemcg_alloc_abort_single() path."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmm/slab: Añadir alloc_tagging_slab_free_hook para memcg_alloc_abort_single\n\nCuando CONFIG_MEM_ALLOC_PROFILING_DEBUG está habilitado, la siguiente advertencia puede ser notada:\n\n[ 3959.023862] ------------[ cut here ]------------\n[ 3959.023891] alloc_tag no fue limpiado (obtuvo etiqueta para lib/xarray.c:378)\n[ 3959.023947] ADVERTENCIA: ./include/linux/alloc_tag.h:155 en alloc_tag_add+0x128/0x178, CPU#6: mkfs.ntfs/113998\n[ 3959.023978] Módulos enlazados: dns_resolver tun brd overlay exfat btrfs blake2b libblake2b xor xor_neon raid6_pq loop sctp ip6_udp_tunnel udp_tunnel ext4 crc16 mbcache jbd2 rfkill sunrpc vfat fat sg fuse nfnetlink sr_mod virtio_gpu cdrom drm_client_lib virtio_dma_buf drm_shmem_helper drm_kms_helper ghash_ce drm sm4 backlight virtio_net net_failover virtio_scsi failover virtio_console virtio_blk virtio_mmio dm_mirror dm_region_hash dm_log dm_multipath dm_mod i2c_dev aes_neon_bs aes_ce_blk [último descargado: hwpoison_inject]\n[ 3959.024170] CPU: 6 UID: 0 PID: 113998 Comm: mkfs.ntfs Kdump: cargado Tainted: G W 6.19.0-rc7+ #7 PREEMPT(voluntary)\n[ 3959.024182] Tainted: [W]=WARN\n[ 3959.024186] Nombre del hardware: Máquina virtual QEMU KVM, BIOS desconocido 2/2/2022\n[ 3959.024192] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 3959.024199] pc : alloc_tag_add+0x128/0x178\n[ 3959.024207] lr : alloc_tag_add+0x128/0x178\n[ 3959.024214] sp : ffff80008b696d60\n[ 3959.024219] x29: ffff80008b696d60 x28: 0000000000000000 x27: 0000000000000240\n[ 3959.024232] x26: 0000000000000000 x25: 0000000000000240 x24: ffff800085d17860\n[ 3959.024245] x23: 0000000000402800 x22: ffff0000c0012dc0 x21: 00000000000002d0\n[ 3959.024257] x20: ffff0000e6ef3318 x19: ffff800085ae0410 x18: 0000000000000000\n[ 3959.024269] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n[ 3959.024281] x14: 0000000000000000 x13: 0000000000000001 x12: ffff600064101293\n[ 3959.024292] x11: 1fffe00064101292 x10: ffff600064101292 x9 : dfff800000000000\n[ 3959.024305] x8 : 00009fff9befed6e x7 : ffff000320809493 x6 : 0000000000000001\n[ 3959.024316] x5 : ffff000320809490 x4 : ffff600064101293 x3 : ffff800080691838\n[ 3959.024328] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000d5bcd640\n[ 3959.024340] Traza de llamada:\n[ 3959.024346] alloc_tag_add+0x128/0x178 (P)\n[ 3959.024355] __alloc_tagging_slab_alloc_hook+0x11c/0x1a8\n[ 3959.024362] kmem_cache_alloc_lru_noprof+0x1b8/0x5e8\n[ 3959.024369] xas_alloc+0x304/0x4f0\n[ 3959.024381] xas_create+0x1e0/0x4a0\n[ 3959.024388] xas_store+0x68/0xda8\n[ 3959.024395] __filemap_add_folio+0x5b0/0xbd8\n[ 3959.024409] filemap_add_folio+0x16c/0x7e0\n[ 3959.024416] __filemap_get_folio_mpol+0x2dc/0x9e8\n[ 3959.024424] iomap_get_folio+0xfc/0x180\n[ 3959.024435] __iomap_get_folio+0x2f8/0x4b8\n[ 3959.024441] iomap_write_begin+0x198/0xc18\n[ 3959.024448] iomap_write_iter+0x2ec/0x8f8\n[ 3959.024454] iomap_file_buffered_write+0x19c/0x290\n[ 3959.024461] blkdev_write_iter+0x38c/0x978\n[ 3959.024470] vfs_write+0x4d4/0x928\n[ 3959.024482] ksys_write+0xfc/0x1f8\n[ 3959.024489] __arm64_sys_write+0x74/0xb0\n[ 3959.024496] invoke_syscall+0xd4/0x258\n[ 3959.024507] el0_svc_common.constprop.0+0xb4/0x240\n[ 3959.024514] do_el0_svc+0x48/0x68\n[ 3959.024520] el0_svc+0x40/0xf8\n[ 3959.024526] el0t_64_sync_handler+0xa0/0xe8\n[ 3959.024533] el0t_64_sync+0x1ac/0x1b0\n[ 3959.024540] ---[ fin de traza 0000000000000000 ]---\n\nCuando __memcg_slab_post_alloc_hook() falla, hay dos rutas de liberación diferentes dependiendo de si size == 1 o size != 1. En la ruta de kmem_cache_free_bulk(), sí llamamos a alloc_tagging_slab_free_hook(). Sin embargo, en memcg_alloc_abort_single() no lo hacemos, la advertencia anterior se activará en la siguiente asignación.\n\nPor lo tanto, añadir alloc_tagging_slab_free_hook() a la ruta de memcg_alloc_abort_single()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10",
            "versionEndExcluding" : "6.12.70",
            "matchCriteriaId" : "ADF10DC5-1EB2-441D-95B1-00E8C9E65669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.10",
            "matchCriteriaId" : "7156C23F-009E-4D05-838C-A2DA417B5B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/b8bc72587c79fe52c14732e16a766b6eded00707",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e6c53ead2d8fa73206e0a63e9cd9aea6bc929837",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e8af57e090790983591f6927b3d89ee6383f8c1e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27099",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2026-02-18T15:18:43.857",
      "lastModified" : "2026-02-20T20:52:03.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the \"Mark temporarily offline\" offline cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure or Agent/Disconnect permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins 2.483 a 2.550 (ambos inclusive), LTS 2.492.1 a 2.541.1 (ambos inclusive) no escapa la descripción proporcionada por el usuario de la causa de desconexión 'Marcar temporalmente sin conexión', lo que resulta en una vulnerabilidad de cross-site scripting (XSS) almacenado explotable por atacantes con permiso de Agente/Configurar o Agente/Desconectar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "2.483",
            "versionEndExcluding" : "2.551",
            "matchCriteriaId" : "C99A3253-487D-4313-932F-2BCA7F24ED83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "2.492.1",
            "versionEndExcluding" : "2.541.2",
            "matchCriteriaId" : "D5D2394C-A869-41E7-96E5-F31CEC56765D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3669",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27100",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2026-02-18T15:18:43.967",
      "lastModified" : "2026-02-20T20:53:16.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name."
      }, {
        "lang" : "es",
        "value" : "Jenkins 2.550 y anteriores, LTS 2.541.1 y anteriores acepta valores de parámetros de ejecución que hacen referencia a compilaciones a las que el usuario que envía la compilación no tiene acceso, permitiendo a atacantes con permiso de Elemento/Compilación y Elemento/Configurar obtener información sobre la existencia de trabajos, la existencia de compilaciones, y si una compilación especificada existe, su nombre de visualización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.541.2",
            "matchCriteriaId" : "1BA732A2-5EA7-4C70-AF40-4E696689C4F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.551",
            "matchCriteriaId" : "2D2F2C2E-E436-4367-B067-C8E6CE7ECBD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2329",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2026-02-18T15:18:44.173",
      "lastModified" : "2026-02-20T20:57:50.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer basado en pila no autenticada en el endpoint de la API HTTP /cgi-bin/api.values.get. Un atacante remoto puede aprovechar esta vulnerabilidad para lograr ejecución remota de código (RCE) no autenticada con privilegios de root en un dispositivo objetivo. La vulnerabilidad afecta a los seis modelos de dispositivo de la serie: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628 y GXP1630."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:gxp1610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.81",
            "matchCriteriaId" : "99246F81-B826-4D2F-9A82-629E64BF95EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:gxp1610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92122D2-AD92-4EC3-81C3-CC58C3E3C287"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:gxp1615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.81",
            "matchCriteriaId" : "A3D913E1-E682-454A-B6A9-9D8815E692B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:gxp1615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "713E836B-E61E-4E74-9026-F6470C9555F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:gxp1620_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.81",
            "matchCriteriaId" : "03F5647A-F0A2-44D4-AE37-36D1B26A4DD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:gxp1620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898FC5BB-6D88-4ED3-95FE-ACFA8D99AAD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:gxp1625_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.81",
            "matchCriteriaId" : "CABEDD99-B978-4818-9F7D-D53089E02BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:gxp1625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FCCEF-196B-4BD4-B5C2-7DECC224A84C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:gxp1628_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.81",
            "matchCriteriaId" : "627DD526-9A9A-43BE-B060-3090FF33E741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:gxp1628:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDF28C0-982E-4DB8-8F3A-75103F2AF9A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:grandstream:gxp1630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.81",
            "matchCriteriaId" : "0F3398B8-0265-46D4-86C1-761B068424D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:grandstream:gxp1630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FC9463-51FD-493D-B2FD-4E61EC6B98CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://firmware.grandstream.com/Release_Note_GXP16xx_1.0.7.81.pdf",
        "source" : "cve@rapid7.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/20983",
        "source" : "cve@rapid7.com",
        "tags" : [ "VDB Entry", "Patch" ]
      }, {
        "url" : "https://psirt.grandstream.com/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/ve-cve-2026-2329-critical-unauthenticated-stack-buffer-overflow-in-grandstream-gxp1600-voip-phones-fixed",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2656",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T15:18:44.743",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in ChaiScript up to 6.1.0. This affects the function chaiscript::Type_Info::bare_equal of the file include/chaiscript/dispatchkit/type_info.hpp. This manipulation causes use after free. The attack requires local access. The attack's complexity is rated as high. The exploitability is reported as difficult. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en ChaiScript hasta la versión 6.1.0. Esto afecta a la función chaiscript::Type_Info::bare_equal del archivo include/chaiscript/dispatchkit/type_info.hpp. Esta manipulación causa uso después de liberar. El ataque requiere acceso local. La complejidad del ataque se califica como alta. La explotabilidad se informa como difícil. El exploit ha sido publicado y puede ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de incidencia, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaiscript:chaiscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "7C9648DA-18A7-412B-AEE5-903C40744AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChaiScript/ChaiScript/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/636",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/636#issue-3828333582",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346454",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346454",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752790",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23220",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:31.700",
      "lastModified" : "2026-04-18T09:16:14.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths\n\nThe problem occurs when a signed request fails smb2 signature verification\ncheck. In __process_request(), if check_sign_req() returns an error,\nset_smb2_rsp_status(work, STATUS_ACCESS_DENIED) is called.\nset_smb2_rsp_status() set work->next_smb2_rcv_hdr_off as zero. By resetting\nnext_smb2_rcv_hdr_off to zero, the pointer to the next command in the chain\nis lost. Consequently, is_chained_smb2_message() continues to point to\nthe same request header instead of advancing. If the header's NextCommand\nfield is non-zero, the function returns true, causing __handle_ksmbd_work()\nto repeatedly process the same failed request in an infinite loop.\nThis results in the kernel log being flooded with \"bad smb2 signature\"\nmessages and high CPU usage.\n\nThis patch fixes the issue by changing the return value from\nSERVER_HANDLER_CONTINUE to SERVER_HANDLER_ABORT. This ensures that\nthe processing loop terminates immediately rather than attempting to\ncontinue from an invalidated offset."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nksmbd: corrige un bucle infinito causado por el reinicio de next_smb2_rcv_hdr_off en las rutas de error\n\nEl problema ocurre cuando una solicitud firmada falla la verificación de firma smb2. En __process_request(), si check_sign_req() devuelve un error, se llama a set_smb2_rsp_status(work, STATUS_ACCESS_DENIED). set_smb2_rsp_status() establece work-&gt;next_smb2_rcv_hdr_off a cero. Al reiniciar next_smb2_rcv_hdr_off a cero, el puntero al siguiente comando en la cadena se pierde. En consecuencia, is_chained_smb2_message() continúa apuntando a la misma cabecera de solicitud en lugar de avanzar. Si el campo NextCommand de la cabecera no es cero, la función devuelve verdadero, lo que hace que __handle_ksmbd_work() procese repetidamente la misma solicitud fallida en un bucle infinito. Esto resulta en el registro del kernel siendo inundado con mensajes de 'firma smb2 incorrecta' y un alto uso de CPU.\n\nEste parche corrige el problema cambiando el valor de retorno de SERVER_HANDLER_CONTINUE a SERVER_HANDLER_ABORT. Esto asegura que el bucle de procesamiento termine inmediatamente en lugar de intentar continuar desde un desplazamiento invalidado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.145",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "B98C9201-BF17-4E2C-84FF-75EE2AA94DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.71",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "9E8C951B-058A-4478-BC29-9C2E367B173A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.1",
            "versionEndExcluding" : "6.6.125",
            "matchCriteriaId" : "E6254163-CB39-4ABB-9C34-50469B689183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "F1A7E514-FB3C-4B6B-8046-07D5A8F04644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E346B162-D566-4E62-ABDE-ECBFB21B8BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.6:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "E114E9DD-F7E1-40CC-AAD5-F14E586CB2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.6:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5BD782-474C-4A68-AED7-6EC818FF89AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/010eb01ce23b34b50531448b0da391c7f05a72af",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/544adb0a6658ea1bff4064723761dbf05f95b1e2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/5accdc5b7f28a81bbc5880ac0b8886e60c86e8c8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/71b5e7c528315ca360a1825a4ad2f8ae48c5dc16",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9135e791ec2709bcf0cda0335535c74762489498",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f7b1c2f5642bbd60b1beef1f3298cbac81eb232c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fb3b66bd72deb5543addaefa67963b34fb163a7b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23221",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:31.820",
      "lastModified" : "2026-03-18T14:50:04.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: fsl-mc: fix use-after-free in driver_override_show()\n\nThe driver_override_show() function reads the driver_override string\nwithout holding the device_lock. However, driver_override_store() uses\ndriver_set_override(), which modifies and frees the string while holding\nthe device_lock.\n\nThis can result in a concurrent use-after-free if the string is freed\nby the store function while being read by the show function.\n\nFix this by holding the device_lock around the read operation."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nbus: fsl-mc: corrección de uso después de liberación en driver_override_show()\n\nLa función driver_override_show() lee la cadena driver_override sin mantener el device_lock. Sin embargo, driver_override_store() utiliza driver_set_override(), que modifica y libera la cadena mientras mantiene el device_lock.\n\nEsto puede resultar en un uso después de liberación concurrente si la cadena es liberada por la función store mientras es leída por la función show.\n\nSolucionar esto manteniendo el device_lock alrededor de la operación de lectura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "99A7FD63-65A5-4FBC-ADC3-8C52BBF74B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "4A9F36A3-A685-48A0-84B4-6217052BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "C2968F55-D03F-42BE-A694-F0A37BC8CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/148891e95014b5dc5878acefa57f1940c281c431",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1d6bd6183e723a7b256ff34bbb5b498b5f4f2ec0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a2ae33e1c6361e960a4d00f7cf75d880b54f9528",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b1983840287303e0dfb401b1b6cecc5ea7471e90",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c424e72cfa67e7e1477035058a8a659f2c0ea637",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c71dfb7833db7af652ee8f65011f14c97c47405d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dd8ba8c0c3f3916d4ee1e3a09da9cd5caff5d227",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23222",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:31.920",
      "lastModified" : "2026-04-02T15:16:23.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly\n\nThe existing allocation of scatterlists in omap_crypto_copy_sg_lists()\nwas allocating an array of scatterlist pointers, not scatterlist objects,\nresulting in a 4x too small allocation.\n\nUse sizeof(*new_sg) to get the correct object size."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncrypto: omap - Asignar correctamente las scatterlists OMAP_CRYPTO_FORCE_COPY\n\nLa asignación existente de scatterlists en omap_crypto_copy_sg_lists() estaba asignando un array de punteros a scatterlist, no objetos scatterlist, lo que resultaba en una asignación 4 veces demasiado pequeña.\n\nUsar sizeof(*new_sg) para obtener el tamaño de objeto correcto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "888104C0-CDC0-435D-BADD-1C2AEC9AEC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.125",
            "matchCriteriaId" : "74B70CDE-7B74-4280-BBCC-8889B8F28466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "F1A7E514-FB3C-4B6B-8046-07D5A8F04644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1562b1fb7e17c1b3addb15e125c718b2be7f5512",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2ed27b5a1174351148c3adbfc0cd86d54072ba2e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/31aff96a41ae6f1f1687c065607875a27c364da8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6edf8df4bd29f7bfd245b67b2c31d905f1cfc14b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/79f95b51d4278044013672c27519ae88d07013d8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/953c81941b0ad373674656b8767c00234ebf17ac",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c184341920ed78b6466360ed7b45b8922586c38f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d1836c628cb72734eb5f7dfd4c996a9c18bba3ad",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23223",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.037",
      "lastModified" : "2026-03-18T14:46:29.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix UAF in xchk_btree_check_block_owner\n\nWe cannot dereference bs->cur when trying to determine if bs->cur\naliases bs->sc->sa.{bno,rmap}_cur after the latter has been freed.\nFix this by sampling before type before any freeing could happen.\nThe correct temporal ordering was broken when we removed xfs_btnum_t."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nxfs: se corrige UAF en xchk_btree_check_block_owner\n\nNo podemos desreferenciar bs-&gt;cur al intentar determinar si bs-&gt;cur es un alias de bs-&gt;sc-&gt;sa.{bno,rmap}_cur después de que este último haya sido liberado. Esto se soluciona muestreando el tipo antes de que pudiera ocurrir cualquier liberación. El orden temporal correcto se rompió cuando eliminamos xfs_btnum_t."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "BC3EBF44-550D-4B5C-9CD4-93342B1A49F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1c253e11225bc5167217897885b85093e17c2217",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1d411278dda293a507cb794db7d9ed3511c685c6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ba5264610423d9653aa36920520902d83841bcfd",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ed82e7949f5cac3058f4100f3cd670531d41a266",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23224",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.143",
      "lastModified" : "2026-04-02T15:16:23.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix UAF issue for file-backed mounts w/ directio option\n\n[    9.269940][ T3222] Call trace:\n[    9.269948][ T3222]  ext4_file_read_iter+0xac/0x108\n[    9.269979][ T3222]  vfs_iocb_iter_read+0xac/0x198\n[    9.269993][ T3222]  erofs_fileio_rq_submit+0x12c/0x180\n[    9.270008][ T3222]  erofs_fileio_submit_bio+0x14/0x24\n[    9.270030][ T3222]  z_erofs_runqueue+0x834/0x8ac\n[    9.270054][ T3222]  z_erofs_read_folio+0x120/0x220\n[    9.270083][ T3222]  filemap_read_folio+0x60/0x120\n[    9.270102][ T3222]  filemap_fault+0xcac/0x1060\n[    9.270119][ T3222]  do_pte_missing+0x2d8/0x1554\n[    9.270131][ T3222]  handle_mm_fault+0x5ec/0x70c\n[    9.270142][ T3222]  do_page_fault+0x178/0x88c\n[    9.270167][ T3222]  do_translation_fault+0x38/0x54\n[    9.270183][ T3222]  do_mem_abort+0x54/0xac\n[    9.270208][ T3222]  el0_da+0x44/0x7c\n[    9.270227][ T3222]  el0t_64_sync_handler+0x5c/0xf4\n[    9.270253][ T3222]  el0t_64_sync+0x1bc/0x1c0\n\nEROFS may encounter above panic when enabling file-backed mount w/\ndirectio mount option, the root cause is it may suffer UAF in below\nrace condition:\n\n- z_erofs_read_folio                          wq s_dio_done_wq\n - z_erofs_runqueue\n  - erofs_fileio_submit_bio\n   - erofs_fileio_rq_submit\n    - vfs_iocb_iter_read\n     - ext4_file_read_iter\n      - ext4_dio_read_iter\n       - iomap_dio_rw\n       : bio was submitted and return -EIOCBQUEUED\n                                              - dio_aio_complete_work\n                                               - dio_complete\n                                                - dio->iocb->ki_complete (erofs_fileio_ki_complete())\n                                                 - kfree(rq)\n                                                 : it frees iocb, iocb.ki_filp can be UAF in file_accessed().\n       - file_accessed\n       : access NULL file point\n\nIntroduce a reference count in struct erofs_fileio_rq, and initialize it\nas two, both erofs_fileio_ki_complete() and erofs_fileio_rq_submit() will\ndecrease reference count, the last one decreasing the reference count\nto zero will free rq."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nerofs: soluciona un problema de UAF para montajes respaldados por archivos con la opción 'directio'\n\n[    9.269940][ T3222] Rastreo de llamadas:\n[    9.269948][ T3222]  ext4_file_read_iter+0xac/0x108\n[    9.269979][ T3222]  vfs_iocb_iter_read+0xac/0x198\n[    9.269993][ T3222]  erofs_fileio_rq_submit+0x12c/0x180\n[    9.270008][ T3222]  erofs_fileio_submit_bio+0x14/0x24\n[    9.270030][ T3222]  z_erofs_runqueue+0x834/0x8ac\n[    9.270054][ T3222]  z_erofs_read_folio+0x120/0x220\n[    9.270083][ T3222]  filemap_read_folio+0x60/0x120\n[    9.270102][ T3222]  filemap_fault+0xcac/0x1060\n[    9.270119][ T3222]  do_pte_missing+0x2d8/0x1554\n[    9.270131][ T3222]  handle_mm_fault+0x5ec/0x70c\n[    9.270142][ T3222]  do_page_fault+0x178/0x88c\n[    9.270167][ T3222]  do_translation_fault+0x38/0x54\n[    9.270183][ T3222]  do_mem_abort+0x54/0xac\n[    9.270208][ T3222]  el0_da+0x44/0x7c\n[    9.270227][ T3222]  el0t_64_sync_handler+0x5c/0xf4\n[    9.270253][ T3222]  el0t_64_sync+0x1bc/0x1c0\n\nEROFS puede encontrar el pánico anterior al habilitar el montaje respaldado por archivos con la opción de montaje directio; la causa raíz es que puede sufrir UAF en la siguiente condición de carrera:\n\n- z_erofs_read_folio                          wq s_dio_done_wq\n - z_erofs_runqueue\n  - erofs_fileio_submit_bio\n   - erofs_fileio_rq_submit\n    - vfs_iocb_iter_read\n     - ext4_file_read_iter\n      - ext4_dio_read_iter\n       - iomap_dio_rw\n       : bio fue enviado y devuelve -EIOCBQUEUED\n                                              - dio_aio_complete_work\n                                               - dio_complete\n                                                - dio-&gt;iocb-&gt;ki_complete (erofs_fileio_ki_complete())\n                                                 - kfree(rq)\n                                                 : libera iocb, iocb.ki_filp puede ser UAF en file_accessed().\n       - file_accessed\n       : accede a un puntero de archivo NULL\n\nIntroducir un contador de referencias en la estructura erofs_fileio_rq, y lo inicializa a dos; tanto erofs_fileio_ki_complete() como erofs_fileio_rq_submit() disminuirán el contador de referencias, el último en disminuir el contador de referencias a cero liberará rq."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "6A704C39-CE3C-408D-9CE6-55B0E4AFCE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1caf50ce4af096d0280d59a31abdd85703cd995c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ae385826840a3c8e09bf38cac90adcd690716f57",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b2ee5e4d5446babd23ff7beb4e636be0fb3ea5aa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d741534302f71c511eb0bb670b92eaa7df4a0aec",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23225",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.260",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/mmcid: Don't assume CID is CPU owned on mode switch\n\nShinichiro reported a KASAN UAF, which is actually an out of bounds access\nin the MMCID management code.\n\n   CPU0\t\t\t\t\t\tCPU1\n   \t\t\t\t\t\tT1 runs in userspace\n   T0: fork(T4) -> Switch to per CPU CID mode\n         fixup() set MM_CID_TRANSIT on T1/CPU1\n   T4 exit()\n   T3 exit()\n   T2 exit()\n\t\t\t\t\t\tT1 exit() switch to per task mode\n\t\t\t\t\t\t ---> Out of bounds access.\n\nAs T1 has not scheduled after T0 set the TRANSIT bit, it exits with the\nTRANSIT bit set. sched_mm_cid_remove_user() clears the TRANSIT bit in\nthe task and drops the CID, but it does not touch the per CPU storage.\nThat's functionally correct because a CID is only owned by the CPU when\nthe ONCPU bit is set, which is mutually exclusive with the TRANSIT flag.\n\nNow sched_mm_cid_exit() assumes that the CID is CPU owned because the\nprior mode was per CPU. It invokes mm_drop_cid_on_cpu() which clears the\nnot set ONCPU bit and then invokes clear_bit() with an insanely large\nbit number because TRANSIT is set (bit 29).\n\nPrevent that by actually validating that the CID is CPU owned in\nmm_drop_cid_on_cpu()."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nsched/mmcid: No asumir que el CID es propiedad de la CPU en el cambio de modo\n\nShinichiro informó de un KASAN UAF, que en realidad es un acceso fuera de límites en el código de gestión de MMCID.\n\n   CPU0\t\t\t\t\t\tCPU1\n   \t\t\t\t\t\tT1 se ejecuta en espacio de usuario\n   T0: fork(T4) -&gt; Cambio a modo CID por CPU\n         fixup() establece MM_CID_TRANSIT en T1/CPU1\n   T4 sale()\n   T3 sale()\n   T2 sale()\n\t\t\t\t\t\tT1 sale() cambia a modo por tarea\n\t\t\t\t\t\t ---&gt; Acceso fuera de límites.\n\nComo T1 no se ha planificado después de que T0 estableciera el bit TRANSIT, sale con el bit TRANSIT establecido. sched_mm_cid_remove_user() borra el bit TRANSIT en la tarea y elimina el CID, pero no toca el almacenamiento por CPU. Eso es el funcionalmente correcto porque un CID solo es propiedad de la CPU cuando el bit ONCPU está establecido, lo cual es mutuamente excluyente con el indicador TRANSIT.\n\nAhora sched_mm_cid_exit() asume que el CID es propiedad de la CPU porque el modo anterior era por CPU. Invoca mm_drop_cid_on_cpu() que borra el bit ONCPU no establecido y luego invoca clear_bit() con un número de bit increíblemente grande porque TRANSIT está establecido (bit 29).\n\nEvitar eso validando realmente que el CID es propiedad de la CPU en mm_drop_cid_on_cpu()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1e83ccd5921a610ef409a7d4e56db27822b4ea39",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/81f29975631db8a78651b3140ecd0f88ffafc476",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23226",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.363",
      "lastModified" : "2026-04-02T15:16:23.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: add chann_lock to protect ksmbd_chann_list xarray\n\nksmbd_chann_list xarray lacks synchronization, allowing use-after-free in\nmulti-channel sessions (between lookup_chann_list() and ksmbd_chann_del).\n\nAdds rw_semaphore chann_lock to struct ksmbd_session and protects\nall xa_load/xa_store/xa_erase accesses."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nksmbd: añadir chann_lock para proteger ksmbd_chann_list xarray\n\nksmbd_chann_list xarray carece de sincronización, permitiendo uso después de liberación en sesiones multicanal (entre lookup_chann_list() y ksmbd_chann_del).\n\nAñade el semáforo rw_semaphore chann_lock a la estructura ksmbd_session y protege todos los accesos xa_load/xa_store/xa_erase."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "AEB10F82-E8B1-4BB9-B91C-78490070AF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/36ef605c0395b94b826a8c8d6f2697071173de6e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4c2ca31608521895dd742a43beca4b4d29762345",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/4f3a06cc57976cafa8c6f716646be6c79a99e485",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e4a8a96a93d08570e0405cfd989a8a07e5b6ff33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23227",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.467",
      "lastModified" : "2026-04-18T09:16:14.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free\n\nExynos Virtual Display driver performs memory alloc/free operations\nwithout lock protection, which easily causes concurrency problem.\n\nFor example, use-after-free can occur in race scenario like this:\n```\n\tCPU0\t\t\t\tCPU1\t\t\t\tCPU2\n\t----\t\t\t\t----\t\t\t\t----\n  vidi_connection_ioctl()\n    if (vidi->connection) // true\n      drm_edid = drm_edid_alloc(); // alloc drm_edid\n      ...\n      ctx->raw_edid = drm_edid;\n      ...\n\t\t\t\t\t\t\t\tdrm_mode_getconnector()\n\t\t\t\t\t\t\t\t  drm_helper_probe_single_connector_modes()\n\t\t\t\t\t\t\t\t    vidi_get_modes()\n\t\t\t\t\t\t\t\t      if (ctx->raw_edid) // true\n\t\t\t\t\t\t\t\t        drm_edid_dup(ctx->raw_edid);\n\t\t\t\t\t\t\t\t          if (!drm_edid) // false\n\t\t\t\t\t\t\t\t          ...\n\t\t\t\tvidi_connection_ioctl()\n\t\t\t\t  if (vidi->connection) // false\n\t\t\t\t    drm_edid_free(ctx->raw_edid); // free drm_edid\n\t\t\t\t    ...\n\t\t\t\t\t\t\t\t          drm_edid_alloc(drm_edid->edid)\n\t\t\t\t\t\t\t\t            kmemdup(edid); // UAF!!\n\t\t\t\t\t\t\t\t            ...\n```\n\nTo prevent these vulns, at least in vidi_context, member variables related\nto memory alloc/free should be protected with ctx->lock."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\ndrm/exynos: vidi: usar ctx-&gt;lock para proteger las variables miembro de la estructura vidi_context relacionadas con la asignación/liberación de memoria\n\nEl controlador de pantalla virtual de Exynos realiza operaciones de asignación/liberación de memoria sin protección de bloqueo, lo que fácilmente causa un problema de concurrencia.\n\nPor ejemplo, el uso después de liberación puede ocurrir en un escenario de carrera como este:\n```\n\tCPU0\t\t\t\tCPU1\t\t\t\tCPU2\n\t----\t\t\t\t----\t\t\t\t----\n  vidi_connection_ioctl()\n    if (vidi-&gt;connection) // true\n      drm_edid = drm_edid_alloc(); // alloc drm_edid\n      ...\n      ctx-&gt;raw_edid = drm_edid;\n      ...\n\t\t\t\t\t\t\t\tdrm_mode_getconnector()\n\t\t\t\t\t\t\t\t  drm_helper_probe_single_connector_modes()\n\t\t\t\t\t\t\t\t    vidi_get_modes()\n\t\t\t\t\t\t\t\t      if (ctx-&gt;raw_edid) // true\n\t\t\t\t\t\t\t\t        drm_edid_dup(ctx-&gt;raw_edid);\n\t\t\t\t\t\t\t\t          if (!drm_edid) // false\n\t\t\t\t\t\t\t\t          ...\n\t\t\t\tvidi_connection_ioctl()\n\t\t\t\t  if (vidi-&gt;connection) // false\n\t\t\t\t    drm_edid_free(ctx-&gt;raw_edid); // free drm_edid\n\t\t\t\t    ...\n\t\t\t\t\t\t\t\t          drm_edid_alloc(drm_edid-&gt;edid)\n\t\t\t\t\t\t\t\t            kmemdup(edid); // UAF!!\n\t\t\t\t\t\t\t\t            ...\n```\n\nPara prevenir estas vulnerabilidades, al menos en vidi_context, las variables miembro relacionadas con la asignación/liberación de memoria deberían ser protegidas con ctx-&gt;lock."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6",
            "versionEndExcluding" : "6.12.77",
            "matchCriteriaId" : "B6F320FA-255D-4544-9CA5-33D757F74941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0cd2c155740dbd00868ac5a8ae5d14cd6b9ed385",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1b24d3e8792bcc050c70e8e0dea6b49c4fc63b13",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/52b330799e2d6f825ae2bb74662ec1b10eb954bb",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/56966a4cfa925ec24edb68ab652a740a7abe2c4d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/60b75407c172e1f341a8a5097c5cbc97dbbdd893",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/92dd1f38d7db75374dcdaf54f1d79d67bffd54e5",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/9e1ef9396a1899925911b1729cb65665420268df",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/abfdf449fb3d7b42e85a1ad1c8694b768b1582f4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23228",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.580",
      "lastModified" : "2026-03-18T13:27:53.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()\n\nOn kthread_run() failure in ksmbd_tcp_new_connection(), the transport is\nfreed via free_transport(), which does not decrement active_num_conn,\nleaking this counter.\n\nReplace free_transport() with ksmbd_tcp_disconnect()."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nsmb: servidor: corregir fuga de active_num_conn en ksmbd_tcp_new_connection()\n\nEn caso de fallo de kthread_run() en ksmbd_tcp_new_connection(), se libera el transporte a través de free_transport(), lo que no decrementa active_num_conn, fugando este contador.\n\nReemplazar free_transport() con ksmbd_tcp_disconnect()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.91",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "B4CE856B-671A-4621-8864-5561EACEB2A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.9",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "93CFF50A-DA46-44D1-8D94-5C693DC7ABCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.1",
            "versionEndExcluding" : "6.6.125",
            "matchCriteriaId" : "87706C18-D700-417C-875D-10399E30077D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "F1A7E514-FB3C-4B6B-8046-07D5A8F04644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "C64BDD9D-C663-4E75-AE06-356EDC392B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "26544390-88E4-41CA-98BF-7BB1E9D4E243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/599271110c35f6b16e2e4e45b9fbd47ed378c982",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/787769c8cc50416af7b8b1a36e6bcd6aaa7680aa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/baf664fc90a6139a39a58333e4aaa390c10d45dc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cd25e0d809531a67e9dd53b19012d27d2b13425f",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23229",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.693",
      "lastModified" : "2026-03-18T13:25:23.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: virtio - Add spinlock protection with virtqueue notification\n\nWhen VM boots with one virtio-crypto PCI device and builtin backend,\nrun openssl benchmark command with multiple processes, such as\n  openssl speed -evp aes-128-cbc -engine afalg  -seconds 10 -multi 32\n\nopenssl processes will hangup and there is error reported like this:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nIt seems that the data virtqueue need protection when it is handled\nfor virtio done notification. If the spinlock protection is added\nin virtcrypto_done_task(), openssl benchmark with multiple processes\nworks well."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux: \n\ncrypto: virtio - Añadir protección con spinlock con notificación de virtqueue\n\nCuando una VM arranca con un dispositivo PCI virtio-crypto y un backend integrado,\nejecutar el comando de benchmark de OpenSSL con múltiples procesos, como\n  openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nlos procesos de OpenSSL se colgarán y se reporta un error como este:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nParece que el virtqueue de datos necesita protección cuando se maneja\npara la notificación de finalización de virtio. Si se añade la protección con spinlock\nen virtcrypto_done_task(), el benchmark de OpenSSL con múltiples procesos\nfunciona correctamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.19.306",
            "versionEndExcluding" : "4.20",
            "matchCriteriaId" : "37284183-45F5-4920-9AD1-228BBCEC94A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.268",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "2E4BEAC0-E873-440D-A75E-55699C2412A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.209",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "D38366FE-C4CC-4677-BDBA-A6047B5B666B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.148",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "A8470B9F-FA9B-4F8F-AC1F-A6D52A42D2ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.75",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "9520DDD6-B47A-47A5-8BA6-631469420E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.14",
            "versionEndExcluding" : "6.6.125",
            "matchCriteriaId" : "6F7CEBA0-0AB1-4362-9BE0-625B2FBB5CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.2",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "031BE183-1B96-47CD-9ED4-17FD22A726ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23230",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-02-18T16:22:32.807",
      "lastModified" : "2026-04-02T15:16:24.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: split cached_fid bitfields to avoid shared-byte RMW races\n\nis_open, has_lease and on_list are stored in the same bitfield byte in\nstruct cached_fid but are updated in different code paths that may run\nconcurrently. Bitfield assignments generate byte read–modify–write\noperations (e.g. `orb $mask, addr` on x86_64), so updating one flag can\nrestore stale values of the others.\n\nA possible interleaving is:\n    CPU1: load old byte (has_lease=1, on_list=1)\n    CPU2: clear both flags (store 0)\n    CPU1: RMW store (old | IS_OPEN) -> reintroduces cleared bits\n\nTo avoid this class of races, convert these flags to separate bool\nfields."
      }, {
        "lang" : "es",
        "value" : "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux:\n\nsmb: cliente: dividir los campos de bits de cached_fid para evitar condiciones de carrera RMW de bytes compartidos\n\nis_open, has_lease y on_list se almacenan en el mismo byte de campo de bits en la estructura cached_fid, pero se actualizan en diferentes rutas de código que pueden ejecutarse concurrentemente. Las asignaciones de campos de bits generan operaciones de lectura-modificación-escritura de bytes (p. ej., 'orb $mask, addr' en x86_64), por lo que al actualizar una bandera (flag) se puede restaurar valores obsoletos de las otras.\n\nUna posible intercalación es:\n    CPU1: carga el byte antiguo (has_lease=1, on_list=1)\n    CPU2: borra ambas banderas (almacena 0)\n    CPU1: almacena RMW (old | IS_OPEN) -&gt; reintroduce los bits borrados\n\nPara evitar esta clase de condiciones de carrera, hay que convertir estas banderas a campos bool separados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "8174AEBD-5EC1-4209-8FCF-6A75AA321999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.125",
            "matchCriteriaId" : "74B70CDE-7B74-4280-BBCC-8889B8F28466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.72",
            "matchCriteriaId" : "F1A7E514-FB3C-4B6B-8046-07D5A8F04644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.11",
            "matchCriteriaId" : "7099A9EC-3D54-4424-BF01-7224EF88C79C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "EE543C0D-A06B-414F-A403-CB1E088F261E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3eaa22d688311c708b73f3c68bc6d0c8e3f0f77a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4386f6af8aaedd0c5ad6f659b40cadcc8f423828",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4cfa4c37dcbcfd70866e856200ed8a2894cac578",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/569fecc56bfe4df66f05734d67daef887746656b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/c4b9edd55987384a1f201d3d07ff71e448d79c1b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ec306600d5ba7148c9dbf8f5a8f1f5c1a044a241",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2230",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-18T17:21:36.327",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Booking Calendar plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 10.14.14 via the handle_ajax_save function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, and booking permissions granted by an Administrator, to modify other users' plugin settings, such as booking calendar display options, which can disrupt the booking calendar functionality for the targeted user."
      }, {
        "lang" : "es",
        "value" : "El plugin Booking Calendar para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 10.14.14, inclusive, a través de la función handle_ajax_save debido a la falta de validación en una clave controlada por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, y permisos de reserva otorgados por un Administrador, modifiquen la configuración del plugin de otros usuarios, como las opciones de visualización del calendario de reservas, lo que puede interrumpir la funcionalidad del calendario de reservas para el usuario objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/booking/trunk/includes/save-user-meta/save-user-meta.php#L90",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3456856/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/60f7df44-22f9-4a9e-a20c-4b8628674079?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2507",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2026-02-18T17:21:36.540",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "Cuando se aprovisiona BIG-IP AFM o BIG-IP DDoS, el tráfico no revelado puede provocar la terminación de TMM. Nota: Las versiones de software que han alcanzado el Fin de Soporte Técnico (EoTS) no se evalúan."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000160003",
        "source" : "f5sirt@f5.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2657",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T17:21:40.400",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wren_compiler.c of the component Error Message Handler. Such manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en wren-lang wren hasta 0.4.0. que afecta a la función printError del archivo src/vm/wren_compiler.c del componente Error Message Handler. Su explotación conduce a un desbordamiento de búfer basado en pila. El ataque debe ser abordado localmente. El exploit ha sido divulgado al público y puede ser usado. El proyecto fue informado del problema tempranamente a través de un informe de problema pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "5B3A76EF-D824-491F-B1BF-07C619DE6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0122/blob/main/i1221/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/issues/1221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346455",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346455",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.752791",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20137",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-18T18:24:22.637",
      "lastModified" : "2026-02-20T13:53:39.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112, and 9.3.2408.122, a low-privileged user who does not hold the \"admin\" or \"power\" Splunk roles could bypass the SPL safeguards for risky commands when they create a Data Model that contains an injected SPL query within an object. They can bypass the safeguards by exploiting a path traversal vulnerability."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Splunk Enterprise anteriores a 10.2.0, 10.0.3, 9.4.5, 9.3.7 y 9.2.9, y en las versiones de Splunk Cloud Platform anteriores a 10.1.2507.0, 10.0.2503.9, 9.3.2411.112 y 9.3.2408.122, un usuario con pocos privilegios que no posea los roles de Splunk 'admin' o 'power' podría eludir las salvaguardas de SPL para comandos arriesgados cuando crea un Modelo de Datos que contiene una consulta SPL inyectada dentro de un objeto. Puede eludir las salvaguardas explotando una vulnerabilidad de salto de ruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.9",
            "matchCriteriaId" : "FE00218E-F8B2-42DA-9E4E-D7A00B657B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.7",
            "matchCriteriaId" : "C6257ADA-AB6E-4679-A41B-BCE79CE8D573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.5",
            "matchCriteriaId" : "30970DF3-6DA7-4FAB-B234-3226F47F9C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "CB313879-7BD8-411A-B503-01689F0B326E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.2408",
            "versionEndExcluding" : "9.3.2408.122",
            "matchCriteriaId" : "2EEE3994-A508-46E7-81D6-C038C68235E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.2411",
            "versionEndExcluding" : "9.3.2411.112",
            "matchCriteriaId" : "8C929336-F50D-4AFC-BCF9-CCA5BF89E599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.2503",
            "versionEndExcluding" : "10.0.2503.9",
            "matchCriteriaId" : "62714243-8A5F-4908-BD39-7B1026B8E7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:10.1.2507:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CBDDE1-EBD2-4E82-A7B7-CE4F0F27BF21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2026-0202",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20138",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-18T18:24:23.427",
      "lastModified" : "2026-02-20T13:50:05.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk `_internal` index could view the  `integrationKey`, `secretKey`, and `appSecretKey` secrets, generated by [Duo Two-Factor Authentication for Splunk Enterprise](https://duo.com/docs/splunk), in plain text."
      }, {
        "lang" : "es",
        "value" : "En versiones de Splunk Enterprise anteriores a 10.2.0, 10.0.2, 9.4.7, 9.3.9 y 9.2.11, un usuario de una implementación de Splunk Search Head Cluster (SHC) que posee un rol con acceso al índice '_internal' de Splunk podía ver los secretos 'integrationKey', 'secretKey' y 'appSecretKey', generados por Duo Two-Factor Autenticación para Splunk Enterprise, en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.11",
            "matchCriteriaId" : "80092DB5-6859-4E0A-BBD6-171051C451A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.9",
            "matchCriteriaId" : "0D9ACC64-CE37-4DBF-9315-E2DA76A3EAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.7",
            "matchCriteriaId" : "1F057ECE-42B5-4C1D-A201-EFF275EFAAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "4413D4BE-F225-4C28-B401-EB46D8F34160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2026-0203",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20139",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-18T18:24:26.497",
      "lastModified" : "2026-02-20T13:47:44.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9, and 9.3.2411.121, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could craft a malicious payload into the `realname`, `tz`, or `email` parameters of the `/splunkd/__raw/services/authentication/users/username` REST API endpoint when they change a password. This could potentially lead to a client‑side denial‑of‑service (DoS). The malicious payload might significantly slow page load times or render Splunk Web temporarily unresponsive."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Splunk Enterprise anteriores a 10.2.0, 10.0.2, 9.4.8, 9.3.9 y 9.2.12, y en las versiones de Splunk Cloud Platform anteriores a 10.2.2510.3, 10.1.2507.8, 10.0.2503.9 y 9.3.2411.121, un usuario con pocos privilegios que no posea los roles de Splunk 'admin' o 'power' podría crear una carga útil maliciosa en los parámetros `realname`, `tz` o `email` del endpoint de la API REST `/splunkd/__raw/services/authentication/users/username` cuando cambian una contraseña. Esto podría, potencialmente, provocar una denegación de servicio (DoS) del lado del cliente. La carga útil maliciosa podría ralentizar significativamente los tiempos de carga de la página o hacer que Splunk Web no responda temporalmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.12",
            "matchCriteriaId" : "6A753402-54BC-4809-800C-A1B1CC1BF176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.9",
            "matchCriteriaId" : "0D9ACC64-CE37-4DBF-9315-E2DA76A3EAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "657A9AFC-2335-4C32-8B81-901D1C742592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "4413D4BE-F225-4C28-B401-EB46D8F34160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.2411",
            "versionEndExcluding" : "9.3.2411.121",
            "matchCriteriaId" : "B3D8C2DB-F956-49E2-8140-8D8962071007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.2503",
            "versionEndExcluding" : "10.0.2503.9",
            "matchCriteriaId" : "62714243-8A5F-4908-BD39-7B1026B8E7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.2507",
            "versionEndExcluding" : "10.1.2507.8",
            "matchCriteriaId" : "43C712E7-B77B-49CC-8143-C5594F0089DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.2510",
            "versionEndExcluding" : "10.2.2510.3",
            "matchCriteriaId" : "AFACEF04-1811-4345-A640-EF3FC84E490B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2026-0204",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20141",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-18T18:24:26.827",
      "lastModified" : "2026-02-23T14:46:16.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 10.0.2, 10.0.3, 9.4.8, and 9.3.9, a low-privileged user who does not hold the \"admin\" Splunk role could access the Splunk Monitoring Console App endpoints due to an improper access control. This could lead to a sensitive information disclosure.<br><br>The Monitoring Console app is a bundled app that comes with Splunk Enterprise. It is not available for download on SplunkBase, and is not installed on Splunk Cloud Platform instances.  This vulnerability does not affect [Cloud Monitoring Console](https://help.splunk.com/en/splunk-cloud-platform/administer/admin-manual/10.2.2510/monitor-your-splunk-cloud-platform-deployment/introduction-to-the-cloud-monitoring-console)."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Splunk Enterprise anteriores a la 10.0.2, 10.0.3, 9.4.8 y 9.3.9, un usuario con pocos privilegios que no posea el rol de Splunk 'admin' podría acceder a los endpoints de la aplicación Splunk Monitoring Console debido a un control de acceso inadecuado. Esto podría llevar a una revelación de información sensible.\n\nLa aplicación Monitoring Console es una aplicación incluida que viene con Splunk Enterprise. No está disponible para descargar en SplunkBase y no está instalada en instancias de Splunk Cloud Platform. Esta vulnerabilidad no afecta a [Cloud Monitoring Console](https://help.splunk.com/en/splunk-cloud-platform/administer/admin-manual/10.2.2510/monitor-your-splunk-cloud-platform-platform-deployment/introduction-to-the-cloud-monitoring-console)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.9",
            "matchCriteriaId" : "0D9ACC64-CE37-4DBF-9315-E2DA76A3EAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "657A9AFC-2335-4C32-8B81-901D1C742592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.3",
            "matchCriteriaId" : "CB313879-7BD8-411A-B503-01689F0B326E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2026-0206",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20142",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-18T18:24:28.053",
      "lastModified" : "2026-02-23T14:44:34.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk `_internal` index could view the RSA `accessKey` value from the [<u>Authentication.conf</u> ](https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.2/configuration-file-reference/10.2.0-configuration-file-reference/authentication.conf)file, in plain text."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Splunk Enterprise anteriores a la 10.2.0, 10.0.2, 9.4.7, 9.3.9 y 9.2.11, un usuario de una implementación de Splunk Search Head Cluster (SHC) que posee un rol con acceso al índice '_internal' de Splunk podría ver el valor 'accessKey' de RSA del archivo [<u>Authentication.conf</u> ](https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.2/configuration-file-reference/10.2.0-configuration-file-reference/authentication.conf), en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.11",
            "matchCriteriaId" : "80092DB5-6859-4E0A-BBD6-171051C451A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.9",
            "matchCriteriaId" : "0D9ACC64-CE37-4DBF-9315-E2DA76A3EAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.7",
            "matchCriteriaId" : "1F057ECE-42B5-4C1D-A201-EFF275EFAAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "4413D4BE-F225-4C28-B401-EB46D8F34160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2026-0207",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20144",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-18T18:24:29.220",
      "lastModified" : "2026-02-23T14:43:22.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the the Splunk _internal index could view the Security Assertion Markup Language (SAML) configurations for Attribute query requests (AQRs) or Authentication extensions in plain text within the conf.log file, depending on which feature is configured."
      }, {
        "lang" : "es",
        "value" : "En las versiones de Splunk Enterprise anteriores a 10.2.0, 10.0.2, 9.4.7, 9.3.8 y 9.2.11, y en las versiones de Splunk Cloud Platform anteriores a 10.2.2510.0, 10.1.2507.11, 10.0.2503.9 y 9.3.2411.120, un usuario de una implementación de Splunk Search Head Cluster (SHC) que posee un rol con acceso al índice _internal de Splunk podría ver las configuraciones de Security Assertion Markup Language (SAML) para solicitudes de consulta de atributos (AQRs) o extensiones de autenticación en texto sin formato dentro del archivo conf.log, dependiendo de qué característica esté configurada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.11",
            "matchCriteriaId" : "80092DB5-6859-4E0A-BBD6-171051C451A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.8",
            "matchCriteriaId" : "05D6973D-D965-42D3-8320-AF4A4B424E6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.7",
            "matchCriteriaId" : "1F057ECE-42B5-4C1D-A201-EFF275EFAAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "4413D4BE-F225-4C28-B401-EB46D8F34160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.2411",
            "versionEndExcluding" : "9.3.2411.120",
            "matchCriteriaId" : "B6CA3000-9C26-45B9-A2A2-C22F3F4246BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.2503",
            "versionEndExcluding" : "10.0.2503.9",
            "matchCriteriaId" : "62714243-8A5F-4908-BD39-7B1026B8E7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.2507",
            "versionEndExcluding" : "10.1.2507.11",
            "matchCriteriaId" : "580C6FE9-14D3-4813-ABF1-3D829CCBAF72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2026-0209",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-18T18:24:33.087",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en OpenStack Nova antes de la versión 30.2.2, 31 antes de la 31.2.1, y 32 antes de la 32.1.1. Al escribir una cabecera QCOW maliciosa en un disco raíz o efímero y luego activar un redimensionamiento, un usuario puede inducir al backend de imagen Flat de Nova a llamar a qemu-img sin una restricción de formato, lo que resulta en una operación de redimensionamiento de imagen insegura que podría destruir datos en el sistema anfitrión. Solo los nodos de cómputo que utilizan el backend de imagen Flat (normalmente configurados con use_cow_images=False) se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/nova/+bug/2137507",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/02/17/7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/02/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2658",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T18:24:34.400",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee. Affected is an unknown function of the component Multiple Endpoints. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en newbee-ltd newbee-mall hasta a069069b07027613bf0e7f571736be86f431faee. Se ve afectada una función desconocida del componente Multiple Endpoints. Si se explota la vulnerabilidad se logra realizar una falsificación de petición en sitios cruzados. Es posible la explotar el ataque en remoto. El exploit se ha hecho público y podría utilizarse. Este producto sigue un enfoque de lanzamiento continuo, por lo que no se proporcionan detalles de la versión para las versiones afectadas o actualizadas. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/newbee-ltd/newbee-mall/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/newbee-ltd/newbee-mall/issues/106",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/newbee-ltd/newbee-mall/issues/107",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346456",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346456",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752797",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752798",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752799",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752800",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752801",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752802",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752803",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752804",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752805",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.752806",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2659",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T18:24:34.610",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument _target_stack can lead to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Squirrel hasta la versión 3.2. Está afectada por esta vulnerabilidad la función SQFuncState::PopTarget del archivo src/squirrel/squirrel/sqfuncstate.cpp. Si se manipula el argumento _target_stack puede lograrse una lectura fuera de límites. Es posible lanzar el ataque en el host local. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó pronto del problema al proyecto a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrel-lang:squirrel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "DDA9B279-8931-4C68-9500-534EAB17584C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/albertodemichelis/squirrel/issues/311",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i311/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22860",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T19:21:43.933",
      "lastModified" : "2026-02-19T18:27:09.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root if the target path starts with the root string, allowing directory listing outside the intended root. Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rack es una interfaz modular de servidor web Ruby. Antes de las versiones 2.2.22, 3.1.20 y 3.2.5, la verificación de ruta de 'Rack::Directory' utilizaba una coincidencia de prefijo de cadena en la ruta expandida. Una solicitud como '/../root_example/' puede escapar de la raíz configurada si la ruta de destino comienza con la cadena raíz, permitiendo la enumeración de directorios fuera de la raíz prevista. Las versiones 2.2.22, 3.1.20 y 3.2.5 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-548"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "2.2.22",
            "matchCriteriaId" : "58D73D7A-523C-4472-9322-87B5E7A785CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.20",
            "matchCriteriaId" : "76491EC1-2EA1-492E-97B2-2427EDFB0E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "653A4AF6-055E-46F2-992E-C6624BBF8A25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rack/rack/commit/75c5745c286637a8f049a33790c71237762069e7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rack/rack/security/advisories/GHSA-mxw3-3hh2-x2mh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2660",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T19:21:44.293",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to use after free. Local access is required to approach this attack. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en FascinatedBox lily hasta la versión 2.3. Este problema afecta a la función shorthash_for_name del archivo src/lily_symtab.c. Si se explota se provoca un uso después de la liberación. Se requiere acceso local para llevar a cabo este ataque. El exploit está disponible públicamente y podría ser utilizado. Se informó al proyecto del problema con antelación, a través de un informe de incidencia pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "30C42A17-3D4F-44E0-8262-4E3AF2F59444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FascinatedBox/lily/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FascinatedBox/lily/issues/385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i385/repro.lily",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346458",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346458",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753164",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0874",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-18T20:18:32.193",
      "lastModified" : "2026-02-20T15:09:23.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo CATPART creado maliciosamente, cuando es analizado por ciertos productos de Autodesk, puede forzar una vulnerabilidad de escritura fuera de límites. Un actor malicioso puede aprovechar esta vulnerabilidad para provocar un fallo, provocar corrupción de datos o ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.6",
            "matchCriteriaId" : "A8D187E9-7605-4325-9B7D-0C227CD2F26F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B938D507-D95A-4EAD-86AB-9B52A3682414"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68738B5A-B918-4CA3-BD13-4040B3219AFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8890EECB-7AB5-41A3-8E77-314183BC3AB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE935915-6926-474F-B5A4-7E77EF7426DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A159D88-990D-41D7-B6B0-D97B38241860"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046ADE16-4275-4BEF-9A71-480E709383F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB9FCDC-6717-44EB-AA55-983A771E2460"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3383C40E-DD43-4146-9B58-C44585E40985"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B01CD79-B993-47BB-B775-C10422FB956B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7393B89-15A9-4709-9FF3-DA1C88770594"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A56B67-B754-4525-995A-F70CAA6B5AAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3C0C68-F0D7-4737-8D37-D99F128DAB47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0004",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0875",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2026-02-18T20:18:32.370",
      "lastModified" : "2026-02-20T15:09:30.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Un archivo MODEL creado maliciosamente, cuando es analizado por ciertos productos de Autodesk, puede forzar una vulnerabilidad de escritura fuera de límites. Un actor malicioso puede aprovechar esta vulnerabilidad para causar un fallo, causar corrupción de datos o ejecutar código arbitrario en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@autodesk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@autodesk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:shared_components:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.6",
            "matchCriteriaId" : "A8D187E9-7605-4325-9B7D-0C227CD2F26F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B938D507-D95A-4EAD-86AB-9B52A3682414"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68738B5A-B918-4CA3-BD13-4040B3219AFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8890EECB-7AB5-41A3-8E77-314183BC3AB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE935915-6926-474F-B5A4-7E77EF7426DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A159D88-990D-41D7-B6B0-D97B38241860"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046ADE16-4275-4BEF-9A71-480E709383F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB9FCDC-6717-44EB-AA55-983A771E2460"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3383C40E-DD43-4146-9B58-C44585E40985"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:infraworks:2026:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1B01CD79-B993-47BB-B775-C10422FB956B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:inventor:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7393B89-15A9-4709-9FF3-DA1C88770594"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A56B67-B754-4525-995A-F70CAA6B5AAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:revit_lt:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3C0C68-F0D7-4737-8D37-D99F128DAB47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:autodesk:vault:2026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F81FC1-1B7C-40AF-88DB-B62F24CFA21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/products/autodesk-access/overview",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0004",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T20:18:35.783",
      "lastModified" : "2026-02-25T17:25:38.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A path traversal vulnerability exists in the `get_file` method of the `Guest` module's `Get` controller in InvoicePlane up to and including through 1.6.3. The vulnerability allows unauthenticated attackers to read arbitrary files on the server by manipulating the input filename. This leads to the disclosure of sensitive information, including configuration files with database credentials. Version 1.6.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Existe una vulnerabilidad de salto de ruta en el método 'get_file' del controlador 'Get' del módulo 'Guest' en InvoicePlane hasta la versión 1.6.3 inclusive. La vulnerabilidad permite a atacantes no autenticados leer archivos arbitrarios en el servidor manipulando el nombre de archivo de entrada. Esto lleva a la divulgación de información sensible, incluyendo archivos de configuración con credenciales de base de datos. La versión 1.6.4 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "17C261C3-0A6B-4D07-8370-DD3C71097DE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/add8bb798dde621f886823065ef1841986543c69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-88gq-mv54-v3fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25500",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T20:18:36.110",
      "lastModified" : "2026-02-19T18:26:27.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory` generates an HTML directory index where each file entry is rendered as a clickable link. If a file exists on disk whose basename starts with the `javascript:` scheme (e.g. `javascript:alert(1)`), the generated index contains an anchor whose `href` is exactly `javascript:alert(1)`. Clicking the entry executes JavaScript in the browser (demonstrated with `alert(1)`). Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rack es una interfaz modular para servidores web Ruby. Antes de las versiones 2.2.22, 3.1.20 y 3.2.5, `Rack::Directory` generaba un índice de directorio HTML en el que cada entrada de archivo se representaba como un enlace en el que se podía hacer clic. Si existe un archivo en el disco cuyo nombre base comienza con el esquema `javascript:` (por ejemplo, `javascript:alert(1)`), el índice generado contiene un ancla cuyo `href` es exactamente `javascript:alert(1)`. Al hacer clic en la entrada, se ejecuta JavaScript en el navegador (demostrado con `alert(1)`). Las versiones 2.2.22, 3.1.20 y 3.2.5 corrigen el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "2.2.22",
            "matchCriteriaId" : "58D73D7A-523C-4472-9322-87B5E7A785CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.20",
            "matchCriteriaId" : "76491EC1-2EA1-492E-97B2-2427EDFB0E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "653A4AF6-055E-46F2-992E-C6624BBF8A25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rack/rack/commit/f2f225f297b99fbee3d9f51255d41f601fc40aff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rack/rack/security/advisories/GHSA-whrj-4476-wvmp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2661",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T20:18:36.377",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Squirrel hasta 3.2. Esto afecta a la función SQObjectPtr::operator en la biblioteca squirrel/sqobject.h. Su manipulación resulta en un desbordamiento de búfer basado en montículo. El ataque necesita ser abordado localmente. El exploit ha sido liberado al público y puede ser utilizado para ataques. Se informó pronto al proyecto del problema a través de un informe de incidencias, pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrel-lang:squirrel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "DDA9B279-8931-4C68-9500-534EAB17584C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/albertodemichelis/squirrel/issues/310",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i310/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346459",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346459",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753165",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2662",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T20:18:36.570",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms of the file src/lily_emitter.c. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en FascinatedBox lily hasta la versión 2.3. Esta vulnerabilidad afecta la función count_transforms del archivo src/lily_emitter.c. Esta manipulación causa una lectura fuera de límites. El ataque solo puede ejecutarse localmente. El exploit se ha puesto a disposición del público y podría usarse para ataques. El proyecto fue informado del problema tempranamente a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "30C42A17-3D4F-44E0-8262-4E3AF2F59444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FascinatedBox/lily/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FascinatedBox/lily/issues/381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i381/repro.lily",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346460",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346460",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753166",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2663",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T20:18:36.817",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Alixhan xh-admin-backend hasta la versión 1.7.0. Este problema afecta a un procesamiento desconocido del archivo /frontend-api/system-service/api/system/role/query del componente Manejador de Consultas de Base de Datos. Dicha manipulación del argumento prop conduce a una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó pronto con el proveedor sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346461",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346461",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753225",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2665",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T20:18:37.110",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the function Upload of the file SysFileController.java of the component JSP Parser. Performing a manipulation of the argument File results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en huanzi-qch base-admin hasta 57a8126bb3353a004f3c7722089e3b926ea83596. Está afectada la función Upload del archivo SysFileController.java del componente JSP Parser. Si se manipula el argumento File se puede realizar una carga sin restricciones. El ataque puede ser iniciado en remoto. El exploit es ahora público y puede ser usado. Como este producto realiza lanzamientos continuos no hay detalle de las versiones de lanzamientos afectados ni actualizados disponibles. Se informó pronto al proyecto del problema a través de un informe de problema pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/huanzi-qch/base-admin/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/huanzi-qch/base-admin/issues/38",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/huanzi-qch/base-admin/issues/38#issue-3905100373",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346462",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346462",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753240",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2666",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T20:18:37.297",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en mingSoft MCMS 6.1.1. Está afectada una función desconocida del archivo /ms/file/uploadTemplate.do del componente Template Archive Handler. Si se ejecuta el argumento File manipulado se puede lograr una carga sin restricciones. El ataque puede lanzarse en remoto. El exploit ha sido publicado y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mingsoft:mcms:6.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B070C1C-2A31-450F-BE3D-D642A69B7CD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chujianxin0101/vuln/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346463",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346463",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753243",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0573",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2026-02-18T21:16:22.470",
      "lastModified" : "2026-02-19T22:49:21.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects to leak sensitive authorization tokens. The repository_pages API insecurely followed HTTP redirects when fetching artifact URLs, preserving the authorization header containing a privileged JWT. An authenticated user could redirect these requests to an attacker-controlled domain, exfiltrate the Actions.ManageOrgs JWT, and leverage it for potential remote code execution. Attackers would require access to the target GitHub Enterprise Server instance and the ability to exploit a legacy redirect to an attacker-controlled domain. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.19 and was fixed in versions 3.19.2, 3.18.4, 3.17.10, 3.16.13, 3.15.17, and 3.14.22. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redirección de URL fue identificada en GitHub Enterprise Server la cual permitía a las redirecciones controladas por el atacante filtrar tokens de autorización sensibles. La API repository_pages seguía de forma insegura las redirecciones HTTP al obtener URLs de artefactos, preservando el encabezado de autorización que contenía un JWT privilegiado. Un usuario autenticado podía redirigir estas solicitudes a un dominio controlado por el atacante, exfiltrar el JWT de Actions.ManageOrgs y aprovecharlo para una posible ejecución remota de código. Los atacantes requerirían acceso a la instancia de GitHub Enterprise Server objetivo y, también, la capacidad de explotar una redirección heredada a un dominio controlado por el atacante. Esta vulnerabilidad afectó a todas las versiones de GitHub Enterprise Server anteriores a la 3.19 y fue corregida en las versiones 3.19.2, 3.18.4, 3.17.10, 3.16.13, 3.15.17 y 3.14.22. Esta vulnerabilidad fue reportada a través del programa GitHub Bug Bounty."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.14.22",
            "matchCriteriaId" : "5B364775-45E7-4E82-8C8D-DBCD513523C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.15.0",
            "versionEndExcluding" : "3.15.17",
            "matchCriteriaId" : "44763502-3158-4369-9EBB-8D87C16645FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.16.0",
            "versionEndExcluding" : "3.16.13",
            "matchCriteriaId" : "C3E68ACE-C628-4029-B7B4-1E08D502A24D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17.0",
            "versionEndExcluding" : "3.17.10",
            "matchCriteriaId" : "062A4133-114C-4643-BB73-1C37C0C188C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18.0",
            "versionEndExcluding" : "3.18.4",
            "matchCriteriaId" : "51E739B5-F9CF-4D7E-8240-FEE7E3D9F1A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19.0",
            "versionEndExcluding" : "3.19.2",
            "matchCriteriaId" : "D8AE9F21-7596-446E-99B8-F09A230F173A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.22",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.17",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.13",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.10",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.4",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.2",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0665",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-02-18T21:16:22.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption."
      }, {
        "lang" : "es",
        "value" : "Se encontró un error 'off-by-one' (desbordamiento por un elemento) en el soporte de QEMU para invitados KVM Xen. Un invitado malicioso podría aprovechar este fallo para desencadenar accesos fuera de límite a la pila en el proceso de QEMU a través de la interfaz de hiperllamada physdev de Xen emulada, lo que llevaría a una denegación de servicio o a una posible corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0665",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2428640",
        "source" : "patrick@puiterwijk.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1200",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-02-18T21:16:23.070",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences."
      }, {
        "lang" : "es",
        "value" : "Se encontró un error en el fork rgaufman/live555 de live555. Un atacante remoto podría explotar un fallo de segmentación en la función 'increaseBufferTo'. Esta vulnerabilidad puede provocar problemas de corrupción de memoria y potencialmente otras consecuencias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-1200",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2430836",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://github.com/rgaufman/live555/issues/65",
        "source" : "patrick@puiterwijk.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1355",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2026-02-18T21:16:23.460",
      "lastModified" : "2026-02-19T22:08:57.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to another user’s repository migration export due to a missing authorization check in the repository migration upload endpoint. By supplying the migration identifier, an attacker could overwrite or replace a victim’s migration archive, potentially causing victims to download attacker-controlled repository data during migration restores or automated imports. An attacker would require authentication to the victim's GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.20 and was fixed in versions 3.19.2, 3.18.5, 3.17.11, 3.16.14, 3.15.18, 3.14.23. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de falta de autorización en GitHub Enterprise Server que permitía a un atacante cargar contenido no autorizado a la exportación de migración de repositorio de otro usuario debido a una falta de verificación de autorización en el endpoint de carga de migración de repositorio. Al proporcionar el identificador de migración, un atacante podría sobrescribir o reemplazar el archivo de migración de una víctima, lo que podría hacer que las víctimas descargaran datos de repositorio controlados por el atacante durante las restauraciones de migración o importaciones automatizadas. Un atacante requeriría autenticación a la instancia de GitHub Enterprise Server de la víctima. Esta vulnerabilidad afectó a todas las versiones de GitHub Enterprise Server anteriores a la 3.20 y fue corregida en las versiones 3.19.2, 3.18.5, 3.17.11, 3.16.14, 3.15.18, 3.14.23. Esta vulnerabilidad fue reportada a través del programa GitHub Bug Bounty."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.14.23",
            "matchCriteriaId" : "BEA55C32-050E-43E6-A333-DAB8081BEA39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.15.0",
            "versionEndExcluding" : "3.15.18",
            "matchCriteriaId" : "ED4B65C8-B789-4241-B6A8-7DEA48362FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.16.0",
            "versionEndExcluding" : "3.16.14",
            "matchCriteriaId" : "46E1F973-5D32-4EB4-ABF0-758153BE97BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.17.0",
            "versionEndExcluding" : "3.17.11",
            "matchCriteriaId" : "90147B72-EECF-4EB8-82D2-A3F98D0223A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18.0",
            "versionEndExcluding" : "3.18.5",
            "matchCriteriaId" : "B7172422-332C-4454-85A3-551BBAC1A59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19.0",
            "versionEndExcluding" : "3.19.2",
            "matchCriteriaId" : "D8AE9F21-7596-446E-99B8-F09A230F173A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.23",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.18",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.14",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.11",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.5",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.2",
        "source" : "product-cna@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1999",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2026-02-18T21:16:24.147",
      "lastModified" : "2026-04-08T22:16:20.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge their own pull request into a repository without having push access by exploiting an authorization bypass in the enable_auto_merge mutation for pull requests. This issue only affected repositories that allow forking as the attack relies on opening a pull request from an attacker-controlled fork into the target repository. Exploitation was only possible in specific scenarios. It required a clean pull request status and only applied to branches without branch protection rules enabled. This vulnerability affected GitHub Enterprise Server versions prior to 3.19.2, 3.18.5, and 3.17.11, and was fixed in versions 3.19.2, 3.18.5, and 3.17.11. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autorización incorrecta fue identificada en GitHub Enterprise Server que permitía a un atacante fusionar su propia solicitud de extracción en un repositorio sin tener acceso de envío al explotar una omisión de autorización en la mutación enable_auto_merge para solicitudes de extracción. Este problema solo afectó a los repositorios que permiten la bifurcación, ya que el ataque se basa en abrir una solicitud de extracción desde una bifurcación controlada por el atacante en el repositorio objetivo. La explotación solo fue posible en escenarios específicos. Requería un estado de solicitud de extracción limpio y solo se aplicaba a ramas sin reglas de protección de rama habilitadas. Esta vulnerabilidad afectó a las versiones de GitHub Enterprise Server anteriores a 3.19.2, 3.18.5 y 3.17.11, y fue corregida en las versiones 3.19.2, 3.18.5 y 3.17.11. Esta vulnerabilidad fue reportada a través del programa GitHub Bug Bounty."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.17.11",
            "matchCriteriaId" : "02C18B89-2A3F-4977-98AF-F84F2DD69EF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.18.0",
            "versionEndExcluding" : "3.18.5",
            "matchCriteriaId" : "B7172422-332C-4454-85A3-551BBAC1A59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.19.0",
            "versionEndExcluding" : "3.19.2",
            "matchCriteriaId" : "D8AE9F21-7596-446E-99B8-F09A230F173A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.11",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.5",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.2",
        "source" : "product-cna@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24746",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T21:16:24.357",
      "lastModified" : "2026-02-20T18:33:43.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the Edit Quotes functions of InvoicePlane version 1.7.0. In the Editing Quotes function, the application does not validate user input at the quote_number parameter. Although administrator privileges are required to exploit it, this is still considered a critical vulnerability as it can cause actions such as unauthorized modification of application data, creation of persistent backdoors through stored malicious scripts, and full compromise of the application's integrity. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Hay una vulnerabilidad de cross-site scripting (XSS) almacenado en la función de 'Editar Presupuestos' de InvoicePlane versión 1.7.0. En la función de 'Editar Presupuestos', la aplicación no valida la entrada del usuario en el parámetro quote_number. Aunque se requieren privilegios de administrador para explotarla, esto sigue siendo considerado una vulnerabilidad crítica, ya que puede causar acciones como la modificación no autorizada de datos de la aplicación, la creación de puertas traseras persistentes a través de scripts maliciosos almacenados y el compromiso total de la integridad de la aplicación. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95F739B4-399F-459D-BF16-5E225A268320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-73x8-gr6v-vjvj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2667",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T21:16:25.240",
      "lastModified" : "2026-02-26T20:32:18.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impacted element is an unknown function of the file /dispatch/api?cmd=userinfo. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en la Plataforma de Comando y Despacho Integrado Visual Rongzhitong hasta el 20260206. El elemento afectado es una función desconocida del archivo /dispatch/API?cmd=userinfo. Su manipulación provoca que se realicen controles de acceso inadecuados. El ataque puede iniciarse en remoto. El exploit ha sido divulgado al público y puede ser utilizado. Se contactó pronto con el proveedor sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rongzhitong:visual_integrated_command_and_dispatch_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-02-06",
            "matchCriteriaId" : "9CF35D52-7BEE-4E00-BA8F-4D2A476D9730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346464",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346464",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2668",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T21:16:25.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This affects an unknown function of the file /dm/dispatch/user/add of the component User Handler. The manipulation results in improper access controls. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en la Plataforma de Comando y Despacho Integrado Visual Rongzhitong hasta 20260206. Esto afecta una función desconocida del archivo /dm/dispatch/user/add del componente User Handler. Se se manipula se puede lograr realizar  controles de acceso inadecuados. El ataque puede ser lanzado en remoto. El exploit ha sido hecho público y podría ser usado. Se contactó pronto con el proveedor sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rongzhitong:visual_integrated_command_and_dispatch_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-02-06",
            "matchCriteriaId" : "9CF35D52-7BEE-4E00-BA8F-4D2A476D9730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346465",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346465",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24743",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T22:16:24.660",
      "lastModified" : "2026-02-20T18:39:46.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the upload Invoice Logo functions of InvoicePlane version 1.7.0. The Upload Invoice Logo function allows the application to upload svg files. Although administrator privileges are required to exploit it, this is still considered a critical vulnerability as it can cause actions such as unauthorized modification of application data, creation of persistent backdoors through stored malicious scripts, and full compromise of the application's integrity. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Hay una vulnerabilidad de cross-site scripting almacenado (XSS) en las funciones de carga del logotipo de la factura de InvoicePlane versión 1.7.0. La función de carga del logotipo de la factura permite a la aplicación cargar archivos svg. Aunque se requieren privilegios de administrador para explotarla, esto todavía se considera una vulnerabilidad crítica ya que puede causar acciones como la modificación no autorizada de datos de la aplicación, la creación de puertas traseras persistentes a través de scripts maliciosos almacenados y el compromiso total de la integridad de la aplicación. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95F739B4-399F-459D-BF16-5E225A268320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-485m-4725-2428",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24744",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T22:16:24.820",
      "lastModified" : "2026-02-20T18:45:14.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the Edit Invoices functions of InvoicePlane version 1.7.0. When editing invoices, the application does not validate user input at the `invoice_number` parameter. Although administrator privileges are required to exploit it, this is still considered a critical vulnerability as it can cause actions such as unauthorized modification of application data, creation of persistent backdoors through stored malicious scripts, and full compromise of the application's integrity. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad de cross-site scripting Almacenado (XSS) ocurre en las funciones de Editar Facturas de InvoicePlane versión 1.7.0. Al editar facturas, la aplicación no valida la entrada del usuario en el parámetro 'invoice_number'. Aunque se requieren privilegios de administrador para explotarla, esta sigue siendo considerada una vulnerabilidad crítica ya que puede causar acciones como la modificación no autorizada de datos de la aplicación, la creación de puertas traseras persistentes a través de scripts maliciosos almacenados y el compromiso total de la integridad de la aplicación. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95F739B4-399F-459D-BF16-5E225A268320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-5mxx-553h-m62w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27174",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:25.080",
      "lastModified" : "2026-02-20T20:02:36.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect() call that lacks an exit statement, allowing unauthenticated requests to reach the ajax handler in inc_panel_ajax.php. The console handler within that file passes user-supplied input from GET parameters (via register_globals) directly to eval() without any authentication check. An attacker can execute arbitrary PHP code by sending a crafted GET request to /admin.php with ajax_panel, op, and command parameters."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) permite la ejecución remota de código no autenticada a través de la función de consola PHP del panel de administración. Un error de orden de inclusión en modules/panel.class.php provoca que la ejecución continúe más allá de una llamada a redirect() que carece de una declaración exit, permitiendo que las solicitudes no autenticadas lleguen al manejador ajax en inc_panel_ajax.php. El manejador de consola dentro de ese archivo pasa la entrada proporcionada por el usuario desde los parámetros GET (a través de register_globals) directamente a eval() sin ninguna verificación de autenticación. Un atacante puede ejecutar código PHP arbitrario enviando una solicitud GET manipulada a /admin.php con los parámetros ajax_panel, op y command."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-unauthenticated-remote-code-execution-via-admin-console-eval",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27175",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:25.263",
      "lastModified" : "2026-02-20T20:02:13.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injection via rc/index.php. The $param variable from user input is interpolated into a command string within double quotes without sanitization via escapeshellarg(). The command is inserted into a database queue by safe_exec(), which performs no sanitization. The cycle_execs.php script, which is web-accessible without authentication, retrieves queued commands and passes them directly to exec(). An attacker can exploit a race condition by first triggering cycle_execs.php (which purges the queue and enters a polling loop), then injecting a malicious command via the rc endpoint while the worker is polling. The injected shell metacharacters expand inside double quotes, achieving remote code execution within one second."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) es vulnerable a la inyección de comandos del sistema operativo no autenticada a través de rc/index.php. La variable $param de la entrada del usuario se intercala en una cadena de comandos entre comillas dobles sin saneamiento a través de escapeshellarg(). El comando se inserta en una cola de la base de datos por safe_exec(), que no realiza ningún saneamiento. El script cycle_execs.php, que es accesible por la web sin autenticación, recupera los comandos en cola y los pasa directamente a exec(). Un atacante puede explotar una condición de carrera activando primero cycle_execs.php (que purga la cola y entra en un bucle de sondeo), luego inyectando un comando malicioso a través del punto final rc mientras el trabajador está sondeando. Los metacaracteres de shell inyectados se expanden dentro de las comillas dobles, logrando la ejecución remota de código en un segundo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-command-injection-in-rcindexphp-via-race-condition",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27176",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:25.440",
      "lastModified" : "2026-02-20T20:01:03.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php. The $qry parameter is rendered directly into the HTML page without sanitization via htmlspecialchars(), both in an input field value attribute and in a paragraph element. An attacker can inject arbitrary JavaScript by crafting a URL with malicious content in the qry parameter."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) contiene una vulnerabilidad de cross-site scripting (XSS) reflejada en command.PHP. El parámetro $qry se renderiza directamente en la página HTML sin sanitización a través de htmlspecialchars(), tanto en un atributo de valor de campo de entrada como en un elemento de párrafo. Un atacante puede inyectar JavaScript arbitrario al crear una URL con contenido malicioso en el parámetro qry."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-reflected-cross-site-scripting-in-commandphp",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27177",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:25.610",
      "lastModified" : "2026-02-20T20:00:36.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability via the /objects/?op=set endpoint, which is intentionally unauthenticated for IoT device integration. User-supplied property values are stored raw in the database without sanitization. When an administrator views the property editor in the admin panel, the stored values are rendered without escaping in both a paragraph tag (SOURCE field) and a textarea element (VALUE field). The XSS fires on page load without requiring any click from the admin. Additionally, the session cookie lacks the HttpOnly flag, enabling session hijack via document.cookie exfiltration. An attacker can enumerate properties via the unauthenticated /api.php/data/ endpoint and poison any property with malicious JavaScript."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) contiene una vulnerabilidad de cross-site scripting (XSS) almacenado a través del endpoint /objects/?op=set, que está intencionalmente sin autenticar para la integración de dispositivos IoT. Los valores de propiedad proporcionados por el usuario se almacenan sin procesar en la base de datos sin saneamiento. Cuando un administrador ve el editor de propiedades en el panel de administración, los valores almacenados se renderizan sin escape tanto en una etiqueta de párrafo (campo SOURCE) como en un elemento de área de texto (campo VALUE). El XSS se activa al cargar la página sin requerir ningún clic del administrador. Además, la cookie de sesión carece de la bandera HttpOnly, lo que permite el secuestro de sesión a través de la exfiltración de document.cookie. Un atacante puede enumerar propiedades a través del endpoint /api.php/data/ sin autenticar y envenenar cualquier propiedad con JavaScript malicioso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-stored-cross-site-scripting-via-property-set-endpoint",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27178",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:25.790",
      "lastModified" : "2026-02-20T19:58:33.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability through method parameter injection into the shoutbox. The /objects/?method= endpoint allows unauthenticated execution of stored methods with attacker-controlled parameters. Default methods such as ThisComputer.VolumeLevelChanged pass the user-supplied VALUE parameter directly into the say() function, which stores the message raw in the shouts database table without escaping. The shoutbox widget renders stored messages without sanitization in both PHP rendering code and HTML templates. Because the dashboard widget auto-refreshes every 3 seconds, the injected script executes automatically when any administrator loads the dashboard, enabling session hijack through cookie exfiltration."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) contiene una vulnerabilidad de cross-site scripting (XSS) almacenado a través de la inyección de parámetros de método en la shoutbox. El endpoint /objects/?method= permite la ejecución no autenticada de métodos almacenados con parámetros controlados por el atacante. Métodos predeterminados como ThisComputer.VolumeLevelChanged pasan el parámetro VALUE proporcionado por el usuario directamente a la función say(), la cual almacena el mensaje en bruto en la tabla de la base de datos shouts sin escapar. El widget de la shoutbox renderiza los mensajes almacenados sin sanitización tanto en el código de renderizado PHP como en las plantillas HTML. Debido a que el widget del panel de control se actualiza automáticamente cada 3 segundos, el script inyectado se ejecuta automáticamente cuando cualquier administrador carga el panel de control, lo que permite el secuestro de sesión a través de la exfiltración de cookies."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-stored-cross-site-scripting-via-method-parameters-to-shoutbox",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27179",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:25.967",
      "lastModified" : "2026-02-20T19:56:55.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module. The commands_search.inc.php file directly interpolates the $_GET['parent'] parameter into multiple SQL queries without sanitization or parameterized queries. The commands module is loadable without authentication via the /objects/?module=commands endpoint, which includes arbitrary modules by name and calls their usual() method. Time-based blind SQL injection is exploitable using UNION SELECT SLEEP() syntax. Because MajorDoMo stores admin passwords as unsalted MD5 hashes in the users table, successful exploitation enables extraction of credentials and subsequent admin panel access."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) contiene una vulnerabilidad de inyección SQL no autenticada en el módulo de comandos. El archivo commands_search.inc.php interpola directamente el parámetro $_GET['parent'] en múltiples consultas SQL sin saneamiento o consultas parametrizadas. Se puede cargar el módulo de comandos  sin autenticación a través del endpoint /objects/?module=commands, que incluye módulos arbitrarios por nombre y llama a su método usual(). Es posible explotar la inyección SQL ciega basada en tiempo usando la sintaxis UNION SELECT SLEEP(). Debido a que MajorDoMo almacena las contraseñas de administrador como hashes MD5 sin sal en la tabla de usuarios, en caso de que se eplote con éxito se puede extraer credenciales y, posteriormente, acceder al panel de administración."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-unauthenticated-sql-injection-in-commands-module",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27180",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:26.153",
      "lastModified" : "2026-02-20T19:51:21.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module exposes its admin() method through the /objects/?module=saverestore endpoint without authentication because it uses gr('mode') (which reads directly from $_REQUEST) instead of the framework's $this->mode. An attacker can poison the system update URL via the auto_update_settings mode handler, then trigger the force_update handler to initiate the update chain. The autoUpdateSystem() method fetches an Atom feed from the attacker-controlled URL with trivial validation, downloads a tarball via curl with TLS verification disabled (CURLOPT_SSL_VERIFYPEER set to FALSE), extracts it using exec('tar xzvf ...'), and copies all extracted files to the document root using copyTree(). This allows an attacker to deploy arbitrary PHP files, including webshells, to the webroot with two GET requests."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) es vulnerable a la ejecución remota de código no autenticada a través de un compromiso de la cadena de suministro mediante el envenenamiento de la URL de actualización. El módulo saverestore expone su método admin() a través del endpoint /objects/?module=saverestore sin autenticación porque usa gr('mode') (que lee directamente de $_REQUEST) en lugar del $this-&gt;mode del framework. Un atacante puede envenenar la URL de actualización del sistema a través del manejador de modo auto_update_settings, y luego activar el manejador force_update para iniciar la cadena de actualización. El método autoUpdateSystem() obtiene un feed Atom de la URL controlada por el atacante con una validación trivial, descarga un tarball vía curl con la verificación TLS deshabilitada (CURLOPT_SSL_VERIFYPEER establecido en FALSE), lo extrae usando exec('tar xzvf ...'), y copia todos los archivos extraídos a la raíz del documento usando copyTree(). Esto permite a un atacante desplegar archivos PHP arbitrarios, incluyendo webshells, en la raíz web con dos solicitudes GET."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-supply-chain-remote-code-execution-via-update-url-poisoning",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27181",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:26.337",
      "lastModified" : "2026-02-20T19:51:48.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MajorDoMo (aka Major Domestic Module) allows unauthenticated arbitrary module uninstallation through the market module. The market module's admin() method reads gr('mode') from $_REQUEST and assigns it to $this->mode at the start of execution, making all mode-gated code paths reachable without authentication via the /objects/?module=market endpoint. The uninstall mode handler calls uninstallPlugin(), which deletes module records from the database, executes the module's uninstall() method via eval(), recursively deletes the module's directory and template files using removeTree(), and removes associated cycle scripts. An attacker can iterate through module names and wipe the entire MajorDoMo installation with a series of unauthenticated GET requests."
      }, {
        "lang" : "es",
        "value" : "MajorDoMo (también conocido como Major Domestic Module) permite la desinstalación arbitraria de módulos no autenticada a través del módulo de mercado. El método admin() del módulo de mercado lee gr('mode') de $_REQUEST y lo asigna a $this-&gt;mode al inicio de la ejecución, haciendo que todas las rutas de código protegidas por modo sean accesibles sin autenticación a través del endpoint /objects/?module=market. El gestor del modo de desinstalación llama a uninstallPlugin(), que elimina registros de módulos de la base de datos, ejecuta el método uninstall() del módulo a través de eval(), elimina recursivamente el directorio del módulo y los archivos de plantilla usando removeTree(), y elimina los scripts de ciclo asociados. Un atacante puede iterar a través de nombres de módulos y borrar toda la instalación de MajorDoMo con una serie de solicitudes GET no autenticadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mjdm:majordomo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7008978E-8DE1-4811-958F-3AFB3847B919"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/majordomo-revisited/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sergejey/majordomo/pull/1177",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/majordomo-unauthenticated-module-uninstall-via-market-endpoint",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27182",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-18T22:16:26.517",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON frames to port 27000. Attackers on the local network can send malformed packets with unsanitized command data that the service forwards directly to OS execution functions, enabling remote code execution under the service account."
      }, {
        "lang" : "es",
        "value" : "Saturn Remote Mouse Server contiene una vulnerabilidad de inyección de comandos que permite a atacantes no autenticados ejecutar comandos arbitrarios enviando tramas UDP JSON especialmente diseñadas al puerto 27000. Los atacantes en la red local pueden enviar paquetes malformados con datos de comando no saneados que el servicio reenvía directamente a las funciones de ejecución del sistema operativo, lo que permite la ejecución remota de código bajo la cuenta de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstorm.news/files/id/215835/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.saturnremote.com/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/saturn-remote-mouse-server-udp-command-injection-rce",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2648",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-18T22:16:26.710",
      "lastModified" : "2026-02-19T18:35:27.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer de la pila en PDFium en Google Chrome anterior a 145.0.7632.109 permite a un atacante remoto realizar una escritura de memoria fuera de límites mediante un archivo PDF manipulado. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.109",
            "matchCriteriaId" : "5C277072-720B-4A77-AC3F-CD3348E19407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/477033835",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2649",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-18T22:16:26.847",
      "lastModified" : "2026-02-19T18:35:19.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en V8 en Google Chrome anterior a 145.0.7632.109 permite a un atacante remoto, potencialmente, explotar la corrupción de la pila a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.109",
            "matchCriteriaId" : "5C277072-720B-4A77-AC3F-CD3348E19407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/481074858",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2650",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-18T22:16:26.980",
      "lastModified" : "2026-02-19T18:35:11.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento del búfer de la pila en Media en Google Chrome anterior a la versión 145.0.7632.109 permite, potencialmente, a un atacante remoto explotar la corrupción de la pila mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.109",
            "matchCriteriaId" : "5C277072-720B-4A77-AC3F-CD3348E19407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/476461867",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2669",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T22:16:27.177",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impacts an unknown function of the file /dm/dispatch/user/delete of the component User Handler. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en la Plataforma de Comando y Despacho Integrado Visual Rongzhitong hasta 20260206. Esto afecta una función desconocida del archivo /dm/dispatch/user/delete del componente User Handler. La manipulación del argumento ID provoca que no se realicen adecuadamente los controles de acceso. Es posible explotar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rongzhitong:visual_integrated_command_and_dispatch_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2026-02-06",
            "matchCriteriaId" : "9CF35D52-7BEE-4E00-BA8F-4D2A476D9730"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346466",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346466",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2670",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T22:16:27.360",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Advantech WISE-6610 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/openvpn_apply of the component Background Management. Such manipulation of the argument delete_file leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Advantech WISE-6610 1.2.1_20251110. Se ve afectada una función desconocida del archivo /cgi-bin/luci/admin/openvpn_apply del componente Background Management. Dicha manipulación del argumento delete_file conduce a una inyección de comandos del sistema operativo. El ataque puede ser ejecutado de forma remota. El exploit está disponible públicamente y podría ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no hubo respuesta alguna."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/37",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346467",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346467",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753293",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.advantech.com/",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2672",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T22:16:27.553",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the file /Search/Subject/downLoad. Performing a manipulation of the argument path results in path traversal. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en el Sistema de Archivos Electrónicos Tsinghua Unigroup 3.2.210802(62532). Está afectada por esta vulnerabilidad la función Download del archivo /Search/Subject/downLoad. La manipulación del argumento path provoca un salto de ruta. El ataque puede llevarse a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó pronto con el proveedor sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unigroup:electronic_archives_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.210802\\(62532\\)",
            "matchCriteriaId" : "830E63B2-7C13-41AF-9605-E69078638FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-fileread/blob/main/introduce",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-fileread/blob/main/poc.py",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346468",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346468",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753295",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24745",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:19.407",
      "lastModified" : "2026-02-20T18:45:21.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability occurs in the upload Login Logo functions of InvoicePlane version 1.7.0. In the Upload Login Logo, the application allows uploading svg files. Although administrator privileges are required to exploit it, this is still considered a critical vulnerability as it can cause actions such as unauthorized modification of application data, creation of persistent backdoors through stored malicious scripts, and full compromise of the application's integrity. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad de cross-site scripting (XSS) almacenado ocurre en las funciones de carga del logotipo de inicio de sesión de InvoicePlane versión 1.7.0. En la carga del logotipo de inicio de sesión, la aplicación permite cargar archivos svg. Aunque se requieren privilegios de administrador para explotarla, esto todavía se considera una vulnerabilidad crítica ya que puede causar acciones como modificación no autorizada de datos de la aplicación, creación de puertas traseras persistentes a través de scripts maliciosos almacenados y compromiso total de la integridad de la aplicación. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95F739B4-399F-459D-BF16-5E225A268320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-r9rq-f946-6x54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25548",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:19.567",
      "lastModified" : "2026-02-20T18:45:32.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A critical Remote Code Execution (RCE) vulnerability exists in InvoicePlane 1.7.0 through a chained Local File Inclusion (LFI) and Log Poisoning attack. An authenticated administrator can execute arbitrary system commands on the server by manipulating the `public_invoice_template` setting to include poisoned log files containing PHP code. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad crítica de ejecución remota de código (RCE) existe en InvoicePlane 1.7.0 a través de un ataque encadenado de inclusión local de ficheros (LFI) y envenenamiento de logs. Un administrador autenticado puede ejecutar comandos de sistema arbitrarios en el servidor manipulando la configuración 'public_invoice_template' para incluir ficheros de log envenenados que contienen código PHP. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-98"
        }, {
          "lang" : "en",
          "value" : "CWE-117"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "200F4F45-C04E-4F4E-9DF4-CE8D5ABEDB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-g6rw-m9mf-33ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25594",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:19.747",
      "lastModified" : "2026-02-20T17:07:45.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane 1.7.0 via the Family Name field. The `family_name` value is rendered without HTML encoding inside the family dropdown on the product form. When an administrator creates a family with a malicious name, the payload executes in the browser of any administrator who visits the product form. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad de Cross-Site Scripting Almacenado (XSS) existe en InvoicePlane 1.7.0 a través del campo Family Name. El valor 'family_name' se renderiza sin codificación HTML dentro del desplegable de familia en el formulario de producto. Cuando un administrador crea una familia con un nombre malicioso, la carga útil se ejecuta en el navegador de cualquier administrador que visita el formulario de producto. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "200F4F45-C04E-4F4E-9DF4-CE8D5ABEDB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-wrr7-2f27-8h94",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25595",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:19.910",
      "lastModified" : "2026-02-20T17:07:50.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane 1.7.0 via the Invoice Number field. An authenticated administrator can inject malicious JavaScript that executes when any administrator views the affected invoice or visits the dashboard. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad de cross-site scripting (XSS) almacenado existe en InvoicePlane 1.7.0 a través del campo Invoice Number. Un administrador autenticado puede inyectar JavaScript malicioso que se ejecuta cuando cualquier administrador ve la factura afectada o visita el panel de control. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "200F4F45-C04E-4F4E-9DF4-CE8D5ABEDB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-xxvr-2564-6jg6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25596",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:20.073",
      "lastModified" : "2026-02-20T17:07:57.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane 1.7.0 via the Product Unit Name fields. An authenticated administrator can inject malicious JavaScript that executes when any administrator views an invoice containing a product with the malicious unit. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad de cross-site scripting (XSS) almacenado existe en InvoicePlane 1.7.0 a través de los campos Product Unit Name. Un administrador autenticado puede inyectar JavaScript malicioso que se ejecuta cuando cualquier administrador ve una factura que contiene un producto con la unidad maliciosa. La versión 1.7.1 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "200F4F45-C04E-4F4E-9DF4-CE8D5ABEDB9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-3wjq-822q-98f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26270",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:20.237",
      "lastModified" : "2026-02-20T17:13:26.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting (XSS) vulnerability exists in InvoicePlane (latest version) that allows an authenticated user with permissions to manage Invoice Groups to inject malicious JavaScript into the \"Identifier Format\" field. This script executes when any user views the invoice list or the main dashboard. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en InvoicePlane (última versión) que permite a un usuario autenticado con permisos para gestionar Grupos de Facturas inyectar JavaScript malicioso en el campo 'Formato de Identificador'. Este script se ejecuta cuando cualquier usuario ve la lista de facturas o el panel principal. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95F739B4-399F-459D-BF16-5E225A268320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-432m-jv69-qp5j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26281",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-18T23:16:20.400",
      "lastModified" : "2026-02-20T17:14:02.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A stored cross-site scripting (XSS) vulnerability in the Sumex invoice view allows an authenticated user with client and invoice management privileges to execute arbitrary JavaScript in the browser of any user viewing the invoice. This can lead to session hijacking, data theft, or other malicious actions on behalf of the victim user. Version 1.7.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "InvoicePlane es una aplicación de código abierto autoalojada para gestionar facturas, clientes y pagos. Una vulnerabilidad de cross-site scripting (XSS) almacenado en la vista de factura Sumex permite a un usuario autenticado con privilegios de gestión de clientes y facturas ejecutar JavaScript arbitrario en el navegador de cualquier usuario que vea la factura. Esto puede llevar al secuestro de sesión, robo de datos u otras acciones maliciosas en nombre del usuario víctima. La versión 1.7.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95F739B4-399F-459D-BF16-5E225A268320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/commit/93622f2df88a860d89bfee56012cabb2942061d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-ccpx-2v5c-cc24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2676",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T23:16:20.910",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en GoogTech sms-ssm hasta e8534c766fd13f5f94c01dab475d75f286918a8d. La función preHandle del archivo LoginInterceptor.java del componente Interfaz API está afectada por este problema. Si se ejecuta de forma manipulada puede llevar a una autorización impropia. El ataque puede realizarse en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Este producto utiliza un sistema de entrega continua, y como tal, la información de la versión para las versiones afectadas o actualizadas no se divulga."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GoogTech/sms-ssm/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/GoogTech/sms-ssm/issues/27",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/GoogTech/sms-ssm/issues/27#issue-3878817166",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/GoogTech/sms-ssm/issues/27#issuecomment-3828063958",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346469",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346469",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.749702",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2682",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T23:16:21.100",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el Sistema de Archivos Electrónicos Tsinghua Unigroup hasta la versión 3.2.210802(62532). Está afectada una función desconocida del archivo /mine/PublicReport/prinReport.html?token=java. La manipulación del argumento comid provoca una inyección SQL. El ataque puede lanzarse en remoto. El exploit ha sido divulgado al público y puede ser utilizado. Se contactó pronto con el proveedor sobre esta divulgación, pero no respondió."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unigroup:electronic_archives_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.210802\\(62532\\)",
            "matchCriteriaId" : "830E63B2-7C13-41AF-9605-E69078638FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-sql/blob/main/introduce",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-sql/blob/main/poc.py",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346473",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346473",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753308",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2683",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-18T23:16:21.290",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The affected element is an unknown function of the file /Using/Subject/downLoad.html. Performing a manipulation of the argument path results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). El elemento afectado es una función desconocida del archivo /Using/Subject/downLoad.html. Se se realizauna manipulación del argumento path se logra realizar un salto de ruta. El ataque puede iniciarse en remoto. El exploit se ha hecho público y podría utilizarse. Se contactó pronto con el proveedor sobre esta divulgación, pero no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unigroup:electronic_archives_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.210802\\(62532\\)",
            "matchCriteriaId" : "830E63B2-7C13-41AF-9605-E69078638FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-fileread3/blob/main/introduce",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-fileread3/blob/main/poc.py",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346474",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346474",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753418",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24126",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T00:16:21.483",
      "lastModified" : "2026-02-19T18:34:57.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weblate is a web based localization tool. Prior to 5.16.0, the SSH management console did not validate the passed input while adding the SSH host key, which could lead to an argument injection to `ssh-add`. Version 5.16.0 fixes the issue. As a workaround, properly limit access to the management console."
      }, {
        "lang" : "es",
        "value" : "Weblate es una herramienta de localización basada en web. Antes de la 5.16.0, la consola de administración SSH no validaba la entrada proporcionada al añadir la clave de host SSH, lo que podría conducir a una inyección de argumentos en `ssh-add`. La versión 5.16.0 corrige el problema. Como solución alternativa, se recomienda limitar adecuadamente el acceso a la consola de administración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "0DFDA177-B23B-4767-A647-969D44EA60D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WeblateOrg/weblate/commit/78773cc141ce0a97900c11341e6cf856451395fd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/pull/17722",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/security/advisories/GHSA-33fm-6gp7-4p47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25926",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T00:16:21.787",
      "lastModified" : "2026-02-19T18:32:34.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if an attacker can control the process working directory. Under certain conditions, this could lead to arbitrary code execution in the context of the running application. Version 8.9.2 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Notepad++ es un editor de código fuente gratuito y de código abierto. Hay una vulnerabilidad de ruta de búsqueda insegura (CWE-426) en versiones anteriores a la 8.9.2 al iniciar el Explorador de Windows sin una ruta de ejecución absoluta. Esto puede permitir la ejecución de un explorer.exe malicioso si un atacante puede controlar el directorio de trabajo del proceso. Bajo ciertas condiciones, esto podría llevar a la ejecución de código arbitrario en el contexto de la aplicación en ejecución. La versión 8.9.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notepad-plus-plus:notepad\\+\\+:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.9.2",
            "matchCriteriaId" : "372C203D-E0C9-48B7-8F39-E06FDFBBE7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/notepad-plus-plus/notepad-plus-plus/releases/tag/v8.9.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-rjvm-fcxw-2jxq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://notepad-plus-plus.org/news/v892-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Press/Media Coverage" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2684",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T00:16:21.953",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). The impacted element is an unknown function of the file /Archive/ErecordManage/uploadFile.html. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en el Sistema de Archivos Electrónicos Tsinghua Unigroup hasta la versión 3.2.210802(62532). El elemento afectado es una función desconocida del archivo /Archive/ErecordManage/uploadFile.html. La ejecución de una manipulación del argumento File puede llevar a una carga sin restricciones. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unigroup:electronic_archives_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.210802\\(62532\\)",
            "matchCriteriaId" : "830E63B2-7C13-41AF-9605-E69078638FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/ziguang-fileupload",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/luoye197-prog/ziguang-fileupload/blob/main/introduce%26poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753973",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2686",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T00:16:22.143",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in SECCN Dingcheng G10 3.1.0.181203. This impacts the function qq of the file /cgi-bin/session_login.cgi. The manipulation of the argument User leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en SECCN Dingcheng G10 3.1.0.181203. Esto afecta a la función qq del archivo /cgi-bin/session_login.cgi. La manipulación del argumento User conduce a una inyección de comandos del sistema operativo. El ataque puede llevarse a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/SECCN/blob/main/UnauthorizedRCE.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/cha0yang1/SECCN/blob/main/UnauthorizedRCE.md#2-vulnerability-reproduction-proof-of-concept",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346488",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346488",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754200",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0549",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:41.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Groups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'groups_group_info' shortcode in all versions up to, and including, 3.10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Groups para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'groups_group_info' del plugin en todas las versiones hasta la 3.10.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/groups/tags/3.9.0/lib/views/class-groups-shortcodes.php?marks=185#L185",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3438974%40groups&new=3438974%40groups&sfp_email=&sfph_mail=#file39",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/75000e67-7914-43af-be1d-82990ada5129?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0556",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:41.483",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xo_event_field' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin XO Event Calendar para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'xo_event_field' del plugin en todas las versiones hasta la 3.2.10, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/xo-event-calendar/tags/3.2.10/inc/main.php?marks=1807-1816#L1807",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/xo-event-calendar/tags/3.2.10/inc/main.php?marks=1878-1882#L1878",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6bf0eef5-9276-4367-8451-017c509e443d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0561",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:41.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Shield Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 21.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Shield Security para WordPress es vulnerable a Cross-Site Scripting Reflejado a través del parámetro 'message' en todas las versiones hasta la 21.0.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3439494%40wp-simple-firewall&new=3439494%40wp-simple-firewall&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://research.cleantalk.org/cve-2026-0561",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb49eb5f-c1ff-4440-8b53-c2515e65da27?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0722",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:41.810",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Shield Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 21.0.8. This is due to the plugin allowing nonce verification to be bypassed via user-supplied parameter in the 'isNonceVerifyRequired' function. This makes it possible for unauthenticated attackers to execute SQL injection attacks, extracting sensitive information from the database, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Shield Security para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta, e incluyendo, la 21.0.8. Esto se debe a que el plugin permite que la verificación de nonce sea eludida a través de un parámetro proporcionado por el usuario en la función isNonceVerifyRequired. Esto hace posible que atacantes no autenticados ejecuten ataques de inyección SQL, extrayendo información sensible de la base de datos, a través de una petición falsificada siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-simple-firewall/tags/21.0.8/src/lib/src/ActionRouter/Actions/BaseAction.php#L125",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-simple-firewall/tags/21.0.8/src/lib/src/ActionRouter/CaptureAjaxAction.php#L42",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-simple-firewall/tags/21.0.8/src/lib/src/Tables/DataTables/LoadData/Traffic/BuildTrafficTableData.php#L114",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3439494%40wp-simple-firewall&new=3439494%40wp-simple-firewall&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://research.cleantalk.org/cve-2026-0722/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f53d9579-56e9-41aa-b6b7-2472734ee719?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0912",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:42.323",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Toret Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'trman_save_option' function and on the 'trman_save_option_items' in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site."
      }, {
        "lang" : "es",
        "value" : "El plugin Toret Manager para WordPress es vulnerable a la modificación no autorizada de datos que puede conducir a una escalada de privilegios debido a una verificación de capacidad faltante en la función 'trman_save_option' y en 'trman_save_option_items' en todas las versiones hasta la 1.2.7, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, actualicen opciones arbitrarias en el sitio de WordPress. Esto puede ser aprovechado para actualizar el rol predeterminado para el registro a administrador y habilitar el registro de usuarios para que los atacantes obtengan acceso de usuario administrativo a un sitio vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/toret-manager/tags/1.2.7/admin/class-toret-manager-admin.php#L210",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/toret-manager/tags/1.2.7/admin/class-toret-manager-admin.php#L227",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464839/toret-manager",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4b2fc891-f3c6-4f4f-ad52-0a1a949eed25?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0926",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:42.497",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files or execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included."
      }, {
        "lang" : "es",
        "value" : "El plugin Prodigy Commerce para WordPress es vulnerable a la inclusión local de ficheros en todas las versiones hasta la 3.2.9, inclusive, a través del parámetro 'parameters[template_name]'. Esto permite a atacantes no autenticados incluir y leer ficheros arbitrarios o ejecutar ficheros arbitrarios en el servidor, permitiendo la ejecución de cualquier código PHP en esos ficheros. Esto puede usarse para eludir controles de acceso, obtener datos sensibles o lograr la ejecución de código en casos donde imágenes y otros tipos de ficheros 'seguros' pueden ser subidos e incluidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/prodigy-commerce/tags/3.2.9/includes/helpers/class-prodigy-template.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/prodigy-commerce/trunk/includes/frontend/class-prodigy-public.php#L491",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/prodigy-commerce/trunk/includes/frontend/shortcodes/class-prodigy-short-code-my-account.php#L69",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/prodigy-commerce/trunk/includes/helpers/class-prodigy-template.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464655/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/de255530-6b2d-426b-9f80-dbfebd2e3307?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0974",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:42.700",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the 'install_plugin' function in all versions up to, and including, 1.20.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins, which can lead to Remote Code Execution."
      }, {
        "lang" : "es",
        "value" : "El plugin Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin para WordPress es vulnerable a la instalación no autorizada de plugins debido a una comprobación de capacidad faltante en la función 'install_plugin' en todas las versiones hasta la 1.20.0, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, instalar plugins arbitrarios, lo que puede llevar a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/orderable/trunk/inc/vendor/iconic-onboard/inc/class-ajax.php#L111",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b97d2b63-7eaa-4518-b838-35d4b993743d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1043",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:42.900",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PostmarkApp Email Integrator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in versions up to, and including, 2.4. This is due to insufficient input sanitization and output escaping on the pma_api_key and pma_sender_address parameters. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the settings page."
      }, {
        "lang" : "es",
        "value" : "El plugin PostmarkApp Email Integrator para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de la configuración del plugin en versiones hasta la 2.4, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en los parámetros pma_api_key y pma_sender_address. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a la página de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/postmarkapp-email-integrator/tags/2.4/postmarkapp.php#L149",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postmarkapp-email-integrator/trunk/postmarkapp.php#L149",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postmarkapp-email-integrator/trunk/postmarkapp.php#L153",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/postmarkapp-email-integrator/trunk/postmarkapp.php#L68",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/80b03e81-6660-483a-9150-e6075b7bffbd?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1044",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:43.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tennis Court Bookings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Tennis Court Bookings para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.2.7, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/tennis-court-bookings.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tennis-court-bookings/tags/1.2.7/views/calendar_form.php#L201",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tennis-court-bookings/tags/1.2.7/views/calendar_form.php#L43",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tennis-court-bookings/tags/1.2.7/views/setting.php#L65",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/tennis-court-bookings/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/99b91fb6-9e60-447d-ab43-2be231052140?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1047",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:43.377",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The salavat counter Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'image_url' parameter in all versions up to, and including, 0.9.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin 'salavat counter Plugin' para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'image_url' en todas las versiones hasta la 0.9.5, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/salavat-counter.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/salavat-counter/tags/0.9.5/wp-table-options.php#L352",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/salavat-counter/trunk/wp-table-options.php#L352",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/salavat-counter/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6696b262-c6e5-4413-b7dc-894965daa5ac?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1055",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:43.543",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TalkJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin TalkJS para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 0.1.15, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/talkjs/tags/0.1.15/classes/admin/ui/FieldBuilder.php#L147",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/talkjs/tags/0.1.15/classes/admin/ui/SettingsPage.php#L276",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/talkjs/trunk/classes/admin/ui/FieldBuilder.php#L147",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/talkjs/trunk/classes/admin/ui/SettingsPage.php#L276",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3465226/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f91ed211-9703-44fb-a2f8-8d8da910b4c7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1373",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:43.717",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author_profile_picture_url' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Easy Author Image para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'author_profile_picture_url' en todas las versiones hasta la 1.7, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida. Esto permite que atacantes autenticados, con acceso de nivel Suscriptor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-author-image/tags/1.7/easy-author-image.php#L149",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/eaa53088-c383-4315-9871-b4ceb83f5fdb?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1405",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:43.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."
      }, {
        "lang" : "es",
        "value" : "El plugin Slider Future para WordPress es vulnerable a la carga arbitraria de archivos debido a la falta de validación del tipo de archivo en la función 'slider_future_handle_image_upload' en todas las versiones hasta la 1.0.5, inclusive. Esto permite a atacantes no autenticados cargar archivos arbitrarios en el servidor del sitio afectado, lo que puede posibilitar la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/slider-future/tags/1.0.5/slider-future.php#L177",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/34b52ca2-c05f-49b7-846f-a67136d7d379?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1455",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:44.060",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Whatsiplus Scheduled Notification for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing nonce validation on the 'wsnfw_save_users_settings' AJAX action. This makes it possible for unauthenticated attackers to modify plugin configuration settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Whatsiplus Scheduled Notification for Woocommerce para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0.1, inclusive. Esto se debe a la falta de validación de nonce en la acción AJAX 'wsnfw_save_users_settings'. Esto hace posible que atacantes no autenticados modifiquen la configuración del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción, como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/whatsiplus-scheduled-notification-for-woocommerce/tags/1.0.1/inc/wsnfw-ajax-request.php#L84",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/whatsiplus-scheduled-notification-for-woocommerce/tags/1.0.1/inc/wsnfw-ajax-request.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e466640e-de66-42f0-b56b-226db32d382d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1646",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:44.233",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TitleColor block attribute in the Latest Posts Gutenberg block in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Advance Block Extend para WordPress es vulnerable a cross-site scripting almacenado a través del atributo de bloque TitleColor en el bloque Gutenberg Latest Posts en todas las versiones hasta la 1.0.4, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/advance-block-extend/tags/1.0.4/gutenberg-block.php#L118",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/advance-block-extend/trunk/gutenberg-block.php#L118",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3218716a-cce6-4ce7-a6be-4e146e0a6d53?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1994",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:44.403",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The s2Member plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 260127. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account."
      }, {
        "lang" : "es",
        "value" : "El plugin s2Member para WordPress es vulnerable a escalada de privilegios mediante toma de control de cuenta en todas las versiones hasta la 260127, inclusive. Esto se debe a que el plugin no valida correctamente la identidad de un usuario antes de actualizar su contraseña. Esto hace posible que atacantes no autenticados cambien las contraseñas de usuarios arbitrarios, incluidos los administradores, y aprovechen eso para obtener acceso a su cuenta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/s2member/tags/260127/src/includes/classes/registrations.inc.php#L74",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3461625/s2member#file5",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6c31cf92-26b7-484d-8c93-ce241d655d07?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24764",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T07:17:44.957",
      "lastModified" : "2026-02-19T18:30:39.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw (formerly Clawdbot) is a personal AI assistant users run on their own devices. In versions 2026.2.2 and below, when the Slack integration is enabled, channel metadata (topic/description) can be incorporated into the model's system prompt. Prompt injection is a documented risk for LLM-driven systems. This issue increases the injection surface by allowing untrusted Slack channel metadata to be treated as higher-trust system input. This issue has been fixed in version 2026.2.3."
      }, {
        "lang" : "es",
        "value" : "OpenClaw (anteriormente Clawdbot) es un asistente de IA personal que los usuarios ejecutan en sus propios dispositivos. En las versiones 2026.2.2 e inferiores, cuando la integración de Slack está habilitada, los metadatos del canal (tema/descripción) pueden incorporarse al prompt del sistema del modelo. La inyección de prompts es un riesgo documentado para los sistemas impulsados por LLM. Este problema aumenta la superficie de inyección al permitir que los metadatos no confiables del canal de Slack sean tratados como entrada del sistema de mayor confianza. Este problema ha sido solucionado en la versión 2026.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.3",
            "matchCriteriaId" : "AB694F3B-E1D5-4980-8413-808F7AABF7F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/35eb40a7000b59085e9c638a80fd03917c7a095e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-782p-5fr5-7fj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25120",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T07:17:45.203",
      "lastModified" : "2026-02-19T19:48:35.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. In versions 0.13.4 and below, the DeleteComment API does not verify that the comment belongs to the repository specified in the URL. This allows a repository administrator to delete comments from any other repository by supplying arbitrary comment IDs, bypassing authorization controls. The DeleteComment function retrieves a comment by ID without verifying repository ownership and the Database function DeleteCommentByID performs no repository validation. This issue has been fixed in version 0.14.0."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. En las versiones 0.13.4 e inferiores, la API DeleteComment no verifica que el comentario pertenece al repositorio especificado en la URL. Esto permite a un administrador de repositorio eliminar comentarios de cualquier otro repositorio proporcionando IDs de comentario arbitrarios, eludiendo los controles de autorización. La función DeleteComment recupera un comentario por ID sin verificar la propiedad del repositorio y la función de base de datos DeleteCommentByID no realiza ninguna validación de repositorio. Este problema ha sido solucionado en la versión 0.14.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.0",
            "matchCriteriaId" : "11DBE4F6-45A8-4B6F-A7A0-96BF683D5F5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/1b226ca48dc8b3e95cc1c41229d72819c960a1b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-jj5m-h57j-5gv7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25229",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T07:17:45.363",
      "lastModified" : "2026-02-19T19:45:35.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have a broken access control vulnerability which allows authenticated users with write access to any repository to modify labels belonging to other repositories. The UpdateLabel function in the Web UI (internal/route/repo/issue.go) fails to verify that the label being modified belongs to the repository specified in the URL path, enabling cross-repository label tampering attacks. The vulnerability exists in the Web UI's label update endpoint POST /:username/:reponame/labels/edit. The handler function UpdateLabel uses an incorrect database query function that bypasses repository ownership validation. This issue has been fixed in version 0.14.1."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git de código abierto autoalojado. Las versiones 0.13.4 e inferiores tienen una vulnerabilidad de control de acceso roto que permite a usuarios autenticados con acceso de escritura a cualquier repositorio modificar etiquetas pertenecientes a otros repositorios. La función UpdateLabel en la interfaz de usuario web (Web UI) (internal/route/repo/issue.go) no verifica que la etiqueta que se está modificando pertenezca al repositorio especificado en la ruta URL, lo que permite ataques de manipulación de etiquetas entre repositorios. La vulnerabilidad existe en el endpoint de actualización de etiquetas de la interfaz de usuario web (Web UI) POST /:username/:reponame/labels/edit. La función gestora UpdateLabel utiliza una función de consulta de base de datos incorrecta que omite la validación de propiedad del repositorio. Este problema ha sido corregido en la versión 0.14.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.1",
            "matchCriteriaId" : "44DD72D9-ED94-407D-8C71-6C2B039C65BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/643a6d6353cb6a182a4e1f0720228727f30a3ad2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-cv22-72px-f4gh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25232",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T07:17:45.520",
      "lastModified" : "2026-02-19T19:44:07.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have an access control bypass vulnerability which allows any repository collaborator with Write permissions to delete protected branches (including the default branch) by sending a direct POST request, completely bypassing the branch protection mechanism. This vulnerability in the DeleteBranchPost function eenables privilege escalation from Write to Admin level, allowing low-privilege users to perform dangerous operations that should be restricted to administrators only. Although Git Hook layer correctly prevents protected branch deletion via SSH push, the web interface deletion operation does not trigger Git Hooks, resulting in complete bypass of protection mechanisms. In oder to exploit this vulnerability, attackers must have write permissions to the target repository, protected branches configured to the target repository and access to the Gogs web interface. This issue has been fixed in version 0.14.1."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git de código abierto autoalojado. Las versiones 0.13.4 e inferiores tienen una vulnerabilidad de omisión de control de acceso que permite a cualquier colaborador del repositorio con permisos de escritura eliminar ramas protegidas (incluida la rama predeterminada) enviando una solicitud POST directa, omitiendo completamente el mecanismo de protección de ramas. Esta vulnerabilidad en la función DeleteBranchPost permite la escalada de privilegios de nivel de escritura a nivel de administrador, permitiendo a usuarios con pocos privilegios realizar operaciones peligrosas que deberían estar restringidas solo a administradores. Aunque la capa de Git Hook previene correctamente la eliminación de ramas protegidas a través de push SSH, la operación de eliminación de la interfaz web no activa los Git Hooks, lo que resulta en una omisión completa de los mecanismos de protección. Para explotar esta vulnerabilidad, los atacantes deben tener permisos de escritura en el repositorio objetivo, ramas protegidas configuradas en el repositorio objetivo y acceso a la interfaz web de Gogs. Este problema ha sido solucionado en la versión 0.14.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.1",
            "matchCriteriaId" : "44DD72D9-ED94-407D-8C71-6C2B039C65BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/7b7e38c88007a7c482dbf31efff896185fd9b79c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8124",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-2c6v-8r3v-gh6p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25242",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T07:17:45.687",
      "lastModified" : "2026-02-19T19:46:19.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Versions 0.13.4 and below expose unauthenticated file upload endpoints by default. When the global RequireSigninView setting is disabled (default), any remote user can upload arbitrary files to the server via /releases/attachments and /issues/attachments. This enables the instance to be abused as a public file host, potentially leading to disk exhaustion, content hosting, or delivery of malware. CSRF tokens do not mitigate this attack due to same-origin cookie issuance. This issue has been fixed in version 0.14.1."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Las versiones 0.13.4 e inferiores exponen endpoints de carga de archivos no autenticados por defecto. Cuando la configuración global RequireSigninView está deshabilitada (por defecto), cualquier usuario remoto puede cargar archivos arbitrarios al servidor a través de /releases/attachments y /issues/attachments. Esto permite que la instancia sea utilizada indebidamente como un host de archivos público, lo que podría llevar al agotamiento del disco, al alojamiento de contenido o a la entrega de malware. Los tokens CSRF no mitigan este ataque debido a la emisión de cookies del mismo origen. Este problema ha sido solucionado en la versión 0.14.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.1",
            "matchCriteriaId" : "44DD72D9-ED94-407D-8C71-6C2B039C65BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/628216d5889fcb838c471f4754f09b935d9cd9f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8128",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-fc3h-92p8-h36f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25474",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T07:17:45.847",
      "lastModified" : "2026-02-19T20:13:13.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.1.30 and below, if channels.telegram.webhookSecret is not set when in Telegram webhook mode, OpenClaw may accept webhook HTTP requests without verifying Telegram’s secret token header. In deployments where the webhook endpoint is reachable by an attacker, this can allow forged Telegram updates (for example spoofing message.from.id). If an attacker can reach the webhook endpoint, they may be able to send forged updates that are processed as if they came from Telegram. Depending on enabled commands/tools and configuration, this could lead to unintended bot actions. Note: Telegram webhook mode is not enabled by default. It is enabled only when `channels.telegram.webhookUrl` is configured. This issue has been fixed in version 2026.2.1."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.1.30 e inferiores, si channels.telegram.webhookSecret no está configurado cuando se encuentra en modo webhook de Telegram, OpenClaw puede aceptar solicitudes HTTP de webhook sin verificar el encabezado del token secreto de Telegram. En implementaciones donde el endpoint del webhook es accesible por un atacante, esto puede permitir actualizaciones falsificadas de Telegram (por ejemplo, suplantando message.from.id). Si un atacante puede alcanzar el endpoint del webhook, podría enviar actualizaciones falsificadas que se procesan como si provinieran de Telegram. Dependiendo de los comandos/herramientas habilitados y la configuración, esto podría llevar a acciones no intencionadas del bot. Nota: El modo webhook de Telegram no está habilitado por defecto. Se habilita solo cuando 'channels.telegram.webhookUrl' está configurado. Este problema ha sido solucionado en la versión 2026.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.1",
            "matchCriteriaId" : "2E1A32AB-BFE5-4510-B02F-4E8D6440EC83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3cbcba10cf30c2ffb898f0d8c7dfb929f15f8930",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/5643a934799dc523ec2ef18c007e1aa2c386b670",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/633fe8b9c17f02fcc68ecdb5ec212a5ace932f09",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/ca92597e1f9593236ad86810b66633144b69314d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-mp5h-m6qj-6292",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2282",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:46.230",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Slidorion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Slidorion para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.0.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/slidorion/tags/1.0.2/slidorion.php#L212",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/slidorion/trunk/slidorion.php#L212",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/506a7351-07b9-4c0f-86c3-edfe04bac64c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2284",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:46.400",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.8. This is due to a missing capability check and nonce verification on the 'ne_clean_data' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to truncate 8 core WordPress database tables (posts, comments, terms, term_relationships, term_taxonomy, postmeta, commentmeta, termmeta) and delete the entire WordPress uploads directory, resulting in complete data loss."
      }, {
        "lang" : "es",
        "value" : "El plugin News Element Elementor Blog Magazine para WordPress es vulnerable a Autorización Faltante en todas las versiones hasta la 1.0.8, inclusive. Esto se debe a una verificación de capacidad faltante y una verificación de nonce en la acción AJAX 'ne_clean_data'. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, trunquen 8 tablas principales de la base de datos de WordPress (posts, comments, terms, term_relationships, term_taxonomy, postmeta, commentmeta, termmeta) y eliminen el directorio completo de subidas de WordPress, lo que resulta en una pérdida completa de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/news-element/tags/1.0.8/admin/inc/dash.php#L206",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/news-element/trunk/admin/inc/dash.php#L206",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5d81318-c9da-4626-acfa-f092d2ce5fe9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2502",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:46.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0, via the 'X-Forwarded-For' HTTP header. This is due to the plugin trusting and logging attacker-controlled IP header data and rendering debug log entries without output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the debug log page."
      }, {
        "lang" : "es",
        "value" : "El plugin xmlrpc attacks blocker para WordPress es vulnerable a cross-site scripting almacenado en versiones hasta la 1.0, inclusive, a través del encabezado HTTP 'X-Forwarded-For'. Esto se debe a que el plugin confía y registra datos de encabezado IP controlados por el atacante y renderiza entradas del registro de depuración sin escape de salida. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios que se ejecutan cuando un administrador ve la página del registro de depuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/xmlrpc-attacks-blocker/tags/1.0/plugin.php#L186",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/xmlrpc-attacks-blocker/tags/1.0/plugin.php#L269",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/xmlrpc-attacks-blocker/tags/1.0/plugin.php#L312",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/xmlrpc-attacks-blocker/tags/1.0/plugin.php#L341",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/059f0c64-efcc-4b79-81eb-b4ae9e3e2826?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2504",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T07:17:46.740",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple AJAX handlers in all versions up to, and including, 1.0.7. The admin nonce (DEALIA_ADMIN_NONCE) is exposed to all users with edit_posts capability (Contributor+) via wp_localize_script() in PostsController.php, while the AJAX handlers in AdminSettingsController.php only verify the nonce without checking current_user_can('manage_options'). This makes it possible for authenticated attackers, with Contributor-level access and above, to reset the plugin configuration."
      }, {
        "lang" : "es",
        "value" : "El plugin Dealia – Request a quote para WordPress es vulnerable a la modificación no autorizada de datos debido a la falta de comprobaciones de capacidad en múltiples manejadores AJAX en todas las versiones hasta la 1.0.6, inclusive. El nonce de administrador (DEALIA_ADMIN_NONCE) está expuesto a todos los usuarios con capacidad edit_posts (Colaborador+) a través de wp_localize_script() en PostsController.PHP, mientras que los manejadores AJAX en AdminSettingsController.PHP solo verifican el nonce sin comprobar current_user_can('manage_options'). Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, restablezcan la configuración del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/tags/1.0.6/src/Controllers/AdminSettingsController.php#L243",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/tags/1.0.6/src/Controllers/AdminSettingsController.php#L309",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/tags/1.0.6/src/Controllers/AdminSettingsController.php#L416",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/tags/1.0.6/src/Controllers/PostsController.php#L49",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/trunk/src/Controllers/AdminSettingsController.php#L243",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/trunk/src/Controllers/PostsController.php#L49",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c8f506ef-972c-403d-9167-ffdd93be8ea6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2681",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-02-19T07:17:47.270",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the blst_sha256_bcopy assembly routine, occurs due to a missing zero-length guard. A remote attacker can exploit this by providing a zero-length salt parameter to key generation functions, such as blst_keygen_v5(), if the application exposes this functionality. Successful exploitation leads to memory corruption and immediate process termination, resulting in a denial-of-service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Se encontró un defecto en la librería criptográfica blst. Esta vulnerabilidad de escritura fuera de límites en la pila, específicamente en la rutina de ensamblador blst_sha256_bcopy, ocurre debido a que falta una guarda de longitud cero. Un atacante en remoto puede explotar esto al proporcionar un parámetro de 'salt' de longitud cero a funciones de generación de claves, como blst_keygen_v5(), si la aplicación expone esta funcionalidad. Si se logra explotar con éxito se provoca una corrupción de memoria y la terminación inmediata del proceso, lo que resulta en una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-2681",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440580",
        "source" : "patrick@puiterwijk.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2689",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:47.447",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode Event Management System 1.0. Affected is an unknown function of the file /admin/manage_booking.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en itsourcecode Event Management System 1.0. La cual afecta a una función desconocida del archivo /admin/manage_booking.php. Si se manipula el argumento ID se provoca una inyección SQL. El ataque puede ser realizado desde remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:event_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0334F94B-DD03-4A2C-B1E5-F6FF0EE78C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/38",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346489",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346489",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754238",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2690",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:47.670",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode Event Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Admin Login. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode Event Management System 1.0 que afecta a una funcionalidad desconocida del archivo /admin/ajax.PHP?action=login del componente Admin Login. Si se manipula el argumento Username se provoca una inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:event_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0334F94B-DD03-4A2C-B1E5-F6FF0EE78C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/39",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754239",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2691",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:47.880",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in itsourcecode Event Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/manage_register.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode Event Management System 1.0. La cual afecta a alguna funcionalidad desconocida del archivo /admin/manage_register.PHP. Si se manipula el argumento ID se puede provocar una inyección SQL. Es posible lanzar el ataque en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:event_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0334F94B-DD03-4A2C-B1E5-F6FF0EE78C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/40",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754240",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2692",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:48.470",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in CoCoTeaNet CyreneAdmin up to 1.3.0. This affects an unknown part of the file /api/system/user/getAvatar of the component Image Handler. Performing a manipulation of the argument Avatar results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en CoCoTeaNet CyreneAdmin hasta 1.3.0. La cual afecta a una parte desconocida del archivo /api/system/user/getAvatar del componente Gestor de Imágenes. Si se manipula el argumento Avatar se provoca un salto de ruta. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cocoteanet:cyreneadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "F3B34048-1BE5-4D91-8339-B2AE1E5318EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754241",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2693",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:48.710",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the file /api/system/dashboard/getCount of the component System Info Endpoint. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en CoCoTeaNet CyreneAdmin hasta 1.3.0. La cual afecta a código desconocido del archivo /API/system/dashboard/getCount del componente System Info Endpoint. Si se manipula se puede provocar una autorización indebida. El ataque puede lanzarse en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cocoteanet:cyreneadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "F3B34048-1BE5-4D91-8339-B2AE1E5318EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754242",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2702",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:49.237",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the component WPA2 PSK. Performing a manipulation results in hard-coded credentials. The attacker must have access to the local network to execute the attack. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Beetel 777VR1 hasta la versión 01.00.09. Este problema afecta a un procesamiento desconocido del componente WPA2 PSK. Si se manipula se almacenan credenciales en el código. El atacante debe tener acceso a la red local para ejecutar el ataque. La vulnerabilidad es de complejidad alta y difícil de explotar. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.2,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raghav20232023/a79c06d2d2562238a6c9d5e6229a13fa",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gist.github.com/raghav20232023/a79c06d2d2562238a6c9d5e6229a13fa#steps-to-reproduce",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346648",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346648",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754354",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2703",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:49.477",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::decode_base64 of the file source/detail/cryptography/base64.cpp of the component Encrypted XLSX File Parser. Executing a manipulation can lead to off-by-one. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called f2d7bf494e5c52706843cf7eb9892821bffb0734. Applying a patch is advised to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en xlnt-community xlnt hasta 1.6.1. La cual afecta a la función xlnt::detail::decode_base64 del archivo source/detail/cryptography/base64.cpp del componente Analizador de Archivos XLSX Cifrados. Si se manipula se puede provocar un off-by-one. El ataque requiere acceso local. El exploit se ha puesto a disposición del público y podría usarse para ataques. Este parche se llama f2d7bf494e5c52706843cf7eb9892821bffb0734. Se aconseja aplicar el parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlnt-community:xlnt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "9B381094-639E-4E21-8CB0-60C480F02400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0128/blob/main/xl1/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/commit/f2d7bf494e5c52706843cf7eb9892821bffb0734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/issues/137",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2704",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:49.720",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Open Babel up to 3.1.1. The affected element is the function OpenBabel::transform3d::DescribeAsString of the file src/math/transform3d.cpp of the component CIF File Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is suggested to install a patch to address this issue. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en Open Babel hasta la versión 3.1.1. La cual afecta a la función OpenBabel::transform3d::DescribeAsString del archivo src/math/transform3d.cpp del componente Gestor de Archivos CIF. si se manipula se puede provocar una lectura fuera de límites. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencia pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbabel:open_babel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.1",
            "matchCriteriaId" : "C1F53B5D-AE11-4406-B954-7BD33D2E4DE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VedantMadane/openbabel/commit/e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0128/blob/main/ob1/repro.cif",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/openbabel/openbabel/issues/2848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openbabel/openbabel/pull/2862",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2705",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:49.990",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Open Babel up to 3.1.1. The impacted element is the function OBAtom::SetFormalCharge in the library include/openbabel/atom.h of the component MOL2 File Handler. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The patch is identified as e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. A patch should be applied to remediate this issue. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Open Babel hasta la versión 3.1.1. La cual afecta a la función OBAtom::SetFormalCharge en la librería include/openbabel/atom.h del componente Gestor de Archivos MOL2. Si se manipula se puede provocar una lectura fuera de límites. Es posible lanzar el ataque de forma remota. El exploit es ahora público y puede ser utilizado. Se informó al proyecto con anterioridad a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbabel:open_babel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.1",
            "matchCriteriaId" : "C1F53B5D-AE11-4406-B954-7BD33D2E4DE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VedantMadane/openbabel/commit/e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0128/blob/main/ob2/repro.mol2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/openbabel/openbabel/issues/2848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/openbabel/openbabel/pull/2862",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2706",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:50.290",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysis_not.php. This manipulation of the argument comp_id causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en el Sistema de Gestión de Registros de Pacientes 1.0 de code-projects, el cual afecta a una función desconocida del archivo /fecalysis_not.php. Si se manipula el argumento 'comp_id' se provoca una inyección SQL. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:patient_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A18F6F3-1FDD-4D63-BFB1-6E520B4EAA45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/1768161086/sql_cve",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2709",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T07:17:50.553",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in busy up to 2.5.5. The affected element is an unknown function of the file source-code/busy-master/src/server/app.js of the component Callback Handler. Executing a manipulation of the argument state can lead to open redirect. It is possible to launch the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en busy hasta la versión 2.5.5 que afecta a una función desconocida del archivo source-code/busy-master/src/server/app.js del componente Callback Gestor. Si se manipula el argumento state se puede provocar una redirección abierta. Es posible lanzar el ataque en remoto. El exploit ha sido publicado y puede ser utilizado. Se informó al proyecto de la divulgación con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/busyorg/busy/issues/2287",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/busyorg/busy/issues/2287#issue-3905518966",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346661",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346661",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753299",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2731",
      "sourceIdentifier" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
      "published" : "2026-02-19T07:17:50.817",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19.7 and <9.20.3) allows unauthenticated attackers to execute code via simple web requests"
      }, {
        "lang" : "es",
        "value" : "Salto de ruta e inyección de contenido en JobRunnerBackground.aspx en DynamicWeb 8 (todas) y 9 (&lt;9.19.7 y &lt;9.20.3) permite a atacantes no autenticados ejecutar código a través de solicitudes web simples"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://doc.dynamicweb.dev/documentation/fundamentals/dw10release/security-reports.html#january-19th-2026---unauthenticated-rce-dynamicweb-9-and-dynamicweb-8",
        "source" : "db4dfee8-a97e-4877-bfae-eba6d14a2166"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2711",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-19T08:16:16.737",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in zhutoutoutousan worldquant-miner up to 1.0.9. The impacted element is an unknown function of the file worldquant-miner-master/agent-dify-api/core/helper/ssrf_proxy.py of the component URL Handler. The manipulation of the argument make_request leads to server-side request forgery. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en zhutoutoutousan worldquant-miner hasta la versión 1.0.9. El elemento afectado es una función desconocida del archivo worldquant-miner-master/agent-dify-api/core/helper/ssrf_proxy.py del componente Gestor de URL. La manipulación del argumento make_request conduce a falsificación de petición del lado del servidor. El ataque puede iniciarse de forma remota. La complejidad del ataque se califica como alta. La explotabilidad se considera difícil. El exploit ha sido divulgado al público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhutoutoutousan/worldquant-miner/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/zhutoutoutousan/worldquant-miner/issues/100",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/zhutoutoutousan/worldquant-miner/issues/100#issue-3905756578",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346662",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346662",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753320",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2733",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-19T08:16:17.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously valid credentials can still be used to obtain authentication tokens. This weakens administrative controls and could allow unintended access to container registry resources."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en el endpoint de autenticación Docker v2 de Keycloak, donde los tokens continúan siendo emitidos incluso después de que un cliente de registro Docker haya sido deshabilitado administrativamente. Esto significa que al cambiar la configuración 'Enabled' del cliente a OFF no se impide completamente el acceso. Como resultado, las credenciales previamente válidas aún pueden ser utilizadas para obtener tokens de autenticación. Esto debilita los controles administrativos y podría permitir un acceso no intencionado a los recursos del registro de contenedores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3947",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3948",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-2733",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440895",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22269",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T09:16:11.430",
      "lastModified" : "2026-02-20T16:36:41.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass."
      }, {
        "lang" : "es",
        "value" : "Dell PowerProtect Data Manager, versión(es) anterior(es) a la 19.22, contiene una vulnerabilidad de Verificación Incorrecta del Origen de un Canal de Comunicación en la API REST. Un atacante con altos privilegios con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a la elusión de mecanismos de protección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-940"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.22",
            "matchCriteriaId" : "17D7AA01-F2D1-4DCF-BF83-0550AA9CC59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22333",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:11.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through <= 3.6.0."
      }, {
        "lang" : "es",
        "value" : "Deserialización de Datos No Confiables vulnerabilidad en YITHEMES YITH WooCommerce Compare yith-woocommerce-compare permite Inyección de Objetos. Este problema afecta a YITH WooCommerce Compare: desde n/a hasta &lt;= 3.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/yith-woocommerce-compare/vulnerability/wordpress-yith-woocommerce-compare-plugin-3-6-0-deserialization-of-untrusted-data-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22422",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:11.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in wpeverest Everest Forms everest-forms allows Code Injection.This issue affects Everest Forms: from n/a through <= 3.4.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Etiquetas HTML Relacionadas con Scripts en una Página Web (XSS Básico) vulnerabilidad en wpeverest Everest Forms everest-forms permite la Inyección de Código. Este problema afecta a Everest Forms: desde n/a hasta &lt;= 3.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/everest-forms/vulnerability/wordpress-everest-forms-plugin-3-4-1-arbitrary-shortcode-execution-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23541",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:11.903",
      "lastModified" : "2026-04-23T15:36:38.660",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WPFunnels Mail Mint mail-mint permite Acceder a Funcionalidad No Restringida Adecuadamente por ACLs. Este problema afecta a Mail Mint: desde n/a hasta &lt;= 1.19.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mail-mint/vulnerability/wordpress-mail-mint-plugin-1-19-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23542",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeGoods Grand Restaurant grandrestaurant permite la inyección de objetos. Este problema afecta a Grand Restaurant: desde n/a hasta &lt;= 7.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/grandrestaurant/vulnerability/wordpress-grand-restaurant-theme-7-0-10-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23543",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.197",
      "lastModified" : "2026-04-28T16:16:06.370",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WPDeveloper Essential Addons para Elementor essential-addons-for-elementor-lite permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Essential Addons para Elementor: desde n/a hasta &lt;= 6.5.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-essential-addons-for-elementor-plugin-6-5-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23544",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.340",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through <= 5.6.3.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en codetipi Valenti valenti permite la inyección de objetos. Este problema afecta a Valenti: desde n/a hasta &lt;= 5.6.3.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/valenti/vulnerability/wordpress-valenti-theme-5-6-3-5-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23545",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aruba HiSpeed Cache: from n/a through <= 3.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache permite la Explotación de Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Aruba HiSpeed Cache: desde n/a hasta &lt;= 3.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/aruba-hispeed-cache/vulnerability/wordpress-aruba-hispeed-cache-plugin-3-0-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23547",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.627",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through <= 2.5.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en cmsmasters CMSMasters Content Composer cmsmasters-content-composer permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a CMSMasters Content Composer: desde n/a hasta &lt;= 2.5.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cmsmasters-content-composer/vulnerability/wordpress-cmsmasters-content-composer-plugin-2-5-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23548",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.787",
      "lastModified" : "2026-04-28T16:16:06.783",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through <= 3.6.25."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en designinvento DirectoryPress directorypress permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a DirectoryPress: desde n/a hasta &lt;= 3.6.25."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/directorypress/vulnerability/wordpress-directorypress-plugin-3-6-25-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23549",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:12.927",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en magepeopleteam WpEvently mage-eventpress permite la inyección de objetos. Este problema afecta a WpEvently: desde n/a hasta &lt;= 5.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-5-1-1-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23803",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.067",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in Burhan Nasir Smart Auto Upload Images smart-auto-upload-images allows Server Side Request Forgery.This issue affects Smart Auto Upload Images: from n/a through <= 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Burhan Nasir Smart Auto Upload Images smart-auto-upload-images permite la falsificación de petición del lado del servidor. Este problema afecta a Smart Auto Upload Images: desde n/a hasta &lt;= 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/smart-auto-upload-images/vulnerability/wordpress-smart-auto-upload-images-plugin-1-2-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23804",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.217",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Business Reviews: from n/a through <= 0.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en BBR Plugins Better Business Reviews better-business-reviews permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Better Business Reviews: desde n/a hasta &lt;= 0.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/better-business-reviews/vulnerability/wordpress-better-business-reviews-plugin-0-1-1-broken-access-control-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23805",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.360",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yoren Chang Media Search Enhanced media-search-enhanced allows SQL Injection.This issue affects Media Search Enhanced: from n/a through <= 0.9.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') vulnerabilidad en Yoren Chang Media Search Enhanced media-search-enhanced permite Inyección SQL. Este problema afecta a Media Search Enhanced: desde n/a hasta &lt;= 0.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/media-search-enhanced/vulnerability/wordpress-media-search-enhanced-plugin-0-9-1-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24375",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.497",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through <= 3.2.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Swings Ultimate Gift Cards para WooCommerce woo-gift-cards-lite permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ultimate Gift Cards para WooCommerce: desde n/a hasta &lt;= 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woo-gift-cards-lite/vulnerability/wordpress-ultimate-gift-cards-for-woocommerce-plugin-3-2-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24392",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.640",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nabil Lemsieh HurryTimer hurrytimer allows Stored XSS.This issue affects HurryTimer: from n/a through <= 2.14.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Nabil Lemsieh HurryTimer hurrytimer permite XSS Almacenado. Este problema afecta a HurryTimer: desde n/a hasta &lt;= 2.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/hurrytimer/vulnerability/wordpress-hurrytimer-plugin-2-14-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24999",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.783",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from n/a through <= 5.16.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Alma Alma alma-gateway-for-woocommerce permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Alma: desde n/a hasta &lt;= 5.16.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/alma-gateway-for-woocommerce/vulnerability/wordpress-alma-plugin-5-16-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25000",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:13.927",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Kraft Plugins Wheel of Life wheel-of-life permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Wheel of Life: desde n/a hasta &lt;= 1.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wheel-of-life/vulnerability/wordpress-wheel-of-life-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25003",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.067",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in madalin.ungureanu Client Portal client-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Portal: from n/a through <= 1.2.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en madalin.ungureanu Client Portal client-portal permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Client Portal: desde n/a hasta &lt;= 1.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/client-portal/vulnerability/wordpress-client-portal-plugin-1-2-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25004",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.210",
      "lastModified" : "2026-04-27T21:16:26.800",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Business Directory cm-business-directory allows Stored XSS.This issue affects CM Business Directory: from n/a through <= 1.5.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en CreativeMindsSolutions CM Business Directory cm-business-directory permite XSS Almacenado. Este problema afecta a CM Business Directory: desde n/a hasta &lt;= 1.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cm-business-directory/vulnerability/wordpress-cm-business-directory-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25005",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.353",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de una clave controlada por el usuario en N-Media Frontend File Manager nmedia-user-file-uploader permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Frontend File Manager: desde n/a hasta &lt;= 23.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/nmedia-user-file-uploader/vulnerability/wordpress-frontend-file-manager-plugin-23-5-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25006",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.497",
      "lastModified" : "2026-04-27T21:16:26.943",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore allows Code Injection.This issue affects XStore: from n/a through <= 9.6.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Etiquetas HTML Relacionadas con Scripts en una Página Web (XSS Básico) vulnerabilidad en 8theme XStore xstore permite la Inyección de Código. Este problema afecta a XStore: desde n/a hasta &lt;= 9.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/xstore/vulnerability/wordpress-xstore-theme-9-6-4-arbitrary-shortcode-execution-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25008",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.637",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through <= 5.2.5."
      }, {
        "lang" : "es",
        "value" : "Inserción de Información Sensible en Datos Enviados vulnerabilidad en Shahjahan Jewel Ninja Tables ninja-tables permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Ninja Tables: desde n/a hasta &lt;= 5.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ninja-tables/vulnerability/wordpress-ninja-tables-plugin-5-2-5-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25305",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.783",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xstore allows DOM-Based XSS.This issue affects XStore: from n/a through <= 9.6.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en 8theme XStore xstore permite XSS basado en DOM. Este problema afecta a XStore: desde n/a hasta &lt;= 9.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/xstore/vulnerability/wordpress-xstore-theme-9-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25307",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:14.920",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through < 5.7."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en 8theme XStore Core et-core-plugin permite XSS Basado en DOM. Este problema afecta a XStore Core: desde n/a hasta &lt; 5.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/et-core-plugin/vulnerability/wordpress-xstore-core-plugin-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25308",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.060",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en wp.insider Simple Membership simple-membership permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Simple Membership: desde n/a hasta &lt;= 4.6.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/simple-membership/vulnerability/wordpress-simple-membership-plugin-4-6-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25310",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.200",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in Alobaidi Extend Link extend-link allows Server Side Request Forgery.This issue affects Extend Link: from n/a through <= 2.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Alobaidi Extend Link extend-link permite la falsificación de petición del lado del servidor. Este problema afecta a Extend Link: desde n/a hasta &lt;= 2.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/extend-link/vulnerability/wordpress-extend-link-plugin-2-0-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25311",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.343",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in 10up Autoshare for Twitter autoshare-for-twitter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoshare for Twitter: from n/a through <= 2.3.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en 10up Autoshare para Twitter autoshare-for-twitter permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Autoshare para Twitter: desde n/a hasta &lt;= 2.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/autoshare-for-twitter/vulnerability/wordpress-autoshare-for-twitter-plugin-2-3-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25313",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.490",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Shahjahan Jewel FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through <= 6.1.14."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Shahjahan Jewel FluentForm fluentform permite la explotación de niveles de seguridad de control de acceso mal configurados. Este problema afecta a FluentForm: desde n/a hasta &lt;= 6.1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/fluentform/vulnerability/wordpress-fluentform-plugin-6-1-14-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25314",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Messiah TOP Table Of Contents top-table-of-contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TOP Table Of Contents: from n/a through <= 1.3.31."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Messiah TOP Table Of Contents top-table-of-contents permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a TOP Table Of Contents: desde n/a hasta &lt;= 1.3.31."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/top-table-of-contents/vulnerability/wordpress-top-table-of-contents-plugin-1-3-31-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25315",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.773",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects hCaptcha for WP: from n/a through <= 4.21.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en hcaptcha hCaptcha para WP hcaptcha-for-forms-and-more permite la explotación de niveles de seguridad de control de acceso mal configurados. Este problema afecta a hCaptcha para WP: desde n/a hasta &lt;= 4.22.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/hcaptcha-for-forms-and-more/vulnerability/wordpress-hcaptcha-for-wp-plugin-4-22-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25316",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:15.920",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Object Injection.This issue affects CartFlows: from n/a through <= 2.1.19."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en Brainstorm Force CartFlows cartflows permite la inyección de objetos. Este problema afecta a CartFlows: desde n/a hasta &lt;= 2.1.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cartflows/vulnerability/wordpress-cartflows-plugin-2-1-19-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25318",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.063",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Wisernotify team WiserReview Product Reviews for WooCommerce wiser-review allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserReview Product Reviews for WooCommerce: from n/a through <= 2.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en el equipo Wisernotify WiserReview Product Reviews para WooCommerce wiser-review permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WiserReview Product Reviews para WooCommerce: desde n/a hasta &lt;= 2.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wiser-review/vulnerability/wordpress-wiserreview-product-reviews-for-woocommerce-plugin-2-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25319",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.200",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in wpzita Zita Elementor Site Library zita-site-library allows Cross Site Request Forgery.This issue affects Zita Elementor Site Library: from n/a through <= 1.6.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en wpzita Zita Elementor Site Library zita-site-library permite la falsificación de petición en sitios cruzados. Este problema afecta a Zita Elementor Site Library: desde n/a hasta &lt;= 1.6.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/zita-site-library/vulnerability/wordpress-zita-elementor-site-library-plugin-1-6-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25320",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.340",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Contact Form DB: from n/a through <= 2.1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Elementor Contact Form DB: desde n/a hasta &lt;= 2.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sb-elementor-contact-form-db/vulnerability/wordpress-elementor-contact-form-db-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25321",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.483",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PSM Plugins SupportCandy supportcandy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SupportCandy: from n/a through <= 3.4.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por ausencia de autorización en PSM Plugins SupportCandy supportcandy permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a SupportCandy: desde n/a hasta &lt;= 3.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/supportcandy/vulnerability/wordpress-supportcandy-plugin-3-4-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25322",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.630",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in PublishPress PublishPress Revisions revisionary allows Cross Site Request Forgery.This issue affects PublishPress Revisions: from n/a through <= 3.7.22."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en PublishPress PublishPress Revisions revisionary permite la falsificación de petición en sitios cruzados. Este problema afecta a PublishPress Revisions: desde n/a hasta &lt;= 3.7.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/revisionary/vulnerability/wordpress-publishpress-revisions-plugin-3-7-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25323",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.770",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a through <= 6.1.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en MiKa OSM osm permite explotar Niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a OSM: desde n/a hasta &lt;= 6.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/osm/vulnerability/wordpress-osm-plugin-6-1-12-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25324",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:16.907",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en ExpressTech Systems Quiz And Survey Master quiz-master-next permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Quiz And Survey Master: desde n/a hasta &lt;= 10.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-10-3-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25325",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:17.053",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Embedded Sensitive Data.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through <= 4.7.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de exposición de información sensible del sistema a una esfera de control no autorizada en rtCamp rtMedia para WordPress, BuddyPress y bbPress buddypress-media permite recuperar datos sensibles incrustados. Este problema afecta a rtMedia para WordPress, BuddyPress y bbPress: desde n/a hasta &lt;= 4.7.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/buddypress-media/vulnerability/wordpress-rtmedia-for-wordpress-buddypress-and-bbpress-plugin-4-7-8-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25326",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:17.220",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through <= 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('PHP Inclusión remota de ficheros') vulnerabilidad en cmsmasters CMSMasters Content Composer cmsmasters-content-composer permite PHP Inclusión local de ficheros. Este problema afecta a CMSMasters Content Composer: desde n/a hasta &lt;= 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cmsmasters-content-composer/vulnerability/wordpress-cmsmasters-content-composer-plugin-1-4-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25329",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:17.453",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en ExpressTech Systems Quiz And Survey Master quiz-master-next permite explotar niveles de seguridad de control de acceso mal configurados. Este problema afecta a Quiz And Survey Master: desde n/a hasta &lt;= 10.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-10-3-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25330",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:17.597",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Authors: from n/a through <= 4.10.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en PublishPress PublishPress Authors publishpress-authors permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a PublishPress Authors: desde n/a hasta &lt;= 4.10.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/publishpress-authors/vulnerability/wordpress-publishpress-authors-plugin-4-10-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25331",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:17.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows DOM-Based XSS.This issue affects WP Activity Log: from n/a through <= 5.5.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Melapress WP Activity Log wp-security-audit-log permite XSS basado en DOM. Este problema afecta a WP Activity Log: desde n/a hasta &lt;= 5.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-security-audit-log/vulnerability/wordpress-wp-activity-log-plugin-5-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25332",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:17.897",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through <= 2.2.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Fahad Mahmood Endless Posts Navigation endless-posts-navigation permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Endless Posts Navigation: desde n/a hasta &lt;= 2.2.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/endless-posts-navigation/vulnerability/wordpress-endless-posts-navigation-plugin-2-2-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25333",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.040",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopwell: from n/a through <= 1.0.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en peregrinethemes Shopwell shopwell permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Shopwell: desde n/a hasta &lt;= 1.0.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/shopwell/vulnerability/wordpress-shopwell-theme-1-0-11-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25335",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.177",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 5.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en Ays Pro Secure Copy Content Protection y Content Locking secure-copy-content-protection permite la Explotación de Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Secure Copy Content Protection y Content Locking: desde n/a hasta &lt;= 5.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/secure-copy-content-protection/vulnerability/wordpress-secure-copy-content-protection-and-content-locking-plugin-5-0-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25336",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wpcoachify Coachify coachify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coachify: from n/a through <= 1.1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en wpcoachify Coachify coachify permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Coachify: desde n/a hasta &lt;= 1.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/coachify/vulnerability/wordpress-coachify-theme-1-1-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25337",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.460",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.1.5."
      }, {
        "lang" : "es",
        "value" : "Falsificación de petición en sitios cruzados (CSRF) vulnerabilidad en wpcoachify Coachify coachify permite falsificación de petición en sitios cruzados. Este problema afecta a Coachify: desde n/a hasta &lt;= 1.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/coachify/vulnerability/wordpress-coachify-theme-1-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25338",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.7.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Ays Pro AI ChatBot con ChatGPT y Generador de Contenido de AYS ays-chatgpt-assistant permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a AI ChatBot con ChatGPT y Generador de Contenido de AYS: desde n/a hasta &lt;= 2.7.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plugin-2-7-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25343",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.747",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS wp-sms allows DOM-Based XSS.This issue affects WP SMS: from n/a through <= 7.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en VeronaLabs WP SMS wp-sms permite XSS basado en DOM. Este problema afecta a WP SMS: desde n/a hasta &lt;= 7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-sms/vulnerability/wordpress-wp-sms-plugin-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25348",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:18.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Alt Text AI: from n/a through <= 1.10.15."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en alttextai Download Alt Text AI alttext-ai permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Download Alt Text AI: desde n/a hasta &lt;= 1.10.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/alttext-ai/vulnerability/wordpress-download-alt-text-ai-plugin-1-10-15-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25362",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FooPlugins FooGallery foogallery allows Stored XSS.This issue affects FooGallery: from n/a through <= 3.1.11."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en FooPlugins FooGallery foogallery permite XSS Almacenado. Este problema afecta a FooGallery: desde n/a hasta &lt;= 3.1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/foogallery/vulnerability/wordpress-foogallery-plugin-3-1-11-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25363",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.160",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in FooPlugins FooGallery foogallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FooGallery: from n/a through <= 3.1.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en FooPlugins FooGallery foogallery permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a FooGallery: desde n/a hasta &lt;= 3.1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/foogallery/vulnerability/wordpress-foogallery-plugin-3-1-11-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25364",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.297",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en BoldGrid Facturación de Cliente por Sprout Invoices sprout-invoices permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Facturación de Cliente por Sprout Invoices: desde n/a hasta &lt;= 20.8.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sprout-invoices/vulnerability/wordpress-client-invoicing-by-sprout-invoices-plugin-20-8-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25367",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.430",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CitiLights: from n/a through < 3.7.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en NooTheme CitiLights noo-citilights permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a CitiLights: desde n/a hasta &lt; 3.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/noo-citilights/vulnerability/wordpress-citilights-theme-3-7-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25368",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculated Fields Form: from n/a through <= 5.4.4.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en codepeople Calculated Fields Form calculated-fields-form permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Calculated Fields Form: desde n/a hasta &lt;= 5.4.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/calculated-fields-form/vulnerability/wordpress-calculated-fields-form-plugin-5-4-4-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25370",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.707",
      "lastModified" : "2026-04-28T02:16:05.593",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress: from n/a through <= 6.60.28."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en AresIT WP Compress wp-compress-image-optimizer permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Compress: desde n/a hasta &lt;= 6.60.28."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-6-60-28-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25372",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.850",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Academy LMS: from n/a through <= 3.5.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Kodezen LLC Academy LMS academy permite Explotar Niveles de Seguridad de Control de Acceso Configurados Incorrectamente. Este problema afecta a Academy LMS: desde n/a hasta &lt;= 3.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/academy/vulnerability/wordpress-academy-lms-plugin-3-5-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25374",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:19.983",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spa and Salon: from n/a through <= 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en raratheme Spa y Salon spa-and-salon permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a Spa and Salon: desde n/a hasta &lt;= 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/spa-and-salon/vulnerability/wordpress-spa-and-salon-theme-1-3-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25375",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.120",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Image Photo Gallery Final Tiles Grid: desde n/a hasta &lt;= 3.6.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/final-tiles-grid-gallery-lite/vulnerability/wordpress-image-photo-gallery-final-tiles-grid-plugin-3-6-10-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25378",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.257",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Blind SQL Injection.This issue affects Nelio AB Testing: from n/a through <= 8.2.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') en Nelio Software Nelio AB Testing nelio-ab-testing permite Inyección SQL Ciega. Este problema afecta a Nelio AB Testing: desde n/a hasta &lt;= 8.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/nelio-ab-testing/vulnerability/wordpress-nelio-ab-testing-plugin-8-2-4-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25384",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.397",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.8.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Lab WP-Lister Lite for eBay wp-lister-for-ebay permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP-Lister Lite for eBay: desde n/a hasta &lt;= 3.8.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-lister-for-ebay/vulnerability/wordpress-wp-lister-lite-for-ebay-plugin-3-8-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25385",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.533",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in KaizenCoders URL Shortify url-shortify allows Server Side Request Forgery.This issue affects URL Shortify: from n/a through <= 1.12.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en KaizenCoders URL Shortify url-shortify permite la falsificación de petición del lado del servidor. Este problema afecta a URL Shortify: desde n/a hasta &lt;= 1.12.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/url-shortify/vulnerability/wordpress-url-shortify-plugin-1-12-3-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25386",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.677",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Elementor Ally pojo-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ally: from n/a through <= 4.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Elementor Ally pojo-accessibility permite explotar niveles de seguridad de control de acceso mal configurados. Este problema afecta a Ally: desde n/a hasta &lt;= 4.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/pojo-accessibility/vulnerability/wordpress-ally-plugin-4-0-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25387",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.817",
      "lastModified" : "2026-04-28T02:16:06.263",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Elementor Image Optimizer by Elementor image-optimization allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Optimizer by Elementor: from n/a through <= 1.7.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Elementor Image Optimizer de Elementor image-optimization permite la explotación de niveles de seguridad de control de acceso mal configurados. Este problema afecta a Image Optimizer de Elementor: desde n/a hasta &lt;= 1.7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/image-optimization/vulnerability/wordpress-image-optimizer-by-elementor-plugin-1-7-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25388",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:20.953",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from n/a through <= 5.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en scripteo Ads Pro ap-plugin-scripteo permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ads Pro: desde n/a hasta &lt;= 5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-5-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25389",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.093",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.8.3."
      }, {
        "lang" : "es",
        "value" : "Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada vulnerabilidad en Metagauss EventPrime eventprime-event-calendar-management permite Recuperar Datos Sensibles Incrustados. Este problema afecta a EventPrime: desde n/a hasta &lt;= 4.2.8.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/eventprime-event-calendar-management/vulnerability/wordpress-eventprime-plugin-4-2-8-3-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25391",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.237",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through <= 1.3.07."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WP Grids WP Wand ai-content-generation permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Wand: desde n/a hasta &lt;= 1.3.07."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ai-content-generation/vulnerability/wordpress-wp-wand-plugin-1-3-07-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25392",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.377",
      "lastModified" : "2026-04-28T19:37:04.463",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in KaizenCoders Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress update-urls allows Phishing.This issue affects Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress: from n/a through <= 1.4.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de redirección de URL a sitio no confiable ('Redirección abierta') en KaizenCoders Update URLs – Manera rápida y sencilla de buscar enlaces antiguos y reemplazarlos por enlaces nuevos en WordPress update-urls permite phishing. Este problema afecta a Update URLs – Manera rápida y sencilla de buscar enlaces antiguos y reemplazarlos por enlaces nuevos en WordPress: desde n/a hasta &lt;= 1.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/update-urls/vulnerability/wordpress-update-urls-quick-and-easy-way-to-search-old-links-and-replace-them-with-new-links-in-wordpress-plugin-1-3-0-open-redirection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25393",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.510",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in sparklewpthemes Hello FSE hello-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hello FSE: from n/a through <= 1.0.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en sparklewpthemes Hello FSE hello-fse permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Hello FSE: desde n/a hasta &lt;= 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/hello-fse/vulnerability/wordpress-hello-fse-theme-1-0-6-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25394",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.650",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in sparklewpthemes Fitness FSE fitness-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fitness FSE: from n/a through <= 1.0.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en sparklewpthemes Fitness FSE fitness-fse permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Fitness FSE: desde n/a hasta &lt;= 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fitness-fse/vulnerability/wordpress-fitness-fse-theme-1-0-6-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25395",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.790",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ikreatethemes Business Roy business-roy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Roy: from n/a through <= 1.1.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en ikreatethemes Business Roy business-roy permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Business Roy: desde n/a hasta &lt;= 1.1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/business-roy/vulnerability/wordpress-business-roy-theme-1-1-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25399",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:21.923",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in CryoutCreations Serious Slider cryout-serious-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serious Slider: from n/a through <= 1.2.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en CryoutCreations Serious Slider cryout-serious-slider permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Serious Slider: desde n/a hasta &lt;= 1.2.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cryout-serious-slider/vulnerability/wordpress-serious-slider-plugin-1-2-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25402",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.063",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through <= 16.011.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en echoplugins Knowledge Base for Documentation, FAQs con AI Assistance echo-knowledge-base permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Knowledge Base for Documentation, FAQs with AI Assistance: desde n/a hasta &lt;= 16.011.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/echo-knowledge-base/vulnerability/wordpress-knowledge-base-for-documentation-faqs-with-ai-assistance-plugin-16-011-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25404",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.207",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through <= 2.4.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Automattic WP Job Manager wp-job-manager permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Job Manager: desde n/a hasta &lt;= 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-job-manager/vulnerability/wordpress-wp-job-manager-plugin-2-4-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25407",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.340",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in cookiebot Cookiebot cookiebot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cookiebot: from n/a through <= 4.6.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en cookiebot Cookiebot cookiebot permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Cookiebot: desde n/a hasta &lt;= 4.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/cookiebot/vulnerability/wordpress-cookiebot-plugin-4-6-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25408",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.473",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Notifier: from n/a through <= 1.3.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en PluginRx Broken Link Notifier broken-link-notifier permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Broken Link Notifier: desde n/a hasta &lt;= 1.3.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/broken-link-notifier/vulnerability/wordpress-broken-link-notifier-plugin-1-3-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25409",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.610",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in crgeary JAMstack Deployments wp-jamstack-deployments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JAMstack Deployments: from n/a through <= 1.1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en crgeary JAMstack Deployments wp-jamstack-deployments permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a JAMstack Deployments: desde n/a hasta &lt;= 1.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-jamstack-deployments/vulnerability/wordpress-jamstack-deployments-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25410",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.743",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in tstephenson WP-CORS wp-cors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CORS: from n/a through <= 0.2.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante en tstephenson WP-CORS wp-cors permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a WP-CORS: desde n/a hasta &lt;= 0.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-cors/vulnerability/wordpress-wp-cors-plugin-0-2-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25411",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:22.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: from n/a through <= 2.8.22."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en themastercut Revision Manager TMC revision-manager-tmc permite la falsificación de petición en sitios cruzados. Este problema afecta a Revision Manager TMC: desde n/a hasta &lt;= 2.8.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/revision-manager-tmc/vulnerability/wordpress-revision-manager-tmc-plugin-2-8-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25412",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.043",
      "lastModified" : "2026-02-24T08:16:28.617",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25415",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.180",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPBookit Pro: from n/a through <= 1.6.18."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en iqonicdesign WPBookit Pro wpbookit-pro permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WPBookit Pro: desde n/a hasta &lt;= 1.6.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpbookit-pro/vulnerability/wordpress-wpbookit-pro-plugin-1-6-18-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25416",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.320",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Kit Elementor Addons: from n/a through <= 1.4.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en blazethemes News Kit Elementor Addons news-kit-elementor-addons permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a News Kit Elementor Addons: desde n/a hasta &lt;= 1.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/news-kit-elementor-addons/vulnerability/wordpress-news-kit-elementor-addons-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25418",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.460",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL ('inyección SQL') en bitpressadmin Bit Form bit-form permite inyección SQL. Este problema afecta a Bit Form: desde n/a hasta &lt;= 2.21.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/bit-form/vulnerability/wordpress-bit-form-plugin-2-21-10-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25419",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.597",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UpsellWP: from n/a through <= 2.2.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en flycart UpsellWP checkout-upsell-and-order-bumps permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a UpsellWP: desde n/a hasta &lt;= 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/checkout-upsell-and-order-bumps/vulnerability/wordpress-upsellwp-plugin-2-2-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25420",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.740",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through <= 1.7.18."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falta de autorización en MailerLite MailerLite official-mailerlite-sign-up-forms permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a MailerLite: desde n/a hasta &lt;= 1.7.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/official-mailerlite-sign-up-forms/vulnerability/wordpress-mailerlite-plugin-1-7-18-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25422",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:23.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through <= 1.2.10."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Themes4WP Popularis Extra popularis-extra permite la falsificación de petición en sitios cruzados. Este problema afecta a Popularis Extra: desde n/a hasta &lt;= 1.2.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/popularis-extra/vulnerability/wordpress-popularis-extra-plugin-1-2-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25423",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.020",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real 3D FlipBook: from n/a through <= 4.19.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite permite explotar niveles de seguridad de control de acceso incorrectamente configurados. Este problema afecta a Real 3D FlipBook: desde n/a hasta &lt;= 4.16.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/real3d-flipbook-lite/vulnerability/wordpress-real-3d-flipbook-plugin-4-16-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25428",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.163",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in totalsoft TS Poll poll-wp allows Server Side Request Forgery.This issue affects TS Poll: from n/a through <= 2.5.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en totalsoft TS Poll poll-wp permite falsificación de petición del lado del servidor. Este problema afecta a TS Poll: desde n/a hasta &lt;= 2.5.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/poll-wp/vulnerability/wordpress-ts-poll-plugin-2-5-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25432",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.297",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.6.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en omnipressteam Omnipress omnipress permite XSS Almacenado. Este problema afecta a Omnipress: desde n/a hasta &lt;= 1.6.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/omnipress/vulnerability/wordpress-omnipress-plugin-1-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25441",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.440",
      "lastModified" : "2026-04-23T15:37:10.017",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadConnector: from n/a through <= 3.0.21."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en LeadConnector LeadConnector leadconnector permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a LeadConnector: desde n/a hasta &lt;= 3.0.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/leadconnector/vulnerability/wordpress-leadconnector-plugin-3-0-21-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25451",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.580",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.6.9."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en boldthemes Bold Page Builder bold-page-builder permite XSS Almacenado. Este problema afecta a Bold Page Builder: desde n/a hasta &lt;= 5.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/bold-page-builder/vulnerability/wordpress-bold-page-builder-plugin-5-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25453",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.720",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mdempfle Advanced iFrame advanced-iframe allows DOM-Based XSS.This issue affects Advanced iFrame: from n/a through <= 2025.10."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en mdempfle Advanced iFrame advanced-iframe permite XSS basado en DOM. Este problema afecta a Advanced iFrame: desde n/a hasta &lt;= 2025.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/advanced-iframe/vulnerability/wordpress-advanced-iframe-plugin-2025-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25459",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.860",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through <= 3.5.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en uixthemes Sober sober permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Sober: desde n/a hasta &lt;= 3.5.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/sober/vulnerability/wordpress-sober-theme-3-5-12-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25463",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:24.997",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored XSS.This issue affects Wpresidence Core: from n/a through <= 5.4.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en WpEstate Wpresidence Core wpresidence-core permite XSS Almacenado. Este problema afecta a Wpresidence Core: desde n/a hasta &lt;= 5.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpresidence-core/vulnerability/wordpress-wpresidence-core-plugin-5-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25472",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:25.137",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Stored XSS.This issue affects Fusion Builder: from n/a through <= 3.14.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en ThemeFusion Fusion Builder fusion-builder permite XSS Almacenado. Este problema afecta a Fusion Builder: desde n/a hasta &lt;= 3.14.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/fusion-builder/vulnerability/wordpress-fusion-builder-plugin-3-14-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25473",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:25.273",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through <= 14.0.31."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en AA-Team WZone woozone permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WZone: desde n/a hasta &lt;= 14.0.31."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woozone/vulnerability/wordpress-wzone-plugin-14-0-31-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26358",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T09:16:25.417",
      "lastModified" : "2026-02-20T20:58:36.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax, versión(es) 10.2, contiene una vulnerabilidad de Autorización Faltante. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a un acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "0E2B8D81-A040-4365-B089-38A241734AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "AD314301-3DEB-46C2-A641-C463CF25F6E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26359",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T09:16:25.573",
      "lastModified" : "2026-02-20T20:58:50.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax, versión(es) 10.2, contiene una vulnerabilidad de Control Externo de Nombre o Ruta de Archivo. Un atacante con pocos privilegios con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la capacidad de sobrescribir archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "0E2B8D81-A040-4365-B089-38A241734AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "AD314301-3DEB-46C2-A641-C463CF25F6E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26360",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T09:16:25.737",
      "lastModified" : "2026-02-20T20:59:06.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax, versión(es) 10.2, contiene una vulnerabilidad de Control Externo de Nombre o Ruta de Archivo. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad para eliminar archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "0E2B8D81-A040-4365-B089-38A241734AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "AD314301-3DEB-46C2-A641-C463CF25F6E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26361",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T09:16:25.900",
      "lastModified" : "2026-02-20T20:59:17.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax, versión(es) 10.2, contiene una vulnerabilidad de Control Externo de Nombre o Ruta de Archivo. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "0E2B8D81-A040-4365-B089-38A241734AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "AD314301-3DEB-46C2-A641-C463CF25F6E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26362",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T09:16:26.070",
      "lastModified" : "2026-02-20T20:46:00.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized modification of critical system files."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax, versión(es) 10.2, contiene una vulnerabilidad de salto de ruta relativo. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la modificación no autorizada de archivos críticos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "0E2B8D81-A040-4365-B089-38A241734AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*",
            "versionEndExcluding" : "10.3.0.1",
            "matchCriteriaId" : "AD314301-3DEB-46C2-A641-C463CF25F6E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27042",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:26.243",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NotificationX: from n/a through <= 3.2.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WPDeveloper NotificationX notificationx permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a NotificationX: desde n/a hasta &lt;= 3.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/notificationx/vulnerability/wordpress-notificationx-plugin-3-2-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27050",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:26.387",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in ThimPress RealPress realpress allows Cross Site Request Forgery.This issue affects RealPress: from n/a through <= 1.1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en ThimPress RealPress realpress permite falsificación de petición en sitios cruzados. Este problema afecta a RealPress: desde n/d hasta &lt;= 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/realpress/vulnerability/wordpress-realpress-plugin-1-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27052",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:26.527",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce and WordPress: from n/a through < 1.1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en villatheme Sales Countdown Timer para WooCommerce y WordPress sctv-sales-countdown-timer permite la Inclusión Local de Ficheros PHP. Este problema afecta a Sales Countdown Timer para WooCommerce y WordPress: desde n/a hasta &lt;= 1.1.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/sctv-sales-countdown-timer/vulnerability/wordpress-sales-countdown-timer-for-woocommerce-and-wordpress-plugin-1-1-8-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27055",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:26.673",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Penci AI SmartContent Creator: from n/a through <= 2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en PenciDesign Penci AI SmartContent Creator penci-ai permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Penci AI SmartContent Creator: desde n/a hasta &lt;= 2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-ai/vulnerability/wordpress-penci-ai-smartcontent-creator-plugin-2-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27056",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:26.823",
      "lastModified" : "2026-04-28T16:16:10.687",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in StellarWP iThemes Sync ithemes-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes Sync: from n/a through <= 3.2.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en StellarWP iThemes Sync ithemes-sync permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a iThemes Sync: desde n/a hasta &lt;= 3.2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ithemes-sync/vulnerability/wordpress-ithemes-sync-plugin-3-2-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27057",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:26.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows Stored XSS.This issue affects Penci Filter Everything: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PenciDesign Penci Filter Everything penci-filter-everything permite XSS Almacenado. Este problema afecta a Penci Filter Everything: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-filter-everything/vulnerability/wordpress-penci-filter-everything-plugin-1-7-cross-site-scripting-xss-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27058",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:27.097",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Podcast penci-podcast allows DOM-Based XSS.This issue affects Penci Podcast: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PenciDesign Penci Podcast penci-podcast permite XSS basado en DOM. Este problema afecta a Penci Podcast: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-podcast/vulnerability/wordpress-penci-podcast-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27059",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:27.227",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Recipe penci-recipe allows DOM-Based XSS.This issue affects Penci Recipe: from n/a through <= 4.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PenciDesign Penci Recipe penci-recipe permite XSS basado en DOM. Este problema afecta a Penci Recipe: desde n/a hasta &lt;= 4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/penci-recipe/vulnerability/wordpress-penci-recipe-plugin-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27066",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:27.360",
      "lastModified" : "2026-04-28T19:37:12.417",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PI Web Solution Live sales notification for WooCommerce live-sales-notifications-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live sales notification for WooCommerce: from n/a through <= 2.3.60."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en PI Web Solution Live sales notification para WooCommerce live-sales-notifications-for-woocommerce permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Live sales notification for WooCommerce: desde n/a hasta &lt;= 2.3.46."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/live-sales-notifications-for-woocommerce/vulnerability/wordpress-live-sales-notification-for-woocommerce-plugin-2-3-44-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27069",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:27.547",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through <= 8.7.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PenciDesign Soledad soledad permite XSS basado en DOM. Este problema afecta a Soledad: desde n/a hasta &lt;= 8.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/soledad/vulnerability/wordpress-soledad-theme-8-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27074",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:27.770",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through <= 6.5.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en vaakash Shortcoder shortcoder permite XSS Almacenado. Este problema afecta a Shortcoder: desde n/d hasta &lt;= 6.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/shortcoder/vulnerability/wordpress-shortcoder-plugin-6-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27090",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:27.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in WP Moose Kenta Companion kenta-companion allows Cross Site Request Forgery.This issue affects Kenta Companion: from n/a through <= 1.3.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en WP Moose Kenta Companion kenta-companion permite la falsificación de petición en sitios cruzados. Este problema afecta a Kenta Companion: desde n/a hasta &lt;= 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/kenta-companion/vulnerability/wordpress-kenta-companion-plugin-1-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27092",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:28.063",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2.3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Greg Winiarski WPAdverts wpadverts permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WPAdverts: desde n/a hasta &lt;= 2.2.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpadverts/vulnerability/wordpress-wpadverts-plugin-2-2-11-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27094",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T09:16:28.200",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoDaddy CoBlocks coblocks allows Stored XSS.This issue affects CoBlocks: from n/a through <= 3.1.16."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en GoDaddy CoBlocks coblocks permite XSS Almacenado. Este problema afecta a CoBlocks: desde n/d hasta &lt;= 3.1.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/coblocks/vulnerability/wordpress-coblocks-plugin-3-1-16-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2735",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-19T09:16:28.480",
      "lastModified" : "2026-02-23T19:16:05.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated when sending a POST request to ‘/blog/new-article/org.opencms.ugc.CmsUgcEditService.gwt’ using the ‘text’ parameter."
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) almacenado en OpenCms v18.0 de Alkacon, que ocurre cuando la entrada del usuario no se valida correctamente al enviar una solicitud POST a '/blog/new-article/org.opencms.ugc.CmsUgcEditService.gwt' utilizando el parámetro 'text'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C2457A-A34E-49C8-94D8-66D2ECB9D1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacons-opencms",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2736",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-19T09:16:28.657",
      "lastModified" : "2026-02-23T19:15:32.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL containing the ‘q’ parameter in ‘/search/index.html’. This vulnerability can be exploited to steal sensitive user information such as session cookies, or to perform actions while impersonating the user."
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) reflejado en OpenCms v18.0 de Alkacon, que permite a un atacante ejecutar código JavaScript en el navegador de la víctima enviando a la víctima una URL maliciosa que contiene el parámetro 'q' en '/search/index.html'. Esta vulnerabilidad puede ser explotada para robar información sensible del usuario como cookies de sesión, o para realizar acciones suplantando al usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alkacon:opencms:18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C2457A-A34E-49C8-94D8-66D2ECB9D1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacons-opencms",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1219",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T10:16:11.277",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 4.0 to 5.10 via the 'load_track_note_ajax' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view the contents of private posts."
      }, {
        "lang" : "es",
        "value" : "El plugin MP3 Audio Player – Music Player, Podcast Player &amp; Radio by Sonaar para WordPress es vulnerable a Referencia Directa Insegura a Objeto en las versiones 4.0 a 5.10 a través de 'load_track_note_ajax' debido a la falta de validación en una clave controlada por el usuario. Esto posibilita que atacantes no autenticados vean el contenido de publicaciones privadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mp3-music-player-by-sonaar/tags/5.10/public/class-sonaar-music-public.php#L323",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mp3-music-player-by-sonaar/tags/5.10/sonaar-music.php#L179",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3453076/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ce8fa964-d543-4d46-a534-e403dff4f425?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1461",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T10:16:11.457",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, and including, 4.7.0 via the Stripe webhook handler. This is due to the plugin only validating webhook signatures when the stripe-webhook-signing-secret setting is configured, which is empty by default. This makes it possible for unauthenticated attackers to forge Stripe webhook events to manipulate membership subscriptions, including reactivating expired memberships without payment or canceling legitimate subscriptions, potentially leading to unauthorized access and service disruption."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple Membership para WordPress es vulnerable a Manejo Inadecuado de Valores Faltantes en todas las versiones hasta la 4.7.0, inclusive, a través del gestor de webhooks de Stripe. Esto se debe a que el plugin solo valida las firmas de webhook cuando la configuración 'stripe-webhook-signing-secret' está configurada, la cual está vacía por defecto. Esto hace posible que atacantes no autenticados falsifiquen eventos de webhook de Stripe para manipular suscripciones de membresía, incluyendo la reactivación de membresías caducadas sin pago o la cancelación de suscripciones legítimas, lo que podría llevar a acceso no autorizado y interrupción del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-230"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-membership/trunk/classes/class.swpm-wp-loaded-tasks.php#L90",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-membership/trunk/ipn/swpm-stripe-webhook-handler.php#L26",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3453404/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e4df9a6-8f7d-428b-a596-0751ca047169?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22266",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T10:16:11.630",
      "lastModified" : "2026-02-20T16:36:07.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass."
      }, {
        "lang" : "es",
        "value" : "Dell PowerProtect Data Manager, versión(es) anterior(es) a la 19.22, contiene una vulnerabilidad de Verificación Incorrecta del Origen de un Canal de Comunicación en la API REST. Un atacante con altos privilegios con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a la elusión del mecanismo de protección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-146"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.22",
            "matchCriteriaId" : "17D7AA01-F2D1-4DCF-BF83-0550AA9CC59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22267",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T10:16:11.800",
      "lastModified" : "2026-02-20T16:33:47.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell PowerProtect Data Manager, versión(es) anterior(es) a la 19.22, contiene una vulnerabilidad de Asignación Incorrecta de Privilegios. Un atacante con privilegios bajos con acceso remoto podría explotar potencialmente esta vulnerabilidad, lo que lleva a una Elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.22",
            "matchCriteriaId" : "17D7AA01-F2D1-4DCF-BF83-0550AA9CC59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22268",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-19T10:16:11.963",
      "lastModified" : "2026-02-20T16:12:18.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service of a Dell Enterprise Support connection."
      }, {
        "lang" : "es",
        "value" : "Dell PowerProtect Data Manager, versión(es) anterior(es) a la 19.22, contiene una vulnerabilidad de asignación de privilegios incorrecta. Un atacante con privilegios bajos con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la denegación de servicio de una conexión de soporte empresarial de Dell."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.22",
            "matchCriteriaId" : "17D7AA01-F2D1-4DCF-BF83-0550AA9CC59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429778/dsa-2026-046-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2716",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T10:16:12.233",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Testimonial Heading' setting in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Client Testimonial Slider para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de la configuración 'Testimonial Heading' en todas las versiones hasta la 2.0, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-client-testimonial/tags/2.0/include/testimonial-settings.php#L45",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-client-testimonial/trunk/include/testimonial-settings.php#L45",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/583b5cd7-a33e-41d0-a389-ac36679d5f22?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2718",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T10:16:12.400",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dealia – Request a Quote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Gutenberg block attributes in all versions up to, and including, 1.0.8. This is due to the use of `wp_kses()` for output escaping within HTML attribute contexts where `esc_attr()` is required. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Dealia – Request a Quote para WordPress es vulnerable a cross-site scripting almacenado a través de atributos de bloque de Gutenberg en todas las versiones hasta la 1.0.6, inclusive. Esto se debe al uso de 'wp_kses()' para el escape de salida dentro de contextos de atributos HTML donde se requiere 'esc_attr()'. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/tags/1.0.6/functions.php#L9",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/tags/1.0.6/templates/widgets/dealia-nonproduct-button.php#L7",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/trunk/functions.php#L9",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/dealia-request-a-quote/trunk/templates/widgets/dealia-nonproduct-button.php#L7",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/617785d7-90b1-482c-bfff-9b5a63741415?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2744",
      "sourceIdentifier" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
      "published" : "2026-02-19T14:16:15.073",
      "lastModified" : "2026-02-19T15:16:12.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25527",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T15:16:11.947",
      "lastModified" : "2026-02-19T19:54:04.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` route accepts `group=\"..\"`, which causes `send_from_directory(\"static/..\", filename)` to execute. This moves the base directory up to `/app/changedetectionio`, enabling unauthenticated local file read of application source files (e.g., `flask_app.py`). Version 0.53.2 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "changedetection.io es una herramienta gratuita de código abierto para la detección de cambios en páginas web. En versiones anteriores a la 0.53.2, la ruta '/static//' acepta 'group=\"..\"', lo que provoca la ejecución de 'send_from_directory(\"static/..\", filename)'. Esto mueve el directorio base hasta '/app/changedetectionio', lo que permite la lectura de archivos locales sin autenticación de archivos fuente de la aplicación (por ejemplo, 'flask_app.py'). La versión 0.53.2 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.53.2",
            "matchCriteriaId" : "0178051B-3654-4FD6-924A-9A1601B52EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/commit/9d38b4517364831889b5b0d7b3465fd060403fd4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-9jj8-v89v-xjvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25535",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T15:16:12.130",
      "lastModified" : "2026-02-23T19:13:18.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the `addImage` method, a user can provide a harmful GIF file that results in out of memory errors and denial of service. Harmful GIF files have large width and/or height entries in their headers, which lead to excessive memory allocation. Other affected methods are: `html`. The vulnerability has been fixed in jsPDF 4.2.0. As a workaround, sanitize image data or URLs before passing it to the addImage method or one of the other affected methods."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una librería para generar PDFs en JavaScript. Anteriormente a la 4.2.0, el control del usuario sobre el primer argumento del método 'addImage' resulta en denegación de servicio. Si se le da la posibilidad de pasar datos de imagen o URLs no saneados al método 'addImage', un usuario puede proporcionar un archivo GIF malicioso que resulta en errores de falta de memoria y denegación de servicio. Los archivos GIF maliciosos tienen entradas de ancho y/o alto grandes en sus cabeceras, lo que lleva a una asignación excesiva de memoria. Otros métodos afectados son: 'html'. La vulnerabilidad ha sido corregida en jsPDF 4.2.0. Como solución alternativa, sanee los datos de imagen o las URLs antes de pasarlos al método addImage o a uno de los otros métodos afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.2.0",
            "matchCriteriaId" : "7EACE56E-B77C-421B-AAFE-F5FD3C80FE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25535.md",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/commit/2e5e156e284d92c7d134bce97e6418756941d5e6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-67pg-wm7f-q7fj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25755",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T15:16:12.303",
      "lastModified" : "2026-02-23T18:52:20.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject arbitrary PDF objects into the generated document. By crafting a payload that escapes the JavaScript string delimiter, an attacker can execute malicious actions or alter the document structure, impacting any user who opens the generated PDF. The vulnerability has been fixed in jspdf@4.2.0. As a workaround, escape parentheses in user-provided JavaScript code before passing them to the `addJS` method."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una librería para generar PDFs en JavaScript. Antes de la versión 4.2.0, el control del usuario sobre el argumento del método `addJS` permite a un atacante inyectar objetos PDF arbitrarios en el documento generado. Al elaborar una carga útil que escapa el delimitador de cadena de JavaScript, un atacante puede ejecutar acciones maliciosas o alterar la estructura del documento, lo que afecta a cualquier usuario que abra el PDF generado. La vulnerabilidad ha sido corregida en jspdf@4.2.0. Como solución alternativa, escape los paréntesis en el código JavaScript proporcionado por el usuario antes de pasarlos al método `addJS`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.2.0",
            "matchCriteriaId" : "7EACE56E-B77C-421B-AAFE-F5FD3C80FE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25738",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T16:27:15.093",
      "lastModified" : "2026-02-26T02:57:25.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Versions prior to 3.3.10 are vulnerable to server-side request forgery. Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of Indico's functionality but is never intended to let users access \"special\" targets such as localhost or cloud metadata endpoints. Users should upgrade to version 3.3.10 to receive a patch. Those who do not have IPs that expose sensitive data without authentication (typically because they do not host Indico on AWS) are not affected. Only event organizers can access endpoints where SSRF could be used to actually see the data returned by such a request. For those who trust their event organizers, the risk is also very limited. For additional security, both before and after patching, one may also use the common proxy-related environment variables (in particular `http_proxy` and `https_proxy`) to force outgoing requests to go through a proxy that limits requests in whatever way you deem useful/necessary. These environment variables would need to be set both on the indico-uwsgi and indico-celery services."
      }, {
        "lang" : "es",
        "value" : "Indico es un sistema de gestión de eventos que utiliza Flask-Multipass, un sistema de autenticación multi-backend para Flask. Las versiones anteriores a la 3.3.10 son vulnerables a la falsificación de petición del lado del servidor. Indico realiza peticiones salientes a URLs proporcionadas por el usuario en varios lugares. Esto es en su mayoría intencional y parte de la funcionalidad de Indico, pero nunca se pretende que los usuarios accedan a objetivos 'especiales' como localhost o puntos finales de metadatos en la nube. Los usuarios deben actualizar a la versión 3.3.10 para recibir un parche. Aquellos que no tienen IPs que exponen datos sensibles sin autenticación (típicamente porque no alojan Indico en AWS) no se ven afectados. Solo los organizadores de eventos pueden acceder a los puntos finales donde se podría usar SSRF para ver realmente los datos devueltos por dicha petición. Para aquellos que confían en sus organizadores de eventos, el riesgo también es muy limitado. Para seguridad adicional, tanto antes como después de aplicar el parche, también se pueden usar las variables de entorno comunes relacionadas con el proxy (en particular `http_proxy` y `https_proxy`) para forzar que las peticiones salientes pasen por un proxy que limite las peticiones de la manera que se considere útil/necesaria. Estas variables de entorno deberían configurarse tanto en los servicios indico-uwsgi como indico-celery."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.10",
            "matchCriteriaId" : "386CCD17-7701-42CD-83A1-FEE910FDBBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/indico/indico/commit/70d341826116fac5868719a6133f2c26d9345137",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/indico/indico/releases/tag/v3.3.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/indico/indico/security/advisories/GHSA-f47c-3c5w-v7p4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25739",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T16:27:15.270",
      "lastModified" : "2026-02-26T02:56:29.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Versions prior to 3.3.10 are vulnerable to cross-site scripting when uploading certain file types as materials. Users should upgrade to version 3.3.10 to receive a patch. To apply the fix itself updating is sufficient, but to benefit from the strict Content Security Policy (CSP) Indico now applies by default for file downloads, update the webserver config in case one uses nginx with Indico's `STATIC_FILE_METHOD` set to `xaccelredirect`. For further directions, consult the GitHub Security advisory or Indico setup documentation. Some workarounds are available. Use the webserver config to apply a strict CSP for material download endpoints, and/or only let trustworthy users create content (including material uploads, which speakers can typically do as well) on Indico."
      }, {
        "lang" : "es",
        "value" : "Indico es un sistema de gestión de eventos que utiliza Flask-Multipass, un sistema de autenticación multi-backend para Flask. Las versiones anteriores a la 3.3.10 son vulnerables a cross-site scripting al subir ciertos tipos de archivos como materiales. Los usuarios deben actualizar a la versión 3.3.10 para recibir un parche. Para aplicar la corrección en sí, la actualización es suficiente, pero para beneficiarse de la estricta Política de Seguridad de Contenido (CSP) que Indico ahora aplica por defecto para las descargas de archivos, actualice la configuración del servidor web en caso de que se use nginx con el `STATIC_FILE_METHOD` de Indico configurado como `xaccelredirect`. Para obtener más indicaciones, consulte el aviso de seguridad de GitHub o la documentación de configuración de Indico. Algunas soluciones alternativas están disponibles. Utilice la configuración del servidor web para aplicar una CSP estricta para los puntos finales de descarga de materiales, y/o solo permita que usuarios de confianza creen contenido (incluidas las subidas de materiales, que los ponentes también pueden hacer normalmente) en Indico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.10",
            "matchCriteriaId" : "386CCD17-7701-42CD-83A1-FEE910FDBBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/indico/indico/releases/tag/v3.3.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/indico/indico/security/advisories/GHSA-jxc4-54g3-j7vp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25766",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T16:27:15.497",
      "lastModified" : "2026-02-23T20:17:51.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Echo is a Go web framework. In versions 5.0.0 through 5.0.2 on Windows, Echo’s `middleware.Static` using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root. In `middleware/static.go`, the requested path is unescaped and normalized with `path.Clean` (URL semantics). `path.Clean` does not treat `\\` as a path separator, so `..\\` sequences remain in the cleaned path. The resulting path is then passed to `currentFS.Open(...)`. When the filesystem is left at the default (nil), Echo uses `defaultFS` which calls `os.Open` (`echo.go:792`). On Windows, `os.Open` treats `\\` as a path separator and resolves `..\\`, allowing traversal outside the static root. Version 5.0.3 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Echo es un marco web de Go. En las versiones 5.0.0 a 5.0.2 en Windows, el `middleware.Static` de Echo que utiliza el sistema de archivos predeterminado permite recorrer rutas mediante barras invertidas, lo que permite la lectura de archivos remotos no autenticados fuera de la raíz estática. En `middleware/static.go`, la ruta solicitada no se escapa y se normaliza con `path.Clean` (semántica de URL). `path.Clean` no trata `\\` como un separador de ruta, por lo que las secuencias `..\\` permanecen en la ruta limpia. La ruta resultante se pasa entonces a `currentFS.Open(...)`. Cuando el sistema de archivos se deja en el valor predeterminado (nil), Echo utiliza `defaultFS`, que llama a `os.Open` (`echo.go:792`). En Windows, `os.Open` trata `\\` como un separador de ruta y resuelve `..\\`, lo que permite el recorrido fuera de la raíz estática. La versión 5.0.3 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:labstack:echo:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.3",
            "matchCriteriaId" : "27FD7D9D-DB8A-4CC1-8024-72E6C1865D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/labstack/echo/commit/b1d443086ea27cf51345ec72a71e9b7e9d9ce5f1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/labstack/echo/pull/2891",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/labstack/echo/security/advisories/GHSA-pgvm-wxw2-hrv9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25940",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T16:27:15.660",
      "lastModified" : "2026-02-23T18:50:02.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following property, a user can inject arbitrary PDF objects, such as JavaScript actions, which are executed when the victim hovers over the radio option. The vulnerability has been fixed in jsPDF@4.2.0. As a workaround, sanitize user input before passing it to the vulnerable API members."
      }, {
        "lang" : "es",
        "value" : "jsPDF es una biblioteca para generar PDFs en JavaScript. Anterior a la versión 4.2.0, el control por parte del usuario de las propiedades y métodos del módulo Acroform permite a los usuarios inyectar objetos PDF arbitrarios, como acciones de JavaScript. Si se le da la posibilidad de pasar entrada no saneada a una de las siguientes propiedades, un usuario puede inyectar objetos PDF arbitrarios, como acciones de JavaScript, que se ejecutan cuando la víctima pasa el cursor sobre la opción de radio. La vulnerabilidad ha sido corregida en jsPDF@4.2.0. Como solución alternativa, sanee la entrada del usuario antes de pasarla a los miembros vulnerables de la API."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.2.0",
            "matchCriteriaId" : "7EACE56E-B77C-421B-AAFE-F5FD3C80FE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parallax/jsPDF/commit/71ad2dbfa6c7c189ab42b855b782620fa8a38375",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/releases/tag/v4.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parallax/jsPDF/security/advisories/GHSA-p5xg-68wr-hm3m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26223",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T16:27:15.817",
      "lastModified" : "2026-03-02T15:16:35.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.4.8 allows cross-site scripting (XSS) in the private area via malicious iframe tags. The application does not properly sandbox or escape iframe content in the back-office, allowing an attacker to inject and execute malicious scripts. The fix adds a sandbox attribute to iframe tags in the private area. This vulnerability is not mitigated by the SPIP security screen."
      }, {
        "lang" : "es",
        "value" : "SPIP anterior a 4.4.8 permite cross-site scripting (XSS) en el área privada a través de etiquetas iframe maliciosas. La aplicación no aísla correctamente en un sandbox ni escapa el contenido de iframe en el back-office, permitiendo a un atacante inyectar y ejecutar scripts maliciosos. La solución añade un atributo sandbox a las etiquetas iframe en el área privada. Esta vulnerabilidad no es mitigada por la pantalla de seguridad de SPIP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.8",
            "matchCriteriaId" : "DFDA31DE-95C8-4334-9566-DD83490E2AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-8.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-cross-site-scripting-via-iframe-tags-in-private-area",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26345",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T16:27:16.003",
      "lastModified" : "2026-02-24T19:51:50.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.4.8 contains a stored cross-site scripting (XSS) vulnerability in the public area triggered in certain edge-case usage patterns. The echapper_html_suspect() function does not adequately sanitize user-controlled content, allowing authenticated users with content-editing privileges (e.g., author-level roles and above) to inject malicious scripts. The injected payload may be rendered across multiple pages within the framework and execute in the browser context of other users, including administrators. Successful exploitation can allow attackers to perform actions in the security context of the victim user, including unauthorized modification of application state. This vulnerability is not mitigated by the SPIP security screen."
      }, {
        "lang" : "es",
        "value" : "SPIP anterior a 4.4.8 permite cross-site scripting (XSS) en el área pública para ciertos patrones de uso de casos límite. La función echapper_html_suspect() no detecta adecuadamente todas las formas de contenido malicioso, permitiendo a un atacante inyectar scripts que se ejecutan en el navegador de un visitante. Esta vulnerabilidad no es mitigada por la pantalla de seguridad de SPIP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.8",
            "matchCriteriaId" : "DFDA31DE-95C8-4334-9566-DD83490E2AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-8.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-cross-site-scripting-in-public-area",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2274",
      "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
      "published" : "2026-02-19T16:27:16.287",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-23 allows an authenticated remote attacker to read sensitive local files and access internal network resources via crafted requests to the production cluster.\n\n\n\n\n\nThis vulnerability was patched and no customer action is needed."
      }, {
        "lang" : "es",
        "value" : "Una SSRF y una vulnerabilidad de lectura arbitraria de archivos en AppSheet Core en Google AppSheet anterior al 23-11-2025 permite a un atacante remoto autenticado leer archivos locales sensibles y acceder a recursos de red internos a través de solicitudes manipuladas al clúster de producción.\n\nEsta vulnerabilidad fue parcheada y no se requiere ninguna acción por parte del cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "CLEAR"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.google.dev/t/november-23-2025/332118",
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1581",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T17:24:40.107",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'wpfob' parameter in all versions up to, and including, 2.4.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin wpForo Forum para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'wpfob' en todas las versiones hasta la 2.4.14, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto permite que atacantes no autenticados añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpforo/trunk/classes/Topics.php#L1702",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpforo/trunk/wpforo.php#L1077",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3459801/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4c447dbb-f8fb-4b46-9c47-20ab7330bbaa?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24834",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T17:24:49.823",
      "lastModified" : "2026-02-23T20:15:54.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM ultimately achieving arbitrary code execution as root in said VM. The current understanding is this doesn’t impact the security of the Host or of other containers / VMs running on that Host (note that arm64 QEMU lacks NVDIMM read-only support: It is believed that until the upstream QEMU gains this capability, a guest write could reach the image file). Version 3.27.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Kata Containers es un proyecto de código abierto centrado en una implementación estándar de Máquinas Virtuales (VMs) ligeras que se comportan como contenedores. En versiones anteriores a la 3.27.0, un problema en Kata con Cloud Hypervisor permite a un usuario del contenedor modificar el sistema de archivos utilizado por la micro VM Invitada, logrando en última instancia la ejecución de código arbitrario como root en dicha VM. El entendimiento actual es que esto no impacta la seguridad del Host o de otros contenedores / VMs ejecutándose en ese Host (tenga en cuenta que QEMU arm64 carece de soporte de solo lectura NVDIMM: Se cree que hasta que el QEMU upstream obtenga esta capacidad, una escritura de invitado podría alcanzar el archivo de imagen). La versión 3.27.0 parchea el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:katacontainers:kata_containers:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.27.0",
            "matchCriteriaId" : "4068400A-D420-4511-8155-8927AFD44E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kata-containers/kata-containers/commit/6a672503973bf7c687053e459bfff8a9652e16bf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kata-containers/kata-containers/releases/tag/3.27.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-wwj6-vghv-5p64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25998",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T17:24:50.127",
      "lastModified" : "2026-02-23T19:36:48.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strongMan encrypts the corresponding database fields. So far it used AES in CTR mode with a global database key. Together with an initialization vector (IV), a key stream is generated to encrypt the data in the database fields. But because strongMan did not generate individual IVs, every database field was encrypted using the same key stream. An attacker that has access to the database can use this to recover the encrypted credentials. In particular, because certificates, which have to be considered public information, are also encrypted using the same mechanism, an attacker can directly recover a large chunk of the key stream, which allows them to decrypt basically all other secrets especially ECDSA private keys and EAP secrets, which are usually a lot shorter. Version 0.2.0 fixes the issue by switching to AES-GCM-SIV encryption with a random nonce and an individually derived encryption key, using HKDF, for each encrypted value. Database migrations are provided to automatically re-encrypt all credentials."
      }, {
        "lang" : "es",
        "value" : "strongMan es una interfaz de gestión para strongSwan, una VPN de código abierto basada en IPsec. Al almacenar credenciales en la base de datos (claves privadas, secretos EAP), strongMan cifra los campos de la base de datos correspondientes. Hasta ahora utilizaba AES en modo CTR con una clave de base de datos global. Junto con un vector de inicialización (IV), se genera un flujo de claves para cifrar los datos en los campos de la base de datos. Pero debido a que strongMan no generaba IVs individuales, cada campo de la base de datos fue cifrado utilizando el mismo flujo de claves. Un atacante que tiene acceso a la base de datos puede usar esto para recuperar las credenciales cifradas. En particular, debido a que los certificados, que deben considerarse información pública, también son cifrados utilizando el mismo mecanismo, un atacante puede recuperar directamente una gran parte del flujo de claves, lo que les permite descifrar básicamente todos los demás secretos, especialmente las claves privadas ECDSA y los secretos EAP, que suelen ser mucho más cortos. La versión 0.2.0 soluciona el problema al cambiar al cifrado AES-GCM-SIV con un nonce aleatorio y una clave de cifrado derivada individualmente, utilizando HKDF, para cada valor cifrado. Se proporcionan migraciones de base de datos para volver a cifrar automáticamente todas las credenciales."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        }, {
          "lang" : "en",
          "value" : "CWE-1204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongman:0.1.0:*:*:*:*:python:*:*",
            "matchCriteriaId" : "92188FAE-6D6C-483E-B5BD-4E0EE4743F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strongswan/strongMan/security/advisories/GHSA-88w4-jv97-c8xr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26016",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T17:24:50.293",
      "lastModified" : "2026-02-20T19:08:53.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.1, a missing authorization check in multiple controllers allows any user with access to a node secret token to fetch information about any server on a Pterodactyl instance, even if that server is associated with a different node. This issue stems from missing logic to verify that the node requesting server data is the same node that the server is associated with. Any authenticated Wings node can retrieve server installation scripts (potentially containing secret values) and manipulate the installation status of servers belonging to other nodes. Wings nodes may also manipulate the transfer status of servers belonging to other nodes. This vulnerability requires a user to acquire a secret access token for a node. Unless a user gains access to a Wings secret access token they would not be able to access any of these vulnerable endpoints, as every endpoint requires a valid node access token. A single compromised Wings node daemon token (stored in plaintext at `/etc/pterodactyl/config.yml`) grants access to sensitive configuration data of every server on the panel, rather than only to servers that the node has access to. An attacker can use this information to move laterally through the system, send excessive notifications, destroy server data on other nodes, and otherwise exfiltrate secrets that they should not have access to with only a node token. Additionally, triggering a false transfer success causes the panel to delete the server from the source node, resulting in permanent data loss. Users should upgrade to version 1.12.1 to receive a fix."
      }, {
        "lang" : "es",
        "value" : "Wings es el plano de control del servidor para Pterodactyl, un panel de gestión de servidores de juegos gratuito y de código abierto. Antes de la versión 1.12.1, una falta de verificación de autorización en múltiples controladores permite a cualquier usuario con acceso a un token secreto de nodo obtener información sobre cualquier servidor en una instancia de Pterodactyl, incluso si ese servidor está asociado con un nodo diferente. Este problema se deriva de la falta de lógica para verificar que el nodo que solicita datos del servidor es el mismo nodo con el que está asociado el servidor. Cualquier nodo Wings autenticado puede recuperar scripts de instalación de servidores (que potencialmente contienen valores secretos) y manipular el estado de instalación de servidores pertenecientes a otros nodos. Los nodos Wings también pueden manipular el estado de transferencia de servidores pertenecientes a otros nodos. Esta vulnerabilidad requiere que un usuario adquiera un token de acceso secreto para un nodo. A menos que un usuario obtenga acceso a un token de acceso secreto de Wings, no podría acceder a ninguno de estos puntos finales vulnerables, ya que cada punto final requiere un token de acceso de nodo válido. Un único token de demonio de nodo Wings comprometido (almacenado en texto plano en '/etc/pterodactyl/config.yml') otorga acceso a datos de configuración sensibles de cada servidor en el panel, en lugar de solo a los servidores a los que el nodo tiene acceso. Un atacante puede usar esta información para moverse lateralmente a través del sistema, enviar notificaciones excesivas, destruir datos de servidores en otros nodos y, de otro modo, exfiltrar secretos a los que no debería tener acceso con solo un token de nodo. Además, activar un éxito de transferencia falso hace que el panel elimine el servidor del nodo de origen, lo que resulta en una pérdida permanente de datos. Los usuarios deben actualizar a la versión 1.12.1 para recibir una solución."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-283"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:panel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12.1",
            "matchCriteriaId" : "57849D30-EFC2-47CA-9018-240B563977DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pterodactyl/panel/releases/tag/v1.12.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pterodactyl/panel/security/advisories/GHSA-g7vw-f8p5-c728",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26030",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T17:24:50.487",
      "lastModified" : "2026-03-03T16:32:10.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios."
      }, {
        "lang" : "es",
        "value" : "Semantic Kernel, el SDK de Python de kernel semántico de Microsoft, tiene una vulnerabilidad de ejecución remota de código en versiones anteriores a la 1.39.4, específicamente dentro de la funcionalidad de filtro de 'InMemoryVectorStore'. El problema ha sido solucionado en la versión 'python-1.39.4'. Los usuarios deberían actualizar a esta versión o una superior. Como solución alternativa, evite usar 'InMemoryVectorStore' para escenarios de producción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:semantic_kernel:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.39.4",
            "matchCriteriaId" : "C6E2587D-AC15-4660-BC94-3B2D03FD88E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microsoft/semantic-kernel/pull/13505",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26336",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T17:24:50.943",
      "lastModified" : "2026-03-03T16:37:14.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the \"/share/page/resource/\" endpoint, thus leading to the disclosure of sensitive configuration files."
      }, {
        "lang" : "es",
        "value" : "Hyland Alfresco permite a atacantes no autenticados leer archivos arbitrarios de directorios protegidos (como WEB-INF) a través del endpoint '/share/page/resource/', lo que lleva a la divulgación de archivos de configuración sensibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_content_services:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "25.3",
            "matchCriteriaId" : "73D56A86-3F59-4DC1-AD37-29AB25F5C1D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_content_services:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.4.2.5",
            "matchCriteriaId" : "3BA4C72B-BE8E-49FD-92B2-7FBBA8BBCD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_content_services:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.1",
            "versionEndIncluding" : "23.6.0",
            "matchCriteriaId" : "79BCECD6-BFBA-4259-B53D-132EEFF6C51A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_content_services:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.1",
            "versionEndIncluding" : "25.2",
            "matchCriteriaId" : "71EB1048-3C50-40DF-89A0-502984FA642D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://connect.hyland.com/t5/alfresco-blog/cve-2026-26336-unauthenticated-arbitrary-file-read-in-alfresco/ba-p/496550",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hyland.com/en/solutions/products/alfresco-platform",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/hyland-alfresco-improper-authorization-arbitrary-file-read",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2232",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-19T17:24:51.763",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Product Table and List Builder for WooCommerce Lite plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and including, 4.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Product Table y List Builder para WooCommerce Lite para WordPress es vulnerable a inyección SQL basada en tiempo a través del parámetro 'search' en todas las versiones hasta la, e incluyendo, la 4.6.2 debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes no autenticados añadan consultas SQL adicionales en consultas ya existentes que pueden utilizarse para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-product-table-lite/tags/4.6.2/search.php#L549",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-product-table-lite/tags/4.6.2/search.php#L574",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-product-table-lite/tags/4.6.2/search.php#L598",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-product-table-lite/trunk/search.php#L549",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-product-table-lite/trunk/search.php#L574",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wc-product-table-lite/trunk/search.php#L598",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3457877/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f2891f3d-9081-4a9f-8408-2373ce1d0306?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23604",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:54.423",
      "lastModified" : "2026-02-20T17:32:18.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Keyword Filtering rule creation workflow. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$TXB_RuleName parameter to /MailEssentials/pages/MailSecurity/contentchecking.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "GFI MailEssentials AI versiones anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en el flujo de trabajo de creación de reglas de filtrado de palabras clave. Un usuario autenticado puede proporcionar HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$TXB_RuleName a /MailEssentials/pages/MailSecurity/contentchecking.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-keyword-filtering-rule-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23605",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:54.600",
      "lastModified" : "2026-02-20T17:30:35.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Attachment Filtering rule creation workflow. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$TXB_RuleName parameter to /MailEssentials/pages/MailSecurity/attachmentchecking.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en el flujo de trabajo de creación de reglas de filtrado de adjuntos. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$TXB_RuleName a /MailEssentials/pages/MailSecurity/attachmentchecking.aspx, que se almacena y se renderiza posteriormente en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-attachment-filtering-rule-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23606",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:54.760",
      "lastModified" : "2026-02-20T17:30:27.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Advanced Content Filtering rule creation workflow. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtRuleName parameter to /MailEssentials/pages/MailSecurity/advancedfiltering.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en el flujo de trabajo de creación de reglas de Filtrado Avanzado de Contenido. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$txtRuleName a /MailEssentials/pages/MailSecurity/advancedfiltering.aspx, que se almacena y posteriormente se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-advanced-content-filtering-rule-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23607",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:54.917",
      "lastModified" : "2026-02-20T17:30:18.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spam Whitelist management interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtDescription parameter to /MailEssentials/pages/MailSecurity/Whitelist.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la interfaz de gestión de la lista blanca de correo no deseado. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$txtDescription a /MailEssentials/pages/MailSecurity/Whitelist.aspx, que se almacena y posteriormente se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-whitelist-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23608",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:55.083",
      "lastModified" : "2026-02-20T17:30:10.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Mail Monitoring rule creation endpoint. An authenticated user can supply HTML/JavaScript in the JSON \\\"name\\\" field to /MailEssentials/pages/MailSecurity/MailMonitoring.aspx/Save, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en el endpoint de creación de reglas de Monitorización de Correo. Un usuario autenticado puede introducir HTML/JavaScript en el campo 'name' de JSON a /MailEssentials/pages/MailSecurity/MailMonitoring.aspx/Save, que se almacena y posteriormente se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-email-management-mail-monitoring-rule-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23609",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:55.387",
      "lastModified" : "2026-02-20T17:29:57.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Perimeter SMTP Servers configuration page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv3$txtDescription parameter to /MailEssentials/pages/MailSecurity/PerimeterSMTPServers.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la página de configuración de Servidores SMTP Perimetrales. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv3$txtDescription a /MailEssentials/pages/MailSecurity/PerimeterSMTPServers.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-general-settings-perimeter-smtp-servers-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23610",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:55.590",
      "lastModified" : "2026-02-20T17:29:47.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the POP2Exchange configuration endpoint. An authenticated user can supply HTML/JavaScript in the POP3 server login field within the JSON \\\"popServers\\\" payload to /MailEssentials/pages/MailSecurity/POP2Exchange.aspx/Save, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en el endpoint de configuración de POP2Exchange. Un usuario autenticado puede introducir HTML/JavaScript en el campo de inicio de sesión del servidor POP3 dentro del payload JSON 'popServers' a /MailEssentials/pages/MailSecurity/POP2Exchange.aspx/Save, el cual se almacena y se renderiza posteriormente en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-pop2exchange-pop3-server-login-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23611",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:55.763",
      "lastModified" : "2026-02-20T17:29:36.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP Blocklist management page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtIPDescription parameter to /MailEssentials/pages/MailSecurity/ipblocklist.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la página de gestión de la lista de bloqueo de IP. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$txtIPDescription a /MailEssentials/pages/MailSecurity/ipblocklist.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-ip-blocklist-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23612",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:55.953",
      "lastModified" : "2026-02-20T17:29:28.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP DNS Blocklist configuration page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$TXB_IPs parameter to /MailEssentials/pages/MailSecurity/ipdnsblocklist.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la página de configuración de la lista de bloqueo de IP DNS. Un usuario autenticado puede proporcionar HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$TXB_IPs a /MailEssentials/pages/MailSecurity/ipdnsblocklist.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-ip-dns-blocklist-domain-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23613",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:56.123",
      "lastModified" : "2026-02-20T17:29:21.387",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the URI DNS Blocklist configuration page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$TXB_URIs parameter to /MailEssentials/pages/MailSecurity/uridnsblocklist.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la página de configuración de la lista de bloqueo DNS de URI. Un usuario autenticado puede proporcionar HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv1$TXB_URIs a /MailEssentials/pages/MailSecurity/uridnsblocklist.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-uri-dns-blocklist-domain-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23614",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:56.323",
      "lastModified" : "2026-02-20T17:29:13.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework IP Exceptions interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv2$txtIPDescription parameter to /MailEssentials/pages/MailSecurity/SenderPolicyFramework.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la interfaz de Excepciones de IP del Sender Policy Framework. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv2$txtIPDescription a /MailEssentials/pages/MailSecurity/SenderPolicyFramework.aspx, que se almacena y se renderiza posteriormente en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-sender-policy-framework-ip-exceptions-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23615",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:56.960",
      "lastModified" : "2026-02-20T17:29:05.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework Email Exceptions interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv4$txtEmailDescription parameter to /MailEssentials/pages/MailSecurity/SenderPolicyFramework.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenada en la interfaz de Excepciones de Correo Electrónico del Sender Policy Framework. Un usuario autenticado puede proporcionar HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pv4$txtEmailDescription a /MailEssentials/pages/MailSecurity/SenderPolicyFramework.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario que ha iniciado sesión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-sender-policy-framework-email-exceptions-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23616",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:57.227",
      "lastModified" : "2026-02-20T17:28:51.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spoofing configuration page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$AntiSpoofingGeneral1$TxtSmtpDesc parameter to /MailEssentials/pages/MailSecurity/AntiSpoofing.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenada en la página de configuración de Anti-Spoofing. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$AntiSpoofingGeneral1$TxtSmtpDesc a /MailEssentials/pages/MailSecurity/AntiSpoofing.aspx, que se almacena y se renderiza posteriormente en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-anti-spoofing-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23617",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:57.417",
      "lastModified" : "2026-02-20T17:28:16.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Body) conditions interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pvGeneral$TXB_Condition parameter to /MailEssentials/pages/MailSecurity/ASKeywordChecking.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "GFI MailEssentials AI versiones anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la interfaz de condiciones de Comprobación de Palabras Clave de Correo no Deseado (Cuerpo). Un usuario autenticado puede proporcionar HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pvGeneral$TXB_Condition a /MailEssentials/pages/MailSecurity/ASKeywordChecking.aspx, que se almacena y luego se renderiza en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-spam-keyword-checking-body-condition-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23618",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:57.603",
      "lastModified" : "2026-02-20T17:27:59.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Subject) conditions interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pvSubject$TXB_SubjectCondition parameter to /MailEssentials/pages/MailSecurity/ASKeywordChecking.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenada en la interfaz de condiciones de Comprobación de Palabras Clave de Correo no Deseado (Asunto). Un usuario autenticado puede proporcionar HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$pvSubject$TXB_SubjectCondition a /MailEssentials/pages/MailSecurity/ASKeywordChecking.aspx, que se almacena y luego se renderiza en la interfaz de administración, permitiendo la ejecución de scripts en el contexto de un usuario que ha iniciado sesión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-anti-spam-spam-keyword-checking-subject-condition-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23619",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:57.777",
      "lastModified" : "2026-02-20T17:22:28.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Local Domains settings page. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$Pv3$txtDescription parameter to /MailEssentials/pages/MailSecurity/general.aspx, which is stored and later rendered in the management interface, allowing script execution in the context of a logged-in user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de cross-site scripting almacenado en la página de configuración de Dominios Locales. Un usuario autenticado puede introducir HTML/JavaScript en el parámetro ctl00$ContentPlaceHolder1$Pv3$txtDescription a /MailEssentials/pages/MailSecurity/general.aspx, que se almacena y se renderiza posteriormente en la interfaz de gestión, permitiendo la ejecución de scripts en el contexto de un usuario con sesión iniciada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-general-settings-local-domains-domain-description-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23620",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:57.973",
      "lastModified" : "2026-02-20T17:22:08.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain an arbitrary file existence enumeration vulnerability in the ListServer.IsDBExist() web method exposed at /MailEssentials/pages/MailSecurity/ListServer.aspx/IsDBExist. An authenticated user can supply an unrestricted filesystem path via the JSON key \\\"path\\\", which is URL-decoded and passed to File.Exists(), allowing the attacker to determine whether arbitrary files exist on the server."
      }, {
        "lang" : "es",
        "value" : "GFI MailEssentials AI versiones anteriores a la 22.4 contienen una vulnerabilidad de enumeración de existencia de archivos arbitrarios en el método web ListServer.IsDBExist() expuesto en /MailEssentials/pages/MailSecurity/ListServer.aspx/IsDBExist. Un usuario autenticado puede proporcionar una ruta de sistema de archivos sin restricciones a través de la clave JSON 'path', que es decodificada por URL y pasada a File.Exists(), permitiendo al atacante determinar si existen archivos arbitrarios en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-listserver-isdbexist-absolute-directory-traversal-to-file-enumeration",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26337",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:59.730",
      "lastModified" : "2026-03-02T22:03:57.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal."
      }, {
        "lang" : "es",
        "value" : "El Servicio de Transformación Hyland Alfresco permite a atacantes no autenticados lograr tanto la lectura arbitraria de archivos como la falsificación de petición del lado del servidor a través del salto de ruta absoluto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "1AFF4310-3BA6-40A0-8609-388233D68447"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.0",
            "matchCriteriaId" : "C0151795-79BD-4D1C-AD6D-92AA77AF3200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_core:5.3.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C234CF3-DCAF-4A0C-93B5-82BFFE7EF5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://connect.hyland.com/t5/alfresco-blog/security-update-cve-2026-26337-cve-2026-26338-cve-2026-26339/ba-p/496551",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hyland.com/en/solutions/products/alfresco-platform",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/hyland-alfresco-transformation-service-absolute-path-traversal-arbitrary-file-read-and-ssrf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26338",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:24:59.930",
      "lastModified" : "2026-03-02T22:03:53.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality."
      }, {
        "lang" : "es",
        "value" : "Hyland Alfresco Transformation Service permite a atacantes no autenticados lograr falsificación de petición del lado del servidor (SSRF) a través de la funcionalidad de procesamiento de documentos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "1AFF4310-3BA6-40A0-8609-388233D68447"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.0",
            "matchCriteriaId" : "C0151795-79BD-4D1C-AD6D-92AA77AF3200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_core:5.3.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C234CF3-DCAF-4A0C-93B5-82BFFE7EF5AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://connect.hyland.com/t5/alfresco-blog/security-update-cve-2026-26337-cve-2026-26338-cve-2026-26339/ba-p/496551",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hyland.com/en/solutions/products/alfresco-platform",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/hyland-alfresco-transformation-service-ssrf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26339",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T18:25:00.133",
      "lastModified" : "2026-03-02T22:07:07.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality."
      }, {
        "lang" : "es",
        "value" : "Hyland Alfresco Transformation Service permite a atacantes no autenticados lograr ejecución remota de código a través de la vulnerabilidad de inyección de argumentos, que existe en la funcionalidad de procesamiento de documentos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.3",
            "matchCriteriaId" : "071BB562-3270-4D05-A345-3A3719DB0AA3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyland:alfresco_transform_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.4",
            "matchCriteriaId" : "80D47CD5-CCAA-469A-BC84-7D1ACABBA4B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://connect.hyland.com/t5/alfresco-blog/security-update-cve-2026-26337-cve-2026-26338-cve-2026-26339/ba-p/496551",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hyland.com/en/solutions/products/alfresco-platform",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/hyland-alfresco-transformation-service-argument-injection-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2243",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-19T18:25:00.337",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS)."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en QEMU. Una imagen VMDK especialmente diseñada podría desencadenar una vulnerabilidad de lectura fuera de límites, lo que podría llevar a una fuga de 12 bytes de información sensible o a una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-2243",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440934",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2409",
      "sourceIdentifier" : "1443cd92-d354-46d2-9290-d812316ca43a",
      "published" : "2026-02-19T18:25:00.633",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: before 25.2 HF1."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Neutralización Inadecuada de Elementos Especiales utilizados en un Comando SQL ('inyección SQL') en Delinea Cloud Suite permite la Inyección de Argumentos. Este problema afecta a Cloud Suite: antes de 25.2 HF1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "1443cd92-d354-46d2-9290-d812316ca43a",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "1443cd92-d354-46d2-9290-d812316ca43a",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://delinea.com/security-advisories",
        "source" : "1443cd92-d354-46d2-9290-d812316ca43a"
      }, {
        "url" : "https://docs.delinea.com/online-help/cloud-suite/release-notes/cloud-suite/25.2.htm#Resolved",
        "source" : "1443cd92-d354-46d2-9290-d812316ca43a"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2817",
      "sourceIdentifier" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
      "published" : "2026-02-19T18:25:00.983",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data."
      }, {
        "lang" : "es",
        "value" : "Uso de directorio inseguro en la importación de instantáneas de Spring Data Geode extrae archivos en directorios predecibles y permisivos bajo la ubicación temporal del sistema. En hosts compartidos, un usuario local con privilegios básicos puede acceder al contenido de la instantánea extraída de otro usuario, lo que lleva a una exposición no intencionada de datos de caché."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-379"
        }, {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.herodevs.com/vulnerability-directory/cve-2026-2817",
        "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23621",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T19:22:28.203",
      "lastModified" : "2026-02-20T17:21:44.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI MailEssentials AI versions prior to 22.4 contain an arbitrary directory existence enumeration vulnerability in the ListServer.IsPathExist() web method exposed at /MailEssentials/pages/MailSecurity/ListServer.aspx/IsPathExist. An authenticated user can supply an unrestricted filesystem path via the JSON key \\\"path\\\", which is URL-decoded and passed to Directory.Exists(), allowing the attacker to determine whether arbitrary directories exist on the server."
      }, {
        "lang" : "es",
        "value" : "Las versiones de GFI MailEssentials AI anteriores a la 22.4 contienen una vulnerabilidad de enumeración de existencia de directorios arbitrarios en el método web ListServer.IsPathExist() expuesto en /MailEssentials/pages/MailSecurity/ListServer.aspx/IsPathExist. Un usuario autenticado puede proporcionar una ruta de sistema de archivos sin restricciones a través de la clave JSON 'path', que se decodifica por URL y se pasa a Directory.Exists(), permitiendo al atacante determinar si existen directorios arbitrarios en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.4",
            "matchCriteriaId" : "590491F7-F669-445A-84D8-9066DBFEA0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/gfi-mailessentials-ai-listserver-ispathexist-absolute-directory-traversal-to-file-enumeration",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26057",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T19:22:29.537",
      "lastModified" : "2026-02-26T02:56:08.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skill Scanner is a security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. A vulnerability in the API Server of Skill Scanner could allow a unauthenticated, remote attacker to interact with the server API and either trigger a denial of service (DoS) condition or upload arbitrary files. This vulnerability is due to an erroneous binding to multiple interfaces. An attacker could exploit this vulnerability by sending API requests to a device exposing the affected API Server. A successful exploit could allow the attacker to consume an excessive amount of resources (memory starvation) or to upload files to arbitrary folders on the affected device. This vulnerability affects Skill-scanner 1.0.1 and earlier releases when the API Server is enabled. The API Server is not enabled by default. Skill-scanner software releases 1.0.2 and later contain the fix for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Skill Scanner es un escáner de seguridad para Habilidades de Agentes de IA que detecta inyección de prompts, exfiltración de datos y patrones de código malicioso. Una vulnerabilidad en el API Server de Skill Scanner podría permitir a un atacante remoto no autenticado interactuar con la API del servidor y o bien desencadenar una condición de denegación de servicio (DoS) o cargar archivos arbitrarios. Esta vulnerabilidad se debe a una vinculación errónea a múltiples interfaces. Un atacante podría explotar esta vulnerabilidad enviando solicitudes de API a un dispositivo que expone el API Server afectado. Un exploit exitoso podría permitir al atacante consumir una cantidad excesiva de recursos (agotamiento de memoria) o cargar archivos en carpetas arbitrarias en el dispositivo afectado. Esta vulnerabilidad afecta a Skill-scanner 1.0.1 y versiones anteriores cuando el API Server está habilitado. El API Server no está habilitado por defecto. Las versiones de software de Skill-scanner 1.0.2 y posteriores contienen la corrección para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:skill_scanner:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "7C5695DF-C090-4D35-85DA-39F2FE44B879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisco-ai-defense/skill-scanner/commit/1e35e57f3051ecc89ba845ae7206321c8eac20a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cisco-ai-defense/skill-scanner/security/advisories/GHSA-ppfx-73j5-fhxc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26059",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T19:22:29.693",
      "lastModified" : "2026-02-20T19:07:03.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM is an open-source church management system. In versions prior to 6.8.2, it was possible for an authenticated user with permission to edit groups to store a JavaScript payload that would execute when the group was viewed in the Group View. Version 6.8.2 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "ChurchCRM es un sistema de gestión de iglesias de código abierto. En versiones anteriores a la 6.8.2, era posible para un usuario autenticado con permiso para editar grupos almacenar una carga útil de JavaScript que se ejecutaría cuando el grupo era visualizado en la Vista de Grupo. La versión 6.8.2 corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.2",
            "matchCriteriaId" : "00C6D5C2-8359-49E6-BF7B-EBBC361EF707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-3wp4-vpr7-47q6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27472",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T19:22:30.187",
      "lastModified" : "2026-02-24T19:45:15.137",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the private area. When editing a syndicated site, the application does not verify that the syndication URL is a valid remote URL, allowing an authenticated attacker to make the server issue requests to arbitrary internal or external destinations. This vulnerability is not mitigated by the SPIP security screen."
      }, {
        "lang" : "es",
        "value" : "SPIP anterior a la versión 4.4.9 permite la Falsificación de Petición del Lado del Servidor Ciega (SSRF) a través de sitios sindicados en el área privada. Al editar un sitio sindicado, la aplicación no verifica que la URL de sindicación sea una URL remota válida, lo que permite a un atacante autenticado hacer que el servidor emita peticiones a destinos internos o externos arbitrarios. Esta vulnerabilidad no es mitigada por la pantalla de seguridad de SPIP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.9",
            "matchCriteriaId" : "1590B61F-3E4B-4634-849E-E46C8BD6AA93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-9.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-blind-server-side-request-forgery-via-syndicated-sites",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27473",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T19:22:30.363",
      "lastModified" : "2026-02-24T19:44:24.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.4.9 allows Stored Cross-Site Scripting (XSS) via syndicated sites in the private area. The #URL_SYNDIC output is not properly sanitized on the private syndicated site page, allowing an attacker who can set a malicious syndication URL to inject persistent scripts that execute when other administrators view the syndicated site details."
      }, {
        "lang" : "es",
        "value" : "SPIP anterior a 4.4.9 permite Cross-Site Scripting Almacenado (XSS) a través de sitios sindicados en el área privada. La salida #URL_SYNDIC no se sanea correctamente en la página privada del sitio sindicado, permitiendo a un atacante que puede establecer una URL de sindicación maliciosa inyectar scripts persistentes que se ejecutan cuando otros administradores ven los detalles del sitio sindicado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.9",
            "matchCriteriaId" : "1590B61F-3E4B-4634-849E-E46C8BD6AA93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-9.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-stored-cross-site-scripting-via-syndicated-sites",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27474",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T19:22:30.540",
      "lastModified" : "2026-03-02T15:16:36.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.4.9 allows Cross-Site Scripting (XSS) in the private area, complementing an incomplete fix from SPIP 4.4.8. The echappe_anti_xss() function was not systematically applied to input, form, button, and anchor (a) HTML tags, allowing an attacker to inject malicious scripts through these elements. This vulnerability is not mitigated by the SPIP security screen."
      }, {
        "lang" : "es",
        "value" : "SPIP anterior a la versión 4.4.9 permite cross-site scripting (XSS) en el área privada, complementando una corrección incompleta de SPIP 4.4.8. La función echappe_anti_xss() no se aplicó sistemáticamente a las etiquetas HTML input, form, button y anchor (a), permitiendo a un atacante inyectar scripts maliciosos a través de estos elementos. Esta vulnerabilidad no es mitigada por la pantalla de seguridad de SPIP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.9",
            "matchCriteriaId" : "1590B61F-3E4B-4634-849E-E46C8BD6AA93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-9.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-cross-site-scripting-in-private-area-incomplete-fix",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27475",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T19:22:30.720",
      "lastModified" : "2026-02-24T19:37:54.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.4.9 allows Insecure Deserialization in the public area through the table_valeur filter and the DATA iterator, which accept serialized data. An attacker who can place malicious serialized content (a pre-condition requiring prior access or another vulnerability) can trigger arbitrary object instantiation and potentially achieve code execution. The use of serialized data in these components has been deprecated and will be removed in SPIP 5. This vulnerability is not mitigated by the SPIP security screen."
      }, {
        "lang" : "es",
        "value" : "SPIP anterior a 4.4.9 permite la deserialización insegura en el área pública a través del filtro table_valeur y el iterador DATA, que aceptan datos serializados. Un atacante que puede colocar contenido serializado malicioso (una precondición que requiere acceso previo u otra vulnerabilidad) puede desencadenar la instanciación arbitraria de objetos y potencialmente lograr la ejecución de código. El uso de datos serializados en estos componentes ha sido desaprobado y será eliminado en SPIP 5. Esta vulnerabilidad no es mitigada por la pantalla de seguridad de SPIP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.9",
            "matchCriteriaId" : "1590B61F-3E4B-4634-849E-E46C8BD6AA93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-9.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-insecure-deserialization",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26063",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:41.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CediPay is a crypto-to-fiat app for the Ghanaian market. A vulnerability in CediPay prior to version 1.2.3 allows attackers to bypass input validation in the transaction API. The issue has been fixed in version 1.2.3. If upgrading is not immediately possible, restrict API access to trusted networks or IP ranges; enforce strict input validation at the application layer; and/or monitor transaction logs for anomalies or suspicious activity. These mitigations reduce exposure but do not fully eliminate the vulnerability."
      }, {
        "lang" : "es",
        "value" : "CediPay es una aplicación de cripto a fiat para el mercado ghanés. Una vulnerabilidad en CediPay anterior a la versión 1.2.3 permite a los atacantes eludir la validación de entrada en la API de transacciones. El problema ha sido solucionado en la versión 1.2.3. Si la actualización no es posible de inmediato, restrinja el acceso a la API a redes de confianza o rangos de IP; aplique una validación de entrada estricta en la capa de aplicación; y/o supervise los registros de transacciones en busca de anomalías o actividad sospechosa. Estas mitigaciones reducen la exposición, pero no eliminan por completo la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xpertforextradeinc/CediPay/security/advisories/GHSA-wvr6-395c-5pxr",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26189",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:42.120",
      "lastModified" : "2026-02-26T02:55:00.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trivy Action runs Trivy as GitHub action to scan a Docker container image for vulnerabilities. A command injection vulnerability exists in `aquasecurity/trivy-action` versions 0.31.0 through 0.33.1 due to improper handling of action inputs when exporting environment variables. The action writes `export VAR=<input>` lines to `trivy_envs.txt` based on user-supplied inputs and subsequently sources this file in `entrypoint.sh`. Because input values are written without appropriate shell escaping, attacker-controlled input containing shell metacharacters (e.g., `$(...)`, backticks, or other command substitution syntax) may be evaluated during the sourcing process. This can result in arbitrary command execution within the GitHub Actions runner context. Version 0.34.0 contains a patch for this issue. The vulnerability is exploitable when a consuming workflow passes attacker-controlled data into any action input that is written to `trivy_envs.txt`. Access to user input is required by the malicious actor. Workflows that do not pass attacker-controlled data into `trivy-action` inputs, workflows that upgrade to a patched version that properly escapes shell values or eliminates the `source ./trivy_envs.txt` pattern, and workflows where user input is not accessible are not affected."
      }, {
        "lang" : "es",
        "value" : "Trivy Action ejecuta Trivy como acción de GitHub para escanear una imagen de contenedor Docker en busca de vulnerabilidades. Una vulnerabilidad de inyección de comandos existe en las versiones 0.31.0 a 0.33.1 de `aquasecurity/trivy-action` debido a un manejo inadecuado de las entradas de la acción al exportar variables de entorno. La acción escribe líneas 'export VAR=' en `trivy_envs.txt` basándose en entradas proporcionadas por el usuario y posteriormente carga este archivo en `entrypoint.sh`. Debido a que los valores de entrada se escriben sin el escape de shell adecuado, la entrada controlada por el atacante que contiene metacaracteres de shell (por ejemplo, '$(...)', comillas invertidas u otra sintaxis de sustitución de comandos) puede ser evaluada durante el proceso de carga. Esto puede resultar en la ejecución arbitraria de comandos dentro del contexto del ejecutor de GitHub Actions. La versión 0.34.0 contiene un parche para este problema. La vulnerabilidad es explotable cuando un flujo de trabajo consumidor pasa datos controlados por el atacante a cualquier entrada de acción que se escriba en `trivy_envs.txt`. Se requiere acceso a la entrada del usuario por parte del actor malicioso. Los flujos de trabajo que no pasan datos controlados por el atacante a las entradas de `trivy-action`, los flujos de trabajo que se actualizan a una versión parcheada que escapa correctamente los valores de shell o elimina el patrón 'source ./trivy_envs.txt', y los flujos de trabajo donde la entrada del usuario no es accesible no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aquasec:trivy_action:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.31.0",
            "versionEndExcluding" : "0.34.1",
            "matchCriteriaId" : "BD6A33D0-39BB-4094-8074-8D47D2C1F437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aquasecurity/trivy-action/commit/7aca5acc9500b463826cc47a47a65ad7d404b045",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aquasecurity/trivy-action/commit/bc61dc55704e2d5704760f3cdab0d09acf16e4ca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aquasecurity/trivy-action/security/advisories/GHSA-9p44-j4g5-cfx5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26192",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:42.290",
      "lastModified" : "2026-02-20T20:17:25.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the `html` property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML, and render them in an iFrame when the citation is previewed. This allows stored XSS via a weaponized document payload in a chat. The payload also executes when the citation is viewed on a shared chat. Version 0.7.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Open WebUI es una plataforma de inteligencia artificial autoalojada diseñada para operar completamente sin conexión. Antes de la versión 0.7.0, la modificación manual del historial de chat permite establecer la propiedad 'html' dentro de los metadatos del documento. Esto hace que el frontend entre en una ruta de código que trata el contenido del documento como HTML y los renderiza en un iFrame cuando se previsualiza la cita. Esto permite XSS almacenado a través de una carga útil de documento maliciosa en un chat. La carga útil también se ejecuta cuando se visualiza la cita en un chat compartido. La versión 0.7.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.0",
            "matchCriteriaId" : "4AE20317-BF77-4682-9CD1-719E5CAC3373"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-webui/open-webui/blob/6f1486ffd0cb288d0e21f41845361924e0d742b3/src/lib/components/chat/Messages/Citations/CitationModal.svelte#L163-L170",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open-webui/open-webui/security/advisories/GHSA-xc8p-9rr6-97r2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26193",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:42.453",
      "lastModified" : "2026-02-20T20:15:37.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the `embeds` property on a response message, the content of which is loaded into an iFrame with a sandbox that has `allow-scripts` and `allow-same-origin` set, ignoring the \"iframe Sandbox Allow Same Origin\" configuration. This enables stored XSS on the affected chat. This also triggers when the chat is in the shared format. The result is a shareable link containing the payload that can be distributed to any other users on the instance. Version 0.6.44 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Open WebUI es una plataforma de inteligencia artificial autoalojada diseñada para operar totalmente fuera de línea. Antes de la versión 0.6.44, la modificación manual del historial de chat permite establecer la propiedad `embeds` en un mensaje de respuesta, cuyo contenido se carga en un iFrame con una sandbox que tiene `allow-scripts` y `allow-same-origin` configurados, ignorando la configuración 'iframe Sandbox Allow Same Origin'. Esto permite XSS almacenado en el chat afectado. Esto también se activa cuando el chat está en formato compartido. El resultado es un enlace compartible que contiene la carga útil que puede distribuirse a cualquier otro usuario de la instancia. La versión 0.6.44 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.44",
            "matchCriteriaId" : "9B9073E6-F689-4A81-8912-A2A84C694572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-webui/open-webui/blob/6f1486ffd0cb288d0e21f41845361924e0d742b3/src/lib/components/chat/Messages/ResponseMessage.svelte#L689-L703",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/open-webui/open-webui/security/advisories/GHSA-vjm7-m4xh-7wrc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26200",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:42.610",
      "lastModified" : "2026-02-20T20:14:37.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "HDF5 es un software para la gestión de datos. Antes de la versión 1.14.4-2, un atacante que puede controlar un archivo 'h5' analizado por HDF5 puede desencadenar una condición de desbordamiento de búfer de montículo basado en escritura. Esto puede llevar a una condición de denegación de servicio, y potencialmente a problemas adicionales como la ejecución remota de código dependiendo de la explotabilidad práctica del desbordamiento de montículo contra sistemas operativos modernos. La explotabilidad real de este problema en términos de ejecución remota de código es actualmente desconocida. La versión 1.14.4-2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.4.2",
            "matchCriteriaId" : "75A3E09A-12A9-4186-9CA7-F34D0D169F17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HDFGroup/hdf5/security/advisories/GHSA-5p2m-j456-9mr2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26201",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:42.770",
      "lastModified" : "2026-02-26T02:51:06.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger `fatal error: concurrent map read and map write`, causing C2 process crash (availability loss). Version 3.21.2 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "emp3r0r es un C2 diseñado por usuarios de Linux para entornos Linux. Antes de la versión 3.21.2, se acceden a múltiples mapas compartidos sin sincronización consistente entre goroutines. Bajo actividad concurrente, el tiempo de ejecución de Go puede desencadenar 'fatal error: concurrent map read and map write', causando el fallo del proceso C2 (pérdida de disponibilidad). La versión 3.21.2 soluciona este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-663"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jm33-m0:emp3r0r:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21.2",
            "matchCriteriaId" : "6CC7F922-080A-4112-9443-0E0891F9272F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jm33-m0/emp3r0r/commit/ea4d074f081dac6293f3aec38f01def5f08d5af5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jm33-m0/emp3r0r/releases/tag/v3.21.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/jm33-m0/emp3r0r/security/advisories/GHSA-f5p9-j34q-pwcc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26202",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:42.940",
      "lastModified" : "2026-02-20T19:32:49.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Penpot is an open-source design tool for design and code collaboration. Prior to version 2.13.2, an authenticated user can read arbitrary files from the server by supplying a local file path (e.g. `/etc/passwd`) as a font data chunk in the `create-font-variant` RPC endpoint, resulting in the file contents being stored and retrievable as a \"font\" asset. This is an arbitrary file read vulnerability. Any authenticated user with team edit permissions can read arbitrary files accessible to the Penpot backend process on the host filesystem. This can lead to exposure of sensitive system files, application secrets, database credentials, and private keys, potentially enabling further compromise of the server. In containerized deployments, the blast radius may be limited to the container filesystem, but environment variables, mounted secrets, and application configuration are still at risk. Version 2.13.2 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Penpot es una herramienta de diseño de código abierto para la colaboración en el diseño y la programación. Antes de la versión 2.13.2, un usuario autenticado podía leer archivos arbitrarios del servidor proporcionando una ruta de archivo local (por ejemplo, `/etc/ passwd`) como un fragmento de datos de fuente en el punto final RPC `create-font-variant`, lo que daba lugar a que el contenido del archivo se almacenara y pudiera recuperarse como un recurso de «fuente». Se trata de una vulnerabilidad de lectura de archivos arbitrarios. Cualquier usuario autenticado con permisos de edición de equipo puede leer archivos arbitrarios accesibles para el proceso backend de Penpot en el sistema de archivos del host. Esto puede dar lugar a la exposición de archivos sensibles del sistema, secretos de aplicaciones, credenciales de bases de datos y claves privadas, lo que podría comprometer aún más el servidor. En implementaciones en contenedores, el radio de impacto puede limitarse al sistema de archivos del contenedor, pero las variables de entorno, los secretos montados y la configuración de la aplicación siguen estando en riesgo. La versión 2.13.2 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaleidos:penpot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13.2",
            "matchCriteriaId" : "358B3C92-98B8-4D5D-AF7C-9F97AF27F011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/penpot/penpot/commit/06e5825c8a0209889966a4eb5152efd6ff108626",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/penpot/penpot/security/advisories/GHSA-xp3f-g8rq-9px2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26203",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:43.113",
      "lastModified" : "2026-02-20T20:12:31.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "PJSIP es una biblioteca de comunicación multimedia gratuita y de código abierto. Las versiones anteriores a la 2.17 tienen una vulnerabilidad crítica de desbordamiento negativo de búfer de pila en el paquetizador H.264 de PJSIP. El error ocurre al procesar flujos de bits H.264 malformados sin códigos de inicio de unidad NAL, donde el paquetizador realiza aritmética de punteros sin verificar que puede leer de la memoria ubicada antes del búfer asignado. La versión 2.17 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "117AFEC4-36E1-424F-B2A3-6EC94FBBDF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/5aee54f09d4f91538d55279d7316591b28fded6c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-p965-mf7j-gwv8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26205",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:43.263",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opa-envoy-plugun is a plugin to enforce OPA policies with Envoy. Versions prior to 1.13.2-envoy-2 have a vulnerability in how the `input.parsed_path` field is constructed. HTTP request paths are treated as full URIs when parsed; interpreting leading path segments prefixed with double slashes (`//`) as authority components, and therefore dropping them from the parsed path. This creates a path interpretation mismatch between authorization policies and backend servers, enabling attackers to bypass access controls by crafting requests where the authorization filter evaluates a different path than the one ultimately served. Version 1.13.2-envoy-2 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "opa-envoy-plugin es un plugin para aplicar políticas OPA con Envoy. Las versiones anteriores a 1.13.2-envoy-2 tienen una vulnerabilidad en cómo se construye el campo 'input.parsed_path'. Las rutas de solicitud HTTP se tratan como URIs completas al ser analizadas; interpretando los segmentos de ruta iniciales prefijados con barras dobles ('//') como componentes de autoridad, y por lo tanto, eliminándolos de la ruta analizada. Esto crea una falta de coincidencia en la interpretación de la ruta entre las políticas de autorización y los servidores backend, permitiendo a los atacantes eludir los controles de acceso mediante la creación de solicitudes donde el filtro de autorización evalúa una ruta diferente a la que finalmente se sirve. La versión 1.13.2-envoy-2 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-policy-agent/opa-envoy-plugin/commit/58c44d4ec408d5852d1d0287599e7d5c5e2bc5c3",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/open-policy-agent/opa-envoy-plugin/releases/tag/v1.13.2-envoy-2",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/open-policy-agent/opa-envoy-plugin/security/advisories/GHSA-9f29-v6mm-pw6w",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26267",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:43.530",
      "lastModified" : "2026-02-20T19:49:23.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "soroban-sdk is a Rust SDK for Soroban contracts. Prior to versions 22.0.10, 23.5.2, and 25.1.1, the `#[contractimpl]` macro contains a bug in how it wires up function calls. `#[contractimpl]` generates code that uses `MyContract::value()` style calls even when it's processing the trait version. This means if an inherent function is also defined with the same name, the inherent function gets called instead of the trait function. This means the Wasm-exported entry point silently calls the wrong function when two conditions are met simultaneously: First, an `impl Trait for MyContract` block is defined with one or more functions, with `#[contractimpl]` applied. Second, an `impl MyContract` block is defined with one or more identically named functions, without `#[contractimpl]` applied. If the trait version contains important security checks, such as verifying the caller is authorized, that the inherent version does not, those checks are bypassed. Anyone interacting with the contract through its public interface will call the wrong function. The problem is patched in `soroban-sdk-macros` versions 22.0.10, 23.5.2, and 25.1.1. The fix changes the generated call from `<Type>::func()` to `<Type as Trait>::func()` when processing trait implementations, ensuring Rust resolves to the trait associated function regardless of whether an inherent function with the same name exists. Users should upgrade to `soroban-sdk-macros` 22.0.10, 23.5.2, or 25.1.1 and recompile their contracts. If upgrading is not immediately possible, contract developers can avoid the issue by ensuring that no inherent associated function on the contract type shares a name with any function in the trait implementation. Renaming or removing the conflicting inherent function eliminates the ambiguity and causes the macro-generated code to correctly resolve to the trait function."
      }, {
        "lang" : "es",
        "value" : "soroban-sdk es un SDK de Rust para contratos Soroban. Antes de las versiones 22.0.10, 23.5.2 y 25.1.1, la macro `#[contractimpl]` contiene un error en cómo conecta las llamadas a funciones. `#[contractimpl]` genera código que utiliza llamadas al estilo `MyContract::value()` incluso cuando está procesando la versión del trait. Esto significa que si una función inherente también se define con el mismo nombre, se llama a la función inherente en lugar de la función del trait. Esto significa que el punto de entrada exportado por Wasm llama silenciosamente a la función incorrecta cuando se cumplen dos condiciones simultáneamente: Primero, se define un bloque `impl Trait for MyContract` con una o más funciones, con `#[contractimpl]` aplicado. Segundo, se define un bloque `impl MyContract` con una o más funciones con nombres idénticos, sin `#[contractimpl]` aplicado. Si la versión del trait contiene comprobaciones de seguridad importantes, como verificar que el llamador está autorizado, que la versión inherente no tiene, esas comprobaciones se eluden. Cualquiera que interactúe con el contrato a través de su interfaz pública llamará a la función incorrecta. El problema está parcheado en las versiones de `soroban-sdk-macros` 22.0.10, 23.5.2 y 25.1.1. La corrección cambia la llamada generada de `::func()` a `::func()` al procesar implementaciones de traits, asegurando que Rust resuelva a la función asociada del trait independientemente de si existe una función inherente con el mismo nombre. Los usuarios deben actualizar a `soroban-sdk-macros` 22.0.10, 23.5.2 o 25.1.1 y recompilar sus contratos. Si la actualización no es posible de inmediato, los desarrolladores de contratos pueden evitar el problema asegurándose de que ninguna función asociada inherente en el tipo de contrato comparta un nombre con ninguna función en la implementación del trait. Renombrar o eliminar la función inherente en conflicto elimina la ambigüedad y hace que el código generado por la macro se resuelva correctamente a la función del trait."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:rs-soroban-sdk:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "22.0.10",
            "matchCriteriaId" : "05CB12AE-79C0-4E3E-A5DA-B7B4ADF1D6AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:rs-soroban-sdk:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.2",
            "matchCriteriaId" : "7C4E14BA-C772-46BA-BC92-02A07FB8B574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:rs-soroban-sdk:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.1.1",
            "matchCriteriaId" : "AC7DFEC6-FCA8-4319-AB18-85B0E972DD1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stellar/rs-soroban-sdk/commit/e92a3933e5f92dc09da3c740cf6a360d55709a2b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/pull/1729",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/pull/1730",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/pull/1731",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-soroban-sdk/security/advisories/GHSA-4chv-4c6w-w254",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26278",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:43.717",
      "lastModified" : "2026-02-23T19:30:26.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, the XML parser can be forced to do an unlimited amount of entity expansion. With a very small XML input, it’s possible to make the parser spend seconds or even minutes processing a single request, effectively freezing the application. Version 5.3.6 fixes the issue. As a workaround, avoid using DOCTYPE parsing by `processEntities: false` option."
      }, {
        "lang" : "es",
        "value" : "fast-xml-parser permite a los usuarios validar XML, analizar XML a objeto JS, o construir XML desde objeto JS sin bibliotecas basadas en C/C++ y sin callback. En las versiones 4.1.3 a 5.3.5, el analizador XML puede ser forzado a realizar una cantidad ilimitada de expansión de entidades. Con una entrada XML muy pequeña, es posible hacer que el analizador dedique segundos o incluso minutos a procesar una única solicitud, congelando efectivamente la aplicación. La versión 5.3.6 corrige el problema. Como solución alternativa, evite usar el análisis de DOCTYPE mediante la opción 'processEntities: false'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naturalintelligence:fast-xml-parser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.3",
            "versionEndExcluding" : "5.3.6",
            "matchCriteriaId" : "36BABE8E-2E99-48E8-8F1D-2B1CC69D5BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26280",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:43.880",
      "lastModified" : "2026-02-20T20:10:59.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetworks()` function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In `lib/wifi.js`, the `wifiNetworks()` function sanitizes the `iface` parameter on the initial call (line 437). However, when the initial scan returns empty results, a `setTimeout` retry (lines 440-441) calls `getWifiNetworkListIw(iface)` with the **original unsanitized** `iface` value, which is passed directly to `execSync('iwlist ${iface} scan')`. Any application passing user-controlled input to `si.wifiNetworks()` is vulnerable to arbitrary command execution with the privileges of the Node.js process. Version 5.30.8 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "systeminformation es una biblioteca de información del sistema y del SO para node.js. En versiones anteriores a la 5.30.8, una vulnerabilidad de inyección de comandos en la función wifiNetworks() permite a un atacante ejecutar comandos arbitrarios del SO a través de un parámetro de interfaz de red no saneado en la ruta de código de reintento. En lib/wifi.js, la función wifiNetworks() sanea el parámetro iface en la llamada inicial (línea 437). Sin embargo, cuando el escaneo inicial devuelve resultados vacíos, un reintento de setTimeout (líneas 440-441) llama a getWifiNetworkListIw(iface) con el valor iface original no saneado, que se pasa directamente a execSync('iwlist ${iface} scan'). Cualquier aplicación que pasa una entrada controlada por el usuario a si.wifiNetworks() es vulnerable a la ejecución arbitraria de comandos con los privilegios del proceso de Node.js. La versión 5.30.8 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systeminformation:systeminformation:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.30.8",
            "matchCriteriaId" : "7FB14590-E6DA-4F97-9445-43E061CAA080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/22242aa56188f2bffcbd7d265a11e1ebb808b460",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26318",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:44.063",
      "lastModified" : "2026-02-20T19:51:20.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "systeminformation es una biblioteca de información del sistema y del SO para node.js. Las versiones anteriores a la 5.31.0 son vulnerables a inyección de comandos a través de la salida no saneada de 'locate' en 'versions()'. La versión 5.31.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systeminformation:systeminformation:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.31.0",
            "matchCriteriaId" : "809E119A-47CB-4DDB-BB2B-A587E4D50E15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/b67d3715eec881038ccbaace2f2711419ac3e107",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5vv4-hvf7-2h46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27013",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T20:25:44.230",
      "lastModified" : "2026-02-23T19:25:44.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies `escapeXml()` to text content during SVG export (`src/shapes/Text/TextSVGExportMixin.ts:186`) but fails to apply it to other user-controlled string values that are interpolated into SVG attribute markup. When attacker-controlled JSON is loaded via `loadFromJSON()` and later exported via `toSVG()`, the unescaped values break out of XML attributes and inject arbitrary SVG elements including event handlers. Any application that accepts user-supplied JSON (via `loadFromJSON()`, collaborative sharing, import features, CMS plugins) and renders the `toSVG()` output in a browser context (SVG preview, export download rendered in-page, email template, embed) is vulnerable to stored XSS. An attacker can execute arbitrary JavaScript in the victim's browser session. Version 7.2.0 contains a fix."
      }, {
        "lang" : "es",
        "value" : "Fabric.js es una biblioteca de lienzo HTML5 de Javascript. Antes de la versión 7.2.0, Fabric.js aplica `escapeXml()` al contenido de texto durante la exportación SVG (`src/shapes/Text/TextSVGExportMixin.ts:186`) pero no lo aplica a otros valores de la cadena controlados por el usuario, que se interpolan en el marcado de atributos SVG. Cuando se carga un JSON controlado por el atacante a través de `loadFromJSON()` y luego se exporta a través de `toSVG()`, los valores sin escapar se salen de los atributos XML e inyectan elementos SVG arbitrarios, incluidos los controladores de eventos. Cualquier aplicación que acepte JSON proporcionados por el usuario (a través de `loadFromJSON()`, uso compartido colaborativo, funciones de importación, complementos de CMS) y renderice la salida de `toSVG()` en un contexto de navegador (vista previa SVG, descarga de exportación renderizada en la página, plantilla de correo electrónico, incrustación) es vulnerable a XSS almacenado. Un atacante puede ejecutar JavaScript arbitrario en la sesión del navegador de la víctima. La versión 7.2.0 contiene una solución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabricjs:fabric.js:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.2.0",
            "matchCriteriaId" : "0E3B1F04-2E51-4440-AB7E-01B8C407F877"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fabricjs/fabric.js/commit/7e1a122defd8feefe4eb7eaf0c180d7b0aeb6fee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fabricjs/fabric.js/releases/tag/v720",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/fabricjs/fabric.js/security/advisories/GHSA-hfvx-25r5-qc3w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26282",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T21:18:31.500",
      "lastModified" : "2026-02-20T19:42:56.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single File` bundle header parser due to missing bounds check. Opening a crafted file with NanaZip causes a crash or leaks heap data to the user. Version 6.0.1630.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "NanaZip es un archivador de ficheros, de código abierto. A partir de la versión 5.0.1252.0 y antes de la versión 6.0.1630.0, NanaZip tiene una lectura del montón fuera de límites en el analizador de encabezados de paquetes de 'archivo único .NET' debido a la falta de verificación de límites. Abrir un archivo manipulado con NanaZip provoca un bloqueo o filtrado datos del montón al usuario. La versión 6.0.1630.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1252.0",
            "versionEndExcluding" : "6.0.1630.0",
            "matchCriteriaId" : "E60CB87F-33E9-4D29-A928-4AB8C9EA8743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-ccpc-2222-xv5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/25274143/poc.exe.zip",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26286",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T21:18:31.670",
      "lastModified" : "2026-02-20T19:45:52.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.16.0, a Server-Side Request Forgery (SSRF) vulnerability in the asset download endpoint allows authenticated users to make arbitrary HTTP requests from the server and read the full response body, enabling access to internal services, cloud metadata, and private network resources. The vulnerability has been patched in the version 1.16.0 by introducing a whitelist domain check for asset download requests. It can be reviewed and customized by editing the `whitelistImportDomains` array in the `config.yaml` file."
      }, {
        "lang" : "es",
        "value" : "SillyTavern es una interfaz de usuario instalada localmente que permite a los usuarios interactuar con modelos de lenguaje grandes de generación de texto, motores de generación de imágenes y modelos de voz de texto a voz. En versiones anteriores a la 1.16.0, una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en el endpoint de descarga de activos permite a los usuarios autenticados realizar peticiones HTTP arbitrarias desde el servidor y leer el cuerpo completo de la respuesta, lo que permite el acceso a servicios internos, metadatos de la nube y recursos de red privados. La vulnerabilidad ha sido parcheada en la versión 1.16.0 mediante la introducción de una verificación de dominio de lista blanca para las peticiones de descarga de activos. Puede ser revisada y personalizada editando el array 'whitelistImportDomains' en el archivo 'config.yaml'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sillytavern:sillytavern:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "3762F770-B556-40E3-B2EE-1B838DE183A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-cccp-94vg-j92r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26312",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T21:18:31.823",
      "lastModified" : "2026-02-20T19:40:52.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stalwart is a mail and collaboration server. A denial-of-service vulnerability exists in Stalwart Mail Server versions 0.13.0 through 0.15.4 where accessing a specially crafted email containing malformed nested `message/rfc822` MIME parts via IMAP or JMAP causes excessive CPU and memory consumption, potentially leading to an out-of-memory condition and server crash. The malformed structure causes the `mail-parser` crate to produce cyclical references in its parsed representation, which Stalwart then follows indefinitely. Version 0.15.5 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Stalwart es un servidor de correo y colaboración. Existe una vulnerabilidad de denegación de servicio en las versiones 0.13.0 a 0.15.4 de Stalwart Mail Server donde el acceso a un correo electrónico especialmente diseñado que contiene partes MIME anidadas 'message/rfc822' malformadas a través de IMAP o JMAP causa un consumo excesivo de CPU y memoria, lo que puede llevar a una condición de falta de memoria y a la caída del servidor. La estructura malformada hace que el crate 'mail-parser' produzca referencias cíclicas en su representación analizada, que Stalwart sigue indefinidamente. La versión 0.15.5 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stalw:stalwart:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.13.0",
            "versionEndExcluding" : "0.15.5",
            "matchCriteriaId" : "05786B85-A8FE-4E13-888E-E84AA2D30990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stalwartlabs/stalwart/security/advisories/GHSA-jm95-876q-c9gw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26313",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T21:18:31.980",
      "lastModified" : "2026-02-23T18:41:53.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory usage by sending a specially-crafted p2p message. The issue is resolved in the v1.17.0 release."
      }, {
        "lang" : "es",
        "value" : "go-ethereum (geth) es una implementación de capa de ejecución en golang del protocolo Ethereum. Antes de la versión 1.17.0, un atacante puede provocar un alto uso de memoria al enviar un mensaje p2p especialmente diseñado. El problema se resuelve en la versión 1.17.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.0",
            "matchCriteriaId" : "2E92650F-E3FF-467C-9B14-FE9C101C0EE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethereum/go-ethereum/releases/tag/v1.17.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27014",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T21:18:32.240",
      "lastModified" : "2026-02-20T19:27:51.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "NanaZip es un archivador de ficheros de código abierto. A partir de la versión 5.0.1252.0 y antes de la versión 6.0.1630.0, las cadenas circulares 'NextOffset' provocan un bucle infinito, y los directorios profundamente anidados provocan una recursión ilimitada (desbordamiento de pila) en el analizador de archivos ROMFS. La versión 6.0.1630.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1252.0",
            "versionEndExcluding" : "6.0.1630.0",
            "matchCriteriaId" : "E60CB87F-33E9-4D29-A928-4AB8C9EA8743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-fc89-3f57-h9q5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27114",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T21:18:32.390",
      "lastModified" : "2026-02-26T00:16:23.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "NanaZip es un archivador de ficheros, de código abierto. A partir de la versión 5.0.1252.0 y antes de la versión 6.0.1630.0, las cadenas circulares de 'NextOffset' provocan un bucle infinito en el analizador de archivos ROMFS. La versión 6.0.1630.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1252.0",
            "versionEndExcluding" : "6.0.1630.0",
            "matchCriteriaId" : "E60CB87F-33E9-4D29-A928-4AB8C9EA8743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-hfg9-6rf9-5pgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/25274528/poc.zip",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27327",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:32.537",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayMail: from n/a through <= 4.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en YayCommerce YayMail – WooCommerce Email Customizer yaymail permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a YayMail – WooCommerce Email Customizer: desde n/a hasta &lt;= 4.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/yaymail/vulnerability/wordpress-yaymail-woocommerce-email-customizer-plugin-4-3-2-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27328",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:32.677",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduBlink: from n/a through <= 2.0.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en DevsBlink EduBlink edublink permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a EduBlink: desde n/a hasta &lt;= 2.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/edublink/vulnerability/wordpress-edublink-theme-2-0-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27343",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:32.810",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/a through <= 1.2.91."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en VanKarWai Airtifact airtifact permite la inclusión local de ficheros PHP. Este problema afecta a Airtifact: desde n/a hasta &lt;= 1.2.91."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/airtifact/vulnerability/wordpress-airtifact-theme-1-2-91-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27360",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:32.950",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Stored XSS.This issue affects Photo Gallery by 10Web: from n/a through <= 1.8.38."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en 10Web Photo Gallery de 10Web photo-gallery permite XSS Almacenado. Este problema afecta a Photo Gallery de 10Web: desde n/d hasta &lt;= 1.8.37."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/photo-gallery/vulnerability/wordpress-photo-gallery-by-10web-plugin-1-8-37-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27368",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:33.083",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.19.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en SeedProd Coming Soon Page, Under Construction &amp; Maintenance Mode by SeedProd coming-soon permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Coming Soon Page, Under Construction &amp; Maintenance Mode de SeedProd: desde n/a hasta &lt;= 6.19.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/coming-soon/vulnerability/wordpress-coming-soon-page-under-construction-maintenance-mode-by-seedprod-plugin-6-19-7-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27387",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:33.227",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through <= 3.6.26."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en designinvento DirectoryPress directorypress permite Explotar Niveles de Seguridad de Control de Acceso Configurados Incorrectamente. Este problema afecta a DirectoryPress: desde n/a hasta &lt;= 3.6.26."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/directorypress/vulnerability/wordpress-directorypress-plugin-3-6-26-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27440",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-19T21:18:33.367",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.7.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en Saad Iqbal myCred mycred permite XSS Almacenado. Este problema afecta a myCred: desde n/d hasta &lt;= 2.9.7.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/mycred/vulnerability/wordpress-mycred-plugin-2-9-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27476",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-19T21:18:33.503",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the target system, including reverse shell establishment and command execution."
      }, {
        "lang" : "es",
        "value" : "RustFly 2.0.0 contiene una vulnerabilidad de inyección de comandos en su mecanismo de control remoto de interfaz de usuario (UI) que acepta instrucciones codificadas en hexadecimal a través del puerto UDP 5005 sin una sanitización adecuada. Los atacantes pueden enviar cargas útiles codificadas en hexadecimal y diseñadas específicamente que contengan comandos del sistema para ejecutar operaciones arbitrarias en el sistema objetivo, incluyendo el establecimiento de shells inversas y la ejecución de comandos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstorm.news/files/id/215819/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/rustfly-command-injection-via-udp-remote-control",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2738",
      "sourceIdentifier" : "security@openvpn.net",
      "published" : "2026-02-19T21:18:33.773",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en ovpn?dco?win versión 2.8.0 permite a atacantes locales provocar una caída del sistema al enviar paquetes demasiado grandes al par remoto cuando la etiqueta AEAD se encuentra al final del paquete cifrado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@openvpn.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@openvpn.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.openvpn.net/Security%20Announcements/CVE-2026-2738",
        "source" : "security@openvpn.net"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26275",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T22:16:46.493",
      "lastModified" : "2026-03-03T17:44:32.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in `httpsig-hyper` prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's `matches!` macro. Specifically, the comparison `if matches!(digest, _expected_digest)` treated `_expected_digest` as a pattern binding rather than a value comparison, resulting in unconditional success of the match expression. As a consequence, digest verification could incorrectly return success even when the computed digest did not match the expected value. Applications relying on Digest verification as part of HTTP message signature validation may therefore fail to detect message body modification. The severity depends on how the library is integrated and whether additional signature validation layers are enforced. This issue has been fixed in `httpsig-hyper` 0.0.23. The fix replaces the incorrect `matches!` usage with proper value comparison and additionally introduces constant-time comparison for digest verification as defense-in-depth. Regression tests have also been added to prevent reintroduction of this issue. Users are strongly advised to upgrade to the patched version. There is no reliable workaround without upgrading. Users who cannot immediately upgrade should avoid relying solely on Digest verification for message integrity and ensure that full HTTP message signature verification is enforced at the application layer."
      }, {
        "lang" : "es",
        "value" : "httpsig-hyper es una extensión hyper para firmas de mensajes HTTP. Se descubrió un problema en 'httpsig-hyper' anterior a la versión 0.0.23 donde la verificación del encabezado Digest podría ser exitosa, aunque de forma indebida, por el mal funcionamiento de la macro 'matches!' de Rust. Específicamente, la comparación 'if matches!(digest, _expected_digest)' trataba '_expected_digest' como una vinculación de patrón en lugar de una comparación de valor, lo que resultaba en el éxito incondicional de la expresión de coincidencia. Como consecuencia, la verificación del digest podía devolver éxito incorrectamente incluso cuando el digest calculado no coincidía con el valor esperado. Por lo tanto, las aplicaciones que dependen de la verificación de Digest como parte de la validación de firmas de mensajes HTTP, pueden no detectar la modificación del cuerpo del mensaje. La gravedad depende de cómo se integra la biblioteca y si se aplican capas adicionales de validación de firmas. Este problema ha sido solucionado en 'httpsig-hyper' 0.0.23. La solución reemplaza el uso incorrecto de 'matches!' por una comparación de valor adecuada y adicionalmente introduce una comparación de tiempo constante para la verificación del digest como defensa en profundidad. También se han añadido pruebas de regresión para evitar la reintroducción de este problema. Se recomienda encarecidamente a los usuarios que actualicen a la versión parcheada. No hay una solución alternativa fiable sin actualizar. Los usuarios que no puedan actualizar inmediatamente deben evitar depender únicamente de la verificación de Digest para la integridad del mensaje y asegurarse de que la verificación completa de la firma de mensajes HTTP se aplique en la capa de aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        }, {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:junkurihara:httpsig-hyper:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.0.23",
            "matchCriteriaId" : "8D02B03A-2C49-46ED-A5C0-EF91104582CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/junkurihara/httpsig-rs/commit/5533f596c650377e02f4aa9e3eb8dba591b87370",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/junkurihara/httpsig-rs/commit/65cbd19b395180a4bba09a89746c4b14ccb8d297",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/junkurihara/httpsig-rs/pull/14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/junkurihara/httpsig-rs/pull/15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/junkurihara/httpsig-rs/security/advisories/GHSA-7v42-g35v-xrch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26314",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T22:16:46.813",
      "lastModified" : "2026-02-23T18:32:26.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. The problem is resolved in the v1.16.9 and v1.17.0 releases of Geth."
      }, {
        "lang" : "es",
        "value" : "go-ethereum (geth) es una implementación de capa de ejecución de golang del protocolo Ethereum. Antes de la versión 1.16.9, un nodo vulnerable puede ser forzado a apagarse/colapsar usando un mensaje especialmente diseñado. El problema está resuelto en las versiones v1.16.9 y v1.17.0 de Geth."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.9",
            "matchCriteriaId" : "1923F28D-FCD9-4209-9C73-3502DE777CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethereum/go-ethereum/commit/895a8597cb16c02203e38707ed2d1da5c500fe60",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ethereum/go-ethereum/releases/tag/v1.16.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ethereum/go-ethereum/security/advisories/GHSA-2gjw-fg97-vg3r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26315",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T22:16:46.967",
      "lastModified" : "2026-02-23T18:21:52.770",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits of the p2p node key. The issue is resolved in the v1.16.9 and v1.17.0 releases of Geth. Geth maintainers recommend rotating the node key after applying the upgrade, which can be done by removing the file `<datadir>/geth/nodekey` before starting Geth."
      }, {
        "lang" : "es",
        "value" : "go-ethereum (Geth) es una implementación de capa de ejecución en golang del protocolo Ethereum. Antes de la versión 1.16.9, a través de una falla en la implementación de criptografía ECIES, un atacante podría ser capaz de extraer bits de la clave de nodo p2p. El problema está resuelto en las versiones v1.16.9 y v1.17.0 de Geth. Los mantenedores de Geth recomiendan rotar la clave de nodo después de aplicar la actualización, lo cual se puede hacer eliminando el archivo `/geth/nodekey` antes de iniciar Geth."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.9",
            "matchCriteriaId" : "1923F28D-FCD9-4209-9C73-3502DE777CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ethereum/go-ethereum/security/advisories/GHSA-m6j8-rg6r-7mv8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26316",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T22:16:47.110",
      "lastModified" : "2026-02-24T19:59:36.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to 2026.2.13, the optional BlueBubbles iMessage channel plugin could accept webhook requests as authenticated based only on the TCP peer address being loopback (`127.0.0.1`, `::1`, `::ffff:127.0.0.1`) even when the configured webhook secret was missing or incorrect. This does not affect the default iMessage integration unless BlueBubbles is installed and enabled. Version 2026.2.13 contains a patch. Other mitigations include setting a non-empty BlueBubbles webhook password and avoiding deployments where a public-facing reverse proxy forwards to a loopback-bound Gateway without strong upstream authentication."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de 2026.2.13, el plugin opcional del canal iMessage de BlueBubbles podía aceptar solicitudes de webhook como autenticadas basándose únicamente en que la dirección de par TCP fuera de bucle invertido ('127.0.0.1', '::1', '::ffff:127.0.0.1') incluso cuando el secreto de webhook configurado faltaba o era incorrecto. Esto no afecta a la integración predeterminada de iMessage a menos que BlueBubbles esté instalado y habilitado. La versión 2026.2.13 contiene un parche. Otras mitigaciones incluyen establecer una contraseña de webhook de BlueBubbles no vacía y evitar implementaciones donde un proxy inverso de cara al público reenvíe a un Gateway vinculado a loopback sin una fuerte autenticación ascendente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.13",
            "matchCriteriaId" : "E4A04671-72CA-4A53-A994-F382557349BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/743f4b28495cdeb0d5bf76f6ebf4af01f6a02e5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/f836c385ffc746cb954e8ee409f99d079bfdcd2f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-pchc-86f6-8758",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26317",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T22:16:47.270",
      "lastModified" : "2026-02-26T18:39:50.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to 2026.2.14, browser-facing localhost mutation routes accepted cross-origin browser requests without explicit Origin/Referer validation. Loopback binding reduces remote exposure but does not prevent browser-initiated requests from malicious origins. A malicious website can trigger unauthorized state changes against a victim's local OpenClaw browser control plane (for example opening tabs, starting/stopping the browser, mutating storage/cookies) if the browser control service is reachable on loopback in the victim's browser context. Starting in version 2026.2.14, mutating HTTP methods (POST/PUT/PATCH/DELETE) are rejected when the request indicates a non-loopback Origin/Referer (or `Sec-Fetch-Site: cross-site`). Other mitigations include enabling browser control auth (token/password) and avoid running with auth disabled."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14, las rutas de mutación de localhost orientadas al navegador aceptaban solicitudes de navegador de origen cruzado sin validación explícita de Origin/Referer. La vinculación de bucle invertido reduce la exposición remota, pero no evita las solicitudes iniciadas por el navegador desde orígenes maliciosos. Un sitio web malicioso puede desencadenar cambios de estado no autorizados contra el plano de control del navegador OpenClaw local de una víctima (por ejemplo, abrir pestañas, iniciar/detener el navegador, mutar almacenamiento/cookies) si el servicio de control del navegador es accesible en bucle invertido en el contexto del navegador de la víctima. A partir de la versión 2026.2.14, los métodos HTTP mutantes (POST/PUT/PATCH/DELETE) son rechazados cuando la solicitud indica un Origin/Referer que no es de bucle invertido (o 'Sec-Fetch-Site: cross-site'). Otras mitigaciones incluyen habilitar la autenticación de control del navegador (token/contraseña) y evitar ejecutar con la autenticación deshabilitada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/b566b09f81e2b704bf9398d8d97d5f7a90aa94c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fqr-4cg8-h96q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26744",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-19T22:16:47.627",
      "lastModified" : "2026-02-26T02:48:23.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endpoint. The application returns different error messages for valid and invalid usernames allowing an unauthenticated attacker to determine which usernames are registered in the system through observable response discrepancy."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de enumeración de usuarios en FormaLMS 4.1.18 y versiones anteriores en la funcionalidad de recuperación de contraseña accesible a través del endpoint /lostpwd. La aplicación devuelve mensajes de error diferentes para nombres de usuario válidos e inválidos, permitiendo a un atacante no autenticado determinar qué nombres de usuario están registrados en el sistema a través de la discrepancia observable en la respuesta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:formalms:formalms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.18",
            "matchCriteriaId" : "C0D5CBAB-4A63-4E23-8F70-561875E39DDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/formalms/formalms.git",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lorenzobruno7/CVE-2026-26744",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1658",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2026-02-19T23:16:15.960",
      "lastModified" : "2026-02-26T02:48:01.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning. \n\nThe vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially misleading users.\n\nThis issue affects Directory Services: from 20.4.1 through 25.2."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Representación Errónea de Información Crítica en la Interfaz de Usuario (IU) en OpenText™ Directory Services permite el Envenenamiento de Caché.\n\nLa vulnerabilidad podría ser explotada por un actor malicioso para inyectar texto manipulado en la aplicación OpenText, lo que podría engañar a los usuarios.\n\nEste problema afecta a Directory Services: desde la 20.4.1 hasta la 25.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:D/RE:L/U:Clear",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "NO",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:directory_services:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4.1",
            "versionEndIncluding" : "25.2",
            "matchCriteriaId" : "856B5AD3-A928-47FD-BD85-EA02CCE18D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0858517",
        "source" : "security@opentext.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21535",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-02-19T23:16:24.217",
      "lastModified" : "2026-02-20T17:39:46.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Microsoft Teams permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:teams:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B85963-34CA-49A1-B59A-6005DF151CB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21535",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24122",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:24.517",
      "lastModified" : "2026-02-20T19:04:02.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cosign provides code signing and transparency for containers and binaries. In versions 3.0.4 and below, an issuing certificate with a validity that expires before the leaf certificate will be considered valid during verification even if the provided timestamp would mean the issuing certificate should be considered expired. When verifying artifact signatures using a certificate, Cosign first verifies the certificate chain using the leaf certificate's \"not before\" timestamp and later checks expiry of the leaf certificate using either a signed timestamp provided by the Rekor transparency log or from a timestamp authority, or using the current time. The root and all issuing certificates are assumed to be valid during the leaf certificate's validity. There is no impact to users of the public Sigstore infrastructure. This may affect private deployments with customized PKIs. This issue has been fixed in version 3.0.5."
      }, {
        "lang" : "es",
        "value" : "Cosign proporciona firma de código y transparencia para contenedores y binarios. En las versiones 3.0.4 e inferiores, un certificado emisor con una validez que expira antes que el certificado hoja se considerará válido durante la verificación, incluso si la marca de tiempo proporcionada significaría que el certificado emisor debería considerarse expirado. Al verificar firmas de artefactos usando un certificado, Cosign primero verifica la cadena de certificados usando la marca de tiempo 'no antes de' del certificado hoja y luego verifica la caducidad del certificado hoja usando una marca de tiempo firmada proporcionada por el registro de transparencia de Rekor o de una autoridad de marca de tiempo, o usando la hora actual. Se asume que el certificado raíz y todos los certificados emisores son válidos durante la validez del certificado hoja. No hay impacto para los usuarios de la infraestructura pública de Sigstore. Esto puede afectar a despliegues privados con PKIs personalizadas. Este problema ha sido corregido en la versión 3.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigstore:cosign:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.5",
            "matchCriteriaId" : "309BB1C3-3537-4989-AFA4-24ADFAD25F96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sigstore/cosign/commit/3c9a7363f563db76d78e2de2cabd945450f3781e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/sigstore/cosign/security/advisories/GHSA-wfqv-66vq-46rm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26319",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:24.857",
      "lastModified" : "2026-02-20T19:03:02.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx webhook handler to accept unsigned inbound webhook requests when telnyx.publicKey is not configured, enabling unauthenticated callers to forge Telnyx events. Telnyx webhooks are expected to be authenticated via Ed25519 signature verification. In affected versions, TelnyxProvider.verifyWebhook() could effectively fail open when no Telnyx public key was configured, allowing arbitrary HTTP POST requests to the voice-call webhook endpoint to be treated as legitimate Telnyx events. This only impacts deployments where the Voice Call plugin is installed, enabled, and the webhook endpoint is reachable from the attacker (for example, publicly exposed via a tunnel/proxy). The issue has been fixed in version 2026.2.14."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Las versiones 2026.2.13 e inferiores permiten que el plugin opcional @openclaw/voice-call, gestor de webhooks de Telnyx, acepte solicitudes de webhook entrantes sin firmar cuando telnyx.publicKey no está configurado, lo que permite a los llamantes no autenticados falsificar eventos de Telnyx. Se espera que los webhooks de Telnyx sean autenticados mediante verificación de firma Ed25519. En las versiones afectadas, TelnyxProvider.verifyWebhook() podría fallar de forma abierta (fail open) cuando no se configuró ninguna clave pública de Telnyx, permitiendo que solicitudes HTTP POST arbitrarias al endpoint del webhook de voice-call sean tratadas como eventos legítimos de Telnyx. Esto solo afecta a las implementaciones donde el plugin de Voice Call está instalado, habilitado y el endpoint del webhook es accesible desde el atacante (por ejemplo, expuesto públicamente a través de un túnel/proxy). El problema ha sido solucionado en la versión 2026.2.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/29b587e73cbdc941caec573facd16e87d52f007b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/f47584fec86d6d73f2d483043a2ad0e7e3c50411",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hg8-92x6-h2f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26320",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.017",
      "lastModified" : "2026-02-20T19:09:57.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. OpenClaw macOS desktop client registers the `openclaw://` URL scheme. For `openclaw://agent` deep links without an unattended `key`, the app shows a confirmation dialog that previously displayed only the first 240 characters of the message, but executed the full message after the user clicked \"Run.\" At the time of writing, the OpenClaw macOS desktop client is still in beta. In versions 2026.2.6 through 2026.2.13, an attacker could pad the message with whitespace to push a malicious payload outside the visible preview, increasing the chance a user approves a different message than the one that is actually executed. If a user runs the deep link, the agent may perform actions that can lead to arbitrary command execution depending on the user's configured tool approvals/allowlists. This is a social-engineering mediated vulnerability: the confirmation prompt could be made to misrepresent the executed message. The issue is fixed in 2026.2.14. Other mitigations include not approve unexpected \"Run OpenClaw agent?\" prompts triggered while browsing untrusted sites and usingunattended deep links only with a valid `key` for trusted personal automations."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. El cliente de escritorio de OpenClaw para macOS registra el esquema de URL 'openclaw://'. Para los enlaces profundos 'openclaw://agent' sin una 'key' desatendida, la aplicación muestra un cuadro de diálogo de confirmación que anteriormente solo mostraba los primeros 240 caracteres del mensaje, pero ejecutaba el mensaje completo después de que el usuario hacía clic en \"Ejecutar\". En el momento de escribir este documento, el cliente de escritorio de OpenClaw para macOS todavía está en beta. En las versiones 2026.2.6 a 2026.2.13, un atacante podría rellenar el mensaje con espacios en blanco para empujar una carga útil maliciosa fuera de la vista previa visible, aumentando la probabilidad de que un usuario apruebe un mensaje diferente al que realmente se ejecuta. Si un usuario ejecuta el enlace profundo, el agente puede realizar acciones que pueden llevar a la ejecución arbitraria de comandos, dependiendo de las aprobaciones/listas blancas de herramientas configuradas por el usuario. Esta es una vulnerabilidad mediada por ingeniería social: el aviso de confirmación podría hacerse para tergiversar el mensaje ejecutado. El problema está solucionado en la versión 2026.2.14. Otras mitigaciones incluyen no aprobar avisos inesperados de '¿Ejecutar agente de OpenClaw?' activados al navegar por sitios no confiables y usar enlaces profundos desatendidos solo con una 'key' válida para automatizaciones personales confiables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.2.6",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "ED46BB18-6326-4AB6-AF42-3BCF142C1797"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/28d9dd7a772501ccc3f71457b4adfee79084fe6f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-7q2j-c4q5-rm27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26321",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.180",
      "lastModified" : "2026-02-20T19:12:08.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendMediaFeishu` to treat attacker-controlled `mediaUrl` values as local filesystem paths and read them directly. If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as `/etc/passwd` as `mediaUrl`. Upgrade to OpenClaw `2026.2.14` or newer to receive a fix. The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de inteligencia artificial. Antes de la versión 2026.2.14 de OpenClaw, la extensión Feishu permitía a `sendMediaFeishu` tratar los valores `mediaUrl` controlados por el atacante como rutas del sistema de archivos local y leerlos directamente. Si un atacante puede influir en las llamadas a herramientas (directamente o mediante inyección de comandos), podría filtrar archivos locales proporcionando rutas como '/ etc / passwd' como «mediaUrl». Actualice a OpenClaw «2026.2.14» o una versión posterior para recibir una corrección. La corrección elimina la lectura directa de archivos locales de esta ruta y redirige la carga de medios a través de ayudantes reforzados que aplican restricciones de raíz local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/5b4121d6011a48c71e747e3c18197f180b872c5d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-8jpq-5h99-ff5r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26322",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.340",
      "lastModified" : "2026-02-20T19:12:17.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Gateway tool accepted a tool-supplied `gatewayUrl` without sufficient restrictions, which could cause the OpenClaw host to attempt outbound WebSocket connections to user-specified targets. This requires the ability to invoke tools that accept `gatewayUrl` overrides (directly or indirectly). In typical setups this is limited to authenticated operators, trusted automation, or environments where tool calls are exposed to non-operators. In other words, this is not a drive-by issue for arbitrary internet users unless a deployment explicitly allows untrusted users to trigger these tool calls. Some tool call paths allowed `gatewayUrl` overrides to flow into the Gateway WebSocket client without validation or allowlisting. This meant the host could be instructed to attempt connections to non-gateway endpoints (for example, localhost services, private network addresses, or cloud metadata IPs). In the common case, this results in an outbound connection attempt from the OpenClaw host (and corresponding errors/timeouts). In environments where the tool caller can observe the results, this can also be used for limited network reachability probing. If the target speaks WebSocket and is reachable, further interaction may be possible. Starting in version 2026.2.14, tool-supplied `gatewayUrl` overrides are restricted to loopback (on the configured gateway port) or the configured `gateway.remote.url`. Disallowed protocols, credentials, query/hash, and non-root paths are rejected."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14 de OpenClaw, la herramienta Gateway aceptaba una 'gatewayUrl' proporcionada por la herramienta sin restricciones suficientes, lo que podría hacer que el host de OpenClaw intentara conexiones WebSocket salientes a objetivos especificados por el usuario. Esto requiere la capacidad de invocar herramientas que acepten anulaciones de 'gatewayUrl' (directa o indirectamente). En configuraciones típicas, esto se limita a operadores autenticados, automatización de confianza o entornos donde las llamadas a herramientas están expuestas a no operadores. En otras palabras, esto no es un problema de ataque al paso para usuarios de internet arbitrarios a menos que una implementación permita explícitamente a usuarios no confiables activar estas llamadas a herramientas. Algunas rutas de llamada a herramientas permitían que las anulaciones de 'gatewayUrl' fluyeran hacia el cliente WebSocket de Gateway sin validación o inclusión en lista blanca. Esto significaba que se podía instruir al host para que intentara conexiones a puntos finales que no fueran de gateway (por ejemplo, servicios de localhost, direcciones de red privadas o IPs de metadatos en la nube). En el caso común, esto resulta en un intento de conexión saliente desde el host de OpenClaw (y los errores/tiempos de espera correspondientes). En entornos donde el invocador de la herramienta puede observar los resultados, esto también puede usarse para sondeos limitados de accesibilidad de red. Si el objetivo habla WebSocket y es alcanzable, una interacción adicional puede ser posible. A partir de la versión 2026.2.14, las anulaciones de 'gatewayUrl' proporcionadas por la herramienta están restringidas a loopback (en el puerto de gateway configurado) o a la 'gateway.remote.url' configurada. Protocolos no permitidos, credenciales, consulta/hash y rutas no raíz son rechazados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/c5406e1d2434be2ef6eb4d26d8f1798d718713f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-g6q9-8fvw-f7rf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26323",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.500",
      "lastModified" : "2026-02-20T19:06:15.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script `scripts/update-clawtributors.ts`. The issue affects contributors/maintainers (or CI) who run `bun scripts/update-clawtributors.ts` in a source checkout that contains a malicious commit author email (e.g. crafted `@users[.]noreply[.]github[.]com` values). Normal CLI usage is not affected (`npm i -g openclaw`): this script is not part of the shipped CLI and is not executed during routine operation. The script derived a GitHub login from `git log` author metadata and interpolated it into a shell command (via `execSync`). A malicious commit record could inject shell metacharacters and execute arbitrary commands when the script is run. Version 2026.2.14 contains a patch."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Las versiones 2026.1.8 a 2026.2.13 tienen una inyección de comandos en el script de mantenedor/desarrollo scripts/update-clawtributors.ts. El problema afecta a los colaboradores/mantenedores (o CI) que ejecutan bun scripts/update-clawtributors.ts en una copia de trabajo del código fuente que contiene un correo electrónico de autor de commit malicioso (p. ej., valores @users[.]noreply[.]github[.]com manipulados). El uso normal de la CLI no se ve afectado (npm i -g openclaw): este script no forma parte de la CLI distribuida y no se ejecuta durante la operación rutinaria. El script derivó un inicio de sesión de GitHub de los metadatos del autor de git log y lo interpoló en un comando de shell (a través de execSync). Un registro de commit malicioso podría inyectar metacaracteres de shell y ejecutar comandos arbitrarios cuando se ejecuta el script. La versión 2026.2.14 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.8",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "A64A74CE-B70F-4490-8640-91AE9F56712D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/a429380e337152746031d290432a4b93aa553d55",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-m7x8-2w3w-pr42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26324",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.653",
      "lastModified" : "2026-02-23T18:13:45.107",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.14, OpenClaw's SSRF protection could be bypassed using full-form IPv4-mapped IPv6 literals such as `0:0:0:0:0:ffff:7f00:1` (which is `127.0.0.1`). This could allow requests that should be blocked (loopback / private network / link-local metadata) to pass the SSRF guard. Version 2026.2.14 patches the issue."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14, la protección SSRF de OpenClaw podía ser eludida utilizando literales IPv6 mapeados a IPv4 en formato completo, como '0:0:0:0:0:ffff:7f00:1' (que es '127.0.0.1'). Esto podría permitir que solicitudes que deberían ser bloqueadas (metadatos de bucle invertido / red privada / enlace local) pasaran la protección SSRF. La versión 2026.2.14 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/c0c0e0f9aecb913e738742f73e091f2f72d39a19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-jrvc-8ff5-2f9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26325",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.800",
      "lastModified" : "2026-02-23T13:47:10.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (`system.run` on a node), enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`), allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. Version 2026.2.14 enforces `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation)."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14, una inconsistencia entre `rawCommand` y `command[]` en el gestor `system.run` del host del nodo podría causar que la evaluación de la lista de permitidos/aprobación se realizara sobre un comando mientras se ejecutaba un argv diferente. Esto solo afecta a las implementaciones que utilizan la ruta de ejecución del host del nodo / nodo compañero (`system.run` en un nodo), habilitan la política de ejecución basada en lista de permitidos (`security=allowlist`) con solicitudes de aprobación impulsadas por fallos en la lista de permitidos (por ejemplo, `ask=on-miss`), y permiten a un atacante invocar `system.run`. Las configuraciones predeterminadas/no de nodo no se ven afectadas. La versión 2026.2.14 impone la consistencia de `rawCommand`/`command[]` (validación rápida de fallos en la pasarela + validación del host del nodo)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/cb3290fca32593956638f161d9776266b90ab891",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-h3f9-mjwj-w476",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26326",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:25.950",
      "lastModified" : "2026-02-23T13:46:15.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.14, `skills.status` could disclose secrets to `operator.read` clients by returning raw resolved config values in `configChecks` for skill `requires.config` paths. Version 2026.2.14 stops including raw resolved config values in requirement checks (return only `{ path, satisfied }`) and narrows the Discord skill requirement to the token key. In addition to upgrading, users should rotate any Discord tokens that may have been exposed to read-scoped clients."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14, `skills.status` podría divulgar secretos a clientes de `operator.read` al devolver valores de configuración resueltos en bruto en `configChecks` para las rutas `requires.config` de la habilidad. La versión 2026.2.14 deja de incluir valores de configuración resueltos en bruto en las comprobaciones de requisitos (devuelve solo `{ path, satisfied }`) y restringe el requisito de la habilidad de Discord a la clave del token. Además de actualizar, los usuarios deberían rotar cualquier token de Discord que pueda haber sido expuesto a clientes con ámbito de lectura."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/d3428053d95eefbe10ecf04f92218ffcba55ae5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/ebc68861a61067fc37f9298bded3eec9de0ba783",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mh7-phf8-xgfm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26327",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:26.100",
      "lastModified" : "2026-02-23T13:44:36.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Discovery beacons (Bonjour/mDNS and DNS-SD) include TXT records such as `lanHost`, `tailnetDns`, `gatewayPort`, and `gatewayTlsSha256`. TXT records are unauthenticated. Prior to version 2026.2.14, some clients treated TXT values as authoritative routing/pinning inputs. iOS and macOS used TXT-provided host hints (`lanHost`/`tailnetDns`) and ports (`gatewayPort`) to build the connection URL. iOS and Android allowed the discovery-provided TLS fingerprint (`gatewayTlsSha256`) to override a previously stored TLS pin. On a shared/untrusted LAN, an attacker could advertise a rogue `_openclaw-gw._tcp` service. This could cause a client to connect to an attacker-controlled endpoint and/or accept an attacker certificate, potentially exfiltrating Gateway credentials (`auth.token` / `auth.password`) during connection. As of time of publication, the iOS and Android apps are alpha/not broadly shipped (no public App Store / Play Store release). Practical impact is primarily limited to developers/testers running those builds, plus any other shipped clients relying on discovery on a shared/untrusted LAN. Version 2026.2.14 fixes the issue. Clients now prefer the resolved service endpoint (SRV + A/AAAA) over TXT-provided routing hints. Discovery-provided fingerprints no longer override stored TLS pins. In iOS/Android, first-time TLS pins require explicit user confirmation (fingerprint shown; no silent TOFU) and discovery-based direct connects are TLS-only. In Android, hostname verification is no longer globally disabled (only bypassed when pinning)."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Las balizas de descubrimiento (Bonjour/mDNS y DNS-SD) incluyen registros TXT como 'lanHost', 'tailnetDns', 'gatewayPort' y 'gatewayTlsSha256'. Los registros TXT no están autenticados. Antes de la versión 2026.2.14, algunos clientes trataban los valores TXT como entradas autoritativas de enrutamiento/fijación. iOS y macOS usaban las sugerencias de host ('lanHost'/'tailnetDns') y los puertos ('gatewayPort') proporcionados por TXT para construir la URL de conexión. iOS y Android permitían que la huella digital TLS ('gatewayTlsSha256') proporcionada por el descubrimiento anulara una fijación TLS previamente almacenada. En una LAN compartida/no confiable, un atacante podría anunciar un servicio '_openclaw-gw._tcp' malicioso. Esto podría hacer que un cliente se conectara a un punto final controlado por un atacante y/o aceptara un certificado de atacante, potencialmente exfiltrando credenciales de Gateway ('auth.token' / 'auth.password') durante la conexión. En el momento de la publicación, las aplicaciones de iOS y Android están en fase alfa/no se han distribuido ampliamente (sin lanzamiento público en App Store / Play Store). El impacto práctico se limita principalmente a desarrolladores/probadores que ejecutan esas compilaciones, además de cualquier otro cliente distribuido que dependa del descubrimiento en una LAN compartida/no confiable. La versión 2026.2.14 corrige el problema. Los clientes ahora prefieren el punto final de servicio resuelto (SRV + A/AAAA) sobre las sugerencias de enrutamiento proporcionadas por TXT. Las huellas digitales proporcionadas por el descubrimiento ya no anulan las fijaciones TLS almacenadas. En iOS/Android, las fijaciones TLS por primera vez requieren confirmación explícita del usuario (huella digital mostrada; sin TOFU silencioso) y las conexiones directas basadas en descubrimiento son solo TLS. En Android, la verificación de nombre de host ya no está deshabilitada globalmente (solo se omite al fijar)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/d583782ee322a6faa1fe87ae52455e0d349de586",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-pv58-549p-qh99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26952",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:26.243",
      "lastModified" : "2026-03-12T16:33:01.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions 6.4 and below are vulnerable to stored HTML injection through the local DNS records configuration page, which allows an authenticated administrator to inject code that is stored in the Pi-hole configuration and rendered every time the DNS records table is viewed. The populateDataTable() function contains a data variable with the full DNS record value exactly as entered by the user and returned by the API. This value is inserted directly into the data-tag HTML attribute without any escaping or sanitization of special characters. When an attacker supplies a value containing double quotes (\"), they can prematurely “close” the data-tag attribute and inject additional HTML attributes into the element. Since Pi-hole implements a Content Security Policy (CSP) that blocks inline JavaScript, the impact is limited. This issue has been fixed in version 6.4.1."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de administración de Pi-hole es una interfaz web para gestionar Pi-hole, una aplicación de bloqueo de anuncios y rastreadores de internet a nivel de red. Las versiones 6.4 e inferiores son vulnerables a la inyección de HTML almacenado a través de la página de configuración de registros DNS locales, lo que permite a un administrador autenticado inyectar código que se almacena en la configuración de Pi-hole y se renderiza cada vez que se visualiza la tabla de registros DNS. La función populateDataTable() contiene una variable de datos con el valor completo del registro DNS exactamente como lo introdujo el usuario y devuelto por la API. Este valor se inserta directamente en el atributo HTML data-tag sin ningún escape o sanitización de caracteres especiales. Cuando un atacante proporciona un valor que contiene comillas dobles (\"), pueden 'cerrar' prematuramente el atributo data-tag e inyectar atributos HTML adicionales en el elemento. Dado que Pi-hole implementa una Política de Seguridad de Contenido (CSP) que bloquea JavaScript en línea, el impacto es limitado. Este problema ha sido solucionado en la versión 6.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:web_interface:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.1",
            "matchCriteriaId" : "0BC7CDAC-AB62-4F32-B3C5-34AC7EE1953F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pi-hole/web/commit/d328f143718022d82dc94c8751121ca41be3b996",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pi-hole/web/releases/tag/v6.4.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pi-hole/web/security/advisories/GHSA-6xp4-jw73-f4qp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26953",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:26.413",
      "lastModified" : "2026-03-12T16:28:40.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.  Versions 6.0 and above have a Stored HTML Injection vulnerability in the active sessions table located on the API settings page, allowing an attacker with valid credentials to inject arbitrary HTML code that will be rendered in the browser of any administrator who visits the active sessions page. The rowCallback function contains the value data.x_forwarded_for, which is directly concatenated into an HTML string and inserted into the DOM using jQuery’s .html() method. This method interprets the content as HTML, which means that any HTML tags present in the value will be parsed and rendered by the browser. An attacker can use common tools such as curl, wget, Python requests, Burp Suite, or even JavaScript fetch() to send an authentication request with an X-Forwarded-For header that contains malicious HTML code instead of a legitimate IP address. Since Pi-hole implements a Content Security Policy (CSP) that blocks inline JavaScript, the impact is limited to pure HTML injection without the ability to execute scripts. This issue has been fixed in version 6.4.1."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de administración de Pi-hole es una interfaz web para gestionar Pi-hole, una aplicación de bloqueo de anuncios y rastreadores de internet a nivel de red. Las versiones 6.0 y superiores tienen una vulnerabilidad de inyección HTML almacenada en la tabla de sesiones activas ubicada en la página de configuración de la API, permitiendo a un atacante con credenciales válidas inyectar código HTML arbitrario que se renderizará en el navegador de cualquier administrador que visite la página de sesiones activas. La función rowCallback contiene el valor data.x_forwarded_for, que se concatena directamente en una cadena HTML y se inserta en el DOM utilizando el método .html() de jQuery. Este método interpreta el contenido como HTML, lo que significa que cualquier etiqueta HTML presente en el valor será analizada y renderizada por el navegador. Un atacante puede usar herramientas comunes como curl, wget, Python requests, Burp Suite, o incluso JavaScript fetch() para enviar una solicitud de autenticación con una cabecera X-Forwarded-For que contiene código HTML malicioso en lugar de una dirección IP legítima. Dado que Pi-hole implementa una Política de Seguridad de Contenido (CSP) que bloquea JavaScript en línea, el impacto se limita a la inyección de HTML puro sin la capacidad de ejecutar scripts. Este problema ha sido solucionado en la versión 6.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:web_interface:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.4.1",
            "matchCriteriaId" : "6A4691B2-6ECB-42D3-9E31-3D2CCE17A62D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pi-hole/web/commit/1a0c6f4fe6d0116fd2846b2adaae95996b7f194d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pi-hole/web/releases/tag/v6.4.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pi-hole/web/security/advisories/GHSA-8rw8-vjgp-rwj6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26958",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-19T23:16:26.577",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If (*Point).MultiScalarMult is called on an initialized point that is not the identity point, it returns an incorrect result. If the method is called on an uninitialized point, the behavior is undefined. In particular, if the receiver is the zero value, MultiScalarMult returns an invalid point that compares Equal to every other point. Note that MultiScalarMult is a rarely used, advanced API. For example, users who depend on filippo.io/edwards25519 only through github.com/go-sql-driver/mysql are not affected. This issue has been fixed in version 1.1.1."
      }, {
        "lang" : "es",
        "value" : "filippo.io/edwards25519 es una biblioteca Go que implementa la curva elíptica edwards25519 con API para construir primitivas criptográficas. En las versiones 1.1.0 y anteriores, MultiScalarMult produce resultados no válidos o comportamiento indefinido si el receptor no es el punto identidad. Si se llama a (*Point).MultiScalarMult en un punto inicializado que no es el punto identidad, devuelve un resultado incorrecto. Si se llama al método en un punto no inicializado, el comportamiento es indefinido. En particular, si el receptor es el valor cero, MultiScalarMult devuelve un punto no válido que se compara como Igual a cualquier otro punto. Tenga en cuenta que MultiScalarMult es una API avanzada y poco utilizada. Por ejemplo, los usuarios que dependen de filippo.io/edwards25519 solo a través de github.com/go-sql-driver/mysql no se ven afectados. Este problema ha sido corregido en la versión 1.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiloSottile/edwards25519/commit/d1c650afb95fad0742b98d95f2eb2cf031393abb",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/FiloSottile/edwards25519/releases/tag/v1.1.1",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1292",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-02-20T00:16:14.520",
      "lastModified" : "2026-02-27T23:48:33.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed an insertion of sensitive information into log file vulnerability in Trends."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de inserción de información sensible en archivo de registro en Trends."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:trends:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.20",
            "matchCriteriaId" : "3EA30A8A-E4E6-49A3-BD17-F098F2BE0800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:trends:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.79",
            "matchCriteriaId" : "68A2AFFC-A9C9-4B34-87CF-165BFA511ABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-007",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26328",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:15.523",
      "lastModified" : "2026-02-26T18:41:00.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by sender identities coming from the DM pairing store, broadening DM trust into group contexts. Version 2026.2.14 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14, bajo iMessage 'groupPolicy=allowlist', la autorización de grupo podía ser satisfecha por identidades de remitente provenientes del almacén de emparejamiento de DM, ampliando la confianza de DM a contextos de grupo. La versión 2026.2.14 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/872079d42fe105ece2900a1dd6ab321b92da2d59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-g34w-4xqq-h79m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26329",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:15.687",
      "lastModified" : "2026-02-20T19:05:23.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.14, authenticated attackers can read arbitrary files from the Gateway host by supplying absolute paths or path traversal sequences to the browser tool's `upload` action. The server passed these paths to Playwright's `setInputFiles()` APIs without restricting them to a safe root. An attacker must reach the Gateway HTTP surface (or otherwise invoke the same browser control hook endpoints); present valid Gateway auth (bearer token / password), as required by the Gateway configuration (In common default setups, the Gateway binds to loopback and the onboarding wizard generates a gateway token even for loopback); and have the `browser` tool permitted by tool policy for the target session/context (and have browser support enabled). If an operator exposes the Gateway beyond loopback (LAN/tailnet/custom bind, reverse proxy, tunnels, etc.), the impact increases accordingly. Starting in version 2026.2.14, the upload paths are now confined to OpenClaw's temp uploads root (`DEFAULT_UPLOAD_DIR`) and traversal/escape paths are rejected."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.14, los atacantes autenticados pueden leer archivos arbitrarios del host Gateway proporcionando rutas absolutas o secuencias de salto de ruta a la acción 'upload' de la herramienta del navegador. El servidor pasó estas rutas a las API 'setInputFiles()' de Playwright sin restringirlas a una raíz segura. Un atacante debe alcanzar la superficie HTTP del Gateway (o invocar de otro modo los mismos puntos finales de gancho de control del navegador); presentar autenticación Gateway válida (token de portador / contraseña), según lo requiera la configuración del Gateway (En configuraciones predeterminadas comunes, el Gateway se enlaza a loopback y el asistente de incorporación genera un token de gateway incluso para loopback); y tener la herramienta 'browser' permitida por la política de herramientas para la sesión/contexto objetivo (y tener el soporte del navegador habilitado). Si un operador expone el Gateway más allá de loopback (LAN/tailnet/enlace personalizado, proxy inverso, túneles, etc.), el impacto aumenta en consecuencia. A partir de la versión 2026.2.14, las rutas de carga ahora están confinadas a la raíz de cargas temporales de OpenClaw ('DEFAULT_UPLOAD_DIR') y las rutas de salto/escape son rechazadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3aa94afcfd12104c683c9cad81faf434d0dadf87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-cv7m-c9jx-vg7q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26957",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:15.840",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libredesk is a self-hosted customer support desk application. Versions prior to 1.0.2-0.20260215211005-727213631ce6 fail to validate destination URLs for webhooks, allowing an attacker posing as an authenticated \"Application Admin\" to force the server to make HTTP requests to arbitrary internal destinations. This could compromise the underlying cloud infrastructure or internal corporate network where the service is hosted. This issue has been fixed in version 1.0.2-0.20260215211005-727213631ce6."
      }, {
        "lang" : "es",
        "value" : "Libredesk es una aplicación de mesa de ayuda al cliente autoalojada. Las versiones anteriores a la 1.0.2-0.20260215211005-727213631ce6 no validan las URL de destino para los webhooks, permitiendo a un atacante que se hace pasar por un 'Administrador de Aplicación' autenticado forzar al servidor a realizar solicitudes HTTP a destinos internos arbitrarios. Esto podría comprometer la infraestructura de nube subyacente o la red corporativa interna donde se aloja el servicio. Este problema ha sido solucionado en la versión 1.0.2-0.20260215211005-727213631ce6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/abhinavxd/libredesk/commit/727213631ce6a36bcb06f50ce542155e78f51316",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/abhinavxd/libredesk/security/advisories/GHSA-wgm6-9rvv-3438",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26959",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.000",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authenticity of the ADB binary path specified in the ManualAdbPath setting before executing it, allowing arbitrary code execution with the privileges of the current user. An attacker can exploit this by crafting a malicious App.txt settings file that points ManualAdbPath to an arbitrary executable, then convincing a victim to launch the application with a command-line argument directing it to the malicious configuration directory. This vulnerability could be leveraged through social engineering tactics, such as distributing a shortcut bundled with a crafted settings file in an archive, resulting in RCE upon application startup. Thus issue has been fixed in version 0.9.26021."
      }, {
        "lang" : "es",
        "value" : "ADB Explorer es una interfaz de usuario fluida para ADB en Windows. Las versiones 0.9.26020 e inferiores no validan la integridad o autenticidad de la ruta del binario de ADB especificada en la configuración ManualAdbPath antes de ejecutarlo, lo que permite la ejecución de código arbitrario con los privilegios del usuario actual. Un atacante puede explotar esto creando un archivo de configuración App.txt malicioso que apunte ManualAdbPath a un ejecutable arbitrario, y luego convenciendo a una víctima para que inicie la aplicación con un argumento de línea de comandos que la dirija al directorio de configuración malicioso. Esta vulnerabilidad podría ser aprovechada mediante tácticas de ingeniería social, como la distribución de un acceso directo empaquetado con un archivo de configuración manipulado en un archivo comprimido, lo que resultaría en RCE al iniciar la aplicación. Este problema ha sido solucionado en la versión 0.9.26021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/commit/1b9fed20e875f5e74fd04e9889402f969c2d34e4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-gcgv-2jq7-74rp",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26963",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.167",
      "lastModified" : "2026-02-20T20:12:51.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6."
      }, {
        "lang" : "es",
        "value" : "Cilium es una solución de red, observabilidad y seguridad con un plano de datos basado en eBPF. Las versiones 1.18.0 a la 1.18.5 permitirán incorrectamente el tráfico desde Pods en otros nodos cuando el Enrutamiento Nativo, WireGuard y el Cifrado de Nodos estén habilitados. Este problema ha sido solucionado en la versión 1.18.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.18.0",
            "versionEndExcluding" : "1.18.6",
            "matchCriteriaId" : "1EB1228F-3E28-4790-A9E0-D6DE184F39D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cilium/cilium/commit/88e28e1e62c0b1a02c3f0fc22d888ac9eefbe885",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cilium/cilium/pull/42892",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.18.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-5r23-prx4-mqg3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26964",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.330",
      "lastModified" : "2026-04-14T00:50:19.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6\n and below allow non-admin users to obtain Slack OAuth client secrets, which should only be accessible to workspace administrators. The GET /api/w/{workspace}/workspaces/get_settings endpoint returns the slack_oauth_client_secret to any authenticated workspace member, regardless of their admin status. It is expected behavior for non-admin users see a redacted version of workspace settings, as some of them are necessary for the frontend to behave correctly even for non-admins. However, the Slack configuration should not be visible to non-admins. This is a legacy issue where the setting was stored as a plain value instead of using $variable indirection, and it was never added to the redaction logic. This issue has been fixed in version 1.635.0."
      }, {
        "lang" : "es",
        "value" : "Windmill es una plataforma de desarrollo de código abierto para código interno: APIs, trabajos en segundo plano, flujos de trabajo e interfaces de usuario. Las versiones 1.634.6 y anteriores permiten a los usuarios no administradores obtener secretos de cliente de Slack OAuth, que solo deberían ser accesibles para los administradores del espacio de trabajo. El endpoint GET /api/w/{workspace}/workspaces/get_settings devuelve el slack_oauth_client_secret a cualquier miembro autenticado del espacio de trabajo, independientemente de su estado de administrador. Es un comportamiento esperado que los usuarios no administradores vean una versión redactada de la configuración del espacio de trabajo, ya que algunos de ellos son necesarios para que el frontend se comporte correctamente incluso para los no administradores. Sin embargo, la configuración de Slack no debería ser visible para los no administradores. Este es un problema heredado donde la configuración se almacenaba como un valor sin formato en lugar de usar la indirección de $variable, y nunca se añadió a la lógica de redacción. Este problema ha sido solucionado en la versión 1.635.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windmill:windmill:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.635.0",
            "matchCriteriaId" : "DFD14609-DFAB-4B7A-98CD-B4537FF97C5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/windmill-labs/windmill/commit/43218c62852490d0efafa8f94385bfe0e8f2ad82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/windmill-labs/windmill/releases/tag/v1.635.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/windmill-labs/windmill/security/advisories/GHSA-f27g-j463-q85w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26972",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.500",
      "lastModified" : "2026-02-20T19:03:33.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted an unsanitized output path. When invoked via the browser control gateway routes, this allowed path traversal to write downloads outside the intended OpenClaw temp downloads directory. This issue is not exposed via the AI agent tool schema (no `download` action). Exploitation requires authenticated CLI access or an authenticated gateway RPC token. Version 2026.2.13 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.1.12 a 2026.2.12, los ayudantes de descarga del navegador de OpenClaw aceptaban una ruta de salida no saneada. Cuando se invocaban a través de las rutas de la pasarela de control del navegador, esto permitía el salto de ruta para escribir descargas fuera del directorio de descargas temporales de OpenClaw previsto. Este problema no se expone a través del esquema de herramientas del agente de IA (sin acción 'download'). La explotación requiere acceso CLI autenticado o un token RPC de pasarela autenticado. La versión 2026.2.13 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.12",
            "versionEndExcluding" : "2026.2.13",
            "matchCriteriaId" : "36E861EF-8BE8-4C20-A718-77CB50C49CB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/7f0489e4731c8d965d78d6eac4a60312e46a9426",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-xwjm-j929-xq7c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27001",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.653",
      "lastModified" : "2026-02-20T18:13:49.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (workspace path) into the agent system prompt without sanitization. If an attacker can cause OpenClaw to run inside a directory whose name contains control/format characters (for example newlines or Unicode bidi/zero-width markers), those characters could break the prompt structure and inject attacker-controlled instructions. Starting in version 2026.2.15, the workspace path is sanitized before it is embedded into any LLM prompt output, stripping Unicode control/format characters and explicit line/paragraph separators. Workspace path resolution also applies the same sanitization as defense-in-depth."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.15, OpenClaw incrustaba el directorio de trabajo actual (ruta del espacio de trabajo) en el prompt del sistema del agente sin saneamiento. Si un atacante puede hacer que OpenClaw se ejecute dentro de un directorio cuyo nombre contiene caracteres de control/formato (por ejemplo, saltos de línea o marcadores Unicode bidireccionales/de ancho cero), esos caracteres podrían romper la estructura del prompt e inyectar instrucciones controladas por el atacante. A partir de la versión 2026.2.15, la ruta del espacio de trabajo se sanea antes de incrustarse en cualquier salida de prompt de LLM, eliminando caracteres de control/formato Unicode y separadores explícitos de línea/párrafo. La resolución de la ruta del espacio de trabajo también aplica el mismo saneamiento como defensa en profundidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/6254e96acf16e70ceccc8f9b2abecee44d606f79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-2qj5-gwg2-xwc4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27002",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.827",
      "lastModified" : "2026-02-20T18:11:24.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 blocks dangerous sandbox Docker settings and includes runtime enforcement when building `docker create` args; config-schema validation for `network=host`, `seccompProfile=unconfined`, `apparmorProfile=unconfined`; and security audit findings to surface dangerous sandbox docker config. As a workaround, do not configure `agents.*.sandbox.docker.binds` to mount system directories or Docker socket paths, keep `agents.*.sandbox.docker.network` at `none` (default) or `bridge`, and do not use `unconfined` for seccomp/AppArmor profiles."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.15, un problema de inyección de configuración en el sandbox de la herramienta Docker podría permitir que opciones peligrosas de Docker (montajes de enlace, redes de host, perfiles no confinados) se aplicaran, permitiendo el escape del contenedor o el acceso a datos del host. OpenClaw 2026.2.15 bloquea configuraciones peligrosas de Docker del sandbox e incluye aplicación en tiempo de ejecución al construir argumentos de `docker create`; validación de esquema de configuración para `network=host`, `seccompProfile=unconfined`, `apparmorProfile=unconfined`; y hallazgos de auditoría de seguridad para revelar configuraciones peligrosas de Docker del sandbox. Como solución alternativa, no configure `agents.*.sandbox.docker.binds` para montar directorios del sistema o rutas de socket de Docker, mantenga `agents.*.sandbox.docker.network` en `none` (predeterminado) o `bridge`, y no use `unconfined` para perfiles de seccomp/AppArmor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/887b209db47f1f9322fead241a1c0b043fd38339",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-w235-x559-36mg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27003",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:16.983",
      "lastModified" : "2026-02-20T18:06:29.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Telegram bot tokens can appear in error messages and stack traces (for example, when request URLs include `https://api.telegram.org/bot<token>/...`). Prior to version 2026.2.15, OpenClaw logged these strings without redaction, which could leak the bot token into logs, crash reports, CI output, or support bundles. Disclosure of a Telegram bot token allows an attacker to impersonate the bot and take over Bot API access. Users should upgrade to version 2026.2.15 to obtain a fix and rotate the Telegram bot token if it may have been exposed."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Los tokens de bot de Telegram pueden aparecer en mensajes de error y rastreos de pila (por ejemplo, cuando las URL de solicitud incluyen 'https://api.telegram.org/bot/...'). Antes de la versión 2026.2.15, OpenClaw registraba estas cadenas sin censura, lo que podría filtrar el token del bot en registros, informes de fallos, salida de CI o paquetes de soporte. La divulgación de un token de bot de Telegram permite a un atacante suplantar la identidad del bot y tomar el control del acceso a la API del Bot. Los usuarios deben actualizar a la versión 2026.2.15 para obtener una solución y rotar el token del bot de Telegram si pudo haber sido expuesto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/cf69907015b659e5025efb735ee31bd05c4ee3d5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-chf7-jq6g-qrwv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27004",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:17.140",
      "lastModified" : "2026-02-20T18:05:44.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessions_send`) allowed broader session targeting than some operators intended. This is primarily a configuration/visibility-scoping issue in multi-user environments where peers are not equally trusted. In Telegram webhook mode, monitor startup also did not fall back to per-account `webhookSecret` when only the account-level secret was configured. In shared-agent, multi-user, less-trusted environments: session-tool access could expose transcript content across peer sessions. In single-agent or trusted environments, practical impact is limited. In Telegram webhook mode, account-level secret wiring could be missed unless an explicit monitor webhook secret override was provided. Version 2026.2.15 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.15, en algunas implementaciones de agente compartido, las herramientas de sesión de OpenClaw ('sessions_list', 'sessions_history', 'sessions_send') permitían una segmentación de sesión más amplia de lo que algunos operadores pretendían. Esto es principalmente un problema de configuración/alcance de visibilidad en entornos multiusuario donde los pares no son igualmente confiables. En modo webhook de Telegram, el inicio del monitor tampoco recurría al 'webhookSecret' por cuenta cuando solo se configuraba el secreto a nivel de cuenta. En entornos de agente compartido, multiusuario y menos confiables: el acceso a las herramientas de sesión podría exponer el contenido de la transcripción a través de sesiones de pares. En entornos de agente único o confiables, el impacto práctico es limitado. En modo webhook de Telegram, la conexión del secreto a nivel de cuenta podría pasarse por alto a menos que se proporcionara una anulación explícita del secreto del webhook del monitor. La versión 2026.2.15 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/c6c53437f7da033b94a01d492e904974e7bda74c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-6hf3-mhgc-cm65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27007",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:17.303",
      "lastModified" : "2026-02-20T18:04:01.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.15, `normalizeForHash` in `src/agents/sandbox/config-hash.ts` recursively sorted arrays that contained only primitive values. This made order-sensitive sandbox configuration arrays hash to the same value even when order changed. In OpenClaw sandbox flows, this hash is used to decide whether existing sandbox containers should be recreated. As a result, order-only config changes (for example Docker `dns` and `binds` array order) could be treated as unchanged and stale containers could be reused. This is a configuration integrity issue affecting sandbox recreation behavior. Starting in version 2026.2.15, array ordering is preserved during hash normalization; only object key ordering remains normalized for deterministic hashing."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.15, 'normalizeForHash' en 'src/agents/sandbox/config-hash.ts' ordenaba recursivamente los arrays que contenían solo valores primitivos. Esto hacía que los arrays de configuración de la sandbox sensibles al orden se hashificaran al mismo valor incluso cuando el orden cambiaba. En los flujos de la sandbox de OpenClaw, este hash se utiliza para decidir si los contenedores de la sandbox existentes deben recrearse. Como resultado, los cambios de configuración solo de orden (por ejemplo, el orden de los arrays 'dns' y 'binds' de Docker) podían tratarse como sin cambios y los contenedores obsoletos podían reutilizarse. Esto es un problema de integridad de la configuración que afecta el comportamiento de recreación de la sandbox. A partir de la versión 2026.2.15, el orden de los arrays se conserva durante la normalización del hash; solo el orden de las claves de los objetos permanece normalizado para un hashing determinista."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1254"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/41ded303b4f6dae5afa854531ff837c3276ad60b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-xxvh-5hwj-42pp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27008",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:17.460",
      "lastModified" : "2026-02-20T18:01:28.333",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.install` flow, this could write files outside the intended install sandbox. Version 2026.2.15 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.15, un error en la instalación de la habilidad 'download' permitía que los valores de 'targetDir' del frontmatter de la habilidad se resolvieran fuera del directorio de herramientas por habilidad si no se validaban estrictamente. En el flujo 'skills.install' solo para administradores, esto podría escribir archivos fuera del sandbox de instalación previsto. La versión 2026.2.15 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/2363e1b0853a028e47f90dcc1066e3e9809d65f1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/b6305e97256d67e439719faacf5af3de9727d6e1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-h7f7-89mm-pqh6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27009",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T00:16:17.620",
      "lastModified" : "2026-02-20T17:41:44.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rendering assistant identity (name/avatar) into an inline `<script>` tag without script-context-safe escaping. A crafted value containing `</script>` could break out of the script tag and execute attacker-controlled JavaScript in the Control UI origin. Version 2026.2.15 removed inline script injection and serve bootstrap config from a JSON endpoint and added a restrictive Content Security Policy for the Control UI (`script-src 'self'`, no inline scripts)."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. Antes de la versión 2026.2.15, existía un problema de XSS almacenado en la interfaz de usuario de control de OpenClaw al renderizar la identidad del asistente (nombre/avatar) en una etiqueta `` podría escapar de la etiqueta de script y ejecutar JavaScript controlado por el atacante en el origen de la interfaz de usuario de control. La versión 2026.2.15 eliminó la inyección de scripts en línea y sirve la configuración de arranque desde un endpoint JSON, y añadió una Política de Seguridad de Contenido restrictiva para la interfaz de usuario de control (`script-src 'self'`, sin scripts en línea)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3b4096e02e7e335f99f5986ec1bd566e90b14a7e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/adc818db4a4b3b8d663e7674ef20436947514e1b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-37gc-85xm-2ww6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2350",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-02-20T00:16:17.780",
      "lastModified" : "2026-02-27T23:48:19.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de inserción de información sensible en archivo de registro en Interact y TDS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.196",
            "matchCriteriaId" : "46FC0070-9739-435D-849B-B807E0234E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.102",
            "matchCriteriaId" : "A3728708-507B-4141-ABBD-9875D2127341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-008",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2408",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-02-20T00:16:17.930",
      "lastModified" : "2026-02-27T21:56:07.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de uso después de liberación en la extensión de cliente de Cloud Workloads Enforce."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:cloud_workloads:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.222",
            "matchCriteriaId" : "92362DBC-238B-4862-9D23-84434624F0FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-005",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2435",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-02-20T00:16:18.060",
      "lastModified" : "2026-02-27T21:53:11.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed a SQL injection vulnerability in Asset."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de inyección SQL en Asset."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32",
            "versionEndExcluding" : "1.32.179",
            "matchCriteriaId" : "8A296269-F775-41DF-9471-EB7C80827D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.33",
            "versionEndExcluding" : "1.33.269",
            "matchCriteriaId" : "511FD7BF-99C4-4B44-A644-1D09D31CFE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.36",
            "versionEndExcluding" : "1.36.108",
            "matchCriteriaId" : "0E29EB1C-D5C7-4FA9-8BD1-E07845219A49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-004",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2605",
      "sourceIdentifier" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "published" : "2026-02-20T00:16:18.200",
      "lastModified" : "2026-02-20T19:33:36.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
      }, {
        "lang" : "es",
        "value" : "Tanium abordó una vulnerabilidad de inserción de información sensible en un archivo de registro en TanOS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tanium:tanos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.4",
            "versionEndExcluding" : "1.8.4.0249",
            "matchCriteriaId" : "341263D2-D015-498F-A717-729B8DC8D93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tanium:tanos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.5",
            "versionEndExcluding" : "1.8.5.0282",
            "matchCriteriaId" : "47E0A12E-244A-43B4-A25F-FFC7100066E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tanium:tanos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.6\\*",
            "versionEndIncluding" : "1.8.6.0150",
            "matchCriteriaId" : "ACA62C74-B541-4CD2-847E-D9C11422862A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.tanium.com/TAN-2026-006",
        "source" : "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26967",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T01:15:59.953",
      "lastModified" : "2026-02-20T19:30:22.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL unit size field without validating that both bytes are within the payload buffer bounds. The vulnerability affects applications that receive video using H.264. A patch is available at https://github.com/pjsip/pjproject/commit/f821c214e52b11bae11e4cd3c7f0864538fb5491."
      }, {
        "lang" : "es",
        "value" : "PJSIP es una biblioteca de comunicación multimedia de código abierto y gratuita escrita en C. En las versiones 2.16 e inferiores, existe una vulnerabilidad crítica de desbordamiento de búfer basado en montículo en el despaquetizador H.264 de PJSIP. El error ocurre al procesar paquetes SRTP malformados, donde el despaquetizador lee un campo de tamaño de unidad NAL de 2 bytes sin validar que ambos bytes estén dentro de los límites del búfer de carga útil. La vulnerabilidad afecta a las aplicaciones que reciben video usando H.264. Un parche está disponible en https://github.com/pjsip/pjproject/commit/f821c214e52b11bae11e4cd3c7f0864538fb5491."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "117AFEC4-36E1-424F-B2A3-6EC94FBBDF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/f821c214e52b11bae11e4cd3c7f0864538fb5491",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-x2hc-6969-g8v6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26974",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T01:16:00.107",
      "lastModified" : "2026-03-02T14:35:18.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports **/*.plugin.{js,mjs} files including those from node_modules, so any malicious package with a .plugin.js file can execute arbitrary code when installed or required. All projects using this loading behavior are affected, especially those installing untrusted packages. This issue has been fixed in version 0.0.5. To workaround this issue, users can audit and restrict which packages are installed in node_modules."
      }, {
        "lang" : "es",
        "value" : "Slyde es un programa que crea presentaciones animadas a partir de XML. En las versiones 0.0.4 e inferiores, Node.js importa automáticamente los archivos **/*.plugin.{js,mjs}, incluidos los de node_modules, por lo que cualquier paquete malicioso con un archivo .plugin.js puede ejecutar código arbitrario cuando se instala o se requiere. Todos los proyectos que utilizan este comportamiento de carga se ven afectados, especialmente aquellos que instalan paquetes no confiables. Este problema ha sido solucionado en la versión 0.0.5. Para aplicar una solución alternativa a este problema, los usuarios pueden auditar y restringir qué paquetes se instalan en node_modules."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slyde.js:slyde:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.0.5",
            "matchCriteriaId" : "23110C32-9A18-4516-8284-42138FAE60E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tygo-van-den-Hurk/Slyde/commit/e4c215b061e44fd2ead805de34d72642a710af60",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Tygo-van-den-Hurk/Slyde/releases/tag/v0.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Tygo-van-den-Hurk/Slyde/security/advisories/GHSA-w7h5-55jg-cq2f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26975",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T01:16:00.273",
      "lastModified" : "2026-03-17T21:03:07.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Music Assistant is an open-source media library manager that integrates streaming services with connected speakers. Versions 2.6.3 and below allow unauthenticated network-adjacent attackers to execute arbitrary code on affected installations. The music/playlists/update API allows users to bypass the .m3u extension enforcement and write files anywhere on the filesystem, which is exacerbated by the container running as root. This can be exploited to achieve Remote Code Execution by writing a malicious .pth file to the Python site-packages directory, which will execute arbitrary commands when Python loads. This issue has been fixed in version 2.7.0."
      }, {
        "lang" : "es",
        "value" : "Music Assistant es un gestor de biblioteca de medios de código abierto que integra servicios de streaming con altavoces conectados. Las versiones 2.6.3 e inferiores permiten a atacantes adyacentes a la red no autenticados ejecutar código arbitrario en las instalaciones afectadas. La API music/playlists/update permite a los usuarios eludir la aplicación de la extensión .m3u y escribir archivos en cualquier lugar del sistema de archivos, lo cual se ve exacerbado por el contenedor que se ejecuta como root. Esto puede ser explotado para lograr la ejecución remota de código escribiendo un archivo .pth malicioso en el directorio site-packages de Python, lo que ejecutará comandos arbitrarios cuando Python cargue. Este problema ha sido solucionado en la versión 2.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music-assistant:music_assistant_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "740926C1-C4E2-4E42-A880-6326746DC251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/music-assistant/server/pull/2684",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/music-assistant/server/releases/tag/2.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/music-assistant/server/security/advisories/GHSA-7jcc-p6xr-835j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26064",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:52.703",
      "lastModified" : "2026-02-20T16:53:32.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below contain a Path Traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows, this leads to Remote Code Execution by writing a payload to the Startup folder, which executes on next login. Function extract_pictures only checks startswith('Pictures'), and does not sanitize '..' sequences. calibre's own ZipFile.extractall() in utils/zipfile.py does sanitize '..' via _get_targetpath(), but extract_pictures() bypasses this by using manual zf.read() + open(). This issue has been fixed in version 9.3.0."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos multiplataforma para ver, convertir, editar y catalogar libros electrónicos. Las versiones 9.2.1 e inferiores contienen una vulnerabilidad de salto de ruta que permite la escritura arbitraria de archivos en cualquier lugar donde el usuario tenga permisos de escritura. En Windows, esto conduce a la ejecución remota de código al escribir una carga útil en la carpeta de Inicio, que se ejecuta en el siguiente inicio de sesión. La función extract_pictures solo verifica startswith('Pictures') y no sanea las secuencias '..'. El propio ZipFile.extractall() de calibre en utils/zipfile.py sí sanea '..' a través de _get_targetpath(), pero extract_pictures() omite esto al usar zf.read() + open() manual. Este problema ha sido solucionado en la versión 9.3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3.0",
            "matchCriteriaId" : "A324806A-191D-495C-925D-5DF49CCD8447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/commit/e1b5f9b45a5e8fa96c136963ad9a1d35e6adac62",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-72ch-3hqc-pgmp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26065",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:53.730",
      "lastModified" : "2026-02-20T16:45:18.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below are vulnerable to Path Traversal through PDB readers (both 132-byte and 202-byte header variants) that allow arbitrary file writes with arbitrary extension and arbitrary content anywhere the user has write permissions. Files are written in 'wb' mode, silently overwriting existing files. This can lead to potential code execution and Denial of Service through file corruption. This issue has been fixed in version 9.3.0."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos multiplataforma para visualizar, convertir, editar y catalogar libros electrónicos. Las versiones 9.2.1 e inferiores son vulnerables a saltos de ruta a través de lectores PDB (tanto variantes de cabecera de 132 bytes como de 202 bytes) que permiten escrituras arbitrarias de archivos con extensión y contenido arbitrarios en cualquier lugar donde el usuario tenga permisos de escritura. Los archivos se escriben en modo 'wb', sobrescribiendo silenciosamente los archivos existentes. Esto puede llevar a una posible ejecución de código y denegación de servicio a través de la corrupción de archivos. Este problema ha sido solucionado en la versión 9.3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3.0",
            "matchCriteriaId" : "A324806A-191D-495C-925D-5DF49CCD8447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/commit/b6da1c3878c06eb1356cb0ec1106cb66e0e9bfb8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-vmfh-7mr7-pp2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26960",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:53.883",
      "lastModified" : "2026-02-20T19:24:16.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8."
      }, {
        "lang" : "es",
        "value" : "node-tar es un Tar con todas las funciones para Node.js. Al usar las opciones predeterminadas en las versiones 7.5.7 e inferiores, un archivo controlado por el atacante puede crear un enlace duro dentro del directorio de extracción que apunte a un archivo fuera de la raíz de extracción, permitiendo la lectura y escritura arbitraria de archivos como el usuario extractor. La gravedad es alta porque la primitiva elude las protecciones de ruta y convierte la extracción del archivo en una primitiva de acceso directo al sistema de archivos. Este problema ha sido solucionado en la versión 7.5.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isaacs:tar:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.5.8",
            "matchCriteriaId" : "709C920B-A33B-4301-AC36-EF3065986019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26977",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:54.057",
      "lastModified" : "2026-02-20T16:33:11.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release."
      }, {
        "lang" : "es",
        "value" : "Frappe Learning Management System (LMS) es un sistema de aprendizaje que ayuda a los usuarios a estructurar su contenido. En las versiones 2.44.0 e inferiores, los usuarios no autorizados pueden acceder a los detalles de cursos no publicados a través de endpoints de API. Está planificada una solución para este problema para la versión 2.45.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.45.0",
            "matchCriteriaId" : "1AF5F1A6-B0CD-4FCA-A7AC-FC62A44555F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/lms/security/advisories/GHSA-26vf-p39q-frx3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26980",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:54.213",
      "lastModified" : "2026-02-20T19:22:53.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. Las versiones 3.24.0 a la 6.19.0 permiten a atacantes no autenticados realizar lecturas arbitrarias de la base de datos. Este problema ha sido solucionado en la versión 6.19.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.24.0",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "1DD2D680-6968-4F14-A055-9F81B8043085"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/30868d632b2252b638bc8a4c8ebf73964592ed91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/releases/tag/v6.19.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-w52v-v783-gw97",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26987",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:54.383",
      "lastModified" : "2026-02-20T16:32:16.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable to  Reflected XSS attacks via email field. This issue has been fixed in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitoreo de red de autodescubrimiento basada en PHP/MySQL/SNMP. Las versiones 25.12.0 e inferiores son vulnerables a ataques de XSS Reflejado a través del campo de correo electrónico. Este problema ha sido solucionado en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "C0838E1C-0369-4B31-9B51-83A5D2A7CAC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/8e626b38ef92e240532cdac2ac7e38706a71208b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/19038",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/releases/tag/26.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-gqx7-99jw-6fpr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26988",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:54.550",
      "lastModified" : "2026-02-20T16:31:42.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below contain an SQL Injection vulnerability in the ajax_table.php endpoint. The application fails to properly sanitize or parameterize user input when processing IPv6 address searches. Specifically, the address parameter is split into an address and a prefix, and the prefix portion is directly concatenated into the SQL query string without validation. This allows an attacker to inject arbitrary SQL commands, potentially leading to unauthorized data access or database manipulation. This issue has been fixed in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitoreo de red basada en PHP/MySQL/SNMP con descubrimiento automático. Las versiones 25.12.0 e inferiores contienen una vulnerabilidad de inyección SQL en el endpoint ajax_table.php. La aplicación no logra sanitizar o parametrizar correctamente la entrada del usuario al procesar búsquedas de direcciones IPv6. Específicamente, el parámetro 'address' se divide en una 'dirección' y un 'prefijo', y la porción del prefijo se concatena directamente en la cadena de consulta SQL sin validación. Esto permite a un atacante inyectar comandos SQL arbitrarios, lo que podría llevar a un acceso no autorizado a los datos o a la manipulación de la base de datos. Este problema ha sido corregido en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "C0838E1C-0369-4B31-9B51-83A5D2A7CAC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/15429580baba03ed1dd377bada1bde4b7a1175a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/18777",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-h3rv-q4rq-pqcv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26989",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:54.710",
      "lastModified" : "2026-02-20T16:25:20.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Rules workflow. An attacker with administrative privileges can inject malicious scripts that execute in the browser context of any user who accesses the Alert Rules page. This issue has been fixed in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitorización de red basada en PHP/MySQL/SNMP con auto-descubrimiento. Las versiones 25.12.0 e inferiores están afectadas por una vulnerabilidad de Cross-Site Scripting Almacenado (XSS) en el flujo de trabajo de Reglas de Alerta. Un atacante con privilegios de administrador puede inyectar scripts maliciosos que se ejecuten en el contexto del navegador de cualquier usuario que acceda a la página de Reglas de Alerta. Este problema ha sido solucionado en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "C0838E1C-0369-4B31-9B51-83A5D2A7CAC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/087608cf9f851189847cb8e8e5ad002e59170c58",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/19039",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/releases/tag/26.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-6xmx-xr9p-58p7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26990",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:54.870",
      "lastModified" : "2026-02-20T16:24:36.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below have a Time-Based Blind SQL Injection vulnerability in address-search.inc.php via the address parameter. When a crafted subnet prefix is supplied, the prefix value is concatenated directly into an SQL query without proper parameter binding, allowing an attacker to manipulate query logic and infer database information through time-based conditional responses. This vulnerability requires authentication and is exploitable by any authenticated user. This issue has been fixedd in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitorización de red basada en PHP/MySQL/SNMP con autodescubrimiento. Las versiones 25.12.0 e inferiores tienen una vulnerabilidad de inyección SQL ciega basada en tiempo en address-search.inc.php a través del parámetro address. Cuando se proporciona un prefijo de subred manipulado, el valor del prefijo se concatena directamente en una consulta SQL sin una vinculación de parámetros adecuada, permitiendo a un atacante manipular la lógica de la consulta e inferir información de la base de datos a través de respuestas condicionales basadas en tiempo. Esta vulnerabilidad requiere autenticación y es explotable por cualquier usuario autenticado. Este problema ha sido solucionado en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "C0838E1C-0369-4B31-9B51-83A5D2A7CAC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/15429580baba03ed1dd377bada1bde4b7a1175a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/18777",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-79q9-wc6p-cf92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27016",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T02:16:55.140",
      "lastModified" : "2026-02-20T16:22:29.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks strip_tags() sanitization while other fields (name, oid, datatype) are sanitized. The unsanitized value is stored in the database and rendered without HTML escaping. This issue is fixed in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitorización de red basada en PHP/MySQL/SNMP con auto-descubrimiento. Las versiones 24.10.0 hasta la 26.1.1 son vulnerables a XSS almacenado a través del parámetro 'unit' en Custom OID. La funcionalidad Custom OID no realiza una sanitización en strip_tags() mientras que otros campos (name, oid, datatype) están sanitizados. El valor no sanitizado se almacena en la base de datos y se renderiza sin escape HTML. Este problema está solucionado en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.10.0",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "5DF70D72-DD59-426A-8938-18E877C05530"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/3bea263e02441690c01dea7fa3fe6ffec94af335",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/19040",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/releases/tag/26.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2819",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T02:16:55.350",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/deleteByInstanceIds of the component Workflow Module. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Dromara RuoYi-Vue-Plus hasta 5.5.3. Esta vulnerabilidad afecta la función SaServletFilter del archivo /workflow/instance/deleteByInstanceIds del componente Módulo de Flujo de Trabajo. Si se manipula se logra una falta de autorización. El ataque puede ser iniciado en remoto. El exploit está disponible públicamente y podría ser utilizado. Se avisó pronto al proveedor sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346944",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346944",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753321",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2820",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T02:16:55.593",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects some unknown processing of the file /Module/CRXT/Controller/XAccessPermissionPlus.ashx. The manipulation of the argument DeviceIDS results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en el sistema Fujian Smart Integrated Management Platform System hasta la versión 7.5. Este problema afecta a un procesamiento desconocido del archivo /Module/CRXT/Controller/XAccessPermissionPlus.ashx. Manipular el argumento DeviceIDS provoca una inyección SQL. El ataque puede ser lanzado de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/cve-yinda-sql/blob/main/introduce",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/luoye197-prog/cve-yinda-sql/blob/main/poc.py",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346945",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346945",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753397",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26991",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:15:59.977",
      "lastModified" : "2026-02-20T16:21:10.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the device group name is not sanitized, allowing attackers with admin privileges to perform Stored Cross-Site Scripting (XSS) attacks. When a user adds a device group, an HTTP POST request is sent to the Request-URI \"/device-groups\". The name of the newly created device group is stored in the value of the name parameter. After the device group is created, the entry is displayed along with relevant buttons such as Rediscover Devices, Edit, and Delete. This issue has been fixed in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitorización de red basada en PHP/MySQL/SNMP con descubrimiento automático. En las versiones 26.1.1 y anteriores, el nombre del grupo de dispositivos no está saneado, permitiendo a atacantes con privilegios de administrador realizar ataques de Cross-Site Scripting (XSS) almacenado. Cuando un usuario añade un grupo de dispositivos, se envía una solicitud HTTP POST a la Request-URI '/device-groups'. El nombre del grupo de dispositivos recién creado se almacena en el valor del parámetro name. Después de que se cree el grupo de dispositivos, la entrada se muestra junto con botones relevantes como Rediscover Devices, Edit y Delete. Este problema ha sido solucionado en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "C0838E1C-0369-4B31-9B51-83A5D2A7CAC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/64b31da444369213eb4559ec1c304ebfaa0ba12c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/19041",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/releases/tag/26.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-5pqf-54qp-32wx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26992",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:16:00.990",
      "lastModified" : "2026-02-20T16:20:34.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the port group name is not sanitized, allowing attackers with admin privileges to perform Stored Cross-Site Scripting (XSS) attacks. When a user adds a port group, an HTTP POST request is sent to the Request-URI \"/port-groups\". The name of the newly created port group is stored in the value of the name parameter. After the port group is created, the entry is displayed along with relevant buttons such as Edit and Delete. This issue has been fixed in version 26.2.0."
      }, {
        "lang" : "es",
        "value" : "LibreNMS es una herramienta de monitorización de red basada en PHP/MySQL/SNMP con descubrimiento automático. En las versiones 26.1.1 e inferiores, el nombre del grupo de puertos no se sanea, lo que permite a atacantes con privilegios de administrador realizar ataques de Stored Cross-Site Scripting (XSS). Cuando un usuario añade un grupo de puertos, se envía una solicitud HTTP POST a la Request-URI '/port-groups'. El nombre del grupo de puertos recién creado se almacena en el valor del parámetro name. Después de que se cree el grupo de puertos, la entrada se muestra junto con botones relevantes como Editar y Eliminar. Este problema se ha solucionado en la versión 26.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "C0838E1C-0369-4B31-9B51-83A5D2A7CAC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/librenms/librenms/commit/882fe6f90ea504a3732f83caf89bba7850a5699f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/librenms/librenms/pull/19042",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/librenms/librenms/releases/tag/26.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/librenms/librenms/security/advisories/GHSA-93fx-g747-695x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26993",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:16:01.153",
      "lastModified" : "2026-03-03T17:35:32.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content validation or sanitization. By embedding malicious JavaScript within an SVG (or other active content formats such as HTML or XML), an attacker can achieve script execution in the context of the application's origin when a victim views the file in “raw” mode. This results in a stored Cross-Site Scripting (XSS) vulnerability that can be exploited to exfiltrate user data. This issue has been fixed in version 1.7.1."
      }, {
        "lang" : "es",
        "value" : "Flare es una plataforma autoalojable  para compartir archivos basada en Next.js que se integra con herramientas de captura de pantalla. Las versiones 1.7.0 e inferiores permiten a los usuarios subir archivos sin una validación o saneamiento de contenido adecuados. Al incrustar JavaScript malicioso dentro de un SVG (u otros formatos de contenido activo como HTML o XML), un atacante puede lograr la ejecución de scripts en el contexto del origen de la aplicación cuando una víctima ve el archivo en modo 'raw'. Esto resulta en una vulnerabilidad de cross-site scripting (XSS) almacenado que puede ser explotada para exfiltrar datos de usuario. Este problema ha sido solucionado en la versión 1.7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flintsh:flare:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "170C2076-8C10-4829-A9DC-35F79162D876"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlintSH/Flare/commit/7763d7b954799552f287ab9260bb1353f8880163",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FlintSH/Flare/releases/tag/v1.7.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/FlintSH/Flare/security/advisories/GHSA-q8fp-w6m5-4gjm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26994",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:16:01.330",
      "lastModified" : "2026-02-20T19:20:00.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. In versions 1.6.7 and below, uTLS did not implement the TLS 1.3 downgrade protection mechanism specified in RFC 8446 Section 4.1.3 when using a uTLS ClientHello spec. This allowed an active network adversary to downgrade TLS 1.3 connections initiated by a uTLS client to a lower TLS version (e.g., TLS 1.2) by modifying the ClientHello message to exclude the SupportedVersions extension, causing the server to respond with a TLS 1.2 ServerHello (along with a downgrade canary in the ServerHello random field). Because uTLS did not check the downgrade canary in the ServerHello random field, clients would accept the downgraded connection without detecting the attack. This attack could also be used by an active network attacker to fingerprint uTLS connections. This issue has been fixed in version 1.7.0."
      }, {
        "lang" : "es",
        "value" : "uTLS es una bifurcación de crypto/tls, creado para personalizar ClientHello con el fin de resistir la identificación de huellas digitales mientras se sigue utilizando para el protocolo de enlace. En las versiones 1.6.7 y anteriores, uTLS no implementó el mecanismo de protección contra la degradación de TLS 1.3 especificado en la Sección 4.1.3 de RFC 8446 cuando se utiliza una especificación de ClientHello de uTLS. Esto permitió a un adversario de red activo degradar las conexiones TLS 1.3 iniciadas por un cliente de uTLS a una versión de TLS inferior (por ejemplo, TLS 1.2) modificando el mensaje ClientHello para excluir la extensión SupportedVersions, haciendo que el servidor responda con un ServerHello de TLS 1.2 (junto con un 'canary' de degradación en el campo aleatorio de ServerHello). Debido a que uTLS no verificó el 'canary' de degradación en el campo aleatorio de ServerHello, los clientes aceptarían la conexión degradada sin detectar el ataque. Este ataque también podría ser utilizado por un atacante de red activo para la huella digital de conexiones uTLS. Este problema ha sido solucionado en la versión 1.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:refraction-networking:utls:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "9F530DA4-D661-48AF-9406-4B86A99C9E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/refraction-networking/utls/commit/f8892761e2a4d29054264651d3a86fda83bc83f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/refraction-networking/utls/issues/181",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/refraction-networking/utls/pull/337",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/refraction-networking/utls/security/advisories/GHSA-pmc3-p9hx-jq96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26995",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:16:01.520",
      "lastModified" : "2026-02-20T03:16:01.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the issue is an external dependency vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26996",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:16:01.620",
      "lastModified" : "2026-03-06T21:32:10.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1."
      }, {
        "lang" : "es",
        "value" : "minimatch es una utilidad de coincidencia mínima para convertir expresiones glob en objetos RegExp de JavaScript. Las versiones 10.2.0 e inferiores son vulnerables a la denegación de servicio por expresión regular (ReDoS) cuando un patrón glob contiene muchos comodines * consecutivos seguidos de un carácter literal que no aparece en la cadena de prueba. Cada * se compila en un grupo de regex [^/]*? separado, y cuando la coincidencia falla, el motor de regex de V8 retrocede exponencialmente a través de todas las posibles divisiones. La complejidad temporal es O(4^N) donde N es el número de caracteres *. Con N=15, una sola llamada a minimatch() tarda ~2 segundos. Con N=34, se cuelga efectivamente para siempre. Cualquier aplicación que pase cadenas controladas por el usuario a minimatch() como argumento de patrón es vulnerable a DoS. Este problema ha sido solucionado en la versión 10.2.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "1A598E18-C34A-43E8-82DA-95EAACBF9268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.2.4",
            "matchCriteriaId" : "1CEB97F3-4721-4E02-93DE-805EA36638C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.7",
            "matchCriteriaId" : "7167468C-B247-47A2-AF68-C06AF465B7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.2.1",
            "matchCriteriaId" : "686950A5-D463-4137-B84D-C49289310CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.4.7",
            "matchCriteriaId" : "D432BEB1-E7D8-4026-AD96-B2BB2AEB81EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.5",
            "matchCriteriaId" : "8B418907-81D2-4133-9F43-7EF09B1C387A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "F0E846CB-07F2-48A7-819F-CCA3CCF4C9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.1",
            "matchCriteriaId" : "089D3F7C-8A47-4A54-B763-0499C0D0E6BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27017",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T03:16:01.797",
      "lastModified" : "2026-02-20T19:09:30.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred cipher suite in the outer ClientHello and for ECH, it does so consistently based on hardware support—for example, if it prefers AES for the outer cipher suite, it also uses AES for ECH. However, the Chrome parrot in uTLS hardcodes AES preference for outer cipher suites but selects the ECH cipher suite randomly between AES and ChaCha20. This creates a 50% chance of selecting ChaCha20 for ECH while using AES for the outer cipher suite, a combination impossible in Chrome. This issue only affects GREASE ECH; in real ECH, Chrome selects the first valid cipher suite when AES is preferred, which uTLS handles correctly. This issue has been fixed in version 1.8.1."
      }, {
        "lang" : "es",
        "value" : "uTLS es un 'fork' de crypto/tls, creado para personalizar ClientHello para que resista la identificación de huellas digitales mientras se sigue utilizando para el protocolo de enlace. Las versiones 1.6.0 a 1.8.0 contienen una falta de coincidencia de huella digital con Chrome cuando se usa GREASE ECH, relacionada con la selección de la suite de cifrado. Cuando Chrome selecciona la suite de cifrado preferida en el ClientHello externo y para ECH, lo hace de forma consistente basándose en el soporte de hardware; por ejemplo, si prefiere AES para la suite de cifrado externa, también usa AES para ECH. Sin embargo, el 'loro' de Chrome en uTLS codifica de forma rígida la preferencia de AES para las suites de cifrado externas, pero selecciona la suite de cifrado ECH aleatoriamente entre AES y ChaCha20. Esto hace que haya un 50% de probabilidad de que se seleccione ChaCha20 para ECH mientras se usa AES para la suite de cifrado externa, una combinación imposible en Chrome. Este problema solo afecta a GREASE ECH; en ECH real, Chrome selecciona la primera suite de cifrado válida cuando se prefiere AES, lo cual uTLS maneja correctamente. Este problema ha sido solucionado en la versión 1.8.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1240"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:refraction-networking:utls:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.8.1",
            "matchCriteriaId" : "7B5FAB0B-7ED3-4F55-906F-0A3D31B212BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/refraction-networking/utls/security/advisories/GHSA-7m29-f4hw-g2vx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2384",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-20T03:16:01.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `vc_quizmaker` shortcode in all versions up to, and including, 6.7.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\r\nNote: This vulnerability requires WPBakery Page Builder to be installed and active"
      }, {
        "lang" : "es",
        "value" : "El plugin Quiz Maker para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'vc_quizmaker' del plugin en todas las versiones hasta la 6.7.1.7, inclusive, debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada.\nNota: Esta vulnerabilidad requiere que WPBakery Page Builder esté instalado y activo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.1.7/pb_templates/quiz_maker_wpbvc.php#L13",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.1.7/pb_templates/quiz_maker_wpbvc.php#L60",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e54e2831-e5e9-43f4-acb6-9cf00fdb4e57?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2821",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T03:16:02.137",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Fujian Smart Integrated Management Platform System up to 7.5. Impacted is an unknown function of the file /Module/CRXT/Controller/XCamera.ashx. This manipulation of the argument ChannelName causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en el Sistema de Plataforma de Gestión Integrada Inteligente de Fujian hasta la versión 7.5 que afecta a una función desconocida del archivo /Module/CRXT/Controller/XCamera.ashx. La manipulación del argumento ChannelName provoca una inyección SQL. Es posible explotar el ataque en remoto. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/cve-yinda-sql2/blob/main/introduce",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/luoye197-prog/cve-yinda-sql2/blob/main/poc.py",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.346946",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346946",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753405",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27317",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:57.880",
      "lastModified" : "2026-02-20T04:15:57.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27318",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:57.990",
      "lastModified" : "2026-02-20T04:15:57.990",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27319",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.063",
      "lastModified" : "2026-02-20T04:15:58.063",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27320",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.123",
      "lastModified" : "2026-02-20T04:15:58.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27321",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.187",
      "lastModified" : "2026-02-20T04:15:58.187",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27322",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.253",
      "lastModified" : "2026-02-20T04:15:58.253",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27323",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.320",
      "lastModified" : "2026-02-20T04:15:58.320",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27324",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.383",
      "lastModified" : "2026-02-20T04:15:58.383",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27325",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-20T04:15:58.450",
      "lastModified" : "2026-02-20T04:15:58.450",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2739",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-02-20T05:17:53.033",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a las versiones del paquete bn.js anteriores a la 5.2.3. Al llamar a maskn(0) en cualquier instancia de BN se corrompe el estado interno, lo que provoca que toString(), divmod() y otros métodos entren en un bucle infinito, bloqueando el proceso indefinidamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Kr0emer/02370d18328c28b5dd7f9ac880d22a91",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/indutny/bn.js/commit/33df26b5771e824f303a79ec6407409376baa64b",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/indutny/bn.js/issues/186",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/indutny/bn.js/issues/316",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/indutny/bn.js/pull/317",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-BNJS-15274301",
        "source" : "report@snyk.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2822",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T05:17:53.663",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file /jeecgboot/sys/dict/loadDict/airag_app,1,create_by of the component Backend Interface. Such manipulation of the argument keyword leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en JeecgBoot hasta 3.9.1. El elemento afectado es una función desconocida del archivo /jeecgboot/sys/dict/loadDict/airag_app,1,create_by del componente Interfaz de Backend. Manipular el argumento 'keyword' provoca una inyección SQL. El ataque puede ser ejecutado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "A20F7D0F-C04A-4D4E-AAAF-98B1C3A717E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346947",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346947",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753792",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/meizhiyuwai/ha3yxb/lowxgbh5nne881e6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2823",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T05:17:53.923",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component webmggnt. Performing a manipulation of the argument timestr results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Comfast CF-E7 2.6.0.9. El elemento afectado es la función sub_41ACCC del archivo /cgi-bin/mbox-config?method=SET&amp;section=ntp_timezone del componente webmggnt. Si se manipula el argumento 'timestr' se puede provocar una inyección de comandos. Es posible llevar a cabo el ataque de forma remota. El exploit ahora es público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comfast:cf-e7_firmware:2.6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD577698-7790-473D-8D07-BD15D9A87DC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comfast:cf-e7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7322F6E8-0B00-4425-80AB-2CD4BAB5C69C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/ComFast%20Router_3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346948",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346948",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753871",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2824",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T06:17:01.387",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Comfast CF-E7 2.6.0.9. Esto afecta a la función sub_441CF4 del archivo /cgi-bin/mbox-config?method=SET&amp;section=ping_config del componente webmggnt. Si se ejecuta el argumento 'destination' manipulado puede provocarse una inyección de comandos. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comfast:cf-e7_firmware:2.6.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD577698-7790-473D-8D07-BD15D9A87DC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comfast:cf-e7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7322F6E8-0B00-4425-80AB-2CD4BAB5C69C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/ComFast%20Router_4.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.346949",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.346949",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753878",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2825",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T07:16:42.470",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file tools/fix.py of the component Article Module. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en rachelos WeRSS we-mp-rss hasta 1.4.8. Esto impacta a la función fix_html del archivo tools/fix.py del componente Módulo de Artículo. La manipulación provoca un cross site scripting. Es posible iniciar el ataque en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.346950",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.346950",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.753879",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.notion.so/WeRSS-Stored-Cross-Site-Scripting-XSS-in-Article-module-300ea92a3c4180be87dffca6b47d17f7",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26370",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-20T08:17:03.087",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress Plugin \"Survey Maker\" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress 'Survey Maker' versiones 5.1.7.7 y anteriores contiene una vulnerabilidad de cross-site scripting. Si esta vulnerabilidad es explotada, un script arbitrario puede ser ejecutado en el navegador web del usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN20049394/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://wordpress.org/plugins/survey-maker/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26050",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-20T09:15:54.617",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "El instalador para ???????/???????? RICOH?????????? versiones anteriores a la Ver.1.3.7 contiene un problema con la ruta de búsqueda de DLL, lo que puede llevar a la carga insegura de Bibliotecas de Enlace Dinámico. Como resultado, se puede ejecutar código arbitrario con privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN69531868/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://support.ricoh.com/bbv2/html/dr_ut_d/ut/history/w/bb/pub_j/dr_ut_d/4101031/4101031555/V137/5260588/260588/history.htm",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21620",
      "sourceIdentifier" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "published" : "2026-02-20T11:15:56.783",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl.\n\nThis issue affects otp: from 17.0, from 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: from 5.10 before 7.0; otp: from 1.0."
      }, {
        "lang" : "es",
        "value" : "Salto de ruta relativo, vulnerabilidad de aislamiento o compartimentación inadecuados en erlang otp erlang/otp (módulos tftp_file), erlang otp inets (módulos tftp_file), erlang otp tftp (módulos tftp_file) permite Salto de ruta relativo. Esta vulnerabilidad está asociada con los archivos de programa lib/tftp/src/tftp_file.erl, src/tftp_file.erl.\n\nEste problema afecta a otp: desde 17.0, desde 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: desde 5.10 antes de 7.0; otp: desde 1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.erlef.org/cves/CVE-2026-21620.html",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/erlang/otp/commit/3970738f687325138eb75f798054fa8960ac354e",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/erlang/otp/commit/655fb95725ba2fb811740b57e106873833824344",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/erlang/otp/commit/696fdec922661d4a3cc528fc34bc24fae8d4ad8a",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/erlang/otp/pull/10706",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/erlang/otp/security/advisories/GHSA-hmrc-prh3-rpvp",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://osv.dev/vulnerability/EEF-CVE-2026-21620",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://www.erlang.org/doc/system/versions.html#order-of-versions",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2486",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-20T12:16:16.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Master Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ma_el_bh_table_btn_text' parameter in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Master Addons For Elementor para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'ma_el_bh_table_btn_text' en versiones hasta e incluyendo la 2.1.1 debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3461745/master-addons/tags/2.1.2/addons/ma-business-hours/ma-business-hours.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a78c2621-afff-40b4-ae45-831b2b847756?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21627",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2026-02-20T15:20:29.467",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad estaba arraigada en cómo el plugin Tassos Framework manejaba solicitudes AJAX específicas a través del punto de entrada com_ajax de Joomla. Bajo ciertas condiciones, la funcionalidad interna del framework podría ser invocada sin la restricción adecuada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@joomla.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@joomla.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://tassos.gr",
        "source" : "security@joomla.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20761",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T16:22:32.243",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and \nprior, which would allow remote attackers, in the LON IP-852 management \nmessages, to send specially crafted IP-852 messages resulting in \narbitrary OS command execution on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad existe en EnOcean SmartServer IoT versión 4.60.009 y anteriores, lo que permitiría a atacantes remotos, en los mensajes de gestión LON IP-852, enviar mensajes IP-852 especialmente diseñados, resultando en la ejecución arbitraria de comandos del sistema operativo en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://enoceanwiki.atlassian.net/wiki/spaces/DrftSSIoT/pages/1475410/SmartServer+IoT+Release+Notes#Current-Stable-Release",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://enoceanwiki.atlassian.net/wiki/spaces/IEC/pages/288063529/Enhancing+Security",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-01.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-01",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22341",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:32.630",
      "lastModified" : "2026-04-28T19:36:29.987",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authentication Abuse.This issue affects Booked: from n/a through <= 3.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación utilizando una ruta o canal alternativo en Case-Themes Booked booked permite el abuso de autenticación. Este problema afecta a Booked: desde n/a hasta &lt;= 3.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/booked/vulnerability/wordpress-booked-plugin-3-0-0-account-takeover-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22344",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:33.357",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes FiveStar fivestar allows PHP Local File Inclusion.This issue affects FiveStar: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de 'Inclusión remota de ficheros PHP' por control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP en Mikado-Themes FiveStar fivestar permite la inclusión local de ficheros PHP. Este problema afecta a FiveStar: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fivestar/vulnerability/wordpress-fivestar-theme-1-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22345",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:33.497",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery allows Object Injection.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through <= 1.6.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery permite la inyección de objetos. Este problema afecta a Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: desde n/a hasta &lt;= 1.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/new-image-gallery/vulnerability/wordpress-image-gallery-lightbox-gallery-responsive-photo-gallery-masonry-gallery-plugin-1-6-0-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22346",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:33.667",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through <= 1.5.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en A WP Life Slider Responsive Slideshow – deslizador de imágenes, presentación de diapositivas de galería slider-responsive-slideshow permite la inyección de objetos. Este problema afecta a Slider Responsive Slideshow – deslizador de imágenes, presentación de diapositivas de galería: desde n/a hasta &lt;= 1.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/slider-responsive-slideshow/vulnerability/wordpress-slider-responsive-slideshow-image-slider-gallery-slideshow-plugin-1-5-4-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22350",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:33.937",
      "lastModified" : "2026-04-28T19:36:30.747",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through <= 6.3.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a PDF for Elementor Forms + Drag And Drop Template Builder: desde n/a hasta &lt;= 6.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/pdf-for-elementor-forms/vulnerability/wordpress-pdf-for-elementor-forms-drag-and-drop-template-builder-plugin-6-3-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22351",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:34.237",
      "lastModified" : "2026-04-28T19:36:30.863",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Marcus (también conocido como @msykes) WP FullCalendar wp-fullcalendar permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP FullCalendar: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-fullcalendar/vulnerability/wordpress-wp-fullcalendar-plugin-1-6-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22352",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:34.397",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocommerce SMS: from n/a through <= 7.1.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PersianScript Persian Woocommerce SMS persian-woocommerce-sms permite XSS Reflejado. Este problema afecta a Persian Woocommerce SMS: desde n/a hasta &lt;= 7.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/persian-woocommerce-sms/vulnerability/wordpress-persian-woocommerce-sms-plugin-7-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22354",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:34.550",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Woocommerce Category Banner Management: from n/a through <= 2.5.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce permite la inyección de objetos. Este problema afecta a Woocommerce Category Banner Management: desde n/a hasta &lt;= 2.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/banner-management-for-woocommerce/vulnerability/wordpress-woocommerce-category-banner-management-plugin-2-5-1-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22356",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:34.693",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Automattic Jetpack CRM zero-bs-crm allows PHP Local File Inclusion.This issue affects Jetpack CRM: from n/a through <= 6.7.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en Automattic Jetpack CRM zero-bs-crm permite la inclusión local de ficheros PHP. Este problema afecta a Jetpack CRM: desde n/a hasta &lt;= 6.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/zero-bs-crm/vulnerability/wordpress-jetpack-crm-plugin-6-7-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22357",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:34.833",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through <= 0.9.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Spencer Haws Link Whisper Free link-whisper permite XSS Reflejado. Este problema afecta a Link Whisper Free: desde n/a hasta &lt;= 0.9.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-9-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22361",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:34.970",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes A-Mart a-mart allows PHP Local File Inclusion.This issue affects A-Mart: from n/a through <= 1.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión remota de ficheros PHP') en axiomthemes A-Mart a-mart permite la inclusión local de ficheros PHP. Este problema afecta a A-Mart: desde n/a hasta &lt;= 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/a-mart/vulnerability/wordpress-a-mart-theme-1-0-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22362",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.107",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Photolia photolia allows PHP Local File Inclusion.This issue affects Photolia: from n/a through <= 1.0.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en axiomthemes Photolia photolia permite la Inclusión Local de Ficheros PHP. Este problema afecta a Photolia: desde n/a hasta &lt;= 1.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/photolia/vulnerability/wordpress-photolia-theme-1-0-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22363",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.247",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rhodos rhodos allows PHP Local File Inclusion.This issue affects Rhodos: from n/a through <= 1.3.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en axiomthemes Rhodos rhodos permite la Inclusión local de ficheros PHP. Este problema afecta a Rhodos: desde n/a hasta &lt;= 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/rhodos/vulnerability/wordpress-rhodos-theme-1-3-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22364",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.380",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes SevenTrees seventrees allows PHP Local File Inclusion.This issue affects SevenTrees: from n/a through <=1.0.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en axiomthemes SevenTrees seventrees permite inclusión local de ficheros PHP. Este problema afecta a SevenTrees: desde n/a hasta &lt;=1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/seventrees/vulnerability/wordpress-seventrees-theme-1-0-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22365",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.517",
      "lastModified" : "2026-04-28T19:36:32.070",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleng soleng allows PHP Local File Inclusion.This issue affects Soleng: from n/a through <= 1.0.5."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en axiomthemes Soleng soleng permite la Inclusión Local de Ficheros PHP. Este problema afecta a Soleng: desde n/a hasta &lt;= 1.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/soleng/vulnerability/wordpress-soleng-theme-1-0-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22366",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.673",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Jude jude allows PHP Local File Inclusion.This issue affects Jude: from n/a through <= 1.3.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en axiomthemes Jude jude permite la Inclusión Local de Ficheros PHP. Este problema afecta a Jude: desde n/a hasta &lt;= 1.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/jude/vulnerability/wordpress-jude-theme-1-3-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22367",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.817",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Coworking coworking allows PHP Local File Inclusion.This issue affects Coworking: from n/a through <= 1.6.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en AncoraThemes Coworking coworking permite la inclusión local de ficheros PHP. Este problema afecta a Coworking: desde n/a hasta &lt;= 1.6.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/coworking/vulnerability/wordpress-coworking-theme-1-6-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22368",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:35.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through <= 1.0.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en axiomthemes Redy redy permite Inclusión Local de Ficheros PHP. Este problema afecta a Redy: desde n/a hasta &lt;= 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/redy/vulnerability/wordpress-redy-theme-1-0-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22369",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.120",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ironfit ironfit allows PHP Local File Inclusion.This issue affects Ironfit: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Ironfit ironfit permite inclusión local de ficheros PHP. Este problema afecta a Ironfit: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/ironfit/vulnerability/wordpress-ironfit-theme-1-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22370",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.260",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through <= 1.3.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en axiomthemes Marveland marveland permite la inclusión local de ficheros PHP. Este problema afecta a Marveland: desde n/a hasta &lt;= 1.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/marveland/vulnerability/wordpress-marveland-theme-1-3-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22371",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.397",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Gustavo gustavo allows PHP Local File Inclusion.This issue affects Gustavo: from n/a through <= 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP ('PHP inclusión remota de ficheros') vulnerabilidad en AncoraThemes Gustavo gustavo permite PHP inclusión local de ficheros. Este problema afecta a Gustavo: desde n/a hasta &lt;= 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/gustavo/vulnerability/wordpress-gustavo-theme-1-2-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22372",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.527",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Isida isida allows PHP Local File Inclusion.This issue affects Isida: from n/a through <= 1.4.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('PHP inclusión remota de ficheros') vulnerabilidad en AncoraThemes Isida isida permite PHP inclusión local de ficheros. Este problema afecta a Isida: desde n/a hasta &lt;= 1.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/isida/vulnerability/wordpress-isida-theme-1-4-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22373",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.653",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fooddy fooddy allows PHP Local File Inclusion.This issue affects Fooddy: from n/a through <= 1.3.10."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de 'Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP' ('Inclusión Remota de Ficheros PHP') en AncoraThemes Fooddy fooddy permite la Inclusión Local de Ficheros PHP. Este problema afecta a Fooddy: desde n/a hasta &lt;= 1.3.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fooddy/vulnerability/wordpress-fooddy-theme-1-3-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22374",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Zio Alberto zioalberto allows PHP Local File Inclusion.This issue affects Zio Alberto: from n/a through <= 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Zio Alberto zioalberto permite la inclusión local de ficheros PHP. Este problema afecta a Zio Alberto: desde n/a hasta &lt;= 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/zioalberto/vulnerability/wordpress-zio-alberto-theme-1-2-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22375",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:36.907",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Impacto Patronus impacto-patronus allows PHP Local File Inclusion.This issue affects Impacto Patronus: from n/a through <= 1.2.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Impacto Patronus impacto-patronus permite la inclusión local de ficheros PHP. Este problema afecta a Impacto Patronus: desde n/a hasta &lt;= 1.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/impacto-patronus/vulnerability/wordpress-impacto-patronus-theme-1-2-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22376",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.037",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Parkivia parkivia allows PHP Local File Inclusion.This issue affects Parkivia: from n/a through <= 1.1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad 'Inclusión Remota de Ficheros PHP') en AncoraThemes Parkivia parkivia permite la inclusión local de ficheros PHP. Este problema afecta a Parkivia: desde n/a hasta &lt;= 1.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/parkivia/vulnerability/wordpress-parkivia-theme-1-1-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22377",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.167",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Saveo saveo allows PHP Local File Inclusion.This issue affects Saveo: from n/a through <= 1.1.2."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('inclusión remota de ficheros PHP') en AncoraThemes Saveo saveo permite la inclusión local de ficheros PHP. Este problema afecta a Saveo: desde n/a hasta &lt;= 1.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/saveo/vulnerability/wordpress-saveo-theme-1-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22378",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Blabber blabber allows PHP Local File Inclusion.This issue affects Blabber: from n/a through <= 1.7.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('inclusión remota de ficheros PHP') en AncoraThemes Blabber blabber permite la inclusión local de ficheros PHP. Este problema afecta a Blabber: desde n/a hasta &lt;= 1.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/blabber/vulnerability/wordpress-blabber-theme-1-7-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22379",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.430",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Netmix netmix allows PHP Local File Inclusion.This issue affects Netmix: from n/a through <= 1.0.10."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP vulnerabilidad ('inclusión remota de ficheros PHP') en AncoraThemes Netmix netmix permite la inclusión local de ficheros PHP. Este problema afecta a Netmix: desde n/a hasta &lt;= 1.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/netmix/vulnerability/wordpress-netmix-theme-1-0-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22380",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.557",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes UnlimHost unlimhost allows PHP Local File Inclusion.This issue affects UnlimHost: from n/a through <= 1.2.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en AncoraThemes UnlimHost unlimhost permite la inclusión local de ficheros PHP. Este problema afecta a UnlimHost: desde n/a hasta &lt;= 1.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/unlimhost/vulnerability/wordpress-unlimhost-theme-1-2-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22381",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.700",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows PHP Local File Inclusion.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP ('inclusión remota de ficheros PHP') en el tema de WordPress Mikado-Themes PawFriends - Pet Shop and Veterinary pawfriends permite la inclusión local de ficheros PHP. Este problema afecta al tema de WordPress PawFriends - Pet Shop and Veterinary: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/pawfriends/vulnerability/wordpress-pawfriends-pet-shop-and-veterinary-wordpress-theme-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22383",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:37.933",
      "lastModified" : "2026-04-28T19:36:33.293",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elusión de autorización a través de clave controlada por el usuario en Mikado-Themes PawFriends - Tema de WordPress para Tienda de Mascotas y Veterinaria pawfriends permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a PawFriends - Tema de WordPress para Tienda de Mascotas y Veterinaria: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/pawfriends/vulnerability/wordpress-pawfriends-pet-shop-and-veterinary-wordpress-theme-theme-1-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22384",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:38.090",
      "lastModified" : "2026-04-28T19:36:33.413",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from n/a through <= 3.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en leafcolor Applay - Shortcodes applay-shortcodes permite la inyección de objetos. Este problema afecta a Applay - Shortcodes: desde n/a hasta &lt;= 3.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/applay-shortcodes/vulnerability/wordpress-applay-shortcodes-plugin-3-7-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22885",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T16:22:38.220",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and \nprior, which would allow remote attackers, in the LON IP-852 management \nmessages, to send specially crafted IP-852 messages resulting in a \nmemory leak from the program's memory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en EnOcean SmartServer IoT versión 4.60.009 y anteriores, permite a atacantes en remoto, en los mensajes de gestión LON IP-852, enviar mensajes IP-852 especialmente diseñados, resultando en una fuga de memoria de la memoria del programa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://enoceanwiki.atlassian.net/wiki/spaces/DrftSSIoT/pages/1475410/SmartServer+IoT+Release+Notes#Current-Stable-Release",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://enoceanwiki.atlassian.net/wiki/spaces/IEC/pages/288063529/Enhancing+Security",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-01.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-01",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24941",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:38.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through <= 2.4.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en wpjobportal WP Job Portal wp-job-portal permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Job Portal: desde n/a hasta &lt;= 2.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-4-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24943",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:38.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference grandconference allows Reflected XSS.This issue affects Grand Conference: from n/a through <= 5.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en ThemeGoods Grand Conference grandconference permite XSS Reflejado. Este problema afecta a Grand Conference: desde n/a hasta &lt;= 5.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/grandconference/vulnerability/wordpress-grand-conference-plugin-5-3-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24944",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:38.883",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe2: from n/a through <= 10.44."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en weDevs Subscribe2 subscribe2 permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Subscribe2: desde n/a hasta &lt;= 10.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/subscribe2/vulnerability/wordpress-subscribe2-plugin-10-44-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24946",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.023",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.8.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en tychesoftwares Print Invoice &amp; Delivery Notes for WooCommerce woocommerce-delivery-notes permite Explotar Niveles de Seguridad de Control de Acceso Configurados Incorrectamente. Este problema afecta a Print Invoice &amp; Delivery Notes for WooCommerce: desde n/a hasta &lt;= 5.8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woocommerce-delivery-notes/vulnerability/wordpress-print-invoice-delivery-notes-for-woocommerce-plugin-5-8-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24948",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.157",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through <= 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en fox-themes Reflector reflector-plugins permite XSS Reflejado. Este problema afecta a Reflector: desde n/a hasta &lt;= 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/reflector-plugins/vulnerability/wordpress-reflector-plugin-1-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24949",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.290",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en ThemeGoods PhotoMe photome permite XSS basado en DOM. Este problema afecta a PhotoMe: desde n/a hasta &lt;= 5.7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/photome/vulnerability/wordpress-photome-theme-5-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24950",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.417",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Authorsy: from n/a through <= 1.0.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Elusión de autorización a través de clave controlada por el usuario en themeplugs Authorsy authorsy, permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Authorsy: desde n/a hasta &lt;= 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/authorsy/vulnerability/wordpress-authorsy-plugin-1-0-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24953",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.547",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through <= 6.1.15."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Limitación Inadecuada de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta') en Mitchell Bennis Simple File List simple-file-list permite Salto de Ruta. Este problema afecta a Simple File List: desde n/a hasta &lt;= 6.1.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/simple-file-list/vulnerability/wordpress-simple-file-list-plugin-6-1-15-arbitrary-file-download-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24955",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.683",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Whizz Plugins whizz-plugins allows Reflected XSS.This issue affects Whizz Plugins: from n/a through <= 1.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en fox-themes Whizz Plugins whizz-plugins permite XSS Reflejado. Este problema afecta a Whizz Plugins: desde n/a hasta &lt;= 1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/whizz-plugins/vulnerability/wordpress-whizz-plugins-plugin-1-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24956",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.817",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download Manager Addons for Elementor wpdm-elementor allows Blind SQL Injection.This issue affects Download Manager Addons for Elementor: from n/a through <= 1.3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') en Shahjada Download Manager Addons for Elementor wpdm-elementor permite Inyección SQL Ciega. Este problema afecta a Download Manager Addons for Elementor: desde n/a hasta &lt;= 1.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpdm-elementor/vulnerability/wordpress-download-manager-addons-for-elementor-plugin-1-3-0-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24959",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:39.950",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') en JoomSky JS Help Desk js-support-ticket permite Inyección SQL Ciega. Este problema afecta a JS Help Desk: desde n/a hasta &lt;= 3.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-plugin-3-0-1-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27072",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-20T16:22:45.037",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite allows Stored XSS.This issue affects PixelYourSite – Your smart PIXEL (TAG) Manager: from n/a through <= 11.2.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite permite XSS Almacenado. Este problema afecta a PixelYourSite – Your smart PIXEL (TAG) Manager: desde n/a hasta &lt;= 11.2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/pixelyoursite/vulnerability/wordpress-pixelyoursite-your-smart-pixel-tag-manager-plugin-11-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2846",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T16:22:45.360",
      "lastModified" : "2026-02-24T15:26:03.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub_44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de seguridad en UTT HiPER 520 1.7.7-160105 que afecta a la función sub_44D264 del archivo /goform/formPdbUpConfig del componente Interfaz de Gestión Web. Al manipular el argumento policyNames se produce una inyección de comandos del sistema operativo. El ataque puede ser iniciado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520_firmware:1.7.7-160105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD12E9E-1779-4035-ACC3-941B8CFBC42A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A580F18-B471-4E60-8632-DC4DAD68811D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT520CVE/blob/main/UTTRCE1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347082",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347082",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753964",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2847",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T16:22:45.560",
      "lastModified" : "2026-02-24T15:25:09.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument Isp_Name results in os command injection. The attack can be launched remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en UTT HiPER 520 1.7.7-160105 que afecta a la función sub_44EFB4 del archivo /goform/formReleaseConnect del componente Interfaz de Gestión Web. Si se manipula el argumento Isp_Name se puede provocar una inyección de comandos del sistema operativo. El ataque puede lanzarse de forma remota. El exploit ya es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:520_firmware:1.7.7-160105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD12E9E-1779-4035-ACC3-941B8CFBC42A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:520:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A580F18-B471-4E60-8632-DC4DAD68811D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cha0yang1/UTT520CVE/blob/main/UTTRCE2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347083",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347083",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753965",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1842",
      "sourceIdentifier" : "0a72a055-908d-47f5-a16a-1f09049c16c6",
      "published" : "2026-02-20T17:25:50.780",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tokens when a refresh token was used. Because refresh tokens have a significantly longer lifetime (default one year), an authenticated client could use a refresh token in place of an access token to maintain long-term access without token rotation. Additionally, old access tokens remained valid after refresh, enabling concurrent or extended use beyond intended session boundaries. This vulnerability could allow prolonged unauthorized access if a token is disclosed."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2.3.5 a 2.6.8 de HyperCloud permitieron indebidamente que los tokens de actualización se usaran directamente para el acceso a recursos y no invalidaron los tokens de acceso emitidos previamente cuando se usaba un token de actualización. Debido a que los tokens de actualización tienen una vida útil significativamente más larga (un año por defecto), un cliente autenticado podría usar un token de actualización en lugar de un token de acceso para mantener un acceso a largo plazo sin rotación de tokens. Además, los tokens de acceso antiguos permanecieron válidos después de la actualización, lo que permitía un uso concurrente o extendido más allá de los límites de sesión previstos. Esta vulnerabilidad podría permitir un acceso no autorizado prolongado si un token es revelado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "0a72a055-908d-47f5-a16a-1f09049c16c6",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "0a72a055-908d-47f5-a16a-1f09049c16c6",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.softiron.cloud/",
        "source" : "0a72a055-908d-47f5-a16a-1f09049c16c6"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24455",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T17:25:51.143",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "ics-cert@hq.dhs.gov",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The embedded web interface of the device does not support HTTPS/TLS for \nauthentication and uses HTTP Basic Authentication. Traffic is encoded \nbut not encrypted, exposing user credentials to passive interception by \nattackers on the same network."
      }, {
        "lang" : "es",
        "value" : "La interfaz web integrada del dispositivo no es compatible con HTTPS/TLS para autenticación y utiliza Autenticación Básica HTTP. El tráfico está codificado pero no cifrado, exponiendo las credenciales de usuario a la interceptación pasiva por atacantes en la misma red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24790",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T17:25:51.313",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication."
      }, {
        "lang" : "es",
        "value" : "El PLC subyacente del dispositivo puede ser influenciado en remoto, sin autenticación ni las salvaguardas adecuadas autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-04.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-04",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.welker.com/contact-us/welker-team",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25715",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T17:25:53.293",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "ics-cert@hq.dhs.gov",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web management interface of the device allows the administrator \nusername and password to be set to blank values. Once applied, the \ndevice permits authentication with empty credentials over the web \nmanagement interface and Telnet service. This effectively disables \nauthentication across all critical management channels, allowing any \nnetwork-adjacent attacker to gain full administrative control without \ncredentials."
      }, {
        "lang" : "es",
        "value" : "La interfaz de gestión web del dispositivo permite que el nombre de usuario y la contraseña del administrador se establezcan a valores en blanco. Una vez aplicado, el dispositivo permite la autenticación con credenciales vacías a través de la interfaz de gestión web y el servicio Telnet. Esto deshabilita eficazmente la autenticación en todos los canales de gestión críticos, permitiendo a cualquier atacante adyacente a la red obtener control administrativo total sin credenciales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26048",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T17:25:53.450",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "ics-cert@hq.dhs.gov",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management frame protection, allowing forged deauthentication\n and disassociation frames to be broadcast without authentication or \nencryption. An attacker can use this to cause unauthorized disruptions \nand create a denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "El router Wi-Fi es vulnerable a ataques de desautenticación debido a la ausencia de protección de tramas de gestión, lo que permite que tramas de desautenticación y desasociación falsificadas sean difundidas sin autenticación ni cifrado. Un atacante puede usar esto para causar interrupciones no autorizadas y crear una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26049",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-20T17:25:53.623",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "ics-cert@hq.dhs.gov",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web management interface of the device renders the passwords in a \nplaintext input field. The current password is directly visible to \nanyone with access to the UI, potentially exposing administrator \ncredentials to unauthorized observation via shoulder surfing, \nscreenshots, or browser form caching."
      }, {
        "lang" : "es",
        "value" : "La interfaz de gestión web del dispositivo muestra las contraseñas en un campo de entrada de texto sin formato. La contraseña actual es directamente visible para cualquiera con acceso a la UI, lo que podría exponer las credenciales de administrador a una observación no autorizada mediante 'shoulder surfing', capturas de pantalla o el almacenamiento en caché del formulario del navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26093",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:53.847",
      "lastModified" : "2026-02-27T17:08:38.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando (Inyección de Comandos) en Owl opds 2.2.0.4 permite la inyección de comandos a través de una solicitud de red manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26093",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26095",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.007",
      "lastModified" : "2026-02-27T17:07:55.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de permisos para un recurso crítico en Owl opds 2.2.0.4 permite la manipulación de archivos mediante una solicitud de red manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26095",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26096",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.163",
      "lastModified" : "2026-02-27T17:07:25.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Asignación Incorrecta de Permisos para Recurso Crítico en Owl opds 2.2.0.4 permite la Manipulación de Archivos mediante una solicitud de red manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26096",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26097",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.337",
      "lastModified" : "2026-02-27T17:06:35.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Elemento de ruta de búsqueda no controlado en Owl opds 2.2.0.4 permite aprovechar/manipular rutas de búsqueda de archivos de configuración a través de una solicitud de red elaborada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26097",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26098",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.497",
      "lastModified" : "2026-02-27T17:05:50.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Elemento de ruta de búsqueda no controlado en Owl opds 2.2.0.4 permite aprovechar/manipular rutas de búsqueda de archivos de configuración a través de una solicitud de red manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26098",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26099",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.650",
      "lastModified" : "2026-02-27T17:05:25.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Elemento de Ruta de Búsqueda Incontrolada en Owl opds 2.2.0.4 permite Aprovechar/Manipular Rutas de Búsqueda de Archivos de Configuración a través de una solicitud de red especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26099",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26100",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.820",
      "lastModified" : "2026-02-27T17:01:39.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de permisos para un recurso crítico en Owl opds 2.2.0.4 permite la manipulación de archivos mediante una solicitud de red especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26100",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26101",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:54.967",
      "lastModified" : "2026-02-27T17:00:38.157",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de permisos para un recurso crítico en Owl opds 2.2.0.4 permite la manipulación de archivos mediante una solicitud de red especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26101",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26102",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:55.120",
      "lastModified" : "2026-02-27T17:00:09.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de permisos para un recurso crítico en Owl opds 2.2.0.4 permite la manipulación de archivos mediante una solicitud de red especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-26102",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.270",
      "lastModified" : "2026-02-26T17:57:40.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema en el software de gestión de instalaciones globales de Key Systems Inc v.20230721a permite a un atacante remoto obtener información sensible a través del parámetro de consulta sid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystorage:global_facilities_management_software:20230721a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18D4BBF-3745-43E5-86FE-8834842D0E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.377",
      "lastModified" : "2026-02-26T17:56:10.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality."
      }, {
        "lang" : "es",
        "value" : "Un problema en el software de gestión de instalaciones globales de Key Systems Inc v.20230721a permite a un atacante remoto escalar privilegios a través del componente PIN de la funcionalidad de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystorage:global_facilities_management_software:20230721a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18D4BBF-3745-43E5-86FE-8834842D0E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.483",
      "lastModified" : "2026-02-26T17:55:24.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross Site Scripting en el software Key Systems Inc Global Facilities Management v. 20230721a permite a un atacante remoto ejecutar código arbitrario a través del parámetro de función."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystorage:global_facilities_management_software:20230721a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18D4BBF-3745-43E5-86FE-8834842D0E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26723",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.590",
      "lastModified" : "2026-02-26T23:16:34.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross Site Scripting en el software Key Systems Inc Global Facilities Management v. 20230721a permite a un atacante remoto ejecutar código arbitrario a través de los parámetros selectgroup y gn en el endpoint /?Function=Groups."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keystorage:global_facilities_management_software:20230721a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18D4BBF-3745-43E5-86FE-8834842D0E6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.700",
      "lastModified" : "2026-02-26T21:32:14.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 allows a remote attacker to escalate privileges via the AccessID parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema en edu Business Solutions Print Shop Pro WebDesk v.18.34 permite a un atacante remoto escalar privilegios a través del parámetro AccessID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edubusinesssolutions:print_shop_pro_webdesk:18.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C72179-FF05-44F1-87A2-80179F38245D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26725",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26745",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.807",
      "lastModified" : "2026-02-24T20:45:24.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration field. Although the input is initially stored without immediate execution, it is later concatenated into a dynamically constructed SQL query without proper sanitization or parameter binding. This allows an attacker with access to modify the currency_symbol value to inject arbitrary SQL expressions, which are executed when the affected query is subsequently processed."
      }, {
        "lang" : "es",
        "value" : "OpenSourcePOS 3.4.1 tiene una vulnerabilidad de inyección SQL de segundo orden en el manejo del campo de configuración currency_symbol. Aunque la entrada se almacena inicialmente sin ejecución inmediata, posteriormente se concatena en una consulta SQL construida dinámicamente sin la sanitización o el enlace de parámetros adecuados. Esto permite a un atacante con acceso para modificar el valor de currency_symbol inyectar expresiones SQL arbitrarias, las cuales se ejecutan cuando la consulta afectada es procesada posteriormente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensourcepos:open_source_point_of_sale:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC6C4DB-C7B4-46A5-9479-851918C55014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hungnqdz/cve-research/blob/main/CVE-2026-26745.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensourcepos/opensourcepos",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:55.920",
      "lastModified" : "2026-02-24T20:42:28.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files on the web server by manipulating the Invoice Type configuration. This issue can be chained with the file upload functionality to achieve Remote Code Execution (RCE)."
      }, {
        "lang" : "es",
        "value" : "OpenSourcePOS 3.4.1 contiene una vulnerabilidad de Inclusión Local de Ficheros (LFI) en la función Sales.php::getInvoice(). Un atacante puede leer ficheros arbitrarios en el servidor web manipulando la configuración de Tipo de Factura. Este problema puede encadenarse con la funcionalidad de subida de ficheros para lograr Ejecución Remota de Código (RCE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensourcepos:open_source_point_of_sale:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC6C4DB-C7B4-46A5-9479-851918C55014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hungnqdz/CVE-2026-26746/blob/main/CVE-2026-26746.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensourcepos/opensourcepos",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-20T17:25:56.023",
      "lastModified" : "2026-02-26T02:42:23.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with the default misconfiguration where the \"app.force_url\" is not set and default is \"false\". The application generates absolute URLs (such as those used in password reset emails) using the user-supplied Host header. This allows remote attackers to poison the password reset link sent to a victim,"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de envenenamiento de encabezado Host existe en Monica 4.1.2 debido a un manejo inadecuado del encabezado HTTP Host en app/Providers/AppServiceProvider.php, combinado con la configuración errónea predeterminada donde 'app.force_url' no está configurado y su valor predeterminado es 'false'. La aplicación genera URLs absolutas (como las utilizadas en los correos electrónicos de restablecimiento de contraseña) utilizando el encabezado Host proporcionado por el usuario. Esto permite a atacantes remotos envenenar el enlace de restablecimiento de contraseña enviado a una víctima."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-644"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monicahq:monica:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4E9530-0DB5-4B0C-BF09-3BCD409A20F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hungnqdz/cve-research/blob/main/CVE-2026-26747.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27502",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-20T17:25:56.750",
      "lastModified" : "2026-02-23T13:59:18.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute arbitrary JavaScript in a victim's browser if the victim visits a crafted URL. This can be used to steal session data, perform actions as the victim, or modify displayed content."
      }, {
        "lang" : "es",
        "value" : "SVXportal versión 2.5 y anteriores contienen una vulnerabilidad de cross-site scripting reflejado en log.PHP a través del parámetro de consulta 'search'. La aplicación incrusta el valor del parámetro no saneado directamente en un atributo 'value' de un campo de entrada HTML, permitiendo a un atacante remoto no autenticado inyectar y ejecutar JavaScript arbitrario en el navegador de una víctima si esta visita una URL manipulada. Esto puede usarse para robar datos de sesión, realizar acciones como la víctima o modificar el contenido mostrado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radioinorr:svxportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "4D55825B-B62F-4A3F-9BAE-295199217B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sa2blv/SVXportal/blob/master/log.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/svxportal-log-php-search-reflected-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27503",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-20T17:25:56.920",
      "lastModified" : "2026-02-23T13:58:42.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing attacker-supplied JavaScript to execute in the administrator's browser. This can enable session theft, administrative action forgery, or other browser-based compromise in the context of an admin user."
      }, {
        "lang" : "es",
        "value" : "SVXportal versión 2.5 y anteriores contienen una vulnerabilidad de cross-site scripting reflejado en admin/log.php a través del parámetro de consulta search. Cuando un administrador autenticado visualiza una URL manipulada, la aplicación incrusta el valor del parámetro no saneado directamente en un atributo value de un input HTML, permitiendo que JavaScript proporcionado por el atacante se ejecute en el navegador del administrador. Esto puede permitir el robo de sesión, la falsificación de acciones administrativas u otro compromiso basado en el navegador en el contexto de un usuario administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radioinorr:svxportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "4D55825B-B62F-4A3F-9BAE-295199217B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sa2blv/SVXportal/blob/master/admin/log.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/svxportal-admin-log-php-search-reflected-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27504",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-20T17:25:57.087",
      "lastModified" : "2026-02-23T13:57:52.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field, allowing attacker-supplied script injection and execution in the administrator's browser. This can be used to compromise admin sessions or perform unauthorized actions via the administrator's authenticated context."
      }, {
        "lang" : "es",
        "value" : "SVXportal versión 2.5 y anteriores contienen una vulnerabilidad de cross-site scripting reflejado en radiomobile_front.php a través del parámetro de consulta stationid. Cuando un administrador autenticado ve una URL manipulada, la aplicación incrusta el valor del parámetro no saneado en un campo de valor de entrada oculto, permitiendo la inyección y ejecución de scripts proporcionados por el atacante en el navegador del administrador. Esto puede usarse para comprometer sesiones de administrador o realizar acciones no autorizadas a través del contexto autenticado del administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radioinorr:svxportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "4D55825B-B62F-4A3F-9BAE-295199217B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sa2blv/SVXportal/blob/master/radiomobile_front.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/svxportal-radiomobile-front-php-stationid-reflected-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27505",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-20T17:25:57.253",
      "lastModified" : "2026-02-23T13:56:05.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php). User-supplied fields such as Firstname, lastname, and email are stored in the backend database without adequate output encoding and are later rendered in the administrator interface (admin/users.php), allowing an unauthenticated remote attacker to inject arbitrary JavaScript that executes in an administrator's browser upon viewing the affected page."
      }, {
        "lang" : "es",
        "value" : "SVXportal versión 2.5 y anteriores contienen una vulnerabilidad de cross-site scripting almacenado en el flujo de trabajo de registro de usuarios (index.php enviando a admin/user_action.php). Campos proporcionados por el usuario como Nombre, Apellido y correo electrónico se almacenan en la base de datos de backend sin una codificación de salida adecuada y se renderizan posteriormente en la interfaz de administrador (admin/users.php), permitiendo a un atacante remoto no autenticado inyectar JavaScript arbitrario que se ejecuta en el navegador de un administrador al ver la página afectada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radioinorr:svxportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "4D55825B-B62F-4A3F-9BAE-295199217B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sa2blv/SVXportal/blob/master/admin/user_action.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/svxportal-admin-user-action-php-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27506",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-20T17:25:57.410",
      "lastModified" : "2026-02-23T13:55:30.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php). Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and image_url, which are later rendered without adequate output encoding in the administrator interface (admin/users.php), resulting in JavaScript execution in an administrator's browser when the affected page is viewed."
      }, {
        "lang" : "es",
        "value" : "SVXportal versión 2.5 y anteriores contienen una vulnerabilidad de cross-site scripting almacenado en el flujo de trabajo de actualización del perfil de usuario (user_settings.php enviando a admin/update_user.php). Usuarios autenticados pueden almacenar HTML/JavaScript malicioso en campos como Firstname, lastname, email e image_url, que luego se renderizan sin una codificación de salida adecuada en la interfaz del administrador (admin/users.php), resultando en la ejecución de JavaScript en el navegador de un administrador cuando se visualiza la página afectada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radioinorr:svxportal:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "4D55825B-B62F-4A3F-9BAE-295199217B93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sa2blv/SVXportal/blob/master/admin/update_user.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/svxportal-admin-update-user-php-stored-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2333",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-02-20T17:25:57.570",
      "lastModified" : "2026-02-26T23:10:43.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales utilizados en un comando ('Inyección de comandos') en Owl opds 2.2.0.4 permite la inyección de comandos a través de una solicitud de red manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B6558D-D323-40D3-99A7-909C24D49951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:owlcyberdefense:opds-talon:2.2.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B979FF6-C6CD-47C0-9409-EBF036DB39E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:owlcyberdefense:opds-1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA72CA3A-BE76-49B0-A670-3EB19D29333D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-2333",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2818",
      "sourceIdentifier" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
      "published" : "2026-02-20T17:25:57.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory. This vulnerability appears to be susceptible on Windows OS only."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta zip-slip en la funcionalidad de importación de instantáneas de Spring Data Geode permite a los atacantes escribir archivos fuera del directorio de extracción previsto. Esta vulnerabilidad parece ser susceptible solo en sistemas operativos Windows."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.herodevs.com/vulnerability-directory/cve-2026-2818",
        "source" : "36c7be3b-2937-45df-85ea-ca7133ea542c"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2848",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T17:25:58.250",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en SourceCodester Simple Responsive Tourism Website 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /classes/Master.PHP?f=register del componente Registration. Esta manipulación del argumento Username causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_responsive_tourism_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3930D5-8A1D-4675-BA33-98CFAFC5FF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anupeng/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347084",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347084",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753967",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2849",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T17:25:58.673",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\CacheController.java of the component Cache Sync Handler. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Afectada por este problema es la función deleteCache/removeAllCache/syncCache del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\CacheController.java del componente Gestor de Sincronización de Caché. Dicha manipulación conduce a controles de acceso inadecuados. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado. Este producto opera sobre una base de lanzamiento continuo, asegurando la entrega continua. Consecuentemente, no hay detalles de versión ni para las versiones afectadas ni para las actualizadas. El proyecto fue informado del problema tempranamente a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/60",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/60#issue-3846666902",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347085",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347085",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754428",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24891",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T18:25:51.143",
      "lastModified" : "2026-02-24T19:22:32.653",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. Versions 5.3.1 and below contain an unsafe deserialization sink in the Gearman worker implementation. The worker function registered as oitc_gearman calls PHP's unserialize() on job payloads without enforcing class restrictions or validating data origin. While the intended deployment assumes only trusted internal components enqueue Gearman jobs, this trust boundary is not enforced in application code. In environments where the Gearman service or worker is exposed to untrusted systems, an attacker may submit crafted serialized payloads to trigger PHP Object Injection in the worker process. This vulnerability is exploitable when Gearman listens on non-local interfaces, network access to TCP/4730 is unrestricted, or untrusted systems can enqueue jobs. Default, correctly hardened deployments may not be immediately exploitable, but the unsafe sink remains present in code regardless of deployment configuration. Enforcing this trust boundary in code would significantly reduce risk and prevent exploitation in misconfigured environments. This issue has been fixed in version 5.4.0."
      }, {
        "lang" : "es",
        "value" : "openITCOCKPIT es una herramienta de monitorización de código abierto diseñada para diferentes motores de monitorización como Nagios, Naemon y Prometheus. Las versiones 5.3.1 e inferiores contienen un sumidero de deserialización insegura en la implementación del worker de Gearman. La función worker registrada como oitc_gearman llama a unserialize() de PHP en las cargas útiles de los trabajos sin aplicar restricciones de clase ni validar el origen de los datos. Aunque el despliegue previsto asume que solo los componentes internos de confianza encolan trabajos de Gearman, este límite de confianza no se aplica en el código de la aplicación. En entornos donde el servicio o worker de Gearman está expuesto a sistemas no confiables, un atacante puede enviar cargas útiles serializadas maliciosas para desencadenar una inyección de objetos PHP en el proceso del worker. Esta vulnerabilidad es explotable cuando Gearman escucha en interfaces no locales, el acceso a la red a TCP/4730 no está restringido, o los sistemas no confiables pueden encolar trabajos. Los despliegues predeterminados y correctamente reforzados pueden no ser inmediatamente explotables, pero el sumidero inseguro permanece presente en el código independientemente de la configuración del despliegue. Aplicar este límite de confianza en el código reduciría significativamente el riesgo y evitaría la explotación en entornos mal configurados. Este problema ha sido corregido en la versión 5.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:it-novum:openitcockpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.0",
            "matchCriteriaId" : "D1602A3F-8FC6-43BE-948E-BE5E574DEDF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openITCOCKPIT/openITCOCKPIT/releases/tag/openITCOCKPIT-5.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openITCOCKPIT/openITCOCKPIT/security/advisories/GHSA-x4mq-8gfg-frc4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27115",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T18:25:52.920",
      "lastModified" : "2026-03-23T17:16:39.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below have an unvalidated command-line argument that allows any user to trigger recursive deletion of arbitrary directories on the Windows filesystem. ADB Explorer accepts an optional path argument to set a custom data directory, but only check whether the path exists. The ClearDrag() method calls Directory.Delete(dir, true) on every subdirectory of that path at both application startup and exit. An attacker can craft a malicious shortcut (.lnk) or batch script that launches ADB Explorer with a critical directory (e.g. C:\\Users\\%USERNAME%\\Documents) as the argument, causing permanent recursive deletion of all its subdirectories. Any user who launches ADB Explorer via a crafted shortcut, batch file, or script loses the contents of the targeted directory permanently (deletion bypasses the Recycle Bin). This issue has been fixed in version 0.9.26021."
      }, {
        "lang" : "es",
        "value" : "ADB Explorer es una interfaz de usuario fluida para ADB en Windows. Las versiones 0.9.26020 e inferiores tienen un argumento de línea de comandos no validado que permite a cualquier usuario activar la eliminación recursiva de directorios arbitrarios en el sistema de archivos de Windows. ADB Explorer acepta un argumento de ruta opcional para establecer un directorio de datos personalizado, pero solo verifica si la ruta existe. El método ClearDrag() llama a Directory.Delete(dir, true) en cada subdirectorio de esa ruta tanto al inicio como al cierre de la aplicación. Un atacante puede crear un acceso directo malicioso (.lnk) o un script por lotes que inicie ADB Explorer con un directorio crítico (p. ej., C:\\Users\\%USERNAME%\\Documents) como argumento, causando la eliminación recursiva permanente de todos sus subdirectorios. Cualquier usuario que inicie ADB Explorer a través de un acceso directo, archivo por lotes o script manipulado pierde el contenido del directorio objetivo permanentemente (la eliminación omite la Papelera de reciclaje). Este problema ha sido solucionado en la versión 0.9.26021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alex4ssb:adb_explorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.26021",
            "matchCriteriaId" : "235A69F9-C66D-4CC9-8C5D-CFC10D9A60EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/commit/f7554690b1f68c6066c12aa45aec60303bca545b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-rg2h-2p33-rxcr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2832",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2026-02-20T18:25:53.497",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuration information through specific APIs without proper authorization."
      }, {
        "lang" : "es",
        "value" : "Ciertas impresoras multifunción Samsung MultiXpress podrían ser vulnerables a la revelación de información, exponiendo potencialmente entradas de la libreta de direcciones y otra información de configuración del dispositivo a través de APIs específicas sin la debida autorización."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "hp-security-alert@hp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "hp-security-alert@hp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_14108019-14108039-16/hpsbpi04094",
        "source" : "hp-security-alert@hp.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2850",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T18:25:53.830",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\bus\\controller\\CustomerController.java of the component Customer Endpoint. Performing a manipulation results in improper access controls. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Esto afecta a la función addCustomer/updateCustomer/deleteCustomer del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\bus\\controller\\CustomerController.java del componente Customer Endpoint. Realizar una manipulación resulta en controles de acceso inadecuados. La explotación remota del ataque es posible. El exploit se ha hecho público y podría ser utilizado. Este producto sigue un enfoque de lanzamiento continuo para la entrega continua, por lo que no se proporcionan detalles de la versión para las versiones afectadas o actualizadas. Se informó al proyecto del problema con antelación a través de un informe de incidencia, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/61",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/61#issue-3846669982",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347086",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347086",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754429",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2851",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T18:25:54.170",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\bus\\controller\\InportController.java of the component Inport Endpoint. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Esta vulnerabilidad afecta a la función addInport/updateInport/deleteInport del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\bus\\controller\\InportController.java del componente Inport Endpoint. La ejecución de una manipulación puede llevar a controles de acceso inadecuados. El ataque puede ejecutarse remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto implementa un lanzamiento continuo para la entrega constante, lo que significa que la información de la versión para las versiones afectadas o actualizadas no está disponible. Se informó al proyecto del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/62",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/62#issue-3846670634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347087",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347087",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754430",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2852",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T19:23:15.250",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects the function addSales/updateSales/deleteSales of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\bus\\controller\\SalesController.java of the component Sales Endpoint. The manipulation leads to improper access controls. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en el almacén yeqifu hasta aaf29962ba407d22d991781de28796ee7b4670e4. Este problema afecta a la función addSales/updateSales/deleteSales del archivo dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\bus\\controller\\SalesController.java del componente Sales Endpoint. La manipulación conduce a controles de acceso inadecuados. El ataque puede ser llevado a cabo de forma remota. El exploit está disponible públicamente y podría ser utilizado. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden ser especificados. Se informó al proyecto del problema con antelación a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yeqifu:warehouse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-06",
            "matchCriteriaId" : "ADDBA610-D8C0-4B86-9DC6-5EE0B5B9C285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeqifu/warehouse/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/63",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/yeqifu/warehouse/issues/63#issue-3846671301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347088",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347088",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754431",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2472",
      "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
      "published" : "2026-02-20T20:25:24.307",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) Almacenado en el componente _genai/_evals_visualization de Google Cloud Vertex AI SDK (google-cloud-aiplatform) versiones desde la 1.98.0 hasta (pero sin incluir) la 1.131.0 permite a un atacante remoto no autenticado ejecutar JavaScript arbitrario en el entorno Jupyter o Colab de una víctima mediante la inyección de secuencias de escape de script en los resultados de evaluación del modelo o en los datos JSON del conjunto de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "AMBER"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloud.google.com/support/bulletins#gcp-2026-011",
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
      }, {
        "url" : "https://github.com/JoshuaProvoste/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2473",
      "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
      "published" : "2026-02-20T20:25:24.497",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting).\n\nThis vulnerability was patched and no customer action is needed."
      }, {
        "lang" : "es",
        "value" : "Nombres de buckets predecibles en Vertex AI Experiments en Google Cloud Vertex AI desde la versión 1.21.0 hasta (pero sin incluir) la 1.133.0 en Google Cloud Platform permite a un atacante remoto no autenticado lograr ejecución remota de código entre inquilinos, robo de modelos y envenenamiento mediante la creación previa de buckets de Cloud Storage con nombres predecibles (Bucket Squatting).\n\nEsta vulnerabilidad fue parcheada y no se requiere ninguna acción por parte del cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "CLEAR"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-340"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloud.google.com/support/bulletins#gcp-2026-012",
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2853",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T20:25:25.270",
      "lastModified" : "2026-02-23T20:29:33.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub_462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en D-Link DWR-M960 1.01.07. Esto afecta la función sub_462E14 del archivo /boafrm/formSysLog del componente System Log Configuration Endpoint. Realizar una manipulación del argumento submit-url resulta en desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347092",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347092",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754456",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2854",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T20:25:25.483",
      "lastModified" : "2026-02-23T20:28:30.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en D-Link DWR-M960 1.01.07. Esto afecta a la función sub_4611CC del archivo /boafrm/formNtp del componente Punto final de configuración NTP. La ejecución de una manipulación del argumento submit-url puede llevar a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347093",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347093",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2855",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T20:25:25.690",
      "lastModified" : "2026-02-23T20:27:55.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component DDNS Settings Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en D-Link DWR-M960 1.01.07. Afectada es la función sub_4648F0 del archivo /boafrm/formDdns del componente Gestor de Configuración DDNS. La manipulación del argumento submit-url conduce a desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347094",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347094",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754458",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24892",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T21:19:27.310",
      "lastModified" : "2026-03-02T14:56:48.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contains an unsafe PHP deserialization pattern in the processing of changelog entries. Serialized changelog data derived from attacker-influenced application state is unserialized without restricting allowed classes. Although no current application endpoint was found to introduce PHP objects into this data path, the presence of an unrestricted unserialize() call constitutes a latent PHP object injection vulnerability. If future code changes, plugins, or refactors introduce object values into this path, the vulnerability could become immediately exploitable with severe impact, including potential remote code execution."
      }, {
        "lang" : "es",
        "value" : "openITCOCKPIT es una herramienta de monitoreo de código abierto construida para diferentes motores de monitoreo como Nagios, Naemon y Prometheus. openITCOCKPIT Community Edition 5.3.1 y anteriores contiene un patrón de deserialización PHP inseguro en el procesamiento de entradas de registro de cambios. Datos de registro de cambios serializados derivados del estado de la aplicación influenciado por el atacante se deserializan sin restringir las clases permitidas. Aunque no se encontró ningún punto final de aplicación actual que introdujera objetos PHP en esta ruta de datos, la presencia de una llamada unserialize() sin restricciones constituye una vulnerabilidad de inyección de objetos PHP latente. Si futuros cambios de código, complementos o refactorizaciones introducen valores de objeto en esta ruta, la vulnerabilidad podría volverse inmediatamente explotable con impacto severo, incluyendo potencial ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:it-novum:openitcockpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.0",
            "matchCriteriaId" : "D1602A3F-8FC6-43BE-948E-BE5E574DEDF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openITCOCKPIT/openITCOCKPIT/commit/975e0d0dfb79898568afbbfdba8f647d92612a69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openITCOCKPIT/openITCOCKPIT/releases/tag/openITCOCKPIT-5.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openITCOCKPIT/openITCOCKPIT/security/advisories/GHSA-g83p-vvjm-g39x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25896",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T21:19:27.470",
      "lastModified" : "2026-03-02T14:54:02.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (.) in a DOCTYPE entity name is treated as a regex wildcard during entity replacement, allowing an attacker to shadow built-in XML entities (&lt;, &gt;, &amp;, &quot;, &apos;) with arbitrary values. This bypasses entity encoding and leads to XSS when parsed output is rendered. This vulnerability is fixed in 5.3.5."
      }, {
        "lang" : "es",
        "value" : "fast-xml-parser permite a los usuarios validar XML, analizar XML a objeto JS, o construir XML desde objeto JS sin librerías basadas en C/C++ y sin callback. Desde la versión 4.1.3 hasta antes de la 5.3.5, un punto (.) en un nombre de entidad DOCTYPE es tratado como un comodín de expresión regular durante el reemplazo de entidades, permitiendo a un atacante sombrear entidades XML incorporadas (&lt;, &gt;, &amp;, \", ') con valores arbitrarios. Esto omite la codificación de entidades y conduce a XSS cuando la salida analizada es renderizada. Esta vulnerabilidad se corrige en la versión 5.3.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-185"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naturalintelligence:fast-xml-parser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.3",
            "versionEndExcluding" : "5.3.5",
            "matchCriteriaId" : "CC7C6F3C-019C-4D48-A09F-D926B57DC0BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27020",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T21:19:27.940",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Photobooth anterior a la versión 1.0.1 tiene una vulnerabilidad de cross-site scripting (XSS) en los campos de entrada de usuario. Usuarios malintencionados podrían inyectar scripts a través de entradas de formulario no validadas. Esta vulnerabilidad está corregida en la versión 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lukas12000/photobooth/security/advisories/GHSA-x2m3-43gg-rrgq",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27190",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T21:19:28.090",
      "lastModified" : "2026-03-02T13:35:52.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.6.8, a command injection vulnerability exists in Deno's node:child_process implementation. This vulnerability is fixed in 2.6.8."
      }, {
        "lang" : "es",
        "value" : "Deno es un entorno de ejecución de JavaScript, TypeScript y WebAssembly. Antes de la versión 2.6.8, existe una vulnerabilidad de inyección de comandos en la implementación de node:child_process de Deno. Esta vulnerabilidad está corregida en la versión 2.6.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.8",
            "matchCriteriaId" : "EC88416B-4E66-4B72-B9D6-AB4590EAB1A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/commit/9132ad958c83a0d0b199de12b69b877f63edab4c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v2.6.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-hmh4-3xvx-q5hr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2856",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T21:19:30.610",
      "lastModified" : "2026-02-23T20:27:19.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_424AFC of the file /boafrm/formFilter of the component Filter Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en D-Link DWR-M960 1.01.07. Afectada por esta vulnerabilidad es la función sub_424AFC del archivo /boafrm/formFilter del componente Filter Configuration Endpoint. La manipulación del argumento submit-url resulta en desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347095",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347095",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754474",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2857",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T21:19:30.823",
      "lastModified" : "2026-02-23T20:26:36.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en D-Link DWR-M960 1.01.07. Afectada por este problema es la función sub_423E00 del archivo /boafrm/formPortFw del componente Port Forwarding Configuration Endpoint. Esta manipulación del argumento submit-url causa desbordamiento de búfer basado en pila. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347096",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347096",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0777",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T22:16:19.097",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the handling of attachments. When opening an attachment, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to execute code in the context of current user. Was ZDI-CAN-26034."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por advertencia de interfaz de usuario insuficiente en adjuntos de Xmind. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Xmind. Se requiere interacción del usuario para explotar esta vulnerabilidad en que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla específica existe dentro del manejo de adjuntos. Al abrir un adjunto, la interfaz de usuario falla en advertir al usuario de acciones inseguras. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. Fue ZDI-CAN-26034."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-356"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-069/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0797",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T22:16:19.280",
      "lastModified" : "2026-02-24T21:43:26.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28599."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por desbordamiento de búfer basado en montículo en el análisis de archivos ICO de GIMP. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GIMP. Se requiere interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla específica existe en el análisis de archivos ICO. El problema se debe a la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en montículo. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-28599."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD8D154-2B8E-4DC9-BF0F-A5E7A7141ED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/gimp/-/commit/69cc6b1a6645dc9c4d7b484483dbe6a84b922b9c",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-050/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27022",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:28.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection vulnerability exists in the @langchain/langgraph-checkpoint-redis package's filter handling. The RedisSaver and ShallowRedisSaver classes construct RediSearch queries by directly interpolating user-provided filter keys and values without proper escaping. RediSearch has special syntax characters that can modify query behavior, and when user-controlled data contains these characters, the query logic can be manipulated to bypass intended access controls. This vulnerability is fixed in 1.0.2."
      }, {
        "lang" : "es",
        "value" : "@langchain/langgraph-checkpoint-redis es la implementación de punto de control y almacenamiento de Redis para LangGraph. Existe una vulnerabilidad de inyección de consultas en el manejo de filtros del paquete @langchain/langgraph-checkpoint-redis. Las clases RedisSaver y ShallowRedisSaver construyen consultas de RediSearch interpolando directamente claves y valores de filtro proporcionados por el usuario sin un escape adecuado. RediSearch tiene caracteres de sintaxis especiales que pueden modificar el comportamiento de las consultas, y cuando los datos controlados por el usuario contienen estos caracteres, la lógica de la consulta puede ser manipulada para eludir los controles de acceso previstos. Esta vulnerabilidad está corregida en la versión 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langgraphjs/commit/814c76dc3938d0f6f7e17ca3bc11d6a12270b2a1",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/langchain-ai/langgraphjs/pull/1943",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/langchain-ai/langgraphjs/releases/tag/@langchain/langgraph-checkpoint-redis@1.0.2",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/langchain-ai/langgraphjs/security/advisories/GHSA-5mx2-w598-339m",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27024",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:28.687",
      "lastModified" : "2026-02-24T15:19:23.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. This vulnerability is fixed in 6.7.1."
      }, {
        "lang" : "es",
        "value" : "pypdf es una biblioteca PDF pure-python gratuita y de código abierto. Antes de la 6.7.1, un atacante que explota esta vulnerabilidad puede crear un PDF que provoca un bucle infinito. Esto requiere acceder a los hijos de un TreeObject, por ejemplo, como parte de los esquemas. Esta vulnerabilidad está corregida en la 6.7.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.1",
            "matchCriteriaId" : "DCEF058D-900A-439F-9975-628E08A1989A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/bd2f6d052fe5941e85e37082c2a43453d48d1295",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3645",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.7.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-996q-pr4m-cvgq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27025",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:28.850",
      "lastModified" : "2026-02-24T15:16:48.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. This vulnerability is fixed in 6.7.1."
      }, {
        "lang" : "es",
        "value" : "pypdf es una biblioteca PDF escrita puramente en Python, gratuita y de código abierto. Antes de 6.7.1, un atacante que utiliza esta vulnerabilidad puede crear un PDF que provoca tiempos de ejecución prolongados y un gran consumo de memoria. Esto requiere el análisis de la entrada /ToUnicode de una fuente con valores inusualmente grandes, por ejemplo durante la extracción de texto. Esta vulnerabilidad está corregida en 6.7.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.1",
            "matchCriteriaId" : "DCEF058D-900A-439F-9975-628E08A1989A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3646",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.7.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-wgvp-vg3v-2xq3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27026",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:29.023",
      "lastModified" : "2026-02-24T15:13:39.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a malformed /FlateDecode stream, where the byte-by-byte decompression is used. This vulnerability is fixed in 6.7.1."
      }, {
        "lang" : "es",
        "value" : "pypdf es una biblioteca PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.7.1, un atacante que utiliza esta vulnerabilidad puede crear un PDF que provoca tiempos de ejecución prolongados. Esto requiere un flujo /FlateDecode malformado, donde se utiliza la descompresión byte a byte. Esta vulnerabilidad está corregida en la versión 6.7.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.1",
            "matchCriteriaId" : "DCEF058D-900A-439F-9975-628E08A1989A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/7905842d833f899f1d3228af7e7467ad80277016",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3644",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.7.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-9mvc-8737-8j8h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27111",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:29.187",
      "lastModified" : "2026-02-25T18:01:51.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kargo manages and automates the promotion of software artifacts. From v1.9.0 to v1.9.2, Kargo's authorization model includes a promote verb -- a non-standard Kubernetes \"dolphin verb\" -- that gates the ability to advance Freight through a promotion pipeline. This verb exists to separate the ability to manage promotion-related resources from the ability to trigger promotions, enabling fine-grained access control over what is often a sensitive operation. The promote verb is correctly enforced in Kargo's legacy gRPC API. However, three endpoints in the newer REST API omit this check, relying only on standard Kubernetes RBAC for the underlying resource operations (patch on freights/status or create on promotions). This permits users who hold those standard permissions -- but who were deliberately not granted promote -- to bypass the intended authorization boundary. The affected endpoints are /v1beta1/projects/{project}/freight/{freight}/approve, /v1beta1/projects/{project}/stages/{stage}/promotions, and /v1beta1/projects/{project}/stages/{stage}/promotions/downstream. This vulnerability is fixed in v1.9.3."
      }, {
        "lang" : "es",
        "value" : "Kargo gestiona y automatiza la promoción de artefactos de software. Desde la v1.9.0 hasta la v1.9.2, el modelo de autorización de Kargo incluye un verbo 'promote' -- un \"verbo 'dolphin'\" no estándar de Kubernetes -- que restringe la capacidad de avanzar Freight a través de una tubería de promoción. Este verbo existe para separar la capacidad de gestionar recursos relacionados con la promoción de la capacidad de activar promociones, permitiendo un control de acceso granular sobre lo que a menudo es una operación sensible. El verbo 'promote' se aplica correctamente en la API gRPC heredada de Kargo. Sin embargo, tres puntos finales en la API REST más reciente omiten esta verificación, confiando solo en el RBAC estándar de Kubernetes para las operaciones de recursos subyacentes (parche en freights/status o creación en promotions). Esto permite a los usuarios que poseen esos permisos estándar -- pero a quienes deliberadamente no se les concedió 'promote' -- eludir el límite de autorización previsto. Los puntos finales afectados son /v1beta1/projects/{project}/freight/{freight}/approve, /v1beta1/projects/{project}/stages/{stage}/promotions, y /v1beta1/projects/{project}/stages/{stage}/promotions/downstream. Esta vulnerabilidad se corrige en la v1.9.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.3",
            "matchCriteriaId" : "3B60DE85-B240-4BA0-896D-2A0BA369B0AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuity/kargo/commit/833314cad5513d48d89431493325ae44c1324a49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akuity/kargo/security/advisories/GHSA-5vvm-67pj-72g4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27112",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:29.343",
      "lastModified" : "2026-02-25T18:03:32.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted payloads can manifest a bug present in the logic of both endpoints to inject arbitrary resources (of specific types only) into the underlying namespace of an existing Project using the API server's own permissions when that behavior was not intended. Critically, an attacker may exploit this as a vector for elevating their own permissions, which can then be leveraged to achieve remote code execution or secret exfiltration. Exfiltrated artifact repository credentials can be leveraged, in turn, to execute further attacks. In some configurations of the Kargo control plane's underlying Kubernetes cluster, elevated permissions may additionally be leveraged to achieve remote code execution or secret exfiltration using kubectl. This can reduce the complexity of the attack, however, worst case scenarios remain entirely achievable even without this. This vulnerability is fixed in v1.7.8, v1.8.11, and v1.9.3."
      }, {
        "lang" : "es",
        "value" : "Kargo gestiona y automatiza la promoción de artefactos de software. Desde la 1.7.0 hasta antes de las v1.7.8, v1.8.11 y v1.9.3, los puntos finales de creación de recursos por lotes tanto de la API gRPC heredada de Kargo como de la API REST más reciente aceptan cargas útiles YAML de múltiples documentos. Cargas útiles especialmente diseñadas pueden manifestar un error presente en la lógica de ambos puntos finales para inyectar recursos arbitrarios (solo de tipos específicos) en el espacio de nombres subyacente de un Proyecto existente utilizando los propios permisos del servidor API cuando ese comportamiento no estaba previsto. Críticamente, un atacante puede explotar esto como un vector para elevar sus propios permisos, lo que luego puede aprovecharse para lograr la ejecución remota de código o la exfiltración de secretos. Las credenciales de repositorio de artefactos exfiltradas pueden aprovecharse, a su vez, para ejecutar ataques adicionales. En algunas configuraciones del clúster de Kubernetes subyacente del plano de control de Kargo, los permisos elevados pueden aprovecharse adicionalmente para lograr la ejecución remota de código o la exfiltración de secretos usando kubectl. Esto puede reducir la complejidad del ataque, sin embargo, los escenarios de peor caso siguen siendo totalmente alcanzables incluso sin esto. Esta vulnerabilidad está corregida en las v1.7.8, v1.8.11 y v1.9.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.8",
            "matchCriteriaId" : "5A5AF03C-6D09-45BD-9C5D-A26A58F2FF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.11",
            "matchCriteriaId" : "E8F9AD6D-0D73-48DE-BC30-52DA3E9539A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.3",
            "matchCriteriaId" : "3B60DE85-B240-4BA0-896D-2A0BA369B0AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27113",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:29.503",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git repository containing a crafted branch name. Exploitation requires the LP_ENABLE_GITSTATUSD config option to be enabled (enabled by default), gitstatusd to be installed and started before Liquid Prompt is loaded (not the default), and shell prompt substitution to be active (enabled by default in Bash via \"shopt -s promptvars\", not enabled by default in Zsh). A branch name containing shell syntax such as \"$(...)\" or backtick expressions in the default branch or a checked-out branch will be evaluated by the shell when the prompt is rendered. No stable release is affected; only the master branch contains the vulnerable commit. Commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c contains a fix. As a workaround, set the LP_ENABLE_GITSTATUSD config option to 0."
      }, {
        "lang" : "es",
        "value" : "Liquid Prompt es un *prompt* adaptativo para Bash y Zsh. A partir del *commit* cf3441250bb5d8b45f6f8b389fcdf427a99ac28a y antes del *commit* a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c en la rama *master*, la inyección de comandos arbitraria puede llevar a la ejecución de código cuando un usuario entra en un directorio de un repositorio Git que contiene un nombre de rama manipulado. La explotación requiere que la opción de configuración LP_ENABLE_GITSTATUSD esté habilitada (habilitada por defecto), que *gitstatusd* esté instalado e iniciado antes de que se cargue Liquid Prompt (no es el valor por defecto), y que la sustitución del *prompt* de la *shell* esté activa (habilitada por defecto en Bash a través de 'shopt -s promptvars', no habilitada por defecto en Zsh). Un nombre de rama que contenga sintaxis de *shell* como '$(...)' o expresiones de *backtick* en la rama por defecto o en una rama extraída será evaluado por la *shell* cuando se renderice el *prompt*. Ninguna versión estable está afectada; solo la rama *master* contiene el *commit* vulnerable. El *commit* a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c contiene una corrección. Como solución alternativa, establezca la opción de configuración LP_ENABLE_GITSTATUSD en 0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liquidprompt/liquidprompt/commit/a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/liquidprompt/liquidprompt/security/advisories/GHSA-q6hm-vf4f-47jf",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27118",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:29.673",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Versions of @sveltejs/adapter-vercel prior to 6.3.2 are vulnerable to cache poisoning. An internal query parameter intended for Incremental Static Regeneration (ISR) is accessible on all routes, allowing an attacker to cause sensitive user-specific responses to be cached and served to other users. Successful exploitation requires a victim to visit an attacker-controlled link while authenticated. Existing deployments are protected by Vercel's WAF, but users should upgrade as soon as possible. This vulnerability is fixed in 6.3.2."
      }, {
        "lang" : "es",
        "value" : "SvelteKit es un framework para desarrollar rápidamente aplicaciones web robustas y de alto rendimiento utilizando Svelte. Las versiones de @sveltejs/adapter-vercel anteriores a la 6.3.2 son vulnerables al envenenamiento de caché. Un parámetro de consulta interno destinado a la Regeneración Estática Incremental (ISR) es accesible en todas las rutas, permitiendo a un atacante causar que respuestas sensibles y específicas del usuario sean almacenadas en caché y servidas a otros usuarios. La explotación exitosa requiere que una víctima visite un enlace controlado por el atacante mientras está autenticada. Las implementaciones existentes están protegidas por el WAF de Vercel, pero los usuarios deben actualizar lo antes posible. Esta vulnerabilidad está corregida en la 6.3.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/kit/security/advisories/GHSA-9pq4-5hcf-288c",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27120",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T22:16:29.830",
      "lastModified" : "2026-03-02T13:34:09.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Leafkit is a templating language with Swift-inspired syntax. Prior to 1.4.1, htmlEscaped in leaf-kit will only escape html special characters if the extended grapheme clusters match, which allows bypassing escaping by using an extended grapheme cluster containing both the special html character and some additional characters. In the case of html attributes, this can lead to XSS if there is a leaf variable in the attribute that is user controlled. This vulnerability is fixed in 1.4.1."
      }, {
        "lang" : "es",
        "value" : "Leafkit es un lenguaje de plantillas con sintaxis inspirada en Swift. Antes de la versión 1.4.1, htmlEscaped en leaf-kit solo escapará los caracteres especiales HTML si los clústeres de grafemas extendidos coinciden, lo que permite eludir el escape utilizando un clúster de grafemas extendido que contenga tanto el carácter especial HTML como algunos caracteres adicionales. En el caso de los atributos HTML, esto puede llevar a XSS si hay una variable leaf en el atributo que está controlada por el usuario. Esta vulnerabilidad está corregida en la versión 1.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-75"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-87"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vapor:leafkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.1",
            "matchCriteriaId" : "1C7EB8C5-FF4D-411D-900E-B94DFC1235DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vapor/leaf-kit/commit/8919e39476c3a4ba05c28b71546bb9195f87ef34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vapor/leaf-kit/security/advisories/GHSA-4hfh-fch3-5q7p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2858",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-20T22:16:30.000",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren_compiler.c of the component Source File Parser. Such manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en wren-lang wren hasta 0.4.0. Esto afecta a la función peekChar del archivo src/vm/wren_compiler.c del componente Source File Parser. Dicha manipulación conduce a una lectura fuera de límites. El ataque necesita ser realizado localmente. El exploit está disponible públicamente y podría ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de incidencia pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "5B3A76EF-D824-491F-B1BF-07C619DE6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0122/blob/main/i1217/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Product" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/issues/1217",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347097",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347097",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754489",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27119",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T23:16:02.360",
      "lastModified" : "2026-02-23T20:54:04.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "svelte performance oriented web framework. From 5.39.3, <=5.51.4, in certain circumstances, the server-side rendering output of an <option> element does not properly escape its content, potentially allowing HTML injection in the SSR output. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5."
      }, {
        "lang" : "es",
        "value" : "framework web svelte orientado al rendimiento. Desde 5.39.3, &lt;=5.51.4, en ciertas circunstancias, la salida de renderizado del lado del servidor de un elemento  no escapa correctamente su contenido, lo que podría permitir la inyección de HTML en la salida SSR. El renderizado del lado del cliente no se ve afectado. Esta vulnerabilidad se ha corregido en 5.51.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.39.3",
            "versionEndExcluding" : "5.51.5",
            "matchCriteriaId" : "03E3566B-7270-49AE-8C2E-4F39941F3D8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/svelte/security/advisories/GHSA-h7h7-mm68-gmrc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27121",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T23:16:02.503",
      "lastModified" : "2026-02-23T20:53:34.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "svelte performance oriented web framework. Versions of svelte prior to 5.51.5 are vulnerable to cross-site scripting (XSS) during server-side rendering. When using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an attacker can inject malicious event handlers that execute in victims' browsers. This vulnerability is fixed in 5.51.5."
      }, {
        "lang" : "es",
        "value" : "svelte, un framework web orientado al rendimiento. Las versiones de svelte anteriores a la 5.51.5 son vulnerables a cross-site scripting (XSS) durante la renderización del lado del servidor. Al usar la sintaxis de propagación para renderizar atributos de datos no confiables, las propiedades del gestor de eventos se incluyen en la salida HTML renderizada. Si una aplicación propaga datos controlados por el usuario o externos como atributos de elementos, un atacante puede inyectar gestores de eventos maliciosos que se ejecutan en los navegadores de las víctimas. Esta vulnerabilidad está corregida en la 5.51.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.51.5",
            "matchCriteriaId" : "95D3F8E1-FD81-4A9E-900E-5C66951A10BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/svelte/security/advisories/GHSA-f7gr-6p89-r883",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27122",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T23:16:02.640",
      "lastModified" : "2026-02-23T20:53:01.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "svelte performance oriented web framework. Prior to 5.51.5, when using <svelte:element this={tag}> in server-side rendering, the provided tag name is not validated or sanitized before being emitted into the HTML output. If the tag string contains unexpected characters, it can result in HTML injection in the SSR output. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5."
      }, {
        "lang" : "es",
        "value" : "framework web svelte orientado al rendimiento. Antes de 5.51.5, al usar  en la renderización del lado del servidor, el nombre de etiqueta proporcionado no se valida ni se sanea antes de ser emitido en la salida HTML. Si la cadena de etiqueta contiene caracteres inesperados, puede resultar en inyección HTML en la salida SSR. La renderización del lado del cliente no se ve afectada. Esta vulnerabilidad se ha corregido en 5.51.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.51.5",
            "matchCriteriaId" : "95D3F8E1-FD81-4A9E-900E-5C66951A10BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/svelte/security/advisories/GHSA-m56q-vw4c-c2cp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27125",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T23:16:02.780",
      "lastModified" : "2026-02-23T20:52:23.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "svelte performance oriented web framework. Prior to 5.51.5, in server-side rendering, attribute spreading on elements (e.g. <div {...attrs}>) enumerates inherited properties from the object's prototype chain rather than only own properties. In environments where Object.prototype has already been polluted — a precondition outside of Svelte's control — this can cause unexpected attributes to appear in SSR output or cause SSR to throw errors. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5."
      }, {
        "lang" : "es",
        "value" : "svelte framework web orientado al rendimiento. Antes de la versión 5.51.5, en la renderización del lado del servidor, la propagación de atributos en elementos (por ejemplo, ) enumera propiedades heredadas de la cadena de prototipos del objeto en lugar de solo propiedades propias. En entornos donde Object.prototype ya ha sido contaminado — una condición previa fuera del control de Svelte — esto puede causar que aparezcan atributos inesperados en la salida de SSR o que SSR arroje errores. La renderización del lado del cliente no se ve afectada. Esta vulnerabilidad se corrige en la versión 5.51.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.51.5",
            "matchCriteriaId" : "95D3F8E1-FD81-4A9E-900E-5C66951A10BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/svelte/commit/73098bb26c6f06e7fd1b0746d817d2c5ee90755f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/svelte/releases/tag/svelte@5.51.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/svelte/security/advisories/GHSA-crpf-4hrx-3jrp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27133",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-20T23:16:02.933",
      "lastModified" : "2026-02-27T21:48:29.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 to before 0.50.1, when a chain consisting of multiple CA (Certificate Authority) certificates is used in the trusted certificates configuration of a Kafka Connect operand or of the target cluster in the Kafka MirrorMaker 2 operand, all of the certificates that are part of the CA chain will be trusted individually when connecting to the Apache Kafka cluster. Due to this error, the affected operand (Kafka Connect or Kafka MirrorMaker 2) might accept connections to Kafka brokers using server certificates signed by one of the other CAs in the CA chain and not just by the last CA in the chain. This issue is fixed in Strimzi 0.50.1."
      }, {
        "lang" : "es",
        "value" : "Strimzi proporciona una forma de ejecutar un clúster de Apache Kafka en Kubernetes u OpenShift en varias configuraciones de despliegue. Desde la versión 0.47.0 hasta antes de la 0.50.1, cuando se utiliza una cadena que consta de múltiples certificados de CA (Autoridad de Certificación) en la configuración de certificados de confianza de un operando de Kafka Connect o del clúster de destino en el operando de Kafka MirrorMaker 2, todos los certificados que forman parte de la cadena de CA serán confiados individualmente al conectarse al clúster de Apache Kafka. Debido a este error, el operando afectado (Kafka Connect o Kafka MirrorMaker 2) podría aceptar conexiones a brokers de Kafka utilizando certificados de servidor firmados por una de las otras CA en la cadena de CA y no solo por la última CA de la cadena. Este problema está solucionado en Strimzi 0.50.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-296"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:strimzi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.47.0",
            "versionEndExcluding" : "0.50.1",
            "matchCriteriaId" : "D78C87B5-B3CA-4A0A-97B5-24F6CBDD092F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.50.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/strimzi/strimzi-kafka-operator/security/advisories/GHSA-6x85-j2f7-4xc5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2033",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.093",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of artifact file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26649."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por salto de directorio en el gestor de artefactos de MLflow Tracking Server. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de MLflow Tracking Server. No es necesaria la autenticación para explotar esta vulnerabilidad.\n\nLa falla reside en el manejo de las rutas de archivos de artefactos. El problema se debe a la falta de validación adecuada de una ruta proporcionada por el usuario antes de usarla en operaciones de archivo. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-26649."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mlflow/mlflow/pull/19260",
        "source" : "zdi-disclosures@trendmicro.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-105/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2034",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.233",
      "lastModified" : "2026-02-26T02:29:30.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28129."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer de análisis de archivos DCM con ejecución remota de código de Sante DICOM Viewer Pro. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Sante DICOM Viewer Pro. Se requiere interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla específica existe dentro del análisis de archivos DCM. El problema resulta de la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-28129."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:santesoft:dicom_viewer_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.7",
            "matchCriteriaId" : "84A452DD-8C58-4685-B755-9CFB21E22781"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-104/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2035",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.370",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deciso OPNsense. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of backup configuration files. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28131."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en el nombre de archivo diag_backup.php de Deciso OPNsense. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en instalaciones afectadas de Deciso OPNsense. Se requiere autenticación para explotar esta vulnerabilidad.\n\nLa falla específica reside en el manejo de los archivos de configuración de respaldo. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Fue ZDI-CAN-28131."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opnsense/core/commit/cb15c935137d05c86a1e6cf12af877e9c32a23af",
        "source" : "zdi-disclosures@trendmicro.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-078/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2036",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.507",
      "lastModified" : "2026-02-24T21:43:18.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the configuration of the MArc.Store.Remoting.exe process. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-27936."
      }, {
        "lang" : "es",
        "value" : "GFI Archiver MArc.Store Deserialización de Datos No Confiables Vulnerabilidad de Ejecución Remota de Código. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GFI Archiver. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser eludido.\n\nLa falla específica existe dentro de la configuración del proceso MArc.Store.Remoting.exe. El problema resulta de la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de SYSTEM. Fue ZDI-CAN-27936."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:archiver:15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7191FB98-8BE2-4921-8035-6750A76F8491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-076/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2037",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.643",
      "lastModified" : "2026-02-24T21:41:45.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the configuration of the MArc.Core.Remoting.exe process, which listens on port 8017. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-27935."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en MArc.Core de GFI Archiver. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GFI Archiver. Aunque se requiere autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser eludido.\n\nLa falla específica existe dentro de la configuración del proceso MArc.Core.Remoting.exe, que escucha en el puerto 8017. El problema resulta de la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en la deserialización de datos no confiables. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de SYSTEM. Fue ZDI-CAN-27935."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:archiver:15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7191FB98-8BE2-4921-8035-6750A76F8491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-074/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2038",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.777",
      "lastModified" : "2026-02-24T21:43:04.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of the MArc.Core.Remoting.exe process, which listens on port 8017. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-27934."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación por falta de autorización en GFI Archiver MArc.Core. Esta vulnerabilidad permite a atacantes remotos omitir la autenticación en instalaciones afectadas de GFI Archiver. No es necesario estar autenticado para explotar esta vulnerabilidad.\n\nLa falla reside en la configuración del proceso MArc.Core.Remoting.exe, que escucha en el puerto 8017. El problema se debe a la falta de autorización antes de permitir el acceso a la funcionalidad. Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código en el contexto de SYSTEM. Fue ZDI-CAN-27934."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:archiver:15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7191FB98-8BE2-4921-8035-6750A76F8491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-075/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2039",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:03.913",
      "lastModified" : "2026-02-24T21:42:14.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of the MArc.Store.Remoting.exe process, which listens on port 8018. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-28597."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación por falta de autorización en GFI Archiver MArc.Store. Esta vulnerabilidad permite a atacantes remotos omitir la autenticación en instalaciones afectadas de GFI Archiver. No es necesario estar autenticado para explotar esta vulnerabilidad.\n\nLa falla se encuentra en la configuración del proceso MArc.Store.Remoting.exe, que escucha en el puerto 8018. El problema se debe a la falta de autorización antes de permitir el acceso a la funcionalidad. Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código en el contexto de SYSTEM. Fue ZDI-CAN-28597."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:archiver:15.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7191FB98-8BE2-4921-8035-6750A76F8491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-077/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2040",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:04.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of PDF-XChange Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the TrackerUpdate process. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of a target user. Was ZDI-CAN-27788."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Escalada de Privilegios Local por Elemento de Ruta de Búsqueda No Controlado en PDF-XChange Editor TrackerUpdate. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de PDF-XChange Editor. Un atacante debe primero lograr la capacidad de ejecutar código con pocos privilegios en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla se encuentra dentro del proceso TrackerUpdate. El producto carga una biblioteca desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código en el contexto de un usuario objetivo. Fue ZDI-CAN-27788."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-122/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2041",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:04.190",
      "lastModified" : "2026-02-24T13:18:09.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the zabbixagent_configwizard_func method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28250."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en zabbixagent_configwizard_func de Nagios Host. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Nagios Host. Es preciso estar autenticado para explotar esta vulnerabilidad.\n\nLa falla se encuentra dentro del método zabbixagent_configwizard_func. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28250."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:2026:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC321F-6345-4077-A82D-8CC02C21C358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/changelog/nagios-xi/nagios-xi-2026r1-0-1/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-073/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2042",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:04.337",
      "lastModified" : "2026-02-24T13:17:25.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the monitoringwizard module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28245."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en Nagios Host monitoringwizard. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Nagios Host. Es preciso estar autenticado para explotar esta vulnerabilidad.\n\nLa falla se encuentra dentro del módulo monitoringwizard. El problema resulta de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28245."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:2026:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC321F-6345-4077-A82D-8CC02C21C358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/changelog/nagios-xi/nagios-xi-2026r1-0-1/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-071/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2043",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:04.517",
      "lastModified" : "2026-02-24T13:16:42.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the esensors_websensor_configwizard_func method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28249."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección de comandos y ejecución remota de código en Nagios Host esensors_websensor_configwizard_func. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Nagios Host. Para explotar esta vulnerabilidad es preciso estar autenticado.\n\nLa falla se encuentra dentro del método esensors_websensor_configwizard_func. El problema se debe a la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la cuenta de servicio. Fue ZDI-CAN-28249."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:2026:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC321F-6345-4077-A82D-8CC02C21C358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/changelog/nagios-xi/nagios-xi-2026r1-0-1/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-072/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2044",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:04.690",
      "lastModified" : "2026-02-24T21:41:32.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PGM files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28158."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por memoria no inicializada en el análisis de archivos PGM de GIMP. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GIMP. Para explotar esta vulnerabilidad se necesita la interacción del usuario quien debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla se encuentra dentro del análisis de archivos PGM. El problema resulta de la falta de inicialización adecuada de la memoria antes de acceder a ella. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-28158."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B29A73-05E5-438E-B994-61FBB133B6AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2569/diffs?commit_id=112a5e038f0646eae5ae314988ec074433d2b365",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-118/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2045",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:04.847",
      "lastModified" : "2026-02-24T21:41:19.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28265."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por escritura fuera de límites en el análisis de archivos XWD de GIMP. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GIMP. Para explotar esta vulnerabilidad es precisa la interacción del usuario quien debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla reside en el análisis de archivos XWD. El problema se debe a la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en una escritura más allá del final de un búfer asignado. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-28265."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B29A73-05E5-438E-B994-61FBB133B6AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/gimp/-/commit/68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-119/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2047",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:05.003",
      "lastModified" : "2026-02-24T21:41:07.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28530."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por desbordamiento de búfer basado en montículo en el análisis de archivos ICNS de GIMP. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GIMP. Para explotar esta vulnerabilidad es precisa la interacción del usuario quien debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla reside en el análisis de archivos ICNS. El problema se debe a la falta de validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en montículo. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-28530."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:3.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9B29A73-05E5-438E-B994-61FBB133B6AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2600/diffs?commit_id=dd2faac351f1ff2588529fedc606e6a5f815577c",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-120/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2048",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:05.167",
      "lastModified" : "2026-02-24T21:39:40.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28591."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código por escritura fuera de límites al analizar archivos XWD en GIMP. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de GIMP. Para explotar la vulnerabilidad es precisa la interacción del usuario quien debe visitar una página maliciosa o abrir un archivo malicioso.\n\nLa falla se encuentra en el análisis de archivos XWD. El problema se debe a la falta de validación adecuada de los datos proporcionados por el usuario, lo que puede resultar en una escritura más allá del final de un búfer asignado. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-28591."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimp:gimp:3.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD8D154-2B8E-4DC9-BF0F-A5E7A7141ED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2586/diffs?commit_id=57712677007793118388c5be6fb8231f22a2b341",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-121/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2490",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:05.300",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of RustDesk Client for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the Transfer File feature. By uploading a symbolic link, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-27909."
      }, {
        "lang" : "es",
        "value" : "RustDesk Cliente para Windows: Vulnerabilidad de revelación de información en el enlace de transferencia de archivos. Esta vulnerabilidad permite a atacantes locales revelar información sensible en instalaciones afectadas de RustDesk Cliente para Windows. Un atacante debe primero obtener la capacidad de ejecutar código con pocos privilegios en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla se encuentra en la característica de Transferencia de Archivos. Al cargar un enlace simbólico, un atacante puede abusar del servicio para leer archivos arbitrarios. Un atacante puede aprovechar esta vulnerabilidad para revelar información en el contexto de SYSTEM. Fue ZDI-CAN-27909."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustdesk/rustdesk/pull/13736",
        "source" : "zdi-disclosures@trendmicro.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-117/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2492",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:05.440",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the handling of plugins. The application loads plugins from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25480."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de privilegios local por elemento de ruta de búsqueda no controlada en la biblioteca HDF5 de TensorFlow. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de TensorFlow. Un atacante debe primero obtener la capacidad de ejecutar código con pocos privilegios en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla se encuentra en el manejo de plugins. La aplicación carga plugins desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de un usuario objetivo. Fue ZDI-CAN-25480."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/46e7f7fb144fd11cf6d17c23dd47620328d77082",
        "source" : "zdi-disclosures@trendmicro.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-116/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2635",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2026-02-20T23:16:05.577",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the basic_auth.ini file. The file contains hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the administrator. Was ZDI-CAN-28256."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Omisión de Autenticación por Uso de Contraseña Predeterminada en MLflow. Esta vulnerabilidad permite a atacantes remotos omitir la autenticación en instalaciones afectadas de MLflow. No es necesario autenticase para explotar esta vulnerabilidad.\n\nLa falla específica existe en el archivo basic_auth.ini. El archivo contiene credenciales predeterminadas almacenadas en el código. Un atacante puede aprovechar esta vulnerabilidad para omitir la autenticación y ejecutar código arbitrario en el contexto del administrador. Fue ZDI-CAN-28256."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1393"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mlflow/mlflow/pull/19260",
        "source" : "zdi-disclosures@trendmicro.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-26-111/",
        "source" : "zdi-disclosures@trendmicro.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27134",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:15.940",
      "lastModified" : "2026-02-25T18:54:50.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions  0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi incorrectly configures the trusted certificates for mTLS authentication on the internal as well as user-configured listeners. All CAs from the CA chain will be trusted. And users with certificates signed by any of the CAs in the chain will be able to authenticate. This issue affects only users using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs. It does not affect users using the Strimzi-managed Cluster and Clients CAs. It also does not affect users using custom Cluster or Clients CA with only a single CA (i.e., no CA chain with multiple CAs). This issue has been fixed in version 0.50.1. To workaround this issue, instead of providing the full CA chain as the custom CA, users can provide only the single CA that should be used."
      }, {
        "lang" : "es",
        "value" : "Strimzi proporciona una forma de ejecutar un clúster de Apache Kafka en Kubernetes u OpenShift en varias configuraciones de despliegue. En las versiones 0.49.0 a 0.50.0, al usar una CA de clúster o clientes personalizada con una cadena de CA multifase que consta de múltiples CA, Strimzi configura incorrectamente los certificados de confianza para la autenticación mTLS tanto en los oyentes internos como en los configurados por el usuario. Todas las CA de la cadena de CA serán de confianza. Y los usuarios con certificados firmados por cualquiera de las CA de la cadena podrán autenticarse. Este problema afecta solo a los usuarios que usan una CA de clúster o clientes personalizada con una cadena de CA multifase que consta de múltiples CA. No afecta a los usuarios que usan las CA de clúster y clientes gestionadas por Strimzi. Tampoco afecta a los usuarios que usan una CA de clúster o clientes personalizada con solo una única CA (es decir, sin cadena de CA con múltiples CA). Este problema ha sido solucionado en la versión 0.50.1. Como solución alternativa a este problema, en lugar de proporcionar la cadena de CA completa como la CA personalizada, los usuarios pueden proporcionar solo la única CA que debe usarse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-296"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:strimzi_kafka_operator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.49.0",
            "versionEndExcluding" : "0.50.1",
            "matchCriteriaId" : "D7602B49-F655-4497-890A-3FA585C739FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.50.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/strimzi/strimzi-kafka-operator/security/advisories/GHSA-2qwx-rq6j-8r6j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27146",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:16.170",
      "lastModified" : "2026-02-24T13:13:46.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetSimple CMS is a content management system. All versions of GetSimple CMS do not implement CSRF protection on the administrative file upload endpoint. As a result, an attacker can craft a malicious web page that silently triggers a file upload request from an authenticated victim’s browser. The request is accepted without requiring a CSRF token or origin validation. This allows an attacker to upload arbitrary files to the application without the victim’s knowledge or consent. In order to exploit this vulnerability, the victim must be authenticated to GetSimple CMS (e.g., admin user), and visit an attacker-controlled webpage. This issue does not have a fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "GetSimple CMS es un sistema de gestión de contenido. Todas las versiones de GetSimple CMS no implementan protección CSRF en el endpoint de carga de archivos de administración. Como resultado, un atacante puede crear una página web maliciosa que activa silenciosamente una solicitud de carga de archivos desde el navegador de una víctima autenticada. La solicitud es aceptada sin requerir un token CSRF o validación de origen. Esto permite a un atacante cargar archivos arbitrarios a la aplicación sin el conocimiento o consentimiento de la víctima. Para explotar esta vulnerabilidad, la víctima debe estar autenticada en GetSimple CMS (p. ej., usuario administrador) y visitar una página web controlada por el atacante. En el momento de esta publicación el problema aún no estaba resuelto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsimple-ce:getsimple_cms:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "3.3.22",
            "matchCriteriaId" : "10781A5F-4F78-4068-9876-29EF0A48A372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-26rv-8wpp-q84r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27147",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:16.333",
      "lastModified" : "2026-02-24T13:11:43.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploads. Authenticated users can upload SVG files via the administrative upload functionality, but they are not properly sanitized or restricted, allowing an attacker to embed malicious JavaScript. When the uploaded SVG file is accessed, the script executes in the browser. This issue does not have a fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "GetSimple CMS es un sistema de gestión de contenido. Todas las versiones de GetSimple CMS son vulnerables a XSS a través de cargas de archivos SVG. Los usuarios autenticados pueden cargar archivos SVG a través de la funcionalidad de carga de administración, pero estos no son debidamente saneados o restringidos, lo que permite a un atacante incrustar JavaScript malicioso. Cuando se accede al archivo SVG cargado, el script se ejecuta en el navegador. En el momento de la publicación este problema sigue sin ser solucionado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsimple-ce:getsimple_cms:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "3.3.22",
            "matchCriteriaId" : "10781A5F-4F78-4068-9876-29EF0A48A372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-5gmq-hrcx-6w45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27161",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:16.493",
      "lastModified" : "2026-02-24T13:10:07.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetSimple CMS is a content management system. All versions of GetSimple CMS rely on .htaccess files to restrict access to sensitive directories such as /data/ and /backups/. If Apache AllowOverride is disabled (common in hardened or shared hosting environments), these protections are silently ignored, allowing unauthenticated attackers to list and download sensitive files including authorization.xml, which contains cryptographic salts and API keys. This issue does not have a fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "GetSimple CMS es un sistema de gestión de contenido. Todas las versiones de GetSimple CMS dependen de archivos .htaccess para restringir el acceso a directorios sensibles como /data/ y /backups/. Si Apache AllowOverride está deshabilitado (común en entornos de alojamiento endurecidos o compartidos), estas protecciones son ignoradas silenciosamente, permitiendo a atacantes no autenticados listar y descargar archivos sensibles incluyendo authorization.xml, que contiene sales criptográficas y claves API. Este problema no tiene una solución en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsimple-ce:getsimple_cms:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "3.3.22",
            "matchCriteriaId" : "10781A5F-4F78-4068-9876-29EF0A48A372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-f63g-xh6j-q56g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27168",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:16.640",
      "lastModified" : "2026-03-02T13:28:55.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytes_per_line value. The value os read directly from the file as the read size in io->strict_read(), and is never compared to the actual size of the destination buffer. An attacker can provide an XWD file with an arbitrarily large bytes_per_line, causing a massive write operation beyond the buffer heap allocated for the image pixels. The issue did not have a fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "SAIL es una biblioteca multiplataforma para cargar y guardar imágenes con soporte para animación, metadatos y perfiles ICC. Todas las versiones son vulnerables a desbordamiento de búfer basado en montículo a través del uso del valor bytes_per_line por parte del analizador XWD. El valor se lee directamente del archivo como el tamaño de lectura en io-&gt;strict_read(), y nunca se compara con el tamaño real del búfer de destino. Un atacante puede proporcionar un archivo XWD con un bytes_per_line arbitrariamente grande, causando una operación de escritura masiva más allá del búfer de montículo asignado para los píxeles de la imagen. El problema no tenía una solución en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sail:sail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.10",
            "matchCriteriaId" : "A15F82CC-0250-4354-9924-7ED09BAB716F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HappySeaFox/sail/security/advisories/GHSA-3g38-x2pj-mv55",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27169",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:16.810",
      "lastModified" : "2026-02-23T20:50:36.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when later viewed in authenticated sessions. An attacker who can influence stored study/quiz/flashcard content could trigger script execution in a victim’s browser, potentially performing actions as that user in the local app session. This issue has been fixed in version 1.1.3-alpha."
      }, {
        "lang" : "es",
        "value" : "OpenSift es una herramienta de estudio de IA que tamiza grandes conjuntos de datos utilizando búsqueda semántica e IA generativa. Las versiones 1.1.2-alpha e inferiores renderizan contenido no confiable de usuario/modelo en las superficies de la interfaz de usuario de la herramienta de chat utilizando patrones de interpolación HTML inseguros, lo que lleva a XSS. El contenido almacenado puede ejecutar JavaScript cuando se visualiza posteriormente en sesiones autenticadas. Un atacante que puede influir en el contenido almacenado de estudio/cuestionario/tarjetas didácticas podría desencadenar la ejecución de scripts en el navegador de una víctima, realizando potencialmente acciones como ese usuario en la sesión de la aplicación local. Este problema ha sido solucionado en la versión 1.1.3-alpha."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "319EE5EC-3784-4572-A7A3-DFE3BC789A64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSift/OpenSift/releases/tag/v1.1.3-alpha",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/security/advisories/GHSA-qrpx-7cmv-5gv5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27170",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:16.980",
      "lastModified" : "2026-02-23T20:50:25.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local network resources from the OpenSift host process when ingesting attacker-controlled URLs. This issue has been fixed in version 1.1.3-alpha. To workaround when using trusted local-only exceptions, use OPENSIFT_ALLOW_PRIVATE_URLS=true with caution."
      }, {
        "lang" : "es",
        "value" : "OpenSift es una herramienta de estudio de IA que tamiza grandes conjuntos de datos utilizando búsqueda semántica e IA generativa. En las versiones 1.1.2-alpha e inferiores, la ingesta de URL permite un comportamiento de obtención del lado del servidor excesivamente permisivo y puede ser forzada a solicitar objetivos inseguros. Acceso/sondeo potencial de recursos de red privados/locales desde el proceso anfitrión de OpenSift al ingerir URL controladas por el atacante. Este problema ha sido solucionado en la versión 1.1.3-alpha. Para la solución alternativa al usar excepciones de solo locales de confianza, use OPENSIFT_ALLOW_PRIVATE_URLS=true con precaución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "319EE5EC-3784-4572-A7A3-DFE3BC789A64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSift/OpenSift/releases/tag/v1.1.3-alpha",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/security/advisories/GHSA-3w2r-hj5p-h6pp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27189",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:17.140",
      "lastModified" : "2026-02-23T20:48:59.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insufficiently synchronized local JSON persistence flows, potentially causing concurrent operations to lose updates or corrupt local state across sessions/study/quiz/flashcard/wellness/auth stores. This issue has been fixed in version 1.1.3-alpha."
      }, {
        "lang" : "es",
        "value" : "OpenSift es una herramienta de estudio de IA que tamiza grandes conjuntos de datos utilizando búsqueda semántica e inteligencia artificial generativa. Las versiones 1.1.2-alpha e inferiores utilizan flujos de persistencia JSON locales no atómicos e insuficientemente sincronizados, causando potencialmente que las operaciones concurrentes pierdan actualizaciones o corrompan el estado local en los almacenes de sesiones/estudio/cuestionarios/tarjetas didácticas/bienestar/autenticación. Este problema ha sido solucionado en la versión 1.1.3-alpha."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "319EE5EC-3784-4572-A7A3-DFE3BC789A64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSift/OpenSift/releases/tag/v1.1.3-alpha",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/security/advisories/GHSA-3pmp-j953-whxq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27202",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:17.307",
      "lastModified" : "2026-02-24T13:08:23.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. This issue has not been fixed at the time of publication."
      }, {
        "lang" : "es",
        "value" : "GetSimple CMS es un sistema de gestión de contenidos. Todas las versiones de GetSimple CMS tienen una falla en la característica de Archivos Subidos que permite lecturas arbitrarias de archivos. Este problema sigue sin haber sido solucionado en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsimple-ce:getsimple_cms:3.3.22:*:*:*:community:*:*:*",
            "matchCriteriaId" : "620AAABC-452D-426C-8640-717490D0E3A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-xhwv-g6q4-h886",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27203",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T00:16:17.463",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eBay API MCP Server is an open source local MCP server providing AI assistants with comprehensive access to eBay's Sell APIs. All versions are vulnerable to Environment Variable Injection through the updateEnvFile function. The ebay_set_user_tokens tool allows updating the .env file with new tokens. The updateEnvFile function in src/auth/oauth.ts blindly appends or replaces values without validating them for newlines or quotes. This allows an attacker to inject arbitrary environment variables into the configuration file. An attacker can inject arbitrary environment variables into the .env file. This could lead to configuration overwrites, Denial of Service, and potential RCE. There was no fix for this issue at the time of publication."
      }, {
        "lang" : "es",
        "value" : "eBay API MCP Server es un servidor MCP local de código abierto que proporciona a los asistentes de IA acceso completo a las API de venta de eBay. Todas las versiones son vulnerables a la Inyección de Variables de Entorno a través de la función updateEnvFile. La herramienta ebay_set_user_tokens permite actualizar el archivo .env con nuevos tokens. La función updateEnvFile en src/auth/oauth.ts añade o reemplaza valores ciegamente sin validarlos en busca de saltos de línea o comillas. Esto permite a un atacante inyectar variables de entorno arbitrarias en el archivo de configuración. Un atacante puede inyectar variables de entorno arbitrarias en el archivo .env. Esto podría llevar a sobrescrituras de configuración, Denegación de Servicio y potencial RCE. No había una solución para este problema en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-15"
        }, {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/YosefHayim/ebay-mcp/commit/aab0bda75ea9dd27aa37d0d8524d7cf41b3c4a9a",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/YosefHayim/ebay-mcp/security/advisories/GHSA-97rm-xj73-33jh",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27191",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T04:15:58.493",
      "lastModified" : "2026-02-25T15:12:58.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.39 and below the redirect query parameter is appended to the base origin without validation, allowing attackers to steal access tokens via URL authority injection. This leads to full account takeover, as the attacker obtains the victim's access token and can impersonate them. The application constructs the final redirect URL by concatenating the base origin with the user-supplied redirect parameter. This is exploitable when the origins array is configured and origin values do not end with /. An attacker can supply @attacker.com as the redirect value results in https://target.com@attacker.com#access_token=..., where the browser interprets attacker.com as the host, leading to full account takeover. This issue has been fixed in version 5.0.40."
      }, {
        "lang" : "es",
        "value" : "Feathersjs es un framework para crear APIs web y aplicaciones en tiempo real con TypeScript o JavaScript. En las versiones 5.0.39 e inferiores, el parámetro de consulta redirect se añade al origen base sin validación, permitiendo a los atacantes robar tokens de acceso mediante inyección de autoridad de URL. Esto lleva a una toma de control total de la cuenta, ya que el atacante obtiene el token de acceso de la víctima y puede suplantarla. La aplicación construye la URL de redirección final concatenando el origen base con el parámetro redirect proporcionado por el usuario. Esto es explotable cuando el array de orígenes está configurado y los valores de origen no terminan con /. Un atacante puede proporcionar @attacker.com como valor de redirección, lo que resulta en https://target.com@attacker.com#access_token=..., donde el navegador interpreta attacker.com como el host, lo que lleva a una toma de control total de la cuenta. Este problema ha sido solucionado en la versión 5.0.40."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feathersjs:feathers:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.0.40",
            "matchCriteriaId" : "5396E6E0-0D34-409C-A8A6-57AF06A90FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feathersjs/feathers/commit/ee19a0ae9bc2ebf23b1fe598a1f7361981b65401",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/feathersjs/feathers/releases/tag/v5.0.40",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/feathersjs/feathers/security/advisories/GHSA-ppf9-4ffw-hh4p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27192",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T04:15:58.697",
      "lastModified" : "2026-02-25T15:12:45.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, origin validation uses startsWith() for comparison, allowing attackers to bypass the check by registering a domain that shares a common prefix with an allowed origin.The getAllowedOrigin() function checks if the Referer header starts with any allowed origin, and this comparison is insufficient as it only validates the prefix. This is exploitable when the origins array is configured and an attacker registers a domain starting with an allowed origin string (e.g., https://target.com.attacker.com bypasses https://target.com). On its own, tokens are still redirected to a configured origin. However, in specific scenarios an attacker can initiate the OAuth flow from an unauthorized origin and exfiltrate tokens, achieving full account takeover. This issue has bee fixed in version 5.0.40."
      }, {
        "lang" : "es",
        "value" : "Feathersjs es un framework para crear APIs web y aplicaciones en tiempo real con TypeScript o JavaScript. En las versiones 5.0.39 e inferiores, la validación de origen utiliza startsWith() para la comparación, lo que permite a los atacantes eludir la verificación al registrar un dominio que comparte un prefijo común con un origen permitido. La función getAllowedOrigin() comprueba si el encabezado Referer comienza con cualquier origen permitido, y esta comparación es insuficiente ya que solo valida el prefijo. Esto es explotable cuando el array de orígenes está configurado y un atacante registra un dominio que comienza con una cadena de origen permitida (p. ej., https://target.com.attacker.com elude https://target.com). Por sí solos, los tokens siguen siendo redirigidos a un origen configurado. Sin embargo, en escenarios específicos un atacante puede iniciar el flujo de OAuth desde un origen no autorizado y exfiltrar tokens, logrando una toma de control total de la cuenta. Este problema ha sido solucionado en la versión 5.0.40."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feathersjs:feathers:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.0.40",
            "matchCriteriaId" : "5396E6E0-0D34-409C-A8A6-57AF06A90FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feathersjs/feathers/commit/ee19a0ae9bc2ebf23b1fe598a1f7361981b65401",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/feathersjs/feathers/releases/tag/v5.0.40",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/feathersjs/feathers/security/advisories/GHSA-mp4x-c34x-wv3x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27193",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T05:17:28.827",
      "lastModified" : "2026-02-25T15:12:35.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, all HTTP request headers are stored in the session cookie, which is signed but not encrypted, exposing internal proxy/gateway headers to clients. The OAuth service stores the complete headers object in the session, then the session is persisted using cookie-session, which base64-encodes the data. While the cookie is signed to prevent tampering, the contents are readable by anyone by simply decoding the base64 value. Under specific deployment configurations (e.g., behind reverse proxies or API gateways), this can lead to exposure of sensitive internal infrastructure details such as API keys, service tokens, and internal IP addresses. This issue has been fixed in version 5.0.40."
      }, {
        "lang" : "es",
        "value" : "Feathersjs es un framework para crear API web y aplicaciones en tiempo real con TypeScript o JavaScript. En las versiones 5.0.39 e inferiores, todos los encabezados de solicitud HTTP se almacenan en la cookie de sesión, la cual está firmada pero no cifrada, exponiendo los encabezados internos de proxy/gateway a los clientes. El servicio OAuth almacena el objeto completo de encabezados en la sesión, luego la sesión se persiste utilizando cookie-session, que codifica los datos en base64. Aunque la cookie está firmada para evitar la manipulación, el contenido es legible por cualquiera simplemente decodificando el valor base64. Bajo configuraciones de despliegue específicas (por ejemplo, detrás de proxies inversos o gateways de API), esto puede llevar a la exposición de detalles sensibles de la infraestructura interna, como claves de API, tokens de servicio y direcciones IP internas. Este problema ha sido solucionado en la versión 5.0.40."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feathersjs:feathers:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.0.40",
            "matchCriteriaId" : "5396E6E0-0D34-409C-A8A6-57AF06A90FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feathersjs/feathers/commit/ee19a0ae9bc2ebf23b1fe598a1f7361981b65401",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/feathersjs/feathers/releases/tag/v5.0.40",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/feathersjs/feathers/security/advisories/GHSA-9m9c-vpv5-9g85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27194",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T05:17:29.123",
      "lastModified" : "2026-02-23T20:47:29.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue has been fixed in version 3.20.0."
      }, {
        "lang" : "es",
        "value" : "D-Tale es un visualizador para estructuras de datos de pandas. Las versiones anteriores a la 3.20.0 son vulnerables a la ejecución remota de código a través del endpoint /save-column-filter. Los usuarios que alojan D-Tale públicamente pueden ser vulnerables a la ejecución remota de código, lo que permite a los atacantes ejecutar código malicioso en el servidor. Este problema ha sido solucionado en la versión 3.20.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:man:d-tale:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.19.1",
            "matchCriteriaId" : "9C22AB7C-DD71-409F-92A1-11AD010D1934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/man-group/dtale/commit/431c6148d3c799de20e1dec86c4432f48e3d0746",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/man-group/dtale/security/advisories/GHSA-c87c-78rc-vmv2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27196",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T05:17:29.333",
      "lastModified" : "2026-03-30T15:22:05.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below in addition to 6.0.0-alpha.1 through 6.3.1 have a Stored XSS vulnerability in html fieldtypes which allows authenticated users with field management permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This issue has been fixed in 6.3.2 and 5.73.9."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. Las versiones 5.73.8 e inferiores, además de la 6.0.0-alpha.1 hasta la 6.3.1, tienen una vulnerabilidad de XSS Almacenado en los tipos de campo html que permite a usuarios autenticados con permisos de gestión de campos inyectar JavaScript malicioso que se ejecuta cuando es visto por usuarios con mayores privilegios. Este problema ha sido solucionado en 6.3.2 y 5.73.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.9",
            "matchCriteriaId" : "11EDC44A-794E-452B-8C5C-453E31AB7651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.2",
            "matchCriteriaId" : "67846240-56D0-4181-B6DC-D40B2D0D0BDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/commit/11ae40e62edd3da044d37ebf264757a09cc2347b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/statamic/cms/commit/6c270dacc2be02bfc2eee500766f3309f59d47b3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-8r7r-f4gm-wcpq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27197",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T05:17:29.510",
      "lastModified" : "2026-02-23T20:45:01.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO implementation  which allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. Self-hosted users are only at risk if the following criteria is met: ore than one organizations are configured (SENTRY_SINGLE_ORGANIZATION = True), or malicious user has existing access and permissions to modify SSO settings for another organization in a multo-organization instance. This issue has been fixed in version 26.2.0. To workaround this issue, implement user account-based two-factor authentication to prevent an attacker from being able to complete authentication with a victim's user account. Organization administrators cannot do this on a user's behalf, this requires individual users to ensure 2FA has been enabled for their account."
      }, {
        "lang" : "es",
        "value" : "Sentry es una herramienta de seguimiento de errores y monitoreo de rendimiento diseñada para desarrolladores. Las versiones 21.12.0 a la 26.1.0 tienen una vulnerabilidad crítica en su implementación de SAML SSO que permite a un atacante tomar el control de cualquier cuenta de usuario mediante el uso de un proveedor de identidad SAML malicioso y otra organización en la misma instancia de Sentry. Los usuarios autoalojados solo están en riesgo si se cumplen los siguientes criterios: más de una organización está configurada (SENTRY_SINGLE_ORGANIZATION = True), o un usuario malicioso tiene acceso y permisos existentes para modificar la configuración de SSO para otra organización en una instancia multi-organización. Este problema ha sido solucionado en la versión 26.2.0. Como solución alternativa a este problema, implemente la autenticación de dos factores basada en la cuenta de usuario para evitar que un atacante pueda completar la autenticación con la cuenta de usuario de una víctima. Los administradores de la organización no pueden hacer esto en nombre de un usuario; esto requiere que los usuarios individuales se aseguren de que la 2FA ha sido habilitada para su cuenta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.12.0",
            "versionEndExcluding" : "26.2.0",
            "matchCriteriaId" : "53B1BCE6-47BF-4AF1-AD95-22981FDC92A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getsentry/sentry/security/advisories/GHSA-ggmg-cqg6-j45g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27527",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:29.683",
      "lastModified" : "2026-02-21T05:17:29.683",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27528",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:29.790",
      "lastModified" : "2026-02-21T05:17:29.790",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27529",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:29.850",
      "lastModified" : "2026-02-21T05:17:29.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27530",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:29.910",
      "lastModified" : "2026-02-21T05:17:29.910",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27531",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:29.967",
      "lastModified" : "2026-02-21T05:17:29.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27532",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:30.023",
      "lastModified" : "2026-02-21T05:17:30.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27533",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:30.087",
      "lastModified" : "2026-02-21T05:17:30.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27534",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-02-21T05:17:30.147",
      "lastModified" : "2026-02-21T05:17:30.147",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Not used"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2860",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T05:17:30.210",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. Impacted is an unknown function of the file EmployeeController.java. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. This product is distributed under two entirely different names. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en feng_ha_ha/megagao ssm-erp y production_ssm hasta 4288d53bd35757b27f2d070057aefb2c07bdd097. Afectada es una función desconocida del archivo EmployeeController.java. La manipulación conduce a una autorización indebida. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto está utilizando una versión continua para proporcionar entrega continua. Por lo tanto, no hay detalles de versión disponibles para las versiones afectadas ni actualizadas. Este producto se distribuye bajo dos nombres completamente diferentes. El proyecto fue informado del problema tempranamente a través de un informe de problema pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/megagao/production_ssm/issues/36",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/megagao/production_ssm/issues/36#issue-3914626431",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347100",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347100",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754494",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26045",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-02-21T06:16:58.867",
      "lastModified" : "2026-02-26T19:47:42.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en la funcionalidad de restauración de copias de seguridad de Moodle donde los archivos de copia de seguridad especialmente diseñados no se validaban correctamente durante el procesamiento. Si se restaura un archivo de copia de seguridad malicioso, podría conducir a la ejecución no intencionada de código del lado del servidor. Dado que las capacidades de restauración suelen estar disponibles para usuarios privilegiados, la explotación requiere acceso autenticado. Una explotación exitosa podría resultar en el compromiso total del servidor Moodle."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.9",
            "matchCriteriaId" : "80B1995C-45EB-41E5-A497-D565964750A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.5",
            "matchCriteriaId" : "8CDB0968-2E2B-4C2F-BF59-9479D1EEC287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.2",
            "matchCriteriaId" : "36833D08-9C77-48B1-9240-7F326F5BB1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26045",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440901",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26046",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-02-21T06:17:00.203",
      "lastModified" : "2026-02-26T19:46:57.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en una configuración administrativa del filtro TeX de Moodle donde una sanitización insuficiente de la entrada de configuración podría permitir la inyección de comandos. En sitios donde el filtro TeX está habilitado e ImageMagick está instalado, un valor de configuración maliciosamente elaborado introducido por un administrador podría resultar en la ejecución no intencionada de comandos del sistema. Si bien la explotación requiere privilegios administrativos, un compromiso exitoso podría afectar a todo el servidor Moodle."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.9",
            "matchCriteriaId" : "80B1995C-45EB-41E5-A497-D565964750A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.5",
            "matchCriteriaId" : "8CDB0968-2E2B-4C2F-BF59-9479D1EEC287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.2",
            "matchCriteriaId" : "36833D08-9C77-48B1-9240-7F326F5BB1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26046",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440903",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26047",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2026-02-21T06:17:00.377",
      "lastModified" : "2026-02-26T19:45:29.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de denegación de servicio en el editor de fórmulas TeX de Moodle. Al renderizar contenido TeX usando mimetex, si los límites de tiempo de ejecución son insuficientes, podrían permitir que fórmulas especialmente diseñadas consuman excesivos recursos del servidor. Un usuario autenticado podría abusar de este comportamiento para degradar el rendimiento o causar interrupción del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.9",
            "matchCriteriaId" : "80B1995C-45EB-41E5-A497-D565964750A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.5",
            "matchCriteriaId" : "8CDB0968-2E2B-4C2F-BF59-9479D1EEC287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.2",
            "matchCriteriaId" : "36833D08-9C77-48B1-9240-7F326F5BB1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26047",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440905",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27198",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T06:17:00.543",
      "lastModified" : "2026-03-03T17:33:54.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has sufficient privileges to assign highly privileged roles such as admin. As a result, an authenticated user with the editor role can create a new account with administrative privileges, leading to full administrative access and complete compromise of the CMS. This issue has been fixed in version 2.3.4."
      }, {
        "lang" : "es",
        "value" : "Formwork es un Sistema de Gestión de Contenidos (CMS) basado en archivos planos. En las versiones 2.0.0 a 2.3.3, la aplicación no logra aplicar correctamente la autorización basada en roles durante la creación de cuentas. Aunque el sistema valida que el rol especificado existe, no verifica si el usuario actual tiene privilegios suficientes para asignar roles altamente privilegiados como 'admin'. Como resultado, un usuario autenticado con el rol de 'editor' puede crear una nueva cuenta con privilegios administrativos, lo que lleva a un acceso administrativo completo y a un compromiso total del CMS. Este problema ha sido solucionado en la versión 2.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:formwork_project:formwork:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.4",
            "matchCriteriaId" : "49BAB15C-160B-4440-BD8D-DD2D7505D24E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getformwork/formwork/commit/19390a0b408e084bdef86f3581e050f3ee51e7cd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getformwork/formwork/releases/tag/2.3.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/getformwork/formwork/security/advisories/GHSA-34p4-7w83-35g2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27199",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T06:17:00.710",
      "lastModified" : "2026-03-03T17:30:17.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safe_join function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that safe_join accepts paths with multiple segments, such as example/NUL. The function send_from_directory uses safe_join to safely serve files at user-specified paths under a directory. If the application is running on Windows, and the requested path ends with a special device name, the file will be opened successfully, but reading will hang indefinitely. This issue has been fixed in version 3.1.6."
      }, {
        "lang" : "es",
        "value" : "Werkzeug es una completa biblioteca de aplicaciones web WSGI. Las versiones 3.1.5 e inferiores, la función safe_join permite nombres de dispositivos de Windows como nombres de archivo si van precedidos por otros segmentos de ruta. Esto fue reportado previamente como GHSA-hgf8-39gv-g3f2, pero el filtrado añadido no tuvo en cuenta el hecho de que safe_join acepta rutas con múltiples segmentos, como example/NUL. La función send_from_directory utiliza safe_join para servir archivos de forma segura en rutas especificadas por el usuario bajo un directorio. Si la aplicación se está ejecutando en Windows, y la ruta solicitada termina con un nombre de dispositivo especial, el archivo se abrirá con éxito, pero la lectura se colgará indefinidamente. Este problema ha sido solucionado en la versión 3.1.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-67"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.6",
            "matchCriteriaId" : "97FC0575-11B9-4EDE-A4B1-1724FF940BA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pallets/werkzeug/commit/f407712fdc60a09c2b3f4fe7db557703e5d9338d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/releases/tag/3.1.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/security/advisories/GHSA-29vq-49wr-vm6x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27205",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T06:17:00.910",
      "lastModified" : "2026-02-24T21:59:52.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache the response, as it may contain information specific to a logged in user. This is handled in most cases, but some forms of access such as the Python in operator were overlooked. The severity and risk depend on the application being hosted behind a caching proxy that doesn't ignore responses with cookies, not setting a Cache-Control header to mark pages as private or non-cacheable, and accessing the session in a way that only touches keys without reading values or mutating the session. The issue has been fixed in version 3.1.3."
      }, {
        "lang" : "es",
        "value" : "Flask es un framework de aplicación web de interfaz de puerta de enlace de servidor web (WSGI). En las versiones 3.1.2 e inferiores, cuando se accede al objeto de sesión, Flask debería establecer el encabezado Vary: Cookie, lo que resulta en una vulnerabilidad de Uso de Caché que Contiene Información Sensible. La lógica instruye a las cachés a no almacenar en caché la respuesta, ya que puede contener información específica de un usuario autenticado. Esto se maneja en la mayoría de los casos, pero algunas formas de acceso, como el operador in de Python, fueron pasadas por alto. La severidad y el riesgo dependen de que la aplicación esté alojada detrás de un proxy de caché que no ignore las respuestas con cookies, de no establecer un encabezado Cache-Control para marcar las páginas como privadas o no almacenables en caché, y de acceder a la sesión de una manera que solo toque las claves sin leer los valores o mutar la sesión. El problema ha sido solucionado en la versión 3.1.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-524"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:palletsprojects:flask:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "C52F4A9B-A92B-4063-8D3B-11DA13291DCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pallets/flask/commit/089cb86dd22bff589a4eafb7ab8e42dc357623b4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/flask/releases/tag/3.1.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pallets/flask/security/advisories/GHSA-68rp-wp8r-4726",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27210",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T06:17:01.083",
      "lastModified" : "2026-03-02T15:21:06.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pannellum is a lightweight, free, and open source panorama viewer for the web. In versions 3.5.0 through 2.5.6, the hot spot attributes configuration property allowed any attribute to be set, including HTML event handler attributes, allowing for potential XSS attacks. This affects websites hosting the standalone viewer HTML file and any other use of untrusted JSON config files (bypassing the protections of the escapeHTML parameter). As certain events fire without any additional user interaction, visiting a standalone viewer URL that points to a malicious config file — without additional user interaction — is sufficient to trigger the vulnerability and execute arbitrary JavaScript code, which can, for example, replace the contents of the page with arbitrary content and make it appear to be hosted by the website hosting the standalone viewer HTML file. This issue has been fixed in version 2.5.7. To workaround, setting the Content-Security-Policy header to script-src-attr 'none' will block execution of inline event handlers, mitigating this vulnerability. Don't host pannellum.htm on a domain that shares cookies with user authentication to mitigate XSS risk."
      }, {
        "lang" : "es",
        "value" : "Pannellum es un visor de panoramas ligero, gratuito y de código abierto para la web. En las versiones 3.5.0 a 2.5.6, la propiedad de configuración de atributos de punto de acceso permitía establecer cualquier atributo, incluyendo atributos de gestor de eventos HTML, lo que permitía posibles ataques XSS. Esto afecta a los sitios web que alojan el archivo HTML del visor independiente y a cualquier otro uso de archivos de configuración JSON no confiables (eludiendo las protecciones del parámetro escapeHTML). Como ciertos eventos se disparan sin ninguna interacción adicional del usuario, visitar una URL de visor independiente que apunte a un archivo de configuración malicioso — sin interacción adicional del usuario — es suficiente para activar la vulnerabilidad y ejecutar código JavaScript arbitrario, que puede, por ejemplo, reemplazar el contenido de la página con contenido arbitrario y hacer que parezca alojado por el sitio web que aloja el archivo HTML del visor independiente. Este problema ha sido solucionado en la versión 2.5.7. Como solución alternativa, establecer el encabezado Content-Security-Policy a 'script-src-attr 'none'' bloqueará la ejecución de gestores de eventos en línea, mitigando esta vulnerabilidad. No aloje pannellum.htm en un dominio que comparta cookies con la autenticación de usuario para mitigar el riesgo de XSS."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pannellum:pannellum:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.7",
            "matchCriteriaId" : "E58003E4-E437-439F-8280-88C88912813E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mpetroff/pannellum/commit/9391ef8da6a6a98c6a9f8c97f101adb900523681",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mpetroff/pannellum/security/advisories/GHSA-8423-w5wx-h2r6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27211",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T06:17:01.253",
      "lastModified" : "2026-02-24T17:08:14.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary host file exfiltration (constrained by process privileges) when using virtio-block devices backed by raw images. A malicious guest can overwrite its disk header with a crafted QCOW2 structure pointing to a sensitive host path. Upon the next VM boot or disk scan, the image format auto-detection parses this header and serves the host file's contents to the guest. Guest-initiated VM reboots are sufficient to trigger a disk scan and do not cause the Cloud Hypervisor process to exit. Therefore, a single VM can perform this attack without needing interaction from the management stack. Successful exploitation requires the backing image to be either writable by the guest or sourced from an untrusted origin. Deployments utilizing only trusted, read-only images are not affected. This issue has been fixed in version 50.1. To workaround, enable land lock sandboxing and restrict process privileges and access."
      }, {
        "lang" : "es",
        "value" : "Cloud Hypervisor es un Monitor de Máquina Virtual para cargas de trabajo en la nube. Las versiones 34.0 a 50.0 son vulnerables a la exfiltración arbitraria de archivos del host (limitada por los privilegios del proceso) al usar dispositivos virtio-block respaldados por imágenes raw. Un invitado malicioso puede sobrescribir su encabezado de disco con una estructura QCOW2 manipulada que apunta a una ruta sensible del host. Tras el siguiente arranque de la máquina virtual o escaneo de disco, la autodetección del formato de imagen analiza este encabezado y entrega el contenido del archivo del host al invitado. Los reinicios de la máquina virtual iniciados por el invitado son suficientes para activar un escaneo de disco y no provocan la salida del proceso de Cloud Hypervisor. Por lo tanto, una única máquina virtual puede realizar este ataque sin necesidad de interacción de la pila de gestión. La explotación exitosa requiere que la imagen de respaldo sea escribible por el invitado o que provenga de un origen no confiable. Las implementaciones que utilizan solo imágenes de confianza y de solo lectura no se ven afectadas. Este problema ha sido solucionado en la versión 50.1. Para una solución alternativa, habilite el sandboxing de land lock y restrinja los privilegios y el acceso del proceso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudhypervisor:cloud_hypervisor:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "34.0",
            "versionEndExcluding" : "50.1",
            "matchCriteriaId" : "DE7082B0-CAF7-4360-9514-D81B0372765D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/commit/081a6ebb5184228ff348601502258f3f72bd8b43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/commit/509832298b6865365b00bda88722e76e41ce7f41",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/commit/a63315df54e06f6ec867f17b63076c266e2d8648",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/commit/cb495959a8bea1b56e8fc82d15ba527a0e7fcf3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/releases/tag/v50.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/releases/tag/v51.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/security/advisories/GHSA-jmr4-g2hv-mjj6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27212",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T06:17:01.443",
      "lastModified" : "2026-02-24T15:16:56.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 through 12.1.1 have a Prototype pollution vulnerability. The vulnerability resides in line 94 of shared/utils.mjs, where the indexOf() function is used to check whether user provided input contain forbidden strings. Despite a previous fix that attempted to mitigate prototype pollution by checking whether user input contained a forbidden key, it is still possible to pollute Object.prototype via a crafted input using Array.prototype. The exploit works across Windows and Linux and on Node and Bun runtimes.  Any application that processes attacker-controlled input using this package may be affected  by the following: Authentication Bypass, Denial of Service and RCE. This issue is fixed in version 12.1.2."
      }, {
        "lang" : "es",
        "value" : "Swiper es un deslizador táctil móvil y gratuito con transiciones aceleradas por hardware y comportamiento nativo. Las versiones 6.5.1 hasta 12.1.1 tienen una vulnerabilidad de contaminación de prototipos. La vulnerabilidad reside en la línea 94 de shared/utils.mjs, donde la función indexOf() se utiliza para verificar si la entrada proporcionada por el usuario contiene cadenas prohibidas. A pesar de una corrección anterior que intentó mitigar la contaminación de prototipos verificando si la entrada del usuario contenía una clave prohibida, todavía es posible contaminar Object.prototype a través de una entrada manipulada usando Array.prototype. El exploit funciona en Windows y Linux y en los entornos de ejecución de Node y Bun. Cualquier aplicación que procese entrada controlada por el atacante usando este paquete puede verse afectada por lo siguiente: Omisión de Autenticación, Denegación de Servicio y RCE. Este problema está solucionado en la versión 12.1.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swiperjs:swiper:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.5.1",
            "versionEndExcluding" : "12.1.2",
            "matchCriteriaId" : "649D66EB-A502-4668-92D9-0534432DBFF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nolimits4web/swiper/commit/d3e663322a13043ca63aaba235d8cf3900e0c8cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nolimits4web/swiper/releases/tag/v12.1.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nolimits4web/swiper/security/advisories/GHSA-hmx5-qpq5-p643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2861",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T06:17:01.897",
      "lastModified" : "2026-03-16T16:16:14.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Foswiki hasta 2.1.10 que afecta a una función desconocida del componente Changes/Viewfile/Oops. Si se manipula se puede lograr una revelación de información. Es posible lanzar el ataque en remoto. El exploit es ahora público y puede ser utilizado. Con actualizar a la versión 2.1.11 es suficiente para solucionar este problema. El parche se identifica como 31aeecb58b64/d8ed86b10e46. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.11",
            "matchCriteriaId" : "58364C1A-BFC0-41CC-BCA9-D35A74E1001D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://foswiki.org/Tasks/Item15600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://foswiki.org/Tasks/Item15601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/foswiki/distro/commit/31aeecb58b64",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753966",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/16/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2863",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T06:17:02.177",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. The impacted element is the function deleteFile of the file FileServiceImpl.java. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. This product is distributed under two entirely different names. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en feng_ha_ha/megagao ssm-erp y production_ssm hasta 4288d53bd35757b27f2d070057aefb2c07bdd097 que afecta a la función deleteFile del archivo FileServiceImpl.java. Su manipulación provoca un salto de ruta. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado. En este producto se realizan entregas continuas con lanzamientos progresivos, por lo tanto, no hay detalles de versión de las versiones afectadas ni actualizadas. Este producto se distribuye bajo dos nombres completamente diferentes. Antes de la divulgar esta vulnerabilidad se contactó con el proyecto a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/megagao/production_ssm/issues/37",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/megagao/production_ssm/issues/37#issue-3914979380",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347102",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347102",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754530",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27206",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T07:16:11.753",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type field without restriction. When processing untrusted JSON input, this behavior may allow an attacker to instantiate arbitrary classes available in the application. If a vulnerable application passes attacker-controlled JSON into JsonSerializer::unserialize() and contains classes with dangerous magic methods (such as __wakeup() or __destruct()), this may lead to PHP Object Injection and potentially Remote Code Execution (RCE), depending on available gadget chains in the application or its dependencies. This behavior is similar in risk profile to PHP's native unserialize() when used without the allowed_classes restriction. Applications are impacted only if untrusted or attacker-controlled JSON is passed into JsonSerializer::unserialize() and the application or its dependencies contain classes that can be leveraged as a gadget chain. This issue has been fixed in version 3.2.3. If an immediate upgrade isn't feasible, mitigate the vulnerability by never deserializing untrusted JSON with JsonSerializer::unserialize(), validating and sanitizing all JSON input before deserialization, and disabling @type-based object instantiation wherever possible."
      }, {
        "lang" : "es",
        "value" : "Zumba Json Serializer es una biblioteca para serializar variables de PHP en formato JSON. En las versiones 3.2.2 e inferiores, la biblioteca permite la deserialización de objetos PHP desde JSON utilizando un campo especial @type. El deserializador instancia cualquier clase especificada en el campo @type sin restricciones. Al procesar entrada JSON no confiable, este comportamiento puede permitir a un atacante instanciar clases arbitrarias disponibles en la aplicación. Si una aplicación vulnerable pasa JSON controlado por el atacante a JsonSerializer::unserialize() y contiene clases con métodos mágicos peligrosos (como __wakeup() o __destruct()), esto puede llevar a la inyección de objetos PHP y, potencialmente, a la ejecución remota de código (RCE), dependiendo de las cadenas de gadgets disponibles en la aplicación o sus dependencias. Este comportamiento es similar en perfil de riesgo al unserialize() nativo de PHP cuando se usa sin la restricción allowed_classes. Las aplicaciones se ven afectadas solo si se pasa JSON no confiable o controlado por el atacante a JsonSerializer::unserialize() y la aplicación o sus dependencias contienen clases que pueden ser aprovechadas como una cadena de gadgets. Este problema ha sido solucionado en la versión 3.2.3. Si una actualización inmediata no es factible, mitigue la vulnerabilidad al nunca deserializar JSON no confiable con JsonSerializer::unserialize(), validando y saneando toda la entrada JSON antes de la deserialización, y deshabilitando la instanciación de objetos basada en @type siempre que sea posible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zumba/json-serializer/commit/bf26227879adefce75eb9651040d8982be97b881",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/zumba/json-serializer/releases/tag/3.2.3",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/zumba/json-serializer/security/advisories/GHSA-v7m3-fpcr-h7m2",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27452",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T07:16:13.210",
      "lastModified" : "2026-03-03T17:28:50.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6."
      }, {
        "lang" : "es",
        "value" : "Biblioteca ESM de TypeScript para ASN.1, incluyendo códecs para las Reglas Básicas de Codificación (BER) y las Reglas de Codificación Distinguida (DER). En las versiones 11.0.5 e inferiores, en algunos casos, la decodificación de un INTEGER podría filtrar el ArrayBuffer subyacente. Se espera que este problema se solucione en la versión 11.0.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jonathanwilbur:asn1-ts:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "11.0.6",
            "matchCriteriaId" : "7E273ECF-B5F7-4CF5-AF6C-ECFDBD2FA39C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27458",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T07:16:13.407",
      "lastModified" : "2026-02-24T15:03:33.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a Stored Cross-site Scripting vulnerability through the Atom feed endpoint for lists (/lists/feed). An authenticated user can inject a CDATA-breaking payload into a list description that escapes the XML CDATA section, injects a native SVG element into the Atom XML document, and executes arbitrary JavaScript directly in the browser when the feed URL is visited. No RSS reader or additional rendering context is required — the browser's native XML parser processes the injected SVG and fires the onload event handler. This vulnerability exists because the lists feed template outputs list descriptions using Blade's raw syntax ({!! !!}) without sanitization inside a CDATA block. The critical detail is that because the output sits inside <![CDATA[...]]>, an attacker can inject the sequence ]]> to close the CDATA section prematurely, then inject arbitrary XML/SVG elements that the browser parses and executes natively as part of the Atom document. This issue has been fixed in version 2.4.3."
      }, {
        "lang" : "es",
        "value" : "LinkAce es un archivo autoalojado para recopilar enlaces de sitios web. Las versiones 2.4.2 e inferiores tienen una vulnerabilidad de cross-site scripting almacenado a través del endpoint de feed Atom para listas (/lists/feed). Un usuario autenticado puede inyectar una carga útil que rompe CDATA en la descripción de una lista que escapa de la sección CDATA de XML, inyecta un elemento SVG nativo en el documento XML Atom y ejecuta JavaScript arbitrario directamente en el navegador cuando se visita la URL del feed. No se requiere un lector RSS o un contexto de renderizado adicional — el analizador XML nativo del navegador procesa el SVG inyectado y dispara el gestor de eventos onload. Esta vulnerabilidad existe porque la plantilla del feed de listas genera las descripciones de las listas utilizando la sintaxis sin procesar de Blade ({!! !!}) sin sanitización dentro de un bloque CDATA. El detalle crítico es que, debido a que la salida se encuentra dentro de ..., un atacante puede inyectar la secuencia ]]&gt; para cerrar la sección CDATA prematuramente, y luego inyectar elementos XML/SVG arbitrarios que el navegador analiza y ejecuta de forma nativa como parte del documento Atom. Este problema ha sido solucionado en la versión 2.4.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkace:linkace:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "71CF22B8-6AF6-46D6-B105-A04C26157590"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kovah/LinkAce/commit/eb5ba2abe05177ffa678baac0aa3f9c48b47d2f0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Kovah/LinkAce/security/advisories/GHSA-2r9p-95xj-p583",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27471",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T07:16:13.580",
      "lastModified" : "2026-02-24T14:52:50.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 16.6.0, certain endpoints lacked access validation which allowed for unauthorized document access. This issue has been fixed in versions 15.98.1 and 16.6.1."
      }, {
        "lang" : "es",
        "value" : "ERP es una herramienta de Planificación de Recursos Empresariales de código abierto y gratuita. En las versiones hasta la 15.98.0 y la 16.0.0-rc.1, y hasta la 16.6.0, ciertos endpoints carecían de validación de acceso, lo que permitía el acceso no autorizado a documentos. Este problema ha sido solucionado en las versiones 15.98.1 y 16.6.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:erpnext:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.98.1",
            "matchCriteriaId" : "99EC5DF8-E503-44E3-AFA0-01913369E5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:erpnext:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "16.0.0",
            "versionEndExcluding" : "16.6.1",
            "matchCriteriaId" : "54586AAF-3E56-40F6-A451-BCA6612337EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:erpnext:16.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A2EFB2-1819-4F8B-86C7-020B2FB75C01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:erpnext:16.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8F985625-91A3-4CA3-A962-48CF64D3F49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:erpnext:16.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "665B5B9E-4A38-4716-B71C-2CD10E293226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/erpnext/commit/78fc9424d9085c2eafe1211931e22d7044f85fc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/frappe/erpnext/security/advisories/GHSA-wpfx-jw7g-7f83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27464",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T08:16:10.553",
      "lastModified" : "2026-03-02T15:38:28.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, authenticated users are able to retrieve sensitive information from a Metabase instance, including database access credentials. During testing, it was confirmed that a low-privileged user can extract sensitive information including database credentials, into the email body via template evaluation. This issue has been fixed in versions 0.57.13 and 0.58.7. To workaround this issue, users can disable notifications in their Metabase instance to disallow access to the vulnerable endpoints."
      }, {
        "lang" : "es",
        "value" : "Metabase es una plataforma de análisis de datos de código abierto. En versiones anteriores a la 0.57.13 y versiones 0.58.x hasta la 0.58.6, los usuarios autenticados pueden recuperar información sensible de una instancia de Metabase, incluyendo credenciales de acceso a la base de datos. Durante las pruebas, se confirmó que un usuario con pocos privilegios puede extraer información sensible, incluyendo credenciales de la base de datos, en el cuerpo del correo electrónico a través de la evaluación de plantillas. Este problema ha sido solucionado en las versiones 0.57.13 y 0.58.7. Como solución alternativa a este problema, los usuarios pueden deshabilitar las notificaciones en su instancia de Metabase para denegar el acceso a los puntos finales vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "0.57.13",
            "matchCriteriaId" : "01D97E57-7925-4413-A3E7-2CEF3B301E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.57.13",
            "matchCriteriaId" : "E7E8C780-8CAD-4580-A760-BD988DC448F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "0.58.0",
            "versionEndExcluding" : "0.58.7",
            "matchCriteriaId" : "BDDF3090-38D4-469F-8C63-C33E682F104E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.58.0",
            "versionEndExcluding" : "1.58.7",
            "matchCriteriaId" : "1F98F32C-2D07-48F7-9E19-751695665BBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metabase/metabase/releases/tag/v0.57.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/metabase/metabase/releases/tag/v0.58.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/metabase/metabase/security/advisories/GHSA-vcj8-rcm8-gfj9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27466",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T08:16:11.647",
      "lastModified" : "2026-02-26T18:59:18.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigBlueButton is an open-source virtual classroom. In versions 3.0.21 and below, the official documentation for \"Server Customization\" on Support for ClamAV as presentation file scanner contains instructions that leave a BBB server vulnerable for Denial of Service. The flawed command exposes both ports (3310 and 7357) to the internet. A remote attacker can use this to send complex or large documents to clamd and waste server resources, or shutdown the clamd process. The clamd documentation explicitly warns about exposing this port. Enabling ufw (ubuntu firewall) during install does not help, because Docker routes container traffic through the nat table, which is not managed or restricted by ufw. Rules installed by ufw in the filter table have no effect on docker traffic. In addition, the provided example also mounts /var/bigbluebutton with write permissions into the container, which should not be required. Future vulnerabilities in clamd may allow attackers to manipulate files in that folder. Users are unaffected unless they have opted in to follow the extra instructions from BigBlueButton's documentation. This issue has been fixed in version 3.0.22."
      }, {
        "lang" : "es",
        "value" : "BigBlueButton es un aula virtual de código abierto. En las versiones 3.0.21 e inferiores, la documentación oficial para 'Personalización del Servidor' en Soporte para ClamAV como escáner de archivos de presentación contiene instrucciones que dejan un servidor BBB vulnerable a la denegación de servicio. El comando defectuoso expone ambos puertos (3310 y 7357) a internet. Un atacante remoto puede usar esto para enviar documentos complejos o grandes a clamd y malgastar recursos del servidor, o apagar el proceso clamd. La documentación de clamd advierte explícitamente sobre la exposición de este puerto. Habilitar ufw (cortafuegos de ubuntu) durante la instalación no ayuda, porque Docker enruta el tráfico del contenedor a través de la tabla nat, la cual no es gestionada ni restringida por ufw. Las reglas instaladas por ufw en la tabla de filtros no tienen efecto en el tráfico de docker. Además, el ejemplo proporcionado también monta /var/bigbluebutton con permisos de escritura en el contenedor, lo cual no debería ser necesario. Futuras vulnerabilidades en clamd pueden permitir a los atacantes manipular archivos en esa carpeta. Los usuarios no se ven afectados a menos que hayan optado por seguir las instrucciones adicionales de la documentación de BigBlueButton. Este problema ha sido solucionado en la versión 3.0.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigbluebutton:bigbluebutton:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.22",
            "matchCriteriaId" : "2F947DE6-4258-49E7-923E-8607DFEA6708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigbluebutton/bigbluebutton/commit/f3d33d94a9682e87c7d41f55700b19d61e1ab8b4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-wmhx-qw2p-w6gc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27467",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T08:16:11.827",
      "lastModified" : "2026-02-26T18:54:09.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the microphone muted, the client sends audio to the server regardless of mute state. Media is discarded at the server side, so it isn't audible to any participants, but this may allow for malicious server operators to access audio data. The behavior is only incorrect between joining the meeting and the first time the user unmutes. This issue has been fixed in version 3.0.20."
      }, {
        "lang" : "es",
        "value" : "BigBlueButton es un aula virtual de código abierto. En las versiones 3.0.19 e inferiores, al unirse por primera vez a una sesión con el micrófono silenciado, el cliente envía audio al servidor independientemente del estado de silencio. Los medios se descartan en el lado del servidor, por lo que no es audible para ningún participante, pero esto puede permitir a operadores de servidor maliciosos acceder a datos de audio. El comportamiento solo es incorrecto entre unirse a la reunión y la primera vez que el usuario quita el silencio. Este problema ha sido solucionado en la versión 3.0.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigbluebutton:bigbluebutton:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.20",
            "matchCriteriaId" : "FC6C16D8-2543-43E9-8F1B-632501E23028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigbluebutton/bigbluebutton/commit/3aa47832bc2b17178799bd932453c226e8f95703",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-6gj9-5rhm-68j8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27469",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T08:16:11.993",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Isso is a lightweight commenting server written in Python and JavaScript. In commits before 0afbfe0691ee237963e8fb0b2ee01c9e55ca2144, there is a stored Cross-Site Scripting (XSS) vulnerability affecting the website and author comment fields. The website field was HTML-escaped using quote=False, which left single and double quotes unescaped. Since the frontend inserts the website value directly into a single-quoted href attribute via string concatenation, a single quote in the URL breaks out of the attribute context, allowing injection of arbitrary event handlers (e.g. onmouseover, onclick). The same escaping is missing entirely from the user-facing comment edit endpoint (PUT /id/) and the moderation edit endpoint (POST /id//edit/). This issue has been patched in commit 0afbfe0691ee237963e8fb0b2ee01c9e55ca2144. To workaround, nabling comment moderation (moderation = enabled = true in isso.cfg) prevents unauthenticated users from publishing comments, raising the bar for exploitation, but it does not fully mitigate the issue since a moderator activating a malicious comment would still expose visitors."
      }, {
        "lang" : "es",
        "value" : "Isso es un servidor de comentarios ligero escrito en Python y JavaScript. En commits anteriores a 0afbfe0691ee237963e3fb0b2ee01c9e55ca2144, existe una vulnerabilidad de cross-site scripting (XSS) almacenado que afecta los campos de sitio web y de comentario del autor. El campo del sitio web fue escapado en HTML usando quote=False, lo que dejó las comillas simples y dobles sin escapar. Dado que el frontend inserta el valor del sitio web directamente en un atributo href entre comillas simples mediante concatenación de cadenas, una comilla simple en la URL rompe el contexto del atributo, permitiendo la inyección de manejadores de eventos arbitrarios (p. ej. onmouseover, onclick). El mismo escape está completamente ausente del endpoint de edición de comentarios para el usuario (PUT /id/) y del endpoint de edición de moderación (POST /id//edit/). Este problema ha sido parcheado en el commit 0afbfe0691ee237963e3fb0b2ee01c9e55ca2144. Como solución alternativa, habilitar la moderación de comentarios (moderation = enabled = true en isso.cfg) evita que los usuarios no autenticados publiquen comentarios, elevando la dificultad para la explotación, pero no mitiga completamente el problema ya que un moderador que active un comentario malicioso aún expondría a los visitantes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.python.org/3/library/html.html#html.escape",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/isso-comments/isso/commit/0afbfe0691ee237963e8fb0b2ee01c9e55ca2144",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/isso-comments/isso/security/advisories/GHSA-9fww-8cpr-q66r",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27470",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T08:16:12.197",
      "lastModified" : "2026-02-24T14:48:36.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents() function. Event field values (specifically Name and Cause) are stored safely via parameterized queries but are later retrieved and concatenated directly into SQL WHERE clauses without escaping. An authenticated user with Events edit and view permissions can exploit this to execute arbitrary SQL queries."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de televisión de circuito cerrado gratuita y de código abierto. En las versiones 1.36.37 e inferiores y de la 1.37.61 hasta la 1.38.0, existe una vulnerabilidad de inyección SQL de segundo orden en el archivo web/ajax/status.php dentro de la función getNearEvents(). Los valores de los campos de evento (específicamente Nombre y Causa) se almacenan de forma segura mediante consultas parametrizadas, pero luego se recuperan y se concatenan directamente en las cláusulas SQL WHERE sin escapar. Un usuario autenticado con permisos de edición y visualización de Eventos puede explotar esto para ejecutar consultas SQL arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.38",
            "matchCriteriaId" : "464C2B6D-B9E6-429B-A894-099EC5A3F552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.61",
            "versionEndExcluding" : "1.38.1",
            "matchCriteriaId" : "EFEBDB7E-89B6-41EB-934B-2C1F214D1A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/releases/tag/1.36.38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-r6gm-478g-f2c4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://owasp.org/www-community/attacks/SQL_Injection",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2864",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T08:16:12.377",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file PictureController.java. Such manipulation of the argument picName leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. This product is distributed under two entirely different names. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en feng_ha_ha/megagao ssm-erp y production_ssm hasta 4288d53bd35757b27f2d070057aefb2c07bdd097. Esto afecta a la función pictureDelete del archivo PictureController.java. Dicha manipulación del argumento picName conduce a salto de ruta. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser utilizado. Este producto no utiliza versionado. Por esta razón, la información sobre las versiones afectadas y no afectadas no está disponible. Este producto se distribuye bajo dos nombres completamente diferentes. El proyecto fue informado del problema tempranamente a través de un informe de incidencias pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/megagao/production_ssm/issues/38",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/megagao/production_ssm/issues/38#issue-3915113401",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347103",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347103",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754557",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2865",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T08:16:12.643",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en itsourcecode Agri-Trading Online Shopping System 1.0. Esto afecta a una función desconocida del archivo admin/productcontroller.php del componente Gestor de Solicitudes HTTP POST. Manipular el argumento Product resulta en inyección SQL. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría usarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adonesevangelista:agri-trading_online_shopping_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF6E7DA-95E8-4320-8A3D-CDAD62BE7429"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wan1yan/cve/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754556",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27479",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T09:15:53.923",
      "lastModified" : "2026-02-24T14:47:06.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wallos is an open-source, self-hostable personal subscription tracker. Versions 4.6.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the subscription and payment logo/icon upload functionality. The application validates the IP address of the provided URL before making the request, but allows HTTP redirects (CURLOPT_FOLLOWLOCATION = true), enabling an attacker to bypass the IP validation and access internal resources, including cloud instance metadata endpoints. The getLogoFromUrl() function validates the URL by resolving the hostname and checking if the resulting IP is in a private or reserved range using FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE. However, the subsequent cURL request is configured with CURLOPT_FOLLOWLOCATION = true and CURLOPT_MAXREDIRS = 3, which means the request will follow HTTP redirects without re-validating the destination IP. This issue has been fixed in version 4.6.1."
      }, {
        "lang" : "es",
        "value" : "Wallos es un rastreador de suscripciones personal de código abierto y autoalojable. Versiones 4.6.0 e inferiores contienen una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en la funcionalidad de carga de logotipos/iconos de suscripción y pago. La aplicación valida la dirección IP de la URL proporcionada antes de realizar la petición, pero permite redirecciones HTTP (CURLOPT_FOLLOWLOCATION = true), lo que permite a un atacante eludir la validación de IP y acceder a recursos internos, incluyendo puntos finales de metadatos de instancias en la nube. La función getLogoFromUrl() valida la URL resolviendo el nombre de host y comprobando si la dirección IP resultante está en un rango privado o reservado usando FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE. Sin embargo, la petición cURL subsiguiente está configurada con CURLOPT_FOLLOWLOCATION = true y CURLOPT_MAXREDIRS = 3, lo que significa que la petición seguirá las redirecciones HTTP sin revalidar la dirección IP de destino. Este problema ha sido solucionado en la versión 4.6.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "9FE90B6B-D0F1-4B0C-8629-56F91ECBF6AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ellite/Wallos/commit/76a53df9cb4658123b8f0b7cf1826f1ba7d1c960",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/releases/tag/v4.6.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/security/advisories/GHSA-fgmf-7g5v-jmjg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27480",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:12.210",
      "lastModified" : "2026-02-24T16:55:37.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In versions 2.1.0 through 2.40.1, a timing-based username enumeration vulnerability in Basic Authentication allows attackers to identify valid users by exploiting early responses for invalid usernames, enabling targeted brute-force or credential-stuffing attacks. SWS checks whether a username exists before verifying the password, causing valid usernames to follow a slower code path (e.g., bcrypt hashing) while invalid usernames receive an immediate 401 response. This timing discrepancy allows attackers to enumerate valid accounts by measuring response-time differences. This issue has been fixed in version 2.41.0."
      }, {
        "lang" : "es",
        "value" : "Servidor Web Estático (SWS) es un servidor web listo para producción, adecuado para archivos web estáticos o activos. En las versiones 2.1.0 a la 2.40.1, una vulnerabilidad de enumeración de nombres de usuario basada en tiempo en la Autenticación Básica permite a los atacantes identificar usuarios válidos explotando respuestas tempranas para nombres de usuario inválidos, lo que permite ataques de fuerza bruta dirigidos o de relleno de credenciales. SWS verifica si un nombre de usuario existe antes de verificar la contraseña, haciendo que los nombres de usuario válidos sigan una ruta de código más lenta (por ejemplo, el hash bcrypt) mientras que los nombres de usuario inválidos reciben una respuesta 401 inmediata. Esta discrepancia de tiempo permite a los atacantes enumerar cuentas válidas midiendo las diferencias en el tiempo de respuesta. Este problema ha sido solucionado en la versión 2.41.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:static-web-server:static_web_server:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.41.0",
            "matchCriteriaId" : "D0CB0D00-4F6E-4CBD-BC05-02533F489AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/static-web-server/static-web-server/commit/7bf0fd425eb10dac9bf9ef5febce12c4dd039ce1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/static-web-server/static-web-server/security/advisories/GHSA-qhp6-635j-x7r2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27482",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:12.380",
      "lastModified" : "2026-03-04T18:59:13.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable (e.g., --dashboard-host=0.0.0.0), a web page via DNS rebinding or same-network access can issue DELETE requests that shut down Serve or delete jobs without user interaction. This is a drive-by availability impact. The fix for this vulnerability is to update to Ray 2.54.0 or higher."
      }, {
        "lang" : "es",
        "value" : "Ray es un motor de cómputo de IA. En las versiones 2.53.0 e inferiores, el servidor HTTP del panel de control bloquea POST/PUT de origen de navegador pero no cubre DELETE, y los endpoints DELETE clave no están autenticados por defecto. Si el panel de control/agente es accesible (p. ej., --dashboard-host=0.0.0.0), una página web a través de la reconfiguración de DNS o el acceso a la misma red puede emitir solicitudes DELETE que apagan Serve o eliminan trabajos sin interacción del usuario. Esto supone un impacto en la disponibilidad de tipo drive-by. La solución para esta vulnerabilidad es actualizar a Ray 2.54.0 o superior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-396"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anyscale:ray:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.54.0",
            "matchCriteriaId" : "63751A45-3056-49B1-A840-35B9E6782CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ray-project/ray/commit/0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ray-project/ray/pull/60526",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ray-project/ray/releases/tag/ray-2.54.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ray-project/ray/security/advisories/GHSA-q5fh-2hc8-f6rq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:12.557",
      "lastModified" : "2026-02-23T20:44:09.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the Discord moderation action handling (timeout, kick, ban) uses sender identity from request parameters in tool-driven flows, instead of trusted runtime sender context. In setups where Discord moderation actions are enabled and the bot has the necessary guild permissions, a non-admin user can request moderation actions by spoofing sender identity fields. This issue has been fixed in version 2026.2.18."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.2.17 e inferiores, el manejo de acciones de moderación de Discord (tiempo de espera, expulsión, baneo) utiliza la identidad del remitente de los parámetros de la solicitud en flujos impulsados por herramientas, en lugar del contexto de remitente de tiempo de ejecución confiable. En configuraciones donde las acciones de moderación de Discord están habilitadas y el bot tiene los permisos de gremio necesarios, un usuario no administrador puede solicitar acciones de moderación suplantando los campos de identidad del remitente. Este problema ha sido solucionado en la versión 2026.2.18."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2026.2.17",
            "matchCriteriaId" : "7FCEB318-0B88-45F7-8AC7-5860166A7AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/775816035ecc6bb243843f8000c9a58ff609e32d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-wh94-p5m6-mr7j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:12.723",
      "lastModified" : "2026-02-23T20:43:11.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, skills/skill-creator/scripts/package_skill.py (a local helper script used when authors package skills) previously followed symlinks while building .skill archives. If an author runs this script on a crafted local skill directory containing symlinks to files outside the skill root, the resulting archive can include unintended file contents. If exploited, this vulnerability can lead to potential unintentional disclosure of local files from the packaging machine into a generated .skill artifact, but requires local execution of the packaging script on attacker-controlled skill contents. This issue has been fixed in version 2026.2.18."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.2.17 e inferiores, skills/skill-creator/scripts/package_skill.py (un script auxiliar local utilizado cuando los autores empaquetan habilidades) seguía previamente los enlaces simbólicos (symlinks) al construir archivos .skill. Si un autor ejecuta este script en un directorio de habilidad local manipulado que contiene enlaces simbólicos a archivos fuera de la raíz de la habilidad, el archivo resultante puede incluir contenido de archivo no deseado. Si se explota, esta vulnerabilidad puede llevar a una posible divulgación no intencionada de archivos locales desde la máquina de empaquetado a un artefacto .skill generado, pero requiere la ejecución local del script de empaquetado sobre contenidos de habilidad controlados por el atacante. Este problema ha sido solucionado en la versión 2026.2.18."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2026.2.17",
            "matchCriteriaId" : "7FCEB318-0B88-45F7-8AC7-5860166A7AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/c275932aa4230fb7a8212fe1b9d2a18424874b3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/ee1d6427b544ccadd73e02b1630ea5c29ba9a9f0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/pull/20796",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-r6h2-5gqq-v5v6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:12.903",
      "lastModified" : "2026-02-24T16:53:20.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.2.13 and below of the OpenClaw CLI, the process cleanup uses system-wide process enumeration and pattern matching to terminate processes without verifying if they are owned by the current OpenClaw process. On shared hosts, unrelated processes can be terminated if they match the pattern. The CLI runner cleanup helpers can kill processes matched by command-line patterns without validating process ownership. This issue has been fixed in version 2026.2.14."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.2.13 e inferiores de la CLI de OpenClaw, la limpieza de procesos utiliza la enumeración de procesos a nivel de sistema y la coincidencia de patrones para terminar procesos sin verificar si son propiedad del proceso actual de OpenClaw. En hosts compartidos, los procesos no relacionados pueden ser terminados si coinciden con el patrón. Los ayudantes de limpieza del ejecutor de la CLI pueden eliminar procesos que coinciden con patrones de línea de comandos sin validar la propiedad del proceso. Este problema ha sido solucionado en la versión 2026.2.14."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-283"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/6084d13b956119e3cf95daaf9a1cae1670ea3557",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/eb60e2e1b213740c3c587a7ba4dbf10da620ca66",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-jfv4-h8mc-jcp8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:13.100",
      "lastModified" : "2026-02-23T20:41:59.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the updated JSON blob into Keychain via security add-generic-password -w .... Because OAuth tokens are user-controlled data, this created an OS command injection risk. This issue has been fixed in version 2026.2.14."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.2.13 e inferiores, al usar macOS, la ruta de actualización de credenciales del llavero de Claude CLI construía un comando de shell para escribir el blob JSON actualizado en el Llavero a través de security add-generic-password -w .... Debido a que los tokens OAuth son datos controlados por el usuario, esto creaba un riesgo de inyección de comandos del sistema operativo. Este problema ha sido solucionado en la versión 2026.2.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/66d7178f2d6f9d60abad35797f97f3e61389b70c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/9dce3d8bf83f13c067bc3c32291643d2f1f10a06",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/b908388245764fb3586859f44d1dff5372b19caf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/pull/15924",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-4564-pvr2-qq4h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:13.267",
      "lastModified" : "2026-02-23T20:41:07.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targets can reach private/metadata/internal endpoints without SSRF policy checks. This issue was fixed in version 2026.2.19."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente personal de IA. En las versiones 2026.2.17 e inferiores, la entrega de webhooks de Cron en src/gateway/servidor-cron.ts utiliza fetch() directamente, por lo que los objetivos del webhook pueden alcanzar endpoints privados/de metadatos/internos sin comprobaciones de política de SSRF. Este problema se solucionó en la versión 2026.2.19."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2026.2.17",
            "matchCriteriaId" : "7FCEB318-0B88-45F7-8AC7-5860166A7AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27576",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T10:16:13.437",
      "lastModified" : "2026-02-23T20:39:31.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the ACP bridge accepts very large prompt text blocks and can assemble oversized prompt payloads before forwarding them to chat.send. Because ACP runs over local stdio, this mainly affects local ACP clients (for example IDE integrations) that send unusually large inputs. This issue has been fixed in version 2026.2.19."
      }, {
        "lang" : "es",
        "value" : "OpenClaw es un asistente de IA personal. En las versiones 2026.2.17 e inferiores, el puente ACP acepta bloques de texto de prompt muy grandes y puede ensamblar cargas útiles de prompt sobredimensionadas antes de reenviarlas a chat.send. Debido a que ACP se ejecuta sobre stdio local, esto afecta principalmente a los clientes ACP locales (por ejemplo, integraciones de IDE) que envían entradas inusualmente grandes. Este problema ha sido solucionado en la versión 2026.2.19."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2026.2.17",
            "matchCriteriaId" : "7FCEB318-0B88-45F7-8AC7-5860166A7AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/63e39d7f57ac4ad4a5e38d17e7394ae7c4dd0b9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/8ae2d5110f6ceadef73822aa3db194fb60d2ba68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/ebcf19746f5c500a41817e03abecadea8655654a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-cxpw-2g23-2vgw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1787",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-21T11:15:55.813",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'delete_migrated_data' function in all versions up to, and including, 4.1.0. This makes it possible for unauthenticated attackers to delete course that have been migrated from Tutor LMS. The Tutor LMS plugin must be installed and activated in order to exploit the vulnerability."
      }, {
        "lang" : "es",
        "value" : "El LearnPress Export Import – extensión de WordPress para el plugin LearnPress para WordPress es vulnerable a la pérdida de datos no autorizada debido a una comprobación de capacidad faltante en la función delete_migrated_data en todas las versiones hasta, e incluyendo, la 4.1.0. Esto hace posible que atacantes no autenticados eliminen cursos que han sido migrados desde Tutor LMS. El plugin Tutor LMS debe estar instalado y activado para explotar la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/learnpress-import-export/tags/4.1.0/inc/Migration/Controllers/TutorMigrationController.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3458589/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7bde915d-092a-452b-a0e0-ce5c2ce203dc?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T11:15:57.287",
      "lastModified" : "2026-02-24T15:00:44.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lettermint Node.js SDK is the official Node.js SDK for Lettermint. In versions 1.5.0 and below, email properties (such as to, subject, html, text, and attachments) are not reset between sends when a single client instance is reused across multiple .send() calls. This can cause properties from a previous send to leak into a subsequent one, potentially delivering content or recipient addresses to unintended parties. Applications sending emails to different recipients in sequence — such as transactional flows like password resets or notifications — are affected. This issue has been fixed in version 1.5.1."
      }, {
        "lang" : "es",
        "value" : "El SDK de Node.js de Lettermint es el SDK oficial de Node.js para Lettermint. En las versiones 1.5.0 e inferiores, las propiedades del correo electrónico (como 'para', 'asunto', 'html', 'texto' y 'archivos adjuntos') no se restablecen entre envíos cuando una única instancia de cliente se reutiliza en múltiples llamadas a .send(). Esto puede provocar que las propiedades de un envío anterior se filtren en uno posterior, entregando potencialmente contenido o direcciones de destinatarios a partes no deseadas. Las aplicaciones que envían correos electrónicos a diferentes destinatarios en secuencia — como flujos transaccionales como restablecimientos de contraseña o notificaciones — se ven afectadas. Este problema ha sido solucionado en la versión 1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-488"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lettermint:lettermint:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "20B84381-74A5-4D57-91F0-5626B5462944"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lettermint/lettermint-node/blob/main/CHANGELOG.md#151-2026-02-20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/lettermint/lettermint-node/commit/24a17acbc2429c5eb30391f9df3dc0ea7aaf4de1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lettermint/lettermint-node/security/advisories/GHSA-49pc-8936-wvfp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27574",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T11:15:57.443",
      "lastModified" : "2026-02-23T20:36:09.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript monitor feature uses Node.js's node:vm module (explicitly documented as not a security mechanism) to execute user-supplied code, allowing trivial sandbox escape via a well-known one-liner that grants full access to the underlying process. Because the probe runs with host networking and holds all cluster credentials (ONEUPTIME_SECRET, DATABASE_PASSWORD, REDIS_PASSWORD, CLICKHOUSE_PASSWORD) in its environment variables, and monitor creation is available to the lowest role (ProjectMember) with open registration enabled by default, any anonymous user can achieve full cluster compromise in about 30 seconds. This issue has been fixed in version 10.0.5."
      }, {
        "lang" : "es",
        "value" : "OneUptime es una solución para monitorear y gestionar servicios en línea. En las versiones 9.5.13 e inferiores, la función de monitor JavaScript personalizado utiliza el módulo node:vm de Node.js (documentado explícitamente como no un mecanismo de seguridad) para ejecutar código proporcionado por el usuario, permitiendo un escape trivial de la sandbox a través de una línea de código bien conocida que otorga acceso completo al proceso subyacente. Debido a que la sonda se ejecuta con red de host y guarda todas las credenciales del clúster (ONEUPTIME_SECRET, DATABASE_PASSWORD, REDIS_PASSWORD, CLICKHOUSE_PASSWORD) en sus variables de entorno, y la creación de monitores está disponible para el rol más bajo (ProjectMember) con el registro abierto habilitado por defecto, cualquier usuario anónimo puede lograr un compromiso completo del clúster en aproximadamente 30 segundos. Este problema ha sido solucionado en la versión 10.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hackerbay:oneuptime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.5",
            "matchCriteriaId" : "06EDB4AF-54CB-4AF9-B070-9AB3C45CCDC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneUptime/oneuptime/commit/7f9ed4d43945574702a26b7c206e38cc344fe427",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-v264-xqh4-9xmm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27579",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-21T11:15:57.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue authenticated cross-origin requests and read sensitive user account information, including email address, account identifiers, and MFA status. The issue did not have a fix at the time of publication."
      }, {
        "lang" : "es",
        "value" : "CollabPlatform es una plataforma de colaboración de documentos en tiempo real, full-stack. En todas las versiones de CollabPlatform, el proyecto Appwrite utilizado por la aplicación está mal configurado para permitir orígenes arbitrarios en las respuestas CORS, al mismo tiempo que permite solicitudes con credenciales. Un dominio controlado por un atacante puede emitir solicitudes autenticadas de origen cruzado y leer información sensible de la cuenta de usuario, incluyendo dirección de correo electrónico, identificadores de cuenta y estado de MFA. El problema no tenía una solución en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        }, {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/karnop/realtime-collaboration-platform/security/advisories/GHSA-qh5m-p8jh-hx88",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2867",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T14:15:57.983",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en itsourcecode Vehicle Management System 1.0. Afecta a una función desconocida del archivo /billaction.php. La ejecución de una manipulación del argumento ID puede conducir a una inyección SQL. El ataque puede lanzarse remotamente. El exploit ha sido divulgado públicamente y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:vehicle_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08987987-6758-4068-90C0-DE318113BC13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wan1yan/cve/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754578",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2869",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T15:15:58.607",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in janet-lang janet up to 1.40.1. Affected by this vulnerability is the function janetc_varset of the file src/core/specials.c of the component handleattr Handler. The manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 1.41.0 addresses this issue. The identifier of the patch is 2fabc80151a2b8834ee59cda8a70453f848b40e5. The affected component should be upgraded."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en janet-lang janet hasta la versión 1.40.1. Afectada por esta vulnerabilidad es la función janetc_varset del archivo src/core/specials.c del componente gestor handleattr. La manipulación conduce a una lectura fuera de límites. El ataque solo puede realizarse desde un entorno local. El exploit está disponible públicamente y podría ser utilizado. La actualización a la versión 1.41.0 soluciona este problema. El identificador del parche es 2fabc80151a2b8834ee59cda8a70453f848b40e5. El componente afectado debería ser actualizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janet-lang:janet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.40.1",
            "matchCriteriaId" : "D63D3EB2-96FF-4D2B-AD67-2DE091B2CC05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/janet-lang/janet/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/commit/2fabc80151a2b8834ee59cda8a70453f848b40e5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/issues/1699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/janet-lang/janet/releases/tag/v1.41.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/oneafter/0123/blob/main/ja1/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754589",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2870",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T15:15:59.643",
      "lastModified" : "2026-02-23T21:00:00.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function set_qosMib_list of the file /goform/formSetQosBand. The manipulation of the argument list results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en Tenda A21 1.0.0.0 que afecta a la función set_qosMib_list del archivo /goform/formSetQosBand. Al manipular el argumento list se provoca un desbordamiento de búfer basado en pila. El ataque puede ser ejecutado en remoto. El exploit ha sido publicado y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67739A4F-9F8B-44B2-9A66-45D946D04B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D2448-7A62-4F14-BADC-EB61F051BC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347107",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347107",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754627",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2871",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T16:16:05.133",
      "lastModified" : "2026-02-23T20:59:13.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of the file /goform/SetIpMacBind. This manipulation of the argument list causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Tenda A21 1.0.0.0. Esta afecta a la función fromSetIpMacBind del archivo /goform/SetIpMacBind. Al manipular la lista de argumentos se causa un desbordamiento de búfer basado en pila. El ataque puede llevarse a cabo de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67739A4F-9F8B-44B2-9A66-45D946D04B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D2448-7A62-4F14-BADC-EB61F051BC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754631",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2872",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T16:16:05.390",
      "lastModified" : "2026-02-23T20:57:59.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda A21 1.0.0.0. This vulnerability affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering Configuration Endpoint. Such manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Tenda A21 1.0.0.0. Esta vulnerabilidad afecta a la función set_device_name del archivo /goform/setBlackRule del componente MAC Filtering Configuration Endpoint. Al manipular el argumento devName/mac se provoca un desbordamiento de búfer basado en pila. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67739A4F-9F8B-44B2-9A66-45D946D04B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D2448-7A62-4F14-BADC-EB61F051BC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2873",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T17:15:58.987",
      "lastModified" : "2026-02-23T20:56:58.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda A21 1.0.0.0. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Tenda A21 1.0.0.0 que afecta a la función setSchedWifi del archivo /goform/openSchedWifi. Al manipular el argumento schedStartTime/schedEndTime se provoca un desbordamiento de búfer basado en pila. Es posible iniciar el ataque de forma remota. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67739A4F-9F8B-44B2-9A66-45D946D04B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D2448-7A62-4F14-BADC-EB61F051BC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2874",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T18:15:59.770",
      "lastModified" : "2026-02-23T20:09:11.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda A21 1.0.0.0. Impacted is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. Executing a manipulation of the argument ssid can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda A21 1.0.0.0. La función afectada es form_fast_setting_wifi_set del archivo /goform/fast_setting_wifi_set. Si se manipula el argumento ssid se puede provocar un desbordamiento de búfer basado en pila. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67739A4F-9F8B-44B2-9A66-45D946D04B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D2448-7A62-4F14-BADC-EB61F051BC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347111",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347111",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754636",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2876",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T18:16:00.933",
      "lastModified" : "2026-02-23T20:33:02.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda A18 15.13.07.13. Esta afecta a la función parse_macfilter_rule del archivo /goform/setBlackRule. Manipular el argumento deviceList causa un desbordamiento de búfer basado en pila. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a18_firmware:15.13.07.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88459A72-340E-4C7A-8C32-C5F6645F5ED4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20146A03-30B3-4BFF-83DA-DEDBF6850A6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/38",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347114",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347114",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2877",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T19:15:58.940",
      "lastModified" : "2026-02-23T20:09:24.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda A18 15.13.07.13. Esta afecta a la función strcpy del archivo /goform/WifiExtraSet del componente Servicio Httpd. Manipular el argumento wpapsk_crypto5g provoca un desbordamiento de búfer basado en pila. Es posible iniciar el ataque en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a18_firmware:15.13.07.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88459A72-340E-4C7A-8C32-C5F6645F5ED4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20146A03-30B3-4BFF-83DA-DEDBF6850A6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/39",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2881",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T20:16:39.067",
      "lastModified" : "2026-02-23T20:25:52.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_425FF8 of the file /boafrm/formFirewallAdv of the component Advanced Firewall Configuration Endpoint. Such manipulation of the argument submit-url leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en D-Link DWR-M960 1.01.07. Esta vulnerabilidad afecta a la función sub_425FF8 del archivo /boafrm/formFirewallAdv del componente Advanced Firewall Configuration Endpoint. Manipular el argumento submit-url conduce a un desbordamiento de búfer basado en pila. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/15",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347175",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347175",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754486",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2882",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T20:16:40.103",
      "lastModified" : "2026-02-23T19:42:15.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_46385C of the file /boafrm/formDosCfg. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DWR-M960 1.01.07. Este problema afecta a la función sub_46385C del archivo /boafrm/formDosCfg. Manipular el argumento submit-url puede provocar un desbordamiento de búfer basado en pila. Es posible explotar el ataque en remoto. El exploit ha sido hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347176",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347176",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754487",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2883",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T20:16:40.310",
      "lastModified" : "2026-02-23T19:41:14.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_427D74 of the file /boafrm/formIpQoS. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DWR-M960 1.01.07 que afectada a la función sub_427D74 del archivo /boafrm/formIpQoS. Si se manipula el argumento submit-url se puede provocar un desbordamiento de búfer basado en pila. El ataque puede ser ejecutado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347177",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347177",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2884",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T21:16:10.680",
      "lastModified" : "2026-02-23T19:38:07.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in D-Link DWR-M960 1.01.07. The affected element is the function sub_41914C of the file /boafrm/formWanConfigSetup of the component WAN Interface Setting Handler. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en D-Link DWR-M960 1.01.07. El elemento afectado es la función sub_41914C del archivo /boafrm/formWanConfigSetup del componente Gestor de Configuración de Interfaz WAN. Manipular el argumento submit-url conduce a un desbordamiento de búfer basado en pila. El ataque es posible de llevar a cabo remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347178",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347178",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2885",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T21:16:10.907",
      "lastModified" : "2026-02-23T19:37:28.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in D-Link DWR-M960 1.01.07. The impacted element is the function sub_469104 of the file /boafrm/formIpv6Setup. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en D-Link DWR-M960 1.01.07. La cual afectada a la función sub_469104 del archivo /boafrm/formIpv6Setup. Al manipular el argumento submit-url se provoca un desbordamiento de búfer basado en pila. El ataque puede ser realizado desde remoto. El exploit ha sido liberado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347179",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347179",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754496",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2886",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T21:16:11.217",
      "lastModified" : "2026-02-23T21:00:35.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Tenda A21 1.0.0.0. Esta afecta a la función set_device_name del archivo /goform/SetOnlineDevName. Manipular el argumento devName causa un desbordamiento de búfer basado en pila. Es posible iniciar el ataque en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67739A4F-9F8B-44B2-9A66-45D946D04B7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4D2448-7A62-4F14-BADC-EB61F051BC08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347180",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347180",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2887",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T21:16:11.420",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the function lobster::TypeName in the library dev/src/lobster/idents.h. Such manipulation leads to uncontrolled recursion. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. Upgrading to version 2026.1 will fix this issue. The name of the patch is 8ba49f98ccfc9734ef352146806433a41d9f9aa6. It is advisable to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en aardappel lobster hasta 2025.4. Esta afecta a la función lobster::TypeName de la biblioteca dev/src/lobster/idents.h. Su manipulación conduce a recursión incontrolada. El ataque solo puede ser realizado desde un entorno local. El exploit ha sido divulgado públicamente y puede ser utilizado. La actualización de la versión 2026.1 soluciona este problema. El nombre del parche es 8ba49f98ccfc9734ef352146806433a41d9f9aa6. Es aconsejable actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strlen:lobster:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.1",
            "matchCriteriaId" : "C71AFEA1-9739-440F-BC6E-2C90F0A3988B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aardappel/lobster/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/commit/8ba49f98ccfc9734ef352146806433a41d9f9aa6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/issues/397",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/issues/397#issuecomment-3849015088",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aardappel/lobster/releases/tag/v2026.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/oneafter/0204/blob/main/lob3/repro.lobster",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347181",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347181",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755026",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2889",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T22:15:59.353",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/lib_ccx/mp4.c. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 0.96.6 is able to address this issue. The patch is named fd7271bae238ccb3ae8a71304ea64f0886324925. You should upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en CCExtractor hasta 0.96.5 que afecta a la función processmp4 en la biblioteca src/lib_ccx/mp4.c. Manipularlo provoca un use after free. El ataque solo es posible con acceso local. El exploit ahora es público y puede ser usado. La actualización 0.96.6 es capaz de solventar este problema. El parche se llama fd7271bae238ccb3ae8a71304ea64f0886324925. Debería actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CCExtractor/ccextractor/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/commit/fd7271bae238ccb3ae8a71304ea64f0886324925",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/issues/2055",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/pull/2057",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CCExtractor/ccextractor/releases/tag/v0.96.6",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0123/blob/main/cc3/repro",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347182",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347182",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.755029",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2894",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T23:15:59.763",
      "lastModified" : "2026-02-24T16:48:40.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulation leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en funadmin hasta la versión 7.1.0-rc4, la cual afecta a la función getMember del archivo app/frontend/view/login/forget.html. Dicha manipulación conduce a una revelación de información. El ataque puede ser lanzado en remoto. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta revelación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "67A1D507-8F8E-4C10-B5CB-D08DE081AF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D14B5D13-CC64-43DE-A709-150D9284D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7A984-32FB-4957-8151-47FC4C2CB9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "518EE1E1-CD85-4784-94E5-D7DF735BFF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "303D805A-EEC2-44FE-BB54-8B336EA8A3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/I4m6da/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/I4m6da/CVE/issues/1#issue-3884896592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347205",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347205",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2895",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-21T23:15:59.990",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the file app/frontend/controller/Member.php. Performing a manipulation of the argument forget_code/vercode results in weak password recovery. Remote exploitation of the attack is possible. The attack's complexity is rated as high. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en funadmin hasta 7.1.0-rc4. La cual afecta a la función repass del archivo app/frontend/controller/Member.PHP. Manipular el argumento forget_code/vercode provoca una recuperación de contraseña débil. Es posible explotar el ataque en remoto. El ataque está calificado de complejidad alta y se sabe que es difícil de explotar. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "67A1D507-8F8E-4C10-B5CB-D08DE081AF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D14B5D13-CC64-43DE-A709-150D9284D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7A984-32FB-4957-8151-47FC4C2CB9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "518EE1E1-CD85-4784-94E5-D7DF735BFF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "303D805A-EEC2-44FE-BB54-8B336EA8A3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/I4m6da/CVE/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/I4m6da/CVE/issues/2#issue-3884919985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347206",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347206",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753971",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2896",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T00:15:59.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en funadmin hasta 7.1.0-rc4. Esto afecta a la función setConfig del archivo app/backend/controller/Ajax.PHP del componente Gestor de Configuración. Si se ejecuta habiendo sido manipulada se puede provocar una autorización indebida. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "67A1D507-8F8E-4C10-B5CB-D08DE081AF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D14B5D13-CC64-43DE-A709-150D9284D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7A984-32FB-4957-8151-47FC4C2CB9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "518EE1E1-CD85-4784-94E5-D7DF735BFF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "303D805A-EEC2-44FE-BB54-8B336EA8A3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/I4m6da/CVE/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/I4m6da/CVE/issues/3#issue-3884949083",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347207",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347207",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753972",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2897",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T01:16:00.107",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en funadmin hasta 7.1.0-rc4. Esta vulnerabilidad afecta código desconocido del archivo app/backend/view/index/index.html del componente Interfaz de Backend. Si se manipula el argumento Value se puede provocar un cross site scripting. Es posible lanzar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "67A1D507-8F8E-4C10-B5CB-D08DE081AF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D14B5D13-CC64-43DE-A709-150D9284D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7A984-32FB-4957-8151-47FC4C2CB9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "518EE1E1-CD85-4784-94E5-D7DF735BFF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "303D805A-EEC2-44FE-BB54-8B336EA8A3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/I4m6da/CVE/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/I4m6da/CVE/issues/4#issue-3890421022",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347208",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347208",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753975",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2898",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T01:16:00.350",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserialization. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en funadmin hasta 7.1.0-rc4. El problema afecta a la función getMember del archivo app/common/service/AuthCloudService.php del componente Backend Endpoint. Al manipular el argumento cloud_account se puede realizar una deserialización. El ataque puede ser realizado en remoto. El exploit es ahora público y puede ser utilizado. El proveedor fue contactado con anterioridad sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "67A1D507-8F8E-4C10-B5CB-D08DE081AF77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "D14B5D13-CC64-43DE-A709-150D9284D19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7A984-32FB-4957-8151-47FC4C2CB9CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "518EE1E1-CD85-4784-94E5-D7DF735BFF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:7.1.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "303D805A-EEC2-44FE-BB54-8B336EA8A3E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/I4m6da/CVE/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/I4m6da/CVE/issues/5#issue-3890444166",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347209",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347209",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.753976",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2903",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T01:16:00.563",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of the file src/parse/ast.cc. This manipulation causes null pointer dereference. The attack can only be executed locally. The exploit has been published and may be used. Patch name: febeb977936f9519a25d9fbd10ff8256358cdb97. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en skvadrik re2c hasta la versión 4.4. La función afectada es check_and_merge_special_rules del archivo src/parse/ast.cc. Esta manipulación provoca una desreferencia de puntero nulo. El ataque solo puede ejecutarse localmente. El exploit ha sido publicado y puede ser utilizado. Nombre del parche: febeb977936f9519a25d9fbd10ff8256358cdb97. Se sugiere instalar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0202/blob/main/re/repro",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/skvadrik/re2c/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/skvadrik/re2c/commit/febeb977936f9519a25d9fbd10ff8256358cdb97",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/skvadrik/re2c/issues/571",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/skvadrik/re2c/issues/571#issuecomment-3837675101",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347210",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347210",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.755030",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2904",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T01:16:00.797",
      "lastModified" : "2026-02-24T17:49:09.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en UTT HiPER 810G 1.7.7-171114 que afecta a la función strcpy del archivo /goform/ConfigExceptAli. Su ejecución si ha sido manipulado puede provocar un desbordamiento de búfer. El ataque puede ser lanzado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347213",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347213",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755113",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuln.ricky.place/UTT/HiPER%20810G/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2905",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T02:16:56.380",
      "lastModified" : "2026-02-23T20:22:10.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Tenda HG9 300001138 que afecta a una función desconocida del archivo /boaform/formWlanSetup del componente Wireless Configuration Endpoint. Si se manipula el argumento ssid se puede provocar un desbordamiento de búfer basado en pila. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E9F5B3-6D23-43F5-851B-2FA72ACB529D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF5C6DE-C14B-4700-8EFC-3EDA0BED0535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755167",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2906",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T02:16:57.493",
      "lastModified" : "2026-02-23T20:22:01.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda HG9 300001138. Affected is an unknown function of the file /boaform/formSamba of the component Samba Configuration Endpoint. The manipulation of the argument sambaCap results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en Tenda HG9 300001138 que afecta a una función desconocida del archivo /boaform/formSamba del componente Samba Configuration Endpoint. Manipularel argumento sambaCap provoca un desbordamiento de búfer basado en pila. El ataque puede ser lanzado en remoto. El exploit ha sido divulgado al público y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E9F5B3-6D23-43F5-851B-2FA72ACB529D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF5C6DE-C14B-4700-8EFC-3EDA0BED0535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347215",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347215",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755193",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2907",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T02:16:57.703",
      "lastModified" : "2026-02-23T20:21:53.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgpon_loid/fmgpon_loid_password causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda HG9 300001138 que afecta a una funcionalidad desconocida del archivo /boaform/formgponConf del componente GPON Configuration Endpoint. Si se manipula el argumento fmgpon_loid/fmgpon_loid_password se puede provocar un desbordamiento del búfer basado en pila. Es posible explotar el ataque en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E9F5B3-6D23-43F5-851B-2FA72ACB529D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF5C6DE-C14B-4700-8EFC-3EDA0BED0535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347216",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347216",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755201",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2908",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T02:16:57.890",
      "lastModified" : "2026-02-23T20:21:45.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of the component Loopback Detection Configuration Endpoint. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Tenda HG9 300001138 que afecta a alguna funcionalidad desconocida del archivo /boaform/formLoopBack del componente Loopback Detection Configuration Endpoint. Si se manipula el argumento Ethtype se puede provocar un desbordamiento de búfer basado en pila. El ataque puede ser ejecutado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E9F5B3-6D23-43F5-851B-2FA72ACB529D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF5C6DE-C14B-4700-8EFC-3EDA0BED0535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347217",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347217",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755202",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2909",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T02:16:58.100",
      "lastModified" : "2026-02-23T20:21:38.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Performing a manipulation of the argument pingAddr results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Tenda HG9 300001138. La cual afecta a una parte desconocida del archivo /boaform/formPing del componente Diagnostic Ping Endpoint. Si se manipula el argumento pingAddr se puede provocar un desbordamiento de búfer basado en pila. Es posible lanzar el ataque en remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E9F5B3-6D23-43F5-851B-2FA72ACB529D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF5C6DE-C14B-4700-8EFC-3EDA0BED0535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755211",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2910",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T04:15:57.647",
      "lastModified" : "2026-02-23T20:21:31.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Tenda HG9 300001138. Esta vulnerabilidad afecta a código desconocido del archivo /boaform/formPing6. Si se ejecuta el argumento pingAddr manipulado se puede provocar un desbordamiento de búfer basado en pila. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24E9F5B3-6D23-43F5-851B-2FA72ACB529D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:hg9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF5C6DE-C14B-4700-8EFC-3EDA0BED0535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QIU-DIE/cve-nneeww/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755212",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2911",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T04:15:59.383",
      "lastModified" : "2026-02-23T20:21:22.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Tenda FH451 hasta 1.0.0.9. Este problema afecta a algún procesamiento desconocido del archivo /goform/GstDhcpSetSer. La manipulación conduce a desbordamiento de búfer. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh451_firmware:1.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7521568-7BCD-43F8-9F20-440DF3919D5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh451:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A8BF83-E42A-4D6B-A52D-146FE1AEE2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuln.ricky.place/Tenda/FH451/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2912",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T04:15:59.590",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument test_id results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Online Reviewer System 1.0. Afectada es una función desconocida del archivo /system/system/students/assessments/results/studentresult-view.PHP. La manipulación del argumento test_id resulta en inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8542EFD2-6A6D-4059-87E4-4BEBB562BCB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tiancesec/CVE/issues/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2913",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T04:15:59.790",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. Patch name: a56feecbe9ed66521d9647ec9fbcd2546eccd7ee. Applying a patch is the recommended action to fix this issue. The confirmation of the bugfix mentions: \"[T]he impact of this is negligible, since this only affects custom seekable sources larger than 4 GiB (and the crash occurs in user code rather than libvips itself).\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en libvips hasta 8.19.0. El elemento afectado es la función vips_source_read_to_memory del archivo libvips/iofuncs/source.c. Esta manipulación causa desbordamiento de búfer basado en montículo. Es posible lanzar el ataque en el host local. La complejidad del ataque se califica como alta. La explotabilidad se describe como difícil. El exploit ha sido divulgado públicamente y puede ser utilizado. Nombre del parche: a56feecbe9ed66521d9647ec9fbcd2546eccd7ee. Aplicar un parche es la acción recomendada para solucionar este problema. La confirmación de la corrección del error menciona: 'El impacto de esto es insignificante, ya que esto solo afecta a fuentes personalizadas con capacidad de búsqueda mayores de 4 GiB (y el fallo ocurre en el código de usuario en lugar de en libvips mismo).'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.19.0",
            "matchCriteriaId" : "91F5664D-38DB-435F-99D7-2F9632964529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/a56feecbe9ed66521d9647ec9fbcd2546eccd7ee",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4857",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4857#issue-3920154326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4857#issuecomment-3878479322",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755224",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2925",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T04:16:00.047",
      "lastModified" : "2026-02-23T19:36:36.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en D-Link DWR-M960 1.01.07. Afectada por este problema es la función sub_42B5A0 del archivo /boafrm/formBridgeVlan del componente Bridge VLAN Configuration Endpoint. Realizar una manipulación del argumento submit-url resulta en desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/20",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754497",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2926",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T05:16:15.147",
      "lastModified" : "2026-02-23T19:35:45.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en D-Link DWR-M960 1.01.07 que afecta a la función sub_4237AC del archivo /boafrm/formLteSetup del componente LTE Configuration Endpoint. Si se manipula y ejecuta el argumento submit-url puede provocarse un desbordamiento de búfer basado en pila. El ataque puede ser lanzado en remoto. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2927",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T05:16:19.087",
      "lastModified" : "2026-02-23T19:29:59.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_462590 of the file /boafrm/formOpMode of the component Operation Mode Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en D-Link DWR-M960 1.01.07. Esta vulnerabilidad afecta la función sub_462590 del archivo /boafrm/formOpMode del componente Operation Mode Configuration Endpoint. La manipulación del argumento submit-url conduce a desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/22",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754499",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2928",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T05:16:19.303",
      "lastModified" : "2026-02-23T19:29:03.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryption Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DWR-M960 1.01.07. Este problema afecta la función sub_452CCC del archivo /boafrm/formWlEncrypt del componente Endpoint de Configuración de Cifrado WLAN. La manipulación del argumento submit-url resulta en desbordamiento de búfer basado en pila. El ataque puede lanzarse remotamente. El exploit se ha hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754500",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1369",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-22T06:16:02.537",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Conditional CAPTCHA hasta la versión 4.0.0 no valida un parámetro antes de redirigir al usuario a su valor, lo que lleva a un problema de redirección abierta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5a275725-85f2-4463-880b-9473dbdfa8e0/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2929",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T06:16:03.873",
      "lastModified" : "2026-02-23T19:39:25.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of the file /boafrm/formWlAc of the component Wireless Access Control Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en D-Link DWR-M960 1.01.07. Se ve afectada la función sub_453140 del archivo /boafrm/formWlAc del componente Wireless Access Control Endpoint. Esta manipulación del argumento submit-url causa un desbordamiento de búfer basado en pila. Es posible la explotación remota del ataque. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/24",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754503",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2930",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T07:16:15.023",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda A18 15.13.07.13. El elemento afectado es la función webCgiGetUploadFile del archivo /cgi-bin/UploadCfg del componente Httpd Service. Dicha manipulación del argumento boundary conduce a un desbordamiento de búfer basado en pila. El ataque puede ser ejecutado remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:a18_firmware:15.13.07.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88459A72-340E-4C7A-8C32-C5F6645F5ED4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:a18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20146A03-30B3-4BFF-83DA-DEDBF6850A6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/40",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347277",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347277",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2932",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T08:15:55.770",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/D_adPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en YiFang CMS hasta la versión 2.0.5. El elemento afectado es la función update del archivo app/db/admin/D_adPosition.php del componente Módulo de Gestión Extendida. Realizar una manipulación del argumento name/index resulta en cross-site scripting. El ataque es posible de llevar a cabo de forma remota. El exploit ha sido liberado al público y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yifangcms:yifang:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "7B8DBFC6-F4AE-4509-8DE1-E7857306008C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZZCTD/CVE/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ZZCTD/CVE/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347278",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347278",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755281",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755286",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2933",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T08:15:56.863",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_adManage.php of the component Extended Management Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en YiFang CMS hasta 2.0.5. Esto afecta a la función update del archivo app/db/admin/D_adManage.PHP del componente Módulo de Gestión Extendido. La ejecución de una manipulación del argumento Name puede conducir a cross site scripting. El ataque puede realizarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yifangcms:yifang:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "7B8DBFC6-F4AE-4509-8DE1-E7857306008C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZZCTD/CVE/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347279",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347279",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755295",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2385",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-22T09:16:10.107",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.4.7. This is due to the plugin decrypting and trusting attacker-controlled email_data in an unauthenticated AJAX handler without cryptographic authenticity guarantees. This makes it possible for unauthenticated attackers to tamper with form email routing and redirection values to trigger unauthorized email relay and attacker-controlled redirection via the 'email_data' parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce para WordPress es vulnerable a la verificación insuficiente de la autenticidad de los datos en todas las versiones hasta la 6.4.7, inclusive. Esto se debe a que el plugin descifra y confía en datos de correo electrónico (email_data) controlados por el atacante en un gestor AJAX no autenticado sin garantías criptográficas de autenticidad. Esto permite a los atacantes no autenticados manipular los valores de enrutamiento y redirección de correo electrónico del formulario para desencadenar un reenvío de correo electrónico no autorizado y una redirección controlada por el atacante a través del parámetro 'email_data'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463156/the-plus-addons-for-elementor-page-builder",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9176535c-8e37-4a18-b458-a71c4a84daa4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2934",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T09:16:11.173",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/db/admin/D_friendLinkGroup.php of the component Extended Management Module. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en YiFang CMS hasta 2.0.5. Esto afecta la función update del archivo app/db/admin/D_friendLinkGroup.php del componente Módulo de Gestión Extendido. La manipulación del argumento Name conduce a cross site scripting. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yifangcms:yifang:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "7B8DBFC6-F4AE-4509-8DE1-E7857306008C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZZCTD/CVE/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347280",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347280",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2935",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T09:16:11.403",
      "lastModified" : "2026-02-24T17:17:49.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UTT HiPER 810G hasta la versión 1.7.7-171114. Este problema afecta a la función strcpy del archivo /goform/ConfigExceptMSN. La ejecución de una manipulación del argumento remark puede conducir a un desbordamiento de búfer. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alc9700jmo/CVE/issues/23",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2938",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T09:16:11.630",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/update_smtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester Student Result Management System 1.0. El elemento afectado es una función desconocida del archivo /srms/script/admin/core/update_smtp.php. La manipulación conduce a controles de acceso inadecuados. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:munyweki:student_result_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD5CE8A-702E-4CE4-BDC6-1EA5B0A05272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347310",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347310",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755345",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2939",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T10:15:56.520",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en itsourcecode Student Management System 1.0. El elemento afectado es una función desconocida del archivo /add_student/ del componente Add Student Module. La manipulación resulta en cross-site scripting. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BD4C69-0CA6-4526-8292-17D11CBC5BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1a-qY55pgynQviBw9UxPoIDs-UNgz6zOH/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/AS-AbdulSamad/CVE-1/tree/main",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347311",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347311",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2940",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T10:15:56.747",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Zaher1307 tiny_web_server up to 8d77b1044a0ca3a5297d8726ac8aa2cf944d481b. This affects the function tiny_web_server/tiny.c of the file tiny_web_server/tiny.c of the component URL Handler. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Zaher1307 tiny_web_server hasta 8d77b1044a0ca3a5297d8726ac8aa2cf944d481b. Esto afecta a la función tiny_web_server/tiny.c del archivo tiny_web_server/tiny.c del componente Gestor de URL. Esta manipulación provoca una escritura fuera de límites. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto utiliza entrega continua con lanzamientos continuos. Por lo tanto, no hay detalles de versión disponibles de las versiones afectadas ni actualizadas. Se informó al proyecto del problema con antelación mediante un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zaher1307/tiny_web_server/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Zaher1307/tiny_web_server/issues/1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Zaher1307/tiny_web_server/issues/1#issue-3924357507",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347312",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347312",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.756036",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2943",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T11:16:11.620",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in SapneshNaik Student Management System up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318. This impacts an unknown function of the file index.php. Such manipulation of the argument Error leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en SapneshNaik Student Management System hasta f4b4f0928f0b5551a28ee81ae7e7fe47d9345318. Esto afecta una función desconocida del archivo index.PHP. Dicha manipulación del argumento Error conduce a cross-site scripting. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser utilizado. Este producto no utiliza versionado. Por esta razón, la información sobre las versiones afectadas y no afectadas no está disponible. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/duckpigdog/CVE/blob/main/XSS%E2%80%94%E2%80%94SapneshNaik_Student-Management-System.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347313",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347313",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754035",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2944",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T11:16:13.230",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Tosei Online Store Management System ??????????? 1.01. Se ve afectado el sistema de funciones del archivo /cgi-bin/monitor.php del componente Gestor de Solicitudes POST HTTP. La manipulación del argumento DevId da como resultado una inyección de comandos del sistema operativo. El ataque puede iniciarse remotamente. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tosei-corporation:online_store_management_system:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8CD5D8-4061-415D-9D2E-A83B841831E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CVE-Hunter-Leo/CVE/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347314",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347314",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754579",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2945",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T13:16:12.267",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en JeecgBoot 3.9.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /sys/common/uploadImgByHttp. Ejecutar una manipulación del argumento fileUrl puede conducir a falsificación de petición del lado del servidor. El ataque puede lanzarse remotamente. El exploit se ha puesto a disposición del público y podría usarse para ataques. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B329440-4111-4105-B5B7-74EED287D54D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347315",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347315",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754590",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/vxbwk9/glws4ppukxqtpfhl?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2946",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T13:16:13.323",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected by this issue is the function XssUtils.replaceHtmlCode of the file src/main/java/com/rymcu/forest/util/XssUtils.java of the component Article Content/Comments/Portfolio. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en rymcu forest hasta la versión 0.0.5. Este problema afecta a la función XssUtils.replaceHtmlCode del archivo src/main/java/com/rymcu/forest/util/XssUtils.java del componente Contenido de Artículo/Comentarios/Portafolio. La manipulación conduce a cross-site scripting. Es posible la explotación remota del ataque. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rymcu:forest:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.5",
            "matchCriteriaId" : "9EA36D4F-4245-410F-8604-DCCE49025BDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/CvYzdxDNDoXWdKxvaehcvb1rnQK?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347316",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347316",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755037",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2947",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T14:16:02.470",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java of the component User Profile Handler. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en rymcu forest hasta la versión 0.0.5. Esto afecta a la función updateUserInfo del archivo - src/main/java/com/rymcu/forest/web/api/user/UserInfoController.java del componente Gestor de Perfil de Usuario. La manipulación resulta en cross site scripting. El ataque puede ser ejecutado remotamente. El exploit ahora es público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rymcu:forest:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.5",
            "matchCriteriaId" : "9EA36D4F-4245-410F-8604-DCCE49025BDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347317",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347317",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755039",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2952",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T14:16:02.687",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxargs causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Vaelsys 4.1.0. Esta vulnerabilidad afecta código desconocido del archivo /tree/tree_server.php del componente Gestor de Solicitudes POST HTTP. Esta manipulación del argumento xajaxargs causa inyección de comandos del sistema operativo. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaelsys:vaelsys:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5FB730-6FDF-4D07-983B-D79AA2EC4FB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CVE-Hunter-Leo/CVE/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755166",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2953",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T14:16:02.890",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Dromara UJCMS 101.2. Este problema afecta a la función deleteDirectory del archivo WebFileTemplateController.delete del componente Gestor de Plantillas. Dicha manipulación conduce a un salto de ruta. El ataque puede realizarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ujcms:ujcms:10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F5B499-8E12-4636-A3F9-1600D7877CC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347319",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347319",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755215",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/pa2fpb/lxngf3d07uyd0nwp?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2954",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T15:16:16.610",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Dromara UJCMS 10.0.2. Impacted is the function importChanel of the file /api/backend/ext/import-data/import-channel of the component ImportDataController. Performing a manipulation of the argument driverClassName/url results in injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Dromara UJCMS 10.0.2. La función importChanel del archivo /api/backend/ext/import-data/import-channel del componente ImportDataController se ve afectada. Realizar una manipulación del argumento driverClassName/url resulta en inyección. Es posible iniciar el ataque de forma remota. El exploit se ha hecho público y podría ser utilizado. Se contactó tempranamente al proveedor sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-707"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ujcms:ujcms:10.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6315A48-6090-4D67-8993-6BAB21109E96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347320",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347320",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/pa2fpb/gsz2l14wlz8c4nsn?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2956",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T22:15:59.663",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en qinming99 dst-admin hasta 1.5.0. Esto afecta a la función revertBackup del archivo /home/restore. La manipulación del argumento Name resulta en inyección de comandos. El ataque puede ser lanzado remotamente. El exploit ha sido liberado al público y puede ser utilizado para ataques. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dst-admin_project:dst-admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "67088DF1-934D-40C2-AE5F-F18B24C0ACB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/ObYgdtoweowo8Vx4dmuckqC7nBe?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347323",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347323",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754508",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2957",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-22T23:15:59.700",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteBackup of the file src/main/java/com/tugos/dst/admin/controller/BackupController.java of the component File Handler. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en qinming99 dst-admin hasta 1.5.0. Esto afecta a la función deleteBackup del archivo src/main/java/com/tugos/dst/admin/controller/BackupController.java del componente Gestor de Archivos. Esta manipulación causa denegación de servicio. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dst-admin_project:dst-admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "67088DF1-934D-40C2-AE5F-F18B24C0ACB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/YKwydLrdno51JtxJksmcWSfbnvd?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347324",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347324",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754510",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2588",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-02-23T00:15:59.330",
      "lastModified" : "2026-03-04T02:23:33.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems.\n\nSodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions.  On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crypt::NaCl::Sodium hasta la 2.001 para Perl tienen una falla de desbordamiento de entero en sistemas de 32 bits.\n\nSodium.xs convierte un STRLEN (size_t) a unsigned long long al pasar un puntero de longitud a las funciones de libsodium. En sistemas de 32 bits, size_t es típicamente de 32 bits, mientras que un unsigned long long es de al menos 64 bits."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timlegge:crypt\\:\\:nacl\\:\\:sodium:*:*:*:*:*:perl:*:*",
            "versionEndIncluding" : "2.001",
            "matchCriteriaId" : "B6016263-ACDC-444F-A4A8-367181F53E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cpan-authors/crypt-nacl-sodium/commit/557388bdb4da416a56663cda0154b80cd524395c.patch",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cpan-authors/crypt-nacl-sodium/commit/8cf7f66ba922443e131c9deae1ee00fafe4f62e4.patch",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.001/source/Sodium.xs#L2119",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2958",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T00:16:00.377",
      "lastModified" : "2026-02-23T19:38:46.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en D-Link DWR-M960 1.01.07. Afectada es la función sub_457C5C del archivo /boafrm/formWsc. Tal manipulación del argumento save_apply conduce a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/25",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347325",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347325",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754509",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2959",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T00:16:00.697",
      "lastModified" : "2026-02-23T19:28:20.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en D-Link DWR-M960 1.01.07. Afectada por esta vulnerabilidad está la función sub_44E0F8 del archivo /boafrm/formNewSchedule. Realizar una manipulación del argumento url resulta en desbordamiento de búfer basado en pila. Es posible la explotación remota del ataque. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/26",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754511",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2960",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T01:16:17.500",
      "lastModified" : "2026-02-23T19:24:49.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en D-Link DWR-M960 1.01.07. Afectada por este problema es la función sub_468D64 del archivo /boafrm/formDhcpv6s. La ejecución de una manipulación del argumento submit-url puede llevar a un desbordamiento de búfer basado en pila. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347327",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347327",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754512",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2961",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T01:16:17.720",
      "lastModified" : "2026-02-23T19:23:59.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Ha sido encontrada una vulnerabilidad en D-Link DWR-M960 1.01.07 que afecta a la función sub_4196C4 del archivo /boafrm/formVpnConfigSetup del componente VPN Configuration Endpoint. Manipular el argumento submit-url provoca un desbordamiento de búfer basado en pila. Es posible lanzar el ataque en remoto. El exploit ha sido publicado y puede que se utilice."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/28",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754513",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2962",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T01:16:17.923",
      "lastModified" : "2026-02-23T19:22:52.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en D-Link DWR-M960 1.01.07. Esta vulnerabilidad afecta la función sub_460F30 del archivo /boafrm/formDateReboot del componente Scheduled Reboot Configuration Endpoint. La manipulación del argumento submit-url resulta en desbordamiento de búfer basado en pila. El ataque puede realizarse de forma remota. El exploit se ha hecho público y podría usarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "618C664D-2A29-41B1-A234-6486FAD5CC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C630A0A9-0D58-4499-927C-BE91D0490987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LX-66-LX/cve-new/issues/29",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347329",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347329",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754517",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2963",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T01:16:18.130",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Jinher OA C6 up to 20260210. This issue affects some unknown processing of the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx. This manipulation of the argument id/offsnum causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Jinher OA C6 hasta 20260210. El problema afecta a algún procesamiento desconocido del archivo /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx. Si se manipula el argumento id/offsnum se provoca una inyección SQL. Es posible iniciar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado. Se sugiere instalar un parche para abordar este problema. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347330",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347330",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.755216",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuln.ricky.place/Jinher/C6/",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24494",
      "sourceIdentifier" : "66fe30d5-b042-4547-a192-c18da4c41a81",
      "published" : "2026-02-23T02:16:39.443",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en el endpoint /api/integrations/getintegrations de Order Up Online Ordering System 1.0 permite a un atacante no autenticado acceder a datos sensibles de la base de datos de backend a través de un parámetro store_id manipulado en una solicitud POST."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "66fe30d5-b042-4547-a192-c18da4c41a81",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "66fe30d5-b042-4547-a192-c18da4c41a81",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.spartanssec.com/post/multiple-unauthenticated-sql-injection-vulnerabilities",
        "source" : "66fe30d5-b042-4547-a192-c18da4c41a81"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2964",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T02:16:39.643",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in higuma web-audio-recorder-js 0.1/0.1.1. Impacted is the function extend in the library lib/WebAudioRecorder.js of the component Dynamic Config Handling. Such manipulation leads to improperly controlled modification of object prototype attributes. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en higuma web-audio-recorder-js 0.1/0.1.1. Afecta a la función extend de la biblioteca lib/WebAudioRecorder.js del componente Dynamic Config Handling. Si se manipula se puede provocar una modificación incontrolada de atributos de prototipo de objeto. Es posible lanzar el ataque de forma remota. Los ataques de esta naturaleza son altamente complejos y se consideran difíciles de explotar. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:higuma:webaudiorecorder.js:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3C42AE-4D06-420E-83C0-AE514AA217CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:higuma:webaudiorecorder.js:0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6688B040-958C-470B-AD08-EFE40B4E8D71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755221",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2965",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T03:15:58.917",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. This product is published under multiple names. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en 07FLYCMS, 07FLY-CMS y 07FlyCRM hasta 1.2.9. El elemento afectado es una función desconocida del archivo /admin/SysModule/edit.html del componente Módulo de Extensión del Sistema. Al manipular el argumento Title se puede lograr un cross-site scripting. El ataque puede ser iniciado de forma remota. El exploit ha sido publicado y puede ser usado para ataques. Este producto se publica bajo múltiples nombres. El proveedor fue contactado con anterioridad sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347332",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347332",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.755225",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.notion.so/07FlyCRM-Stored-Cross-Site-Scripting-XSS-in-SysModule-module-303ea92a3c4180d3a9a8e9f6c3d2915a?v=2ffea92a3c418057a8b7000c66564aa1",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2966",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T03:15:59.373",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random can lead to insufficiently random values. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Cesanta Mongoose hasta la versión 7.20. El elemento afectado es la función mg_sendnsreq del archivo /src/dns.c del componente Gestor de ID de Transacción DNS. Ejecutar el  argumento random manipulado puede conducir a valores insuficientemente aleatorios. El ataque puede lanzarse de forma remota. El ataque tiene un nivel de complejidad alto y se considera difícil de explotar. El exploit se ha puesto a disposición del público y podría usarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        }, {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.20",
            "matchCriteriaId" : "83B5780A-1BF9-4983-A2BD-0E278131D841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/mg_sendnsreq.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347333",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347333",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755304",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2997",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-23T03:15:59.657",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course."
      }, {
        "lang" : "es",
        "value" : "Tronclass desarrollado por WisdomGarden tiene una vulnerabilidad de Referencia Directa a Objeto Insegura. Después de obtener un ID de curso, los atacantes remotos autenticados pueden modificar un parámetro específico para obtener un código de invitación de curso, uniéndose así a cualquier curso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10721-276b6-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10720-ecdfd-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2967",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T04:16:02.040",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Cesanta Mongoose hasta la versión 7.20. La cual afecta a la función getpeer del archivo /src/net_builtin.c del componente Gestor de Números de Secuencia TCP. Si se manipula se puede provocar una verificación incorrecta del origen de un canal de comunicación. El ataque puede ser iniciado de forma remota. Está calificado de complejidad alta y difícil de explotar. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-940"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.20",
            "matchCriteriaId" : "83B5780A-1BF9-4983-A2BD-0E278131D841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/tcp_rst.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/tcp_rst.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347334",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347334",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755450",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2968",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T04:16:02.283",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of the component Poly1305 Authentication Tag Handler. The manipulation results in improper verification of cryptographic signature. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is said to be difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Cesanta Mongoose hasta 7.20 que afecta a la función mg_chacha20_poly1305_decrypt del archivo /src/tls_chacha20.c del componente Gestor de Etiquetas de Autenticación Poly1305. Si se manipula se puede lograr una verificación impropia de la firma criptográfica. El ataque puede lanzarse en remoto. Este ataque se caracteriza por una alta complejidad y es difícil de explotar. El exploit ahora es público y puede ser usado. El proveedor fue contactado con anterioridad sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.20",
            "matchCriteriaId" : "83B5780A-1BF9-4983-A2BD-0E278131D841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/ChaCha20Poly1305.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwBruijn/CVEs/blob/main/Mongoose/ChaCha20Poly1305.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757091",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2998",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-02-23T04:16:02.537",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ERP developed by eAI Technologies has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a crafted DLL file in the same directory as the program, thereby executing arbitrary code."
      }, {
        "lang" : "es",
        "value" : "El ERP desarrollado por eAI Technologies tiene una vulnerabilidad de Secuestro de DLL, que permite a atacantes locales autenticados colocar un archivo DLL manipulado en el mismo directorio que el programa, ejecutando así código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10723-14549-2.html",
        "source" : "twcert@cert.org.tw"
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10722-db7cb-1.html",
        "source" : "twcert@cert.org.tw"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2969",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T05:16:19.833",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special elements used in a template engine. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en datapizza-labs datapizza-ai 0.0.2 que afecta a la función ChatPromptTemplate del archivo datapizza-ai-core/datapizza/modules/prompt/prompt.py del componente Jinja2 Template Handler. Al manipular el argumento Prompt se provoca una neutralización incorrecta de elementos especiales utilizados en un motor de plantillas. Es posible explotar el ataque en remoto. Se ha publicado el exploit y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-791"
        }, {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datapizza:datapizza_ai:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF4463D-5AD8-4401-9662-D80526BAB2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.347336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.755357",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2970",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T05:16:20.400",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in datapizza-labs datapizza-ai 0.0.2. Affected by this vulnerability is the function RedisCache of the file datapizza-ai-cache/redis/datapizza/cache/redis/cache.py. Such manipulation leads to deserialization. The attack requires being on the local network. A high complexity level is associated with this attack. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en datapizza-labs datapizza-ai 0.0.2 que afecta a la función RedisCache del archivo datapizza-ai-cache/redis/datapizza/cache/redis/cache.py. Al manipularla se logra realizar una deserialización. El ataque requiere estar en la red local. El ataque es de complejidad alta y difícil de explotar. El exploit ha sido divulgado al público y puede ser usado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.2,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datapizza:datapizza_ai:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF4463D-5AD8-4401-9662-D80526BAB2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/unsafe-deserialization.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/unsafe-deserialization.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2971",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T05:16:20.663",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en a466350665 Smart-SSO hasta 2.1.1 que afectada a alguna funcionalidad desconocida del archivo smart-sso-server/src/main/resources/templates/login.html del componente Login. Al manipular el argumento redirectUri se provoca un cross site scripting. Es posible llevar a cabo el ataque en remoto. El exploit ha sido hecho público y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a466350665:smart-sso:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "CA78D715-FF92-4E8C-978F-BFA8D72BA41F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756025",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/Smart-SSO-Reflected-XSS-vulnerabilities-in-redirectUri-parameter-304ea92a3c41805a8223c4ba75831802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2972",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T06:16:15.347",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserController.java of the component Role Edit Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en a466350665 Smart-SSO hasta 2.1.1. Esta afecta a la función Save del archivo smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserController.java del componente 'Role Edit Page'. Ejecutar una manipulación puede provocar un cross-site scripting. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a466350665:smart-sso:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "CA78D715-FF92-4E8C-978F-BFA8D72BA41F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347339",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347339",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756026",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/Smart-SSO-Stored-Cross-Site-Scripting-XSS-in-Role-Edit-Page-303ea92a3c4180f4beb9c119653ce51d",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2974",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T06:16:16.760",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file shared_prefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/key_derivation_params/auth_methods leads to exposure of backup file to an unauthorized control sphere. An attack has to be approached locally. The attack is considered to have high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used. Upgrading to version 0.26.0 is able to resolve this issue. The identifier of the patch is 873ecc03f92238e162f98a068ad56069a922b4f6/0bd662320174d8265dfe3b05a04bc13efc960532. It is recommended to upgrade the affected component. The creator of the software explains: \"Because of AliasVault's zero-knowledge encryption design, the tokens stored in aliasvault.xml are API session tokens that cannot decrypt the vault on their own: the master password is required for that. So while this isn't a direct vault compromise risk, there's no reason to include them in backups either.\""
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en AliasVault App hasta la versión 0.25.3 en Android/iOS. Esta vulnerabilidad afecta a código desconocido del archivo shared_prefs/aliasvault.xml del componente Gestor de Copias de Seguridad. Al manipular el argumento accessToken/refreshToken/metadata/key_derivation_params/auth_methods se logra exponer el archivo de copia de seguridad a una esfera de control no autorizada. El ataque debe realizarse en local. Se considera que el ataque tiene una complejidad alta. Se afirma que es difícil de explotar. El exploit está disponible públicamente y podría ser utilizado. La actualización a la versión 0.26.0 puede resolver este problema. El identificador del parche es 873ecc03f92238e162f98a068ad56069a922b4f6/0bd662320174d8265dfe3b05a04bc13efc960532. Se recomienda actualizar el componente afectado. El creador del software explica: 'Debido al diseño de cifrado de conocimiento cero de AliasVault, los tokens almacenados en aliasvault.xml son tokens de sesión de API que no pueden descifrar la bóveda por sí solos: se necesita la contraseña maestra para ello. Así que, aunque esto no es un riesgo directo de compromiso de la bóveda, tampoco hay razón para incluirlos en las copias de seguridad.'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-530"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aliasvault:aliasvault:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.25.3",
            "matchCriteriaId" : "7F8FA8CA-CE85-4B34-A213-1EA1F726907D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aliasvault/aliasvault/commit/873ecc03f92238e162f98a068ad56069a922b4f6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/issues/1497",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/issues/1497#issue-3855176470",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/pull/1499",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/releases/tag/0.26.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347340",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347340",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756058",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756059",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2975",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T07:16:21.243",
      "lastModified" : "2026-03-05T13:00:58.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in FastApiAdmin up to 2.2.0. Affected by this vulnerability is the function reset_api_docs of the file /backend/app/plugin/init_app.py of the component Custom Documentation Endpoint. The manipulation results in information disclosure. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en FastApiAdmin hasta la versión 2.2.0. Está afectada por esta vulnerabilidad la función reset_api_docs del archivo /backend/app/plugin/init_app.py del componente Custom Documentation Endpoint. Si se manipula se puede lograrse una revelación de información. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastapiadmin:fastapiadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "D1ADA7E4-1879-4DDA-859E-C60D76BE8569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756067",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2976",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T07:16:22.680",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in FastApiAdmin up to 2.2.0. Affected by this issue is the function download_controller of the file /backend/app/api/v1/module_common/file/controller.py of the component Download Endpoint. This manipulation of the argument file_path causes information disclosure. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en FastApiAdmin hasta la versión 2.2.0. Está afectadapor este problema la función download_controller del archivo /backend/app/api/v1/module_common/file/controller.py del componente 'Download Endpoint'. Esta manipulación del argumento 'file_path' provoca una revelación de información. Es posible iniciar el ataque de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastapiadmin:fastapiadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "D1ADA7E4-1879-4DDA-859E-C60D76BE8569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.756089",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1367",
      "sourceIdentifier" : "0fc0942c-577d-436f-ae8e-945763c79b02",
      "published" : "2026-02-23T08:16:13.460",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option."
      }, {
        "lang" : "es",
        "value" : "Zohocorp ManageEngine ADSelfService Plus versiones 6522 e inferiores son vulnerables a inyección SQL autenticada en la opción de informe de búsqueda."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "0fc0942c-577d-436f-ae8e-945763c79b02",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "0fc0942c-577d-436f-ae8e-945763c79b02",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com/uk/products/self-service-password/advisory/CVE-2026-1367.html",
        "source" : "0fc0942c-577d-436f-ae8e-945763c79b02"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2977",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T08:16:13.757",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload_controller of the file /backend/app/api/v1/module_common/file/controller.py of the component Scheduled Task API. Such manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en FastApiAdmin hasta la versión 2.2.0. Esta afecta a la función upload_controller del archivo /backend/app/api/v1/module_common/file/controller.py del componente API de Tareas Programadas. Dicha manipulación conduce a una carga sin restricciones. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastapiadmin:fastapiadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "D1ADA7E4-1879-4DDA-859E-C60D76BE8569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756144",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2978",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T08:16:13.983",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function upload_file_controller of the file /backend/app/api/v1/module_system/params/controller.py of the component Scheduled Task API. Performing a manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en FastApiAdmin hasta 2.2.0. Esta vulnerabilidad afecta a la función upload_file_controller del archivo /backend/app/api/v1/module_system/params/controller.py del componente API de Tareas Programadas. Su manipulación resulta en una carga sin restricciones. El ataque puede iniciarse de forma remota. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastapiadmin:fastapiadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "D1ADA7E4-1879-4DDA-859E-C60D76BE8569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756155",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23552",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-23T09:17:00.857",
      "lastModified" : "2026-02-26T16:46:16.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. \n\nThe Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm is silently accepted by a policy configured for a completely different realm, breaking tenant isolation.\nThis issue affects Apache Camel: from 4.15.0 before 4.18.0.\n\nUsers are recommended to upgrade to version 4.18.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Omisión de la aceptación de tokens entre dominios (realms) en el componente KeycloakSecurityPolicy de Apache Camel Keycloak.\n\nLa política de seguridad KeycloakSecurityPolicy de Camel-Keycloak no valida la declaración 'iss' (emisor) de los tokens JWT contra el dominio (realm) configurado. Un token emitido por un dominio (realm) de Keycloak es aceptado silenciosamente por una política configurada para un dominio (realm) completamente diferente, rompiendo el aislamiento de inquilinos.\nEste problema afecta a Apache Camel: desde la versión 4.15.0 hasta antes de la 4.18.0.\n\nSe recomienda a los usuarios actualizar a la versión 4.18.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15.0",
            "versionEndExcluding" : "4.18.0",
            "matchCriteriaId" : "E575766B-E717-45A6-BD34-2C004B8EA67F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://camel.apache.org/security/CVE-2026-23552.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oscerd/CVE-2026-23552",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/18/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25747",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-23T09:17:01.043",
      "lastModified" : "2026-02-26T22:20:46.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component.\n\nThe Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. An attacker who can write to the LevelDB database files used by a Camel application can inject a crafted serialized Java object that, when deserialized during normal aggregation repository operations, results in arbitrary code execution in the context of the application.\nThis issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.5, from 4.15.0 before 4.18.0.\n\nUsers are recommended to upgrade to version 4.18.0, which fixes the issue. For the 4.10.x LTS releases, users are recommended to upgrade to 4.10.9, while for 4.14.x LTS releases, users are recommended to upgrade to 4.14.5"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en el componente Apache Camel LevelDB.\n\nLa clase Camel-LevelDB DefaultLevelDBSerializer deserializa datos leídos del repositorio de agregación LevelDB usando java.io.ObjectInputStream sin aplicar ningún ObjectInputFilter o restricciones de carga de clases. Un atacante que puede escribir en los archivos de la base de datos LevelDB utilizados por una aplicación Camel puede inyectar un objeto Java serializado manipulado que, cuando es deserializado durante las operaciones normales del repositorio de agregación, resulta en ejecución de código arbitrario en el contexto de la aplicación.\nEste problema afecta a Apache Camel: desde 4.10.0 antes de 4.10.8, desde 4.14.0 antes de 4.14.5, desde 4.15.0 antes de 4.18.0.\n\nSe recomienda a los usuarios actualizar a la versión 4.18.0, que corrige el problema. Para las versiones LTS 4.10.x, se recomienda a los usuarios actualizar a 4.10.9, mientras que para las versiones LTS 4.14.x, se recomienda a los usuarios actualizar a 4.14.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "4.10.9",
            "matchCriteriaId" : "9954842B-93D1-4E1D-8710-7889F678DFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.11.0",
            "versionEndExcluding" : "4.14.5",
            "matchCriteriaId" : "80FFC922-501D-4531-BFC1-2A5215C22784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15.0",
            "versionEndExcluding" : "4.18.0",
            "matchCriteriaId" : "E575766B-E717-45A6-BD34-2C004B8EA67F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://camel.apache.org/security/CVE-2026-25747.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oscerd/CVE-2026-25747",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/18/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-23T09:17:01.210",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header \"Connection: Transfer-Encoding\" could result in a forward request with invalid message framing, depending on the Akamai processing path. This could result in the origin server parsing the request body incorrectly, leading to HTTP request smuggling."
      }, {
        "lang" : "es",
        "value" : "Akamai Ghost en los servidores perimetrales de Akamai CDN antes del 2026-02-06 maneja incorrectamente el procesamiento de encabezados HTTP hop-by-hop personalizados, donde una solicitud entrante que contiene el encabezado 'Connection: Transfer-Encoding' podría resultar en una solicitud reenviada con un encuadre de mensaje inválido, dependiendo de la ruta de procesamiento de Akamai. Esto podría resultar en que el servidor de origen analice el cuerpo de la solicitud incorrectamente, lo que lleva al contrabando de solicitudes HTTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.akamai.com/blog/security-research/cve-2026-26365-incorrect-processing-connection-transfer-encoding",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2979",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T09:17:01.427",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file /backend/app/api/v1/module_system/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en FastApiAdmin hasta la versión 2.2.0. Este problema afecta a la función user_avatar_upload_controller del archivo /backend/app/api/v1/module_system/user/controller.py del componente API de Tareas Programadas. Si se ejecuta al ser manipulada puede producirse una carga sin restricciones. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastapiadmin:fastapiadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "D1ADA7E4-1879-4DDA-859E-C60D76BE8569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.347363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.756156",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2980",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T09:17:01.647",
      "lastModified" : "2026-02-24T20:04:10.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in UTT HiPER 810G up to 1.7.7-1711. Impacted is the function strcpy of the file /goform/setSysAdm. The manipulation of the argument passwd1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en UTT HiPER 810G hasta 1.7.7-1711 que afecta a la función strcpy del archivo /goform/setSysAdm. Al manipular el argumento 'passwd1' se produce un desbordamiento de búfer. El ataque puede ser iniciado en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/4.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/4.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347364",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347364",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756130",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2981",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T09:17:01.877",
      "lastModified" : "2026-02-24T20:02:48.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in UTT HiPER 810G up to 1.7.7-1711. The affected element is the function strcpy of the file /goform/formTaskEdit_ap. The manipulation of the argument txtMin2 results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en UTT HiPER 810G hasta 1.7.7-1711 que afecta a la función strcpy del archivo /goform/formTaskEdit_ap. Al manipular el argumento txtMin2 se produce un desbordamiento de búfer. El ataque puede ser lanzado en remoto. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/5.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/5.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347365",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347365",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756131",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2983",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T10:16:58.757",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en SourceCodester Student Result Management System 1.0 que impacta a una función desconocida del archivo /admin/core/import_users.php del componente Bulk Import. Si se manipula el argumento File se pueden provocar controles de acceso inadecuados. Es posible explotar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:munyweki:student_result_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD5CE8A-702E-4CE4-BDC6-1EA5B0A05272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#-vulnerability-2-unauthenticated-bulk-account-injection-arbitrary-file-upload",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347366",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347366",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756135",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2984",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T11:16:39.443",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en SourceCodester Student Result Management System 1.0. Esto afecta una función desconocida del archivo /admin/core/drop_user.PHP. Dicha manipulación del argumento ID conduce a denegación de servicio. El ataque puede ejecutarse de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:munyweki:student_result_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD5CE8A-702E-4CE4-BDC6-1EA5B0A05272"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#vulnerability-3-unauthenticated-arbitrary-account-deletion-dos",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347367",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347367",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756136",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2985",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T11:16:39.770",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0. This impacts the function downloadImage of the file /com/tiandy/easy7/core/bo/CLSBODownLoad.java. Performing a manipulation of the argument urlPath results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en el Sistema de Videovigilancia Tiandy ?????? 7.17.0. Esta afecta a la función downloadImage del archivo /com/tiandy/easy7/core/bo/CLSBODownLoad.java. Si se manipula el argumento urlPath se provoca una falsificación de petición del lado del servidor. Puede lanzarse el ataque en remoto. Se ha publicado el exploit y puede ser utilizado para ataques. Antes de la divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.feishu.cn/wiki/C1TIwBoJziINWlkGt8ucnZJPnEb?from=from_copylink",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347368",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347368",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.756137",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21420",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-23T14:16:21.823",
      "lastModified" : "2026-02-24T21:56:03.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell Repository Manager (DRM), versiones anteriores a la 3.4.8, contiene una vulnerabilidad de elemento de ruta de búsqueda no controlada (Uncontrolled Search Path Element). Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la ejecución de código arbitrario y a la escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:repository_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "484E9D6E-BEA4-4B97-8B99-8D2769826E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000430183/dsa-2026-059-security-update-for-dell-repository-manager-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2697",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-02-23T16:29:37.323",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter."
      }, {
        "lang" : "es",
        "value" : "Una Referencia Indirecta a Objeto (IDOR) en Security Center permite a un atacante remoto autenticado escalar privilegios a través del parámetro 'owner'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:security_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "17DB70B4-3F31-4D7A-BEBF-00E422A8FA3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2026-07",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3015",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T16:29:37.950",
      "lastModified" : "2026-02-24T20:02:06.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/formPolicyRouteConf. Executing a manipulation of the argument GroupName can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en UTT HiPER 810G hasta 1.7.7-171114 que afecta a la función strcpy del archivo /goform/formPolicyRouteConf. Manipular el argumento GroupName puede conducir a un desbordamiento de búfer. El ataque puede lanzarse en remoto. El exploit ha sido divulgado públicamente y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347375",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347375",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756248",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3016",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T16:29:38.170",
      "lastModified" : "2026-02-24T21:40:07.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the argument except leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en UTT HiPER 810G hasta 1.7.7-171114 que afecta a la función strcpy del archivo /goform/formP2PLimitConfig. Si se manipula el argumento except se puede producir un desbordamiento del búfer. Es posible explotar en ataque en remoto. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md#poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756249",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22567",
      "sourceIdentifier" : "cve@zscaler.com",
      "published" : "2026-02-23T17:23:28.913",
      "lastModified" : "2026-02-26T16:44:07.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios."
      }, {
        "lang" : "es",
        "value" : "Validación indebida de la entrada proporcionada por el usuario en la UI de administración de ZIA podría permitir a un administrador autenticado iniciar funciones de backend a través de campos de entrada específicos en escenarios limitados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@zscaler.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@zscaler.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zscaler:zscaler_internet_access_admin_portal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2r",
            "matchCriteriaId" : "D167C381-5347-49C9-B7BF-E34DF00D02D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.zscaler.com/zia/release-upgrade-summary-2025?applicable_category=zscalertwo.net&deployment_date=2025-12-17&id=1538575",
        "source" : "cve@zscaler.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22568",
      "sourceIdentifier" : "cve@zscaler.com",
      "published" : "2026-02-23T17:23:29.073",
      "lastModified" : "2026-02-26T16:43:14.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales en la entrada proporcionada por el usuario dentro de la IU de administración de ZIA podría permitir a un administrador autenticado acceder o recuperar información interna no autorizada en raras condiciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@zscaler.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@zscaler.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zscaler:zscaler_internet_access_admin_portal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2r",
            "matchCriteriaId" : "D167C381-5347-49C9-B7BF-E34DF00D02D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscaler.net&deployment_date=2026-02-12&id=1538576",
        "source" : "cve@zscaler.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27511",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T17:23:29.473",
      "lastModified" : "2026-02-23T20:16:49.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes."
      }, {
        "lang" : "es",
        "value" : "El firmware V12.01.01.55_multi del router inalámbrico Shenzhen Tenda F3 contiene una vulnerabilidad de clickjacking en la interfaz de administración basada en web. La interfaz no establece el encabezado X-Frame-Options, lo que permite que sitios controlados por el atacante incrusten páginas de administración en un iframe y engañen a un administrador autenticado para que realice interacciones no intencionadas que pueden resultar en cambios de configuración no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.01.01.55_multi",
            "matchCriteriaId" : "C94698A5-D2EE-45CD-AB06-4BD30F252920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9480BB-FC48-4614-A003-A991109FBCAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/F3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-f3-clickjacking-in-web-management-interface",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27512",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T17:23:29.687",
      "lastModified" : "2026-02-23T20:16:05.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface. Responses omit the X-Content-Type-Options: nosniff header and include attacker-influenced content that can be reflected into the response body. Under affected browser behaviors, MIME sniffing may cause the response to be interpreted as active HTML, enabling script execution in the context of the administrative interface."
      }, {
        "lang" : "es",
        "value" : "El firmware V12.01.01.55_multi del Router inalámbrico Shenzhen Tenda F3 contiene una vulnerabilidad de confusión de tipo de contenido en la interfaz de administración. Las respuestas omiten el encabezado X-Content-Type-Options: nosniff e incluyen contenido influenciado por el atacante que puede ser reflejado en el cuerpo de la respuesta. Bajo comportamientos de navegador afectados, el sniffing de MIME puede hacer que la respuesta sea interpretada como HTML activo, permitiendo la ejecución de scripts en el contexto de la interfaz de administración."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.01.01.55_multi",
            "matchCriteriaId" : "C94698A5-D2EE-45CD-AB06-4BD30F252920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9480BB-FC48-4614-A003-A991109FBCAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/F3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-f3-reflected-script-execution-via-missing-nosniff-header",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27513",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T17:23:29.890",
      "lastModified" : "2026-02-23T20:14:24.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement anti-CSRF protections, allowing an attacker to induce an authenticated administrator to submit state-changing requests, which can result in unauthorized configuration changes."
      }, {
        "lang" : "es",
        "value" : "El firmware V12.01.01.55_multi del Router Inalámbrico Shenzhen Tenda F3 contiene una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la interfaz de administración basada en web. La interfaz no implementa protecciones anti-CSRF, permitiendo a un atacante provocar que un administrador autenticado envíe peticiones que cambian el estado, lo que puede resultar en cambios de configuración no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.01.01.55_multi",
            "matchCriteriaId" : "C94698A5-D2EE-45CD-AB06-4BD30F252920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9480BB-FC48-4614-A003-A991109FBCAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/F3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-f3-csrf-in-web-management-interface",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27514",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T17:23:30.087",
      "lastModified" : "2026-02-23T20:11:48.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in the configuration download functionality. The configuration download response includes the router password and administrative password in plaintext. The endpoint also omits appropriate Cache-Control directives, which can allow the response to be stored in client-side caches and recovered by other local users or processes with access to cached browser data."
      }, {
        "lang" : "es",
        "value" : "El firmware V12.01.01.55_multi del Router inalámbrico Shenzhen Tenda F3 contiene una vulnerabilidad de exposición de información sensible en la funcionalidad de descarga de configuración. La respuesta de descarga de configuración incluye la contraseña del router y la contraseña de administración en texto plano. El endpoint también omite directivas Cache-Control apropiadas, lo que puede permitir que la respuesta sea almacenada en cachés del lado del cliente y recuperada por otros usuarios locales o procesos con acceso a datos de navegador en caché."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        }, {
          "lang" : "en",
          "value" : "CWE-525"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.01.01.55_multi",
            "matchCriteriaId" : "C94698A5-D2EE-45CD-AB06-4BD30F252920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9480BB-FC48-4614-A003-A991109FBCAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tendacn.com/product/F3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tenda-f3-plaintext-credential-exposure-in-configuration-download",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2698",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-02-23T17:23:30.390",
      "lastModified" : "2026-02-26T16:39:12.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de control de acceso inadecuado donde un usuario autenticado podría acceder a áreas fuera de su ámbito autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:security_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.0",
            "matchCriteriaId" : "17DB70B4-3F31-4D7A-BEBF-00E422A8FA3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://https://docs.tenable.com/release-notes/Content/security-center/2026.htm",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://https://www.tenable.com/security/tns-2026-07",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-23T18:25:51.630",
      "lastModified" : "2026-02-26T23:16:34.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JavaScript code that is executed in users' browsers. This vulnerability can be exploited via the name parameter in a POST HTTP request, leading to execution of malicious scripts when the affected content is viewed by other users, including administrators."
      }, {
        "lang" : "es",
        "value" : "Se encontró Cross-Site Scripting (XSS) Almacenado en la página /admin/edit_user.php de Society Management System Portal V1.0, lo que permite a atacantes remotos inyectar y almacenar código JavaScript arbitrario que se ejecuta en los navegadores de los usuarios. Esta vulnerabilidad puede ser explotada a través del parámetro name en una solicitud HTTP POST, lo que lleva a la ejecución de scripts maliciosos cuando el contenido afectado es visto por otros usuarios, incluidos los administradores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kashipara:society_management_system_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8596EF3-FA87-4B35-BA03-84667EF154E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Society%20Management%20System%20Portal/Stored%20XSS-name.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21863",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T20:28:53.853",
      "lastModified" : "2026-02-25T17:49:51.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packet that may cause an out bound read, which might result in the system crashing. The Valkey clusterbus packet processing code does not validate that a clusterbus ping extension packet is located within buffer of the clusterbus packet before attempting to read it. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue. As an additional mitigation, don't expose the cluster bus connection directly to end users, and protect the connection with its own network ACLs."
      }, {
        "lang" : "es",
        "value" : "Valkey es una base de datos distribuida de clave-valor. Antes de las versiones 9.0.2, 8.1.6, 8.0.7 y 7.2.12, un actor malicioso con acceso al puerto clusterbus de Valkey puede enviar un paquete inválido que puede causar una lectura fuera de límites, lo que podría resultar en la caída del sistema. El código de procesamiento de paquetes clusterbus de Valkey no valida que un paquete de extensión ping de clusterbus esté ubicado dentro del búfer del paquete clusterbus antes de intentar leerlo. Las versiones 9.0.2, 8.1.6, 8.0.7 y 7.2.12 solucionan el problema. Como una mitigación adicional, no exponga la conexión del bus de clúster directamente a los usuarios finales y proteja la conexión con sus propias ACL de red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.12",
            "matchCriteriaId" : "0A7DFDB2-5FDE-4F69-9B9E-7ED6D910EF76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.7",
            "matchCriteriaId" : "2375C3CF-6580-4EA0-AA6A-A92198CB7E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.6",
            "matchCriteriaId" : "03050B63-5660-4DFF-B6AC-3E701B9D199D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.2",
            "matchCriteriaId" : "315880B4-E0D2-4366-8E7B-2B97D82BA92E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/valkey-io/valkey/security/advisories/GHSA-c677-q3wr-gggq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27623",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T20:28:55.217",
      "lastModified" : "2026-02-25T17:58:27.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking state after processing an empty request. A malicious actor can then send a request that the server incorrectly identifies as breaking server side invariants, which results in the server shutting down. Version 9.0.3 fixes the issue. As an additional mitigation, properly isolate Valkey deployments so that only trusted users have access."
      }, {
        "lang" : "es",
        "value" : "Valkey es una base de datos distribuida de clave-valor. A partir de la versión 9.0.0 y antes de la versión 9.0.3, un actor malintencionado con acceso de red a Valkey puede provocar que el sistema aborte al activar una aserción. Al procesar las solicitudes entrantes, el sistema Valkey no restablece correctamente el estado de la red después de procesar una solicitud vacía. Un actor malintencionado puede entonces enviar una solicitud que el servidor identifica incorrectamente como una ruptura de las invariantes del lado del servidor, lo que resulta en el apagado del servidor. La versión 9.0.3 corrige el problema. Como una mitigación adicional, aísle adecuadamente las implementaciones de Valkey para que solo los usuarios de confianza tengan acceso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:valkey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.3",
            "matchCriteriaId" : "5CAEFEBA-E7CB-4EB1-B1FB-F8FDC550DE1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/valkey-io/valkey/security/advisories/GHSA-93p9-5vc7-8wgr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23521",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T21:19:09.990",
      "lastModified" : "2026-02-26T16:27:57.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or edit devices can set a device `uniqueId` to an absolute path. When uploading a device image, Traccar uses that `uniqueId` to build the filesystem path without enforcing that the resolved path stays under the media root. This allows writing files outside the media directory. As of time of publication, it is unclear whether a fix is available."
      }, {
        "lang" : "es",
        "value" : "Las versiones del sistema de seguimiento GPS de código abierto Traccar hasta la 6.11.1 inclusive contienen un problema en el que los usuarios autenticados que pueden crear o editar dispositivos pueden establecer el 'uniqueId' de un dispositivo a una ruta absoluta. Al cargar una imagen de dispositivo, Traccar utiliza ese 'uniqueId' para construir la ruta del sistema de archivos sin asegurar que la ruta resuelta permanezca bajo la raíz de medios. Esto permite escribir archivos fuera del directorio de medios. Al momento de la publicación, no está claro si hay una solución disponible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traccar:traccar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.11.1",
            "matchCriteriaId" : "76FAA1A2-2E75-4EAC-A7FA-BD790B7986A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traccar/traccar/security/advisories/GHSA-rc28-cvfc-chqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23693",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T21:19:10.157",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoint accepts client-supplied Mailchimp API credentials and insufficiently validates certain parameters, including the list parameter, when constructing upstream Mailchimp API requests. An unauthenticated attacker can abuse the endpoint as an open proxy to Mailchimp, potentially triggering unauthorized API calls, manipulating subscription data, exhausting API quotas, or causing resource consumption on the affected WordPress site."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin de WordPress ElementsKit Lite (elementskit-lite) anteriores a la 3.7.9 exponen el endpoint REST /wp-json/elementskit/v1/widget/mailchimp/subscribe sin autenticación. El endpoint acepta credenciales de la API de Mailchimp proporcionadas por el cliente e invalida insuficientemente ciertos parámetros, incluido el parámetro list, al construir solicitudes a la API de Mailchimp ascendentes. Un atacante no autenticado puede abusar del endpoint como un proxy abierto a Mailchimp, lo que podría desencadenar llamadas a la API no autorizadas, manipular datos de suscripción, agotar las cuotas de la API o causar consumo de recursos en el sitio de WordPress afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/elementskit-lite/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://wpmet.com/plugin/elementskit/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/elementskit-lite-unauthenticated-mailchimp-rest-endpoint",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23694",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T21:19:10.377",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple administrative AJAX actions. The handlers for ahsc_reset_options, ahsc_debug_status, and ahsc_enable_purge perform authentication and capability checks but do not verify a WordPress nonce for state-changing requests. An attacker can induce a logged-in administrator to visit a malicious webpage that submits forged requests to admin-ajax.php, resulting in unauthorized resetting of plugin settings, toggling of the WordPress WP_DEBUG configuration, or modification of cache purging behavior without the administrator’s intent."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin de WordPress Aruba HiSpeed Cache (aruba-hispeed-cache) anteriores a la 3.0.5 contienen una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) que afecta a múltiples acciones administrativas AJAX. Los manejadores para ahsc_reset_options, ahsc_debug_status y ahsc_enable_purge realizan comprobaciones de autenticación y capacidad, pero no verifican un nonce de WordPress para las peticiones que cambian de estado. Un atacante puede inducir a un administrador con sesión iniciada a visitar una página web maliciosa que envía peticiones falsificadas a admin-ajax.php, lo que resulta en el restablecimiento no autorizado de la configuración del plugin, la activación/desactivación de la configuración WP_DEBUG de WordPress, o la modificación del comportamiento de purga de la caché sin la intención del administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://hosting.aruba.it/en/wordpress.aspx",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://wordpress.org/plugins/aruba-hispeed-cache/",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25648",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T21:19:10.690",
      "lastModified" : "2026-02-26T16:25:24.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated users can execute arbitrary JavaScript in the context of other users' browsers by uploading malicious SVG files as device images. The application accepts SVG file uploads without sanitization and serves them with the `image/svg+xml` Content-Type, allowing embedded JavaScript to execute when victims view the image. As of time of publication, it is unclear whether a fix is available."
      }, {
        "lang" : "es",
        "value" : "Versiones del sistema de seguimiento GPS de código abierto Traccar a partir de la 6.11.1 contienen un problema en el que usuarios autenticados pueden ejecutar JavaScript arbitrario en el contexto de los navegadores de otros usuarios al subir archivos SVG maliciosos como imágenes de dispositivo. La aplicación acepta subidas de archivos SVG sin sanitización y los sirve con el Content-Type 'image/svg+xml', permitiendo que el JavaScript incrustado se ejecute cuando las víctimas ven la imagen. En el momento de la publicación, no está claro si hay una solución disponible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traccar:traccar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.11.1",
            "matchCriteriaId" : "7A82295B-76FF-4917-A101-0DC8A2CC2612"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traccar/traccar/security/advisories/GHSA-mc2g-mjqh-8x78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3025",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T21:19:12.497",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is an unknown functionality of the file /MP/Service/Webservice/ExampleNodeService.asmx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en ShuoRen Smart Heating Integrated Management Platform 1.0.0, la cual afecta a una funcionalidad desconocida del archivo /MP/Service/Webservice/ExampleNodeService.asmx. Si se manipula el argumento File puede producirse una carga sin restricciones. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Antes de la divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shuoren:smart_heating_integrated_management_platform:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1289FB1-1642-4C5A-8ECA-A14E5BB2A3CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3026",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T21:19:12.713",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the file /plug-in/ueditor/jsp/getRemoteImage.jsp of the component UEditor. The manipulation of the argument upfile leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en erzhongxmu JEEWMS 3.7. La cual afecta a alguna funcionalidad desconocida del archivo /plug-in/ueditor/jsp/getRemoteImage.jsp del componente UEditor. Al manipular el argumento upfile s eproduce una falsificación de petición del lado del servidor. El ataque puede ser iniciado en remoto. El exploit ha sido divulgado al público y puede ser usado. Antes de la divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeewms:jeewms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "5941D9D7-DA1E-4174-85A0-5C43D940CD9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.347382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.756522",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.notion.so/JEEWMS-SSRF-Vulnerability-in-UEditor-Module-304ea92a3c41806782b1f7285ab0d580",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3027",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T21:19:12.920",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp of the component UEditor. The manipulation of the argument myEditor results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en erzhongxmu JEEWMS hasta la versión 3.7. Esto afecta una parte desconocida del archivo src/main/webapp/plug-in/ueditor/jsp/getContent.jsp del componente UEditor. Manipular el argumento myEditor provoca un cross-site scripting. El ataque puede lanzarse en remoto. El exploit se ha hecho público y podría utilizarse. Se contactó con el proveedor con anterioridad a la divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeewms:jeewms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "8B1D8B14-D39B-408C-B695-B6F50245C4CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.347383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.756523",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.notion.so/JEEWMS-Reflected-XSS-Vulnerability-in-UEditor-Module-304ea92a3c41806a97ffc9b707f2fbf0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3075",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-23T21:19:13.140",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through <= 20251121."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Exposición de Información Sensible del Sistema a una Esfera de Control No Autorizada en Jeff Starr Simple Ajax Chat simple-ajax-chat, permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Simple Ajax Chat: desde n/a hasta &lt;= 20251121."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/simple-ajax-chat/vulnerability/wordpress-simple-ajax-chat-plugin-20251121-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25649",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T22:16:24.927",
      "lastModified" : "2026-02-26T16:23:23.333",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users can steal OAuth 2.0 authorization codes by exploiting an open redirect vulnerability in two OIDC-related endpoints. The `redirect_uri` parameter is not validated against a whitelist, allowing attackers to redirect authorization codes to attacker-controlled URLs, enabling account takeover on any OAuth-integrated application. As of time of publication, it is unclear whether a fix is available."
      }, {
        "lang" : "es",
        "value" : "Las versiones del sistema de seguimiento GPS de código abierto Traccar hasta la 6.11.1 inclusive contienen un problema en el que usuarios autenticados pueden robar códigos de autorización de OAuth 2.0 al explotar una vulnerabilidad de redirección abierta en dos endpoints relacionados con OIDC. El parámetro 'redirect_uri' no se valida contra una lista blanca, permitiendo a los atacantes redirigir códigos de autorización a URL controladas por el atacante, lo que permite la toma de control de cuentas en cualquier aplicación integrada con OAuth. Al momento de la publicación, no está claro si hay una solución disponible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traccar:traccar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.11.1",
            "matchCriteriaId" : "76FAA1A2-2E75-4EAC-A7FA-BD790B7986A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traccar/traccar/security/advisories/GHSA-ccc7-4r59-4pp7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25984",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T22:16:25.087",
      "lastModified" : "2026-02-23T22:16:25.087",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE was assigned in error."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27163",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-23T22:16:25.170",
      "lastModified" : "2026-02-23T22:16:25.170",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE was assigned in error."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27741",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T22:16:25.233",
      "lastModified" : "2026-02-26T03:03:26.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints. The application does not implement anti-CSRF tokens or other request origin validation mechanisms for these administrative actions. An attacker can induce an authenticated administrator to visit a malicious page that silently submits crafted requests, resulting in unauthorized plugin uninstallation or theme installation. This may lead to loss of functionality, execution of untrusted code via malicious themes, and compromise of system integrity."
      }, {
        "lang" : "es",
        "value" : "La versión 3.16.1 de Bludit contiene una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en los endpoints /admin/uninstall-plugin/ y /admin/install-theme/. La aplicación no implementa tokens anti-CSRF u otros mecanismos de validación de origen de la petición para estas acciones de administración. Un atacante puede inducir a un administrador autenticado a visitar una página maliciosa que envía silenciosamente peticiones manipuladas, lo que resulta en la desinstalación no autorizada de un plugin o la instalación de un tema. Esto puede llevar a la pérdida de funcionalidad, la ejecución de código no confiable a través de temas maliciosos y el compromiso de la integridad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bludit:bludit:3.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45499D7F-D6FB-480D-BD4E-B5BD849005DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bludit/bludit/issues/1577",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/bludit-csrf-in-plugin-and-theme-management-endpoints",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27742",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-23T22:16:25.440",
      "lastModified" : "2026-02-26T03:04:02.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality. The application performs client-side sanitation of content input but does not enforce equivalent sanitation on the server side. An authenticated user can inject arbitrary JavaScript into the content field of a post, which is stored and later rendered to other users without proper output encoding. When viewed, the injected script executes in the context of the victim’s browser, allowing session hijacking, credential theft, content manipulation, or other actions within the user’s privileges."
      }, {
        "lang" : "es",
        "value" : "Bludit versión 3.16.2 contiene una vulnerabilidad de cross-site scripting (XSS) almacenada en la funcionalidad de contenido de publicaciones. La aplicación realiza saneamiento del lado del cliente de la entrada de contenido, pero no aplica un saneamiento equivalente en el lado del servidor. Un usuario autenticado puede inyectar JavaScript arbitrario en el campo de contenido de una publicación, que se almacena y luego se renderiza a otros usuarios sin una codificación de salida adecuada. Cuando se visualiza, el script inyectado se ejecuta en el contexto del navegador de la víctima, permitiendo el secuestro de sesión, el robo de credenciales, la manipulación de contenido u otras acciones dentro de los privilegios del usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bludit:bludit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.16.2",
            "matchCriteriaId" : "322D8358-50D7-40FC-AA49-6DCBC888C806"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bludit/bludit/issues/1579",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/bludit-stored-xss-in-post-content",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3028",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T22:16:25.743",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en erzhongxmu JEEWMS hasta la versión 3.7. Esta vulnerabilidad afecta la función doAdd del archivo src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. Manipular el argumento Name causa un cross-site scripting. El ataque puede ser iniciado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huayi-tec:jeewms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "D13796BF-1C4B-43B3-A607-94C2605ECC50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.756527",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/JEEWMS-Stored-Cross-Site-Scripting-XSS-in-SysModule-304ea92a3c418099bed7f1e0bca12d83",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3040",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T22:16:25.960",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor confirms that \"300B is EoL, and this is an authenticated vulnerability. We don't plan to fix it.\" This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en DrayTek Vigor 300B hasta la versión 1.5.1.6. Esta afecta a la función cgiGetFile del archivo /cgi-bin/mainfunction.cgi/uploadlangs del componente Interfaz de Gestión Web. Manipular el argumento File conduce a una inyección de comandos del sistema operativo. El ataque puede ser iniciado de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor confirma que 'el 300B está al final de su vida útil (EoL), y esta es una vulnerabilidad autenticada. No planeamos solucionarlo.' Esta vulnerabilidad solo afecta a productos que ya no reciben soporte por parte del mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.6",
            "matchCriteriaId" : "33679D98-2490-467D-BBB7-C945F2B7BC28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor300b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5B988D-ED1A-4CBF-8B34-C5B03A55ED52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/42",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347394",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347394",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757126",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3041",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-23T22:16:26.210",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the file src/baykeshop/contrib/article/templates/baykeshop/sidebar/custom.html of the component Article Sidebar Module. Such manipulation of the argument sidebar.content leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en xingfuggz BaykeShop hasta la versión 1.3.20. Se ve afectada una función desconocida del archivo src/baykeshop/contrib/article/templates/baykeshop/sidebar/custom.html del componente Módulo de Barra Lateral de Artículo. Si se manipula el argumento sidebar.content se provoca un cross-site scripting. El ataque puede ser ejecutado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xingfuggz/baykeShop/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/xingfuggz/baykeShop/issues/1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/xingfuggz/baykeShop/issues/1#issue-3931488211",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347397",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347397",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.757165",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21665",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2026-02-23T23:16:15.710",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .NET Remoting TCP channels that allow unsafe deserialization of untrusted data. When these services are exposed to an untrusted network in a client-managed deployment, an unauthenticated attacker can achieve remote code execution. Version 2021.2.4 is no longer supported by Fiserv. Customers should upgrade to a currently supported release (2025.1 or later) and ensure that .NET Remoting service ports are not exposed beyond trusted network boundaries.\r\n\r\nThis CVE documents behavior observed in a client-hosted deployment running an unsupported legacy version of Originate Loans Peripherals with .NET Remoting ports exposed to an untrusted network. This is not a default or supported configuration. Customers running legacy versions should upgrade to a currently supported release and ensure .NET Remoting ports are restricted to trusted network segments. The finding does not apply to Fiserv-hosted environments."
      }, {
        "lang" : "es",
        "value" : "El componente Print Service de Fiserv Originate Loans Peripherals (anteriormente Velocity Services) en la versión no compatible 2021.2.4 (compilación 4.7.3155.0011) utiliza canales TCP de .NET Remoting obsoletos que permiten la deserialización insegura de datos no confiables. Cuando estos servicios están expuestos a una red no confiable en una implementación gestionada por el cliente, un atacante no autenticado puede lograr la ejecución remota de código. La versión 2021.2.4 ya no es compatible con Fiserv. Los clientes deben actualizarse a una versión actualmente compatible (2025.1 o posterior) y asegurarse de que los puertos del servicio .NET Remoting no estén expuestos más allá de los límites de la red confiable.\n\nEste CVE documenta el comportamiento observado en una implementación alojada por el cliente que ejecuta una versión heredada no compatible de Originate Loans Peripherals con puertos de .NET Remoting expuestos a una red no confiable. Esta no es una configuración predeterminada o compatible. Los clientes que ejecutan versiones heredadas deben actualizarse a una versión actualmente compatible y asegurarse de que los puertos de .NET Remoting estén restringidos a segmentos de red confiables. El hallazgo no se aplica a entornos alojados por Fiserv."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "support@hackerone.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://learn.microsoft.com/en-us/dotnet/core/compatibility/core-libraries/5.0/remoting-apis-obsolete",
        "source" : "support@hackerone.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3061",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-23T23:16:15.850",
      "lastModified" : "2026-02-25T18:23:42.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera de límites en Medios en Google Chrome anterior a la versión 145.0.7632.116 permitió a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.116",
            "matchCriteriaId" : "B343A045-3AF8-43D8-8CE8-79213B669EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.117",
            "matchCriteriaId" : "278C2D71-0647-4BB6-8A22-5F976FB15862"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_23.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/482862710",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3062",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-23T23:16:15.997",
      "lastModified" : "2026-02-25T18:23:42.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Lectura y escritura fuera de límites en Tint en Google Chrome en Mac anterior a 145.0.7632.116 permitió a un atacante en remoto acceder a memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.116",
            "matchCriteriaId" : "B343A045-3AF8-43D8-8CE8-79213B669EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.117",
            "matchCriteriaId" : "278C2D71-0647-4BB6-8A22-5F976FB15862"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_23.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/483751167",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3063",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-02-23T23:16:16.107",
      "lastModified" : "2026-02-25T18:23:42.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via DevTools. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en DevTools en Google Chrome anterior a 145.0.7632.116 permitió a un atacante, que convenció a un usuario de instalar una extensión maliciosa, inyectar scripts o HTML en una página con privilegios a través de DevTools. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.116",
            "matchCriteriaId" : "B343A045-3AF8-43D8-8CE8-79213B669EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.117",
            "matchCriteriaId" : "278C2D71-0647-4BB6-8A22-5F976FB15862"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_23.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://issues.chromium.org/issues/485287859",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3042",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T00:16:18.900",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en itsourcecode Event Management System 1.0 que afectada a una función desconocida del archivo /admin/index.php. Si se manipula el argumento ID se puede provocar una inyección SQL. Es posible explotar el ataque en remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:event_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0334F94B-DD03-4A2C-B1E5-F6FF0EE78C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347398",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347398",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3043",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T00:16:19.157",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en itsourcecode Event Management System 1.0. El elemento afectado es una función desconocida del archivo /admin/navbar.php. Si se ejecuta el argumento 'page' manipulado se puede provocar un cross-site scripting. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:event_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0334F94B-DD03-4A2C-B1E5-F6FF0EE78C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347399",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347399",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3044",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T00:16:19.420",
      "lastModified" : "2026-02-24T21:39:12.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda AC8 16.03.34.06. This affects the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. The manipulation of the argument boundary leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda AC8 16.03.34.06, la cual afecta a la función webCgiGetUploadFile del archivo /cgi-bin/UploadCfg del componente Servicio Httpd. Si se manipula el argumento boundary se provoca un desbordamiento de búfer basado en pila. Es posible iniciar el ataque de forma remota. El exploit ha sido revelado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C1D64DC-1EDC-4F62-8D22-E1890B71843C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81F1E48-0204-4478-A937-5D40CDD9E5E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/master-abc/cve/issues/43",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347400",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347400",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757240",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21864",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:12.267",
      "lastModified" : "2026-02-26T16:04:23.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Valkey-Bloom is a Rust based Valkey module which brings a Bloom Filter (Module) data type into the Valkey distributed key-value database. Prior to commit a68614b6e3845777d383b3a513cedcc08b3b7ccd, a specially crafted `RESTORE` command can cause Valkey to hit an assertion, causes the server to shutdown. Valkey modules are required to handle errors in RDB parsing by using `VALKEYMODULE_OPTIONS_HANDLE_IO_ERRORS` flag. If this flag is not set, errors encountered during parsing result in a system assertion which shuts down the system. Even though the Valkey-bloom module correctly handled the parsing, it did not originally set the flag. Commit a68614b6e3845777d383b3a513cedcc08b3b7ccd contains a patch. One may mitigate this defect by disabling the `RESTORE` command if it is unused by one's application."
      }, {
        "lang" : "es",
        "value" : "Valkey-Bloom es un módulo de Valkey basado en Rust que introduce un tipo de datos Bloom Filter (Módulo) en la base de datos distribuida clave-valor de Valkey. Antes del commit a68614b6e3845777d383b3a513cedcc08b3b7ccd, un comando 'RESTORE' especialmente diseñado puede hacer que Valkey encuentre una aserción, lo que provoca el apagado del servidor. Los módulos de Valkey deben manejar los errores en el análisis RDB utilizando la bandera 'VALKEYMODULE_OPTIONS_HANDLE_IO_ERRORS'. Si esta bandera no está configurada, los errores encontrados durante el análisis resultan en una aserción del sistema que apaga el sistema. Aunque el módulo Valkey-bloom manejó correctamente el análisis, originalmente no configuró la bandera. El commit a68614b6e3845777d383b3a513cedcc08b3b7ccd contiene un parche. Se puede mitigar este defecto deshabilitando el comando 'RESTORE' si no es utilizado por la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:valkey-bloom:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "04953F63-D070-4E0C-B28E-4650EBAEF756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/valkey-io/valkey-bloom/commit/a68614b6e3845777d383b3a513cedcc08b3b7ccd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/valkey-io/valkey-bloom/security/advisories/GHSA-mc2g-h759-3qw2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24481",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:12.423",
      "lastModified" : "2026-02-24T17:42:17.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD (Adobe Photoshop) format handler. When processing a maliciously crafted PSD file containing ZIP-compressed layer data that decompresses to less than the expected size, uninitialized heap memory is leaked into the output image. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de revelación de información en el heap en el gestor de formato PSD (Adobe Photoshop) de ImageMagick. Al procesar un archivo PSD creado maliciosamente que contiene datos de capa comprimidos en ZIP que se descomprimen a un tamaño menor al esperado, se filtra memoria del heap no inicializada en la imagen de salida. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-96pc-27rx-pr36",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:12.590",
      "lastModified" : "2026-02-27T14:37:34.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, Magick no verifica las conversiones anidadas de mvg a svg de múltiples capas, lo que lleva a DoS. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "F5891403-B079-4CD7-BA2A-361146A2F475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/0349df6d43d633bd61bb582d1e1e87d6332de32a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wg3g-gvx5-2pmv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:12.757",
      "lastModified" : "2026-02-27T14:34:13.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, cuando un archivo PCD no contiene un marcador Sync válido, la función DecodeImage() queda atrapada en un bucle infinito mientras busca el marcador Sync, lo que provoca que el programa deje de responder y consuma continuamente recursos de CPU, lo que finalmente lleva al agotamiento de los recursos del sistema y a una denegación de servicio. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "F5891403-B079-4CD7-BA2A-361146A2F475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/332c1566acc2de77857032d3c2504ead6210ff50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25501",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:12.927",
      "lastModified" : "2026-02-25T16:26:40.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics due to nil pointer dereference and the SMF process terminates. This is triggered by a malformed PFCP SessionReportRequest on the SMF PFCP (UDP/8805) interface. No known upstream fix is available, but some workarounds are available. ACL/firewall the PFCP interface so only trusted UPF IPs can reach SMF (reduce spoofing/abuse surface); drop/inspect malformed PFCP SessionReportRequest messages at the network edge where feasible, and/or add recover() around PFCP handler dispatch to avoid whole-process termination (mitigation only)."
      }, {
        "lang" : "es",
        "value" : "free5GC SMF proporciona la Función de Gestión de Sesiones para free5GC, un proyecto de código abierto para redes centrales móviles de quinta generación (5G). En versiones hasta la 1.4.1 inclusive, el SMF entra en pánico debido a una desreferenciación de puntero nulo y el proceso SMF finaliza. Esto se desencadena por una solicitud PFCP SessionReportRequest malformada en la interfaz PFCP (UDP/8805) del SMF. No hay una solución ascendente conocida disponible, pero sí algunas soluciones alternativas. Aplique ACL/cortafuegos a la interfaz PFCP para que solo las IP de UPF de confianza puedan alcanzar el SMF (reduce la superficie de suplantación/abuso); descarte/inspeccione los mensajes PFCP SessionReportRequest malformados en el borde de la red donde sea factible, y/o añada recover() alrededor del despacho del gestor PFCP para evitar la terminación de todo el proceso (solo mitigación)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:smf:*:*:*:*:*:go:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "D77A49EF-55CF-4F12-AAA2-2383C47AB810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/805",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/security/advisories/GHSA-vq85-8f6p-g9q5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25545",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:13.087",
      "lastModified" : "2026-02-25T15:19:26.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Astro is a web framework. Prior to version 9.5.4, Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable to SSRF. If the `Host:` header is changed to an attacker's server, it will be fetched on `/500.html` and they can redirect this to any internal URL to read the response body through the first request. An attacker who can access the application without `Host:` header validation (eg. through finding the origin IP behind a proxy, or just by default) can fetch their own server to redirect to any internal IP. With this they can fetch cloud metadata IPs and interact with services in the internal network or localhost. For this to be vulnerable, a common feature needs to be used, with direct access to the server (no proxies). Version 9.5.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Astro es un web framework. Antes de la versión 9.5.4, las páginas renderizadas en el lado del servidor que devuelven un error con una página de error personalizada prerrenderizada (por ejemplo, '404.astro' o '500.astro') son vulnerables a SSRF. Si el encabezado 'Host:' se cambia al servidor de un atacante, será obtenido en '/500.html' y pueden redirigir esto a cualquier URL interna para leer el cuerpo de la respuesta a través de la primera solicitud. Un atacante que puede acceder a la aplicación sin validación del encabezado 'Host:' (por ejemplo, al encontrar la IP de origen detrás de un proxy, o simplemente por defecto) puede obtener su propio servidor para redirigir a cualquier IP interna. Con esto pueden obtener IPs de metadatos de la nube e interactuar con servicios en la red interna o localhost. Para que esto sea vulnerable, se necesita usar una característica común, con acceso directo al servidor (sin proxies). La versión 9.5.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astro:\\@astrojs\\/node:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "EA57FE99-0A8A-4A84-8A6A-FAD4CAB01376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/withastro/astro/commit/e01e98b063e90d274c42130ec2a60cc0966622c9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/withastro/astro/releases/tag/%40astrojs%2Fnode%409.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/withastro/astro/security/advisories/GHSA-qq67-mvv5-fw3g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25576",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:13.290",
      "lastModified" : "2026-02-27T14:33:55.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larger than -size dimensions, causing out-of-bounds memory reads from a heap-allocated buffer. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de lectura excesiva de búfer de pila en múltiples manejadores de formato de imagen raw. La vulnerabilidad se produce al procesar imágenes con dimensiones -extract mayores que las dimensiones -size, causando lecturas de memoria fuera de límites de un búfer asignado en la pila. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "F5891403-B079-4CD7-BA2A-361146A2F475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/077b42643212d7da8c1a4f6b2cd0067ebca8ec0f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jv4p-gjwq-9r2j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25591",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:13.457",
      "lastModified" : "2026-03-03T17:22:36.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the `/api/token/search` endpoint allows authenticated users to cause denial of service through resource exhaustion by crafting malicious search patterns. The token search endpoint accepts user-supplied `keyword` and `token` parameters that are directly concatenated into SQL LIKE clauses without escaping wildcard characters (`%`, `_`). This allows attackers to inject patterns that trigger expensive database queries. Version 0.10.8-alpha.10 contains a patch."
      }, {
        "lang" : "es",
        "value" : "La nueva API es un portal de modo de lenguaje grande (LLM) y un sistema de gestión de activos de inteligencia artificial (IA). Antes de la versión 0.10.8-alpha.10, una vulnerabilidad de inyección de comodines SQL LIKE en el endpoint '/api/token/search' permite a usuarios autenticados causar denegación de servicio a través del agotamiento de recursos al crear patrones de búsqueda maliciosos. El endpoint de búsqueda de tokens acepta parámetros 'keyword' y 'token' suministrados por el usuario que se concatenan directamente en cláusulas SQL LIKE sin escapar caracteres comodín ('%', '_'). Esto permite a los atacantes inyectar patrones que desencadenan consultas costosas a la base de datos. La versión 0.10.8-alpha.10 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.8",
            "matchCriteriaId" : "1527E2D6-778C-4D31-99A9-A21DE4621B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "92E4407B-5336-4C05-832E-AB226CB00D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0A79DD-86C8-464A-9CB8-85C1D3DF57EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "35F1C0B3-9CD8-4923-979D-A4BA24206E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "108FA4C3-126D-4441-AA01-759D5ECF8F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "4E268A4B-1BD9-46DF-8FA9-C69E7C886C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha6:*:*:*:*:*:*",
            "matchCriteriaId" : "BE947FCB-2C34-4E90-9ACB-BE488E8DF6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha7:*:*:*:*:*:*",
            "matchCriteriaId" : "3631CF4F-5C43-4213-9E37-5E8A7E7C4423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha8:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F77CC8-1191-4EE7-9D70-1867B832441A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha9:*:*:*:*:*:*",
            "matchCriteriaId" : "06A4D084-88E4-4DFF-9FB3-68F9B385E42C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QuantumNous/new-api/commit/3e1be18310f35d20742683ca9e4bf3bcafc173c5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QuantumNous/new-api/releases/tag/v0.10.8-alpha.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/QuantumNous/new-api/security/advisories/GHSA-w6x6-9fp7-fqm4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25637",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:13.623",
      "lastModified" : "2026-02-27T14:32:59.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. Version 7.1.2-15 contains a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de la versión 7.1.2-15, una fuga de memoria en el escritor de imágenes ASHLAR permite a un atacante agotar la memoria del proceso al proporcionar una imagen manipulada que resulta en objetos pequeños que se asignan pero nunca se liberan. La versión 7.1.2-15 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "B89F5759-9F8D-4C89-8D35-0FCE2AE715A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "F5891403-B079-4CD7-BA2A-361146A2F475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/30ce0e8efbd72fd6b50ed3a10ae22f57c8901137",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm37-qx7w-p258",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25638",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:13.807",
      "lastModified" : "2026-02-24T17:29:35.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in `coders/msl.c`. In the `WriteMSLImage` function of the `msl.c` file, resources are allocated. But the function returns early without releasing these allocated resources. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una fuga de memoria en 'coders/msl.c'. En la función 'WriteMSLImage' del archivo 'msl.c', se asignan recursos. Pero la función retorna prematuramente sin liberar estos recursos asignados. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gxcx-qjqp-8vjw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25794",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:13.970",
      "lastModified" : "2026-02-24T17:28:54.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multiplication overflows 32-bit `int`, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of bounds heap write. Version 7.1.2-15 contains a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. 'WriteUHDRImage' en 'coders/uhdr.c' utiliza aritmética de tipo 'int' para calcular el tamaño del búfer de píxeles. Antes de la versión 7.1.2-15, cuando las dimensiones de la imagen son grandes, la multiplicación desborda el tipo 'int' de 32 bits, lo que provoca una asignación de heap de tamaño insuficiente seguida de una escritura fuera de límites. Esto puede bloquear el proceso o potencialmente conducir a una escritura de heap fuera de límites. La versión 7.1.2-15 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "B89F5759-9F8D-4C89-8D35-0FCE2AE715A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vhqj-f5cj-9x8h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25795",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:14.137",
      "lastModified" : "2026-02-24T18:46:49.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSFWImage()` (`coders/sfw.c`), when temporary file creation fails, `read_info` is destroyed before its `filename` member is accessed, causing a NULL pointer dereference and crash. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, en `ReadSFWImage()` (`coders/sfw.c`), cuando la creación de un archivo temporal falla, `read_info` se destruye antes de que se acceda a su miembro `filename`, causando una desreferenciación de puntero NULL y un fallo. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p33r-fqw2-rqmm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25796",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:14.293",
      "lastModified" : "2026-02-24T18:46:13.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSTEGANOImage()` (`coders/stegano.c`), the `watermark` Image object is not freed on three early-return paths, resulting in a definite memory leak (~13.5KB+ per invocation) that can be exploited for denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, en 'ReadSTEGANOImage()' ('coders/stegano.c'), el objeto de imagen 'watermark' no se libera en tres rutas de retorno anticipado, lo que resulta en una fuga de memoria definida (~13.5KB+ por invocación) que puede ser explotada para denegación de servicio. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g2pr-qxjg-7r2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25797",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:14.450",
      "lastModified" : "2026-02-25T11:56:06.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicous file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed. The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, los codificadores ps, responsables de escribir archivos PostScript, no sanean la entrada antes de escribirla en la cabecera PostScript. Un atacante puede proporcionar un archivo malicioso e inyectar código PostScript arbitrario. Cuando el archivo resultante es procesado por una impresora o un visor (como Ghostscript), el código inyectado es interpretado y ejecutado. El codificador html no escapa correctamente las cadenas que se escriben en el documento html. Un atacante puede proporcionar un archivo malicioso e inyectar código html arbitrario. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw6c-xp26-225v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25798",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:14.603",
      "lastModified" : "2026-02-24T18:45:31.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, una desreferencia de puntero NULL en ClonePixelCacheRepository permite a un atacante remoto bloquear cualquier aplicación vinculada a ImageMagick al proporcionar un archivo de imagen manipulado, lo que resulta en denegación de servicio. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p863-5fgm-rgq4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25799",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:14.763",
      "lastModified" : "2026-02-24T18:44:52.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in YUV sampling factor validation allows an invalid sampling factor to bypass checks and trigger a division-by-zero during image loading, resulting in a reliable denial-of-service. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, un error de lógica en la validación del factor de muestreo YUV permite que un factor de muestreo no válido eluda las comprobaciones y desencadene una división por cero durante la carga de la imagen, lo que resulta en una denegación de servicio fiable. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-543g-8grm-9cw6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25802",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:14.927",
      "lastModified" : "2026-02-25T20:17:51.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe operation occurs in component `MarkdownRenderer.jsx`, allowing for Cross-Site Scripting(XSS) when the model outputs items containing `<script>` tag. Version 0.10.8-alpha.9 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Nueva API es una pasarela de modelo de lenguaje grande (LLM) y un sistema de gestión de activos de inteligencia artificial (IA). Antes de la versión 0.10.8-alpha.9, ocurre una operación potencialmente insegura en el componente `MarkdownRenderer.jsx`, permitiendo cross-site scripting (XSS) cuando el modelo genera elementos que contienen la etiqueta `"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.8",
            "matchCriteriaId" : "1527E2D6-778C-4D31-99A9-A21DE4621B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "92E4407B-5336-4C05-832E-AB226CB00D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0A79DD-86C8-464A-9CB8-85C1D3DF57EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "35F1C0B3-9CD8-4923-979D-A4BA24206E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha4:*:*:*:*:*:*",
            "matchCriteriaId" : "108FA4C3-126D-4441-AA01-759D5ECF8F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha5:*:*:*:*:*:*",
            "matchCriteriaId" : "4E268A4B-1BD9-46DF-8FA9-C69E7C886C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha6:*:*:*:*:*:*",
            "matchCriteriaId" : "BE947FCB-2C34-4E90-9ACB-BE488E8DF6AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha7:*:*:*:*:*:*",
            "matchCriteriaId" : "3631CF4F-5C43-4213-9E37-5E8A7E7C4423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newapi:new_api:0.10.8:alpha8:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F77CC8-1191-4EE7-9D70-1867B832441A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QuantumNous/new-api/commit/ab5456eb1049aa8a0f3e51f359907ec7fff38b4b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/QuantumNous/new-api/security/advisories/GHSA-299v-8pq9-5gjq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26024",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:15.087",
      "lastModified" : "2026-02-25T16:27:56.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP (UDP/8805) interface. ￼No known upstream fix is available, but some workarounds are available. ACL/firewall the PFCP interface so only trusted UPF IPs can reach SMF (reduce spoofing/abuse surface); drop/inspect malformed PFCP SessionReportRequest messages at the network edge where feasible, and/or add recover() around PFCP handler dispatch to avoid whole-process termination (mitigation only)."
      }, {
        "lang" : "es",
        "value" : "free5GC SMF proporciona la Función de Gestión de Sesión para free5GC, un proyecto de código abierto para redes centrales móviles de quinta generación (5G). En versiones hasta la 1.4.1 inclusive, SMF entra en pánico y termina al procesar una PFCP SessionReportRequest malformada en la interfaz PFCP (UDP/8805). No hay una solución ascendente conocida disponible, pero hay algunas soluciones alternativas disponibles. Aplique ACL/cortafuegos a la interfaz PFCP para que solo las IP de UPF de confianza puedan alcanzar SMF (reducir la superficie de suplantación/abuso); descarte/inspeccione los mensajes PFCP SessionReportRequest malformados en el borde de la red donde sea factible, y/o añada recover() alrededor del despacho del gestor PFCP para evitar la terminación de todo el proceso (solo mitigación)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:smf:*:*:*:*:*:go:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "D77A49EF-55CF-4F12-AAA2-2383C47AB810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/807",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/security/advisories/GHSA-mrv4-m9wc-c4g9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26025",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:15.237",
      "lastModified" : "2026-02-25T16:28:24.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP (UDP/8805) interface. ￼No known upstream fix is available, but some workarounds are available. ACL/firewall the PFCP interface so only trusted UPF IPs can reach SMF (reduce spoofing/abuse surface); drop/inspect malformed PFCP SessionReportRequest messages at the network edge where feasible, and/or add recover() around PFCP handler dispatch to avoid whole-process termination (mitigation only)."
      }, {
        "lang" : "es",
        "value" : "El SMF de free5GC proporciona la Función de Gestión de Sesión para free5GC, un proyecto de código abierto para redes centrales móviles de quinta generación (5G). En versiones hasta la 1.4.1 inclusive, el SMF entra en pánico y termina al procesar una solicitud PFCP SessionReportRequest malformada en la interfaz PFCP (UDP/8805). No hay una solución ascendente conocida disponible, pero hay algunas soluciones alternativas disponibles. Aplicar ACL/cortafuegos a la interfaz PFCP para que solo las IP de UPF de confianza puedan alcanzar el SMF (reducir la superficie de suplantación/abuso); descartar/inspeccionar mensajes PFCP SessionReportRequest malformados en el borde de la red donde sea factible, y/o añadir recover() alrededor del despacho del gestor PFCP para evitar la terminación de todo el proceso (solo mitigación)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:smf:*:*:*:*:*:go:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "D77A49EF-55CF-4F12-AAA2-2383C47AB810"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/807",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/security/advisories/GHSA-vw8r-p7h3-g3xh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27642",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:15.390",
      "lastModified" : "2026-02-25T16:44:26.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters (e.g., %00) into the supi parameter, triggering internal URL parsing errors (net/url: invalid control character). This exposes system-level error details and can be used for service fingerprinting. All deployments of free5GC using the UDM Nudm_UEAU service may be affected. free5gc/udm pull request 75 contains a fix for the issue. No direct workaround is available at the application level. Applying the official patch is recommended."
      }, {
        "lang" : "es",
        "value" : "free5gc UDM proporciona Gestión Unificada de Datos (UDM) para free5GC, un proyecto de código abierto para redes centrales móviles de quinta generación (5G). En versiones hasta la 1.4.1 inclusive, atacantes remotos pueden inyectar caracteres de control (p. ej., %00) en el parámetro supi, desencadenando errores internos de análisis de URL (net/url: invalid control character). Esto expone detalles de errores a nivel de sistema y puede utilizarse para el fingerprinting de servicios. Todas las implementaciones de free5GC que utilizan el servicio UDM Nudm_UEAU pueden verse afectadas. free5gc/udm pull request 75 contiene una corrección para el problema. No hay una solución alternativa directa disponible a nivel de aplicación. Se recomienda aplicar el parche oficial."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:udm:*:*:*:*:*:go:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "D54382D2-F895-4384-9D82-597709AAE7A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/749",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/security/advisories/GHSA-h4wg-rp7m-8xx4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/udm/commit/a7af2321ddea6368c43835f90f6d1b9d67dd2ea1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/free5gc/udm/pull/75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27643",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:15.543",
      "lastModified" : "2026-02-25T15:46:38.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, the NEF component reliably leaks internal parsing error details (e.g., invalid character 'n' after top-level value) to remote clients, which can aid attackers in service fingerprinting. All deployments of free5GC  using the Nnef_PfdManagement service may be affected. free5gc/udr pull request 56 contains a patch for the issue. There is no direct workaround at the application level. The recommendation is to apply the provided patch."
      }, {
        "lang" : "es",
        "value" : "free5GC UDR es el repositorio de datos de usuario (UDR) para free5GC, un proyecto de código abierto para redes centrales móviles de quinta generación (5G). En versiones hasta la 1.4.1 inclusive, el componente NEF filtra de forma fiable detalles de errores de análisis internos (p. ej., carácter no válido 'n' después del valor de nivel superior) a clientes remotos, lo que puede ayudar a los atacantes en la huella digital de servicios. Todas las implementaciones de free5GC que utilizan el servicio Nnef_PfdManagement pueden verse afectadas. La solicitud de extracción 56 de free5gc/udr contiene un parche para el problema. No existe una solución alternativa directa a nivel de aplicación. La recomendación es aplicar el parche proporcionado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:free5gc:udr:*:*:*:*:*:go:*:*",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "A300D117-4FF5-4D72-8628-3BA0188B845E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/free5gc/free5gc/issues/753",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/free5gc/free5gc/security/advisories/GHSA-6468-f87j-6g82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://github.com/free5gc/udr/commit/754d23b03755ad59077ed529ce3b971e477080c4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/free5gc/udr/pull/56",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27729",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T01:16:15.700",
      "lastModified" : "2026-02-25T15:19:42.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Astro is a web framework. In versions 9.0.0 through 9.5.3, Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid action endpoint can crash the server process on memory-constrained deployments. On-demand rendered sites built with Astro can define server actions, which automatically parse incoming request bodies (JSON or FormData). The body is buffered entirely into memory with no size limit — a single oversized request is sufficient to exhaust the process heap and crash the server. Astro's Node adapter (`mode: 'standalone'`) creates an HTTP server with no body size protection. In containerized environments, the crashed process is automatically restarted, and repeated requests cause a persistent crash-restart loop. Action names are discoverable from HTML form attributes on any public page, so no authentication is required. The vulnerability allows unauthenticated denial of service against SSR standalone deployments using server actions. A single oversized request crashes the server process, and repeated requests cause a persistent crash-restart loop in containerized environments. Version 9.5.4 contains a fix."
      }, {
        "lang" : "es",
        "value" : "Astro es un framework web. En las versiones 9.0.0 a 9.5.3, las acciones del servidor de Astro no tienen un límite de tamaño de cuerpo de solicitud predeterminado, lo que puede llevar a una DoS por agotamiento de memoria. Una única solicitud POST grande a un endpoint de acción válido puede colapsar el proceso del servidor en despliegues con restricciones de memoria. Los sitios renderizados bajo demanda construidos con Astro pueden definir acciones de servidor, que analizan automáticamente los cuerpos de las solicitudes entrantes (JSON o FormData). El cuerpo se almacena completamente en la memoria sin límite de tamaño — una única solicitud sobredimensionada es suficiente para agotar el heap del proceso y colapsar el servidor. El adaptador de Node de Astro ('mode: 'standalone'') crea un servidor HTTP sin protección de tamaño de cuerpo. En entornos contenerizados, el proceso colapsado se reinicia automáticamente, y las solicitudes repetidas causan un bucle persistente de colapso-reinicio. Los nombres de las acciones son detectables a partir de los atributos de los formularios HTML en cualquier página pública, por lo que no se requiere autenticación. La vulnerabilidad permite la denegación de servicio no autenticada contra despliegues SSR standalone que utilizan acciones de servidor. Una única solicitud sobredimensionada colapsa el proceso del servidor, y las solicitudes repetidas causan un bucle persistente de colapso-reinicio en entornos contenerizados. La versión 9.5.4 contiene una solución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astro:\\@astrojs\\/node:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "4544AFCE-A719-4079-859C-E356B5871A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/withastro/astro/commit/522f880b07a4ea7d69a19b5507fb53a5ed6c87f8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/withastro/astro/pull/15564",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/withastro/astro/releases/tag/%40astrojs%2Fnode%409.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/withastro/astro/security/advisories/GHSA-jm64-8m5q-4qh8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3046",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T01:16:15.873",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This vulnerability affects unknown code of the file /check_profile_old.php. The manipulation of the argument profile_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en itsourcecode E-Logbook con Sistema de Monitoreo de Salud para COVID-19 1.0. Esta vulnerabilidad afecta código desconocido del archivo /check_profile_old.PHP. La manipulación del argumento profile_id lleva a inyección SQL. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emiloi:e-logbook_with_health_monitoring_system_for_covid-19:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D5C252-6A06-4B89-8697-537323D82009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757247",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3049",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T01:16:16.087",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_search.py of the component Query Parameter Handler. The manipulation of the argument prev_url results in open redirect. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 1.0.3 is capable of addressing this issue. The patch is identified as 730b5a44ff060916780c44a4bdbc8ced70a2cd27. The affected component should be upgraded."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en horilla-opensource horilla hasta 1.0.2. Este problema afecta la función get del archivo horilla_generics/global_search.py del componente Gestor de Parámetros de Consulta. La manipulación del argumento prev_url resulta en redirección abierta. El ataque puede ser ejecutado remotamente. El exploit es ahora público y puede ser usado. La actualización a la versión 1.0.3 es capaz de solucionar este problema. El parche se identifica como 730b5a44ff060916780c44a4bdbc8ced70a2cd27. El componente afectado debería ser actualizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "4A2442B9-FE6B-472B-892B-F4372797E611"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Stolichnayer/Horilla-CRM-Open-Redirect",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla-crm/commit/730b5a44ff060916780c44a4bdbc8ced70a2cd27",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla-crm/releases/tag/1.0.3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3050",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T01:16:16.307",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the component Leads Module. This manipulation of the argument Notes causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version 1.0.3 is recommended to address this issue. Patch name: fc5c8e55988e89273012491b5f097b762b474546. It is suggested to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en horilla-opensource horilla hasta 1.0.2. Afectada es una función desconocida del archivo static/assets/js/global.js del componente Leads Module. Esta manipulación del argumento Notes causa cross site scripting. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido publicado y puede ser usado. La actualización a la versión 1.0.3 es recomendada para abordar este problema. Nombre del parche: fc5c8e55988e89273012491b5f097b762b474546. Se sugiere actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horilla:horilla:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "4A2442B9-FE6B-472B-892B-F4372797E611"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Horilla-opensource/Horilla-crm/commit/fc5c8e55988e89273012491b5f097b762b474546",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Stolichnayer/Horilla-CRM-Stored-XSS",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horilla-opensource/horilla-crm/releases/tag/1.0.3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757314",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3051",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T01:16:16.527",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in DataLinkDC dinky up to 1.2.5. The affected element is the function getProjectDir of the file dinky-admin/src/main/java/org/dinky/utils/GitRepository.java of the component Project Name Handler. Such manipulation of the argument projectName leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en DataLinkDC dinky hasta la versión 1.2.5. El elemento afectado es la función getProjectDir del archivo dinky-admin/src/main/java/org/dinky/utils/GitRepository.java del componente Gestor de Nombres de Proyecto. Dicha manipulación del argumento projectName conduce a un salto de ruta. El ataque puede ser realizado de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dinky:dinky:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "13503CFA-F2AE-4F49-9A8F-A610FF025329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/5#issue-3935000629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347409",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347409",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757586",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25897",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:00.837",
      "lastModified" : "2026-02-24T18:44:12.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, an Integer Overflow vulnerability exists in the sun decoder. On 32-bit systems/builds, a carefully crafted image can lead to an out of bounds heap write. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de desbordamiento de entero en el decodificador sun. En sistemas/compilaciones de 32 bits, una imagen cuidadosamente diseñada puede conducir a una escritura fuera de límites en el heap. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6j5f-24fw-pqp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25898",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.000",
      "lastModified" : "2026-02-25T11:53:20.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the UIL and XPM image encoder do not validate the pixel index value returned by `GetPixelIndex()` before using it as an array subscript. In HDRI builds, `Quantum` is a floating-point type, so pixel index values can be negative. An attacker can craft an image with negative pixel index values to trigger a global buffer overflow read during conversion, leading to information disclosure or a process crash. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, el codificador de imágenes UIL y XPM no valida el valor del índice de píxel devuelto por 'GetPixelIndex()' antes de usarlo como subíndice de una matriz. En las compilaciones HDRI, 'Quantum' es un tipo de punto flotante, por lo que los valores del índice de píxel pueden ser negativos. Un atacante puede crear una imagen con valores de índice de píxel negativos para activar una lectura de desbordamiento de búfer global durante la conversión, lo que lleva a la revelación de información o a un fallo del proceso. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vpxv-r9pg-7gpr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25965",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.167",
      "lastModified" : "2026-02-25T11:54:18.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, a policy rule such as /etc/* can be bypassed by a path traversal. The OS resolves the traversal and opens the sensitive file, but the policy matcher only sees the unnormalized path and therefore allows the read. This enables local file disclosure (LFI) even when policy-secure.xml is applied. Actions to prevent reading from files have been taken in versions .7.1.2-15 and 6.9.13-40 But it make sure writing is also not possible the following should be added to one's policy. This will also be included in ImageMagick's more secure policies by default."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, la política de seguridad de ruta de ImageMagick se aplica sobre la cadena de nombre de archivo sin procesar antes de que el sistema de archivos la resuelva. Como resultado, una regla de política como /etc/* puede ser eludida mediante un salto de ruta. El sistema operativo resuelve el salto de ruta y abre el archivo sensible, pero el comparador de políticas solo ve la ruta no normalizada y por lo tanto permite la lectura. Esto permite la divulgación de archivos locales (LFI) incluso cuando se aplica policy-secure.xml. Se han tomado medidas para evitar la lectura de archivos en las versiones .7.1.2-15 y 6.9.13-40. Pero para asegurarse de que la escritura tampoco sea posible, se debe añadir lo siguiente a la política de uno. Esto también se incluirá en las políticas más seguras de ImageMagick por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8jvj-p28h-9gm7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25966",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.330",
      "lastModified" : "2026-02-25T11:59:20.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. The shipped \"secure\" security policy includes a rule intended to prevent reading/writing from standard streams. However, ImageMagick also supports fd:<n> pseudo-filenames (e.g., fd:0, fd:1). Prior to versions 7.1.2-15 and 6.9.13-40, this path form is not blocked by the secure policy templates, and therefore bypasses the protection goal of \"no stdin/stdout.\" Versions 7.1.2-15 and 6.9.13-40 contain a patch by including a change to the more secure policies by default. As a workaround, add the change to one's security policy manually."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. La política de seguridad 'segura' que se distribuye incluye una regla destinada a prevenir la lectura/escritura desde flujos estándar. Sin embargo, ImageMagick también soporta pseudo-nombres de archivo fd: (por ejemplo, fd:0, fd:1). Antes de las versiones 7.1.2-15 y 6.9.13-40, esta forma de ruta no es bloqueada por las plantillas de política segura, y por lo tanto elude el objetivo de protección de 'no stdin/stdout'. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche al incluir un cambio en las políticas más seguras por defecto. Como solución alternativa, añada el cambio a la política de seguridad propia manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xwc6-v6g8-pw2h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25967",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.483",
      "lastModified" : "2026-02-25T11:58:43.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a stack-based buffer overflow exists in the ImageMagick FTXT image reader. A crafted FTXT file can cause out-of-bounds writes on the stack, leading to a crash. Version 7.1.2-15 contains a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de la versión 7.1.2-15, existe un desbordamiento de búfer basado en pila en el lector de imágenes FTXT de ImageMagick. Un archivo FTXT manipulado puede causar escrituras fuera de los límites en la pila, lo que lleva a un fallo. La versión 7.1.2-15 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-72hf-fj62-w6j4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25968",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.647",
      "lastModified" : "2026-02-25T11:58:14.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, ocurre un desbordamiento de búfer de pila al procesar un atributo en msl.c. Un valor largo desborda un búfer de pila de tamaño fijo, lo que lleva a la corrupción de memoria. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3mwp-xqp2-q6ph",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25969",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.807",
      "lastModified" : "2026-02-25T11:57:35.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure.  However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. Version 7.1.2-15 contains a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de la versión 7.1.2-15, existe una fuga de memoria en `coders/ashlar.c`. La `WriteASHLARImage` asigna una estructura. Sin embargo, cuando se lanza una excepción, la memoria asignada no se libera correctamente, lo que resulta en una posible fuga de memoria. La versión 7.1.2-15 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "B89F5759-9F8D-4C89-8D35-0FCE2AE715A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xgm3-v4r9-wfgm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25970",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:01.963",
      "lastModified" : "2026-02-25T11:57:18.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, una vulnerabilidad de desbordamiento de entero con signo en el decodificador SIXEL de ImageMagick permite a un atacante activar la corrupción de memoria y la denegación de servicio al procesar un archivo de imagen SIXEL creado maliciosamente. La vulnerabilidad ocurre durante las operaciones de reasignación de búfer donde la aritmética de punteros que utiliza enteros con signo de 32 bits se desborda. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xg29-8ghv-v4xr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25971",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:02.130",
      "lastModified" : "2026-02-25T15:53:26.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, Magick no verifica las referencias circulares entre dos MSL, lo que lleva a un desbordamiento de pila. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8mpr-6xr2-chhc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25982",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:02.303",
      "lastModified" : "2026-02-25T12:01:49.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image). Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de lectura fuera de límites del heap en el módulo 'coders/dcm.c'. Al procesar archivos DICOM con una configuración específica, el bucle del decodificador lee incorrectamente los bytes por iteración. Esto hace que la función lea más allá del final del búfer asignado, lo que podría llevar a una Denegación de Servicio (bloqueo) o Revelación de Información (filtrando memoria del heap en la imagen). Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmq6-8289-hx3v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25983",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:02.463",
      "lastModified" : "2026-02-25T15:53:20.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it, leading to a UAF in ReadBlobString during further parsing. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, un script MSL manipulado desencadena un uso después de liberación en el heap. El gestor del elemento de operación reemplaza y libera la imagen mientras el analizador continúa leyendo de ella, lo que lleva a un UAF en ReadBlobString durante un análisis posterior. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fwqw-2x5x-w566",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25985",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:02.620",
      "lastModified" : "2026-02-25T12:10:42.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, un archivo SVG manipulado que contiene un elemento malicioso provoca que ImageMagick intente asignar ~674 GB de memoria, lo que lleva a un aborto por falta de memoria. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v7g2-m8c5-mf84",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25986",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:02.780",
      "lastModified" : "2026-02-25T15:53:11.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de escritura por desbordamiento de búfer de pila en ReadYUVImage() (coders/yuv.c) al procesar imágenes YUV 4:2:2 (NoInterlace) maliciosas. El bucle de pares de píxeles escribe un píxel más allá del búfer de fila asignado. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqfc-82jx-3mr2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25987",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:02.937",
      "lastModified" : "2026-02-25T12:10:01.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de lectura excesiva del búfer de pila en el decodificador de imágenes MAP al procesar archivos MAP especialmente diseñados, lo que podría provocar fallos o divulgación de memoria no intencionada durante la decodificación de imágenes. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-42p5-62qq-mmh7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25988",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T02:16:03.097",
      "lastModified" : "2026-02-25T11:56:36.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, a veces msl.c no actualiza el índice de la pila, por lo que una imagen se almacena en la ranura incorrecta y nunca se libera en caso de error, causando fugas. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-782x-jh29-9mf7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3052",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T02:16:03.767",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en DataLinkDC dinky hasta 1.2.5. La cual impacta a la función proxyUba del archivo dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java del componente Flink Proxy Controller. Si se manipula se puede lograr una falsificación de petición del lado del servidor. Es posible iniciar el ataque en remoto. El exploit ha sido hecho público y podría ser usado. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dinky:dinky:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "13503CFA-F2AE-4F49-9A8F-A610FF025329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/7#issue-3935032160",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347410",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347410",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757587",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3053",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T02:16:03.983",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/configure/AppConfig.java of the component OpenAPI Endpoint. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en DataLinkDC dinky hasta 1.2.5. Esta afecta la función addInterceptors del archivo dinky-admin/src/main/java/org/dinky/configure/AppConfig.java del componente OpenAPI Endpoint. Si se manipula y ejecuta se puede provocar una falta de autenticación. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado con anterioridad sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dinky:dinky:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "13503CFA-F2AE-4F49-9A8F-A610FF025329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/6#issue-3935019636",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347411",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347411",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757589",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1459",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2026-02-24T03:16:00.587",
      "lastModified" : "2026-02-25T18:05:40.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos post-autenticación en el programa CGI de descarga de certificados TR-369 de las versiones de firmware Zyxel VMG3625-T50B hasta la 5.50(ABPM.9.7)C0 podría permitir a un atacante autenticado con privilegios de administrador ejecutar comandos del sistema operativo (SO) en un dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50\\(abpm.9.7\\)c0",
            "matchCriteriaId" : "675946F8-788D-4ABE-BDBF-AE65096C9B1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3535B63-318C-4EB5-ADC8-0AF3FB443DFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:dx5401-b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.17\\(abyo.7.1\\)c0",
            "matchCriteriaId" : "59AA9207-A8B5-49EB-8186-277219F3F5BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:dx5401-b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE5C53C-4255-4AEE-A49E-36C1A2CF10F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50\\(abpm.9.7\\)c0",
            "matchCriteriaId" : "FD74F6CA-CB8B-4EB0-AE3D-161A191DE3EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9259E2F6-885D-4B44-8D40-20758DA599D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50\\(abpm.9.7\\)c0",
            "matchCriteriaId" : "DA0C31A9-963F-47B1-A3BD-073B8CE474BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3ECE0EB-C429-4716-ABFB-73540847EB9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50\\(abpm.9.7\\)c0",
            "matchCriteriaId" : "17CB6CFB-DE72-427F-9BB5-D1AE5DDF0A09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5E8468-D12F-4CBE-AC7E-27D5A928A85A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vmg3625-t50c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.50\\(abpm.9.7\\)c0",
            "matchCriteriaId" : "A2BC4B86-23E5-4966-8854-BAE4DD565812"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vmg3625-t50c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E07638-F7CA-451D-BB96-3E8C8752AD3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25989",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:00.773",
      "lastModified" : "2026-02-24T18:43:16.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary check (`>` instead of `>=`) that allows bypass the guard and reach an undefined `(size_t)` cast. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, un archivo SVG manipulado puede causar una denegación de servicio. Una comprobación de límite 'off-by-one' (' &gt; ' en lugar de ' &gt;= ') que permite eludir la protección y alcanzar una conversión '(size_t)' indefinida. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7355-pwx2-pm84",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26066",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:00.937",
      "lastModified" : "2026-02-24T18:42:32.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with `IPTCTEXT`. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, un perfil manipulado que contiene datos IPTC no válidos puede causar un bucle infinito al escribirlo con 'IPTCTEXT'. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v994-63cg-9wj3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26198",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:01.100",
      "lastModified" : "2026-02-25T19:41:02.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM constructs SQL expressions by passing user-supplied column names directly into `sqlalchemy.text()` without any validation or sanitization. The `min()` and `max()` methods in the `QuerySet` class accept arbitrary string input as the column parameter. While `sum()` and `avg()` are partially protected by an `is_numeric` type check that rejects non-existent fields, `min()` and `max()` skip this validation entirely. As a result, an attacker-controlled string is embedded as raw SQL inside the aggregate function call. Any unauthorized user can exploit this vulnerability to read the entire database contents, including tables unrelated to the queried model, by injecting a subquery as the column parameter. Version 0.23.0 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Ormar es un mini ORM asíncrono para Python. En las versiones 0.9.9 a 0.22.0, al realizar consultas agregadas, Ormar ORM construye expresiones SQL pasando los nombres de columna proporcionados por el usuario directamente a `sqlalchemy.text()` sin ninguna validación o saneamiento. Los métodos `min()` y `max()` en la clase `QuerySet` aceptan una entrada de cadena arbitraria como parámetro de columna. Mientras que `sum()` y `avg()` están parcialmente protegidos por una verificación de tipo `is_numeric` que rechaza campos inexistentes, `min()` y `max()` omiten esta validación por completo. Como resultado, una cadena controlada por el atacante se incrusta como SQL sin procesar dentro de la llamada a la función agregada. Cualquier usuario no autorizado puede explotar esta vulnerabilidad para leer todo el contenido de la base de datos, incluidas las tablas no relacionadas con el modelo consultado, inyectando una subconsulta como parámetro de columna. La versión 0.23.0 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collerek:ormar:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "0.9.9",
            "versionEndExcluding" : "0.23.0",
            "matchCriteriaId" : "0CCC44C3-BA96-4145-BC7A-A312AC5E0621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/collerek/ormar/commit/a03bae14fe01358d3eaf7e319fcd5db2e4956b16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/collerek/ormar/releases/tag/0.23.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/collerek/ormar/security/advisories/GHSA-xxh2-68g9-8jqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26283",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:01.290",
      "lastModified" : "2026-02-24T18:41:35.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a `continue` statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger a 100% CPU consumption and process hang (Denial of Service) with a crafted image. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, una sentencia 'continue' en el bucle de búsqueda binaria de extensión JPEG en el codificador jpeg causa un bucle infinito cuando la escritura falla persistentemente. Un atacante puede desencadenar un consumo del 100% de la CPU y un cuelgue del proceso (Denegación de Servicio) con una imagen manipulada. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwr3-x37h-h84v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26284",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:01.543",
      "lastModified" : "2026-02-24T18:39:19.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks proper boundary checking when processing Huffman-coded data from PCD (Photo CD) files. The decoder contains an function that has an incorrect initialization that could cause an out of bounds read. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, ImageMagick carece de una comprobación de límites adecuada al procesar datos codificados con Huffman de archivos PCD (Photo CD). El decodificador contiene una función que tiene una inicialización incorrecta que podría causar una lectura fuera de límites. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wrhr-rf8j-r842",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26331",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:01.710",
      "lastModified" : "2026-02-25T19:32:30.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt-dlp's `--netrc-cmd` command-line option (or `netrc_cmd` Python API parameter) is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. yt-dlp maintainers assume the impact of this vulnerability to be high for anyone who uses `--netrc-cmd` in their command/configuration or `netrc_cmd` in their Python scripts. Even though the maliciously crafted URL itself will look very suspicious to many users, it would be trivial for a maliciously crafted webpage with an inconspicuous URL to covertly exploit this vulnerability via HTTP redirect. Users without `--netrc-cmd` in their arguments or `netrc_cmd` in their scripts are unaffected. No evidence has been found of this exploit being used in the wild. yt-dlp version 2026.02.21 fixes this issue by validating all netrc \"machine\" values and raising an error upon unexpected input. As a workaround, users who are unable to upgrade should avoid using the `--netrc-cmd` command-line option (or `netrc_cmd` Python API parameter), or they should at least not pass a placeholder (`{}`) in their `--netrc-cmd` argument."
      }, {
        "lang" : "es",
        "value" : "yt-dlp es un descargador de audio/vídeo de línea de comandos. A partir de la versión 2023.06.21 y antes de la versión 2026.02.21, cuando se utiliza la opción de línea de comandos '--netrc-cmd' de yt-dlp (o el parámetro de API de Python 'netrc_cmd'), un atacante podría lograr una inyección de comandos arbitraria en el sistema del usuario con una URL creada maliciosamente. Los encargados del mantenimiento de yt-dlp asumen que el impacto de esta vulnerabilidad es alto para cualquiera que use '--netrc-cmd' en su comando/configuración o 'netrc_cmd' en sus scripts de Python. Aunque la URL creada maliciosamente en sí parecerá muy sospechosa para muchos usuarios, sería trivial explotar encubiertamente esta vulnerabilidad a través de una redirección HTTP para una página web creada maliciosamente con una URL discreta . Los usuarios sin '--netrc-cmd' en sus argumentos o 'netrc_cmd' en sus scripts no se ven afectados. No se ha encontrado evidencia de que este exploit se esté utilizando. La versión 2026.02.21 de yt-dlp soluciona este problema validando todos los valores de 'machine' de netrc y generando un error ante una entrada inesperada. Como solución alternativa, los usuarios que no puedan actualizarse deben evitar usar la opción de línea de comandos '--netrc-cmd' (o el parámetro de API de Python 'netrc_cmd'), o al menos no deben pasar un marcador de posición ('{}') en su argumento '--netrc-cmd'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yt-dlp_project:yt-dlp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023.06.21",
            "versionEndExcluding" : "2026.02.21",
            "matchCriteriaId" : "12B9D4B5-A1FA-4317-A911-DF469B09D3D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yt-dlp/yt-dlp/commit/1fbbe29b99dc61375bf6d786f824d9fcf6ea9c1a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/yt-dlp/yt-dlp/releases/tag/2026.02.21",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-g3gw-q23r-pgqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26981",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:01.890",
      "lastModified" : "2026-02-25T17:30:34.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.6 and 3.4.0 through 3.4.4, a heap-buffer-overflow (OOB read) occurs in the `istream_nonparallel_read` function in `ImfContextInit.cpp` when parsing a malformed EXR file through a memory-mapped `IStream`. A signed integer subtraction produces a negative value that is implicitly converted to `size_t`, resulting in a massive length being passed to `memcpy`. Versions 3.3.7 and 3.4.5 contain a patch."
      }, {
        "lang" : "es",
        "value" : "OpenEXR proporciona la especificación y la implementación de referencia del formato de archivo EXR, un formato de almacenamiento de imágenes para la industria cinematográfica. En las versiones 3.3.0 a 3.3.6 y 3.4.0 a 3.4.4, ocurre un desbordamiento de búfer de pila (lectura fuera de límites) en la función `istream_nonparallel_read` en `ImfContextInit.cpp` al analizar un archivo EXR malformado a través de un `IStream` mapeado en memoria. Una resta de enteros con signo produce un valor negativo que se convierte implícitamente a `size_t`, lo que resulta en una longitud masiva que se pasa a `memcpy`. Las versiones 3.3.7 y 3.4.5 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-195"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.7",
            "matchCriteriaId" : "9609FA05-1955-406E-BF47-2DB544450059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.5",
            "matchCriteriaId" : "DD82B1F5-5B57-49E4-A50C-303F66BB55C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AcademySoftwareFoundation/openexr/commit/6bb2ddf1068573d073edf81270a015b38cc05cef",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AcademySoftwareFoundation/openexr/commit/d2be382758adc3e9ab83a3de35138ec28d93ebd8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-q6vj-wxvf-5m8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26983",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:02.107",
      "lastModified" : "2026-02-24T18:38:31.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid `<map>` element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, el intérprete de MSL falla al procesar un elemento `` no válido que provoca que utilice una imagen después de haber sido liberada. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w8mw-frc6-r7m8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27126",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:02.267",
      "lastModified" : "2026-02-27T20:06:03.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored Cross-site Scripting (XSS) vulnerability exists in the `editableTable.twig` component when using the `html` column type. The application fails to sanitize the input, allowing an attacker to execute arbitrary JavaScript when another user views a page with the malicious table field. In order to exploit the vulnerability, an attacker must have an administrator account, and `allowAdminChanges` must be enabled in production, which is against Craft's security recommendations. Versions 4.16.19 and 5.8.23 patch the issue."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). En las versiones 4.5.0-RC1 a 4.16.18 y 5.0.0-RC1 a 5.8.22, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el componente 'editableTable.twig' al usar el tipo de columna 'html'. La aplicación no sanitiza la entrada, permitiendo a un atacante ejecutar JavaScript arbitrario cuando otro usuario ve una página con el campo de tabla malicioso. Para explotar la vulnerabilidad, un atacante debe tener una cuenta de administrador, y 'allowAdminChanges' debe estar habilitado en producción, lo cual va en contra de las recomendaciones de seguridad de Craft. Las versiones 4.16.19 y 5.8.23 parchean el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.5.0",
            "versionEndExcluding" : "4.16.19",
            "matchCriteriaId" : "FF425F3E-1E6A-4EE8-A1F8-9FA5399DE8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.23",
            "matchCriteriaId" : "A9572A70-5447-4861-9EC3-E51C5A7A9C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "48EC469C-4A9C-40A5-AD71-386D47255223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "25BADF46-CF5B-448C-BE38-D297D7512534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/f5d488d9bb6eff7670ed2c2fe30e15692e92c52b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-3jh3-prx3-w6wc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27127",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:02.440",
      "lastModified" : "2026-02-25T19:31:05.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF validation in Craft CMS’s GraphQL Asset mutation performs DNS resolution separately from the HTTP request. This Time-of-Check-Time-of-Use (TOCTOU) vulnerability enables DNS rebinding attacks, where an attacker’s DNS server returns different IP addresses for validation compared to the actual request. This is a bypass of the security fix for CVE-2025-68437 that allows access to all blocked IPs, not just IPv6 endpoints. Exploitation requires GraphQL schema permissions for editing assets in the `<VolumeName>` volume and creating assets in the `<VolumeName>` volume. These permissions may be granted to authenticated users with appropriate GraphQL schema access and/or Public Schema (if misconfigured with write permissions). Versions 4.16.19 and 5.8.23 patch the issue."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). En las versiones 4.5.0-RC1 hasta la 4.16.18 y 5.0.0-RC1 hasta la 5.8.22, la validación de SSRF en la mutación GraphQL Asset de Craft CMS realiza la resolución DNS separadamente de la solicitud HTTP. Esta vulnerabilidad de Tiempo de Verificación-Tiempo de Uso (TOCTOU) permite ataques de reencuadernación de DNS, donde el servidor DNS de un atacante devuelve diferentes direcciones IP para la validación en comparación con la solicitud real. Esto es un bypass de la corrección de seguridad para CVE-2025-68437 que permite el acceso a todas las IP bloqueadas, no solo a los puntos finales IPv6. La explotación requiere permisos de esquema GraphQL para editar activos en el volumen `` y crear activos en el volumen ``. Estos permisos pueden ser otorgados a usuarios autenticados con acceso apropiado al esquema GraphQL y/o Esquema Público (si está mal configurado con permisos de escritura). Las versiones 4.16.19 y 5.8.23 parchean el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.1",
            "versionEndExcluding" : "4.16.19",
            "matchCriteriaId" : "A5375BC8-3E29-48A4-AE56-1B544F736CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1",
            "versionEndExcluding" : "5.8.23",
            "matchCriteriaId" : "6DF22B83-BC96-49B9-9694-F6F2688409AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:3.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBDF2E4-0F24-4B10-8FF1-83C2F67A45D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/a4cf3fb63bba3249cf1e2882b18a2d29e77a8575",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-gp2f-7wcm-5fhx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-x27p-wfqw-hfcc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27128",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:02.623",
      "lastModified" : "2026-02-27T20:06:52.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a Time-of-Check-Time-of-Use (TOCTOU) race condition exists in Craft CMS’s token validation service for tokens that explicitly set a limited usage. The `getTokenRoute()` method reads a token’s usage count, checks if it’s within limits, then updates the database in separate non-atomic operations. By sending concurrent requests, an attacker can use a single-use impersonation token multiple times before the database update completes. To make this work, an attacker needs to obtain a valid user account impersonation URL with a non-expired token via some other means and exploit a race condition while bypassing any rate-limiting rules in place. For this to be a privilege escalation, the impersonation URL must include a token for a user account with more permissions than the current user. Versions 4.16.19 and 5.8.23 patch the issue."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenidos (CMS). En las versiones 4.5.0-RC1 a 4.16.18 y 5.0.0-RC1 a 5.8.22, existe una condición de carrera Time-of-Check-Time-of-Use (TOCTOU) en el servicio de validación de tokens de Craft CMS para tokens que establecen explícitamente un uso limitado. El método `getTokenRoute()` lee el recuento de uso de un token, verifica si está dentro de los límites y luego actualiza la base de datos en operaciones no atómicas separadas. Al enviar solicitudes concurrentes, un atacante puede usar un token de suplantación de un solo uso varias veces antes de que se complete la actualización de la base de datos. Para que esto funcione, un atacante necesita obtener una URL de suplantación de cuenta de usuario válida con un token no caducado por otros medios y explotar una condición de carrera mientras elude cualquier regla de limitación de velocidad existente. Para que esto sea una escalada de privilegios, la URL de suplantación debe incluir un token para una cuenta de usuario con más permisos que el usuario actual. Las versiones 4.16.19 y 5.8.23 aplican un parche al problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.5.0",
            "versionEndExcluding" : "4.16.19",
            "matchCriteriaId" : "FF425F3E-1E6A-4EE8-A1F8-9FA5399DE8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.8.23",
            "matchCriteriaId" : "A9572A70-5447-4861-9EC3-E51C5A7A9C56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "48EC469C-4A9C-40A5-AD71-386D47255223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.5.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "25BADF46-CF5B-448C-BE38-D297D7512534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/3e4afe18279951c024c64896aa2b93cda6d95fdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-6fx5-5cw5-4897",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27129",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T03:16:02.807",
      "lastModified" : "2026-03-02T20:35:37.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF validation in Craft CMS’s GraphQL Asset mutation uses `gethostbyname()`, which only resolves IPv4 addresses. When a hostname has only AAAA (IPv6) records, the function returns the hostname string itself, causing the blocklist comparison to always fail and completely bypassing SSRF protection. This is a bypass of the security fix for CVE-2025-68437. Exploitation requires GraphQL schema permissions for editing assets in the `<VolumeName>` volume and creating assets in the `<VolumeName>` volume. These permissions may be granted to authenticated users with appropriate GraphQL schema access and/or Public Schema (if misconfigured with write permissions). Versions 4.16.19 and 5.8.23 patch the issue."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). En las versiones 4.5.0-RC1 hasta 4.16.18 y 5.0.0-RC1 hasta 5.8.22, la validación de SSRF en la mutación GraphQL Asset de Craft CMS utiliza `gethostbyname()`, que solo resuelve direcciones IPv4. Cuando un nombre de host tiene solo registros AAAA (IPv6), la función devuelve la propia cadena del nombre de host, lo que hace que la comparación de la lista de bloqueo siempre falle y omita completamente la protección SSRF. Esto es una omisión de la corrección de seguridad para CVE-2025-68437. La explotación requiere permisos de esquema GraphQL para editar activos en el volumen '' y crear activos en el volumen ''. Estos permisos pueden ser otorgados a usuarios autenticados con acceso apropiado al esquema GraphQL y/o al Esquema Público (si está mal configurado con permisos de escritura). Las versiones 4.16.19 y 5.8.23 parchean el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "4.16.19",
            "matchCriteriaId" : "3C596EBB-ED70-4F53-A0E2-8ECB3F5A52D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1",
            "versionEndExcluding" : "5.8.23",
            "matchCriteriaId" : "6DF22B83-BC96-49B9-9694-F6F2688409AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/2825388b4f32fb1c9bd709027a1a1fd192d709a3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-v2gc-rm6g-wrw9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-x27p-wfqw-hfcc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3054",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T03:16:02.977",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Alinto SOGo 5.12.3/5.12.4. Esto afecta a una función desconocida. Manipular el argumento 'hint' puede provocar un cross-site scripting. El ataque puede ser iniciado en remoto. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alinto:sogo:5.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1BFA2B-EECD-4D79-B38B-27B6B570C82F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alinto:sogo:5.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D962096-D8C6-490D-A11C-B2E2F14B760B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347412",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347412",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757609",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3057",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T03:16:03.190",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProject of the file application/common/Model/Task.php of the component Backend Interface. The manipulation of the argument projectCode results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en a54552239 pearProjectApi hasta la versión 2.8.10. Afecta a la función dateTotalForProject del archivo application/common/Model/Task.PHP del componente Interfaz de Backend. Si se manipula el argumento projectCode se puede provocar una inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a54552239:pearprojectapi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.10",
            "matchCriteriaId" : "E8CA8A8E-5710-471B-AD4F-687EFD363E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XiaoyuZhou1997/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/XiaoyuZhou1997/CVE/issues/1#issue-3935708166",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347413",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347413",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757669",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3064",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T03:16:03.427",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionality of the file ResourceCreateService.java of the component Cloud Task Scheduler. Such manipulation of the argument regionId leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en HummerRisk hasta 1.5.0; la cual afecta a alguna funcionalidad desconocida del archivo ResourceCreateService.java del componente Cloud Task Scheduler. Manipular el argumento regionId provoca una inyección de comandos. El ataque puede ser lanzado en remoto. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue contactado con anterioridad sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummerrisk:hummerrisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "9BAA1F0C-C093-44BC-B790-BD0FB41BE3A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347415",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347415",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757695",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3065",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T03:16:03.653",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult of the file CloudTaskService.java of the component Cloud Task Dry-run. Performing a manipulation of the argument fileName results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en HummerRisk hasta la versión 1.5.0. Esta afecta a la función CommandUtils.commonExecCmdWithResult del archivo CloudTaskService.java del componente Cloud Task Dry-run. Si se manipula el argumento fileName se puede producir una inyección de comandos. Es posible explotar el ataque en remoto. El exploit ahora es público y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummerrisk:hummerrisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "9BAA1F0C-C093-44BC-B790-BD0FB41BE3A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347416",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347416",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757696",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3091",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2026-02-24T03:16:03.890",
      "lastModified" : "2026-03-04T02:21:20.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de elemento de ruta de búsqueda no controlado en Synology Presto Cliente antes de 2.1.3-0672 permite a usuarios locales leer o escribir archivos arbitrarios durante la instalación al colocar una DLL maliciosa de antemano en el mismo directorio que el instalador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:presto_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.3-0672",
            "matchCriteriaId" : "40238C76-F264-425A-948A-34ABDE0AA07A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/security/advisory/Synology_SA_26_02",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27461",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T04:15:58.787",
      "lastModified" : "2026-02-25T19:11:17.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, the filter query parameter in the dependency listing endpoints is JSON-decoded and the value field is concatenated directly into RLIKE clauses without sanitization or parameterized queries. Exploiting this issue requires admin authentication. An attacker with admin panel access can extract the full database including password hashes of other admin users. Version 12.3.3 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Pimcore es una Plataforma de Gestión de Datos y Experiencias de Código Abierto. En versiones hasta las 11.5.14.1 y 12.3.2 incluidas, el parámetro de consulta filter en los endpoints de listado de dependencias se decodifica en JSON y el campo de valor se concatena directamente en cláusulas RLIKE sin sanitización o consultas parametrizadas. Para explotar este problema es preciso estar autenticado como administrador. Un atacante con acceso al panel de administrador puede extraer la base de datos completa, incluyendo los hashes de contraseña de otros usuarios administradores. La versión 12.3.3 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.14.1",
            "matchCriteriaId" : "39E909B5-0004-472B-A619-AF6C4FA46A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.3.3",
            "matchCriteriaId" : "AC86C038-C1FD-49B3-968A-A8C58970F02B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/1c3925fbec4895abeb21e5c244a83679c4e4a6f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/18991",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/releases/tag/v12.3.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-vxg3-v4p6-f3fp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3066",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T04:15:58.980",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedCommand of the file hummer-common/hummer-common-core/src/main/java/com/hummer/common/core/utils/PlatformUtils.java of the component Cloud Compliance Scanning. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en HummerRisk hasta la versión 1.5.0. Esta vulnerabilidad afecta a la función fixedCommand del archivo hummer-common/hummer-common-core/src/main/java/com/hummer/common/core/utils/PlatformUtils.java del componente Cloud Compliance Scanning. Si se ejecuta de forma manipulada se puede provocar un inyección de comandos. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummerrisk:hummerrisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "9BAA1F0C-C093-44BC-B790-BD0FB41BE3A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347417",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347417",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3067",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T04:15:59.210",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the file hummer-common/hummer-common-core/src/main/java/com/hummer/common/core/utils/CommandUtils.java of the component Archive Extraction. The manipulation leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en HummerRisk hasta la versión 1.5.0. El problema afecta a la función extractTarGZ/extractZip del archivo hummer-common/hummer-common-core/src/main/java/com/hummer/common/core/utils/CommandUtils.java del componente Extracción de Archivos. Si se manipula se puede provocar un salto de ruta. El ataque puede ser llevado a cabo de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hummerrisk:hummerrisk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "9BAA1F0C-C093-44BC-B790-BD0FB41BE3A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347418",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347418",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757763",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3068",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T04:15:59.427",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument user2del can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode Document Management System 1.0. Esto afecta a una función desconocida del archivo /deluser.PHP. Si se ejecuta el argumento user2del manipulado se puede provocar una a inyección SQL. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:document_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5624DF-BD1B-45C8-B70F-21BD48027994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347423",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347423",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3069",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T05:17:18.333",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown function of the file /edtlbls.php. The manipulation of the argument field1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en itsourcecode Document Management System 1.0 que afecta a una función desconocida del archivo /edtlbls.php. Si se manipula el argumento field1 se puede provocar una inyección SQL. El ataque puede ser lanzado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:document_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5624DF-BD1B-45C8-B70F-21BD48027994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347424",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347424",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3070",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T05:17:23.430",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en SourceCodester Modern Image Gallery App 1.0 que afecta a una funcionalidad desconocida del archivo upload.php. Si se manipula el argumento filename se puede provoar un cross-site scripting. El ataque puede lanzarse en remoto. El exploit ya es público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remyandrade:modern_image_gallery_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017F5B8E-C165-4C65-B0B9-F9A8B02E17E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tiancesec/CVE/issues/28",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347425",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347425",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24314",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-02-24T06:16:35.270",
      "lastModified" : "2026-03-03T00:28:43.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "Bajo ciertas condiciones, SAP S/4HANA (Gestionar Medios de Pago) permite a un atacante autenticado acceder a información que de otro modo estaría restringida. Esto podría causar un impacto bajo en la confidencialidad de la aplicación, mientras que la integridad y la disponibilidad no se ven impactadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uiapfi70:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB97C06-5D56-470C-8B8F-3C782E1F70C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uiapfi70:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509D6CFA-7A14-428C-B878-9C9C1588ED8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uiapfi70:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BDD6A0-C115-427B-876B-4F0C393043DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uiapfi70:900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C05B6F2-C6A8-4FEB-917A-AB2FA86B50BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uiapfi70:901:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186D3DCE-2FE0-4EB9-B9DB-EF7B5F0775E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uiapfi70:902:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64DFAF25-C968-40A5-96EA-4B163CA21897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana_uis4h:109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C5F869-886A-4E07-81EB-B9DD4BE08180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3646297",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1229",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-02-24T08:16:28.407",
      "lastModified" : "2026-03-03T00:29:54.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas.\nECDH and ECDSA signing relying on this curve are not affected.\n\nThe bug was fixed in  v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 ."
      }, {
        "lang" : "es",
        "value" : "La función CombinedMult en el paquete CIRCL ecc/p384 (curva secp384r1) produce un valor incorrecto para entradas específicas. El problema se soluciona utilizando fórmulas de adición completas. La firma ECDH y ECDSA que depende de esta curva no se ve afectada.\n\nEl error se corrigió en la v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:circl:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "36CDDD6E-5A8A-4017-9B85-4C65E93B8D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/circl",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2664",
      "sourceIdentifier" : "security@docker.com",
      "published" : "2026-02-24T10:16:03.090",
      "lastModified" : "2026-02-27T17:56:12.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 ."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lectura fuera de límites en el módulo del kernel grpcfuse presente en la VM de Linux en Docker Desktop para Windows, Linux y macOS hasta la versión 4.61.0 podría permitir a un atacante local causar un impacto no especificado escribiendo en las entradas de /proc/docker. El problema ha sido solucionado en Docker Desktop 4.62.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@docker.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@docker.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:desktop:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "4.62.0",
            "matchCriteriaId" : "A6E51481-EA28-4C06-8D89-EF23F941D97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:desktop:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "4.62.0",
            "matchCriteriaId" : "073D0FEB-0A3B-45C4-9EA0-7151CACAA515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:desktop:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.62.0",
            "matchCriteriaId" : "D1504684-E95D-47FB-AA34-76B0B5A73A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/desktop/release-notes/#4620",
        "source" : "security@docker.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1772",
      "sourceIdentifier" : "cybersecurity@hitachienergy.com",
      "published" : "2026-02-24T14:16:22.180",
      "lastModified" : "2026-02-27T18:56:47.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges."
      }, {
        "lang" : "es",
        "value" : "Interfaz web de RTU500: Un usuario sin privilegios puede leer información de gestión de usuarios. No se puede acceder a la información a través de la interfaz de usuario web de RTU500, pero requiere herramientas adicionales como utilidades de desarrollo del navegador para acceder a ella sin los privilegios requeridos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@hitachienergy.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@hitachienergy.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "064FFA76-2AD3-425F-B003-4D038C941E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "AC2DF255-AB45-4CAE-A7BD-0B2A1B5D04D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "CB44D4BF-8F0F-4770-A150-A5469A262A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "432CB425-58CC-47E2-847D-5E3FD31F8EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D034F19D-920A-44DE-A886-6021242FF6E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AF93AD-200F-47A6-BA2C-F82165AFB50D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "50ECC099-2676-45CE-82DA-4A6943452976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "3D5D8077-C84A-4821-9F89-76A0F4664927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "89FAF654-7F2C-4918-B074-6CB685E885D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "0561AA77-CE68-4C93-8611-630FB07B507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F698BE-5EDF-46DF-8B1E-96AC8894AA64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6F9377-E6BB-4DEA-9D87-0AF792CBAC57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "FCFA1FB7-1834-4425-9DDB-0C08140DAD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "B70918C5-85C2-40B8-8681-921942C41561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "30F20A11-9ECB-4CC6-88C2-0CC96DFFABE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "199A1127-9B24-46A6-9122-30FD2EF64F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D49545F-C765-4579-89C5-01B1EBB45B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEFDEF0-883D-402B-9CD4-333A145E3C75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "EF5BF48F-4BDF-4D38-A836-221066FA6234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "C75F1BB5-558A-4292-BA2B-E77D811D5E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "4DE20728-0C7A-4388-AA09-AC50C8AD51F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "2CCC0128-9A27-4F4A-B254-C0C31BDCA78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9753BCF-0BE9-4B1A-88B4-0B0DE5F623CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495DCBD6-D2D1-4295-81D1-6ACA1B2CA223"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000237&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@hitachienergy.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1773",
      "sourceIdentifier" : "cybersecurity@hitachienergy.com",
      "published" : "2026-02-24T14:16:22.420",
      "lastModified" : "2026-02-27T18:56:20.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of exploitation."
      }, {
        "lang" : "es",
        "value" : "IEC 60870-5-104: Hay un potencial impacto de denegación de servicio en la recepción de una trama de formato U inválida. El producto solo se ve afectado si está configurada la funcionalidad bidireccional IEC 60870-5-104. Si se habilita la comunicación segura siguiendo la IEC 62351-3 no se remedia la vulnerabilidad, pero se mitiga el riesgo de explotación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@hitachienergy.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@hitachienergy.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "FCFA1FB7-1834-4425-9DDB-0C08140DAD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "B70918C5-85C2-40B8-8681-921942C41561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "30F20A11-9ECB-4CC6-88C2-0CC96DFFABE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "199A1127-9B24-46A6-9122-30FD2EF64F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu540_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D49545F-C765-4579-89C5-01B1EBB45B36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEFDEF0-883D-402B-9CD4-333A145E3C75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "EF5BF48F-4BDF-4D38-A836-221066FA6234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "C75F1BB5-558A-4292-BA2B-E77D811D5E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "4DE20728-0C7A-4388-AA09-AC50C8AD51F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "2CCC0128-9A27-4F4A-B254-C0C31BDCA78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu560_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9753BCF-0BE9-4B1A-88B4-0B0DE5F623CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495DCBD6-D2D1-4295-81D1-6ACA1B2CA223"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "064FFA76-2AD3-425F-B003-4D038C941E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "AC2DF255-AB45-4CAE-A7BD-0B2A1B5D04D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "CB44D4BF-8F0F-4770-A150-A5469A262A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "432CB425-58CC-47E2-847D-5E3FD31F8EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu520_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D034F19D-920A-44DE-A886-6021242FF6E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AF93AD-200F-47A6-BA2C-F82165AFB50D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7.1",
            "versionEndIncluding" : "12.7.7",
            "matchCriteriaId" : "50ECC099-2676-45CE-82DA-4A6943452976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.1",
            "versionEndIncluding" : "13.5.4",
            "matchCriteriaId" : "3D5D8077-C84A-4821-9F89-76A0F4664927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.6.1",
            "versionEndIncluding" : "13.6.2",
            "matchCriteriaId" : "89FAF654-7F2C-4918-B074-6CB685E885D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.7.1",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "0561AA77-CE68-4C93-8611-630FB07B507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:rtu530_firmware:13.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F698BE-5EDF-46DF-8B1E-96AC8894AA64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:rtu530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6F9377-E6BB-4DEA-9D87-0AF792CBAC57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000237&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@hitachienergy.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23969",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-24T14:16:22.623",
      "lastModified" : "2026-02-26T16:27:28.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts. While this feature included restrictions for engines like PostgreSQL, a vulnerability was reported where the default list for the ClickHouse engine was incomplete.\n\nThis issue affects Apache Superset: before 4.1.2.\n\nUsers are recommended to upgrade to version 4.1.2, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Apache Superset utiliza un diccionario configurable, DISALLOWED_SQL_FUNCTIONS, para restringir la ejecución de funciones SQL potencialmente sensibles dentro de SQL Lab y los gráficos. Si bien esta característica incluía restricciones para motores como PostgreSQL, se informó de una vulnerabilidad donde la lista predeterminada para el motor ClickHouse estaba incompleta.\n\nEste problema afecta a Apache Superset: anterior a 4.1.2.\n\nSe recomienda a los usuarios actualizar a la versión 4.1.2, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "51C781BF-E01B-49F4-AF85-AD4B06144B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/2q22sp4oj3krcgdkxchhtht0vgwp2wnd",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/24/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23980",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-24T14:16:22.807",
      "lastModified" : "2026-02-25T14:36:33.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpression or where parameters.\n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') en Apache Superset permite a un usuario autenticado con acceso de lectura realizar una inyección SQL basada en errores a través de los parámetros sqlExpression o where.\n\nEste problema afecta a Apache Superset: versiones anteriores a la 6.0.0.\n\nSe recomienda a los usuarios actualizar a la versión 6.0.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "D2C77007-26F8-47CD-B32C-93CCD302F1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/h4l02zw1pr2vywv0dc5zjn3grdcdhwf4",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/24/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23982",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-24T14:16:22.980",
      "lastModified" : "2026-02-25T14:38:02.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to write datasets and read charts can bypass these checks by overwriting the SQL query of an existing dataset.\n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de autorización indebida en Apache Superset que permite a un usuario con pocos privilegios eludir los controles de acceso a los datos. Al crear un conjunto de datos, Superset aplica comprobaciones de permisos para evitar que los usuarios consulten datos no autorizados. Sin embargo, un atacante autenticado con permisos para escribir conjuntos de datos y leer gráficos puede eludir estas comprobaciones sobrescribiendo la consulta SQL de un conjunto de datos existente.\n\nEste problema afecta a Apache Superset: antes de la versión 6.0.0.\n\nSe recomienda a los usuarios actualizar a la versión 6.0.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "D2C77007-26F8-47CD-B32C-93CCD302F1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/9lvbzwkw4rxgdvbpfvnnnfcll92v75fp",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/24/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23983",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-24T14:16:23.143",
      "lastModified" : "2026-02-25T14:37:49.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The Tag endpoint (disabled by default) allows users to retrieve a list of objects associated with a specific tag.\nWhen these associated objects include Users, the API response improperly serializes and returns sensitive fields, including password hashes (pbkdf2), email addresses, and login statistics. This vulnerability allows authenticated users with low privileges (e.g., Gamma role) to view sensitive authentication data \n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue or make sure TAGGING_SYSTEM is False (Apache Superset current default)"
      }, {
        "lang" : "es",
        "value" : "Hay una vulnerabilidad de exposición de datos sensibles en Apache Superset, que permite a usuarios autenticados recuperar información sensible del usuario. El endpoint Tag (deshabilitado por defecto) permite a los usuarios recuperar una lista de objetos asociados con una etiqueta específica.\nCuando estos objetos asociados incluyen Usuarios, la respuesta de la API serializa y devuelve incorrectamente campos sensibles, incluyendo hashes de contraseña (pbkdf2), direcciones de correo electrónico y estadísticas de inicio de sesión. Esta vulnerabilidad permite a usuarios autenticados con pocos privilegios (por ejemplo, rol Gamma) ver datos de autenticación sensibles.\n\nEste problema afecta a Apache Superset: antes de 6.0.0.\n\nSe recomienda a los usuarios actualizar a la versión 6.0.0, que corrige el problema, o asegurarse de que TAGGING_SYSTEM sea False (valor predeterminado actual de Apache Superset)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "D2C77007-26F8-47CD-B32C-93CCD302F1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/62mgbc5hc8026skp69kb6vqozj3pr5ww",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/24/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23984",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-02-24T14:16:23.307",
      "lastModified" : "2026-02-26T16:25:58.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PostgreSQL database connection.\nWhile the system effectively blocks standard Data Manipulation Language (DML) statements (e.g., INSERT, UPDATE, DELETE) on read-only connections, it fails to detect them in specially crafted SQL statements.\n\nThis issue affects Apache Superset: before 6.0.0.\n\nUsers are recommended to upgrade to version 6.0.0, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de validación de entrada incorrecta  en Apache Superset que permite a un usuario autenticado con acceso a SQLLab eludir la verificación de solo lectura al usar una conexión de base de datos PostgreSQL.\nSi bien el sistema bloquea eficazmente las sentencias estándar del Lenguaje de Manipulación de Datos (DML) (p. ej., INSERT, UPDATE, DELETE) en conexiones de solo lectura, no logra detectarlas en sentencias SQL especialmente diseñadas.\n\nEste problema afecta a Apache Superset: antes de 6.0.0.\n\nSe recomienda a los usuarios actualizar a la versión 6.0.0, que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "D2C77007-26F8-47CD-B32C-93CCD302F1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/72cmgxtvp9pclto4ln1chbs1227nwd26",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/24/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2459",
      "sourceIdentifier" : "cybersecurity@hitachienergy.com",
      "published" : "2026-02-24T14:16:23.477",
      "lastModified" : "2026-04-06T13:55:52.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en REB500 que hace que un usuario autenticado con rol de Instalador acceda y altere el contenido de directorios para los que el rol no está autorizado a hacerlo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@hitachienergy.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@hitachienergy.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-267"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.3.3.0",
            "matchCriteriaId" : "5A4F5625-2EB5-46F9-816B-21C7F081599B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:reb500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325854D-52C2-4126-8805-638243FD708E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000217&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@hitachienergy.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2460",
      "sourceIdentifier" : "cybersecurity@hitachienergy.com",
      "published" : "2026-02-24T14:16:23.647",
      "lastModified" : "2026-02-26T18:04:30.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en REB500 para un usuario autenticado con privilegios de bajo nivel para acceder y alterar el contenido de directorios mediante el uso del protocolo DAC, para lo cual el usuario no está autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@hitachienergy.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@hitachienergy.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-267"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3.3.1",
            "matchCriteriaId" : "BD63B905-F085-45FC-BB6C-766036FD8D01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hitachienergy:reb500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0325854D-52C2-4126-8805-638243FD708E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000217&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@hitachienergy.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2634",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:23.810",
      "lastModified" : "2026-04-13T15:17:20.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4."
      }, {
        "lang" : "es",
        "value" : "Scripts maliciosos podrían causar desincronización entre la barra de direcciones y el contenido web antes de que se reciba una respuesta en Firefox iOS, permitiendo que páginas controladas por el atacante se presenten bajo dominios falsificados. Esta vulnerabilidad afecta a Firefox para iOS &lt; 147.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "147.4",
            "matchCriteriaId" : "DDE93FFB-F63D-4D64-906B-17F578E83996"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1975529",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2757",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:23.927",
      "lastModified" : "2026-04-13T15:17:20.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente WebRTC: Audio/Video. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2001637",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2758",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.037",
      "lastModified" : "2026-04-13T15:17:20.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente JavaScript: GC. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2009608",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2759",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.147",
      "lastModified" : "2026-04-13T15:17:20.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente Graphics: ImageLib. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2010933",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2760",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.257",
      "lastModified" : "2026-04-13T15:17:20.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox debido a condiciones de límite incorrectas en el componente Graphics: WebRender. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2011062",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2761",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.370",
      "lastModified" : "2026-04-13T15:17:21.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox en el componente Gráficos: WebRender. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2011063",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2762",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.480",
      "lastModified" : "2026-04-13T15:17:21.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el componente de la librería estándar de JavaScript. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148 y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2011649",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2763",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.620",
      "lastModified" : "2026-04-13T15:17:21.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente del motor JavaScript. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2012018",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2764",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.737",
      "lastModified" : "2026-04-13T15:17:21.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Error de compilación JIT, uso después de liberación en el motor JavaScript: componente JIT. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2012608",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2765",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.860",
      "lastModified" : "2026-04-13T15:17:21.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente del motor JavaScript. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013562",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2766",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:24.973",
      "lastModified" : "2026-04-13T15:17:22.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el motor JavaScript: componente JIT. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013583",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2767",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.080",
      "lastModified" : "2026-04-13T15:17:22.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente JavaScript: WebAssembly. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013741",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2768",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.183",
      "lastModified" : "2026-04-13T15:17:23.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox en el componente Storage: IndexedDB. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014101",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2769",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.287",
      "lastModified" : "2026-04-13T15:17:23.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente Storage: IndexedDB. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014550",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2770",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.397",
      "lastModified" : "2026-04-13T15:17:23.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el DOM: componente de Enlaces (WebIDL). Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014585",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2771",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.497",
      "lastModified" : "2026-04-13T15:17:23.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Comportamiento indefinido en el DOM: componente Core y HTML. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014593",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2772",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.603",
      "lastModified" : "2026-04-13T15:17:23.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente de Audio/Video: Reproducción. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014827",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2773",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.703",
      "lastModified" : "2026-04-13T15:17:23.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente Web Audio. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014832",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2774",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.810",
      "lastModified" : "2026-04-13T15:17:24.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el componente de Audio/Video. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014883",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2775",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:25.917",
      "lastModified" : "2026-04-13T15:17:24.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Omisión de mitigación en el DOM: componente del analizador HTML. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148 y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2015199",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2776",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.023",
      "lastModified" : "2026-04-13T15:17:24.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox debido a condiciones de contorno incorrectas en el componente de Telemetría en el Software Externo. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2015266",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2777",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.123",
      "lastModified" : "2026-04-13T15:17:24.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios en el componente del sistema de mensajería. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2015305",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2778",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.230",
      "lastModified" : "2026-04-13T15:17:25.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escape de sandbox debido a condiciones de límite incorrectas en el DOM: Componente Core y HTML. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2016358",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2779",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.330",
      "lastModified" : "2026-04-13T15:17:25.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente Networking: JAR. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1164141",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2780",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.437",
      "lastModified" : "2026-04-13T15:17:25.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios en el componente Netmonitor. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2007829",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2781",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.533",
      "lastModified" : "2026-04-21T13:16:19.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en el componente de librerías en NSS. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2009552",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-31/",
        "source" : "security@mozilla.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2026/03/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2782",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.640",
      "lastModified" : "2026-04-13T15:17:25.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios en el componente Netmonitor. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2010743",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2783",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.747",
      "lastModified" : "2026-04-13T15:17:26.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Revelación de información debido a compilación errónea JIT en el motor JavaScript: componente JIT. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2010943",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2784",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.847",
      "lastModified" : "2026-04-13T15:17:26.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Elusión de mitigación en el DOM: Componente de seguridad. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2012984",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2785",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:26.950",
      "lastModified" : "2026-04-13T15:17:26.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Puntero no válido en el componente del motor JavaScript. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148 y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013549",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2786",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.053",
      "lastModified" : "2026-04-13T15:17:26.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente del motor JavaScript. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013612",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2787",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.157",
      "lastModified" : "2026-04-13T15:17:26.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el DOM: componente Window y Location. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014560",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2788",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.260",
      "lastModified" : "2026-04-13T15:17:27.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente Audio/Video: GMP. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014824",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2789",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.370",
      "lastModified" : "2026-04-13T15:17:27.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente Graphics: ImageLib. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2015179",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2790",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.473",
      "lastModified" : "2026-04-13T15:17:27.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Elusión de la política del mismo origen en el componente de Redes: JAR. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2008426",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2791",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.580",
      "lastModified" : "2026-04-13T15:17:27.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Elusión de mitigación en el componente de Redes: Caché. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148 y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2015220",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2792",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.680",
      "lastModified" : "2026-04-13T15:17:27.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Hay errores de seguridad de memoria en Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 y Thunderbird 147. Algunos de ellos mostraban que se había producido una corrupción de memoria, y presumimos que, con suficiente esfuerzo, algunos de ellos podrían haber sido explotados para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 140.8, Thunderbird &lt; 148 y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "7DA5BF3D-3278-43DD-9DD4-C78D7A2C1883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2008912%2C2010050%2C2010275%2C2012331",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2793",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.787",
      "lastModified" : "2026-04-13T15:17:28.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8."
      }, {
        "lang" : "es",
        "value" : "Hay errores de seguridad de memoria en Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 y Thunderbird 147. Se comprobó que algunos de estos errores habían sufrido una corrupción de memoria, y presumimos que con suficiente esfuerzo algunos de ellos podrían haber sido explotados para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148 y Thunderbird &lt; 140.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "115.33.0",
            "matchCriteriaId" : "1B590E0E-4C6F-4F2A-A0FF-9BEDA1A36D17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "versionStartIncluding" : "128.0",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "AE16902C-47B5-438D-A4A5-770C08223931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*",
            "versionEndExcluding" : "140.8.0",
            "matchCriteriaId" : "73228A3D-A71B-497B-A5BA-412FFE9F6F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2015196%2C2016423%2C2016498",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-14/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-15/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-17/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2794",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:27.897",
      "lastModified" : "2026-04-13T15:17:28.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148."
      }, {
        "lang" : "es",
        "value" : "Revelación de información debida a memoria no inicializada en Firefox y Firefox Focus para Android. Esta vulnerabilidad afecta a Firefox &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2008365",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2795",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.000",
      "lastModified" : "2026-04-13T15:17:28.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente JavaScript: GC. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2010940",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2796",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.100",
      "lastModified" : "2026-04-13T15:17:28.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Compilación JIT errónea en el componente JavaScript: WebAssembly. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013165",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2797",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.200",
      "lastModified" : "2026-04-13T15:17:29.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente JavaScript: GC. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013561",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2798",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.307",
      "lastModified" : "2026-04-13T15:17:29.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el DOM: componente Core y HTML. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014136",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2799",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.400",
      "lastModified" : "2026-04-13T15:17:30.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el DOM: componente Core y HTML. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014551",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2800",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.503",
      "lastModified" : "2026-04-13T15:17:30.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Problema de suplantación en el componente WebAuthn en Firefox para Android. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1988145",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2801",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.610",
      "lastModified" : "2026-04-13T15:17:31.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Condiciones de contorno incorrectas en el componente JavaScript: WebAssembly. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2009901",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2802",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.703",
      "lastModified" : "2026-04-13T15:17:31.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Condición de carrera en el componente JavaScript: GC. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2011069",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2803",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.810",
      "lastModified" : "2026-04-13T15:17:31.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Revelación de información, elusión de mitigación en el componente de la interfaz de usuario de Configuración. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2012012",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2804",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:28.917",
      "lastModified" : "2026-04-13T15:17:31.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberación en el componente JavaScript: WebAssembly. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2013584",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2805",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:29.010",
      "lastModified" : "2026-04-13T15:17:31.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Puntero inválido en el DOM: Componente Core y HTML. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2014549",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2806",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:29.113",
      "lastModified" : "2026-04-13T15:17:32.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Memoria no inicializada en el componente Gráficos: Texto. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-457"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=2006199",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2807",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-02-24T14:16:29.220",
      "lastModified" : "2026-04-13T15:17:32.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148 and Thunderbird 148."
      }, {
        "lang" : "es",
        "value" : "Hay errores de seguridad de memoria en Firefox 147 y Thunderbird 147. Algunos de estos errores mostraron evidencia de corrupción de memoria y presumimos que, con suficiente esfuerzo, algunos de estos podrían haber sido explotados para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox &lt; 148 y Thunderbird &lt; 148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "3D8676DB-4A12-41A0-A1A5-2DED97287973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "148.0",
            "matchCriteriaId" : "C5EBE90D-1996-4578-B715-605B24E66C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1756056%2C1999402%2C2004872%2C2006037%2C2012855",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-13/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-16/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0399",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2026-02-24T15:21:36.980",
      "lastModified" : "2026-02-26T20:00:40.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de desbordamiento de búfer basado en pila post-autenticación en la interfaz de gestión de SonicOS debido a una comprobación de límites inadecuada en un endpoint de API."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.2-7010",
            "matchCriteriaId" : "C263643A-0274-47CF-881F-59CEF6B8A20A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACDCE12-74C2-4F3C-8421-9191700514C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF1ECB1-6257-41E3-A050-6467063F4807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0883D805-1BA9-49CE-AEC7-51C9D9A69C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.0-8009",
            "matchCriteriaId" : "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED8014A-C7A4-4624-8D50-A9844871C1B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28BF416-D019-438B-954E-FB94697DC011"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC904E-4FCA-4B35-B188-639AE688DD14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9556B-0A33-4A27-B9E2-00F47969A566"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE3403-6A5B-4735-9248-99297A2E4461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6BC579-21A1-4C2F-B655-73B14C3409A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CC10F-E822-4BF7-9EB5-0D702020CB0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0400",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2026-02-24T15:21:37.127",
      "lastModified" : "2026-02-26T21:03:56.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Format String post-autenticación en SonicOS permite a un atacante remoto colapsar un cortafuegos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.2-7010",
            "matchCriteriaId" : "C263643A-0274-47CF-881F-59CEF6B8A20A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACDCE12-74C2-4F3C-8421-9191700514C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF1ECB1-6257-41E3-A050-6467063F4807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0883D805-1BA9-49CE-AEC7-51C9D9A69C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.0-8009",
            "matchCriteriaId" : "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED8014A-C7A4-4624-8D50-A9844871C1B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28BF416-D019-438B-954E-FB94697DC011"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC904E-4FCA-4B35-B188-639AE688DD14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9556B-0A33-4A27-B9E2-00F47969A566"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE3403-6A5B-4735-9248-99297A2E4461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6BC579-21A1-4C2F-B655-73B14C3409A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CC10F-E822-4BF7-9EB5-0D702020CB0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0401",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2026-02-24T15:21:37.267",
      "lastModified" : "2026-02-26T21:03:06.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desreferencia de puntero nulo post-autenticación en SonicOS permite a un atacante remoto bloquear un cortafuegos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.2-7010",
            "matchCriteriaId" : "C263643A-0274-47CF-881F-59CEF6B8A20A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACDCE12-74C2-4F3C-8421-9191700514C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF1ECB1-6257-41E3-A050-6467063F4807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0883D805-1BA9-49CE-AEC7-51C9D9A69C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.0-8009",
            "matchCriteriaId" : "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED8014A-C7A4-4624-8D50-A9844871C1B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28BF416-D019-438B-954E-FB94697DC011"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC904E-4FCA-4B35-B188-639AE688DD14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9556B-0A33-4A27-B9E2-00F47969A566"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE3403-6A5B-4735-9248-99297A2E4461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6BC579-21A1-4C2F-B655-73B14C3409A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CC10F-E822-4BF7-9EB5-0D702020CB0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0402",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2026-02-24T15:21:37.410",
      "lastModified" : "2026-02-26T20:59:57.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lectura fuera de límites post-autenticación en SonicOS permite a un atacante remoto colapsar un cortafuegos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.2-7010",
            "matchCriteriaId" : "C263643A-0274-47CF-881F-59CEF6B8A20A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACDCE12-74C2-4F3C-8421-9191700514C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF1ECB1-6257-41E3-A050-6467063F4807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0883D805-1BA9-49CE-AEC7-51C9D9A69C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.0-8009",
            "matchCriteriaId" : "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED8014A-C7A4-4624-8D50-A9844871C1B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28BF416-D019-438B-954E-FB94697DC011"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC904E-4FCA-4B35-B188-639AE688DD14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9556B-0A33-4A27-B9E2-00F47969A566"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE3403-6A5B-4735-9248-99297A2E4461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6BC579-21A1-4C2F-B655-73B14C3409A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CC10F-E822-4BF7-9EB5-0D702020CB0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27208",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T15:21:37.843",
      "lastModified" : "2026-02-26T20:11:29.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bleon-ethical/api-gateway-deploy provides API gateway deployment. Version 1.0.0 is vulnerable to an attack chain involving OS Command Injection and Privilege Escalation. This allows an attacker to execute arbitrary commands with root privileges within the container, potentially leading to a container escape and unauthorized infrastructure modifications. This is fixed in version 1.0.1 by implementing strict input sanitization and secure delimiters in entrypoint.sh, enforcing a non-root user (appuser) in the Dockerfile, and establishing mandatory security quality gates."
      }, {
        "lang" : "es",
        "value" : "bleon-ethical/api-gateway-deploy proporciona el despliegue de API gateway. La versión 1.0.0 es vulnerable a una cadena de ataque que involucra inyección de comandos del sistema operativo y escalada de privilegios. Esto permite a un atacante ejecutar comandos arbitrarios con privilegios de root dentro del contenedor, lo que podría llevar a un escape del contenedor y modificaciones no autorizadas de la infraestructura. Esto se ha corregido en la versión 1.0.1 mediante la implementación de una sanitización estricta de las entradas y delimitadores seguros en entrypoint.sh, la imposición de un usuario no-root (appuser) en el Dockerfile y el establecimiento de puertas de calidad de seguridad obligatorias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-88"
        }, {
          "lang" : "en",
          "value" : "CWE-250"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bleon-ethical:api-gateway-deploy:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A5A0946-4CC5-4873-AE25-335BFC40326F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bleon-ethical/api-gateway-deploy/releases/tag/Security",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/bleon-ethical/api-gateway-deploy/security/advisories/GHSA-chh5-w73q-4gmm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T15:21:38.060",
      "lastModified" : "2026-02-26T15:35:44.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the \"Upload File\" module, which corresponds to the API endpoint /api/files. Since the multipart file upload does not perform security checks on the uploaded file path, an attacker can perform path traversal by using `../` sequences in the filename field. The file write operation occurs before calling clear_filename and save_file, meaning there is no filtering of filenames or file types, allowing arbitrary content to be written to any path on the server. Version 25.9.1.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "MindsDB es una plataforma para construir inteligencia artificial a partir de datos empresariales. Antes de la versión 25.9.1.1, existe una vulnerabilidad de salto de ruta en la interfaz /api/files de MindsDB, que un atacante autenticado puede explotar para lograr la ejecución remota de comandos. La vulnerabilidad existe en el módulo 'Cargar archivo', que corresponde al endpoint de la API /api/files. Dado que la carga de archivos multipart no realiza comprobaciones de seguridad en la ruta del archivo cargado, un atacante puede realizar un salto de ruta mediante el uso de secuencias '../' en el campo del nombre de archivo. La operación de escritura de archivos ocurre antes de llamar a clear_filename y save_file, lo que significa que no hay filtrado de nombres de archivo o tipos de archivo, permitiendo que se escriba contenido arbitrario en cualquier ruta del servidor. La versión 25.9.1.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindsdb:mindsdb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.9.1.1",
            "matchCriteriaId" : "DF40BEB1-6A28-403A-8AC1-6488A2EF402D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mindsdb/mindsdb/commit/87a44bdb2b97f963e18f10a068e1a1e2690505ef",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/releases/tag/v25.9.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/security/advisories/GHSA-4894-xqv6-vrfq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27567",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T15:21:38.273",
      "lastModified" : "2026-02-26T19:59:33.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Payload is a free and open source headless content management system. Prior to 3.75.0, a Server-Side Request Forgery (SSRF) vulnerability exists in Payload's external file upload functionality. When processing external URLs for file uploads, insufficient validation of HTTP redirects could allow an authenticated attacker to access internal network resources. The Payload environment must have at least one collection with `upload` enabled and a user who has `create` access to that upload-enabled collection in order to be vulnerable. An authenticated user with upload collection write permissions could potentially access internal services. Response content from internal services could be retrieved through the application. This vulnerability has been patched in v3.75.0. As a workaround, one may mitigate this vulnerability by disabling external file uploads via the `disableExternalFile` upload collection option, or by restricting `create` access on upload-enabled collections to trusted users only."
      }, {
        "lang" : "es",
        "value" : "Payload es un sistema de gestión de contenido headless de código abierto y gratuito. Antes de la versión 3.75.0, existe una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en la funcionalidad de carga de archivos externos de Payload. Al procesar URLs externas para la carga de archivos, una validación insuficiente de las redirecciones HTTP podría permitir a un atacante autenticado acceder a recursos de red internos. El entorno de Payload debe tener al menos una colección con 'upload' habilitado y un usuario que tenga acceso de 'create' a esa colección con carga habilitada para ser vulnerable. Un usuario autenticado con permisos de escritura en la colección de carga podría potencialmente acceder a servicios internos. El contenido de la respuesta de los servicios internos podría recuperarse a través de la aplicación. Esta vulnerabilidad ha sido parcheada en la v3.75.0. Como solución alternativa, se puede mitigar esta vulnerabilidad deshabilitando las cargas de archivos externos a través de la opción de colección de carga 'disableExternalFile', o restringiendo el acceso de 'create' en colecciones con carga habilitada solo a usuarios de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payloadcms:payload:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.75.0",
            "matchCriteriaId" : "4B2A5539-08DE-4938-BAE6-7E8CC7364C4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/payloadcms/payload/commit/1041bb6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/payloadcms/payload/releases/tag/v3.75.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/payloadcms/payload/security/advisories/GHSA-hhfx-5x8j-f5f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27568",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T15:21:38.843",
      "lastModified" : "2026-02-26T19:57:52.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WWBN AVideo is an open source video platform. Prior to version 21.0, AVideo allows Markdown in video comments and uses Parsedown (v1.7.4) without Safe Mode enabled. Markdown links are not sufficiently sanitized, allowing `javascript:` URIs to be rendered as clickable links. An authenticated low-privilege attacker can post a malicious comment that injects persistent JavaScript. When another user clicks the link, the attacker can perform actions such as session hijacking, privilege escalation (including admin takeover), and data exfiltration. Version 21.0 contains a fix. As a workaround, validate and block unsafe URI schemes (e.g., `javascript:`) before rendering Markdown, and enable Parsedown Safe Mode."
      }, {
        "lang" : "es",
        "value" : "WWBN AVideo es una plataforma de vídeo de código abierto. Antes de la versión 21.0, AVideo permite Markdown en los comentarios de vídeo y usa Parsedown (v1.7.4) sin el Modo Seguro habilitado. Los enlaces de Markdown no están suficientemente saneados, lo que permite que las URI 'javascript:' se rendericen como enlaces clicables. Un atacante autenticado con pocos privilegios puede publicar un comentario malicioso que inyecte JavaScript persistente. Cuando otro usuario haga clic en el enlace, el atacante puede realizar acciones como el secuestro de sesión, la escalada de privilegios (incluida la toma de control de administrador) y la exfiltración de datos. La versión 21.0 contiene una corrección. Como solución alternativa, valide y bloquee esquemas URI inseguros (por ejemplo, 'javascript:') antes de renderizar Markdown, y habilite el Modo Seguro de Parsedown."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0",
            "matchCriteriaId" : "5999B108-3386-4F4C-A4E6-88EE7FF3DB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/commit/ade348ed6d28b3797162c3d9e98054fb09ec51d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/releases/tag/21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-rcqw-6466-3mv7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27584",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T15:21:39.010",
      "lastModified" : "2026-02-26T19:46:14.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Actual is a local-first personal finance tool. Prior to version 26.2.1, missing authentication middleware in the ActualBudget server component allows any unauthenticated user to query the SimpleFIN and Pluggy.ai integration endpoints and read sensitive bank account balance and transaction information. This vulnerability allows an unauthenticated attacker to read the bank account balance and transaction history of ActualBudget users. This vulnerability impacts all ActualBudget Server users with the SimpleFIN or Pluggy.ai integrations configured. The ActualBudget Server instance must be reachable over the network. Version 26.2.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Actual es una herramienta de finanzas personales local-first. Antes de la versión 26.2.1, la falta de middleware de autenticación en el componente de servidor de ActualBudget permitía a cualquier usuario no autenticado consultar los endpoints de integración de SimpleFIN y Pluggy.ai y leer información sensible sobre el saldo de cuentas bancarias y transacciones. Esta vulnerabilidad permite a un atacante no autenticado leer el saldo de la cuenta bancaria y el historial de transacciones de los usuarios de ActualBudget. Esta vulnerabilidad afecta a todos los usuarios del servidor de ActualBudget con las integraciones de SimpleFIN o Pluggy.ai configuradas. La instancia del servidor de ActualBudget debe ser accesible a través de la red. La versión 26.2.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actualbudget:actual:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "26.2.1",
            "matchCriteriaId" : "E756E18C-B2C7-46B3-AF5A-D5BCC86C53B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/actualbudget/actual/commit/ea937d100956ca56689ff852d99c28589e2a7d88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/actualbudget/actual/security/advisories/GHSA-m2cq-xjgm-f668",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27732",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T15:21:39.163",
      "lastModified" : "2026-02-25T16:52:33.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WWBN AVideo is an open source video platform. Prior to version 22.0, the `aVideoEncoder.json.php` API endpoint accepts a `downloadURL` parameter and fetches the referenced resource server-side without proper validation or an allow-list. This allows authenticated users to trigger server-side requests to arbitrary URLs (including internal network endpoints). An authenticated attacker can leverage SSRF to interact with internal services and retrieve sensitive data (e.g., internal APIs, metadata services), potentially leading to further compromise depending on the deployment environment. This issue has been fixed in AVideo version 22.0."
      }, {
        "lang" : "es",
        "value" : "WWBN AVideo es una plataforma de vídeo de código abierto. Antes de la versión 22.0, el endpoint de la API 'aVideoEncoder.json.php' acepta un parámetro 'downloadURL' y obtiene el recurso referenciado del lado del servidor sin una validación adecuada o una lista de permitidos. Esto permite a los usuarios autenticados activar solicitudes del lado del servidor a URLs arbitrarias (incluyendo endpoints de red internos). Un atacante autenticado puede aprovechar SSRF para interactuar con servicios internos y recuperar datos sensibles (por ejemplo, APIs internas, servicios de metadatos), lo que podría llevar a una mayor compromiso dependiendo del entorno de despliegue. Este problema ha sido solucionado en la versión 22.0 de AVideo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.0",
            "matchCriteriaId" : "5F864146-377D-4102-BD9E-2ECE40E761AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/commit/384ef2548093f4cbb1bfac00f1f429fe57fab853",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/releases/tag/22.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-h39h-7cvg-q7j6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3101",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T15:21:41.103",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Intelbras TIP 635G 1.12.3.5. Esta vulnerabilidad afecta código desconocido del componente Gestor de Ping. Si se manipula se puede provocar una inyección de comandos del sistema operativo. El ataque puede ejecutarse en remoto. El exploit se ha hecho público y podría utilizarse. Con antelación a esta divulgación, se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intelbras:tip_635g_firmware:1.12.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "218E8617-BE39-4F2E-8792-7D3CD7F16D21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intelbras:tip_635g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C894F8-3128-4302-9E26-D4A73F991FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.347527",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.347527",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/eldruin/Intelbras-TIP-635G-Authenticated-OS-Command-Injection-Leading-to-Root-RCE-30627474cccb80929328e7c3b3ea0f9b",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3102",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-24T15:21:41.317",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 13.50 is capable of addressing this issue. Patch name: e9609a9bcc0d32bd252a709a562fb822d6dd86f7. Upgrading the affected component is recommended."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en exiftool hasta la versión 13.49 en macOS. Este problema afecta a la función SetMacOSTags del archivo lib/Image/ExifTool/MacOS.pm del componente PNG File Parser. Si se manipula el argumento DateTimeOriginal se causa una inyección de comandos. El ataque puede llevarse a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se puede solucionar el problema actualizando a la versión 13.50. Nombre del parche: e9609a9bcc0d32bd252a709a562fb822d6dd86f7. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiftool_project:exiftool:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.50",
            "matchCriteriaId" : "E1379709-89F5-4873-89F4-6439BCEBB943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/exiftool/exiftool/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/exiftool/exiftool/commit/e9609a9bcc0d32bd252a709a562fb822d6dd86f7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/exiftool/exiftool/releases/tag/13.50",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347528",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.347528",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758146",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=akk0vmilfb4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23678",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:08.090",
      "lastModified" : "2026-02-25T17:12:08.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface. By injecting the %1a character into the hostname parameter, an authenticated attacker with access to the web interface can execute arbitrary CLI commands on the device."
      }, {
        "lang" : "es",
        "value" : "El firmware del switch de red Binardat 10G08-0800GSM versión V300SP10260209 y anteriores contiene una vulnerabilidad de inyección de comandos en la función de diagnóstico traceroute de la interfaz de gestión web del dispositivo afectado. Al inyectar el carácter %1a en el parámetro hostname, un atacante autenticado con acceso a la interfaz web puede ejecutar comandos CLI arbitrarios en el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-traceroute-cli-command-injection",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27507",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:08.617",
      "lastModified" : "2026-02-25T17:05:34.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device."
      }, {
        "lang" : "es",
        "value" : "El firmware del switch de red Binardat 10G08-0800GSM, en versiones V300SP10260209 y anteriores, tienen almacenadas en el código credenciales de administración que no pueden ser cambiadas por los usuarios. Si se conocen estas credenciales se puede tener un acceso completo al dispositivo, como adminitrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-hard-coded-credentials",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27515",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:08.830",
      "lastModified" : "2026-02-25T17:25:03.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware del switch de red Binardat 10G08-0800GSM anteriores a V300SP10260209 generan identificadores de sesión numéricos predecibles en la interfaz de gestión web. Un atacante puede adivinar IDs de sesión válidos y secuestrar sesiones autenticadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-predictable-session-identifiers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27516",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:09.030",
      "lastModified" : "2026-03-02T15:16:36.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials."
      }, {
        "lang" : "es",
        "value" : "La versión de firmware V300SP10260209 y anteriores del switch de red Binardat 10G08-0800GSM exponen las contraseñas de usuario en texto plano dentro de la interfaz de admnistración y las respuestas HTTP, lo que permite recuperar credenciales válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        }, {
          "lang" : "en",
          "value" : "CWE-317"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-plaintext-password-exposure",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27517",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:09.207",
      "lastModified" : "2026-03-02T15:16:37.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the context of an authenticated user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware V300SP10260209 y anteriores del switch de red Binardat 10G08-0800GSM reflejan entrada de usuario no saneada en la interfaz web, permitiendo a un atacante inyectar y ejecutar JavaScript arbitrario en el contexto de un usuario autenticado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-xss",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27518",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:09.407",
      "lastModified" : "2026-02-25T17:13:33.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface. An attacker can trick an authenticated administrator into performing unauthorized configuration changes."
      }, {
        "lang" : "es",
        "value" : "La versión V300SP10260209 y anteriores del firmware del switch de red Binardat 10G08-0800GSM carecen de protecciones CSRF para acciones de cambio de estado en la interfaz de administración. Un atacante puede engañar a un administrador autenticado para que realice cambios de configuración no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-csrf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27519",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:09.607",
      "lastModified" : "2026-02-25T17:25:22.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections."
      }, {
        "lang" : "es",
        "value" : "Las versiones V300SP10260209 y anteriores del firmware del switch de red Binardat 10G08-0800GSM utilizan RC4 con una clave fija incrustada en JavaScript del lado del cliente. Debido a que la clave es estática y está expuesta, un atacante puede descifrar valores protegidos y eludir las protecciones de confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        }, {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-hard-coded-rc4-encryption-key",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27520",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:09.813",
      "lastModified" : "2026-02-25T17:25:34.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interface. Because Base64 is reversible and provides no confidentiality, an attacker who can access the cookie value can recover the plaintext password."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware del switch de red Binardat 10G08-0800GSM anteriores a V300SP10260209 almacenan una contraseña de usuario en una cookie del lado del cliente como un valor codificado en Base64 accesible a través de la interfaz web. Debido a que Base64 es reversible y no proporciona confidencialidad, un atacante que puede acceder al valor de la cookie puede recuperar la contraseña en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-base64-encoded-password-stored-in-cookie",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27521",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T16:24:10.000",
      "lastModified" : "2026-03-02T15:16:37.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials."
      }, {
        "lang" : "es",
        "value" : "La versión de firmware V300SP10260209 y anteriores del switch de red Binardat 10G08-0800GSM no implementa limitación de tasa o bloqueo de cuenta en intentos de inicio de sesión fallidos, permitiendo ataques de fuerza bruta contra las credenciales de usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "V300SP10260209",
            "matchCriteriaId" : "BB8E3245-044C-496C-9521-04CE9E097A74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466EE3BA-33F8-476B-A66B-02FC3B93CB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-missing-login-rate-limiting",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27571",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:03.393",
      "lastModified" : "2026-02-26T19:06:26.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation bound the memory size of a NATS message but did not independently bound the memory consumption of the memory stream when constructing a NATS message which might then fail validation for size reasons. An attacker can use a compression bomb to cause excessive memory consumption, often resulting in the operating system terminating the server process. The use of compression is negotiated before authentication, so this does not require valid NATS credentials to exploit. The fix, present in versions 2.11.2 and 2.12.3, was to bounds the decompression to fail once the message was too large, instead of continuing on. The vulnerability only affects deployments which use WebSockets and which expose the network port to untrusted end-points."
      }, {
        "lang" : "es",
        "value" : "NATS-Server es un servidor de alto rendimiento para NATS.io, un sistema de mensajería nativo de la nube y el perímetro (edge). El manejo de mensajes NATS por WebSockets gestiona mensajes comprimidos a través de la compresión negociada por WebSockets. Antes de las versiones 2.11.2 y 2.12.3, la implementación limitaba el tamaño de la memoria de un mensaje NATS, pero no limitaba de forma independiente el consumo de memoria del flujo de memoria al construir un mensaje NATS que luego podría fallar la validación por razones de tamaño. Un atacante puede usar una bomba de compresión para provocar un consumo excesivo de memoria, lo que a menudo resulta en que el sistema operativo termine el proceso del servidor. El uso de la compresión se negocia antes de la autenticación, por lo que esto no requiere credenciales NATS válidas para explotarlo. La solución, presente en las versiones 2.11.2 y 2.12.3, fue establecer límites para que la descompresión fallara una vez que el mensaje fuera demasiado grande, en lugar de continuar. La vulnerabilidad solo afecta a las implementaciones que usan WebSockets y que exponen el puerto de red a endpoints no confiables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:nats-server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.12",
            "matchCriteriaId" : "84A02A21-D310-4BAA-BE58-472410934027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:nats-server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.12.0",
            "versionEndExcluding" : "2.12.3",
            "matchCriteriaId" : "82EF19F0-15AD-422C-86C7-0D669060AC6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nats-io/nats-server/releases/tag/v2.11.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nats-io/nats-server/releases/tag/v2.12.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27585",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:03.620",
      "lastModified" : "2026-02-25T17:13:16.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations. Version 2.11.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que usa TLS por defecto. Antes de la versión 2.11.1, la rutina de saneamiento de rutas en el file matcher no sanea las barras invertidas, lo que puede llevar a la elusión de protecciones de seguridad relacionadas con la ruta. Afecta a usuarios con configuraciones específicas de Caddy y del entorno. La versión 2.11.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "9AD1B432-AFA3-4A05-A687-F6092CDB6498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L398",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27586",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:03.793",
      "lastModified" : "2026-02-25T17:14:19.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in `ClientAuthentication.provision()` cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts without error but accepts any client certificate signed by any system-trusted CA, completely bypassing the intended private CA trust boundary. Any deployment using `trusted_ca_cert_file` or `trusted_ca_certs_pem_files` for mTLS will silently degrade to accepting any system-trusted client certificate if the CA file becomes unavailable. This can happen due to a typo in the path, file rotation, corruption, or permission changes. The server gives no indication that mTLS is misconfigured. Version 2.11.1 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que usa TLS por defecto. Antes de la versión 2.11.1, dos errores silenciados en `ClientAuthentication.provision()` causan que la autenticación de certificados de cliente mTLS falle silenciosamente en modo abierto cuando un archivo de certificado de CA falta, es ilegible o está malformado. El servidor se inicia sin error pero acepta cualquier certificado de cliente firmado por cualquier CA de confianza del sistema, eludiendo completamente el límite de confianza de CA privada previsto. Cualquier despliegue que use `trusted_ca_cert_file` o `trusted_ca_certs_pem_files` para mTLS se degradará silenciosamente para aceptar cualquier certificado de cliente de confianza del sistema si el archivo de CA deja de estar disponible. Esto puede ocurrir debido a un error tipográfico en la ruta, rotación de archivos, corrupción o cambios de permisos. El servidor no da ninguna indicación de que mTLS está mal configurado. La versión 2.11.1 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "9AD1B432-AFA3-4A05-A687-F6092CDB6498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/moscowchill/9566c79c76c0b64c57f8bd0716f97c48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-hffm-g8v7-wrv7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27587",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:03.953",
      "lastModified" : "2026-02-25T17:11:25.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP `path` request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences (`%xx`) it compares against the request's escaped path without lowercasing. An attacker can bypass path-based routing and any access controls attached to that route by changing the casing of the request path. Version 2.11.1 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que utiliza TLS por defecto. Antes de la versión 2.11.1, el comparador de solicitudes 'path' HTTP de Caddy está diseñado para ser insensible a mayúsculas y minúsculas, pero cuando el patrón de coincidencia contiene secuencias de escape de porcentaje ('%xx'), compara con la ruta escapada de la solicitud sin convertir a minúsculas. Un atacante puede eludir el enrutamiento basado en rutas y cualquier control de acceso asociado a esa ruta cambiando el uso de mayúsculas y minúsculas de la ruta de la solicitud. La versión 2.11.1 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10.2",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "F0DAFEB2-036C-42D4-9AEF-F962268F5873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-g7pc-pc7g-h8jh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27588",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:04.163",
      "lastModified" : "2026-02-25T17:10:48.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP `host` request matcher is documented as case-insensitive, but when configured with a large host list (>100 entries) it becomes case-sensitive due to an optimized matching path. An attacker can bypass host-based routing and any access controls attached to that route by changing the casing of the `Host` header. Version 2.11.1 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que usa TLS por defecto. Antes de la versión 2.11.1, el comparador de solicitudes 'host' HTTP de Caddy está documentado como insensible a mayúsculas y minúsculas, pero cuando se configura con una lista de hosts grande (&gt;100 entradas) se vuelve sensible a mayúsculas y minúsculas debido a una ruta de comparación optimizada. Un atacante puede eludir el enrutamiento basado en host y cualquier control de acceso asociado a esa ruta cambiando el uso de mayúsculas y minúsculas del encabezado 'Host'. La versión 2.11.1 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10.2",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "F0DAFEB2-036C-42D4-9AEF-F962268F5873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-x76f-jf84-rqj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27589",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:04.317",
      "lastModified" : "2026-02-25T17:08:56.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API (default listen `127.0.0.1:2019`) exposes a state-changing `POST /load` endpoint that replaces the entire running configuration. When origin enforcement is not enabled (`enforce_origin` not configured), the admin endpoint accepts cross-origin requests (e.g., from attacker-controlled web content in a victim browser) and applies an attacker-supplied JSON config. This can change the admin listener settings and alter HTTP server behavior without user intent. Version 2.11.1 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que usa TLS por defecto. Antes de la versión 2.11.1, la API de administración local de Caddy (escucha por defecto '127.0.0.1:2019') expone un endpoint 'POST /load' que cambia el estado y reemplaza toda la configuración en ejecución. Cuando la aplicación de origen no está habilitada ('enforce_origin' no configurado), el endpoint de administración acepta solicitudes de origen cruzado (por ejemplo, desde contenido web controlado por un atacante en un navegador de la víctima) y aplica una configuración JSON proporcionada por el atacante. Esto puede cambiar la configuración del oyente de administración y alterar el comportamiento del servidor HTTP sin intención del usuario. La versión 2.11.1 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "9AD1B432-AFA3-4A05-A687-F6092CDB6498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-879p-475x-rqh2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/25079818/poc.zip",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/user-attachments/files/25079820/PR_DESCRIPTION.md",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27590",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T17:29:04.493",
      "lastModified" : "2026-02-25T17:07:09.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because `strings.ToLower()` can change UTF-8 byte length for some characters. As a result, Caddy can derive an incorrect `SCRIPT_NAME`/`SCRIPT_FILENAME` and `PATH_INFO`, potentially causing a request that contains `.php` to execute a different on-disk file than intended (path confusion). In setups where an attacker can control file contents (e.g., upload features), this can lead to unintended PHP execution of non-.php files (potential RCE depending on deployment). Version 2.11.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que utiliza TLS por defecto. Antes de la versión 2.11.1, la lógica de división de rutas FastCGI de Caddy calcula el índice de división en una copia en minúsculas de la ruta de la solicitud y luego utiliza ese índice de bytes para segmentar la ruta original. Esto no es seguro para Unicode porque `strings.ToLower()` puede cambiar la longitud de bytes UTF-8 para algunos caracteres. Como resultado, Caddy puede derivar un `SCRIPT_NAME`/`SCRIPT_FILENAME` y `PATH_INFO` incorrectos, lo que podría causar que una solicitud que contiene .php ejecute un archivo en disco diferente al previsto (confusión de rutas). En configuraciones donde un atacante puede controlar el contenido de los archivos (por ejemplo, funciones de carga), esto puede llevar a la ejecución no intencionada de PHP de archivos que no son .php (RCE potencial dependiendo de la implementación). La versión 2.11.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-180"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "9AD1B432-AFA3-4A05-A687-F6092CDB6498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/frankenphp/security/advisories/GHSA-g966-83w7-6w38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25603",
      "sourceIdentifier" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "published" : "2026-02-24T18:29:33.167",
      "lastModified" : "2026-02-26T18:10:54.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context of a root user.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Limitación Inadecuada de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta') en Linksys MR9600, Linksys MX4200 permite que el contenido de una partición de unidad USB pueda montarse en una ubicación arbitraria del sistema de archivos. Esto puede resultar en la ejecución de scripts de shell en el contexto de un usuario root. Este problema afecta a MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linksys:mr9600_firmware:1.0.4.205530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E39864-0A63-4188-A91B-CA024C56237C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:linksys:mr9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEF496D6-F5A4-4859-9BAC-016EB64A701C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linksys:mx4200_firmware:1.0.4.205530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7885670B-8DCF-42F3-8644-B6F240D5E84B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:linksys:mx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D53D1E6-E087-4837-A2A4-3512644E3DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-001.txt",
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26222",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T18:29:33.293",
      "lastModified" : "2026-02-27T20:05:06.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI \"doclinkServer.soap\". The service does not require authentication and is vulnerable to unsafe object unmarshalling, allowing remote attackers to read arbitrary files from the underlying system by specifying local file paths. Additionally, attackers can coerce SMB authentication via UNC paths and write arbitrary files to server locations. Because writable paths may be web-accessible under IIS, this can result in unauthenticated remote code execution or denial of service through file overwrite."
      }, {
        "lang" : "es",
        "value" : "Altec DocLink (ahora mantenido por Beyond Limits Inc.) versión 4.0.336.0 expone endpoints inseguros de .NET Remoting sobre TCP y HTTP/SOAP a través de Altec.RDCHostService.exe usando el ObjectURI 'doclinkServer.soap'. El servicio no requiere autenticación y es vulnerable a la deserialización insegura de objetos, permitiendo a atacantes en remoto leer archivos arbitrarios del sistema subyacente especificando rutas de archivos locales. Además, los atacantes pueden forzar la autenticación SMB a través de rutas UNC y escribir archivos arbitrarios en ubicaciones del servidor. Debido a que las rutas escribibles pueden ser accesibles por web bajo IIS, esto puede resultar en ejecución remota de código no autenticada o denegación de servicio mediante la sobrescritura de archivos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyond:altec_doclink:4.0.336.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "115440AE-8BBE-4377-BF90-A2C0A69897D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://doclinkai.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/doclink-net-remoting-unauthenticated-arbitrary-file-read-write-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27156",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T18:29:33.490",
      "lastModified" : "2026-02-26T18:10:00.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements (`Element.run_method()`, `AgGrid.run_grid_method()`, `EChart.run_chart_method()`, and others) use an `eval()` fallback in the JavaScript-side `runMethod()` function. When user-controlled input is passed as the method name, an attacker can inject arbitrary JavaScript that executes in the victim's browser. Additionally, `Element.run_method()` and `Element.get_computed_prop()` used string interpolation instead of `json.dumps()` for the method/property name, allowing quote injection to break out of the intended string context. Version 3.8.0 contains a fix."
      }, {
        "lang" : "es",
        "value" : "NiceGUI es un framework de Interfaz de Usuario basado en Python. Antes de la versión 3.8.0, varias APIs de NiceGUI que ejecutan métodos en elementos del lado del cliente ('Element.run_method()', 'AgGrid.run_grid_method()', 'EChart.run_chart_method()' y otras) usan un mecanismo de reserva 'eval()' en la función 'runMethod()' del lado de JavaScript. Cuando se pasa una entrada controlada por el usuario como nombre del método, un atacante puede inyectar JavaScript arbitrario que se ejecuta en el navegador de la víctima. Además, 'Element.run_method()' y 'Element.get_computed_prop()' usaban interpolación de cadenas en lugar de 'json.dumps()' para el nombre del método/propiedad, lo que permitía la inyección de comillas para escapar del contexto de cadena previsto. La versión 3.8.0 contiene una corrección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.0",
            "matchCriteriaId" : "1FE39EE2-B868-4B38-8F63-309587634F75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zauberzeug/nicegui/commit/1861f59cc374ca0dc9d970b157ef3774720f8dbf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zauberzeug/nicegui/security/advisories/GHSA-78qv-3mpx-9cqq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27468",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T18:29:33.660",
      "lastModified" : "2026-02-26T15:36:00.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval by an administrator. In versions 4.4.0 through 4.4.13 and 4.5.0 through 4.5.6, actions performed by a FASP to subscribe to account/content lifecycle events or to backfill content did not check properly whether the FASP was actually approved. This only affects Mastodon servers that have opted in to testing the experimental FASP feature by setting the environment variable `EXPERIMENTAL_FEATURES` to a value including `fasp`. An attacker can make subscriptions and request content backfill without approval by an administrator. Done once, this leads to minor information leak of URIs that are publicly available anyway. But done several times this is a serious vector for DOS, putting pressure on the sidekiq worker responsible for the `fasp` queue. The fix is included in the 4.4.14 and 4.5.7 releases. Admins that are actively testing the experimental \"fasp\" feature should update their systems. Servers not using the experimental feature flag `fasp` are not affected."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito y de código abierto basado en ActivityPub. El registro FASP requiere aprobación manual por parte de un administrador. En las versiones 4.4.0 a 4.4.13 y 4.5.0 a 4.5.6, las acciones realizadas por un FASP para suscribirse a eventos del ciclo de vida de cuentas/contenido o para rellenar contenido (backfill) no verificaban correctamente si el FASP estaba realmente aprobado. Esto solo afecta a los servidores de Mastodon que han optado por probar la característica experimental FASP configurando la variable de entorno 'EXPERIMENTAL_FEATURES' con un valor que incluya 'fasp'. Un atacante puede realizar suscripciones y solicitar el rellenado de contenido (backfill) sin la aprobación de un administrador. Hecho una vez, esto conduce a una fuga menor de información de URIs que de todos modos están disponibles públicamente. Pero hecho varias veces, esto es un vector serio para DoS, ejerciendo presión sobre el worker de sidekiq responsable de la cola 'fasp'. La solución está incluida en las versiones 4.4.14 y 4.5.7. Los administradores que están probando activamente la característica experimental 'fasp' deberían actualizar sus sistemas. Los servidores que no utilizan la bandera de característica experimental 'fasp' no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.14",
            "matchCriteriaId" : "F8A96B12-8C08-4A0C-88A8-B7B2B7AED3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.7",
            "matchCriteriaId" : "65E9009A-6D3F-4758-8EAA-6D832F06F3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/commit/6ba6285a73c3a8b281123814d45f534e3bcebb96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-qgmm-vr4c-ggjg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1768",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-02-24T20:27:46.300",
      "lastModified" : "2026-02-26T17:23:01.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects Devolutions Server: before 2025.3.15."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de envenenamiento de caché de permisos en Devolutions Servidor permite a los usuarios autenticados eludir permisos para acceder a entradas. Este problema afecta a Devolutions Servidor: antes de 2025.3.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.15.0",
            "matchCriteriaId" : "6DB87A4B-D40B-442F-8BF5-CA935BFADB3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0004/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22765",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-24T20:27:46.790",
      "lastModified" : "2026-02-25T14:50:10.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges."
      }, {
        "lang" : "es",
        "value" : "Dell Wyse Management Suite en versiones anteriores a WMS 5.5, contiene una vulnerabilidad de autorización faltante. Un atacante con pocos privilegios con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a una Elevación de Privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "2785B726-7FD1-41C8-91F9-46100C01E215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22766",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-24T20:27:46.957",
      "lastModified" : "2026-02-25T14:50:27.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution."
      }, {
        "lang" : "es",
        "value" : "Dell Wyse Management Suite en versiones anteriores a WMS 5.5, contiene una vulnerabilidad de Carga sin Restricciones de Archivo con Tipo Peligroso. Un atacante con muchos privilegios y con acceso remoto podría, potencialmente, explotar esta vulnerabilidad, lo que llevaría a la ejecución remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "2785B726-7FD1-41C8-91F9-46100C01E215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23858",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-24T20:27:47.303",
      "lastModified" : "2026-02-25T14:50:30.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script Injection."
      }, {
        "lang" : "es",
        "value" : "Dell Wyse Management Suite en versiones anteriores a WMS 5.5, contiene una vulnerabilidad de Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('Cross-site Scripting'). Un atacante con pocos privilegios y con acceso remoto podría, potencialmente, explotar esta vulnerabilidad, lo que lleva a la Inyección de Scripts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "2785B726-7FD1-41C8-91F9-46100C01E215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23859",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-02-24T20:27:47.460",
      "lastModified" : "2026-02-25T14:50:35.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to Protection mechanism bypass."
      }, {
        "lang" : "es",
        "value" : "Dell Wyse Management Suite en versiones anteriores a WMS 5.5, contiene una vulnerabilidad de aplicación del lado del cliente de la seguridad del lado del servidor. Un atacante con muchos privilegios y con acceso remoto podría, potencialmente, explotar esta vulnerabilidad para eludir el mecanismo de protección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "2785B726-7FD1-41C8-91F9-46100C01E215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24241",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2026-02-24T20:27:47.620",
      "lastModified" : "2026-02-27T20:01:49.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Delegated Licensing Service para todas las plataformas de dispositivos contiene una vulnerabilidad donde un atacante podría explotar un problema de autenticación inadecuada. Un exploit exitoso de esta vulnerabilidad podría conducir a la revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:delegated_license_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "E71A2F87-5ED1-46C6-9984-439F7D48BACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:delegated_license_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.6.0",
            "matchCriteriaId" : "A14A3C30-1897-45C8-9FE1-763AEFD0B15E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-24241",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5789",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-24241",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26340",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T20:27:47.793",
      "lastModified" : "2026-02-26T17:38:44.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.181.5 y anteriores de las familias de dispositivos Tattile Smart+, Vega y Basic exponen flujos RTSP sin requerir autenticación. Un atacante remoto puede conectarse al servicio RTSP y acceder a flujos de video/audio en vivo sin credenciales válidas, lo que resulta en la divulgación no autorizada de datos de vigilancia."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "75DF648A-23A7-4CD7-A7AA-EC4E5041C11A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D09F0-9D90-4D42-8866-351C464B45BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:tolling\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "7CC79296-730F-40BF-A4CC-CB711452BFCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:tolling\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7085AB6F-B3A7-48B3-996A-DF842B2D7217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_speed_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "6FCA661E-7976-4F6A-A79E-FFC3355C4A90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+_speed:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DE404C-063D-4775-9C8B-972D5C34B128"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_traffic_light_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "83B0F41B-E7F4-4D72-B041-A27AC19EF8BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+_traffic_light:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9648971C-A3ED-4E3C-AC58-EC8E24C1BACD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:axle_counter_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "A0360803-0FF4-46FB-913D-FD0724C74139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:axle_counter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48535F53-6935-4F1B-B0CA-71721D82B344"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega53_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "09CF177A-3D69-4F47-8028-F83493CF0178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA18F44D-09EC-462A-AEE1-2734F74D9214"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega33_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "FC4C241F-FF66-480B-8708-FDC1814DE167"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega33:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88626B12-E13C-4606-81E1-998C74CD6485"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "026FF8B9-AEA6-45FF-8FA9-BE97C20A66E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918205FF-3BC6-4A38-980A-CE0BF36EE9EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:basic_mk2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "72B5F07C-949A-440F-AB94-46C5AF5F46C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:basic_mk2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59DD6EA-AE66-4AF6-A2F0-5A84F2F809BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:anpr_mobile_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "FF40F60E-1D89-4A51-B1AC-0BE34878AD1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:anpr_mobile:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7456A228-07C2-4E9A-98A9-8485F993C281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tattile.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-unauthenticated-rtsp-stream-disclosure",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5978.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26341",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T20:27:48.103",
      "lastModified" : "2026-02-26T17:31:23.003",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.181.5 y anteriores de las familias de dispositivos Tattile Smart+, Vega y Basic se envían con credenciales predeterminadas que no se exige cambiar durante la instalación o la puesta en marcha. Un atacante que pueda acceder a la interfaz de gestión puede autenticarse usando las credenciales predeterminadas y obtener acceso de administrador, lo que permite el acceso no autorizado a la configuración y los datos del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "75DF648A-23A7-4CD7-A7AA-EC4E5041C11A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D09F0-9D90-4D42-8866-351C464B45BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:tolling\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "7CC79296-730F-40BF-A4CC-CB711452BFCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:tolling\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7085AB6F-B3A7-48B3-996A-DF842B2D7217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_speed_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "6FCA661E-7976-4F6A-A79E-FFC3355C4A90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+_speed:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DE404C-063D-4775-9C8B-972D5C34B128"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_traffic_light_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "83B0F41B-E7F4-4D72-B041-A27AC19EF8BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+_traffic_light:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9648971C-A3ED-4E3C-AC58-EC8E24C1BACD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:axle_counter_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "A0360803-0FF4-46FB-913D-FD0724C74139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:axle_counter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48535F53-6935-4F1B-B0CA-71721D82B344"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega53_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "09CF177A-3D69-4F47-8028-F83493CF0178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA18F44D-09EC-462A-AEE1-2734F74D9214"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega33_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "FC4C241F-FF66-480B-8708-FDC1814DE167"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega33:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88626B12-E13C-4606-81E1-998C74CD6485"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "026FF8B9-AEA6-45FF-8FA9-BE97C20A66E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918205FF-3BC6-4A38-980A-CE0BF36EE9EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:basic_mk2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "72B5F07C-949A-440F-AB94-46C5AF5F46C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:basic_mk2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59DD6EA-AE66-4AF6-A2F0-5A84F2F809BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:anpr_mobile_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "FF40F60E-1D89-4A51-B1AC-0BE34878AD1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:anpr_mobile:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7456A228-07C2-4E9A-98A9-8485F993C281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tattile.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-default-credentials",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5977.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26342",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T20:27:48.310",
      "lastModified" : "2026-02-27T03:10:51.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.181.5 y anteriores de las familias de dispositivos Tattile Smart+, Vega y Basic implementan un token de autenticación (X-User-Token) con caducidad insuficiente. Un atacante que obtiene un token válido (por ejemplo, mediante intercepción, exposición de registros o reutilización de tokens en un sistema compartido) puede continuar autenticándose en la interfaz de gestión hasta que el token sea revocado, lo que permite el acceso no autorizado a las funciones y datos del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "75DF648A-23A7-4CD7-A7AA-EC4E5041C11A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19D09F0-9D90-4D42-8866-351C464B45BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:tolling\\+_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "7CC79296-730F-40BF-A4CC-CB711452BFCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:tolling\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7085AB6F-B3A7-48B3-996A-DF842B2D7217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_speed_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "6FCA661E-7976-4F6A-A79E-FFC3355C4A90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+_speed:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DE404C-063D-4775-9C8B-972D5C34B128"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:smart\\+_traffic_light_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "83B0F41B-E7F4-4D72-B041-A27AC19EF8BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:smart\\+_traffic_light:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9648971C-A3ED-4E3C-AC58-EC8E24C1BACD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:axle_counter_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "A0360803-0FF4-46FB-913D-FD0724C74139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:axle_counter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48535F53-6935-4F1B-B0CA-71721D82B344"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega53_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "09CF177A-3D69-4F47-8028-F83493CF0178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA18F44D-09EC-462A-AEE1-2734F74D9214"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega33_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "FC4C241F-FF66-480B-8708-FDC1814DE167"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega33:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88626B12-E13C-4606-81E1-998C74CD6485"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:vega11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "026FF8B9-AEA6-45FF-8FA9-BE97C20A66E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:vega11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918205FF-3BC6-4A38-980A-CE0BF36EE9EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:basic_mk2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "72B5F07C-949A-440F-AB94-46C5AF5F46C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:basic_mk2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59DD6EA-AE66-4AF6-A2F0-5A84F2F809BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tattile:anpr_mobile_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.181.5",
            "matchCriteriaId" : "FF40F60E-1D89-4A51-B1AC-0BE34878AD1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tattile:anpr_mobile:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7456A228-07C2-4E9A-98A9-8485F993C281"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tattile.com/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-insufficient-session-token-expiration",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5976.php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T20:27:50.173",
      "lastModified" : "2026-02-26T21:17:15.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval by an administrator. In versions 4.4.0 through 4.4.13 and 4.5.0 through 4.5.6, an unauthenticated attacker can register a FASP with an attacker-chosen `base_url` that includes or resolves to a local / internal address, leading to the Mastodon server making requests to that address. This only affects Mastodon servers that have opted in to testing the experimental FASP feature by setting the environment variable `EXPERIMENTAL_FEATURES` to a value including `fasp`. An attacker can force the Mastodon server to make http(s) requests to internal systems. While they cannot control the full URL that is being requested (only the prefix) and cannot see the result of those requests, vulnerabilities or other undesired behavior could be triggered in those systems. The fix is included in the 4.4.14 and 4.5.7 releases. Admins that are actively testing the experimental \"fasp\" feature should update their systems. Servers not using the experimental feature flag `fasp` are not affected."
      }, {
        "lang" : "es",
        "value" : "Mastodon es un servidor de red social gratuito, de código abierto, basado en ActivityPub. El registro de FASP requiere aprobación manual por parte de un administrador. En las versiones 4.4.0 a 4.4.13 y 4.5.0 a 4.5.6, un atacante no autenticado puede registrar un FASP con una 'base_url' elegida por el atacante que incluye o se resuelve en una dirección local / interna, lo que lleva al servidor de Mastodon a realizar solicitudes a esa dirección. Esto solo afecta a los servidores de Mastodon que han optado por probar la característica experimental FASP estableciendo la variable de entorno 'EXPERIMENTAL_FEATURES' a un valor que incluya 'fasp'. Un atacante puede forzar al servidor de Mastodon a realizar solicitudes http(s) a sistemas internos. Aunque no pueden controlar la URL completa que se solicita (solo el prefijo) y no pueden ver el resultado de esas solicitudes, se podrían activar vulnerabilidades u otros comportamientos no deseados en esos sistemas. La solución está incluida en las versiones 4.4.14 y 4.5.7. Los administradores que están probando activamente la característica experimental 'fasp' deberían actualizar sus sistemas. Los servidores que no utilizan la bandera de característica experimental 'fasp' no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.14",
            "matchCriteriaId" : "F8A96B12-8C08-4A0C-88A8-B7B2B7AED3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.7",
            "matchCriteriaId" : "65E9009A-6D3F-4758-8EAA-6D832F06F3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mastodon/mastodon/commit/7b85d2182361e68d51d9a02f94fb1070b5f503b1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-46w6-g98f-wxqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3105",
      "sourceIdentifier" : "security@mautic.org",
      "published" : "2026-02-24T20:27:50.713",
      "lastModified" : "2026-02-27T03:11:21.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Contact Activity timeline where the parameter responsible for determining the sort direction was not strictly validated against an allowlist, potentially allowing authenticated users to inject arbitrary SQL commands via the API.\n\nMitigationPlease update to 4.4.19, 5.2.10, 6.0.8, 7.0.1 or later.\n\nWorkaroundsNone.\n\nReferencesIf you have any questions or comments about this advisory:\n\nEmail us at security@mautic.org"
      }, {
        "lang" : "es",
        "value" : "Resumen:\nEste aviso aborda una vulnerabilidad de inyección SQL en el endpoint de la API utilizado para recuperar actividades de contacto. Existe una vulnerabilidad en la construcción de la consulta para la línea de tiempo de Actividad de Contacto donde el parámetro responsable de determinar la dirección de ordenación no fue validado estrictamente contra una lista de permitidos, permitiendo potencialmente a usuarios autenticados inyectar comandos SQL arbitrarios a través de la API.\n\nMitigación:\nPor favor, actualice a 4.4.19, 5.2.10, 6.0.8, 7.0.1 o posterior.\n\nSoluciones provisionales:\nNinguna.\n\nReferencias:\nSi tiene alguna pregunta o comentario sobre este aviso:\nEscriba un correo electrónico a security@mautic.org"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@mautic.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mautic.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "4.4.19",
            "matchCriteriaId" : "810298B5-F979-4BED-B035-F82C33CB1875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.10",
            "matchCriteriaId" : "B25B2FE0-300C-44E0-9D0C-7F07C7B44829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.8",
            "matchCriteriaId" : "831BD706-7A50-4774-A7D1-403830DDC0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.1",
            "matchCriteriaId" : "1CC2F790-64D4-42A3-8435-F6D6B1F62146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/security/advisories/GHSA-r5j5-q42h-fc93",
        "source" : "security@mautic.org",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3131",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-02-24T20:27:50.883",
      "lastModified" : "2026-02-26T17:23:03.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper\n access control in multiple DVLS REST API endpoints in Devolutions \nServer 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en múltiples endpoints de la API REST de DVLS en Devolutions Server 2025.3.14.0 y versiones anteriores permite a un usuario autenticado con permisos de solo lectura acceder a datos de conexión sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.15.0",
            "matchCriteriaId" : "6DB87A4B-D40B-442F-8BF5-CA935BFADB3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0004/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21410",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-24T21:16:25.790",
      "lastModified" : "2026-02-27T03:13:28.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution."
      }, {
        "lang" : "es",
        "value" : "InSAT MasterSCADA BUK-TS es susceptible a inyección SQL a través de su interfaz web principal. Los usuarios maliciosos que utilizan el endpoint vulnerable son, potencialmente, capaces de causar ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insat:masterscada:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A21FFF-7C80-486C-87B5-FC8A0C96599A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-01.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource", "VDB Entry", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22553",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-24T21:16:28.713",
      "lastModified" : "2026-02-27T03:15:54.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones de InSAT MasterSCADA BUK-TS son susceptibles a la inyección de comandos del sistema operativo a través de un campo en su interfaz web MMadmServ. Los usuarios malintencionados que utilizan el endpoint vulnerable son potencialmente capaces de provocar una ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insat:masterscada:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A21FFF-7C80-486C-87B5-FC8A0C96599A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-01.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24443",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T21:16:29.293",
      "lastModified" : "2026-02-26T03:00:27.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker who gains temporary access to an authenticated user session can change the account password without knowledge of the original credentials. This enables persistent account takeover and, if administrative accounts are affected, may result in privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Las versiones de EventSentry anteriores a la 6.0.1.20 contienen una vulnerabilidad de cambio de contraseña no verificado en la funcionalidad de gestión de cuentas de la interfaz de Informes Web. El mecanismo de cambio de contraseña no requiere la validación de la contraseña actual antes de permitir que se establezca una nueva contraseña. Un atacante que obtenga acceso temporal a una sesión de usuario autenticado puede cambiar la contraseña de la cuenta sin conocer las credenciales originales. Esto permite la toma de control persistente de la cuenta y, si esto afecta a las cuentas de administrador, puede resultar en escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netikus:eventsentry:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.1.20",
            "matchCriteriaId" : "658C31C0-7F16-4E68-92AA-B5FE24763167"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eventsentry.com/downloads/version-history",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/eventsentry-web-reports-unverified-password-change",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25882",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T21:16:29.640",
      "lastModified" : "2026-02-27T03:18:05.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sending requests to routes with more than 30 parameters. The vulnerability results from missing validation during route registration combined with an unbounded array write during request matching. Version 2.52.12 patches the issue in the v2 branch and 3.1.0 patches the issue in the v3 branch."
      }, {
        "lang" : "es",
        "value" : "Fiber es un framework web inspirado en Express escrito en Go. Existe una vulnerabilidad de denegación de servicio en Fiber v2 y v3 que permite a atacantes remotos bloquear la aplicación enviando solicitudes a rutas con más de 30 parámetros. La vulnerabilidad resulta de la falta de validación durante el registro de rutas combinada con una escritura de array sin límites durante la coincidencia de solicitudes. La versión 2.52.12 corrige el problema en la rama v2 y la 3.1.0 corrige el problema en la rama v3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gofiber:fiber:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.52.12",
            "matchCriteriaId" : "A15FB157-FB93-48D8-834A-6083BC452C3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gofiber:fiber:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "0BE31D7D-3EA7-4474-930A-0FD4C237989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gofiber/fiber/blob/main/path.go#L514",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gofiber/fiber/blob/v2/path.go#L516",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gofiber/fiber/pull/3962",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/gofiber/fiber/security/advisories/GHSA-mrq8-rjmw-wpq3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25891",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:31.440",
      "lastModified" : "2026-02-27T03:18:58.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiber is an Express inspired web framework written in Go. A Path Traversal (CWE-22) vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows. This affects Fiber v3 through version 3.0.0. This has been patched in Fiber v3 version 3.1.0."
      }, {
        "lang" : "es",
        "value" : "Fiber es un framework web inspirado en Express escrito en Go. Una vulnerabilidad de salto de ruta (CWE-22) en Fiber permite a un atacante remoto eludir el saneador del middleware estático y leer archivos arbitrarios en el sistema de archivos del servidor en Windows. Esto afecta a Fiber v3 hasta la versión 3.0.0. Esto ha sido parcheado en Fiber v3 versión 3.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gofiber:fiber:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "0BE31D7D-3EA7-4474-930A-0FD4C237989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gofiber/fiber/commit/59133702301c2ab7b776dd123b474cbd995f2c86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gofiber/fiber/pull/4064",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gofiber/fiber/security/advisories/GHSA-m3c2-496v-cw3v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25899",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:31.613",
      "lastModified" : "2026-02-25T20:31:50.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the `fiber_flash` cookie can force an unbounded allocation on any server. A crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory via unvalidated msgpack deserialization. No authentication is required. Every GoFiber v3 endpoint is affected regardless of whether the application uses flash messages. Version 3.1.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Fiber es un framework web inspirado en Express escrito en Go. En versiones de la rama v3 anteriores a la 3.1.0, el uso de la 'cookie' fiber_flash puede forzar una asignación ilimitada en cualquier servidor. Un valor de cookie manipulado de 10 caracteres desencadena un intento de asignar hasta 85 GB de memoria a través de una deserialización msgpack no validada. No se requiere autenticación. Cada endpoint de GoFiber v3 se ve afectado independientemente de si la aplicación utiliza mensajes flash. La versión 3.1.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gofiber:fiber:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "0BE31D7D-3EA7-4474-930A-0FD4C237989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gofiber/fiber/releases/tag/v3.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gofiber/fiber/security/advisories/GHSA-2mr3-m5q5-wgp6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27117",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:32.053",
      "lastModified" : "2026-02-25T20:29:27.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.11, a path traversal vulnerability (\"Zip Slip\") exists in bit7z's archive extraction functionality. The library does not adequately validate file paths contained in archive entries, allowing files to be written outside the intended extraction directory through three distinct mechanisms: relative path traversal, absolute path traversal, and symbolic link traversal. An attacker can exploit this by providing a malicious archive to any application that uses bit7z to extract untrusted archives. Successful exploitation results in arbitrary file write with the privileges of the process performing the extraction. This could lead to overwriting of application binaries, configuration files, or other sensitive data. The vulnerability does not directly enable reading of file contents; the confidentiality impact is limited to the calling application's own behavior after extraction. However, applications that subsequently serve or display extracted files may face secondary confidentiality risks from attacker-created symlinks. Fixes have been released in version 4.0.11. If upgrading is not immediately possible, users can mitigate the vulnerability by validating each entry's destination path before writing. Other mitigations include running extraction with least privilege and extracting untrusted archives in a sandboxed directory."
      }, {
        "lang" : "es",
        "value" : "bit7z es una librería estática de C++ multiplataforma que permite la compresión/extracción de archivos de archivo. Antes de la versión 4.0.11, existe una vulnerabilidad de salto de ruta ('Zip Slip') en la funcionalidad de extracción de archivos de bit7z. La librería no valida adecuadamente las rutas de archivo contenidas en las entradas del archivo, permitiendo que los archivos se escriban fuera del directorio de extracción previsto a través de tres mecanismos distintos: salto de ruta relativo, salto de ruta absoluto y salto de enlace simbólico. Un atacante puede explotar esto proporcionando un archivo malicioso a cualquier aplicación que utilice bit7z para extraer archivos no confiables. Si se explota con éxito se logra la escritura arbitraria de archivos con los privilegios del proceso que realiza la extracción. Esto podría llevar a la sobrescritura de binarios de aplicaciones, archivos de configuración u otros datos sensibles. La vulnerabilidad no permite directamente la lectura del contenido de los archivos; el impacto en la confidencialidad se limita al propio comportamiento de la aplicación llamante después de la extracción. Sin embargo, las aplicaciones que posteriormente sirven o muestran archivos extraídos pueden enfrentar riesgos secundarios de confidencialidad debido a enlaces simbólicos creados por el atacante. Se han lanzado correcciones en la versión 4.0.11. Si no es posible actualizar de inmediato, los usuarios pueden mitigar la vulnerabilidad validando la ruta de destino de cada entrada antes de escribir. Otras mitigaciones incluyen ejecutar la extracción con mínimo privilegio y extraer archivos no confiables en un directorio aislado (sandboxed)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-23"
        }, {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rikyoz:bit7z:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.11",
            "matchCriteriaId" : "495AC7B7-7FAB-4BFA-BE04-58BD0C15D76C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rikyoz/bit7z/commit/31763da9a3e41a199c141c8d71f6c11de24b45cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rikyoz/bit7z/commit/9e020483eefa5825ec9310b1d869933d4f77f969",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rikyoz/bit7z/releases/tag/v4.0.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/rikyoz/bit7z/security/advisories/GHSA-qvjh-hhw4-3gx9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27195",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:32.253",
      "lastModified" : "2026-02-25T15:20:22.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the `component-model-async` feature became the default, which brought with it a new implementation of `[Typed]Func::call_async` which made it capable of calling async-typed guest export functions.  However, that implementation had a bug leading to a panic under certain circumstances: First, the host embedding calls `[Typed]Func::call_async` on a function exported by a component, polling the returned `Future` once. Second, the component function yields control to the async runtime (e.g. Tokio), e.g. due to a call to host function registered using `LinkerInstance::func_wrap_async` which yields, or due an epoch interruption. Third, the host embedding drops the `Future` after polling it once.  This leaves the component instance in a non-reenterable state since the call never had a chance to complete. Fourth, the host embedding calls `[Typed]Func::call_async` again, polling the returned `Future`.  Since the component instance cannot be entered at this point, the call traps, but not before allocating a task and thread for the call. Fifth, the host embedding ignores the trap and drops the `Future`.  This panics due to the runtime attempting to dispose of the task created above, which panics since the thread has not yet exited. When a host embedder using the affected versions of Wasmtime calls `wasmtime::component::[Typed]Func::call_async` on a guest export and then drops the returned future without waiting for it to resolve, and then does so again with the same component instance, Wasmtime will panic. Embeddings that have the `component-model-async` compile-time feature disabled are unaffected. Wasmtime 40.0.4 and 41.0.4 have been patched to fix this issue. Versions 42.0.0 and later are not affected. If an embedding is not actually using any component-model-async features then disabling the `component-model-async` Cargo feature can work around this issue. This issue can also be worked around by either ensuring every `call_async` future is awaited until it completes or refraining from using the `Store` again after dropping a not-yet-resolved `call_async` future."
      }, {
        "lang" : "es",
        "value" : "Wasmtime es un entorno de ejecución para WebAssembly. A partir de Wasmtime 39.0.0, la característica 'component-model-async' se convirtió en la predeterminada, lo que trajo consigo una nueva implementación de '[Typed]Func::call_async' que la hizo capaz de llamar a funciones de exportación de invitado de tipo asíncrono. Sin embargo, esa implementación tenía un error que provocaba un pánico bajo ciertas circunstancias: Primero, la incrustación anfitriona llama a '[Typed]Func::call_async' en una función exportada por un componente, sondeando la 'Future' devuelta una vez. Segundo, la función del componente cede el control al entorno de ejecución asíncrono (por ejemplo, Tokio), por ejemplo, debido a una llamada a una función anfitriona registrada usando 'LinkerInstance::func_wrap_async' que cede, o debido a una interrupción de época. Tercero, la incrustación anfitriona descarta la 'Future' después de sondearla una vez. Esto deja la instancia del componente en un estado no reentrante ya que la llamada nunca tuvo la oportunidad de completarse. Cuarto, la incrustación anfitriona llama de nuevo a '[Typed]Func::call_async', sondeando la 'Future' devuelta. Dado que la instancia del componente no puede ser accedida en este punto, la llamada atrapa, pero no antes de asignar una tarea y un hilo para la llamada. Quinto, la incrustación anfitriona ignora la trampa y descarta la 'Future'. Esto provoca un pánico debido a que el entorno de ejecución intenta disponer de la tarea creada anteriormente, lo que provoca un pánico ya que el hilo aún no ha salido. Cuando un incrustador anfitrión que utiliza las versiones afectadas de Wasmtime llama a 'wasmtime::component::[Typed]Func::call_async' en una exportación de invitado y luego descarta la 'Future' devuelta sin esperar a que se resuelva, y luego lo hace de nuevo con la misma instancia del componente, Wasmtime entrará en pánico. Las incrustaciones que tienen la característica 'component-model-async' en tiempo de compilación deshabilitada no se ven afectadas. Wasmtime 40.0.4 y 41.0.4 han sido parcheadas para solucionar este problema. Las versiones 42.0.0 y posteriores no se ven afectadas. Si una incrustación no está utilizando realmente ninguna característica de component-model-async, entonces deshabilitar la característica Cargo 'component-model-async' puede solucionar este problema. Este problema también puede solucionarse asegurando que cada 'Future' de 'call_async' sea esperada hasta que se complete o absteniéndose de usar el 'Store' de nuevo después de descartar una 'Future' de 'call_async' aún no resuelta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "40.0.4",
            "matchCriteriaId" : "B17AD22F-CE3D-4105-8E28-2EF67BD2185E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "41.0.0",
            "versionEndExcluding" : "41.0.4",
            "matchCriteriaId" : "9BF3C16E-C1D8-468A-9F60-9F6F45DA98E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bytecodealliance.zulipchat.com/#narrow/channel/206238-general/topic/.E2.9C.94.20Panic.20in.20Wasmtime.2041.2E0.2E3.20.28runtime.2Fconcurrent.2Fcomponent.29/with/574438798",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/9e51c0d9a240a9613d279c061f82286bd11383fd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/d86b00736b9ece60b3c81e52f7a7e4cdd9f7d895",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/releases/tag/v40.0.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/releases/tag/v41.0.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xjhv-v822-pf94",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27204",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:32.480",
      "lastModified" : "2026-02-25T15:20:51.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place limits on resource allocations requested by the guests. This serves as a Denial of Service vector. Wasmtime 24.0.6, 36.0.6, 40.0.4, 41.0.4, and 42.0.0 have all been released with the fix for this issue. These versions do not prevent this issue in their default configuration to avoid breaking preexisting behaviors. All versions of Wasmtime have appropriate knobs to prevent this behavior, and Wasmtime 42.0.0-and-later will have these knobs tuned by default to prevent this issue from happening. There are no known workarounds for this issue without upgrading. Embedders are recommended to upgrade and configure their embeddings as necessary to prevent possibly-malicious guests from triggering this issue."
      }, {
        "lang" : "es",
        "value" : "Wasmtime es un entorno de ejecución para WebAssembly. Antes de las versiones 24.0.6, 36.0.6, 4.0.04, 41.0.4 y 42.0.0, la implementación de Wasmtime de las interfaces de host WASI es susceptible al agotamiento de recursos controlado por el invitado en el host. Wasmtime no estableció adecuadamente límites en las asignaciones de recursos solicitadas por los invitados. Esto sirve como un vector de denegación de servicio. Se han lanzado las versiones Wasmtime 24.0.6, 36.0.6, 40.0.4, 41.0.4 y 42.0.0 con la corrección de este problema. Estas versiones no previenen este problema en su configuración predeterminada para evitar romper comportamientos preexistentes. Todas las versiones de Wasmtime tienen controles apropiados para prevenir este comportamiento, y Wasmtime 42.0.0 y posteriores tendrán estos controles ajustados por defecto para evitar que este problema ocurra. No hay soluciones alternativas conocidas para este problema sin actualizar. Se recomienda a los integradores actualizar y configurar sus incrustaciones según sea necesario para evitar que invitados posiblemente maliciosos exploten este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        }, {
          "lang" : "en",
          "value" : "CWE-774"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "24.0.6",
            "matchCriteriaId" : "FAB7C7D9-433F-4046-932B-44456BB034A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "36.0.6",
            "matchCriteriaId" : "4AF1D021-3AC7-419E-AD0B-5C5738DC51E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "37.0.0",
            "versionEndExcluding" : "40.0.4",
            "matchCriteriaId" : "2DBCFCF3-5A70-4441-B73D-E1CE96B01BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "41.0.0",
            "versionEndExcluding" : "41.0.4",
            "matchCriteriaId" : "9BF3C16E-C1D8-468A-9F60-9F6F45DA98E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rs/wasmtime-wasi/latest/wasmtime_wasi/struct.WasiCtxBuilder.html#method.max_random_size",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/component/struct.ResourceTable.html#method.set_max_capacity",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Store.html#method.set_hostcall_fuel",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.wasmtime.dev/security-what-is-considered-a-security-vulnerability.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/issues/11552",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/pull/12599",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-852m-cvvp-9p4w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27572",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:32.687",
      "lastModified" : "2026-02-25T15:36:36.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of the `wasi:http/types.fields` resource is susceptible to panics when too many fields are added to the set of headers. Wasmtime's implementation in the `wasmtime-wasi-http` crate is backed by a data structure which panics when it reaches excessive capacity and this condition was not handled gracefully in Wasmtime. Panicking in a WASI implementation is a Denial of Service vector for embedders and is treated as a security vulnerability in Wasmtime. Wasmtime 24.0.6, 36.0.6, 40.0.4, 41.0.4, and 42.0.0 patch this vulnerability and return a trap to the guest instead of panicking. There are no known workarounds at this time. Embedders are encouraged to update to a patched version of Wasmtime."
      }, {
        "lang" : "es",
        "value" : "Wasmtime es un entorno de ejecución para WebAssembly. Antes de las versiones 24.0.6, 36.0.6, 4.0.04, 41.0.4 y 42.0.0, la implementación de Wasmtime del recurso `wasi:http/types.fields` es susceptible a panics cuando se añaden demasiados campos al conjunto de cabeceras. La implementación de Wasmtime en el crate `wasmtime-wasi-http` está respaldada por una estructura de datos que entra en pánico cuando alcanza una capacidad excesiva. Esta condición no se manejó convenientemente en Wasmtime. Entrar en pánico en una implementación de WASI es un vector de denegación de servicio para los integradores y se trata como una vulnerabilidad de seguridad en Wasmtime. Wasmtime 24.0.6, 36.0.6, 40.0.4, 41.0.4 y 42.0.0 aplican un parche a esta vulnerabilidad y devuelven una trampa al invitado en lugar de entrar en pánico. No hay soluciones alternativas conocidas en este momento. Se anima a los integradores a actualizar a una versión de Wasmtime con parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "24.0.6",
            "matchCriteriaId" : "FAB7C7D9-433F-4046-932B-44456BB034A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "36.0.6",
            "matchCriteriaId" : "4AF1D021-3AC7-419E-AD0B-5C5738DC51E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "37.0.0",
            "versionEndExcluding" : "40.0.4",
            "matchCriteriaId" : "2DBCFCF3-5A70-4441-B73D-E1CE96B01BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "41.0.0",
            "versionEndExcluding" : "41.0.4",
            "matchCriteriaId" : "9BF3C16E-C1D8-468A-9F60-9F6F45DA98E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rs/http/1.4.0/http/header/#limitations",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/301dc7162cca51def19131019af1187f45901c0a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/releases/tag/v24.0.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/releases/tag/v36.0.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/releases/tag/v40.0.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/releases/tag/v41.0.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27593",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-24T22:16:32.867",
      "lastModified" : "2026-02-25T20:27:52.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the password reset feature to capture a user's token and reset the password on their behalf. The attacker must know the email address of a valid account on the site, and the actual user must blindly click the link in their email even though they didn't request the reset. This has been fixed in 6.3.3 and 5.73.10."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. Antes de las versiones 6.3.3 y 5.73.10, un atacante podría aprovechar una vulnerabilidad en la función de restablecimiento de contraseña para capturar el token de un usuario y restablecer la contraseña en su nombre. El atacante debe conocer la dirección de correo electrónico de una cuenta válida en el sitio, y el usuario real debe hacer clic ciegamente en el enlace de su correo electrónico aunque no haya solicitado el restablecimiento. Esto ha sido corregido en 6.3.3 y 5.73.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.10",
            "matchCriteriaId" : "09579639-615E-4F31-83CF-9A57F55D4B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.3",
            "matchCriteriaId" : "53E898A8-A303-4E91-B98A-5BC6C37F6AD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/commit/6fdd03324982848e8754f2edd2265262d361714e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/statamic/cms/commit/78e63dfcf705b116d5ac0f7f7f5a1a69be63d1be",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/statamic/cms/commit/b2be592ddfb588bcb88c9be454f3590e14b145b0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v5.73.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.3.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-jxq9-79vj-rgvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26351",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-24T23:16:04.830",
      "lastModified" : "2026-02-26T22:01:44.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GetSimpleCMS Community Edition (CE) version 3.3.16 contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality within components.php. User-supplied input provided to the \"slug\" field of a component is stored without proper output encoding. While other fields are sanitized using safe_slash_html(), the slug parameter is written to XML and later rendered in the administrative interface without sanitation, resulting in persistent execution of arbitrary JavaScript. An authenticated administrator can inject malicious script content that executes whenever the affected Components page is viewed by any authenticated user, enabling session hijacking, unauthorized administrative actions, and persistent compromise of the CMS administrative interface."
      }, {
        "lang" : "es",
        "value" : "GetSimpleCMS Community Edition (CE) versión 3.3.16 contiene una vulnerabilidad de cross-site scripting (XSS) almacenada en la funcionalidad Theme to Components dentro de components.PHP. La entrada proporcionada por el usuario al campo 'slug' de un componente se almacena sin una codificación de salida adecuada. Mientras que otros campos son saneados usando safe_slash_html(), el parámetro slug se escribe en XML y luego se renderiza en la interfaz de administración sin saneamiento, lo que resulta en la ejecución persistente de JavaScript arbitrario. Un administrador autenticado puede inyectar contenido de script malicioso que se ejecute cada vez que un usuario autenticado ve la página afectada de Componentes, lo que permite el secuestro de sesión, acciones de administración no autorizadas y el compromiso persistente de la interfaz de administración del CMS."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getsimple-ce:getsimple_cms:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "3.3.16",
            "versionEndExcluding" : "3.3.22",
            "matchCriteriaId" : "B8BDA615-4B42-49F7-9D42-FE2A6750A531"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://getsimple-ce.ovh/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/releases/tag/v3.3.22",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-95f7-vm92-8gpx",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/getsimplecms-ce-stored-xss-via-components-php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3133",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T00:16:32.757",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processing of the file /loging.php of the component Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode Document Management System 1.0. Este problema afecta algún procesamiento desconocido del archivo /loging.php del componente Login. Si se manipula el argumento Username se puede provocar una inyección SQL. Es posible explotar el ataque en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:document_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5624DF-BD1B-45C8-B70F-21BD48027994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/41",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347616",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347616",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758323",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3134",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T00:16:32.983",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function of the file /newsportal/admin/edit-category.php. The manipulation of the argument Category results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en itsourcecode News Portal Project 1.0. El elemento afectado es una función desconocida del archivo /newsportal/admin/edit-category.php. Manipular el argumento 'Category' provoca una inyección SQL. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:news_portal_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71E9B8-FE24-4FB4-92C9-B5EDFA612172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/910biter/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758324",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27598",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T01:16:09.157",
      "lastModified" : "2026-02-25T20:23:36.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the `CreateNewDAG` API endpoint (`POST /api/v1/dags`) does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write arbitrary YAML files anywhere on the filesystem (limited by the process permissions). Since dagu executes DAG files as shell commands, writing a malicious DAG to the DAGs directory of another instance or overwriting config files can lead to remote code execution. Commit e2ed589105d79273e4e6ac8eb31525f765bb3ce4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Dagu es un motor de flujo de trabajo con una interfaz de usuario web integrada. En versiones hasta la 1.16.7 inclusive, el endpoint de la API 'CreateNewDAG' ('POST /api/v1/dags') no valida el nombre del DAG antes de pasarlo al almacén de archivos. Un usuario autenticado con permisos de escritura de DAG puede escribir archivos YAML arbitrarios en cualquier lugar del sistema de archivos (limitado por los permisos del proceso). Dado que dagu ejecuta archivos DAG como comandos de shell, escribir un DAG malicioso en el directorio de DAGs de otra instancia o sobrescribir archivos de configuración puede conducir a ejecución remota de código. El commit e2ed589105d79273e4e6ac8eb31525f765bb3ce4 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dagu:dagu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16.7",
            "matchCriteriaId" : "D171E60E-96F5-492E-858A-7DDC079996A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dagu-org/dagu/commit/e2ed589105d79273e4e6ac8eb31525f765bb3ce4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dagu-org/dagu/security/advisories/GHSA-6v48-fcq6-ff23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3135",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T01:16:09.320",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an unknown function of the file /admin/add-category.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode News Portal Project 1.0. El elemento afectado es una función desconocida del archivo /admin/add-category.PHP. Al manipular el argumento 'Category' se causa una inyección SQL. Es posible iniciar el ataque en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:news_portal_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71E9B8-FE24-4FB4-92C9-B5EDFA612172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/910biter/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3137",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T01:16:09.537",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file food_ordering.exe. Such manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en CodeAstro Food Ordering System 1.0 que afecta una función desconocida del archivo food_ordering.exe. Si se manipula se provoca un desbordamiento de búfer basado en pila. El ataque solo puede ser realizado desde un entorno local. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeastro:food_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5B0733-BE5F-4A41-B33A-5173D233BED0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codeastro.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/910biter/cve/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758512",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21443",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:21.863",
      "lastModified" : "2026-02-26T15:34:11.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the `xl()` translation function returns unescaped strings. While wrapper functions exist for escaping in different contexts (`xlt()` for HTML, `xla()` for attributes, `xlj()` for JavaScript), there are places in the codebase where `xl()` output is used directly without escaping. If an attacker could insert malicious content into the translation database, these unescaped outputs could lead to XSS. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto de registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, la función de traducción 'xl()' devuelve cadenas sin escapar. Aunque existen funciones envoltorio para escapar en diferentes contextos ('xlt()' para HTML, 'xla()' para atributos, 'xlj()' para JavaScript), hay lugares en la base de código donde la salida de 'xl()' se usa directamente sin escapar. Si un atacante pudiera insertar contenido malicioso en la base de datos de traducción, estas salidas sin escapar podrían conducir a XSS. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.2,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/b1e3fe8a9ed8bcaf17e0b73d7fad5434f9fe36da",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-3f9j-cqjj-7h46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24847",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:22.027",
      "lastModified" : "2026-02-26T15:33:56.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exam form module allows any authenticated user to be redirected to an arbitrary external URL. This can be exploited for phishing attacks against healthcare providers using OpenEMR. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, el módulo del formulario de Examen Ocular permite a cualquier usuario autenticado ser redirigido a una URL externa arbitraria. Esto puede ser explotado para ataques de phishing contra proveedores de atención médica que utilizan OpenEMR. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/b924459bb5b2844f8f5d3d6cedd2e854eda20aad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-6f42-6q2r-fc2h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24849",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:22.197",
      "lastModified" : "2026-02-25T16:56:53.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions.php` allows authenticated users to read arbitrary files from the server filesystem. Any authenticated user (regardless of privilege level) can exploit this vulnerability to read sensitive files. Version 7.0.4 patches the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros médicos electrónicos y práctica médica de código abierto y gratuita. Antes de la versión 7.0.4, el método `disposeDocument()` en `EtherFaxActions.php` permite a los usuarios autenticados leer archivos arbitrarios del sistema de archivos del servidor. Cualquier usuario autenticado (independientemente del nivel de privilegio) puede explotar esta vulnerabilidad para leer archivos sensibles. La versión 7.0.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.4",
            "matchCriteriaId" : "197634CE-D050-4392-BF3C-EA0198DEEFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/22f8e53e5769a88b7a16cb223bd197d044c84e5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-w6vc-hx2x-48pc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24896",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:22.353",
      "lastModified" : "2026-02-25T16:54:24.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a Broken Access Control vulnerability exists in OpenEMR’s edih_main.php endpoint, which allows any authenticated user—including low-privilege roles like Receptionist—to access EDI log files by manipulating the log_select parameter in a GET request. The back-end fails to enforce role-based access control (RBAC), allowing sensitive system logs to be accessed outside the GUI-enforced permission boundaries. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, existe una vulnerabilidad de control de acceso roto en el endpoint edih_main.php de OpenEMR, que permite a cualquier usuario autenticado —incluidos roles de bajo privilegio como Recepcionista— acceder a los archivos de registro EDI manipulando el parámetro log_select en una solicitud GET. El back-end no aplica el control de acceso basado en roles (RBAC), lo que permite acceder a registros sensibles del sistema fuera de los límites de permisos impuestos por la GUI. La versión 8.0.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/1a57dfc244b30e96e7ebdb5ba6f331a6eb868df1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-rccq-vjfg-ggjh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25124",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:22.550",
      "lastModified" : "2026-02-25T16:54:00.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the OpenEMR application is vulnerable to an access control flaw that allows low-privileged users, such as receptionists, to export the entire message list containing sensitive patient and user data. The vulnerability lies in the message_list.php report export functionality, where there is no permission check before executing sensitive database queries. The only control in place is CSRF token verification, which does not prevent unauthorized data access if the token is acquired through other means. Version 8.0.0 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, la aplicación OpenEMR es vulnerable a un fallo de control de acceso que permite a usuarios con pocos privilegios, como recepcionistas, exportar la lista completa de mensajes que contiene datos sensibles de pacientes y usuarios. La vulnerabilidad reside en la funcionalidad de exportación de informes de message_list.php, donde no hay una verificación de permisos antes de ejecutar consultas sensibles a la base de datos. El único control implementado es la verificación del token CSRF, lo que no impide el acceso no autorizado a los datos si el token se adquiere por otros medios. La versión 8.0.0 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/ad902d6892482fff2e3c56bfb15597df8b6c3beb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-q7p5-rrwj-qmp2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25127",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:22.820",
      "lastModified" : "2026-02-25T16:01:07.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, el servidor no valida correctamente el permiso del usuario. Usuarios no autorizados pueden ver la información de usuarios autorizados. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/ad902d6892482fff2e3c56bfb15597df8b6c3beb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-69cv-rv28-4g85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25131",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T02:16:22.967",
      "lastModified" : "2026-02-25T16:56:00.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a Broken Access Control vulnerability exists in the OpenEMR order types management system, allowing low-privilege users (such as Receptionist) to add and modify procedure types without proper authorization. This vulnerability is present in the /openemr/interface/orders/types_edit.php endpoint. Version 8.0.0 contains a patch."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, existe una vulnerabilidad de control de acceso roto en el sistema de gestión de tipos de órdenes de OpenEMR, que permite a usuarios con pocos privilegios (como Recepcionista) añadir y modificar tipos de procedimiento sin la autorización adecuada. Esta vulnerabilidad está presente en el endpoint /openemr/interface/orders/types_edit.PHP. La versión 8.0.0 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/1e63cbab34558bca029533f87cdb6efb1ff32c75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-6h2m-4ppf-ph4j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2914",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2026-02-25T02:16:23.130",
      "lastModified" : "2026-02-27T18:58:08.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs"
      }, {
        "lang" : "es",
        "value" : "Las versiones 25.10.0 e inferiores del Agente de CyberArk Endpoint Privilege Manager permiten una potencial elevación de privilegios no autorizada aprovechando los diálogos de elevación de CyberArk"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberark:endpoint_privilege_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.11.0",
            "matchCriteriaId" : "19888249-C409-45A2-B756-7325E7D9DE36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cyberark.com/epm/latest/en/content/release%20notes/release-notes.htm",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.cyberark.com/product-security/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25135",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:04.263",
      "lastModified" : "2026-02-25T16:56:15.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 have an information disclosure vulnerability that leaks the entire contact information for all users, organizations, and patients in the system to anyone who has the system/(Group,Patient,*).$export operation and system/Location.read capabilities.  This vulnerability will impact OpenEMR versions since 2023. This disclosure will only occur in extremely high trust environments as it requires using a confidential client with secure key exchange that requires an administrator to enable and grant permission before the app can even be used. This will typically only occur in server-server communication across trusted clients that already have established legal agreements. Version 8.0.0 contains a patch. As a workaround, disable clients that have the vulnerable scopes and only allow clients that do not have the system/Location.read scope until a fix has been deployed."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros de salud electrónicos y práctica médica de código abierto y gratuita. Las versiones anteriores a la 8.0.0 tienen una vulnerabilidad de revelación de información que filtra toda la información de contacto de todos los usuarios, organizaciones y pacientes en el sistema a cualquiera que tenga las capacidades de operación system/(Group,Patient,*).$export y system/Location.read. Esta vulnerabilidad tendrá impacto en las versiones de OpenEMR desde 2023. Esta revelación solo ocurrirá en entornos de muy alta confianza, ya que requiere el uso de un cliente confidencial con intercambio seguro de claves que requiere que un administrador habilite y otorgue permiso antes de que la aplicación pueda siquiera ser utilizada. Esto típicamente solo ocurrirá en comunicación de servidor a servidor entre clientes de confianza que ya tienen acuerdos legales establecidos. La versión 8.0.0 contiene un parche. Como solución alternativa, deshabilite los clientes que tienen los ámbitos vulnerables y solo permita los clientes que no tienen el ámbito system/Location.read hasta que se haya implementado una corrección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/7ab23dfe73ebd16dd66a526272f3761f1bd5be7d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-fgxg-wg4w-rj23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27595",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:04.437",
      "lastModified" : "2026-02-27T19:18:14.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has multiple security vulnerabilities that, when chained, allow unauthenticated remote attackers to perform arbitrary read and write operations against any connected Parse Server database using the master key. The agent feature is opt-in; dashboards without an agent config are not affected. The fix in version 9.0.0-alpha.8 adds authentication, CSRF validation, and per-app authorization middleware to the agent endpoint. Read-only users are restricted to the `readOnlyMasterKey` with write permissions stripped server-side. A cache key collision between master key and read-only master key was also corrected. As a workaround, remove or comment out the agent configuration block from your Parse Dashboard configuration."
      }, {
        "lang" : "es",
        "value" : "Parse Dashboard es un panel de control independiente para gestionar aplicaciones de Parse Server. En las versiones 7.3.0-alpha.42 hasta la 9.0.0-alpha.7, el endpoint de la API del Agente de IA (POST `/apps/:appId/agent`) tiene múltiples vulnerabilidades de seguridad que, cuando se encadenan, permiten a atacantes remotos no autenticados realizar operaciones arbitrarias de lectura y escritura contra cualquier base de datos de Parse Server conectada utilizando la clave maestra. La característica del agente es opcional; los paneles de control sin una configuración de agente no se ven afectados. La corrección en la versión 9.0.0-alpha.8 añade autenticación, validación de CSRF y middleware de autorización por aplicación al endpoint del agente. Los usuarios de solo lectura están restringidos a la `readOnlyMasterKey` con los permisos de escritura eliminados en el lado del servidor. También se corrigió una colisión de clave de caché entre la clave maestra y la clave maestra de solo lectura. Como solución alternativa, elimine o comente el bloque de configuración del agente de su configuración de Parse Dashboard."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D4744D8A-C870-492A-AD66-D6CB083CD7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "23F5E70B-99F7-46FE-A13B-D2B9B9BFDF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.44:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F3FE9CD-0F0B-4AB8-BB42-04B23C1DEF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1F87B033-9ADD-4DBB-BC6C-A3EBE7502CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F5263840-349D-42E1-BAB1-AB6826B588B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "640870FE-F70F-401D-A749-3CD0EF66A436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64F0B732-1E46-4B86-BDC0-4F1025989DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3427EA35-6D06-4D44-B4E0-63F36908D506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "87F8BED8-AA0B-4BB4-817A-ECF3581DB66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "306508B1-2E2A-4A76-A67C-1F8A15D5EC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA055428-E398-4766-9C08-66D2113CE7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9CC5FAB0-7046-40B0-842D-138BD8CC8B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AF1A1FFC-9FE6-4596-9377-8A410517748D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "638E5B8B-F2F1-47AC-AD0D-7AD7835CB6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8AC5C34F-1B61-4A65-811E-5CC7DBFF4FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F95EFF10-2977-4330-B2AB-9E0A1038AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A3B3D71-CD51-41C4-A756-F741FC9A17AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "46A42216-C604-4CFF-A7D5-0E2EBB253F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "233F7D1F-C707-45D6-BF37-EF196A1CA655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "27EBFA6E-9582-49F4-A62D-B9B39F873D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4D211D67-C766-4FE0-A050-688DCC4E4137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC066843-6A98-4B8B-B679-D8A229D0F1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35336E10-BC3C-4B0E-9AF0-66B44A7EEF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "19F7A05A-4E95-4637-B4E9-23CB9A4C2E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9D5A6432-BA21-4AE7-A6D3-5B711B961B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "28C73478-4D60-48A2-8A43-9005B222792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F01C2CA5-BB6D-465F-9B3E-D9DCC04DAF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EAF9B9F4-B53F-4A07-B99D-C61FEDD09C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "799C425B-06A3-4E3E-AC7F-67B7DE9974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "635D4195-A97E-4536-9C69-C5E3EC3D206C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "76266618-3291-42B8-ABF9-3161C9A2A335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "798C040F-8F99-4460-B37D-335DF063442B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B7C33A71-E752-43D4-A164-740750ABD096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F580DE3E-263A-4503-8B06-08C5FF1AC4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4B5D579-9F10-4EE2-975C-760D7945C781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2B34014-7733-4630-9AEA-85433E95F9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "10BBA4C5-F9BB-4D5A-A1BE-EC99FFEA2D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C14764E6-2751-4507-8FBF-ABBB95B73C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EA5558A0-D654-47AF-A661-21B15CC5374D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ACD4CD5D-B16D-4C15-8055-A6EE5C96F389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "77E011B6-E73B-4CD7-AED3-E8F293907769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF030EED-A04A-4294-89BE-D67981373CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C610597-192B-436C-B773-3578EE1135EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "596F09DA-7A82-4A49-BA5F-A3457D5D1895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AC8D2A19-26A2-43EA-874D-0AECECF38F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "61E484CB-FE4E-446A-9E4A-7D7FBB90D5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EEFB299E-5AE8-4BC7-AE41-9861C3C6E5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2BAFB77-61AB-4590-91A5-E6006CCFD60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "250C3970-411A-45CA-A0F1-3336979795D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE488750-1330-43A2-97DE-3D3BF1E808EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E95F30F2-0AC8-4A22-AA66-DB80325EBA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AE191589-6E7C-4634-A9D8-1B1E7F8343DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "860229EC-16ED-439A-A34E-5D3F85FFDCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4F3001C-E518-479B-8A57-E34FFFAA4FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A73F6299-1A0C-4A73-89C8-48885E11F65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C71D6779-24D2-4AF0-BEF1-FE99BC95BB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC64EC9A-F109-4BBE-935A-CFD7DC8DB2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F2CDBCA-5552-42BE-8DC8-4741679971D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "80D51A30-78E8-40DE-809D-9FF619A23158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C1791CCB-E96B-465C-B57B-C7B97A437642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DA617937-2E8B-4955-BD27-65C3CC4013B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1307D569-70FD-4253-A14C-29F3CDA35EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DFA69B19-9A2C-40F9-88F4-B43389B6A56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FBC724FF-FDE9-440B-8CC2-AF210114CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BA0E1A98-C42C-43BC-B409-25F033677BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1133B673-D917-4919-9F6B-A11E9C86BCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC9747A1-F2E5-4973-B56C-B6E0A42024BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "91951F15-C571-42C1-897A-B3D3C2B70A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1292ACFD-4CA4-4F7E-B7DB-8B3CA85C5B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2C6E2816-60F8-4297-B3C7-3EFA2C3BDD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2A7E1989-6E7F-4700-B779-7E39CB695E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC4E8293-59A7-4F47-B2F5-2F950B93E16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BBA14C23-4DBF-47C8-8FB3-9233C54247BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE07DB4E-85AB-4495-B81D-2478E1CD0FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F4260AB5-24D7-4D6C-B55F-3129BDDBEF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A4300AF-10D6-4E09-B6DF-B28144F8E024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C11B2FEB-7617-49DA-AB18-CA2F37367480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B606D916-B540-465A-946B-2FEBF2850916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FCE2860A-1826-4A8B-A66F-D11733F9103D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E84297DB-5816-4FA5-8696-204CAF1BEF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C9219C64-059A-4A3E-8836-AAD56D40CEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57353E36-EFA9-402B-AFF5-AFADACCEE6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57CFDD8F-7705-43EC-938C-100A750BF6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9330CE70-6112-4194-81FF-B58A073447EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D6EC7E97-76CE-4749-BDF9-409C3C5D5836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A555D06A-B5B1-4ADB-B920-F7509691DC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7EA2C3DD-9ADE-4089-A358-7866A460BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2E197079-35B1-4896-9A6D-29FF88C95338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E6AA3ECC-E3FA-49AF-916F-37691A3BD04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5D54DA67-239B-4340-85ED-9BD93D19A83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5381B696-F48C-4763-BF8B-B10CF0134473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9A10EB23-2504-4D98-8D1E-3398D9A386AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "88C6CCC3-FA1C-4CA5-896D-0ECFE1C5F3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D5107B7E-0270-44EA-97AD-E186A83FC0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "530AE8D8-8D69-4F38-A8A9-78BB6FFEF18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.28:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D1DC1670-DB4B-4B2E-9B86-51B5C143C199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.29:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F1877E4D-26D2-4904-8053-D3C4A2A12C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "60F9E180-C44C-4C7A-B05C-1D188061DA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.30:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0020AAB4-42B4-4FDA-8980-3BB478B0D933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.31:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35EB35EF-46C4-4A75-B8E6-7C29C776D5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.32:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C59AEF9-1C8C-41C0-8786-55CB41AA1829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.33:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6EA1686D-E53A-4C35-8743-09FF7F2C6795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.34:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0897894F-2D60-4E27-827C-ACBA6E30FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.35:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FB28994-3EB1-4857-B2F1-6210D61A61D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.36:*:*:*:node.js:*:*",
            "matchCriteriaId" : "137F6EAA-831A-42C0-B003-FB4F583D7279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.37:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E41A87FE-1651-4A7A-8E32-2B20D69F5593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.38:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D791B7C0-E3E7-4BE4-A691-8398263CC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.39:*:*:*:node.js:*:*",
            "matchCriteriaId" : "177C31B7-05D9-4690-897A-2FDBC406AB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FD4CC16-C0F6-4C05-970D-B54E84A8C7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.40:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F1B8B29-DFAD-4634-AC12-C1DFF2FBA5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.41:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57FB28C9-5DE8-4D09-9BDE-FFFBD7516F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8589D874-D29D-4583-A1DA-59D8F39027A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "13A8384B-B775-41C9-96F5-20186B6D82BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2948F800-5515-4729-A82D-2DACA81BA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1A253A5D-C7DB-4B64-A77A-D03FEFBDC8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1DECD32E-1F70-4AA0-9AA7-8E25CDC611C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7D1B3EF0-F7E5-46E4-8741-B234A4389137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C694360B-3347-4F9F-A621-080C0EAC4DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "49AA820D-E082-47D2-803D-6B54476C0203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "85F7BCC9-C07E-41ED-B172-2FBE6EC25281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5148D58F-AB4C-46F0-8BD0-0F67E908D268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "487A1716-0D40-44A0-9F38-5FE7CA8EB7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "52BF57A4-CA0D-4573-AD58-6E2572A7F6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "31B0DA15-56F5-4CAF-B143-BFCF15B9FC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "42263CAA-72DA-4B09-81B7-6E25DDF9FF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A72FAF71-B360-4CAD-8369-22FA7203059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3A15C600-A7E7-43BA-85A5-33EF4A580BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E0FF7351-1107-4C32-A33B-A72929B8B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC47F04B-0CAB-4F59-AD13-098E01F33ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A0BEBE6-165D-4E02-84FB-0CE15101B7E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E50D6B9B-1480-4FFC-A5E1-0AC266B5505D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "63696822-C9C4-4094-B2A6-CD3026748EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2694A32A-009C-4189-849B-2388D53B0276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FDF833EE-1D53-49EE-8FE5-2D8E56F66AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2458B177-3461-425A-89AA-13866FE27028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-qwc3-h9mg-4582",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27606",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:04.603",
      "lastModified" : "2026-02-25T16:05:11.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine allows an attacker to control output filenames (e.g., via CLI named inputs, manual chunk aliases, or malicious plugins) and use traversal sequences (`../`) to overwrite files anywhere on the host filesystem that the build process has permissions for. This can lead to persistent Remote Code Execution (RCE) by overwriting critical system or user configuration files. Versions 2.80.0, 3.30.0, and 4.59.0 contain a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Rollup es un empaquetador de módulos para JavaScript. Las versiones anteriores a la 2.80.0, 3.30.0 y 4.59.0 del empaquetador de módulos Rollup (específicamente v4.x y presente en el código fuente actual) es vulnerable a una escritura de archivo arbitraria mediante salto de ruta. La sanitización insegura de nombres de archivo en el motor principal permite a un atacante controlar los nombres de archivo de salida (por ejemplo, mediante entradas con nombre de CLI, alias de fragmentos manuales o plugins maliciosos) y usar secuencias de salto ('../') para sobrescribir archivos en cualquier lugar del sistema de archivos del host para el que el proceso de compilación tenga permisos. Esto puede conducir a una ejecución remota de código (RCE) persistente al sobrescribir archivos de configuración críticos del sistema o del usuario. Las versiones 2.80.0, 3.30.0 y 4.59.0 contienen un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rollupjs:rollup:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.80.0",
            "matchCriteriaId" : "3B082000-6A3D-4F24-87C3-CE2B4D66BE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rollupjs:rollup:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.30.0",
            "matchCriteriaId" : "26A20C56-5C17-468B-A026-2299D1BE909D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rollupjs:rollup:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.59.0",
            "matchCriteriaId" : "5BC2165D-030E-46E5-BA3D-DABB9B58E6FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rollup/rollup/releases/tag/v2.80.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rollup/rollup/releases/tag/v3.30.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rollup/rollup/releases/tag/v4.59.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27607",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:04.787",
      "lastModified" : "2026-02-25T15:37:08.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads (PostObject), allowing attackers to bypass content-length-range, starts-with, and Content-Type constraints. This enables unauthorized file uploads exceeding size limits, uploads to arbitrary object keys, and content-type spoofing, potentially leading to storage exhaustion, unauthorized data access, and security bypasses. Version 1.0.0-alpha.83 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. En las versiones desde la 1.0.0-alpha.56 hasta la 1.0.0-alpha.82, RustFS no valida las condiciones de política en las cargas POST pre-firmadas (PostObject), permitiendo a los atacantes eludir las restricciones de content-length-range, starts-with y Content-Type. Esto permite cargas de archivos no autorizadas que exceden los límites de tamaño, cargas a claves de objeto arbitrarias y suplantación de Content-Type, lo que podría conducir a agotamiento del almacenamiento, acceso no autorizado a datos y elusión de seguridad. La versión 1.0.0-alpha.83 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*",
            "matchCriteriaId" : "96461CC0-012C-40D7-B1CB-FF9A6B7EB644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha79:*:*:*:rust:*:*",
            "matchCriteriaId" : "9AA7AE2E-83E3-4796-8569-16030DB2CF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha80:*:*:*:rust:*:*",
            "matchCriteriaId" : "73638EAF-BCA6-4BD8-90E5-3A53EFD0FD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha81:*:*:*:rust:*:*",
            "matchCriteriaId" : "48BCB4A7-57C5-4FAA-860D-B862947EE352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha82:*:*:*:rust:*:*",
            "matchCriteriaId" : "0EA73A06-6AEA-45DF-B819-D25AA9BBEBA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-w5fh-f8xh-5x3p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27608",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:04.960",
      "lastModified" : "2026-02-27T19:17:16.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not enforce authorization. Authenticated users scoped to specific apps can access any other app's agent endpoint by changing the app ID in the URL. Read-only users are given the full master key instead of the read-only master key and can supply write permissions in the request body to perform write and delete operations. Only dashboards with `agent` configuration enabled are affected. The fix in version 9.0.0-alpha.8 adds per-app authorization checks and restricts read-only users to the `readOnlyMasterKey` with write permissions stripped server-side. As a workaround, remove the `agent` configuration block from your dashboard configuration. Dashboards without an `agent` config are not affected."
      }, {
        "lang" : "es",
        "value" : "Parse Dashboard es un panel de control independiente para gestionar aplicaciones de Parse Server. En las versiones 7.3.0-alpha.42 hasta la 9.0.0-alpha.7, el endpoint de la API del Agente de IA (`POST /apps/:appId/agent`) no aplica la autorización. Los usuarios autenticados con ámbito a aplicaciones específicas pueden acceder al endpoint del agente de cualquier otra aplicación cambiando el ID de la aplicación en la URL. A los usuarios de solo lectura se les otorga la clave maestra completa en lugar de la clave maestra de solo lectura y pueden proporcionar permisos de escritura en el cuerpo de la solicitud para realizar operaciones de escritura y eliminación. Solo los paneles de control con la configuración de `agent` habilitada se ven afectados. La corrección en la versión 9.0.0-alpha.8 añade comprobaciones de autorización por aplicación y restringe a los usuarios de solo lectura a la `readOnlyMasterKey` con los permisos de escritura eliminados en el lado del servidor. Como solución alternativa, elimine el bloque de configuración de `agent` de la configuración de su panel de control. Los paneles de control sin una configuración de `agent` no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D4744D8A-C870-492A-AD66-D6CB083CD7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "23F5E70B-99F7-46FE-A13B-D2B9B9BFDF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.44:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F3FE9CD-0F0B-4AB8-BB42-04B23C1DEF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1F87B033-9ADD-4DBB-BC6C-A3EBE7502CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F5263840-349D-42E1-BAB1-AB6826B588B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "640870FE-F70F-401D-A749-3CD0EF66A436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64F0B732-1E46-4B86-BDC0-4F1025989DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3427EA35-6D06-4D44-B4E0-63F36908D506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "87F8BED8-AA0B-4BB4-817A-ECF3581DB66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "306508B1-2E2A-4A76-A67C-1F8A15D5EC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA055428-E398-4766-9C08-66D2113CE7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9CC5FAB0-7046-40B0-842D-138BD8CC8B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AF1A1FFC-9FE6-4596-9377-8A410517748D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "638E5B8B-F2F1-47AC-AD0D-7AD7835CB6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8AC5C34F-1B61-4A65-811E-5CC7DBFF4FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F95EFF10-2977-4330-B2AB-9E0A1038AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A3B3D71-CD51-41C4-A756-F741FC9A17AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "46A42216-C604-4CFF-A7D5-0E2EBB253F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "233F7D1F-C707-45D6-BF37-EF196A1CA655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "27EBFA6E-9582-49F4-A62D-B9B39F873D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4D211D67-C766-4FE0-A050-688DCC4E4137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC066843-6A98-4B8B-B679-D8A229D0F1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35336E10-BC3C-4B0E-9AF0-66B44A7EEF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "19F7A05A-4E95-4637-B4E9-23CB9A4C2E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9D5A6432-BA21-4AE7-A6D3-5B711B961B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "28C73478-4D60-48A2-8A43-9005B222792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F01C2CA5-BB6D-465F-9B3E-D9DCC04DAF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EAF9B9F4-B53F-4A07-B99D-C61FEDD09C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "799C425B-06A3-4E3E-AC7F-67B7DE9974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "635D4195-A97E-4536-9C69-C5E3EC3D206C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "76266618-3291-42B8-ABF9-3161C9A2A335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "798C040F-8F99-4460-B37D-335DF063442B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B7C33A71-E752-43D4-A164-740750ABD096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F580DE3E-263A-4503-8B06-08C5FF1AC4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4B5D579-9F10-4EE2-975C-760D7945C781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2B34014-7733-4630-9AEA-85433E95F9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "10BBA4C5-F9BB-4D5A-A1BE-EC99FFEA2D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C14764E6-2751-4507-8FBF-ABBB95B73C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EA5558A0-D654-47AF-A661-21B15CC5374D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ACD4CD5D-B16D-4C15-8055-A6EE5C96F389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "77E011B6-E73B-4CD7-AED3-E8F293907769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF030EED-A04A-4294-89BE-D67981373CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C610597-192B-436C-B773-3578EE1135EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "596F09DA-7A82-4A49-BA5F-A3457D5D1895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AC8D2A19-26A2-43EA-874D-0AECECF38F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "61E484CB-FE4E-446A-9E4A-7D7FBB90D5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EEFB299E-5AE8-4BC7-AE41-9861C3C6E5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2BAFB77-61AB-4590-91A5-E6006CCFD60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "250C3970-411A-45CA-A0F1-3336979795D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE488750-1330-43A2-97DE-3D3BF1E808EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E95F30F2-0AC8-4A22-AA66-DB80325EBA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AE191589-6E7C-4634-A9D8-1B1E7F8343DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "860229EC-16ED-439A-A34E-5D3F85FFDCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4F3001C-E518-479B-8A57-E34FFFAA4FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A73F6299-1A0C-4A73-89C8-48885E11F65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C71D6779-24D2-4AF0-BEF1-FE99BC95BB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC64EC9A-F109-4BBE-935A-CFD7DC8DB2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F2CDBCA-5552-42BE-8DC8-4741679971D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "80D51A30-78E8-40DE-809D-9FF619A23158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C1791CCB-E96B-465C-B57B-C7B97A437642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DA617937-2E8B-4955-BD27-65C3CC4013B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1307D569-70FD-4253-A14C-29F3CDA35EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DFA69B19-9A2C-40F9-88F4-B43389B6A56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FBC724FF-FDE9-440B-8CC2-AF210114CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BA0E1A98-C42C-43BC-B409-25F033677BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1133B673-D917-4919-9F6B-A11E9C86BCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC9747A1-F2E5-4973-B56C-B6E0A42024BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "91951F15-C571-42C1-897A-B3D3C2B70A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1292ACFD-4CA4-4F7E-B7DB-8B3CA85C5B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2C6E2816-60F8-4297-B3C7-3EFA2C3BDD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2A7E1989-6E7F-4700-B779-7E39CB695E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC4E8293-59A7-4F47-B2F5-2F950B93E16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BBA14C23-4DBF-47C8-8FB3-9233C54247BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE07DB4E-85AB-4495-B81D-2478E1CD0FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F4260AB5-24D7-4D6C-B55F-3129BDDBEF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A4300AF-10D6-4E09-B6DF-B28144F8E024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C11B2FEB-7617-49DA-AB18-CA2F37367480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B606D916-B540-465A-946B-2FEBF2850916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FCE2860A-1826-4A8B-A66F-D11733F9103D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E84297DB-5816-4FA5-8696-204CAF1BEF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C9219C64-059A-4A3E-8836-AAD56D40CEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57353E36-EFA9-402B-AFF5-AFADACCEE6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57CFDD8F-7705-43EC-938C-100A750BF6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9330CE70-6112-4194-81FF-B58A073447EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D6EC7E97-76CE-4749-BDF9-409C3C5D5836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A555D06A-B5B1-4ADB-B920-F7509691DC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7EA2C3DD-9ADE-4089-A358-7866A460BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2E197079-35B1-4896-9A6D-29FF88C95338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E6AA3ECC-E3FA-49AF-916F-37691A3BD04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5D54DA67-239B-4340-85ED-9BD93D19A83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5381B696-F48C-4763-BF8B-B10CF0134473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9A10EB23-2504-4D98-8D1E-3398D9A386AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "88C6CCC3-FA1C-4CA5-896D-0ECFE1C5F3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D5107B7E-0270-44EA-97AD-E186A83FC0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "530AE8D8-8D69-4F38-A8A9-78BB6FFEF18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.28:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D1DC1670-DB4B-4B2E-9B86-51B5C143C199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.29:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F1877E4D-26D2-4904-8053-D3C4A2A12C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "60F9E180-C44C-4C7A-B05C-1D188061DA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.30:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0020AAB4-42B4-4FDA-8980-3BB478B0D933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.31:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35EB35EF-46C4-4A75-B8E6-7C29C776D5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.32:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C59AEF9-1C8C-41C0-8786-55CB41AA1829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.33:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6EA1686D-E53A-4C35-8743-09FF7F2C6795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.34:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0897894F-2D60-4E27-827C-ACBA6E30FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.35:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FB28994-3EB1-4857-B2F1-6210D61A61D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.36:*:*:*:node.js:*:*",
            "matchCriteriaId" : "137F6EAA-831A-42C0-B003-FB4F583D7279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.37:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E41A87FE-1651-4A7A-8E32-2B20D69F5593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.38:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D791B7C0-E3E7-4BE4-A691-8398263CC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.39:*:*:*:node.js:*:*",
            "matchCriteriaId" : "177C31B7-05D9-4690-897A-2FDBC406AB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FD4CC16-C0F6-4C05-970D-B54E84A8C7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.40:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F1B8B29-DFAD-4634-AC12-C1DFF2FBA5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.41:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57FB28C9-5DE8-4D09-9BDE-FFFBD7516F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8589D874-D29D-4583-A1DA-59D8F39027A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "13A8384B-B775-41C9-96F5-20186B6D82BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2948F800-5515-4729-A82D-2DACA81BA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1A253A5D-C7DB-4B64-A77A-D03FEFBDC8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1DECD32E-1F70-4AA0-9AA7-8E25CDC611C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7D1B3EF0-F7E5-46E4-8741-B234A4389137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C694360B-3347-4F9F-A621-080C0EAC4DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "49AA820D-E082-47D2-803D-6B54476C0203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "85F7BCC9-C07E-41ED-B172-2FBE6EC25281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5148D58F-AB4C-46F0-8BD0-0F67E908D268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "487A1716-0D40-44A0-9F38-5FE7CA8EB7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "52BF57A4-CA0D-4573-AD58-6E2572A7F6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "31B0DA15-56F5-4CAF-B143-BFCF15B9FC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "42263CAA-72DA-4B09-81B7-6E25DDF9FF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A72FAF71-B360-4CAD-8369-22FA7203059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3A15C600-A7E7-43BA-85A5-33EF4A580BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E0FF7351-1107-4C32-A33B-A72929B8B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC47F04B-0CAB-4F59-AD13-098E01F33ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A0BEBE6-165D-4E02-84FB-0CE15101B7E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E50D6B9B-1480-4FFC-A5E1-0AC266B5505D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "63696822-C9C4-4094-B2A6-CD3026748EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2694A32A-009C-4189-849B-2388D53B0276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FDF833EE-1D53-49EE-8FE5-2D8E56F66AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2458B177-3461-425A-89AA-13866FE27028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-cvwj-6c9h-jg6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27609",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:05.120",
      "lastModified" : "2026-02-27T19:16:34.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) lacks CSRF protection. An attacker can craft a malicious page that, when visited by an authenticated dashboard user, submits requests to the agent endpoint using the victim's session. The fix in version 9.0.0-alpha.8 adds CSRF middleware to the agent endpoint and embeds a CSRF token in the dashboard page. As a workaround, remove the `agent` configuration block from your dashboard configuration. Dashboards without an `agent` config are not affected."
      }, {
        "lang" : "es",
        "value" : "Parse Dashboard es un panel de control independiente para gestionar aplicaciones de Parse Server. En las versiones 7.3.0-alpha.42 hasta la 9.0.0-alpha.7, el endpoint de la API del Agente de IA ('POST /apps/:appId/agent') carece de protección CSRF. Un atacante puede crear una página maliciosa que, al ser visitada por un usuario autenticado del panel de control, envía solicitudes al endpoint del agente utilizando la sesión de la víctima. La corrección en la versión 9.0.0-alpha.8 añade middleware CSRF al endpoint del agente e incrusta un token CSRF en la página del panel de control. Como solución alternativa, elimine el bloque de configuración 'agent' de su configuración del panel de control. Los paneles de control sin una configuración 'agent' no se ven afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D4744D8A-C870-492A-AD66-D6CB083CD7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "23F5E70B-99F7-46FE-A13B-D2B9B9BFDF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.44:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F3FE9CD-0F0B-4AB8-BB42-04B23C1DEF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1F87B033-9ADD-4DBB-BC6C-A3EBE7502CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F5263840-349D-42E1-BAB1-AB6826B588B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "640870FE-F70F-401D-A749-3CD0EF66A436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64F0B732-1E46-4B86-BDC0-4F1025989DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3427EA35-6D06-4D44-B4E0-63F36908D506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0-alpha.42:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4D5D9AC-B261-46D7-83E1-B10E3C02C2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "87F8BED8-AA0B-4BB4-817A-ECF3581DB66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "306508B1-2E2A-4A76-A67C-1F8A15D5EC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA055428-E398-4766-9C08-66D2113CE7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9CC5FAB0-7046-40B0-842D-138BD8CC8B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AF1A1FFC-9FE6-4596-9377-8A410517748D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "638E5B8B-F2F1-47AC-AD0D-7AD7835CB6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8AC5C34F-1B61-4A65-811E-5CC7DBFF4FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F95EFF10-2977-4330-B2AB-9E0A1038AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A3B3D71-CD51-41C4-A756-F741FC9A17AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "46A42216-C604-4CFF-A7D5-0E2EBB253F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "233F7D1F-C707-45D6-BF37-EF196A1CA655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "27EBFA6E-9582-49F4-A62D-B9B39F873D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4D211D67-C766-4FE0-A050-688DCC4E4137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC066843-6A98-4B8B-B679-D8A229D0F1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35336E10-BC3C-4B0E-9AF0-66B44A7EEF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "19F7A05A-4E95-4637-B4E9-23CB9A4C2E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9D5A6432-BA21-4AE7-A6D3-5B711B961B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "28C73478-4D60-48A2-8A43-9005B222792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F01C2CA5-BB6D-465F-9B3E-D9DCC04DAF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EAF9B9F4-B53F-4A07-B99D-C61FEDD09C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "799C425B-06A3-4E3E-AC7F-67B7DE9974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "635D4195-A97E-4536-9C69-C5E3EC3D206C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "76266618-3291-42B8-ABF9-3161C9A2A335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "798C040F-8F99-4460-B37D-335DF063442B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B7C33A71-E752-43D4-A164-740750ABD096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F580DE3E-263A-4503-8B06-08C5FF1AC4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4B5D579-9F10-4EE2-975C-760D7945C781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2B34014-7733-4630-9AEA-85433E95F9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "10BBA4C5-F9BB-4D5A-A1BE-EC99FFEA2D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C14764E6-2751-4507-8FBF-ABBB95B73C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EA5558A0-D654-47AF-A661-21B15CC5374D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ACD4CD5D-B16D-4C15-8055-A6EE5C96F389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "77E011B6-E73B-4CD7-AED3-E8F293907769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF030EED-A04A-4294-89BE-D67981373CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C610597-192B-436C-B773-3578EE1135EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "596F09DA-7A82-4A49-BA5F-A3457D5D1895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AC8D2A19-26A2-43EA-874D-0AECECF38F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "61E484CB-FE4E-446A-9E4A-7D7FBB90D5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EEFB299E-5AE8-4BC7-AE41-9861C3C6E5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2BAFB77-61AB-4590-91A5-E6006CCFD60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "250C3970-411A-45CA-A0F1-3336979795D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE488750-1330-43A2-97DE-3D3BF1E808EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E95F30F2-0AC8-4A22-AA66-DB80325EBA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AE191589-6E7C-4634-A9D8-1B1E7F8343DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "860229EC-16ED-439A-A34E-5D3F85FFDCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4F3001C-E518-479B-8A57-E34FFFAA4FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A73F6299-1A0C-4A73-89C8-48885E11F65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C71D6779-24D2-4AF0-BEF1-FE99BC95BB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC64EC9A-F109-4BBE-935A-CFD7DC8DB2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F2CDBCA-5552-42BE-8DC8-4741679971D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "80D51A30-78E8-40DE-809D-9FF619A23158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C1791CCB-E96B-465C-B57B-C7B97A437642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DA617937-2E8B-4955-BD27-65C3CC4013B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1307D569-70FD-4253-A14C-29F3CDA35EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DFA69B19-9A2C-40F9-88F4-B43389B6A56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FBC724FF-FDE9-440B-8CC2-AF210114CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BA0E1A98-C42C-43BC-B409-25F033677BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1133B673-D917-4919-9F6B-A11E9C86BCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC9747A1-F2E5-4973-B56C-B6E0A42024BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "91951F15-C571-42C1-897A-B3D3C2B70A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1292ACFD-4CA4-4F7E-B7DB-8B3CA85C5B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2C6E2816-60F8-4297-B3C7-3EFA2C3BDD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2A7E1989-6E7F-4700-B779-7E39CB695E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC4E8293-59A7-4F47-B2F5-2F950B93E16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BBA14C23-4DBF-47C8-8FB3-9233C54247BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE07DB4E-85AB-4495-B81D-2478E1CD0FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F4260AB5-24D7-4D6C-B55F-3129BDDBEF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A4300AF-10D6-4E09-B6DF-B28144F8E024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C11B2FEB-7617-49DA-AB18-CA2F37367480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B606D916-B540-465A-946B-2FEBF2850916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FCE2860A-1826-4A8B-A66F-D11733F9103D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E84297DB-5816-4FA5-8696-204CAF1BEF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C9219C64-059A-4A3E-8836-AAD56D40CEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57353E36-EFA9-402B-AFF5-AFADACCEE6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57CFDD8F-7705-43EC-938C-100A750BF6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9330CE70-6112-4194-81FF-B58A073447EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D6EC7E97-76CE-4749-BDF9-409C3C5D5836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A555D06A-B5B1-4ADB-B920-F7509691DC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7EA2C3DD-9ADE-4089-A358-7866A460BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2E197079-35B1-4896-9A6D-29FF88C95338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E6AA3ECC-E3FA-49AF-916F-37691A3BD04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5D54DA67-239B-4340-85ED-9BD93D19A83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5381B696-F48C-4763-BF8B-B10CF0134473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9A10EB23-2504-4D98-8D1E-3398D9A386AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "88C6CCC3-FA1C-4CA5-896D-0ECFE1C5F3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D5107B7E-0270-44EA-97AD-E186A83FC0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "530AE8D8-8D69-4F38-A8A9-78BB6FFEF18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.28:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D1DC1670-DB4B-4B2E-9B86-51B5C143C199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.29:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F1877E4D-26D2-4904-8053-D3C4A2A12C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "60F9E180-C44C-4C7A-B05C-1D188061DA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.30:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0020AAB4-42B4-4FDA-8980-3BB478B0D933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.31:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35EB35EF-46C4-4A75-B8E6-7C29C776D5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.32:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C59AEF9-1C8C-41C0-8786-55CB41AA1829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.33:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6EA1686D-E53A-4C35-8743-09FF7F2C6795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.34:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0897894F-2D60-4E27-827C-ACBA6E30FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.35:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FB28994-3EB1-4857-B2F1-6210D61A61D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.36:*:*:*:node.js:*:*",
            "matchCriteriaId" : "137F6EAA-831A-42C0-B003-FB4F583D7279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.37:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E41A87FE-1651-4A7A-8E32-2B20D69F5593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.38:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D791B7C0-E3E7-4BE4-A691-8398263CC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.39:*:*:*:node.js:*:*",
            "matchCriteriaId" : "177C31B7-05D9-4690-897A-2FDBC406AB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FD4CC16-C0F6-4C05-970D-B54E84A8C7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.40:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F1B8B29-DFAD-4634-AC12-C1DFF2FBA5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.41:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57FB28C9-5DE8-4D09-9BDE-FFFBD7516F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8589D874-D29D-4583-A1DA-59D8F39027A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "13A8384B-B775-41C9-96F5-20186B6D82BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2948F800-5515-4729-A82D-2DACA81BA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1A253A5D-C7DB-4B64-A77A-D03FEFBDC8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1DECD32E-1F70-4AA0-9AA7-8E25CDC611C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7D1B3EF0-F7E5-46E4-8741-B234A4389137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C694360B-3347-4F9F-A621-080C0EAC4DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "49AA820D-E082-47D2-803D-6B54476C0203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "85F7BCC9-C07E-41ED-B172-2FBE6EC25281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5148D58F-AB4C-46F0-8BD0-0F67E908D268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "487A1716-0D40-44A0-9F38-5FE7CA8EB7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "52BF57A4-CA0D-4573-AD58-6E2572A7F6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "31B0DA15-56F5-4CAF-B143-BFCF15B9FC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "42263CAA-72DA-4B09-81B7-6E25DDF9FF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A72FAF71-B360-4CAD-8369-22FA7203059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3A15C600-A7E7-43BA-85A5-33EF4A580BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E0FF7351-1107-4C32-A33B-A72929B8B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC47F04B-0CAB-4F59-AD13-098E01F33ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A0BEBE6-165D-4E02-84FB-0CE15101B7E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E50D6B9B-1480-4FFC-A5E1-0AC266B5505D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "63696822-C9C4-4094-B2A6-CD3026748EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2694A32A-009C-4189-849B-2388D53B0276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FDF833EE-1D53-49EE-8FE5-2D8E56F66AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2458B177-3461-425A-89AA-13866FE27028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-3534-xp88-25rc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27610",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:05.297",
      "lastModified" : "2026-02-27T19:14:29.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both master key and read-only master key when resolving function-typed keys. Under specific timing conditions, a read-only user can receive the cached full master key, or a regular user can receive the cached read-only master key. The fix in version 9.0.0-alpha.8 uses distinct cache keys for master key and read-only master key. As a workaround, avoid using function-typed master keys, or remove the `agent` configuration block from your dashboard configuration."
      }, {
        "lang" : "es",
        "value" : "Parse Dashboard es un panel de control independiente para gestionar aplicaciones de Parse Server. En las versiones 7.3.0-alpha.42 hasta la 9.0.0-alpha.7, el `ConfigKeyCache` utiliza la misma clave de caché tanto para la clave maestra como para la clave maestra de solo lectura al resolver claves de tipo función. Bajo condiciones de tiempo específicas, un usuario de solo lectura puede recibir la clave maestra completa en caché, o un usuario regular puede recibir la clave maestra de solo lectura en caché. La corrección en la versión 9.0.0-alpha.8 utiliza claves de caché distintas para la clave maestra y la clave maestra de solo lectura. Como solución alternativa, evite usar claves maestras de tipo función, o elimine el bloque de configuración `agent` de la configuración de su panel de control."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1289"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D4744D8A-C870-492A-AD66-D6CB083CD7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "23F5E70B-99F7-46FE-A13B-D2B9B9BFDF05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.44:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F3FE9CD-0F0B-4AB8-BB42-04B23C1DEF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1F87B033-9ADD-4DBB-BC6C-A3EBE7502CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F5263840-349D-42E1-BAB1-AB6826B588B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "640870FE-F70F-401D-A749-3CD0EF66A436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64F0B732-1E46-4B86-BDC0-4F1025989DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3427EA35-6D06-4D44-B4E0-63F36908D506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "87F8BED8-AA0B-4BB4-817A-ECF3581DB66B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "306508B1-2E2A-4A76-A67C-1F8A15D5EC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA055428-E398-4766-9C08-66D2113CE7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9CC5FAB0-7046-40B0-842D-138BD8CC8B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.4.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AF1A1FFC-9FE6-4596-9377-8A410517748D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "638E5B8B-F2F1-47AC-AD0D-7AD7835CB6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8AC5C34F-1B61-4A65-811E-5CC7DBFF4FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F95EFF10-2977-4330-B2AB-9E0A1038AB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A3B3D71-CD51-41C4-A756-F741FC9A17AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "46A42216-C604-4CFF-A7D5-0E2EBB253F70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "233F7D1F-C707-45D6-BF37-EF196A1CA655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "27EBFA6E-9582-49F4-A62D-B9B39F873D5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4D211D67-C766-4FE0-A050-688DCC4E4137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC066843-6A98-4B8B-B679-D8A229D0F1CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35336E10-BC3C-4B0E-9AF0-66B44A7EEF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "19F7A05A-4E95-4637-B4E9-23CB9A4C2E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9D5A6432-BA21-4AE7-A6D3-5B711B961B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "28C73478-4D60-48A2-8A43-9005B222792C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F01C2CA5-BB6D-465F-9B3E-D9DCC04DAF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:7.6.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EAF9B9F4-B53F-4A07-B99D-C61FEDD09C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "799C425B-06A3-4E3E-AC7F-67B7DE9974B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "635D4195-A97E-4536-9C69-C5E3EC3D206C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "76266618-3291-42B8-ABF9-3161C9A2A335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "798C040F-8F99-4460-B37D-335DF063442B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B7C33A71-E752-43D4-A164-740750ABD096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F580DE3E-263A-4503-8B06-08C5FF1AC4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4B5D579-9F10-4EE2-975C-760D7945C781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2B34014-7733-4630-9AEA-85433E95F9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "10BBA4C5-F9BB-4D5A-A1BE-EC99FFEA2D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C14764E6-2751-4507-8FBF-ABBB95B73C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EA5558A0-D654-47AF-A661-21B15CC5374D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ACD4CD5D-B16D-4C15-8055-A6EE5C96F389"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "77E011B6-E73B-4CD7-AED3-E8F293907769"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF030EED-A04A-4294-89BE-D67981373CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C610597-192B-436C-B773-3578EE1135EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "596F09DA-7A82-4A49-BA5F-A3457D5D1895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AC8D2A19-26A2-43EA-874D-0AECECF38F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "61E484CB-FE4E-446A-9E4A-7D7FBB90D5A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EEFB299E-5AE8-4BC7-AE41-9861C3C6E5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.1.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F2BAFB77-61AB-4590-91A5-E6006CCFD60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "250C3970-411A-45CA-A0F1-3336979795D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE488750-1330-43A2-97DE-3D3BF1E808EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E95F30F2-0AC8-4A22-AA66-DB80325EBA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AE191589-6E7C-4634-A9D8-1B1E7F8343DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "860229EC-16ED-439A-A34E-5D3F85FFDCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4F3001C-E518-479B-8A57-E34FFFAA4FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A73F6299-1A0C-4A73-89C8-48885E11F65C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C71D6779-24D2-4AF0-BEF1-FE99BC95BB26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC64EC9A-F109-4BBE-935A-CFD7DC8DB2C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6F2CDBCA-5552-42BE-8DC8-4741679971D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "80D51A30-78E8-40DE-809D-9FF619A23158"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C1791CCB-E96B-465C-B57B-C7B97A437642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DA617937-2E8B-4955-BD27-65C3CC4013B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1307D569-70FD-4253-A14C-29F3CDA35EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DFA69B19-9A2C-40F9-88F4-B43389B6A56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FBC724FF-FDE9-440B-8CC2-AF210114CF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BA0E1A98-C42C-43BC-B409-25F033677BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1133B673-D917-4919-9F6B-A11E9C86BCAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC9747A1-F2E5-4973-B56C-B6E0A42024BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "91951F15-C571-42C1-897A-B3D3C2B70A51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1292ACFD-4CA4-4F7E-B7DB-8B3CA85C5B84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2C6E2816-60F8-4297-B3C7-3EFA2C3BDD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2A7E1989-6E7F-4700-B779-7E39CB695E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EC4E8293-59A7-4F47-B2F5-2F950B93E16A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BBA14C23-4DBF-47C8-8FB3-9233C54247BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DE07DB4E-85AB-4495-B81D-2478E1CD0FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.2.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F4260AB5-24D7-4D6C-B55F-3129BDDBEF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A4300AF-10D6-4E09-B6DF-B28144F8E024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C11B2FEB-7617-49DA-AB18-CA2F37367480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B606D916-B540-465A-946B-2FEBF2850916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FCE2860A-1826-4A8B-A66F-D11733F9103D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E84297DB-5816-4FA5-8696-204CAF1BEF6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C9219C64-059A-4A3E-8836-AAD56D40CEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57353E36-EFA9-402B-AFF5-AFADACCEE6E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57CFDD8F-7705-43EC-938C-100A750BF6A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9330CE70-6112-4194-81FF-B58A073447EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D6EC7E97-76CE-4749-BDF9-409C3C5D5836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A555D06A-B5B1-4ADB-B920-F7509691DC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7EA2C3DD-9ADE-4089-A358-7866A460BB62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.20:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2E197079-35B1-4896-9A6D-29FF88C95338"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.21:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E6AA3ECC-E3FA-49AF-916F-37691A3BD04A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.22:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5D54DA67-239B-4340-85ED-9BD93D19A83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.23:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5381B696-F48C-4763-BF8B-B10CF0134473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.24:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9A10EB23-2504-4D98-8D1E-3398D9A386AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.25:*:*:*:node.js:*:*",
            "matchCriteriaId" : "88C6CCC3-FA1C-4CA5-896D-0ECFE1C5F3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.26:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D5107B7E-0270-44EA-97AD-E186A83FC0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.27:*:*:*:node.js:*:*",
            "matchCriteriaId" : "530AE8D8-8D69-4F38-A8A9-78BB6FFEF18E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.28:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D1DC1670-DB4B-4B2E-9B86-51B5C143C199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.29:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F1877E4D-26D2-4904-8053-D3C4A2A12C79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "60F9E180-C44C-4C7A-B05C-1D188061DA73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.30:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0020AAB4-42B4-4FDA-8980-3BB478B0D933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.31:*:*:*:node.js:*:*",
            "matchCriteriaId" : "35EB35EF-46C4-4A75-B8E6-7C29C776D5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.32:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C59AEF9-1C8C-41C0-8786-55CB41AA1829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.33:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6EA1686D-E53A-4C35-8743-09FF7F2C6795"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.34:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0897894F-2D60-4E27-827C-ACBA6E30FABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.35:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FB28994-3EB1-4857-B2F1-6210D61A61D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.36:*:*:*:node.js:*:*",
            "matchCriteriaId" : "137F6EAA-831A-42C0-B003-FB4F583D7279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.37:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E41A87FE-1651-4A7A-8E32-2B20D69F5593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.38:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D791B7C0-E3E7-4BE4-A691-8398263CC901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.39:*:*:*:node.js:*:*",
            "matchCriteriaId" : "177C31B7-05D9-4690-897A-2FDBC406AB0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8FD4CC16-C0F6-4C05-970D-B54E84A8C7FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.40:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F1B8B29-DFAD-4634-AC12-C1DFF2FBA5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.41:*:*:*:node.js:*:*",
            "matchCriteriaId" : "57FB28C9-5DE8-4D09-9BDE-FFFBD7516F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.42:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8589D874-D29D-4583-A1DA-59D8F39027A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.43:*:*:*:node.js:*:*",
            "matchCriteriaId" : "13A8384B-B775-41C9-96F5-20186B6D82BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2948F800-5515-4729-A82D-2DACA81BA2DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1A253A5D-C7DB-4B64-A77A-D03FEFBDC8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1DECD32E-1F70-4AA0-9AA7-8E25CDC611C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7D1B3EF0-F7E5-46E4-8741-B234A4389137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.3.0:alpha.9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C694360B-3347-4F9F-A621-080C0EAC4DAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "49AA820D-E082-47D2-803D-6B54476C0203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "85F7BCC9-C07E-41ED-B172-2FBE6EC25281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.4.1:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5148D58F-AB4C-46F0-8BD0-0F67E908D268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "487A1716-0D40-44A0-9F38-5FE7CA8EB7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "52BF57A4-CA0D-4573-AD58-6E2572A7F6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "31B0DA15-56F5-4CAF-B143-BFCF15B9FC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "42263CAA-72DA-4B09-81B7-6E25DDF9FF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A72FAF71-B360-4CAD-8369-22FA7203059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3A15C600-A7E7-43BA-85A5-33EF4A580BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:8.5.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E0FF7351-1107-4C32-A33B-A72929B8B08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC47F04B-0CAB-4F59-AD13-098E01F33ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A0BEBE6-165D-4E02-84FB-0CE15101B7E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E50D6B9B-1480-4FFC-A5E1-0AC266B5505D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "63696822-C9C4-4094-B2A6-CD3026748EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2694A32A-009C-4189-849B-2388D53B0276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FDF833EE-1D53-49EE-8FE5-2D8E56F66AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse_dashboard:9.0.0:alpha.7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2458B177-3461-425A-89AA-13866FE27028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-dashboard/commit/f92a9ef5246d57e51696bd881a15f3b133b2bb50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-jhp4-jvq3-w5xr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27611",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:05.463",
      "lastModified" : "2026-02-27T19:12:25.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable and 1.2.6-beta, when users share password-protected files, the recipient can completely bypass the password and still download the file. This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without the password. Versions 1.1.3-stable and 1.2.6-beta fix the issue."
      }, {
        "lang" : "es",
        "value" : "FileBrowser Quantum es un gestor de archivos gratuito, autoalojado y basado en web. Antes de las versiones 1.1.3-stable y 1.2.6-beta, cuando los usuarios comparten archivos protegidos con contraseña, el destinatario puede omitir completamente la contraseña y aun así descargar el archivo. Esto ocurre porque la API devuelve un enlace de descarga directa en los detalles del recurso compartido, que es accesible para cualquiera con SOLO EL ENLACE COMPARTIDO, incluso sin la contraseña. Las versiones 1.1.3-stable y 1.2.6-beta solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtsteffaniak:filebrowser_quantum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "4375D364-0CCA-4F97-AEFA-4EE4D8F5646E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtsteffaniak:filebrowser_quantum:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.6",
            "matchCriteriaId" : "4087A9CC-6232-4DA2-96D5-0F5B86D7EFCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtsteffaniak:filebrowser_quantum:1.1.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "9000A111-4C0C-4FC1-A3B4-C5BDB2C5AFE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gtsteffaniak/filebrowser/commit/c51b0ee9738fa4599b409f47c5bf820ef31b4fe1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-8vrh-3pm2-v4v6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-8vrh-3pm2-v4v6",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27612",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:05.627",
      "lastModified" : "2026-02-27T19:08:59.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Repostat is a React component to fetch and display GitHub repository info. Prior to version 1.0.1, the `RepoCard` component is vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability occurs because the component uses React's `dangerouslySetInnerHTML` to render the repository name (`repo` prop) during the loading state without any sanitization. If a developer using this package passes unvalidated user input directly into the `repo` prop (for example, reading it from a URL query parameter), an attacker can execute arbitrary JavaScript in the context of the user's browser. In version 1.0.1, the use of dangerouslySetInnerHTML has been removed, and the repo prop is now safely rendered using standard React JSX data binding, which automatically escapes HTML entities."
      }, {
        "lang" : "es",
        "value" : "Repostat es un componente de React para obtener y mostrar información de repositorios de GitHub. Antes de la versión 1.0.1, el componente 'RepoCard' es vulnerable a cross-site scripting (XSS) reflejado. La vulnerabilidad ocurre porque el componente utiliza `dangerouslySetInnerHTML` de React para renderizar el nombre del repositorio (propiedad 'repo') durante el estado de carga sin ninguna sanitización. Si un desarrollador que utiliza este paquete pasa una entrada de usuario no validada directamente a la propiedad 'repo' (por ejemplo, leyéndola de un parámetro de consulta de URL), un atacante puede ejecutar JavaScript arbitrario en el contexto del navegador del usuario. En la versión 1.0.1, se ha eliminado el uso de `dangerouslySetInnerHTML`, y la propiedad 'repo' ahora se renderiza de forma segura utilizando el enlace de datos JSX estándar de React, que escapa automáticamente las entidades HTML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denpiligrim:repostat:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "2135D09A-17E3-4BEF-8B19-5400B9F8BC33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denpiligrim/repostat/commit/715df5f73359d222fd7876e948d14290180e3c88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denpiligrim/repostat/security/advisories/GHSA-fm8c-6m29-rp6j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27614",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:05.803",
      "lastModified" : "2026-02-27T19:06:26.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. When Pygments returns more lines than it was given (a known upstream quirk that triggers with Ruby heredoc-style input), `_pygmentize_lines()` in `theme/templatetags/issues.py:75-77` falls back to returning the raw input lines. `mark_safe()` at line 111-113 is then applied unconditionally - including to those unsanitized raw lines. Since DSN endpoints are public by Sentry protocol, no account is needed to inject. The payload sits in the database until an admin looks at the event. Successful exploitation requires that the attacker to be able to submit events to the project (i.e. knows the DSN or can access a client that uses it), the Bugsink ingest endpoint is reachable to the attacker, and an administrator explicitly views the crafted event in the UI. Under those conditions, the attacker can execute JavaScript in the administrator’s browser and act with that user’s privileges within Bugsink. Version 2.0.13 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Bugsink es una herramienta de seguimiento de errores autoalojada. En versiones anteriores a la 2.0.13, un atacante no autenticado que puede enviar eventos a un proyecto de Bugsink puede almacenar JavaScript arbitrario en un evento. La carga útil se ejecuta solo si un usuario ve explícitamente el Stacktrace afectado en la interfaz de usuario web. Cuando Pygments devuelve más líneas de las que se le dieron (una peculiaridad conocida de la fuente que se activa con entrada de estilo heredoc de Ruby), '_pygmentize_lines()' en 'theme/templatetags/issues.py:75-77' recurre a devolver las líneas de entrada sin procesar. 'mark_safe()' en las líneas 111-113 se aplica entonces incondicionalmente, incluso a esas líneas sin procesar no saneadas. Dado que los endpoints DSN son públicos según el protocolo Sentry, no se necesita una cuenta para inyectar. La carga útil permanece en la base de datos hasta que un administrador mira el evento. Para explotarlo con éxito es preciso que el atacante pueda enviar eventos al proyecto (es decir, conozca el DSN o pueda acceder a un cliente que lo use), que el punto final de ingesta de Bugsink sea accesible para el atacante, y que un administrador vea explícitamente el evento manipulado en la interfaz de usuario. Bajo esas condiciones, el atacante puede ejecutar JavaScript en el navegador del administrador y actuar con los privilegios de ese usuario dentro de Bugsink. La versión 2.0.13 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bugsink:bugsink:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.13",
            "matchCriteriaId" : "97568C00-5B15-484D-B081-39D276B6F579"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bugsink/bugsink/commit/e784d6aeb0d5f29b40c2779d2544c2b9ef097ee9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bugsink/bugsink/releases/tag/2.0.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bugsink/bugsink/security/advisories/GHSA-vp6q-7m36-pq3w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27615",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:05.990",
      "lastModified" : "2026-02-27T19:04:28.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the `ManualAdbPath` settings variable, which determines the path of the ADB binary to be executed, to be set to a Universal Naming Convention (UNC) path in the application's settings file. This allows an attacker to set the binary's path to point to a remote network resource, hosted on an attacker-controlled network share, thus granting the attacker full control over the binary being executed by the app. An attacker may leverage this vulnerability to execute code remotely on a victim's machine with the privileges of the user running the app. Exploitation is made possible by convincing a victim to run a shortcut of the app that points to a custom `App.txt` settings file, which sets `ManualAdbPath` (for example, when downloaded in an archive file). Version Beta 0.9.26022 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "ADB Explorer es una interfaz de usuario fluida para ADB en Windows. En versiones anteriores a Beta 0.9.26022, ADB-Explorer permite que la variable de configuración 'ManualAdbPath', que determina la ruta del binario ADB a ejecutar, se establezca en una ruta de Convención de Nomenclatura Universal (UNC) en el archivo de configuración de la aplicación. Esto permite a un atacante establecer la ruta del binario para que apunte a un recurso de red remoto, alojado en un recurso compartido de red controlado por el atacante, otorgando así al atacante control total sobre el binario que ejecuta la aplicación. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código de forma remota en la máquina de una víctima con los privilegios del usuario que ejecuta la aplicación. La explotación es posible al convencer a una víctima de ejecutar un acceso directo de la aplicación que apunta a un archivo de configuración 'App.txt' personalizado, que establece 'ManualAdbPath' (por ejemplo, cuando se descarga en un archivo comprimido). La versión Beta 0.9.26022 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-40"
        }, {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alex4ssb:adb_explorer:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "0.9.26022",
            "matchCriteriaId" : "C02EA1E7-E0FF-4607-A021-2FB1BC886AB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-3f27-jp2g-hwhr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-3f27-jp2g-hwhr",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27621",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:06.173",
      "lastModified" : "2026-02-27T19:02:16.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TypiCMS is a multilingual content management system based on the Laravel framework. A Stored Cross-Site Scripting (XSS) vulnerability exists in the file upload module of TypiCMS prior to version 16.1.7. The application allows users with file upload permissions to upload SVG files. While there is a MIME type validation, the content of the SVG file is not sanitized. An attacker can upload a specially crafted SVG file containing malicious JavaScript code. When another user (such as an administrator) views or accesses this file through the application, the script executes in their browser, leading to a compromise of that user's session. The issue is exacerbated by a bug in the SVG parsing logic, which can cause a 500 error if the uploaded SVG does not contain a `viewBox` attribute. However, this does not mitigate the XSS vulnerability, as an attacker can easily include a valid `viewBox` attribute in their malicious payload. Version 16.1.7 of TypiCMS Core fixes the issue."
      }, {
        "lang" : "es",
        "value" : "TypiCMS es un sistema de gestión de contenido multilingüe basado en el framework Laravel. Existe una vulnerabilidad de Cross-Site Scripting (XSS) almacenado en el módulo de carga de archivos de TypiCMS anterior a la versión 16.1.7. La aplicación permite a los usuarios con permisos de carga de archivos subir archivos SVG. Aunque existe una validación de tipo MIME, el contenido del archivo SVG no se sanea. Un atacante puede subir un archivo SVG especialmente diseñado que contenga código JavaScript malicioso. Cuando otro usuario (como un administrador) ve o accede a este archivo a través de la aplicación, el script se ejecuta en su navegador, lo que lleva a un compromiso de la sesión de ese usuario. El problema se exacerba por un error en la lógica de análisis de SVG, que puede causar un error 500 si el SVG subido no contiene un atributo 'viewBox'. Sin embargo, esto no mitiga la vulnerabilidad XSS, ya que un atacante puede incluir fácilmente un atributo 'viewBox' válido en su carga útil maliciosa. La versión 16.1.7 de TypiCMS Core corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typicms:typicms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.1.7",
            "matchCriteriaId" : "AA2F1015-AAAF-47D8-B80F-A37E325D407F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TypiCMS/Core/commit/d480a0be1e8e7c0600bb9a325bb11920ee66497d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TypiCMS/Core/security/advisories/GHSA-xfvg-8v67-j7wp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27626",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:06.347",
      "lastModified" : "2026-02-27T18:58:46.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety check (`checkShellArgumentSafety`) blocks several dangerous argument types but not `password`. A user supplying a `password`-typed argument can inject shell metacharacters that execute arbitrary OS commands. A second independent vector allows unauthenticated RCE via webhook-extracted JSON values that skip type safety checks entirely before reaching `sh -c`. When exploiting vector 1, any authenticated user (registration enabled by default, `authType: none` by default) can execute arbitrary OS commands on the OliveTin host with the permissions of the OliveTin process. When exploiting vector 2, an unauthenticated attacker can achieve the same if the instance receives webhooks from external sources, which is a primary OliveTin use case. When an attacker exploits both vectors, this results in unauthenticated RCE on any OliveTin instance using Shell mode with webhook-triggered actions. As of time of publication, a patched version is not available."
      }, {
        "lang" : "es",
        "value" : "OliveTin da acceso a comandos de shell predefinidos desde una interfaz web. En versiones hasta la 3000.10.0 inclusive, la comprobación de seguridad del modo shell de OliveTin ('checkShellArgumentSafety') bloquea varios tipos de argumentos peligrosos, pero no 'password'. Un usuario que proporciona un argumento de tipo 'password' puede inyectar metacaracteres de shell que ejecutan comandos arbitrarios del sistema operativo. Un segundo vector independiente permite RCE no autenticada a través de valores JSON extraídos de webhooks que omiten por completo las comprobaciones de seguridad de tipo antes de llegar a 'sh -c'. Al explotar el vector 1, cualquier usuario autenticado (registro habilitado por defecto, 'authType: none' por defecto) puede ejecutar comandos arbitrarios del sistema operativo en el host de OliveTin con los permisos del proceso de OliveTin. Al explotar el vector 2, un atacante no autenticado puede lograr lo mismo si la instancia recibe webhooks de fuentes externas, lo cual es un caso de uso principal de OliveTin. Cuando un atacante explota ambos vectores, esto resulta en RCE no autenticada en cualquier instancia de OliveTin que utiliza el modo Shell con acciones activadas por webhook. En el momento de la publicación, no hay disponible una versión parcheada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3000.10.0",
            "matchCriteriaId" : "E09DB368-3973-4282-A0B6-5576CB6CCD5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-49gm-hh7w-wfvf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-49gm-hh7w-wfvf",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27628",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:06.513",
      "lastModified" : "2026-02-27T20:21:38.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually."
      }, {
        "lang" : "es",
        "value" : "pypdf es una librería PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.7.2, un atacante que utiliza esta vulnerabilidad puede crear un PDF que conduce a un bucle infinito. Esto requiere leer el archivo. Esto ha sido corregido en pypdf 6.7.2. Como solución alternativa, se puede aplicar el parche manualmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.2,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.2",
            "matchCriteriaId" : "C05E3F8F-273E-4DA4-BD19-4AAAF4E6BED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/f0a462d36971cf077d74492a348d0d06fd60ea4d",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/py-pdf/pypdf/issues/3654",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-2rw7-x74f-jg35",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/issues/3654",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27629",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:06.680",
      "lastModified" : "2026-02-27T20:00:51.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InvenTree is an Open Source Inventory Management System. Prior to version 1.2.3, insecure server-side templates can be hijacked to expose secure information to the client. When generating custom batch codes, the InvenTree server makes use of a customizable jinja2 template, which can be modified by a staff user to exfiltrate sensitive information or perform code execution on the server. This issue requires access by a user with granted staff permissions, followed by a request to generate a custom batch code via the API. Once the template has been modified in a malicious manner, the API call to generate a new batch code could be made by other users, and the template code will be executed with their user context. The code has been patched to ensure that all template generation is performed within a secure sandboxed context. This issue has been addressed in version 1.2.3, and any versions from 1.3.0 onwards. Some workarounds are available. The batch code template is a configurable global setting which can be adjusted via any user with staff access. To prevent this setting from being edited, it can be overridden at a system level to a default value, preventing it from being edited. This requires system administrator access, and cannot be changed from the client side once the server is running. It is recommended that for InvenTree installations prior to 1.2.3 the `STOCK_BATCH_CODE_TEMPLATE` and `PART_NAME_FORMAT` global settings are overridden at the system level to prevent editing."
      }, {
        "lang" : "es",
        "value" : "InvenTree es un Sistema de Gestión de Inventario de Código Abierto. Antes de la versión 1.2.3, las plantillas inseguras del lado del servidor pueden ser secuestradas para exponer información segura al cliente. Al generar códigos de lote personalizados, el servidor InvenTree utiliza una plantilla jinja2 personalizable, que puede ser modificada por un usuario del personal para exfiltrar información sensible o realizar ejecución de código en el servidor. Este problema requiere acceso por parte de un usuario con permisos de personal concedidos, seguido de una solicitud para generar un código de lote personalizado a través de la API. Una vez que la plantilla ha sido modificada de manera maliciosa, otros usuarios podrían llamar a la API para generar un nuevo código de lote, y el código de la plantilla se ejecutará con su contexto de usuario. El código ha sido parcheado para asegurar que toda la generación de plantillas se realice dentro de un contexto seguro en un entorno aislado. Este problema ha sido abordado en la versión 1.2.3, y en cualquier versión a partir de la 1.3.0. Hay disponibles algunas soluciones alternativas. La plantilla de código de lote es una configuración global configurable que puede ser ajustada por cualquier usuario con acceso de personal. Para evitar que esta configuración sea editada, puede ser anulada a nivel de sistema a un valor predeterminado, evitando que sea editada. Esto requiere acceso de administrador de sistema, y no puede ser cambiado desde el lado del cliente una vez que el servidor está en funcionamiento. Se recomienda que para las instalaciones de InvenTree anteriores a la 1.2.3, se anulen las configuraciones globales 'STOCK_BATCH_CODE_TEMPLATE' y 'PART_NAME_FORMAT' a nivel de sistema para evitar su edición."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inventree_project:inventree:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "B9F4ACA8-A3F6-4A3D-A434-DAAF703DEE40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/inventree/InvenTree/security/advisories/GHSA-cx85-vr3q-9x4m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27632",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:06.860",
      "lastModified" : "2026-02-27T19:57:49.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48, the Talishar application lacks Cross-Site Request Forgery (CSRF) protections on critical state-changing endpoints, specifically within `SubmitChat.php` and other game interaction handlers. By failing to require unique, unpredictable session tokens, the application allows third-party malicious websites to forge requests on behalf of authenticated users, leading to unauthorized actions within active game sessions. The attacker would need to know both the proper gameName and playerID for the player. The player would also need to be browsing and interact with the infected website while playing a game. The vulnerability is fixed in commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48."
      }, {
        "lang" : "es",
        "value" : "Talishar es un proyecto de Flesh and Blood hecho por fans. Antes del commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48, la aplicación Talishar carece de protecciones contra falsificación de petición en sitios cruzados (CSRF) en endpoints críticos que cambian el estado, específicamente dentro de 'SubmitChat.php' y otros manejadores de interacción del juego. Al no requerir tokens de sesión únicos e impredecibles, la aplicación permite a sitios web maliciosos de terceros falsificar peticiones en nombre de usuarios autenticados, lo que lleva a acciones no autorizadas dentro de sesiones de juego activas. El atacante necesitaría conocer tanto el gameName como el playerID correctos para el jugador. El jugador también necesitaría estar navegando e interactuando con el sitio web infectado mientras juega una partida. La vulnerabilidad está corregida en el commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talishar:talishar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-02-22",
            "matchCriteriaId" : "EB6EC428-F449-46D5-B308-45979347E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Talishar/Talishar/security/advisories/GHSA-73mm-323r-cm3g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27822",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T03:16:07.027",
      "lastModified" : "2026-02-25T15:36:59.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting (XSS) vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an attacker can steal administrator credentials from `localStorage`, leading to full account takeover and system compromise. Version 1.0.0-alpha.83 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "RustFS es un sistema de almacenamiento de objetos distribuido construido en Rust. Antes de la versión 1.0.0-alpha.83, una vulnerabilidad de cross-site scripting (XSS) almacenado en la Consola de RustFS permite a un atacante ejecutar JavaScript arbitrario en el contexto de la consola de gestión. Al eludir la lógica de previsualización de PDF, un atacante puede robar credenciales de administrador de 'localStorage', lo que lleva a una toma de control total de la cuenta y a un compromiso del sistema. La versión 1.0.0-alpha.83 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha1:*:*:*:rust:*:*",
            "matchCriteriaId" : "454A2F3A-76CF-4F2D-97FE-AEDEBE8FF1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha10:*:*:*:rust:*:*",
            "matchCriteriaId" : "32B2D146-7920-4C6D-B42F-1BDDF5193394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha11:*:*:*:rust:*:*",
            "matchCriteriaId" : "B25BC365-35BA-438A-B5B1-3FA696767821"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha12:*:*:*:rust:*:*",
            "matchCriteriaId" : "B69213F1-7D94-4185-9309-FF3140733550"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha13:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD2476D6-257C-4A96-BED4-D8B002402242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha14:*:*:*:rust:*:*",
            "matchCriteriaId" : "774EC64C-73ED-4D6B-893B-30A066DA934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha15:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B567F4F-131F-4D4B-8C0C-9212F22F2BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha16:*:*:*:rust:*:*",
            "matchCriteriaId" : "711F7641-A2B2-410B-B05D-6656F9A1798F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha17:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB79AC62-2B79-441C-BC09-4C834C32EADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha18:*:*:*:rust:*:*",
            "matchCriteriaId" : "62DE84EE-9F3B-460A-AC13-D2B8CCBC5B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha19:*:*:*:rust:*:*",
            "matchCriteriaId" : "DEF70599-6550-49D2-9800-FE3249A66568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha2:*:*:*:rust:*:*",
            "matchCriteriaId" : "550786BD-A6A4-454B-BDAB-67AE64DABCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha20:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDFE93A5-B6D7-482A-A891-4D8844604C07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha21:*:*:*:rust:*:*",
            "matchCriteriaId" : "79AC4F00-B006-46C2-863F-2946BB02B58E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha22:*:*:*:rust:*:*",
            "matchCriteriaId" : "E313A243-ED56-498D-988F-E088693EBB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha23:*:*:*:rust:*:*",
            "matchCriteriaId" : "D3A60CB7-1F01-4A60-8555-C225AC89B959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha24:*:*:*:rust:*:*",
            "matchCriteriaId" : "1C98618D-CF5D-406B-8AA5-34B412F3D43D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha25:*:*:*:rust:*:*",
            "matchCriteriaId" : "98373960-FEDB-4933-92D5-2A597045DD23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha26:*:*:*:rust:*:*",
            "matchCriteriaId" : "83E0E1A5-3C07-45FF-80FD-0DB375E1575E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha27:*:*:*:rust:*:*",
            "matchCriteriaId" : "C2D66076-4005-4F58-A8E2-69062053D786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha28:*:*:*:rust:*:*",
            "matchCriteriaId" : "1D8CB0F5-299F-4BB0-B264-F5642DD991C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha29:*:*:*:rust:*:*",
            "matchCriteriaId" : "96E20418-FE0C-4202-8771-FFF8EBB1B62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha3:*:*:*:rust:*:*",
            "matchCriteriaId" : "C16A625B-3FC4-48EB-9107-6E7585080D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha30:*:*:*:rust:*:*",
            "matchCriteriaId" : "810A17F9-AEEA-4396-B437-120789BBE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha31:*:*:*:rust:*:*",
            "matchCriteriaId" : "7B1FECD4-E993-417D-AEA7-F8E97DC6A5FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha32:*:*:*:rust:*:*",
            "matchCriteriaId" : "3839F299-E0E7-4994-A8AC-B67A534C9847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha33:*:*:*:rust:*:*",
            "matchCriteriaId" : "46CAEA4E-5DFD-4668-ABF0-DC53EB04EE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha34:*:*:*:rust:*:*",
            "matchCriteriaId" : "591075AB-81EF-4D42-A2A0-FA28BC6B78CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha35:*:*:*:rust:*:*",
            "matchCriteriaId" : "FD46ED07-6DCC-4BF8-A4E8-78B2FF6DCE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha36:*:*:*:rust:*:*",
            "matchCriteriaId" : "6DF15533-D6E1-49B0-B30A-6FEECC7AE06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha37:*:*:*:rust:*:*",
            "matchCriteriaId" : "EC68F03A-D299-4BFB-A99E-4B08E4E0848F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha38:*:*:*:rust:*:*",
            "matchCriteriaId" : "0DD60024-CAB2-4DA6-A9CA-503D2631E98B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha39:*:*:*:rust:*:*",
            "matchCriteriaId" : "32470ED0-7873-41A3-B2D5-7CD444ED0A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha4:*:*:*:rust:*:*",
            "matchCriteriaId" : "A88E9293-4B7C-4C52-9943-47197DB55D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha40:*:*:*:rust:*:*",
            "matchCriteriaId" : "E2EFC74D-40E7-426C-9F7B-3B654F2B940F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha41:*:*:*:rust:*:*",
            "matchCriteriaId" : "EAAF504E-51A5-492B-887E-BB67788B899C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha42:*:*:*:rust:*:*",
            "matchCriteriaId" : "35C83244-D2C7-4D70-9C0B-D0590B00C608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha43:*:*:*:rust:*:*",
            "matchCriteriaId" : "429E4ECD-997A-4D3B-9DE2-60835AE14473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha44:*:*:*:rust:*:*",
            "matchCriteriaId" : "5DDDBAA5-D207-498C-A6F0-79F07806C511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha45:*:*:*:rust:*:*",
            "matchCriteriaId" : "81758B85-6D2B-4914-96EC-E4CCDE2F9A52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha46:*:*:*:rust:*:*",
            "matchCriteriaId" : "D439B484-E32D-4A6A-84EE-9307A028F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha47:*:*:*:rust:*:*",
            "matchCriteriaId" : "FDA137F7-DC8A-44F4-8061-F502AC8DD7BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha48:*:*:*:rust:*:*",
            "matchCriteriaId" : "AE3EF7B3-E8C0-4844-9165-3A26EB426615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha49:*:*:*:rust:*:*",
            "matchCriteriaId" : "EB40D926-AE20-46A7-9B6E-ED1BADB9A08B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha5:*:*:*:rust:*:*",
            "matchCriteriaId" : "7F5E8DE5-ABB0-4884-B473-07FA596A8707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha50:*:*:*:rust:*:*",
            "matchCriteriaId" : "3A43A950-59A6-4343-815A-953C11DC3F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha51:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B36190-C30B-45BC-9738-BE0B3321025D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha52:*:*:*:rust:*:*",
            "matchCriteriaId" : "86A2967C-E2C6-4C73-9BDE-CCECACDB2B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha53:*:*:*:rust:*:*",
            "matchCriteriaId" : "5E10A654-E265-4469-8099-ABBB1F5D8BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha54:*:*:*:rust:*:*",
            "matchCriteriaId" : "762591A8-A0A2-45D2-B15F-1E85DFC5CA86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha55:*:*:*:rust:*:*",
            "matchCriteriaId" : "53DE196C-1914-40AE-854D-4988073D57C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha56:*:*:*:rust:*:*",
            "matchCriteriaId" : "5BE55B7E-3806-4F8A-B09C-7B9D173D3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha57:*:*:*:rust:*:*",
            "matchCriteriaId" : "8CF07DA6-11F6-4A19-9FD9-1955EC22C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha58:*:*:*:rust:*:*",
            "matchCriteriaId" : "1A571B98-0EE7-46A6-8514-3E02F9CE969A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha59:*:*:*:rust:*:*",
            "matchCriteriaId" : "3263EEC7-94FF-4802-BCB2-0C3713079439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha6:*:*:*:rust:*:*",
            "matchCriteriaId" : "2B55C391-0232-4F06-A9D8-3663FA564E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha60:*:*:*:rust:*:*",
            "matchCriteriaId" : "FA13E6EE-A889-408E-8503-2F57A5E46CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha61:*:*:*:rust:*:*",
            "matchCriteriaId" : "4D28A63E-ADE5-4DEC-8E75-0884A7011613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha62:*:*:*:rust:*:*",
            "matchCriteriaId" : "21E6129E-565C-45AE-A0C8-2D1B623EEC9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha63:*:*:*:rust:*:*",
            "matchCriteriaId" : "046F640C-18E9-4FC4-812D-8E4CAAFCAE55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha64:*:*:*:rust:*:*",
            "matchCriteriaId" : "BFB217B7-78AA-4D16-9A2B-863BD6CD01B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha65:*:*:*:rust:*:*",
            "matchCriteriaId" : "F8EEF3FF-410B-40F3-A144-CD61ED394109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha66:*:*:*:rust:*:*",
            "matchCriteriaId" : "E3494138-7FE7-4152-935C-C1C35179064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha67:*:*:*:rust:*:*",
            "matchCriteriaId" : "9E0461BC-0E45-4F9F-A837-4D9FC8852A75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha68:*:*:*:rust:*:*",
            "matchCriteriaId" : "E259407D-61CF-4956-A456-57F131334456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha69:*:*:*:rust:*:*",
            "matchCriteriaId" : "B6E44EF8-98A5-47F5-B7E9-3199EB08FAC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha7:*:*:*:rust:*:*",
            "matchCriteriaId" : "54AB158B-F536-4627-8C6B-65AEE112FDF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha70:*:*:*:rust:*:*",
            "matchCriteriaId" : "F4CBBD85-02F9-491A-8845-59EFB88F2DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha71:*:*:*:rust:*:*",
            "matchCriteriaId" : "2271380A-3AE1-4954-8D16-5065C8E88D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha72:*:*:*:rust:*:*",
            "matchCriteriaId" : "DB3F6C7E-71E4-427A-96F4-F62DE0ED9450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha73:*:*:*:rust:*:*",
            "matchCriteriaId" : "980BEAAE-143E-4F28-9A2F-58CED3D296E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha74:*:*:*:rust:*:*",
            "matchCriteriaId" : "8E14C88E-CE9B-44DA-98DE-280C0D6E4C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha75:*:*:*:rust:*:*",
            "matchCriteriaId" : "EEC13614-61AD-45A7-B7FA-07346D33CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha76:*:*:*:rust:*:*",
            "matchCriteriaId" : "6B3E9EB0-0A41-4146-B6A9-49B1A70358DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha77:*:*:*:rust:*:*",
            "matchCriteriaId" : "CBDD75C5-1A08-4758-9324-172C1D539322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha78:*:*:*:rust:*:*",
            "matchCriteriaId" : "96461CC0-012C-40D7-B1CB-FF9A6B7EB644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha79:*:*:*:rust:*:*",
            "matchCriteriaId" : "9AA7AE2E-83E3-4796-8569-16030DB2CF38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha8:*:*:*:rust:*:*",
            "matchCriteriaId" : "F800AEB3-3AD7-42D8-BC3A-23703851435B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha80:*:*:*:rust:*:*",
            "matchCriteriaId" : "73638EAF-BCA6-4BD8-90E5-3A53EFD0FD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha81:*:*:*:rust:*:*",
            "matchCriteriaId" : "48BCB4A7-57C5-4FAA-860D-B862947EE352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha82:*:*:*:rust:*:*",
            "matchCriteriaId" : "0EA73A06-6AEA-45DF-B819-D25AA9BBEBA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustfs:rustfs:1.0.0:alpha9:*:*:*:rust:*:*",
            "matchCriteriaId" : "5821FADC-CF73-4639-911A-F3302D239B7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rustfs/rustfs/security/advisories/GHSA-v9fg-3cr2-277j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3145",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T03:16:07.193",
      "lastModified" : "2026-02-25T20:56:39.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in libvips up to 8.18.0. The affected element is the function vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. This patch is called d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. A patch should be applied to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en libvips hasta la versión 8.18.0. El elemento afectado es la función vips_foreign_load_matrix_file_is_a/vips_foreign_load_matrix_header del archivo libvips/foreign/matrixload.c. Al manipularlo se puede provocar una corrupción de memoria. El ataque debe lanzarse localmente. Este parche se llama d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. Se debe aplicar un parche para remediar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.18.0",
            "matchCriteriaId" : "33F39CED-5892-4FC2-836C-F03CF6299CB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/d4ce337c76bff1b278d7085c3c4f4725e3aa6ece",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4876",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4888",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758690",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3146",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T03:16:07.460",
      "lastModified" : "2026-02-25T20:56:00.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The identifier of the patch is d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en libvips hasta la versión 8.18.0. El elemento afectado es la función vips_foreign_load_matrix_header del archivo libvips/foreign/matrixload.c. Si se manipula se provoca una desreferencia de puntero nulo. El ataque debe realizarse localmente. El identificador del parche es d4ce337c76bff1b278d7085c3c4f4725e3aa6ece. Para solucionar este problema, se recomienda desplegar el parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.18.0",
            "matchCriteriaId" : "33F39CED-5892-4FC2-836C-F03CF6299CB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/d4ce337c76bff1b278d7085c3c4f4725e3aa6ece",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4875",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4888",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758691",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4875",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27597",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:03.557",
      "lastModified" : "2026-02-27T18:27:17.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which can be used to achieve remote code execution (RCE). The issue has been fixed in version 2.11.1."
      }, {
        "lang" : "es",
        "value" : "Enclave es un sandbox seguro de JavaScript diseñado para la ejecución segura de código de agentes de IA. Antes de la versión 2.11.1, es posible evadir los límites de seguridad establecidos por `@enclave-vm/core`, lo que puede utilizarse para lograr ejecución remota de código (RCE). El problema ha sido solucionado en la versión 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentfront:enclave:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "77757A08-0B36-4B41-9474-A7AD214D4FB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/agentfront/enclave/commit/09afbebe4cb6d0586c1145aa71ffabd2103932db",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/agentfront/enclave/security/advisories/GHSA-f229-3862-4942",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27627",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:03.757",
      "lastModified" : "2026-03-10T18:51:43.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper plugin returns `readableContentHtml`, the HTML parsing subprocess uses it directly without running it through DOMPurify. Every other content source in the crawler goes through Readability + DOMPurify, but the Reddit path skips both. Since this content ends up in `dangerouslySetInnerHTML` in the reader view, any malicious HTML in the Reddit response gets executed in the user's browser. Version 0.31.0 contains a patch for this issue."
      }, {
        "lang" : "es",
        "value" : "Karakeep es una aplicación autohospedable para marcar (bookmark) todo. En la versión 0.30.0, cuando el plugin metascraper de Reddit devuelve 'readableContentHtml', el subproceso de análisis HTML lo utiliza directamente sin pasarlo por DOMPurify. Cada fuente de contenido diferente en el rastreador pasa por Readability + DOMPurify, pero la ruta de Reddit omite ambos. Dado que este contenido termina en 'dangerouslySetInnerHTML' en la vista de lectura, cualquier HTML malicioso en la respuesta de Reddit se ejecuta en el navegador del usuario. La versión 0.31.0 contiene un parche para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:localhostlabs:karakeep:0.30.0:*:*:*:*:-:*:*",
            "matchCriteriaId" : "004A66CE-C6A3-44FD-BAA3-A73F3DE8E85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/karakeep-app/karakeep/commit/ba3db953c0d8675e2e3ecc29113a332b570b2cb9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/karakeep-app/karakeep/releases/tag/v0.31.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/karakeep-app/karakeep/security/advisories/GHSA-mg93-f9mw-wpgj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27636",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:03.933",
      "lastModified" : "2026-02-26T16:07:11.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's file upload restriction list in `app/Misc/Helper.php` does not include `.htaccess` or `.user.ini` files. On Apache servers with `AllowOverride All` (a common configuration), an authenticated user can upload a `.htaccess` file to redefine how files are processed, enabling Remote Code Execution. This vulnerability can be exploited on its own or in combination with CVE-2026-27637. Version 1.8.206 fixes both vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "FreeScout es un servicio de asistencia técnica gratuito y un buzón compartido creado con el marco Laravel de PHP. Antes de la versión 1.8.206, la lista de restricción de carga de archivos de FreeScout en 'app/Misc/Helper.php' no incluye archivos '.htaccess' o '.user.ini'. En servidores Apache con 'AllowOverride All' (una configuración común), un usuario autenticado puede cargar un archivo '.htaccess' para redefinir cómo se procesan los archivos, habilitando la Ejecución Remota de Código. Esta vulnerabilidad puede ser explotada por sí misma o en combinación con CVE-2026-27637. La versión 1.8.206 corrige ambas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freescout:freescout:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.206",
            "matchCriteriaId" : "79CA8F5D-FF18-4F10-A6AF-3DBED9542088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/freescout-help-desk/freescout/commit/9984071e6f1b4e633fdcffcea82bbebc9c1e009c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-6gcm-v8xf-j9v9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-mw88-x7j3-74vc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-6gcm-v8xf-j9v9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-mw88-x7j3-74vc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27637",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:04.110",
      "lastModified" : "2026-02-26T16:08:44.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's `TokenAuth` middleware uses a predictable authentication token computed as `MD5(user_id + created_at + APP_KEY)`. This token is static (never expires/rotates), and if an attacker obtains the `APP_KEY` — a well-documented and common exposure vector in Laravel applications — they can compute a valid token for any user, including the administrator, achieving full account takeover without any password. This vulnerability can be exploited on its own or in combination with CVE-2026-27636. Version 1.8.206 fixes both vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "FreeScout es un servicio de asistencia técnica gratuito y un buzón compartido creado con el marco Laravel de PHP. Antes de la versión 1.8.206, el middleware 'TokenAuth' de FreeScout utiliza un token de autenticación predecible calculado como 'MD5(user_id + created_at + APP_KEY)'. Este token es estático (nunca expira/rota), y si un atacante obtiene la 'APP_KEY' — un vector de exposición bien documentado y común en aplicaciones Laravel — pueden calcular un token válido para cualquier usuario, incluido el administrador, logrando una toma de control total de la cuenta sin ninguna contraseña. Esta vulnerabilidad puede ser explotada por sí misma o en combinación con CVE-2026-27636. La versión 1.8.206 corrige ambas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freescout:freescout:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.206",
            "matchCriteriaId" : "79CA8F5D-FF18-4F10-A6AF-3DBED9542088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/freescout-help-desk/freescout/commit/004a8231f6e413af1d4680930b0e2342fd4283f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-6gcm-v8xf-j9v9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-mw88-x7j3-74vc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-6gcm-v8xf-j9v9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-mw88-x7j3-74vc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27639",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:04.280",
      "lastModified" : "2026-02-27T18:45:51.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercator is an open source web application designed to enable mapping of information systems. A stored Cross-Site Scripting (XSS) vulnerability exists in Mercator prior to version 2026.02.22 due to the use of unescaped Blade directives (`{!! !!}`) in display templates. An authenticated user with the User role can inject arbitrary JavaScript payloads into fields such as \"contact point\" when creating or editing entities. The payload is then executed in the browser of any user who views the affected page, including administrators. Version 2026.02.22 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Mercator es una aplicación web de código abierto diseñada para permitir el mapeo de sistemas de información. Una vulnerabilidad de cross-site scripting (XSS) almacenado existe en Mercator antes de la versión 2026.02.22 debido al uso de directivas Blade sin escapar ('{!! !!}') en las plantillas de visualización. Un usuario autenticado con el rol de usuario puede inyectar cargas útiles de JavaScript arbitrarias en campos como 'punto de contacto' al crear o editar entidades. La carga útil se ejecuta entonces en el navegador de cualquier usuario que vea la página afectada, incluidos los administradores. La versión 2026.02.22 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sourcentis:mercator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.02.22",
            "matchCriteriaId" : "CEB2FD8C-B4C4-41DE-B882-FDF1DCDD114F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dbarzin/mercator/commit/839d231399944e43a865198262e96e0218252cc3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dbarzin/mercator/commit/9902ffd91f287e474729f514c77261f4ef7db8fe",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dbarzin/mercator/commit/c58bb1d2fff18605c61d93cfaf77adca416c560a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dbarzin/mercator/security/advisories/GHSA-65p7-pph2-966g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27640",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:04.450",
      "lastModified" : "2026-03-04T16:01:34.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports. Prior to version 1.26.1, a bug in tfplan2md affected several distinct rendering paths: AzApi resource body properties, AzureDevOps variable groups, Scriban template context variables, and hierarchical sensitivity detection. This caused reports to render values that should have been masked as \"(sensitive)\" instead. This issue is fixed in v1.26.1. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "tfplan2md es un software para convertir archivos JSON de planos de Terraform en informes Markdown legibles por humanos. Antes de la versión 1.26.1, un error en tfplan2md afectó a varias rutas de renderizado distintas: propiedades del cuerpo de recursos de AzApi, grupos de variables de AzureDevOps, variables de contexto de plantillas Scriban y detección de sensibilidad jerárquica. Esto provocó que los informes renderizaran valores que deberían haber sido enmascarados como '(sensitive)' en su lugar. Este problema está solucionado en la v1.26.1. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oocx:tfplan2md:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.26.1",
            "matchCriteriaId" : "53E7EBCC-AD86-4028-8720-3FCEFC4B32A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oocx/tfplan2md/releases/tag/v1.26.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/oocx/tfplan2md/security/advisories/GHSA-5j8r-g94q-2f39",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27641",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T04:16:04.620",
      "lastModified" : "2026-02-27T18:40:20.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vulnerability in versions prior to 1.5.0 allows remote attackers to achieve arbitrary file write and remote code execution through Server-Side Template Injection (SSTI). Flask-Reuploaded has been patched in version 1.5.0. Some workarounds are available. Do not pass user input to the `name` parameter, use auto-generated filenames only, and implement strict input validation if `name` must be used."
      }, {
        "lang" : "es",
        "value" : "Flask-Reuploaded proporciona carga de archivos para Flask. Una vulnerabilidad crítica de salto de ruta y omisión de extensión en versiones anteriores a la 1.5.0 permite a atacantes remotos lograr escritura arbitraria de archivos y ejecución remota de código a través de Inyección de Plantillas del Lado del Servidor (SSTI). Flask-Reuploaded ha sido parcheado en la versión 1.5.0. Hay disponibles algunas soluciones alternativas. No pase entradas de usuario al parámetro 'name', use solo nombres de archivo autogenerados, e implemente una estricta validación de entrada si se tiene que usar 'name'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jugmac00:flask-reuploaded:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "ADCCDA77-EDD0-4AC4-B9BA-7087B5D9DC32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jugmac00/flask-reuploaded/commit/d64c6b2f71cb73734fc38baa0e3e156926361288",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jugmac00/flask-reuploaded/pull/180",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jugmac00/flask-reuploaded/security/advisories/GHSA-65mp-fq8v-56jr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27743",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-25T04:16:04.783",
      "lastModified" : "2026-03-03T19:11:51.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers. The handlers read the url parameter from a GET request and interpolate it directly into SQL LIKE clauses without input validation or parameterization. The endpoints do not enforce authorization checks and do not use SPIP action protections such as securiser_action(), allowing remote attackers to execute arbitrary SQL queries."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin SPIP referer_spam anteriores a la 1.3.0 contienen una vulnerabilidad de inyección SQL no autenticada en los manejadores de acción referer_spam_ajouter y referer_spam_supprimer. Los manejadores leen el parámetro url de una solicitud GET y lo interpolan directamente en cláusulas SQL LIKE sin validación de entrada ni parametrización. Los endpoints no aplican comprobaciones de autorización y no utilizan protecciones de acción de SPIP como securiser_action(), lo que permite a atacantes en remoto ejecutar consultas SQL arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:referer_spam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "ECB39215-63F1-4E34-BF21-F1D136600C3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://chocapikk.com/posts/2026/spip-plugins-vulnerabilities/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip-contrib-extensions/referer_spam/-/commit/33682df73cd5f7e9c72d8c4d5088611fa2441683",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.spip.net/referer_spam.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-referer-spam-unauthenticated-sql-injection",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27744",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-25T04:16:04.973",
      "lastModified" : "2026-02-27T19:41:32.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages. The plugin appends untrusted request parameters into HTML that is later rendered by a template using unfiltered environment rendering (#ENV**), which disables SPIP output filtering. As a result, an unauthenticated attacker can inject crafted content that is evaluated through SPIP's template processing chain, leading to execution of code in the context of the web server."
      }, {
        "lang" : "es",
        "value" : "El plugin SPIP tickets versiones anteriores a la 4.3.3 contienen una vulnerabilidad de ejecución remota de código no autenticada en el manejo de la vista previa del foro para páginas públicas de tickets. El plugin añade parámetros de solicitud no confiables en HTML que luego es renderizado por una plantilla usando renderizado de entorno sin filtrar (#ENV**), lo que desactiva el filtrado de salida de SPIP. Como resultado, un atacante no autenticado puede inyectar contenido diseñado que es evaluado a través de la cadena de procesamiento de plantillas de SPIP, lo que lleva a la ejecución de código en el contexto del servidor web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:tickets:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "47C0628A-EA35-4D36-8BC6-D16269289E55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://chocapikk.com/posts/2026/spip-plugins-vulnerabilities/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip-contrib-extensions/tickets/-/commit/869935b6687822ed79ad5477626a664d8ea6dcf7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.spip.net/tickets",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-tickets-unauthenticated-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27745",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-25T04:16:05.140",
      "lastModified" : "2026-02-27T20:40:35.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow. The plugin incorporates untrusted request data into a hidden form field that is rendered without SPIP output filtering. Because fields prefixed with an underscore bypass protection mechanisms and the hidden content is rendered with filtering disabled, an authenticated attacker with editor-level privileges can inject crafted content that is evaluated through SPIP's template processing chain, resulting in execution of code in the context of the web server."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin SPIP interface_traduction_objets anteriores a la 4.3.3 contienen una vulnerabilidad de ejecución remota de código autenticada en el flujo de trabajo de la interfaz de traducción. El plugin incorpora datos de solicitud no confiables en un campo de formulario oculto que se renderiza sin el filtrado de salida de SPIP. Debido a que los campos prefijados con un guion bajo eluden los mecanismos de protección y el contenido oculto se renderiza con el filtrado deshabilitado, un atacante autenticado con privilegios de nivel de editor puede inyectar contenido elaborado que se evalúa a través de la cadena de procesamiento de plantillas de SPIP, lo que resulta en la ejecución de código en el contexto del servidor web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:interface_traduction_objets:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "0300A503-A487-4A44-AF0B-B0C6CD544DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://chocapikk.com/posts/2026/spip-plugins-vulnerabilities/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip-contrib-extensions/interface_traduction_objets/-/commit/db3417b7811774f04c3ff191ca1737fe660ef0be",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.spip.net/interface_traduction_objets",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-interface-traduction-objets-authenticated-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27746",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-25T04:16:05.320",
      "lastModified" : "2026-02-27T19:24:53.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline. The plugin incorporates untrusted request parameters into HTML output without proper output encoding, allowing attackers to inject arbitrary script content into pages that render a jeux block. When a victim is induced to visit a crafted URL, the injected content is reflected into the response and executed in the victim's browser context."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin SPIP jeux anteriores a la 4.1.1 contienen una vulnerabilidad de cross-site scripting (XSS) reflejado en el pipeline pre_propre. El plugin incorpora parámetros de solicitud no confiables en la salida HTML sin una codificación de salida adecuada, lo que permite a los atacantes inyectar contenido de script arbitrario en páginas que renderizan un bloque jeux. Cuando se induce a una víctima a visitar una URL manipulada, el contenido inyectado se refleja en la respuesta y se ejecuta en el contexto del navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:jeux:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "2FD68A33-DBBA-47D0-A6BD-D2281322BD39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://chocapikk.com/posts/2026/spip-plugins-vulnerabilities/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip-contrib-extensions/jeux/-/commit/3d240cffb258491acd72f8b37579e8a7417740ff",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.spip.net/jeux",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-jeux-reflected-xss-via-index-parameters",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27747",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-25T04:16:05.493",
      "lastModified" : "2026-03-02T15:16:37.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php. When handling translation requests, the plugin reads the id_parent parameter from user-supplied input and concatenates it directly into a SQL WHERE clause in a call to sql_getfetsel() without input validation or parameterization. An authenticated attacker with editor-level privileges can inject crafted SQL expressions into the id_parent parameter to manipulate the backend query. Successful exploitation can result in disclosure or modification of database contents and may lead to denial of service depending on the database configuration and privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin SPIP interface_traduction_objets anteriores a la 2.2.2 contienen una vulnerabilidad de inyección SQL autenticada en interface_traduction_objets_pipelines.php. Al manejar solicitudes de traducción, el plugin lee el parámetro id_parent de la entrada proporcionada por el usuario y lo concatena directamente en una cláusula WHERE de SQL en una llamada a sql_getfetsel() sin validación de entrada ni parametrización. Un atacante autenticado con privilegios de nivel de editor puede inyectar expresiones SQL manipuladas en el parámetro id_parent para manipular la consulta de backend. La explotación exitosa puede resultar en la divulgación o modificación del contenido de la base de datos y puede llevar a la denegación de servicio dependiendo de la configuración y los privilegios de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:interface_traduction_objets:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "0300A503-A487-4A44-AF0B-B0C6CD544DD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://chocapikk.com/posts/2026/spip-plugins-vulnerabilities/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.spip.net/spip-contrib-extensions/interface_traduction_objets/-/commit/db3417b7811774f04c3ff191ca1737fe660ef0be",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.spip.net/interface_traduction_objets",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-interface-traduction-objets-authenticated-sql-injection",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3147",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T04:16:05.670",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in libvips up to 8.18.0. This affects the function vips_foreign_load_csv_build of the file libvips/foreign/csvload.c. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch is identified as b3ab458a25e0e261cbd1788474bbc763f7435780. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en libvips hasta 8.18.0. Esta afecta a la función vips_foreign_load_csv_build del archivo libvips/foreign/csvload.c que si se manipula se puede provocar un desbordamiento de búfer basado en montículo. El ataque requiere un enfoque local. El exploit ha sido hecho público y podría ser usado. El parche se identifica como b3ab458a25e0e261cbd1788474bbc763f7435780. Es aconsejable implementar el parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.18.0",
            "matchCriteriaId" : "33F39CED-5892-4FC2-836C-F03CF6299CB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/b3ab458a25e0e261cbd1788474bbc763f7435780",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4874",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4874#issue-3943617697",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4894",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758692",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27624",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T05:17:25.380",
      "lastModified" : "2026-02-27T18:04:29.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using \"denied-peer-ip\" and/or default loopback restrictions. CVE-2020-26262 addressed bypasses involving \"0.0.0.0\", \"[::1]\" and \"[::]\", but IPv4-mapped IPv6 is not covered. When sending a \"CreatePermission\" or \"ChannelBind\" request with the \"XOR-PEER-ADDRESS\" value of \"::ffff:127.0.0.1\", a successful response is received, even though \"127.0.0.0/8\" is blocked via \"denied-peer-ip\". The root cause is that, prior to the updated fix implemented in version 4.9.0, three functions in \"src/client/ns_turn_ioaddr.c\" do not check \"IN6_IS_ADDR_V4MAPPED\". \"ioa_addr_is_loopback()\" checks \"127.x.x.x\" (AF_INET) and \"::1\" (AF_INET6), but not \"::ffff:127.0.0.1.\" \"ioa_addr_is_zero()\" checks \"0.0.0.0\" and \"::\", but not \"::ffff:0.0.0.0.\" \"addr_less_eq()\" used by \"ioa_addr_in_range()\" for \"denied-peer-ip\" matching: when the range is AF_INET and the peer is AF_INET6, the comparison returns 0 without extracting the embedded IPv4. Version 4.9.0 contains an updated fix to address the bypass of the fix for CVE-2020-26262."
      }, {
        "lang" : "es",
        "value" : "Coturn es una implementación de código abierto gratuita de servidor TURN y STUN. Coturn se configura comúnmente para bloquear rangos de loopback e internos usando 'denied-peer-ip' y/o restricciones de loopback predeterminadas. CVE-2020-26262 abordó evasiones que involucran '0.0.0.0', '[::1]' y '[::]', pero IPv6 mapeado a IPv4 no está cubierto. Al enviar una solicitud 'CreatePermission' o 'ChannelBind' con el valor 'XOR-PEER-ADDRESS' de '::ffff:127.0.0.1', se recibe una respuesta exitosa, aunque '127.0.0.0/8' está bloqueado a través de 'denied-peer-ip'. La causa raíz es que, antes de la corrección actualizada implementada en la versión 4.9.0, tres funciones en 'src/client/ns_turn_ioaddr.c' no verifican 'IN6_IS_ADDR_V4MAPPED'. 'ioa_addr_is_loopback()' verifica '127.x.x.x' (AF_INET) y '::1' (AF_INET6), pero no '::ffff:127.0.0.1'. 'ioa_addr_is_zero()' verifica '0.0.0.0' y '::', pero no '::ffff:0.0.0.0'. 'addr_less_eq()' utilizada por 'ioa_addr_in_range()' para la coincidencia de 'denied-peer-ip': cuando el rango es AF_INET y el par es AF_INET6, la comparación devuelve 0 sin extraer el IPv4 incrustado. La versión 4.9.0 contiene una corrección actualizada para abordar la evasión de la corrección para CVE-2020-26262."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coturn_project:coturn:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.0",
            "matchCriteriaId" : "5C4DE18B-B9AA-4314-B584-7BA316D5D7DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coturn/coturn/commit/b80eb898ba26552600770162c26a8ae7f3661b0b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/coturn/coturn/security/advisories/GHSA-j8mm-mpf8-gvjg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/coturn/coturn/security/advisories/GHSA-j8mm-mpf8-gvjg",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27645",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T05:17:26.317",
      "lastModified" : "2026-02-25T16:51:33.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, the RSS single-watch endpoint reflects the UUID path parameter directly in the HTTP response body without HTML escaping. Since Flask returns text/html by default for plain string responses, the browser parses and executes injected JavaScript. Version 0.54.1 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "changedetection.io es una herramienta gratuita de código abierto para la detección de cambios en páginas web. En versiones anteriores a la 0.54.1, el endpoint RSS de monitoreo único refleja el parámetro de ruta UUID directamente en el cuerpo de la respuesta HTTP sin escape HTML. Dado que Flask devuelve text/html por defecto para respuestas de cadena de texto plano, el navegador analiza y ejecuta JavaScript inyectado. La versión 0.54.1 contiene una corrección para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.54.1",
            "matchCriteriaId" : "582BB3C2-9FD0-4217-A5DF-67ACC72BA029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/commit/a385c89abf44b52fcfa20c7c6a6dd3047c4c1eb5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-mw8m-398g-h89w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-mw8m-398g-h89w",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27696",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T05:17:26.940",
      "lastModified" : "2026-02-26T15:34:26.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulnerable to Server-Side Request Forgery (SSRF) because the URL validation function `is_safe_valid_url()` does not validate the resolved IP address of watch URLs against private, loopback, or link-local address ranges. An authenticated user (or any user when no password is configured, which is the default) can add a watch for internal network URLs. The application fetches these URLs server-side, stores the response content, and makes it viewable through the web UI — enabling full data exfiltration from internal services. Version 0.54.1 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "changedetection.io es una herramienta gratuita de código abierto para la detección de cambios en páginas web. En versiones anteriores a la 0.54.1, changedetection.io es vulnerable a la Falsificación de Petición del Lado del Servidor (SSRF) porque la función de validación de URL 'is_safe_valid_url()' no valida la dirección IP resuelta de las URL de vigilancia frente a rangos de direcciones privadas, de bucle invertido o de enlace local. Un usuario autenticado (o cualquier usuario cuando no hay contraseña configurada, que es el valor predeterminado) puede añadir una vigilancia para URL de red internas. La aplicación obtiene estas URL del lado del servidor, almacena el contenido de la respuesta y lo hace visible a través de la interfaz de usuario web — lo que permite la exfiltración completa de datos de servicios internos. La versión 0.54.1 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.54.1",
            "matchCriteriaId" : "582BB3C2-9FD0-4217-A5DF-67ACC72BA029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/commit/fe7aa38c651d73fe5f41ce09855fa8f97193747b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-3c45-4pj5-ch7m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-3c45-4pj5-ch7m",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3148",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T05:17:27.323",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Simple and Nice Shopping Cart Script 1.0 que afecta a una función desconocida del archivo /signup.php. Si se manipula el argumento Username se puede provocar una inyección SQL. El ataque puede ser iniciado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haben-cs9:simple_and_nice_shopping_cart_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AEC18B-99C9-4D8C-B77D-AC060DDB5515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiaoxiaojie12/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758822",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3149",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T05:17:28.793",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument course_code can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode College Management System 1.0 que afecta a alguna funcionalidad desconocida del archivo /admin/asign-single-student-subjects.PHP. La manipulación del argumento course_code puede provocar una inyección SQL. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zhangchao404/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758828",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3150",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T05:17:29.067",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en itsourcecode College Management System 1.0 que afecta a una parte desconocida del archivo /admin/display-teacher.php. Si se manipula el argumento teacher_id se puede producir una inyección SQL. Es posible realizar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zhangchao404/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347658",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347658",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758829",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25785",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-25T06:16:25.123",
      "lastModified" : "2026-02-27T17:58:38.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary files and execute arbitrary code on the affected system."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de ruta existe en Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 y anteriores, lo que podría permitir a un atacante manipular archivos arbitrarios y ejecutar código arbitrario en el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*",
            "versionEndExcluding" : "9.4.8.0",
            "matchCriteriaId" : "5B926F03-56E5-4158-ADDA-13A8F580472C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN79096585/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.motex.co.jp/news/notice/2026/release260225/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3100",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-25T06:16:26.180",
      "lastModified" : "2026-02-26T16:33:43.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certificates allows a remote attacker can intercept network traffic to perform a Man-in-the-Middle (MitM) attack, which may intercept, modify, or obtain sensitive information such as authentication credentials and backup data.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51."
      }, {
        "lang" : "es",
        "value" : "La copia de seguridad FTP en el ADM no aplicará de forma adecuada y estricta la verificación de certificados TLS al conectarse a un servidor FTP utilizando FTPES/FTPS. Unos certificados TLS/SSL validados incorrectamente permiten que un atacante remoto intercepte el tráfico de red para realizar un ataque Man-in-the-Middle (MitM), que puede interceptar, modificar u obtener información sensible como credenciales de autenticación y datos de copia de seguridad.\nLos productos y versiones afectados incluyen: desde ADM 4.1.0 hasta ADM 4.3.3.ROF1, así como desde ADM 5.0.0 hasta ADM 5.1.2.RE51."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.reo1",
            "matchCriteriaId" : "47B926F1-1D8F-4105-A533-45E0B4178C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=53",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3151",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T06:16:26.337",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad en itsourcecode College Management System 1.0. La cual afecta a código desconocido del archivo /login/login.php. Si se manipula el argumento email se provoca una inyección SQL. El ataque puede ser realizado de forma remota. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zhangchao404/cve/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758830",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3152",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T06:16:26.543",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacher_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en itsourcecode College Management System 1.0, que afecta a algún procesamiento desconocido del archivo /admin/teacher-salary.php. Si se manipula el argumento teacher_id se provoca una inyección SQL. Es posible iniciar el ataque en remoto. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758834",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3153",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T06:16:26.767",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en itsourcecode Document Management System 1.0. Afectada es una función desconocida del archivo /register.php. Tal manipulación del argumento Username lleva a inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido revelado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admerc:document_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5624DF-BD1B-45C8-B70F-21BD48027994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/CVE/issues/42",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758831",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3163",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T06:16:26.973",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Website Link Extractor 1.0. This vulnerability affects the function file_get_contents of the component URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Website Link Extractor 1.0. La cual afecta a la función file_get_contents del componente URL Gestor. Su manipulación conduce a falsificación de petición del lado del servidor. Es posible iniciar el ataque en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remyandrade:website_link_extractor:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D565BD-B114-4CF7-84A5-C6B20DB210DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/@hemantrajbhati5555/ssrf-vulnerability-in-sourcecodester-website-link-extractor-v1-0-5df6bb708f5e",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758932",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3164",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T06:16:27.180",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode News Portal Project 1.0. La cual afeacta a algún procesamiento desconocido del archivo /admin/contactus.PHP. Si se manipula el argumento pagetitle se provoca una inyección SQL. Es posible lanzar el ataque en remoto. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clive_21:news_portal_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71E9B8-FE24-4FB4-92C9-B5EDFA612172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/a936848435/cve-report-cyy/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759546",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3165",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T06:16:27.387",
      "lastModified" : "2026-02-25T17:53:14.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the component httpd. This manipulation of the argument mit_ssid causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tenda F453 1.0.0.3. La cual afecta a la función fromSetWifiGusetBasic del archivo /goform/AdvSetWrlsafeset del componente httpd. Manipular el argumento mit_ssid provoca un desbordamiento de búfer. El ataque puede ser iniciado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_64/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759587",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3179",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2026-02-25T06:16:27.597",
      "lastModified" : "2026-02-26T16:32:25.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings. A malicious server or MITM attacker can craft filenames containing path traversal sequences, causing the client to write files outside the intended backup directory. A path traversal vulnerability may allow an attacker to overwrite arbitrary files on the system and potentially achieve privilege escalation or remote code execution.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51."
      }, {
        "lang" : "es",
        "value" : "La copia de seguridad FTP en el ADM no sanea correctamente los nombres de archivo recibidos del servidor FTP al analizar listados de directorios. Un servidor malicioso o atacante MitM puede crear nombres de archivo que contengan secuencias de salto de ruta, haciendo que el cliente escriba archivos fuera del directorio de copia de seguridad previsto. Una vulnerabilidad de salto de ruta puede permitir a un atacante sobrescribir archivos arbitrarios en el sistema y potencialmente lograr escalada de privilegios o ejecución remota de código.\nLos productos y versiones afectados incluyen: desde ADM 4.1.0 hasta ADM 4.3.3.ROF1, así como desde ADM 5.0.0 hasta ADM 5.1.2.RE51."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndIncluding" : "4.3.3.rof1",
            "matchCriteriaId" : "662E4EA5-0C53-4669-947E-705E5E076B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0.ra82",
            "versionEndExcluding" : "5.1.2.reo1",
            "matchCriteriaId" : "47B926F1-1D8F-4105-A533-45E0B4178C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=53",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1614",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T07:16:01.197",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Rise Blocks – A Complete Gutenberg Page Builder para WordPress es vulnerable a cross-site scripting almacenado a través del atributo de bloque de identidad del sitio 'logoTag' en todas las versiones hasta la 3.7, inclusive, debido a una sanitización de entrada y escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/rise-blocks/tags/3.7/classes/blocks/site-identity.php#L364",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/188f00f8-82f2-4166-9d6e-af996fe66422?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3166",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T07:16:02.420",
      "lastModified" : "2026-02-25T17:53:07.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda F453 1.0.0.3. La cual afecta a la función fromRouteStatic del archivo /goform/RouteStatic del componente httpd. Al manipular el argumento page se provoca un desbordamiento de búfer. El ataque puede ser lanzado en remoto. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_65/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347673",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347673",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759589",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3167",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T07:16:02.690",
      "lastModified" : "2026-02-25T17:52:59.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component httpd. Performing a manipulation of the argument webSiteId results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un fallo de seguridad en Tenda F453 1.0.0.3. El cual afecta a la función formWebTypeLibrary del archivo /goform/webtypelibrary del componente httpd. Manipular el argumento webSiteId provoca un desbordamiento de búfer. El ataque puede iniciarse de forma remota. El exploit ha sido liberado al público y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_66/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759594",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3168",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T07:16:02.927",
      "lastModified" : "2026-02-25T17:52:49.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSetting of the file /goform/NatStaticSetting of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda F453 1.0.0.3. La cual afecta a la función fromNatStaticSetting del archivo /goform/NatStaticSetting del componente httpd. Si se manipula el argumento page se puede conducir a un desbordamiento de búfer. El ataque puede lanzarse en remoto. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_67/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759595",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3169",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T08:16:19.507",
      "lastModified" : "2026-02-25T17:52:33.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSafeEmailFilter of the file /goform/SafeEmailFilter of the component httpd. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de seguridad en Tenda F453 1.0.0.3. La cual afecta a la función fromSafeEmailFilter del archivo /goform/SafeEmailFilter del componente httpd. Si se manipula el argumento page se provoca un desbordamiento de búfer. Es posible explotar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_68/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3170",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T08:16:19.807",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. La cual afecta a una función desconocida del archivo /patient-search.PHP. Si se manipula el argumento First Name/Last Name se provoca un cross site scripting. El ataque puede ser ejecutado en remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/archana1122m/e2953222b47c29c8c69855f5d623267d",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759845",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1916",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T09:16:14.943",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authentication mechanism on the `wpgsi_callBackFuncAccept` and `wpgsi_callBackFuncUpdate` REST API functions in all versions up to, and including, 3.8.3. Both REST endpoints use `permission_callback => '__return_true'`, allowing unauthenticated access. The plugin's custom token-based validation relies on a Base64-encoded JSON object containing the user ID and email address, but is not cryptographically signed. This makes it possible for unauthenticated attackers to forge tokens using publicly enumerable information (admin user ID and email) to create, modify, and delete arbitrary WordPress posts and pages, granted they know the administrator's email address and an active integration ID with remote updates enabled."
      }, {
        "lang" : "es",
        "value" : "El plugin WPGSI: Spreadsheet Integration para WordPress es vulnerable a la modificación no autorizada y la pérdida de datos debido a la falta de comprobaciones de capacidad y un mecanismo de autenticación inseguro en las funciones de la API REST 'wpgsi_callBackFuncAccept' y 'wpgsi_callBackFuncUpdate' en todas las versiones hasta la 3.8.3, inclusive. Ambos puntos finales REST utilizan 'permission_callback =&gt; '__return_true'', lo que permite el acceso no autenticado. La validación personalizada basada en tokens del plugin se basa en un objeto JSON codificado en Base64 que contiene el ID de usuario y la dirección de correo electrónico, pero no está firmado criptográficamente. Esto hace posible que atacantes no autenticados forjen tokens utilizando información públicamente enumerable (ID de usuario administrador y correo electrónico) para crear, modificar y eliminar publicaciones y páginas arbitrarias de WordPress, siempre que conozcan la dirección de correo electrónico del administrador y un ID de integración activo con las actualizaciones remotas habilitadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpgsi/tags/3.8.3/admin/class-wpgsi-update.php#L116",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpgsi/tags/3.8.3/admin/class-wpgsi-update.php#L636",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpgsi/tags/3.8.3/admin/class-wpgsi-update.php#L94",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-update.php#L116",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-update.php#L636",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-update.php#L94",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3461326/wpgsi/trunk/admin/class-wpgsi-update.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7598b38b-26b1-4640-9bd7-60613a5f704d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1929",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T09:16:15.173",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced Woo Labels plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.37. This is due to the use of `call_user_func_array()` with user-controlled callback and parameters in the `get_select_option_values()` AJAX handler without an allowlist of permitted callbacks or a capability check. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute arbitrary PHP functions and operating system commands on the server via the 'callback' parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Advanced Woo Labels para WordPress es vulnerable a la ejecución remota de código en todas las versiones hasta e incluyendo la 2.37. Esto se debe al uso de `call_user_func_array()` con una devolución de llamada y parámetros controlados por el usuario en el gestor AJAX `get_select_option_values()` sin una lista blanca de devoluciones de llamada permitidas o una verificación de capacidad. Esto hace posible que atacantes autenticados, con acceso de nivel de Colaborador y superior, ejecuten funciones PHP arbitrarias y comandos del sistema operativo en el servidor a través del parámetro 'callback'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-woo-labels/tags/2.34/includes/admin/class-awl-admin-ajax.php#L136",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-woo-labels/tags/2.34/includes/admin/class-awl-admin-ajax.php#L146",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-woo-labels/tags/2.37/includes/admin/class-awl-admin-ajax.php#L136",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/advanced-woo-labels/trunk/includes/admin/class-awl-admin-ajax.php#L146",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bbae9c33-becb-4c9d-917f-0d8fe8312d0c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2416",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T09:16:15.367",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Geo Mashup plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Geo Mashup para WordPress es vulnerable a inyección SQL a través del parámetro 'sort' en todas las versiones hasta la 1.13.17, inclusive. Esto se debe a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto permite que atacantes no autenticados añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.17/geo-mashup-db.php#L1530",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/geo-mashup/tags/1.13.17/geo-mashup-db.php#L1701",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3461591/geo-mashup",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8ab5ca55-0a8a-45a8-9ab0-aa3bbfa85417?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2479",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T09:16:15.547",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.1. This is due to the use of `strpos()` for substring-based hostname validation instead of strict host comparison in the `ajax_upload_image()` function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application, which can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin Responsive Lightbox &amp; Gallery para WordPress es vulnerable a la falsificación de petición del lado del servidor en todas las versiones hasta la 2.7.1, inclusive. Esto se debe al uso de `strpos()` para la validación de nombres de host basada en subcadenas en lugar de una comparación estricta de host en la función `ajax_upload_image()`. Esto permite a atacantes autenticados, con acceso de nivel Autor o superior, realizar peticiones web a ubicaciones arbitrarias originadas desde la aplicación web, lo que puede utilizarse para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/responsive-lightbox/tags/2.7.0/includes/class-remote-library.php#L329",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/responsive-lightbox/tags/2.7.0/includes/class-remote-library.php#L344",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/responsive-lightbox/trunk/includes/class-remote-library.php#L329",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464566?contextall=1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/44276b28-9509-4f59-936c-fff2ae404076?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3171",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T09:16:15.740",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /queue.php. Esta manipulación del argumento firstname/lastname causa cross site scripting. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/archana1122m/2aed32e2a7ca5a648105bfdffd72a955",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347678",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347678",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.760189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2301",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T10:16:18.307",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8. This is due to the `duplicate_post()` function in `includes/api.php` using `$wpdb->insert()` directly to the `wp_postmeta` table instead of WordPress's standard `add_post_meta()` function, which would call `is_protected_meta()` to prevent lower-privileged users from setting protected meta keys (those starting with `_`). This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary protected post meta keys such as `_wp_page_template`, `_wp_attached_file`, and other sensitive meta keys on duplicated posts via the `customMetaData` JSON array parameter in the `/wp-json/post-duplicator/v1/duplicate-post` REST API endpoint."
      }, {
        "lang" : "es",
        "value" : "El plugin Post Duplicator para WordPress es vulnerable a la inserción no autorizada de metadatos de publicación protegidos arbitrarios en todas las versiones hasta la 3.0.8, inclusive. Esto se debe a que la función `duplicate_post()` en `includes/api.php` utiliza `$wpdb-&gt;insert()` directamente en la tabla `wp_postmeta` en lugar de la función estándar de WordPress `add_post_meta()`, la cual llamaría a `is_protected_meta()` para evitar que usuarios con privilegios inferiores establezcan claves de metadatos protegidas (aquellas que comienzan con `_`). Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten claves de metadatos de publicación protegidas arbitrarias como `_wp_page_template`, `_wp_attached_file` y otras claves de metadatos sensibles en publicaciones duplicadas a través del parámetro de array JSON `customMetaData` en el endpoint de la API REST `/wp-json/post-duplicator/v1/duplicate-post`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/post-duplicator/tags/3.0.6/includes/api.php#L843",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/post-duplicator/tags/3.0.6/includes/api.php#L923",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3463768%40post-duplicator%2Ftrunk&old=3459096%40post-duplicator%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5c86f72-934c-4f3b-ab2a-65df1490ca8a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2367",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T10:16:18.507",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ays_block' shortcode in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Secure Copy Content Protection y Content Locking para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'ays_block' del plugin en todas las versiones hasta la 5.0.1, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/secure-copy-content-protection/tags/4.9.9/public/class-secure-copy-content-protection-public.php#L1043",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/secure-copy-content-protection/tags/4.9.9/public/class-secure-copy-content-protection-public.php#L718",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463092/secure-copy-content-protection",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f138d917-0dc2-4408-aa6a-db1fd0410eb4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2410",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T10:16:18.697",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the `showPageContent()` function. This makes it possible for unauthenticated attackers to add arbitrary URLs to the blocked redirects list via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Disable Admin Notices – Hide Dashboard Notifications para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.4.2, inclusive. Esto se debe a la falta de validación de nonce en la función `showPageContent()`. Esto hace posible que atacantes no autenticados añadan URLs arbitrarias a la lista de redirecciones bloqueadas mediante una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/disable-admin-notices/tags/1.4.2/admin/pages/class-pages-edit-redirects.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/disable-admin-notices/trunk/admin/pages/class-pages-edit-redirects.php#L103",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463239/disable-admin-notices/trunk/admin/pages/class-pages-edit-redirects.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b3011679-51e8-4a13-8364-1d0723656d08?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26103",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-25T11:16:02.983",
      "lastModified" : "2026-03-25T19:16:47.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en el demonio de gestión de almacenamiento udisks que expone una API D-Bus privilegiada para restaurar los encabezados de cifrado LUKS sin las comprobaciones de autorización adecuadas. El problema permite a un usuario local sin privilegios instruir al demonio udisks, propiedad de root, para sobrescribir metadatos de cifrado en dispositivos de bloque. Esto puede invalidar permanentemente las claves de cifrado y dejar los volúmenes cifrados inaccesibles. La explotación exitosa resulta en una condición de denegación de servicio a través de una pérdida de datos irreversible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:udisks:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31F1F1D-2E26-4D8E-A8C0-5395F302C444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26103",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433719",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/storaged-project/udisks/security/advisories/GHSA-c75h-phf8-ccjm",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26104",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-25T11:16:03.193",
      "lastModified" : "2026-03-25T19:16:48.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en el demonio de gestión de almacenamiento udisks que permite a usuarios sin privilegios hacer una copia de seguridad de los encabezados de cifrado LUKS sin autorización. El problema ocurre porque un método D-Bus privilegiado responsable de exportar metadatos de cifrado no realiza una verificación de política. Como resultado, los metadatos criptográficos sensibles pueden ser leídos y escritos en ubicaciones controladas por el atacante. Esto debilita las garantías de confidencialidad de los volúmenes de almacenamiento cifrados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:udisks:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31F1F1D-2E26-4D8E-A8C0-5395F302C444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3476",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5831",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-26104",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2433717",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/storaged-project/udisks/security/advisories/GHSA-fcvx-497g-6xmw",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25701",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2026-02-25T12:16:17.763",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like:\n  *  gain access to possible private information found in /var/lib/pcrlock.d\n  *  manipulate the data backed up in /tmp/pcrlock.d.bak, therefore violating the integrity of the data should it be restored.\n  *   overwrite protected system files with data from /var/lib/pcrlock.d by placing symlinks to existing files in the directory tree in /tmp/pcrlock.d.bak.\n\n\nThis issue affects sdbootutil: from ? before 5880246d3a02642dc68f5c8cb474bf63cdb56bca."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de archivo temporal inseguro en openSUSE sdbootutil permite a los usuarios locales pre-crear un directorio para lograr varios efectos como:\n  *  obtener acceso a posible información privada encontrada en /var/lib/pcrlock.d\n  *  manipular los datos respaldados en /tmp/pcrlock.d.bak, violando así la integridad de los datos en caso de que se restauren.\n  *  sobrescribir archivos de sistema protegidos con datos de /var/lib/pcrlock.d colocando enlaces simbólicos a archivos existentes en el árbol de directorios en /tmp/pcrlock.d.bak.\n\nEste problema afecta a sdbootutil: desde ? antes de 5880246d3a02642dc68f5c8cb474bf63cdb56bca."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1258241",
        "source" : "meissner@suse.de"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3118",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-25T12:16:17.957",
      "lastModified" : "2026-05-05T21:16:22.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This results in the entire Backstage application crashing and restarting, leading to a platform-wide Denial of Service (DoS). As a result, legitimate users temporarily lose access to the platform."
      }, {
        "lang" : "es",
        "value" : "Se identificó un fallo de seguridad en el Plugin Orchestrator de Red Hat Developer Hub (Backstage). El problema ocurre debido a una validación de entrada insuficiente en el manejo de consultas GraphQL. Un usuario autenticado puede inyectar una entrada especialmente diseñada en las solicitudes de la API, lo que interrumpe el procesamiento de consultas del backend. Esto resulta en que la aplicación Backstage completa colapse y se reinicie, lo que lleva a una Denegación de Servicio (DoS) en toda la plataforma. Como resultado, los usuarios legítimos pierden temporalmente el acceso a la plataforma."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:developer_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C29AF-F32F-4AC1-BC84-276B4024D0C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:13826",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:9742",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-3118",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2442273",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0704",
      "sourceIdentifier" : "security@octopus.com",
      "published" : "2026-02-25T13:16:04.337",
      "lastModified" : "2026-02-27T15:16:26.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows."
      }, {
        "lang" : "es",
        "value" : "En la versión afectada de Octopus Deploy era posible eliminar archivos y/o contenidos de archivos en el host utilizando un endpoint de la API. El campo carecía de validación, lo que podría resultar potencialmente en formas de eludir los flujos de trabajo esperados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@octopus.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023.1.4189",
            "versionEndExcluding" : "2025.3.14715",
            "matchCriteriaId" : "675ECB88-6C10-40FF-AB96-C2A5C952D07E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.octopus.com/post/2026/sa2026-01",
        "source" : "security@octopus.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21725",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2026-02-25T13:16:05.240",
      "lastModified" : "2026-02-27T03:34:26.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so.\n\nThis requires several very stringent conditions to be met:\n\n- The attacker must have admin access to the specific datasource prior to its first deletion.\n- Upon deletion, all steps within the attack must happen within the next 30 seconds and on the same pod of Grafana.\n- The attacker must delete the datasource, then someone must recreate it.\n- The new datasource must not have the attacker as an admin.\n- The new datasource must have the same UID as the prior datasource. These are randomised by default.\n- The datasource can now be re-deleted by the attacker.\n- Once 30 seconds are up, the attack is spent and cannot be repeated.\n- No datasource with any other UID can be attacked."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo \"time-of-create-to-time-of-use\" (TOCTOU) permite que las fuentes de datos recientemente eliminadas y luego recreadas sean re-eliminadas sin permiso para hacerlo.\n\nEsto requiere que se cumplan varias condiciones muy estrictas:\n\n- El atacante debe tener acceso de administrador a la fuente de datos específica antes de su primera eliminación.\n- Tras la eliminación, todos los pasos del ataque deben ocurrir dentro de los siguientes 30 segundos y en el mismo pod de Grafana.\n- El atacante debe eliminar la fuente de datos, luego alguien debe recrearla.\n- La nueva fuente de datos no debe tener al atacante como administrador.\n- La nueva fuente de datos debe tener el mismo UID que la fuente de datos anterior. Estos se aleatorizan por defecto.\n- La fuente de datos ahora puede ser re-eliminada por el atacante.\n- Una vez transcurridos 30 segundos, el ataque se agota y no puede repetirse.\n- Ninguna fuente de datos con cualquier otro UID puede ser atacada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:-:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "12.4.1",
            "matchCriteriaId" : "0B8EFF4D-5611-41A6-B555-4A7911C72824"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://grafana.com/security/security-advisories/cve-2026-21725",
        "source" : "security@grafana.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2624",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2026-02-25T13:16:05.373",
      "lastModified" : "2026-02-26T17:29:01.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.1298 before v.2.0.1301."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autenticación faltante para función crítica en el Cortafuegos de Próxima Generación (NGFW) Antikor de ePati Cyber ??Security Technologies Inc. permite la omisión de autenticación. Este problema afecta al Cortafuegos de Próxima Generación (NGFW) Antikor: desde la v.2.0.1298 anterior a la v.2.0.1301."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epati:antikor_next_generation_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.1298",
            "versionEndExcluding" : "2.0.1301",
            "matchCriteriaId" : "959FF153-E879-419E-B290-FC7014AA1D6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-26-0082",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28193",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-25T14:16:20.597",
      "lastModified" : "2026-02-26T15:59:53.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint"
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack antes de 2025.3.121962, las aplicaciones podían enviar solicitudes al endpoint de permisos de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.121962",
            "matchCriteriaId" : "E093C1C8-5FF8-409A-870F-B75FF2A0FACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28194",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-25T14:16:20.880",
      "lastModified" : "2026-02-25T17:16:54.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow"
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity antes de 2025.11.3, era posible una redirección abierta en el flujo de creación de proyectos de React."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.11.3",
            "matchCriteriaId" : "070CF2C4-0F0B-4ED4-B95A-46A9B9D78377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28195",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-25T14:16:21.040",
      "lastModified" : "2026-02-25T17:17:05.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations"
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity antes de 2025.11.3, la falta de autorización permitió a los desarrolladores de proyectos añadir parámetros a las configuraciones de compilación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.11.3",
            "matchCriteriaId" : "070CF2C4-0F0B-4ED4-B95A-46A9B9D78377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28196",
      "sourceIdentifier" : "cve@jetbrains.com",
      "published" : "2026-02-25T14:16:21.200",
      "lastModified" : "2026-02-25T17:17:14.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk"
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity antes de 2025.11.3, deshabilitar la configuración versionada dejó una configuración de credenciales en el disco."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@jetbrains.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@jetbrains.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.11.3",
            "matchCriteriaId" : "070CF2C4-0F0B-4ED4-B95A-46A9B9D78377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "source" : "cve@jetbrains.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3185",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T14:16:21.483",
      "lastModified" : "2026-02-26T15:57:11.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected is an unknown function of the file /api/admin/sys-message/ of the component API Endpoint. The manipulation of the argument messageId results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. Upgrading to version 1.3.3-beta is able to address this issue. The patch is identified as aefaabfd7527188bfba3c8c9eee17c316d094802. The affected component should be upgraded. The project was informed beforehand and acted very professional: \"We have implemented message ownership verification, so that users can only query messages related to themselves.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en feiyuchuixue sz-boot-parent hasta 1.3.2-beta. Afecta a una función desconocida del archivo /api/admin/sys-message/ del componente Endpoint de API. La manipulación del argumento messageId resulta en omisión de autorización. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser utilizado. La actualización a la versión 1.3.3-beta es capaz de abordar este problema. El parche se identifica como aefaabfd7527188bfba3c8c9eee17c316d094802. El componente afectado debería ser actualizado. El proyecto fue informado de antemano y actuó de manera muy profesional: 'Hemos implementado la verificación de propiedad de los mensajes, de modo que los usuarios solo pueden consultar mensajes relacionados con ellos mismos.'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "772E4F24-5681-43E1-827D-7D658095EE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCA4854-7694-4BFD-A807-9278EE352082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF1A941-C021-4033-90BC-A99BD26701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1E097731-97A4-4B7F-BF2F-7D6825C49223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "94FCFB0C-EBCC-4683-B982-D8F5D4C063BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "708EA3F9-1375-4487-A909-5E842E5C8DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BF7ADA-3266-4D00-81E7-D4A473ECD85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD95B7F-9E78-41D2-A071-F27AB7236D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2DCD07-5D33-48E2-A6EA-67CABDFC1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "17F8D76C-D418-4945-ADD5-0AAE1FD903FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE66DC8-32C7-4D45-B069-8A9F75A777FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "53D904ED-B71A-4B59-A5FE-DE3D7A37794A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F266024B-C11B-480E-A474-37B21885B1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B825-A425-49FF-8420-1104026D4093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "818F48CE-57CA-4253-966D-A9B5041343C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-IDOR_Message_ID_Enumeration.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754036",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3186",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T14:16:21.767",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-user/reset/password/ of the component Password Reset Handler. This manipulation of the argument userId causes use of default password. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.3.3-beta addresses this issue. Patch name: aefaabfd7527188bfba3c8c9eee17c316d094802. It is suggested to upgrade the affected component. The project was informed beforehand and acted very professional: \"We have added authorization validation to the password reset interface; now only users with the corresponding permissions are allowed to perform password resets.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en feiyuchuixue sz-boot-parent hasta 1.3.2-beta. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /api/admin/sys-user/reset/password/ del componente Gestor de Restablecimiento de Contraseña. Esta manipulación del argumento userId causa el uso de contraseña por defecto. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. La actualización a la versión 1.3.3-beta aborda este problema. Nombre del parche: aefaabfd7527188bfba3c8c9eee17c316d094802. Se sugiere actualizar el componente afectado. El proyecto fue informado de antemano y actuó de manera muy profesional: 'Hemos añadido validación de autorización a la interfaz de restablecimiento de contraseña; ahora solo los usuarios con los permisos correspondientes pueden realizar restablecimientos de contraseña.'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1393"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "772E4F24-5681-43E1-827D-7D658095EE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCA4854-7694-4BFD-A807-9278EE352082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF1A941-C021-4033-90BC-A99BD26701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1E097731-97A4-4B7F-BF2F-7D6825C49223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "94FCFB0C-EBCC-4683-B982-D8F5D4C063BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "708EA3F9-1375-4487-A909-5E842E5C8DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BF7ADA-3266-4D00-81E7-D4A473ECD85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD95B7F-9E78-41D2-A071-F27AB7236D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2DCD07-5D33-48E2-A6EA-67CABDFC1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "17F8D76C-D418-4945-ADD5-0AAE1FD903FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE66DC8-32C7-4D45-B069-8A9F75A777FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "53D904ED-B71A-4B59-A5FE-DE3D7A37794A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F266024B-C11B-480E-A474-37B21885B1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B825-A425-49FF-8420-1104026D4093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "818F48CE-57CA-4253-966D-A9B5041343C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-VPE_Unauthorized_Password_Reset.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754037",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27691",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T15:20:52.553",
      "lastModified" : "2026-02-26T15:50:36.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, signed integer overflow in iccFromCube.cpp during multiplication triggers undefined behavior, potentially causing crashes or incorrect ICC profile generation when processing crafted/large cube inputs. Commit 43ae18dd69fc70190d3632a18a3af2f3da1e052a fixes the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas para trabajar con perfiles de gestión de color ICC. En versiones hasta la 2.3.1.4 inclusive, un desbordamiento de entero con signo en iccFromCube.cpp durante la multiplicación desencadena un comportamiento indefinido, lo que podría causar fallos o una generación incorrecta de perfiles ICC al procesar entradas de cubo manipuladas/grandes. El commit 43ae18dd69fc70190d3632a18a3af2f3da1e052a soluciona el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1.4",
            "matchCriteriaId" : "13349570-1947-4F22-8E72-1B0AB45D143F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/43ae18dd69fc70190d3632a18a3af2f3da1e052a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/607",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/611",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-4gfj-4cjh-53v5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27692",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T15:20:52.727",
      "lastModified" : "2026-02-26T15:43:56.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, heap-buffer-overflow read occurs during CIccTagTextDescription::Release() when strlen() reads past a heap buffer while parsing ICC profile XML text description tags, causing a crash. Commit 29d088840b962a7cdd35993dfabc2cb35a049847 fixes the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "iccDEV proporciona un conjunto de librerías y herramientas para trabajar con perfiles ICC de gestión de color. En versiones hasta la 2.3.1.4 inclusive, se produce una lectura de desbordamiento de búfer de montón durante CIccTagTextDescription::Release() cuando strlen() lee más allá de un búfer de montón mientras analiza etiquetas de descripción de texto XML de perfiles ICC, causando un fallo. El commit 29d088840b962a7cdd35993dfabc2cb35a049847 corrige el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-170"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1.4",
            "matchCriteriaId" : "13349570-1947-4F22-8E72-1B0AB45D143F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/commit/29d088840b962a7cdd35993dfabc2cb35a049847",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/issues/609",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/pull/610",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-3869-prw8-gjqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27695",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T15:20:52.907",
      "lastModified" : "2026-02-26T15:38:45.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets for a single entity share the same DynamoDB partition key (`namespace/ENTITY#{id}`). A high-traffic entity can exceed DynamoDB's per-partition throughput limits (~1,000 WCU/sec), causing throttling that degrades service for that entity — and potentially co-located entities in the same partition. Version 0.10.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "zae-limiter es una librería de limitación de velocidad que utiliza el algoritmo de cubo de tokens. Antes de la versión 0.10.1, todos los cubos de límite de velocidad para una única entidad comparten la misma clave de partición de DynamoDB ('namespace/ENTITY#{id}'). Una entidad de alto tráfico puede exceder los límites de rendimiento por partición de DynamoDB (~1.000 WCU/seg), causando una limitación que degrada el servicio para esa entidad — y potencialmente para entidades coubicadas en la misma partición. La versión 0.10.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeroae:zae-limiter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.1",
            "matchCriteriaId" : "FF53AB9A-4E88-4C25-9752-3564CD7DDA1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeroae/zae-limiter/releases/tag/v0.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zeroae/zae-limiter/security/advisories/GHSA-76rv-2r9v-c5m6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27699",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T15:20:53.523",
      "lastModified" : "2026-02-26T15:27:45.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method. A malicious FTP server can send directory listings with filenames containing path traversal sequences (`../`) that cause files to be written outside the intended download directory. Version 5.2.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "La librería cliente FTP `basic-ftp` para Node.js contiene una vulnerabilidad de salto de ruta (CWE-22) en versiones anteriores a la 5.2.0 en el método `downloadToDir()`. Un servidor FTP malicioso puede enviar listados de directorio con nombres de archivo que contienen secuencias de salto de ruta (`../`) que provocan que los archivos se escriban fuera del directorio de descarga previsto. La versión 5.2.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patrickjuchli:basic-ftp:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "422197F2-36F3-496A-BA4B-09EF41898163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/patrickjuchli/basic-ftp/commit/2a2a0e6514357b9eda07c2f8afbd3f04727a7cd9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-5rq4-664w-9x2c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2878",
      "sourceIdentifier" : "security@progress.com",
      "published" : "2026-02-25T15:20:54.293",
      "lastModified" : "2026-02-26T15:23:31.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifier, based on timestamp and filename, can enable collisions and file content tampering."
      }, {
        "lang" : "es",
        "value" : "En Progress® Telerik® UI para AJAX, versiones anteriores a 2026.1.225, existe una vulnerabilidad de entropía insuficiente en RadAsyncUpload, donde un identificador temporal predecible, basado en la marca de tiempo y el nombre de archivo, puede permitir colisiones y la manipulación del contenido del archivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@progress.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@progress.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.1.225",
            "matchCriteriaId" : "2AFBB775-6FF6-4965-9CA9-0BA2F10494F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-insufficient-entropy-cve-2026-2878",
        "source" : "security@progress.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3187",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T15:20:55.277",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this issue is some unknown functionality of the file /api/admin/sys-file/upload of the component API Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.3.3-beta can resolve this issue. The name of the patch is aefaabfd7527188bfba3c8c9eee17c316d094802. Upgrading the affected component is recommended. The project was informed beforehand and acted very professional: \"We have introduced a whitelist restriction on the /api/admin/sys-file/upload endpoint via the oss.allowedExts and oss.allowedMimeTypes configuration options, allowing the specification of permitted file extensions and MIME types for uploads.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en feiyuchuixue sz-boot-parent hasta 1.3.2-beta. Afectada por este problema es alguna funcionalidad desconocida del archivo /api/admin/sys-file/upload del componente API Endpoint. Tal manipulación lleva a una carga sin restricciones. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser usado. La actualización a la versión 1.3.3-beta puede resolver este problema. El nombre del parche es aefaabfd7527188bfba3c8c9eee17c316d094802. La actualización del componente afectado es recomendada. El proyecto fue informado de antemano y actuó de manera muy profesional: 'Hemos introducido una restricción de lista blanca en el endpoint /api/admin/sys-file/upload a través de las opciones de configuración oss.allowedExts y oss.allowedMimeTypes, permitiendo la especificación de extensiones de archivo y tipos MIME permitidos para las cargas.'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "772E4F24-5681-43E1-827D-7D658095EE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCA4854-7694-4BFD-A807-9278EE352082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "ABF1A941-C021-4033-90BC-A99BD26701FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "1E097731-97A4-4B7F-BF2F-7D6825C49223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "94FCFB0C-EBCC-4683-B982-D8F5D4C063BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "708EA3F9-1375-4487-A909-5E842E5C8DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BF7ADA-3266-4D00-81E7-D4A473ECD85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD95B7F-9E78-41D2-A071-F27AB7236D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2DCD07-5D33-48E2-A6EA-67CABDFC1249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.4:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "17F8D76C-D418-4945-ADD5-0AAE1FD903FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.5:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE66DC8-32C7-4D45-B069-8A9F75A777FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.2.6:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "53D904ED-B71A-4B59-A5FE-DE3D7A37794A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "F266024B-C11B-480E-A474-37B21885B1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B825-A425-49FF-8420-1104026D4093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:szadmin:sz-boot-parent:1.3.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "818F48CE-57CA-4253-966D-A9B5041343C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-Arbitrary_File_Upload.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754038",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3197",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T15:20:55.520",
      "lastModified" : "2026-02-25T15:20:55.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3201",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T15:20:55.617",
      "lastModified" : "2026-02-26T14:49:01.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "Agotamiento de memoria del disector del protocolo USB HID en Wireshark 4.6.0 a 4.6.3 y 4.4.0 a 4.4.13 permite denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1325"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.14",
            "matchCriteriaId" : "CFACEDB6-42A3-4BC9-99F1-ABC9725C6954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "D75CCBC1-40C7-48D9-A33A-6260390864A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/20972",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-05.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3202",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T15:20:55.790",
      "lastModified" : "2026-02-26T14:47:37.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "Fallo del disector del protocolo NTS-KE en Wireshark 4.6.0 a 4.6.3 permite la denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "D75CCBC1-40C7-48D9-A33A-6260390864A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/21000",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-06.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3203",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T15:20:55.973",
      "lastModified" : "2026-02-26T14:41:13.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service"
      }, {
        "lang" : "es",
        "value" : "Fallo del disector del protocolo de perfil RF4CE en Wireshark de 4.6.0 a 4.6.3 y de 4.4.0 a 4.4.13 permite la denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.14",
            "matchCriteriaId" : "CFACEDB6-42A3-4BC9-99F1-ABC9725C6954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "D75CCBC1-40C7-48D9-A33A-6260390864A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/21009",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2026-07.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22866",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T16:23:25.277",
      "lastModified" : "2026-03-13T01:02:53.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. In versions 1.6.2 and prior, the `RSASHA256Algorithm` and `RSASHA1Algorithm` contracts fail to validate PKCS#1 v1.5 padding structure when verifying RSA signatures. The contracts only check if the last 32 (or 20) bytes of the decrypted signature match the expected hash. This enables Bleichenbacher's 2006 signature forgery attack against DNS zones using RSA keys with low public exponents (e=3). Two ENS-supported TLDs (.cc and .name) use e=3 for their Key Signing Keys, allowing any domain under these TLDs to be fraudulently claimed on ENS without DNS ownership. Apatch was merged at commit c76c5ad0dc9de1c966443bd946fafc6351f87587. Possible workarounds include deploying the patched contracts and pointing DNSSECImpl.setAlgorithm to the deployed contract."
      }, {
        "lang" : "es",
        "value" : "El Servicio de Nombres de Ethereum (ENS) es un sistema de nombres distribuido, abierto y extensible basado en la cadena de bloques de Ethereum. En las versiones 1.6.2 y anteriores, los contratos 'RSASHA256Algorithm' y 'RSASHA1Algorithm' no logran validar la estructura de relleno PKCS#1 v1.5 al verificar firmas RSA. Los contratos solo verifican si los últimos 32 (o 20) bytes de la firma descifrada coinciden con el hash esperado. Esto permite el ataque de falsificación de firmas de Bleichenbacher de 2006 contra zonas DNS que utilizan claves RSA con exponentes públicos bajos (e=3). Dos TLDs compatibles con ENS (.cc y .name) usan e=3 para sus Claves de Firma de Claves, permitiendo que cualquier dominio bajo estos TLDs sea reclamado fraudulentamente en ENS sin la propiedad de DNS. Un parche fue fusionado en el commit c76c5ad0dc9de1c966443bd946fafc6351f87587. Posibles soluciones provisionales incluyen desplegar los contratos parcheados y apuntar DNSSECImpl.setAlgorithm al contrato desplegado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ens.domains:ethereum_name_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "DC6CB03A-8DF6-4B9E-9356-2850DBEC1913"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ensdomains/ens-contracts-bug-62248-pr-509",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/ensdomains/ens-contracts/commit/c76c5ad0dc9de1c966443bd946fafc6351f87587",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ensdomains/ens-contracts/security/advisories/GHSA-c6rr-7pmc-73wc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27700",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T16:23:26.440",
      "lastModified" : "2026-03-02T16:17:53.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, when using the AWS Lambda adapter (`hono/aws-lambda`) behind an Application Load Balancer (ALB), the `getConnInfo()` function incorrectly selected the first value from the `X-Forwarded-For` header. Because AWS ALB appends the real client IP address to the end of the `X-Forwarded-For` header, the first value can be attacker-controlled. This could allow IP-based access control mechanisms (such as the `ipRestriction` middleware) to be bypassed. Version 4.12.2 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. En las versiones 4.12.0 y 4.12.1, al usar el adaptador de AWS Lambda ('hono/aws-lambda') detrás de un Application Load Balancer (ALB), la función 'getConnInfo()' seleccionó incorrectamente el primer valor del encabezado 'X-Forwarded-For'. Debido a que AWS ALB añade la dirección IP del cliente real al final del encabezado 'X-Forwarded-For', el primer valor puede ser controlado por el atacante. Esto podría permitir que los mecanismos de control de acceso basados en IP (como el middleware 'ipRestriction') fueran eludidos. La versión 4.12.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        }, {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.12.0",
            "versionEndExcluding" : "4.12.2",
            "matchCriteriaId" : "DF3B2F63-1712-4399-AEFD-660399D4B160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/41adbf56e252c04611f8972364ac0887ae07a4c7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/releases/tag/v4.12.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-xh87-mx6m-69f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27701",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T16:23:26.613",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LiveCode is an open-source, client-side code playground. Prior to commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11, LiveCode's `i18n-update-pull` GitHub Actions workflow is vulnerable to JavaScript injection. The title of the Pull Request associated with the triggering issue comment is interpolated directly into a `actions/github-script` JavaScript block using a GitHub Actions template expression. An attacker who opens a PR with a crafted title can inject arbitrary JavaScript that executes with the privileges of the CI bot token (`CI_APP_ID` / `CI_APP_PRIVATE_KEY`), enabling exfiltration of repository secrets and unauthorized GitHub API operations. Commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "LiveCode es un entorno de pruebas de código de código abierto, del lado del cliente. Antes del commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11, el flujo de trabajo de GitHub Actions 'i18n-update-pull' de LiveCode es vulnerable a la inyección de JavaScript. El título de la Pull Request asociado con el comentario de la incidencia que lo activa se interpola directamente en un bloque de JavaScript 'actions/github-script' utilizando una expresión de plantilla de GitHub Actions. Un atacante que abre una PR con un título manipulado puede inyectar JavaScript arbitrario que se ejecuta con los privilegios del token del bot de CI ('CI_APP_ID' / 'CI_APP_PRIVATE_KEY'), lo que permite la exfiltración de secretos del repositorio y operaciones no autorizadas de la API de GitHub. El commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/live-codes/livecodes/commit/e151c64c2bd80d2d53ac1333f1df9429fe6a1a11",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/live-codes/livecodes/security/advisories/GHSA-xh9w-5859-x97j",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/live-codes/livecodes/security/advisories/GHSA-xh9w-5859-x97j",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27702",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T16:23:26.777",
      "lastModified" : "2026-03-02T19:31:39.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an unsafe `eval()` vulnerability in Budibase's view filtering implementation allows any authenticated user (including free tier accounts) to execute arbitrary JavaScript code on the server. This vulnerability ONLY affects Budibase Cloud (SaaS) - self-hosted deployments use native CouchDB views and are not vulnerable. The vulnerability exists in `packages/server/src/db/inMemoryView.ts` where user-controlled view map functions are directly evaluated without sanitization. The primary impact comes from what lives inside the pod's environment: the `app-service` pod runs with secrets baked into its environment variables, including `INTERNAL_API_KEY`, `JWT_SECRET`, CouchDB admin credentials, AWS keys, and more. Using the extracted CouchDB credentials, we verified direct database access, enumerated all tenant databases, and confirmed that user records (email addresses) are readable. Version 3.30.4 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. Antes de la versión 3.30.4, una `vulnerabilidad` `eval()` insegura en la implementación de filtrado de vistas de Budibase permite a cualquier usuario autenticado (incluidas las cuentas de nivel gratuito) ejecutar código JavaScript arbitrario en el `servidor`. Esta `vulnerabilidad` SOLO afecta a Budibase Cloud (SaaS) - las implementaciones autoalojadas usan vistas nativas de CouchDB y no son `vulnerables`. La `vulnerabilidad` existe en `packages/server/src/db/inMemoryView.ts` donde las funciones de mapeo de vistas controladas por el usuario se evalúan directamente sin sanitización. El `impacto` principal proviene de lo que reside dentro del entorno del pod: el pod `app-service` se ejecuta con secretos incorporados en sus variables de entorno, incluyendo `INTERNAL_API_KEY`, `JWT_SECRET`, credenciales de administrador de CouchDB, claves de AWS y más. Usando las credenciales de CouchDB extraídas, verificamos el acceso directo a la `base de datos`, enumeramos todas las `bases de datos` de inquilinos, y confirmamos que los registros de usuario (direcciones de correo electrónico) son legibles. La versión 3.30.4 contiene un `parche`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.30.4",
            "matchCriteriaId" : "6366022F-080A-40DB-B1E9-CD5811BED55D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/commit/348659810cf930dda5f669e782706594c547115d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/pull/18087",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/releases/tag/3.30.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-rvhr-26g4-p2r8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27704",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T16:23:26.960",
      "lastModified" : "2026-03-13T00:56:42.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart SDK prior to 3.11.0 and the Flutter SDK prior to version 3.41.0, when the pub client (`dart pub` and `flutter pub`) extracts a package in the pub cache, a malicious package archive can have files extracted outside the destination directory in the `PUB_CACHE`.  A fix has been landed in commit 26c6985c742593d081f8b58450f463a584a4203a. By normalizing the file path before writing file, the attacker can no longer traverse up via a symlink. This patch is released in Dart 3.11.0 and Flutter 3.41.0.vAll packages on pub.dev have been vetted for this vulnerability. New packages are no longer allowed to contain symlinks. The pub client itself doesn't upload symlinks, but duplicates the linked entry, and has been doing this for years. Those whose dependencies are all from pub.dev, third-party repositories trusted to not contain malicious code, or git dependencies are not affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Los SDK de Dart y Flutter proporcionan kits de desarrollo de software para el lenguaje de programación Dart. En versiones del SDK de Dart anteriores a la 3.11.0 y del SDK de Flutter anteriores a la versión 3.41.0, cuando el cliente pub ('dart pub' y 'flutter pub') extrae un paquete en la caché de pub, un archivo de paquete malicioso puede tener archivos extraídos fuera del directorio de destino en el `PUB_CACHE`. Se ha implementado una corrección en el commit 26c6985c742593d081f8b58450f463a584a4203a. Al normalizar la ruta del archivo antes de escribir el archivo, el atacante ya no puede ascender a través de un enlace simbólico. Este parche se publica en Dart 3.11.0 y Flutter 3.41.0. Todos los paquetes en pub.dev han sido examinados para esta vulnerabilidad. Ya no se permite que los nuevos paquetes contengan enlaces simbólicos. El propio cliente pub no sube enlaces simbólicos, sino que duplica la entrada enlazada, y ha estado haciendo esto durante años. Aquellos cuyas dependencias provienen todas de pub.dev, repositorios de terceros de confianza para no contener código malicioso, o dependencias de git no se ven afectados por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dart:dart_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.11.0",
            "matchCriteriaId" : "F6068B05-8EC9-45A7-A97B-4071F121A443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flutter:flutter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.41.0",
            "matchCriteriaId" : "7244D310-C064-4E17-B0BA-B3FC800333C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dart-lang/pub/commit/26c6985c742593d081f8b58450f463a584a4203a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dart-lang/sdk/security/advisories/GHSA-q739-79rh-vmvp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27730",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T16:23:27.123",
      "lastModified" : "2026-02-27T17:43:47.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "esm.sh is a no-build content delivery network (CDN) for web development. Versions up to and including 137 have an SSRF vulnerability (CWE-918) in esm.sh’s `/http(s)` fetch route. The service tries to block localhost/internal targets, but the validation is based on hostname string checks and can be bypassed using DNS alias domains. This allows an external requester to make the esm.sh server fetch internal localhost services. As of time of publication, no known patched versions exist."
      }, {
        "lang" : "es",
        "value" : "esm.sh es una red de entrega de contenido (CDN) sin compilación para desarrollo web. Las versiones hasta la 137 inclusive tienen una vulnerabilidad SSRF (CWE-918) en la ruta de obtención '/http(s)' de esm.sh. El servicio intenta bloquear objetivos localhost/internos, pero la validación se basa en comprobaciones de cadenas de nombres de host y puede ser eludida usando dominios alias de DNS. Esto permite que un solicitante externo haga que el servidor de esm.sh obtenga servicios internos de localhost. Hasta el momento de la publicación, no existen versiones parcheadas conocidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esm:esm.sh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "137",
            "matchCriteriaId" : "AD6FA8D1-421D-416D-98EE-9DD8B7C02AAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/esm-dev/esm.sh/security/advisories/GHSA-p2v6-84h2-5x4r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27846",
      "sourceIdentifier" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "published" : "2026-02-25T16:23:28.710",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network \nto gain access to sensitive information, including the password for admin access to the web interface and the Wi-Fi passwords.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de autenticación, un usuario con acceso físico al dispositivo puede hacer un uso indebido de la funcionalidad de malla para añadir un nuevo dispositivo de malla a la red para obtener acceso a información sensible, incluyendo la contraseña para el acceso de administrador a la interfaz web y las contraseñas de Wi-Fi. Este problema afecta a MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-002.txt",
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27847",
      "sourceIdentifier" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "published" : "2026-02-25T16:23:28.833",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service.\nThis issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      }, {
        "lang" : "es",
        "value" : "Debido a la neutralización inadecuada de elementos especiales, se pueden inyectar sentencias SQL a través del handshake de una conexión TLS-SRP. Esto puede ser utilizado para inyectar credenciales conocidas en la base de datos que pueden ser utilizadas para completar exitosamente el handshake y usar el servicio protegido.\nEste problema afecta a MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-009.txt",
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27848",
      "sourceIdentifier" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "published" : "2026-02-25T16:23:29.037",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user.\nThis issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de neutralización de elementos especiales, se pueden inyectar comandos del SO a través del handshake de una conexión TLS-SRP, los cuales se ejecutan finalmente como el usuario root.\nEste problema afecta a MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-010.txt",
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3188",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T16:23:30.203",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the file /api/admin/common/download/templates of the component API. Performing a manipulation of the argument templateName results in path traversal. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.3.3-beta is able to mitigate this issue. The patch is named aefaabfd7527188bfba3c8c9eee17c316d094802. It is recommended to upgrade the affected component. The project was informed beforehand and acted very professional: \"We have implemented path validity checks on parameters for the template download interface (...)\""
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en feiyuchuixue sz-boot-parent hasta 1.3.2-beta. Esto afecta una parte desconocida del archivo /api/admin/common/download/templates del componente API. Realizar una manipulación del argumento templateName resulta en salto de ruta. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado para ataques. Actualizar a la versión 1.3.3-beta puede mitigar este problema. El parche se llama aefaabfd7527188bfba3c8c9eee17c316d094802. Se recomienda actualizar el componente afectado. El proyecto fue informado de antemano y actuó de manera muy profesional: 'Hemos implementado verificaciones de validez de ruta en los parámetros para la interfaz de descarga de plantillas (...)'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-Path_Traversal_to_Arbitrary_Resource_File_Read.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347746",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347746",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754041",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3206",
      "sourceIdentifier" : "e5bd9809-e237-4575-952b-81f8a96826ee",
      "published" : "2026-02-25T16:23:30.423",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU KrakenD-EE (CircuitBreaker modules). This issue affects KrakenD-CE: before 2.13.1; KrakenD-EE: before 2.12.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cierre o liberación inadecuada de recursos en KrakenD, SLU KrakenD-CE (módulos CircuitBreaker), KrakenD, SLU KrakenD-EE (módulos CircuitBreaker). Este problema afecta a KrakenD-CE: versiones anteriores a 2.13.1; KrakenD-EE: versiones anteriores a 2.12.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "e5bd9809-e237-4575-952b-81f8a96826ee",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:D/RE:L/U:Clear",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NEGLIGIBLE",
            "Automatable" : "YES",
            "Recovery" : "AUTOMATIC",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "CLEAR"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "e5bd9809-e237-4575-952b-81f8a96826ee",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.krakend.io/blog/krakend-2.13.1-release-notes/",
        "source" : "e5bd9809-e237-4575-952b-81f8a96826ee"
      }, {
        "url" : "https://www.krakend.io/blog/krakend-ee-2.12.5-release-notes/",
        "source" : "e5bd9809-e237-4575-952b-81f8a96826ee"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20010",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:24.110",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly.\r\n\r\nThis vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.\r\nNote:&nbsp;LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be&nbsp;directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función del Protocolo de Descubrimiento de Capa de Enlace (LLDP) del software Cisco NX-OS podría permitir a un atacante adyacente no autenticado provocar el reinicio del proceso LLDP, lo que podría causar que un dispositivo afectado se recargue inesperadamente.\n\nEsta vulnerabilidad se debe al manejo inadecuado de campos específicos en una trama LLDP. Un atacante podría explotar esta vulnerabilidad enviando un paquete LLDP manipulado a una interfaz de un dispositivo afectado. Un exploit exitoso podría permitir al atacante provocar la recarga del dispositivo, lo que resultaría en una condición de denegación de servicio (DoS).\nNota: LLDP es un protocolo de enlace de Capa 2. Para explotar esta vulnerabilidad, un atacante necesitaría estar directamente conectado a una interfaz de un dispositivo afectado, ya sea física o lógicamente (por ejemplo, a través de un túnel de Capa 2 configurado para transportar el protocolo LLDP)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-805"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k_aci_lldp_dos-NdgRrrA3",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20033",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:24.560",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the&nbsp;management interface of an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.\r\nNote: Only the out-of-band (OOB) management interface is affected."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los switches de tejido Cisco Nexus serie 9000 en modo ACI podría permitir a un atacante adyacente no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación insuficiente al procesar tramas Ethernet específicas. Un atacante podría explotar esta vulnerabilidad al enviar una trama Ethernet manipulada a la interfaz de gestión de un dispositivo afectado. Un exploit exitoso podría permitir al atacante hacer que el dispositivo se recargue inesperadamente, lo que resultaría en una condición de DoS.\nNota: Solo la interfaz de gestión fuera de banda (OOB) se ve afectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-805"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cpdos-qLsv6pFD",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20036",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:24.833",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative privileges to execute arbitrary commands on the underlying operating system of an affected device.&nbsp;\r\n&nbsp;\r\nThis vulnerability is due to insufficient input validation of command arguments that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device with root-level privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web y CLI de Cisco UCS Manager Software podría permitir a un atacante remoto autenticado con privilegios administrativos válidos ejecutar comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de los argumentos de comando que son proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad autenticándose en un dispositivo y enviando una entrada manipulada al comando afectado. Un exploit exitoso podría permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado con privilegios de nivel de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-cmdinj-GvxLPeSB",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20037",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:25.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to modify files and perform unauthorized actions on an affected system.\r\n&nbsp;\r\nThis vulnerability exists because unnecessary privileges are given to the user. An attacker could exploit this vulnerability by authenticating to a device as a read-only user and connecting to the NX-OS CLI. A successful exploit could allow the attacker to create or overwrite files in the file system or perform limited privileged actions on an affected device.&nbsp; &nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los niveles de privilegio de la CLI de NX-OS del software Cisco UCS Manager podría permitir a un atacante local y autenticado con privilegios de solo lectura modificar archivos y realizar acciones no autorizadas en un sistema afectado.\n\nEsta vulnerabilidad existe porque se otorgan privilegios innecesarios al usuario. Un atacante podría explotar esta vulnerabilidad autenticándose en un dispositivo como un usuario de solo lectura y conectándose a la CLI de NX-OS. Un exploit exitoso podría permitir al atacante crear o sobrescribir archivos en el sistema de archivos o realizar acciones privilegiadas limitadas en un dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-afwae-mOgUfyLn",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20048",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:25.620",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper processing when parsing SNMP requests. An attacker could exploit this vulnerability by continuously sending SNMP queries&nbsp;to a specific MIB of an affected device. A successful exploit could allow the attacker to cause a kernel panic on the device, resulting in a reload and a&nbsp;DoS condition.\r\nNote: This vulnerability affects SNMP versions 1, 2c, and 3. To exploit&nbsp;this vulnerability through SNMPv1 or&nbsp;SNMPv2c, the attacker must have a valid read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema del Protocolo Simple de Gestión de Red (SNMP) de los switches de tejido Cisco Nexus serie 9000 en modo ACI podría permitir a un atacante remoto autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un procesamiento incorrecto al analizar solicitudes SNMP. Un atacante podría explotar esta vulnerabilidad enviando continuamente consultas SNMP a una MIB específica de un dispositivo afectado. Un exploit exitoso podría permitir al atacante causar un pánico del kernel en el dispositivo, lo que resultaría en una recarga y una condición de DoS.\nNota: Esta vulnerabilidad afecta las versiones 1, 2c y 3 de SNMP. Para explotar esta vulnerabilidad a través de SNMPv1 o SNMPv2c, el atacante debe tener una cadena de comunidad SNMP de solo lectura válida para el sistema afectado. Para explotar esta vulnerabilidad a través de SNMPv3, el atacante debe tener credenciales de usuario SNMP válidas para el sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-dsnmp-cNN39Uh",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20051",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:26.487",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop.\r\n\r\nThis vulnerability is due to a logic error when processing a crafted Layer 2 ingress frame. An attacker could exploit this vulnerability by sending a stream of crafted Ethernet frames through the targeted device. A successful exploit could allow the attacker to cause a Layer 2 Virtual eXtensible LAN (VxLAN) traffic loop, which, in turn, could result in a denial of service (DoS) condition. This Layer 2 loop could oversubscribe the bandwidth on network interfaces, which would result in all data plane traffic being dropped. To exploit this vulnerability, the attacker must be Layer 2-adjacent to the affected device.\r\nNote:&nbsp;To stop active exploitation of this vulnerability, manual intervention is required to both stop the crafted traffic and flap all involved network interfaces. For additional assistance if a Layer 2 loop that is related to this vulnerability is suspected, contact the Cisco Technical Assistance Center (TAC) or the proper support provider.&nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de paquetes de entrada de Capa 2 de Ethernet VPN (EVPN) de los switches de plataforma Cisco Nexus 3600 y las plataformas de switching Cisco Nexus 9500-R Series podría permitir a un atacante adyacente no autenticado desencadenar un bucle de tráfico de Capa 2.\n\nEsta vulnerabilidad se debe a un error de lógica al procesar una trama de entrada de Capa 2 manipulada. Un atacante podría explotar esta vulnerabilidad enviando un flujo de tramas Ethernet manipuladas a través del dispositivo objetivo. Un exploit exitoso podría permitir al atacante causar un bucle de tráfico de Capa 2 de Virtual eXtensible LAN (VxLAN), lo que, a su vez, podría resultar en una condición de denegación de servicio (DoS). Este bucle de Capa 2 podría sobresaturar el ancho de banda en las interfaces de red, lo que resultaría en la caída de todo el tráfico del plano de datos. Para explotar esta vulnerabilidad, el atacante debe ser adyacente en Capa 2 al dispositivo afectado.\nNota: Para detener la explotación activa de esta vulnerabilidad, se requiere intervención manual tanto para detener el tráfico manipulado como para reiniciar todas las interfaces de red involucradas. Para asistencia adicional si se sospecha de un bucle de Capa 2 relacionado con esta vulnerabilidad, contacte con el Centro de Asistencia Técnica de Cisco (TAC) o con el proveedor de soporte adecuado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-457"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ether-dos-Kv8YNWZ4",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20091",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:26.830",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability,&nbsp;the attacker must have valid credentials for a user account with the role of Administrator or AAA Administrator.&nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco FXOS Software y Cisco UCS Manager Software podría permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) almacenado contra un usuario de la interfaz.\n\nEsta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario por parte de la interfaz de gestión basada en web de un sistema afectado. Un atacante podría explotar esta vulnerabilidad inyectando datos maliciosos en páginas específicas de la interfaz. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información sensible basada en el navegador. Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas para una cuenta de usuario con el rol de Administrador o Administrador AAA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsfxosxss-7skVE8Zv",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20099",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:27.357",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco&nbsp;UCS Manager Software could allow an authenticated, local attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to&nbsp;root.&nbsp;\r\n\r\nThis vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of the affected device with root-level privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco FXOS Software y Cisco UCS Manager Software podría permitir a un atacante autenticado y local con privilegios administrativos realizar ataques de inyección de comandos en un sistema afectado y elevar privilegios a root.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de los argumentos de comando proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad autenticándose en un dispositivo y enviando una entrada manipulada al comando afectado. Un exploit exitoso podría permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente del dispositivo afectado con privilegios de nivel root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsciv-wGYtC78q",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20107",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:27.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. To exploit this vulnerability, the attacker must have valid user credentials and any role that includes CLI access.\r\n\r\nThis vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by issuing crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente CLI del Modelo de Objetos de Cisco Application Policy Infrastructure Controller (APIC) podría permitir a un atacante local autenticado causar que un dispositivo afectado se recargue inesperadamente, lo que resultaría en una condición de denegación de servicio (DoS). Para explotar esta vulnerabilidad, el atacante debe tener credenciales de usuario válidas y cualquier rol que incluya acceso CLI.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente. Un atacante podría explotar esta vulnerabilidad emitiendo comandos manipulados en el indicador de la CLI. Un exploit exitoso podría permitir al atacante causar que el dispositivo se recargue, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1220"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-dos-rNus8EFw",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20122",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:28.170",
      "lastModified" : "2026-04-21T13:00:03.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system&nbsp;and gain vmanage user privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API de Cisco Catalyst SD-WAN Manager podría permitir a un atacante remoto y autenticado sobrescribir archivos arbitrarios en el sistema de archivos local. Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas de solo lectura con acceso a la API en el sistema afectado.\n\nEsta vulnerabilidad se debe a un manejo inadecuado de archivos en la interfaz de la API de un sistema afectado. Un atacante podría explotar esta vulnerabilidad al cargar un archivo malicioso en el sistema de archivos local. Un exploit exitoso podría permitir al atacante sobrescribir archivos arbitrarios en el sistema afectado y obtener privilegios de usuario de vmanage."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "cisaExploitAdd" : "2026-04-20",
      "cisaActionDue" : "2026-04-23",
      "cisaRequiredAction" : "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",
      "cisaVulnerabilityName" : "Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-648"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "0388BD67-C1AD-4E47-8B1A-22EE1634190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.10",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "ADAB32B5-239D-4DC0-BF30-A6D72ACB3710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "D284EA84-6C27-4A9C-BDA2-D1C5BF1F2356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18.2.1",
            "matchCriteriaId" : "B94E1DC2-5DA5-4238-8040-6D524DDEAA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6E170-73B8-4838-93B4-AD258F3BCA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20126",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:28.840",
      "lastModified" : "2026-03-04T21:21:49.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system.\r\n\r\nThis vulnerability is due to an insufficient user authentication mechanism in the REST API. An attacker could exploit this vulnerability by sending a request to the REST API of the affected system. A successful exploit could allow the attacker to&nbsp;gain root privileges on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Catalyst SD-WAN Manager podría permitir a un atacante local autenticado con pocos privilegios obtener privilegios de root en el sistema operativo subyacente.\n\nEsta vulnerabilidad se debe a un mecanismo de autenticación de usuario insuficiente en la API REST. Un atacante podría explotar esta vulnerabilidad enviando una solicitud a la API REST del sistema afectado. Un exploit exitoso podría permitir al atacante obtener privilegios de root en el sistema operativo subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-648"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "0388BD67-C1AD-4E47-8B1A-22EE1634190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.11",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "344CA479-F60F-4CD6-83F7-4DB38DF2EAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "D284EA84-6C27-4A9C-BDA2-D1C5BF1F2356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18.2.1",
            "matchCriteriaId" : "B94E1DC2-5DA5-4238-8040-6D524DDEAA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6E170-73B8-4838-93B4-AD258F3BCA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20127",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:29.477",
      "lastModified" : "2026-02-26T16:20:02.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root&nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la autenticación de emparejamiento en Cisco Catalyst SD-WAN Controller, anteriormente SD-WAN vSmart, y Cisco Catalyst SD-WAN Manager, anteriormente SD-WAN vManage, podría permitir a un atacante remoto no autenticado eludir la autenticación y obtener privilegios administrativos en un sistema afectado.\n\nEsta vulnerabilidad existe porque el mecanismo de autenticación de emparejamiento en un sistema afectado no funciona correctamente. Un atacante podría explotar esta vulnerabilidad enviando solicitudes manipuladas a un sistema afectado. Un exploit exitoso podría permitir al atacante iniciar sesión en un Cisco Catalyst SD-WAN Controller afectado como una cuenta de usuario interna, con altos privilegios y no root. Usando esta cuenta, el atacante podría acceder a NETCONF, lo que luego permitiría al atacante manipular la configuración de red para la estructura SD-WAN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2026-02-25",
      "cisaActionDue" : "2026-02-27",
      "cisaRequiredAction" : "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",
      "cisaVulnerabilityName" : "Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "0388BD67-C1AD-4E47-8B1A-22EE1634190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.11",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "344CA479-F60F-4CD6-83F7-4DB38DF2EAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "D284EA84-6C27-4A9C-BDA2-D1C5BF1F2356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18.2.1",
            "matchCriteriaId" : "B94E1DC2-5DA5-4238-8040-6D524DDEAA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6E170-73B8-4838-93B4-AD258F3BCA7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "9C42E29A-D80E-4303-A33E-660099CF78F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.11",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "7B720BE5-BD1D-4BFA-A899-BFB20C7499FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "4BDF8CF0-99BA-461F-99D6-4B1ABE9C2FFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18.2.1",
            "matchCriteriaId" : "E709AAB8-3567-49EB-8090-033468743AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vsmart_controller:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD7A58E-C95F-48C2-8359-39AFE7FA47BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20127",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20128",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:30.150",
      "lastModified" : "2026-04-21T13:00:03.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.\r\n\r\nThis vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.\r\nNote: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de Agente de Recopilación de Datos (DCA) de Cisco Catalyst SD-WAN Manager podría permitir a un atacante local autenticado obtener privilegios de usuario de DCA en un sistema afectado. Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas de vmanage en el sistema afectado.\n\nEsta vulnerabilidad se debe a la presencia de un archivo de credenciales para el usuario de DCA en un sistema afectado. Un atacante podría explotar esta vulnerabilidad al acceder al sistema de archivos como un usuario con privilegios bajos y leer el archivo que contiene la contraseña de DCA de ese sistema afectado. Un exploit exitoso podría permitir al atacante acceder a otro sistema afectado y obtener privilegios de usuario de DCA.\nNota: Las versiones 20.18 y posteriores de Cisco Catalyst SD-WAN Manager no se ven afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2026-04-20",
      "cisaActionDue" : "2026-04-23",
      "cisaRequiredAction" : "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",
      "cisaVulnerabilityName" : "Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "0388BD67-C1AD-4E47-8B1A-22EE1634190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.10",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "ADAB32B5-239D-4DC0-BF30-A6D72ACB3710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "D284EA84-6C27-4A9C-BDA2-D1C5BF1F2356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18",
            "matchCriteriaId" : "79B0897E-0FF3-44CA-901F-A10A6921672D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6E170-73B8-4838-93B4-AD258F3BCA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20128",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20129",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:30.343",
      "lastModified" : "2026-03-04T21:16:28.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the&nbsp;netadmin role.\r\n\r\nThe vulnerability is due to improper authentication for requests that are sent to the API. An attacker could exploit this vulnerability by sending a crafted request to the API of an affected system. A successful exploit could allow the attacker to execute commands with the privileges of the netadmin role.\r\nNote: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.&nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la autenticación de usuarios de la API de Cisco Catalyst SD-WAN Manager podría permitir a un atacante remoto no autenticado obtener acceso a un sistema afectado como un usuario con el rol de netadmin.\n\nLa vulnerabilidad se debe a una autenticación incorrecta para las solicitudes que se envían a la API. Un atacante podría explotar esta vulnerabilidad enviando una solicitud manipulada a la API de un sistema afectado. Un exploit exitoso podría permitir al atacante ejecutar comandos con los privilegios del rol de netadmin.\nNota: Las versiones 20.18 y posteriores de Cisco Catalyst SD-WAN Manager no se ven afectadas por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "0388BD67-C1AD-4E47-8B1A-22EE1634190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.11",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "344CA479-F60F-4CD6-83F7-4DB38DF2EAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "D284EA84-6C27-4A9C-BDA2-D1C5BF1F2356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18",
            "matchCriteriaId" : "79B0897E-0FF3-44CA-901F-A10A6921672D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6E170-73B8-4838-93B4-AD258F3BCA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20133",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-02-25T17:25:30.983",
      "lastModified" : "2026-04-22T16:56:21.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Catalyst SD-WAN Manager podría permitir a un atacante remoto no autenticado ver información sensible en un sistema afectado.\n\nEsta vulnerabilidad se debe a restricciones de acceso al sistema de archivos insuficientes. Un atacante podría explotar esta vulnerabilidad al acceder a la API de un sistema afectado. Un exploit exitoso podría permitir al atacante leer información sensible en el sistema operativo subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2026-04-20",
      "cisaActionDue" : "2026-04-23",
      "cisaRequiredAction" : "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",
      "cisaVulnerabilityName" : "Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.9.8.2",
            "matchCriteriaId" : "0388BD67-C1AD-4E47-8B1A-22EE1634190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.10",
            "versionEndExcluding" : "20.12.5.3",
            "matchCriteriaId" : "ADAB32B5-239D-4DC0-BF30-A6D72ACB3710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.13",
            "versionEndExcluding" : "20.15.4.2",
            "matchCriteriaId" : "D284EA84-6C27-4A9C-BDA2-D1C5BF1F2356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.16",
            "versionEndExcluding" : "20.18.2.1",
            "matchCriteriaId" : "B94E1DC2-5DA5-4238-8040-6D524DDEAA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B6E170-73B8-4838-93B4-AD258F3BCA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20133",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-25T17:25:39.293",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operator for HMAC signature verification in the sync_course_run_from_request function. This allows remote attackers to forge valid signatures and bypass authentication by measuring response time discrepancies"
      }, {
        "lang" : "es",
        "value" : "Un problema en OpenFUN Richie (LMS) en src/richie/apps/courses/api.py. La aplicación utilizó el operador == de tiempo no constante para la verificación de firmas HMAC en la función sync_course_run_from_request. Esto permite a atacantes remotos forjar firmas válidas y eludir la autenticación midiendo las discrepancias en el tiempo de respuesta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Rickidevs/CVE-2026-26717",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/openfun/richie/commit/a1b5bbda3403d7debb466c303a32852925fcba5f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/@ordogh/cve-2026-26717-hmac-timing-attack-in-openfun-richie-lms-f04377efe83d?postPublishedType=repub",
        "source" : "cve@mitre.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27705",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T17:25:39.573",
      "lastModified" : "2026-02-27T17:37:38.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in `apps/api/plane/app/views/asset/v2.py` (lines 579–593) performs a global asset lookup using only the asset ID (`pk`) via `FileAsset.objects.get(id=pk)`, without verifying that the asset belongs to the workspace and project specified in the URL path. This allows any authenticated user (including those with the GUEST role) to modify the `attributes` and `is_uploaded` status of assets belonging to any workspace or project in the entire Plane instance by guessing or enumerating asset UUIDs. Version 1.2.2 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Plane es una herramienta de gestión de proyectos de código abierto. Antes de la versión 1.2.2, el método `ProjectAssetEndpoint.patch()` en `apps/api/plane/app/views/asset/v2.py` (líneas 579–593) realiza una búsqueda global de activos utilizando solo el ID del activo (`pk`) a través de `FileAsset.objects.get(id=pk)`, sin verificar que el activo pertenece al espacio de trabajo y al proyecto especificados en la ruta de la URL. Esto permite a cualquier usuario autenticado (incluidos aquellos con el rol GUEST) modificar el estado de `attributes` e `is_uploaded` de activos pertenecientes a cualquier espacio de trabajo o proyecto en toda la instancia de Plane adivinando o enumerando los UUID de los activos. La versión 1.2.2 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plane:plane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "5CFB7634-F7C4-45BE-BCA9-FB73B6287FAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/makeplane/plane/commit/9070acbbe81bc02db5c169789da6862d5fc35d96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/makeplane/plane/releases/tag/v1.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/makeplane/plane/security/advisories/GHSA-rfj3-8c85-g46j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27706",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T17:25:39.740",
      "lastModified" : "2026-02-27T17:36:19.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery (SSRF) vulnerability has been identified in the \"Add Link\" feature. This flaw allows an authenticated attacker with general user privileges to send arbitrary GET requests to the internal network and exfiltrate the full response body. By exploiting this vulnerability, an attacker can steal sensitive data from internal services and cloud metadata endpoints. Version 1.2.2 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Plane es una herramienta de gestión de proyectos de código abierto. Antes de la versión 1.2.2, se ha identificado una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) de lectura completa en la característica 'Add Link'. Esta falla permite a un atacante autenticado con privilegios de usuario generales enviar peticiones GET arbitrarias a la red interna y exfiltrar el cuerpo completo de la respuesta. Al explotar esta vulnerabilidad, un atacante puede robar datos sensibles de servicios internos y puntos finales de metadatos en la nube. La versión 1.2.2 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plane:plane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "5CFB7634-F7C4-45BE-BCA9-FB73B6287FAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/makeplane/plane/releases/tag/v1.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/makeplane/plane/security/advisories/GHSA-jcc6-f9v6-f7jw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27727",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T17:25:39.910",
      "lastModified" : "2026-03-11T23:30:53.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted `jaxax.naming.Reference` or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to `false`, `com.sun.jndi.ldap.object.trustURLCodebase`. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs."
      }, {
        "lang" : "es",
        "value" : "mchange-commons-java, una librería que proporciona utilidades de Java, incluye código que emula implementaciones tempranas de la funcionalidad JNDI, incluyendo soporte para valores remotos de `factoryClassLocation`, mediante los cuales se puede descargar e invocar código dentro de una aplicación en ejecución. Si un atacante puede provocar que una aplicación lea un `jaxax.naming.Reference` o un objeto serializado maliciosamente diseñado, pueden provocar la descarga y ejecución de código malicioso. Las implementaciones de esta funcionalidad dentro del JDK fueron deshabilitadas por defecto detrás de una propiedad de sistema que por defecto es `false`, `com.sun.jndi.ldap.object.trustURLCodebase`. Sin embargo, dado que mchange-commons-java incluye una implementación independiente de la desreferenciación JNDI, las librerías (como c3p0) que resuelven referencias a través de esa implementación podrían ser provocadas para descargar y ejecutar código malicioso incluso después de que el JDK fuera reforzado. Emulando el parche del JDK, la funcionalidad JNDI de mchange-commons-java está restringida por parámetros de configuración que por defecto tienen valores restrictivos a partir de la versión 0.4.0. No se conocen soluciones alternativas disponibles. Las versiones anteriores a la 0.4.0 deben evitarse en los CLASSPATH de las aplicaciones."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mchange:mchange_commons_java:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "3B71153F-8D1C-4723-A9BD-4B92CFFE0A98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mchange.com/projects/c3p0/#configuring_security",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mchange.com/projects/c3p0/#security-note",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27728",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T17:25:40.103",
      "lastModified" : "2026-03-02T18:56:30.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in `NetworkPathMonitor.performTraceroute()` allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell metacharacters into a monitor's destination field. Version 10.0.7 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "OneUptime es una solución para monitorear y gestionar servicios en línea. Antes de la versión 10.0.7, una vulnerabilidad de inyección de comandos del sistema operativo en `NetworkPathMonitor.performTraceroute()` permite a cualquier usuario de proyecto autenticado ejecutar comandos arbitrarios del sistema operativo en el servidor Probe al inyectar metacaracteres de shell en el campo de destino de un monitor. La versión 10.0.7 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hackerbay:oneuptime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "6FD1CDBC-9031-428E-ABC5-1FED83248B5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneUptime/oneuptime/commit/f2cce35a04fac756cecc7a4c55e23758b99288c1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-jmhp-5558-qxh5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27736",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T17:25:40.283",
      "lastModified" : "2026-03-05T18:26:56.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BigBlueButton is an open-source virtual classroom. In versions on the 3.x branch prior to 3.0.20, the string received with errorRedirectUrl lacks validation, using it directly in the respondWithRedirect function leads to an Open Redirect vulnerability. BigBlueButton 3.0.20 patches the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "BigBlueButton es un aula virtual de código abierto. En versiones de la rama 3.x anteriores a la 3.0.20, la cadena recibida con errorRedirectUrl carece de validación, usarla directamente en la función respondWithRedirect conduce a una vulnerabilidad de redirección abierta. BigBlueButton 3.0.20 corrige el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigbluebutton:bigbluebutton:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.20",
            "matchCriteriaId" : "FC6C16D8-2543-43E9-8F1B-632501E23028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigbluebutton/bigbluebutton/commit/691f92f3af0d6b796b91cb968977068663119812",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-65cv-rg9f-qqrx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27738",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T17:25:40.463",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the internal URL processing logic in versions on the 19.x branch prior to 19.2.21, the 20.x branch prior to 20.3.17, and the 21.x branch prior to 21.1.5 and 21.2.0-rc.1. The logic normalizes URL segments by stripping leading slashes; however, it only removes a single leading slash. When an Angular SSR application is deployed behind a proxy that passes the `X-Forwarded-Prefix` header, an attacker can provide a value starting with three slashes. This vulnerability allows attackers to conduct large-scale phishing and SEO hijacking. In order to be vulnerable, the application must use Angular SSR, the application must have routes that perform internal redirects, the infrastructure (Reverse Proxy/CDN) must pass the `X-Forwarded-Prefix` header to the SSR process without sanitization, and the cache must not vary on the `X-Forwarded-Prefix` header. Versions 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 contain a patch. Until the patch is applied, developers should sanitize the `X-Forwarded-Prefix` header in their`server.ts` before the Angular engine processes the request."
      }, {
        "lang" : "es",
        "value" : "El Angular SSR es una herramienta de renderizado del lado del servidor para aplicaciones Angular. Una vulnerabilidad de redirección abierta existe en la lógica interna de procesamiento de URL en versiones de la rama 19.x anteriores a la 19.2.21, la rama 20.x anteriores a la 20.3.17, y la rama 21.x anteriores a la 21.1.5 y 21.2.0-rc.1. La lógica normaliza los segmentos de URL eliminando las barras iniciales; sin embargo, solo elimina una única barra inicial. Cuando una aplicación Angular SSR se despliega detrás de un proxy que pasa el encabezado `X-Forwarded-Prefix`, un atacante puede proporcionar un valor que comienza con tres barras. Esta vulnerabilidad permite a los atacantes realizar phishing a gran escala y secuestro de SEO. Para ser vulnerable, la aplicación debe usar Angular SSR, la aplicación debe tener rutas que realicen redirecciones internas, la infraestructura (Proxy Inverso/CDN) debe pasar el encabezado `X-Forwarded-Prefix` al proceso SSR sin sanitización, y la caché no debe variar según el encabezado `X-Forwarded-Prefix`. Las versiones 21.2.0-rc.1, 21.1.5, 20.3.17 y 19.2.21 contienen un parche. Hasta que se aplique el parche, los desarrolladores deben sanear el encabezado `X-Forwarded-Prefix` en su 'server.ts' antes de que el motor de Angular procese la solicitud."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/angular/angular-cli/commit/877f017ace4b83277d773aa37f5813e5e9faec7e",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/angular/angular-cli/issues/32501",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/angular/angular-cli/pull/32521",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/angular/angular-cli/security/advisories/GHSA-xh43-g2fq-wjrj",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/angular/angular-cli/issues/32501",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27849",
      "sourceIdentifier" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "published" : "2026-02-25T17:25:40.903",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network.\nThis issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de neutralización de elementos especiales, se pueden inyectar comandos del sistema operativo a través de la funcionalidad de actualización de una conexión TLS-SRP, que normalmente se utiliza para configurar dispositivos dentro de la red de malla.\nEste problema afecta a MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-011.txt",
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3189",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T17:25:42.470",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability affects unknown code of the file /api/admin/common/files/download. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be executed remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. Upgrading to version 1.3.3-beta is able to resolve this issue. This patch is called aefaabfd7527188bfba3c8c9eee17c316d094802. Upgrading the affected component is advised. The project was informed beforehand and acted very professional: \"We have added a URL protocol whitelist validation to the file download interface, allowing only http and https protocols.\""
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en feiyuchuixue sz-boot-parent hasta 1.3.2-beta. Esta vulnerabilidad afecta código desconocido del archivo /API/admin/common/files/download. La ejecución de una manipulación del argumento url puede conducir a falsificación de petición del lado del servidor. El ataque puede ejecutarse de forma remota. Los ataques de esta naturaleza son altamente complejos. Se afirma que la explotabilidad es difícil. La actualización a la versión 1.3.3-beta es capaz de resolver este problema. Este parche se llama aefaabfd7527188bfba3c8c9eee17c316d094802. Se aconseja actualizar el componente afectado. El proyecto fue informado de antemano y actuó de manera muy profesional: 'Hemos añadido una validación de lista blanca de protocolo URL a la interfaz de descarga de archivos, permitiendo solo los protocolos HTTP y HTTPS.'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-SSRF_and_Arbitrary_File_Read.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347747",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347747",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.754042",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3192",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T17:25:42.713",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of the file rpc_server_base.py of the component RPC Credential Handler. The manipulation leads to improper authentication. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was informed early via email. A separate report via bugbounty was rejected with the reason \"This is by design. The user is responsible for host security\"."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Chia Blockchain 2.1.0. Este problema afecta la función _authenticate del archivo rpc_server_base.py del componente Gestor de Credenciales RPC. La manipulación conduce a una autenticación impropia. El ataque es posible de ser llevado a cabo remotamente. El ataque se considera que tiene alta complejidad. La explotabilidad se evalúa como difícil. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue informado tempranamente vía correo electrónico. Un informe separado vía bugbounty fue rechazado con la razón 'Esto es por diseño. El usuario es responsable de la seguridad del host'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chia:blockchain:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF3B0E2-5398-4EEF-8EF1-EF9BF237FC95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Danimlzg/chia-rpc-auth-bypass.git",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3193",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T17:25:42.937",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. The manipulation results in cross-site request forgery. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was informed early via email. A separate report via bugbounty was rejected with the reason \"This is by design. The user is responsible for host security\"."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Chia Blockchain 2.1.0. Afectada es una función desconocida del archivo /send_transaction. La manipulación resulta en falsificación de petición en sitios cruzados. El ataque puede ser realizado desde remoto. El ataque requiere un alto nivel de complejidad. La explotabilidad es considerada difícil. El exploit es ahora público y puede ser usado. El proveedor fue informado temprano vía correo electrónico. Un informe separado vía bugbounty fue rechazado con la razón 'Esto es por diseño. El usuario es responsable de la seguridad del host'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chia:blockchain:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF3B0E2-5398-4EEF-8EF1-EF9BF237FC95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Danimlzg/chia-rpc-auth-bypass.git",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21902",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2026-02-25T18:23:40.360",
      "lastModified" : "2026-03-30T15:16:05.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root.\n\nThe On-Box Anomaly detection framework should only be reachable by other internal processes over the internal routing instance, but not over an externally exposed port. With the ability to access and manipulate the service to execute code as root a remote attacker can take complete control of the device.\nPlease note that this service is enabled by default as no specific configuration is required.\n\nThis issue affects Junos OS Evolved on PTX Series:\n\n\n\n  *  25.4 versions before 25.4R1-S1-EVO, 25.4R2-EVO.\n\n\n\n\nThis issue does not affect Junos OS Evolved versions before 25.4R1-EVO.\n\nThis issue does not affect Junos OS."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Asignación Incorrecta de Permisos para Recursos Críticos en el framework de detección de anomalías On-Box de Juniper Networks Junos OS Evolved en la serie PTX permite a un atacante no autenticado y basado en red ejecutar código como root.\n\nEl framework de detección de anomalías On-Box solo debería ser accesible por otros procesos internos a través de la instancia de enrutamiento interna, pero no a través de un puerto expuesto externamente. Con la capacidad de acceder y manipular el servicio para ejecutar código como root, un atacante remoto puede tomar el control completo del dispositivo.\nTenga en cuenta que este servicio está habilitado por defecto ya que no se requiere ninguna configuración específica.\n\nEste problema afecta a Junos OS Evolved en la serie PTX:\n\n  *  versiones 25.4 anteriores a 25.4R1-S1-EVO, 25.4R2-EVO.\n\nEste problema no afecta a las versiones de Junos OS Evolved anteriores a 25.4R1-EVO.\n\nEste problema no afecta a Junos OS."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Red",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:25.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "21728887-97A1-4AC7-8121-B6CEA5D6BAB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C188428C-0558-44FB-845C-E885DE9A0733"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10002-36qdd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805FE65-289B-404D-87A3-289A4A9AC927"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD05415-9F94-4EB8-805A-C9C0FFA9D0DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C432E543-37F5-4CA0-B239-2B97C6A16907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A64A26-4606-4D33-8958-5A3B7FFC4CDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1879799F-18B2-4958-AA90-FD19348C889F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA107128",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA107128",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25554",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-25T18:23:40.617",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS versions 3.1 before 3.6.4 containing the auth_jwt module (prior to commit 3822d33) contain a SQL injection vulnerability in the jwt_db_authorize() function in modules/auth_jwt/authorize.c when db_mode is enabled and a SQL database backend is used. The function extracts the tag claim from a JWT without prior signature verification and incorporates the unescaped value directly into a SQL query. An attacker can supply a crafted JWT with a malicious tag claim to manipulate the query result and bypass JWT authentication, allowing impersonation of arbitrary identities."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenSIPS 3.1 anteriores a la 3.6.4 que contienen el módulo auth_jwt (anterior al commit 3822d33) contienen una vulnerabilidad de inyección SQL en la función jwt_db_authorize() en modules/auth_jwt/authorize.c cuando db_mode está habilitado y se utiliza un backend de base de datos SQL. La función extrae la tag claim de un JWT sin verificación de firma previa e incorpora el valor sin escapar directamente en una consulta SQL. Un atacante puede proporcionar un JWT manipulado con una tag claim maliciosa para manipular el resultado de la consulta y eludir la autenticación JWT, permitiendo la suplantación de identidades arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/3822d33c1c6b25832fdd88da1d23eed74be55b05",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/pull/3807",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://opensips.org/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://opensips.org/pub/opensips/3.6.4/ChangeLog",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/opensips-auth-jwt-sql-injection-enables-jwt-authentication-bypass",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27739",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T18:23:40.800",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 have a Server-Side Request Forgery (SSRF) vulnerability in the Angular SSR request handling pipeline. The vulnerability exists because Angular’s internal URL reconstruction logic directly trusts and consumes user-controlled HTTP headers specifically the Host and `X-Forwarded-*` family to determine the application's base origin without any validation of the destination domain. Specifically, the framework didn't have checks for the host domain, path and character sanitization, and port validation. This vulnerability manifests in two primary ways: implicit relative URL resolution and explicit manual construction. When successfully exploited, this vulnerability allows for arbitrary internal request steering. This can lead to credential exfiltration, internal network probing, and a confidentiality breach. In order to be vulnerable, the victim application must use Angular SSR (Server-Side Rendering), the application must perform `HttpClient` requests using relative URLs OR manually construct URLs using the unvalidated `Host` / `X-Forwarded-*` headers using the `REQUEST` object, the application server must be reachable by an attacker who can influence these headers without strict validation from a front-facing proxy, and the infrastructure (Cloud, CDN, or Load Balancer) must not sanitize or validate incoming headers. Versions 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 contain a patch. Some workarounds are available. Avoid using `req.headers` for URL construction. Instead, use trusted variables for base API paths. Those who cannot upgrade immediately should implement a middleware in their `server.ts` to enforce numeric ports and validated hostnames."
      }, {
        "lang" : "es",
        "value" : "Angular SSR es una herramienta de renderizado del lado del servidor para aplicaciones Angular. Las versiones anteriores a 21.2.0-rc.1, 21.1.5, 20.3.17 y 19.2.21 tienen una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en la cadena de manejo de peticiones de Angular SSR. La vulnerabilidad existe porque la lógica interna de reconstrucción de URL de Angular confía y consume directamente los encabezados HTTP controlados por el usuario, específicamente los de la familia Host y 'X-Forwarded-*', para determinar el origen base de la aplicación sin ninguna validación del dominio de destino. Específicamente, el framework no tenía comprobaciones para el dominio del host, la sanitización de rutas y caracteres, y la validación del puerto. Esta vulnerabilidad se manifiesta de dos formas principales: resolución implícita de URL relativas y construcción manual explícita. Cuando se explota con éxito, esta vulnerabilidad permite la dirección arbitraria de peticiones internas. Esto puede llevar a la exfiltración de credenciales, el sondeo de redes internas y una violación de la confidencialidad. Para ser vulnerable, la aplicación víctima debe usar Angular SSR (Server-Side Rendering), la aplicación debe realizar peticiones 'HttpClient' usando URL relativas O construir URL manualmente usando los encabezados 'Host' / 'X-Forwarded-*' no validados usando el objeto 'REQUEST', el servidor de aplicaciones debe ser accesible por un atacante que pueda influir en estos encabezados sin una validación estricta de un proxy frontal, y la infraestructura (Nube, CDN o Balanceador de Carga) no debe sanitizar o validar los encabezados entrantes. Las versiones 21.2.0-rc.1, 21.1.5, 20.3.17 y 19.2.21 contienen un parche. Algunas soluciones alternativas están disponibles. Evite usar 'req.headers' para la construcción de URL. En su lugar, use variables de confianza para las rutas base de la API. Aquellos que no puedan actualizar inmediatamente deben implementar un middleware en su 'server.ts' para exigir puertos numéricos y nombres de host validados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/angular/angular-cli/pull/32516",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/angular/angular-cli/security/advisories/GHSA-x288-3778-4hhx",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27794",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T18:23:40.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangGraph Checkpoint defines the base interface for LangGraph checkpointers. Prior to version 4.0.0, a Remote Code Execution vulnerability exists in LangGraph's caching layer when applications enable cache backends that inherit from `BaseCache` and opt nodes into caching via `CachePolicy`. Prior to `langgraph-checkpoint` 4.0.0, `BaseCache` defaults to `JsonPlusSerializer(pickle_fallback=True)`. When msgpack serialization fails, cached values can be deserialized via `pickle.loads(...)`. Caching is not enabled by default. Applications are affected only when the application explicitly enables a cache backend (for example by passing `cache=...` to `StateGraph.compile(...)` or otherwise configuring a `BaseCache` implementation), one or more nodes opt into caching via `CachePolicy`, and the attacker can write to the cache backend (for example a network-accessible Redis instance with weak/no auth, shared cache infrastructure reachable by other tenants/services, or a writable SQLite cache file). An attacker must be able to write attacker-controlled bytes into the cache backend such that the LangGraph process later reads and deserializes them. This typically requires write access to a networked cache (for example a network-accessible Redis instance with weak/no auth or shared cache infrastructure reachable by other tenants/services) or write access to local cache storage (for example a writable SQLite cache file via permissive file permissions or a shared writable volume). Because exploitation requires write access to the cache storage layer, this is a post-compromise / post-access escalation vector. LangGraph Checkpoint 4.0.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "LangGraph Checkpoint define la interfaz base para los gestores de puntos de control de LangGraph. Antes de la versión 4.0.0, existe una vulnerabilidad de ejecución remota de código en la capa de caché de LangGraph cuando las aplicaciones habilitan *backends* de caché que heredan de `BaseCache` y habilitan nodos para el almacenamiento en caché a través de `CachePolicy`. Antes de `langgraph-checkpoint` 4.0.0, `BaseCache` por defecto utiliza `JsonPlusSerializer(pickle_fallback=True)`. Cuando la serialización de msgpack falla, los valores almacenados en caché pueden ser deserializados a través de `pickle.loads(...)`. El almacenamiento en caché no está habilitado por defecto. Las aplicaciones se ven afectadas solo cuando la aplicación habilita explícitamente un *backend* de caché (por ejemplo, pasando `cache=...` a `StateGraph.compile(...)` o configurando de otra manera una implementación de `BaseCache`), uno o más nodos habilitan el almacenamiento en caché a través de `CachePolicy`, y el atacante puede escribir en el *backend* de caché (por ejemplo, una instancia de Redis accesible por red con autenticación débil/nula, infraestructura de caché compartida accesible por otros inquilinos/servicios, o un archivo de caché SQLite escribible). Un atacante debe poder escribir bytes controlados por el atacante en el *backend* de caché de modo que el proceso de LangGraph los lea y deserialice posteriormente. Esto normalmente requiere acceso de escritura a una caché en red (por ejemplo, una instancia de Redis accesible por red con autenticación débil/nula o infraestructura de caché compartida accesible por otros inquilinos/servicios) o acceso de escritura al almacenamiento de caché local (por ejemplo, un archivo de caché SQLite escribible a través de permisos de archivo permisivos o un volumen compartido escribible). Debido a que la explotación requiere acceso de escritura a la capa de almacenamiento de caché, este es un vector de escalada post-compromiso / post-acceso. LangGraph Checkpoint 4.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langgraph/commit/f91d79d0c86932ded6e3b9f195d5a0bbd5aef99c",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/langchain-ai/langgraph/pull/6677",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/langchain-ai/langgraph/releases/tag/checkpoint%3D%3D4.0.0",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/langchain-ai/langgraph/security/advisories/GHSA-mhr3-j7m5-c7c9",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27795",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T18:23:41.153",
      "lastModified" : "2026-04-13T14:15:35.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in `RecursiveUrlLoader` in `@langchain/community`. The loader validates the initial URL but allows the underlying fetch to follow redirects automatically, which permits a transition from a safe public URL to an internal or metadata endpoint without revalidation. This is a bypass of the SSRF protections introduced in 1.1.14 (CVE-2026-26019). Users should upgrade to `@langchain/community` 1.1.18, which validates every redirect hop by disabling automatic redirects and re-validating `Location` targets before following them. In this version, automatic redirects are disabled (`redirect: \"manual\"`), each 3xx `Location` is resolved and validated with `validateSafeUrl()` before the next request, and a maximum redirect limit prevents infinite loops."
      }, {
        "lang" : "es",
        "value" : "LangChain es un framework para construir aplicaciones impulsadas por LLM. Antes de la versión 1.1.8, existe una omisión de falsificación de petición del lado del servidor (SSRF) basada en redirección en `RecursiveUrlLoader` en `@langchain/community`. El cargador valida la URL inicial, pero permite que la recuperación subyacente siga las redirecciones automáticamente, lo que permite una transición de una URL pública segura a un endpoint interno o de metadatos sin revalidación. Esto es una omisión de las protecciones de SSRF introducidas en 1.1.14 (CVE-2026-26019). Los usuarios deben actualizar a `@langchain/community` 1.1.18, que valida cada salto de redirección deshabilitando las redirecciones automáticas y revalidando los objetivos de `Location` antes de seguirlos. En esta versión, las redirecciones automáticas están deshabilitadas (`redirect: 'manual'`), cada `Location` 3xx se resuelve y valida con `validateSafeUrl()` antes de la siguiente petición, y un límite máximo de redirecciones evita bucles infinitos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langchain:langchain_community:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.18",
            "matchCriteriaId" : "82E0218B-5EC7-4779-9F3F-FF40F63DEA54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langchainjs/commit/2812d2b2b9fd9343c4850e2ab906b8cf440975ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/commit/d5e3db0d01ab321ec70a875805b2f74aefdadf9d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/pull/9990",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcommunity%401.1.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-gf3v-fwqg-4vh7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-mphv-75cg-56wg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27850",
      "sourceIdentifier" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "published" : "2026-02-25T18:23:41.350",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network.\nThis issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      }, {
        "lang" : "es",
        "value" : "Debido a una regla de cortafuegos mal configurada, el router aceptará cualquier conexión en el puerto WAN con el puerto de origen 5222, exponiendo todos los servicios que normalmente solo son accesibles a través de la red local.\nEste problema afecta a MR9600: 1.0.4.205530; MX4200: 1.0.13.210200."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-014.txt",
        "source" : "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3194",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T18:23:42.810",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function send_transaction/get_private_key of the component RPC Server Master Passphrase Handler. This manipulation causes missing authentication. The attack can only be executed locally. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been published and may be used. The vendor was informed early via email. A separate report via bugbounty was rejected with the reason \"This is by design. The user is responsible for host security\"."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Chia Blockchain 2.1.0. El elemento afectado es la función send_transaction/get_private_key del componente RPC Servidor Master Passphrase Gestor. Esta manipulación causa autenticación faltante. El ataque solo puede ejecutarse localmente. La complejidad del ataque se califica como alta. La explotabilidad se describe como difícil. El exploit se ha publicado y puede usarse. El proveedor fue informado tempranamente por correo electrónico. Un informe separado a través de bugbounty fue rechazado con la razón 'Esto es por diseño. El usuario es responsable de la seguridad del host'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 3.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chia:blockchain:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF3B0E2-5398-4EEF-8EF1-EF9BF237FC95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Danimlzg/chia-rpc-auth-bypass.git",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.757201",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23627",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.010",
      "lastModified" : "2026-02-27T14:51:47.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Immunization module allows any authenticated user to execute arbitrary SQL queries, leading to complete database compromise, PHI exfiltration, credential theft, and potential remote code execution. The vulnerability exists because user-supplied `patient_id` values are directly concatenated into SQL WHERE clauses without parameterization or escaping. Version 8.0.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros médicos electrónicos y práctica médica de código abierto y gratuita. Antes de la versión 8.0.0, una vulnerabilidad de inyección SQL en el módulo de Inmunización permite a cualquier usuario autenticado ejecutar consultas SQL arbitrarias, lo que lleva a la completa compromiso de la base de datos, exfiltración de PHI, robo de credenciales y potencial ejecución remota de código. La vulnerabilidad existe porque los valores de 'patient_id' proporcionados por el usuario se concatenan directamente en las cláusulas SQL WHERE sin parametrización ni escape. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/cbf4ea4345b14a6c8362201e30c74ffb0949cdb1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-x3hw-rwrg-v25h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24005",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.163",
      "lastModified" : "2026-03-05T00:42:25.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HTTPGet handlers. The webhook validation does not restrict the Host field in these probe configurations. Since kruise-daemon runs with hostNetwork=true, it executes probes from the node network namespace. An attacker with PodProbeMarker creation permission can specify arbitrary Host values to trigger SSRF from the node, perform port scanning, and receive response feedback through NodePodProbe status messages. Versions 1.8.3 and 1.7.5 patch the issue."
      }, {
        "lang" : "es",
        "value" : "Kruise proporciona gestión automatizada de aplicaciones a gran escala en Kubernetes. Antes de las versiones 1.8.3 y 1.7.5, PodProbeMarker permite definir sondas personalizadas con manejadores TCPSocket o HTTPGet. La validación del webhook no restringe el campo Host en estas configuraciones de sonda. Dado que kruise-daemon se ejecuta con hostNetwork=true, ejecuta sondas desde el espacio de nombres de red del nodo. Un atacante con permiso de creación de PodProbeMarker puede especificar valores de Host arbitrarios para activar SSRF desde el nodo, realizar escaneo de puertos y recibir retroalimentación de la respuesta a través de mensajes de estado de NodePodProbe. Las versiones 1.8.3 y 1.7.5 parchean el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openkruise:kruise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "D53D811F-DD4D-41A2-9B01-6627A7A3D657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openkruise:kruise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "4A6B76A0-02C5-4E39-99B1-1C8BD3758257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openkruise/kruise/commit/94364b76adf3e8a1749a31afe809a163bed29613",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openkruise/kruise/releases/tag/v1.7.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openkruise/kruise/releases/tag/v1.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/openkruise/kruise/security/advisories/GHSA-9fj4-3849-rv9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.333",
      "lastModified" : "2026-02-27T14:44:15.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an authorization bypass vulnerability in the FHIR CareTeam resource endpoint allows patient-scoped FHIR tokens to access care team data for all patients instead of being restricted to only the authenticated patient's data. This could potentially lead to unauthorized disclosure of Protected Health Information (PHI), including patient-provider relationships and care team structures across the entire system. The issue occurs because the `FhirCareTeamService` does not implement the `IPatientCompartmentResourceService` interface and does not pass the patient binding parameter to the underlying service, bypassing the patient compartment filtering mechanism. Version 8.0.0 contains a patch for this issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros de salud electrónicos y práctica médica de código abierto y gratuita. Antes de la versión 8.0.0, una vulnerabilidad de omisión de autorización en el endpoint del recurso FHIR CareTeam permite que los tokens FHIR con alcance de paciente accedan a datos del equipo de atención para todos los pacientes en lugar de estar restringidos únicamente a los datos del paciente autenticado. Esto podría llevar potencialmente a la divulgación no autorizada de Información de Salud Protegida (PHI), incluyendo relaciones paciente-proveedor y estructuras de equipo de atención en todo el sistema. El problema ocurre porque el 'FhirCareTeamService' no implementa la interfaz 'IPatientCompartmentResourceService' y no pasa el parámetro de enlace de paciente al servicio subyacente, omitiendo el mecanismo de filtrado del compartimento de paciente. La versión 8.0.0 contiene un parche para este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/5ce10a3961b73862aaf31eb30044ffe1018465cc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-4frq-f657-hwrc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24890",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.500",
      "lastModified" : "2026-02-27T14:43:28.020",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an authorization bypass vulnerability in the patient portal signature endpoint allows authenticated portal users to upload and overwrite provider signatures by setting `type=admin-signature` and specifying any provider user ID. This could potentially lead to signature forgery on medical documents, legal compliance violations, and fraud. The issue occurs when portal users are allowed to modify provider signatures without proper authorization checks. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita para la gestión de registros médicos electrónicos y la práctica médica. Antes de la versión 8.0.0, una vulnerabilidad de omisión de autorización en el endpoint de firma del portal del paciente permite a los usuarios autenticados del portal subir y sobrescribir firmas de proveedores estableciendo 'type=admin-signature' y especificando cualquier ID de usuario de proveedor. Esto podría potencialmente conducir a la falsificación de firmas en documentos médicos, violaciones de cumplimiento legal y fraude. El problema ocurre cuando a los usuarios del portal se les permite modificar firmas de proveedores sin las comprobaciones de autorización adecuadas. La versión 8.0.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/a29c0f7ac0975429a85cd09a3ff12ee0dcdb4478",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-xc8x-mfh8-9xvh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-xc8x-mfh8-9xvh",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24908",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.657",
      "lastModified" : "2026-02-27T14:42:29.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Patient REST API endpoint allows authenticated users with API access to execute arbitrary SQL queries through the `_sort` parameter. This could potentially lead to database access, PHI (Protected Health Information) exposure, and credential compromise. The issue occurs when user-supplied sort field names are used in ORDER BY clauses without proper validation or identifier escaping. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto de registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, una vulnerabilidad de inyección SQL en el endpoint de la API REST de Pacientes permite a usuarios autenticados con acceso a la API ejecutar consultas SQL arbitrarias a través del parámetro '_sort'. Esto podría potencialmente llevar a acceso a la base de datos, exposición de PHI (Información de Salud Protegida) y compromiso de credenciales. El problema ocurre cuando los nombres de campos de ordenación proporcionados por el usuario se utilizan en cláusulas ORDER por sin una validación adecuada o escape de identificadores. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/943e23cad6e979f87cdf168807fce2a7b32dd194",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-rcc2-45v3-qmqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-rcc2-45v3-qmqm",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25164",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.827",
      "lastModified" : "2026-02-27T14:41:30.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the REST API route table in `apis/routes/_rest_routes_standard.inc.php` does not call `RestConfig::request_authorization_check()` for the document and insurance routes. Other patient routes in the same file (e.g. encounters, patients/med) call it with the appropriate ACL. As a result, any valid API bearer token can access or modify every patient's documents and insurance data, regardless of the token’s OpenEMR ACLs—effectively exposing all document and insurance PHI to any authenticated API client. Version 8.0.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, la tabla de rutas de la API REST en 'apis/routes/_rest_routes_standard.inc.php' no llama a 'RestConfig::request_authorization_check()' para las rutas de documentos y seguros. Otras rutas de pacientes en el mismo archivo (por ejemplo, encuentros, pacientes/med) la llaman con la ACL apropiada. Como resultado, cualquier token portador de API válido puede acceder o modificar los documentos y datos de seguro de cada paciente, independientemente de las ACL de OpenEMR del token —exponiendo eficazmente toda la información de salud protegida (PHI) de documentos y seguros a cualquier cliente de API autenticado. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/c5e1c44774156cd0d04f4e08ed6a81fe76d38e92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-f64c-h2gh-g3f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-f64c-h2gh-g3f9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25220",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:21.993",
      "lastModified" : "2026-02-27T14:41:14.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Message Center accepts the URL parameter `show_all=yes` and passes it to `getPnotesByUser()`, which returns all internal messages (all users’ notes). The backend does not verify that the requesting user is an administrator before honoring `show_all=yes`. The \"Show All\" link is also visible to non-admin users. As a result, any authenticated user can view the entire internal message list by requesting `messages.php?show_all=yes`. Version 8.0.0 patches the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto de registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, el Centro de Mensajes acepta el parámetro de URL 'show_all=yes' y lo pasa a 'getPnotesByUser()', que devuelve todos los mensajes internos (notas de todos los usuarios). El backend no verifica que el usuario solicitante sea un administrador antes de respetar 'show_all=yes'. El enlace 'Mostrar todo' también es visible para usuarios no administradores. Como resultado, cualquier usuario autenticado puede ver la lista completa de mensajes internos al solicitar 'messages.PHP?show_all=yes'. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/9f2c44fc88fc051fcf0b6922c373977543e6b2af",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-phcp-7qjx-83cm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-phcp-7qjx-83cm",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:22.157",
      "lastModified" : "2026-02-28T00:42:46.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the session expiration check in `library/auth.inc.php` runs only when `skip_timeout_reset` is not present in the request. When `skip_timeout_reset=1` is sent, the entire block that calls `SessionTracker::isSessionExpired()` and forces logout on timeout is skipped. As a result, any request that includes this parameter (e.g. from auto-refresh pages like the Patient Flow Board) never runs the expiration check: expired sessions can continue to access data indefinitely, abandoned workstations stay active, and an attacker with a stolen session cookie can keep sending `skip_timeout_reset=1` to avoid being logged out. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros de salud electrónicos y práctica médica de código abierto y gratuita. Antes de la versión 8.0.0, la verificación de expiración de la sesión en `library/auth.inc.php` se ejecuta solo cuando `skip_timeout_reset` no está presente en la solicitud. Cuando se envía `skip_timeout_reset=1`, se omite todo el bloque que llama a `SessionTracker::isSessionExpired()` y fuerza el cierre de sesión por tiempo de espera. Como resultado, cualquier solicitud que incluya este parámetro (por ejemplo, de páginas de actualización automática como el Panel de Flujo de Pacientes) nunca ejecuta la verificación de expiración: las sesiones expiradas pueden continuar accediendo a los datos indefinidamente, las estaciones de trabajo abandonadas permanecen activas, y un atacante con una cookie de sesión robada puede seguir enviando `skip_timeout_reset=1` para evitar ser desconectado. La versión 8.0.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/02a6a7793402b10356a94626d78e0e1069e92a77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-gx7q-6fhr-5h33",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-gx7q-6fhr-5h33",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25743",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:22.343",
      "lastModified" : "2026-02-27T14:40:33.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, users with the \"Forms administration\" role can fill questionnaires (\"forms\") in patient encounters. The answers to the forms are displayed on the encounter page and in the visit history for the users with the same role. There exists a stored cross-site scripting (XSS) vulnerability in the function to display the form answers, allowing any authenticated attacker with the specific role to insert arbitrary JavaScript into the system by entering malicious payloads to the form answers. The JavaScript code is later executed by any user with the form role when viewing the form answers in the patient encounter pages or visit history. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita de registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, los usuarios con el rol de 'Administración de formularios' pueden completar cuestionarios ('formularios') en encuentros de pacientes. Las respuestas a los formularios se muestran en la página del encuentro y en el historial de visitas para los usuarios con el mismo rol. Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en la función para mostrar las respuestas del formulario, permitiendo a cualquier atacante autenticado con el rol específico insertar JavaScript arbitrario en el sistema al introducir cargas útiles maliciosas en las respuestas del formulario. El código JavaScript es ejecutado posteriormente por cualquier usuario con el rol de formulario al ver las respuestas del formulario en las páginas de encuentro del paciente o en el historial de visitas. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/da18f83f39648edc2463e8810757380a9f1d91de",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-3xx2-qf6g-6p28",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25746",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:22.540",
      "lastModified" : "2026-02-27T14:40:01.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the prescription listing functionality. Version 8.0.0 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros médicos electrónicos y de práctica médica, gratuita y de código abierto. Las versiones anteriores a la 8.0.0 contienen una vulnerabilidad de inyección SQL en la prescripción que puede ser explotada por atacantes autenticados. La vulnerabilidad existe debido a una validación de entrada insuficiente en la funcionalidad de listado de prescripciones. La versión 8.0.0 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChrisSub08/CVE-2026-25746_SqlInjectionVulnerabilityOpenEMR7.0.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/blob/2b46e594b9dd665fb7f16c913ca07f5c6d54412b/library/classes/Controller.class.php#L77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/openemr/openemr/blob/9fa8db9f12d0b70985195b11b90f2dc564bd3b24/controller.php#L6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/openemr/openemr/blob/9fa8db9f12d0b70985195b11b90f2dc564bd3b24/controllers/C_Prescription.class.php#L180",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/openemr/openemr/blob/9fa8db9f12d0b70985195b11b90f2dc564bd3b24/library/classes/Prescription.class.php#L1148",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/e230d3ef46425ffc96a37dc6369428aa37c88554",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-78r7-g65p-gpw3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25927",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:22.757",
      "lastModified" : "2026-02-27T14:40:46.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0,  the DICOM viewer state API (e.g. upload or state save/load) accepts a document ID (`doc_id`) without verifying that the document belongs to the current user’s authorized patient or encounter. An authenticated user can read or modify DICOM viewer state (e.g. annotations, view settings) for any document by enumerating document IDs. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita para la gestión de registros médicos electrónicos y consultorios médicos. Antes de la versión 8.0.0, la API de estado del visor DICOM (por ejemplo, carga o guardar/cargar estado) acepta un ID de documento ('doc_id') sin verificar que el documento pertenezca al paciente o encuentro autorizado del usuario actual. Un usuario autenticado puede leer o modificar el estado del visor DICOM (por ejemplo, anotaciones, configuraciones de vista) para cualquier documento al enumerar los ID de documento. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-qj9f-x7v2-hrr7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25929",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:22.930",
      "lastModified" : "2026-02-27T14:39:26.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the document controller’s `patient_picture` context serves the patient’s photo by document ID or patient ID without verifying that the current user is authorized to access that patient. An authenticated user with document ACL can supply another patient’s ID and retrieve their photo. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto para registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, el contexto 'patient_picture' del controlador de documentos sirve la foto del paciente por ID de documento o ID de paciente sin verificar que el usuario actual esté autorizado para acceder a ese paciente. Un usuario autenticado con ACL de documento puede proporcionar el ID de otro paciente y recuperar su foto. La versión 8.0.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/fc4d00ecb63561dacd23cb1fed49c64bd1a83258",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-778w-r8rm-8qhq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25930",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T19:43:23.127",
      "lastModified" : "2026-02-27T14:38:24.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Layout-Based Form (LBF) printable view accepts `formid` and `visitid` (or `patientid`) from the request and does not verify that the form belongs to the current user’s authorized patient/encounter. An authenticated user with LBF access can enumerate form IDs and view or print any patient’s encounter forms. Version 8.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación gratuita y de código abierto de registros de salud electrónicos y gestión de consultorios médicos. Antes de la versión 8.0.0, la vista imprimible del Formulario Basado en Diseño (LBF) acepta 'formid' y 'visitid' (o 'patientid') de la solicitud y no verifica que el formulario pertenezca al paciente/encuentro autorizado del usuario actual. Un usuario autenticado con acceso LBF puede enumerar IDs de formulario y ver o imprimir los formularios de encuentro de cualquier paciente. La versión 8.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/8c76acdd226007cc4ff3eccd3ca6193e0be6e699",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-h3xx-8cp7-hf7m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3221",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-02-25T19:43:26.530",
      "lastModified" : "2026-02-28T00:43:23.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive\n user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with \naccess to the database to obtain sensitive user \ninformation via direct database access."
      }, {
        "lang" : "es",
        "value" : "Hay información sensible de cuentas de usuario que no está cifrada en la base de datos en Devolutions Server 2025.3.14 y versiones anteriores, lo que permite a un atacante con acceso a la base de datos obtener información sensible del usuario a través del acceso directo a la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.15.0",
            "matchCriteriaId" : "6DB87A4B-D40B-442F-8BF5-CA935BFADB3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0004/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22719",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-25T20:23:46.840",
      "lastModified" : "2026-03-04T15:08:13.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. \n\nTo remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001 \n\nWorkarounds for CVE-2026-22719 are documented in the 'Workarounds' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001"
      }, {
        "lang" : "es",
        "value" : "VMware Aria Operations contiene una vulnerabilidad de inyección de comandos. Un actor malicioso no autenticado puede explotar este problema para ejecutar comandos arbitrarios, lo que puede conducir a la ejecución remota de código en VMware Aria Operations mientras la migración del producto asistida por soporte está en curso.\n\nPara remediar CVE-2026-22719, aplique los parches enumerados en la columna 'Fixed Version' de la ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' en VMSA-2026-0001\n\nLas soluciones alternativas para CVE-2026-22719 están documentadas en la columna 'Workarounds' de la ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' en VMSA-2026-0001"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-03-03",
      "cisaActionDue" : "2026-03-24",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Broadcom VMware Aria Operations Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.18.6",
            "matchCriteriaId" : "6748CC5F-63A6-459A-A0B4-D12A149AD2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "5.2.3",
            "matchCriteriaId" : "16C87F30-12CA-43F5-9057-BBE32666A515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.2.0",
            "matchCriteriaId" : "11F5C577-620E-4BD7-9429-E2FDC70D6667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "904AA81A-D1C3-4DAF-BB2C-C51FEDF5B3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "9A8AE269-DD3E-4A60-91C1-D5C1FEAF0CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://knowledge.broadcom.com/external/article/430349",
        "source" : "security@vmware.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations/8-18/vmware-aria-operations-8186-release-notes.html",
        "source" : "security@vmware.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-22719",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22720",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-25T20:23:47.077",
      "lastModified" : "2026-03-04T15:55:32.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations. \n\nTo remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of  VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// ."
      }, {
        "lang" : "es",
        "value" : "VMware Aria Operations contiene una vulnerabilidad de cross-site scripting almacenada. Un actor malicioso con privilegios para crear puntos de referencia personalizados podría inyectar scripts para realizar acciones administrativas en VMware Aria Operations. Para remediar CVE-2026-22720, aplique los parches enumerados en la columna 'Fixed Version' de la 'Response Matrix' de VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.18.6",
            "matchCriteriaId" : "6748CC5F-63A6-459A-A0B4-D12A149AD2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "5.2.3",
            "matchCriteriaId" : "16C87F30-12CA-43F5-9057-BBE32666A515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.2.0",
            "matchCriteriaId" : "11F5C577-620E-4BD7-9429-E2FDC70D6667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "904AA81A-D1C3-4DAF-BB2C-C51FEDF5B3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "9A8AE269-DD3E-4A60-91C1-D5C1FEAF0CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations/8-18/vmware-aria-operations-8186-release-notes.html",
        "source" : "security@vmware.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25136",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:47.273",
      "lastModified" : "2026-02-27T15:43:26.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cross-site Scripting vulnerability was located in versions prior to 35.8.3, 38.5.4, and 39.3.1 in the rendering of the ExceptionMessage of the WebUI 500 error which could allow attackers to steal login session tokens of users who navigate to a specially crafted URL. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rucio es un framework de software que proporciona funcionalidad para organizar, gestionar y acceder a grandes volúmenes de datos científicos utilizando políticas personalizables. Una vulnerabilidad de cross-site scripting reflejado fue localizada en versiones anteriores a la 35.8.3, 38.5.4 y 39.3.1 en la renderización del ExceptionMessage del error 500 de la WebUI, lo que podría permitir a los atacantes robar tokens de sesión de inicio de sesión de usuarios que naveguen a una URL especialmente diseñada. Las versiones 35.8.3, 38.5.4 y 39.3.1 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.8.3",
            "matchCriteriaId" : "3BCD5122-895C-41F6-8DDE-5DD999D88FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "36.0.0",
            "versionEndExcluding" : "38.5.4",
            "matchCriteriaId" : "364DE7B4-B341-4A96-917B-B2D37777CB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "39.3.1",
            "matchCriteriaId" : "EB66BA62-B3B2-45C5-99AC-59CC9B39F350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/35.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/38.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/39.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-h79m-5jjm-jm4q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25138",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:47.457",
      "lastModified" : "2026-02-27T17:35:41.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Prior to versions 35.8.3, 38.5.4, and 39.3.1, the WebUI login endpoint returns distinct error messages depending on whether a supplied username exists, allowing unauthenticated attackers to enumerate valid usernames. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rucio es un framework de software que proporciona funcionalidad para organizar, gestionar y acceder a grandes volúmenes de datos científicos utilizando políticas personalizables. Antes de las versiones 35.8.3, 38.5.4 y 39.3.1, el endpoint de inicio de sesión de la WebUI devolvía mensajes de error distintos dependiendo de si un nombre de usuario proporcionado existía, permitiendo a atacantes no autenticados enumerar nombres de usuario válidos. Las versiones 35.8.3, 38.5.4 y 39.3.1 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.8.3",
            "matchCriteriaId" : "3BCD5122-895C-41F6-8DDE-5DD999D88FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "36.0.0",
            "versionEndExcluding" : "38.5.4",
            "matchCriteriaId" : "364DE7B4-B341-4A96-917B-B2D37777CB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "39.3.1",
            "matchCriteriaId" : "EB66BA62-B3B2-45C5-99AC-59CC9B39F350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#authentication-and-error-messages",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/35.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/38.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/39.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-38wq-6q2w-hcf9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-38wq-6q2w-hcf9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25733",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:47.717",
      "lastModified" : "2026-02-27T19:23:40.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the Custom Rules function of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI for users who view affected pages, potentially enabling session token theft or unauthorized actions. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rucio es un framework de software que proporciona funcionalidad para organizar, gestionar y acceder a grandes volúmenes de datos científicos utilizando políticas personalizables. Las versiones anteriores a la 35.8.3, 38.5.4 y 39.3.1 tienen una vulnerabilidad de cross-site scripting (XSS) almacenado en la función de Reglas Personalizadas de la WebUI donde la entrada controlada por el atacante es persistida por el backend y luego renderizada en la WebUI sin una codificación de salida adecuada. Esto permite la ejecución arbitraria de JavaScript en el contexto de la WebUI para los usuarios que ven las páginas afectadas, lo que podría permitir el robo de tokens de sesión o acciones no autorizadas. Las versiones 35.8.3, 38.5.4 y 39.3.1 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.8.3",
            "matchCriteriaId" : "3BCD5122-895C-41F6-8DDE-5DD999D88FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "36.0.0",
            "versionEndExcluding" : "38.5.4",
            "matchCriteriaId" : "364DE7B4-B341-4A96-917B-B2D37777CB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "39.3.1",
            "matchCriteriaId" : "EB66BA62-B3B2-45C5-99AC-59CC9B39F350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/35.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/38.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/39.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-rwj9-7j48-9f7q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-rwj9-7j48-9f7q",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25734",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:47.897",
      "lastModified" : "2026-02-27T19:23:54.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the RSE metadata of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI for users who view affected pages, potentially enabling session token theft or unauthorized actions. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rucio es un framework de software que proporciona funcionalidad para organizar, gestionar y acceder a grandes volúmenes de datos científicos utilizando políticas personalizables. Las versiones anteriores a la 35.8.3, 38.5.4 y 39.3.1 tienen una vulnerabilidad de cross-site scripting (XSS) almacenado en los metadatos RSE de la WebUI, donde la entrada controlada por el atacante es persistida por el backend y posteriormente renderizada en la WebUI sin una codificación de salida adecuada. Esto permite la ejecución arbitraria de JavaScript en el contexto de la WebUI para los usuarios que ven las páginas afectadas, lo que podría permitir el robo de tokens de sesión o acciones no autorizadas. Las versiones 35.8.3, 38.5.4 y 39.3.1 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.8.3",
            "matchCriteriaId" : "3BCD5122-895C-41F6-8DDE-5DD999D88FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "36.0.0",
            "versionEndExcluding" : "38.5.4",
            "matchCriteriaId" : "364DE7B4-B341-4A96-917B-B2D37777CB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "39.3.1",
            "matchCriteriaId" : "EB66BA62-B3B2-45C5-99AC-59CC9B39F350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/35.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/38.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/39.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-h9fp-p2p9-873q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-h9fp-p2p9-873q",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25735",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:48.070",
      "lastModified" : "2026-02-27T19:24:03.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the Identity Name of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI for users who view affected pages, potentially enabling session token theft or unauthorized actions. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rucio es un framework de software que proporciona funcionalidad para organizar, gestionar y acceder a grandes volúmenes de datos científicos utilizando políticas personalizables. Las versiones anteriores a la 35.8.3, 38.5.4 y 39.3.1 tienen una vulnerabilidad de cross-site scripting (XSS) almacenado en el campo 'Identity Name' de la interfaz de usuario web (WebUI), donde la entrada controlada por el atacante es persistida por el backend y posteriormente renderizada en la WebUI sin una codificación de salida adecuada. Esto permite la ejecución arbitraria de JavaScript en el contexto de la WebUI para los usuarios que visualizan las páginas afectadas, lo que podría permitir el robo de tokens de sesión o acciones no autorizadas. Las versiones 35.8.3, 38.5.4 y 39.3.1 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.8.3",
            "matchCriteriaId" : "3BCD5122-895C-41F6-8DDE-5DD999D88FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "36.0.0",
            "versionEndExcluding" : "38.5.4",
            "matchCriteriaId" : "364DE7B4-B341-4A96-917B-B2D37777CB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "39.3.1",
            "matchCriteriaId" : "EB66BA62-B3B2-45C5-99AC-59CC9B39F350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/35.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/38.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/39.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-8wpv-6x3f-3rm5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-8wpv-6x3f-3rm5",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25736",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:48.243",
      "lastModified" : "2026-02-27T19:24:13.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting (XSS) vulnerability in the Custom RSE Attribute of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI for users who view affected pages, potentially enabling session token theft or unauthorized actions. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Rucio es un framework de software que proporciona funcionalidad para organizar, gestionar y acceder a grandes volúmenes de datos científicos utilizando políticas personalizables. Las versiones anteriores a la 35.8.3, 38.5.4 y 39.3.1 tienen una vulnerabilidad de cross-site scripting (XSS) almacenado en el Custom RSE Attribute de la WebUI, donde la entrada controlada por el atacante es persistida por el backend y posteriormente renderizada en la WebUI sin una codificación de salida adecuada. Esto permite la ejecución arbitraria de JavaScript en el contexto de la WebUI para los usuarios que visualizan las páginas afectadas, lo que podría permitir el robo de tokens de sesión o acciones no autorizadas. Las versiones 35.8.3, 38.5.4 y 39.3.1 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-1004"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.8.3",
            "matchCriteriaId" : "3BCD5122-895C-41F6-8DDE-5DD999D88FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "36.0.0",
            "versionEndExcluding" : "38.5.4",
            "matchCriteriaId" : "364DE7B4-B341-4A96-917B-B2D37777CB7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:rucio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0.0",
            "versionEndExcluding" : "39.3.1",
            "matchCriteriaId" : "EB66BA62-B3B2-45C5-99AC-59CC9B39F350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/35.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/38.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/releases/tag/39.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-fq4f-4738-rqxm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rucio/rucio/security/advisories/GHSA-fq4f-4738-rqxm",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25941",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T20:23:48.413",
      "lastModified" : "2026-02-27T14:53:29.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Las versiones de la rama 2.x anteriores a la 2.11.8 y de la rama 3.x anteriores a la 3.23.0 tienen una vulnerabilidad de lectura fuera de límites en el canal RDPGFX del cliente FreeRDP que permite a un servidor RDP malicioso leer memoria de pila no inicializada al enviar una PDU WIRE_TO_SURFACE_2 manipulada con un valor 'bitmapDataLength' mayor que los datos reales en el paquete. Esto puede llevar a la revelación de información o a fallos del cliente cuando un usuario se conecta a un servidor malicioso. Las versiones 2.11.8 y 3.23.0 corrigen el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.11.8",
            "matchCriteriaId" : "4B0ADA75-FE8D-414D-A7BC-EC5F7D3BA53A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "843BE984-9C62-494A-A88A-12C6FCA9878B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/2e3b77e28ac6a398897d28ba464dcc5dfab9c9e2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3546-x645-5cf8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2636",
      "sourceIdentifier" : "df4dee71-de3a-4139-9588-11b62fe6c0ff",
      "published" : "2026-02-25T20:23:48.910",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability is caused by a CWE‑159: \"Improper Handling of Invalid Use of Special Elements\" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an unprivileged user to trigger a system crash. Microsoft silently fixed this vulnerability in the September 2025 cumulative update for Windows 11 2024 LTSC and Windows Server 2025. Windows 25H2 (released in September) was released with the patch. Windows 1123h2 and earlier versions remain vulnerable."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad se produce por un fallo CWE?159: 'Manejo Inadecuado del Uso Inválido de Elementos Especiales', lo que lleva a una inconsistencia irrecuperable en el controlador CLFS.sys. Esta condición fuerza una llamada a la función KeBugCheckEx, permitiendo a un usuario sin privilegios provocar un fallo del sistema. Microsoft corrigió silenciosamente esta vulnerabilidad en la actualización acumulativa de septiembre de 2025 para Windows 11 2024 LTSC y Windows Server 2025. Windows 25H2 (lanzado en septiembre) fue lanzado con el parche. Windows 1123h2 y versiones anteriores siguen siendo vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "df4dee71-de3a-4139-9588-11b62fe6c0ff",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "df4dee71-de3a-4139-9588-11b62fe6c0ff",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-159"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.fortra.com/security/advisories/research/fr-2026-001",
        "source" : "df4dee71-de3a-4139-9588-11b62fe6c0ff"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0542",
      "sourceIdentifier" : "psirt@servicenow.com",
      "published" : "2026-02-25T21:16:36.147",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform.  This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox.   \n\n\n\n\n\nServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates also have been provided to ServiceNow self-hosted customers and partners. Further, the vulnerability is addressed in the listed patches and hot fixes. While we are not currently aware of exploitation against customer instances, we recommend customers promptly apply appropriate updates or upgrade if they have not already done so."
      }, {
        "lang" : "es",
        "value" : "ServiceNow ha abordado una vulnerabilidad de ejecución remota de código que fue identificada en la plataforma de IA de ServiceNow. Esta vulnerabilidad podría permitir a un usuario no autenticado, en ciertas circunstancias, ejecutar código dentro del sandbox de ServiceNow.\n\nServiceNow abordó esta vulnerabilidad desplegando una actualización de seguridad en las instancias alojadas. Las actualizaciones de seguridad relevantes también se han proporcionado a los clientes y socios de ServiceNow con autoalojamiento. Además, la vulnerabilidad se aborda en los parches y hot fixes listados. Si bien no tenemos conocimiento actual de explotación contra instancias de clientes, recomendamos a los clientes aplicar rápidamente las actualizaciones apropiadas o actualizar si aún no lo han hecho."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "psirt@servicenow.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@servicenow.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-653"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2693566",
        "source" : "psirt@servicenow.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0752",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T21:16:36.330",
      "lastModified" : "2026-02-28T00:44:58.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could have allowed an unauthenticated user to inject arbitrary scripts into the Mermaid sandbox UI."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 16.2 antes de la 18.7.5, la 18.8 antes de la 18.8.5, y la 18.9 antes de la 18.9.1 que, bajo ciertas circunstancias, podría haber permitido a un usuario no autenticado inyectar scripts arbitrarios en la interfaz de usuario del sandbox de Mermaid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "16.2.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "25E75F2D-2A23-454A-AD0E-0E0491F7FE35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "16.2.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "634BAAAB-E10B-4B31-A467-74EEAD7DD2B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "432C7223-F8B6-4EBA-84E2-2BB8A0F367D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "630677C7-21EB-4E91-BB15-4610DCD22F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "795727F0-1B38-483F-BEE8-FB252EE57AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "73CCBA34-57C3-454D-A898-5D216EE1D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/585371",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/3473276",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1388",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T21:16:36.500",
      "lastModified" : "2026-02-28T00:45:36.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint under certain conditions."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 9.2 anterior a la 18.7.5, la 18.8 anterior a la 18.8.5, y la 18.9 anterior a la 18.9.1 que podría haber permitido a un usuario no autenticado causar una denegación de servicio por expresión regular mediante el envío de una entrada especialmente diseñada a un endpoint de solicitud de fusión bajo ciertas condiciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "B12C34F6-2CBC-47AD-AD96-69D58B92FD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "367ECB06-C074-4051-854C-04B62268A024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "432C7223-F8B6-4EBA-84E2-2BB8A0F367D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "630677C7-21EB-4E91-BB15-4610DCD22F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "795727F0-1B38-483F-BEE8-FB252EE57AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "73CCBA34-57C3-454D-A898-5D216EE1D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/587560",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/3482893",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1662",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T21:16:36.670",
      "lastModified" : "2026-02-28T00:45:30.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afecta a todas las versiones desde la 14.4 y anteriores a la 18.7.5, la 18.8 y anteriores a la 18.8.5, y la 18.9 y anteriores a la 18.9.1 que podría haber permitido a un usuario no autenticado causar denegación de servicio mediante el envío de solicitudes especialmente diseñadas al endpoint de eventos de Jira."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "F90F606F-E507-49C1-9736-4CC4B738F9CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "65AAA10B-37E8-435F-AF35-45BE7E471767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "432C7223-F8B6-4EBA-84E2-2BB8A0F367D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "630677C7-21EB-4E91-BB15-4610DCD22F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "795727F0-1B38-483F-BEE8-FB252EE57AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "73CCBA34-57C3-454D-A898-5D216EE1D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/588206",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/3519694",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1725",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T21:16:36.833",
      "lastModified" : "2026-02-28T01:06:15.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denial of service by sending specially crafted requests to a CI jobs API endpoint."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab CE/EE que afectaba a las versiones desde la 18.9 antes de la 18.9.1 que, bajo ciertas condiciones, podría haber permitido a un usuario no autenticado causar una denegación de servicio enviando solicitudes especialmente diseñadas a un endpoint de la API de trabajos de CI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "795727F0-1B38-483F-BEE8-FB252EE57AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "73CCBA34-57C3-454D-A898-5D216EE1D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/588338",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/3519773",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1747",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T21:16:36.993",
      "lastModified" : "2026-02-28T01:05:55.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages."
      }, {
        "lang" : "es",
        "value" : "GitLab ha remediado un problema en GitLab EE que afectaba a todas las versiones desde la 17.11 anteriores a la 18.7.5, la 18.8 anteriores a la 18.8.5, y la 18.9 anteriores a la 18.9.1 que, bajo ciertas condiciones, podría haber permitido a usuarios con rol de Desarrollador con privilegios insuficientes realizar modificaciones no autorizadas a paquetes Conan protegidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "17.11.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "A9505ACB-A00F-4F5C-92D1-15F6C8A91924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "17.11.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "62456409-25CE-4B6B-A0A4-FF6BFDC693F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "432C7223-F8B6-4EBA-84E2-2BB8A0F367D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "630677C7-21EB-4E91-BB15-4610DCD22F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "795727F0-1B38-483F-BEE8-FB252EE57AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "73CCBA34-57C3-454D-A898-5D216EE1D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/588385",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/3533088",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22721",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-25T21:16:40.277",
      "lastModified" : "2026-03-04T15:54:26.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in  VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ."
      }, {
        "lang" : "es",
        "value" : "VMware Aria Operations contiene una vulnerabilidad de escalada de privilegios. Un actor malicioso con privilegios en vCenter para acceder a Aria Operations podría aprovechar esta vulnerabilidad para obtener acceso administrativo en VMware Aria Operations. Para remediar CVE-2026-22721, aplique los parches enumerados en la columna 'Fixed Version' de la 'Response Matrix' que se encuentra en VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.18.6",
            "matchCriteriaId" : "6748CC5F-63A6-459A-A0B4-D12A149AD2DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "5.2.3",
            "matchCriteriaId" : "16C87F30-12CA-43F5-9057-BBE32666A515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.2.0",
            "matchCriteriaId" : "11F5C577-620E-4BD7-9429-E2FDC70D6667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "904AA81A-D1C3-4DAF-BB2C-C51FEDF5B3F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "5.1",
            "matchCriteriaId" : "9A8AE269-DD3E-4A60-91C1-D5C1FEAF0CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations/8-18/vmware-aria-operations-8186-release-notes.html",
        "source" : "security@vmware.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25942",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:41.113",
      "lastModified" : "2026-02-27T14:54:06.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0–6) with an unchecked `execResult->execResult` value received from the server, allowing an out-of-bounds read when the server sends an `execResult` value of 7 or greater. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, 'xf_rail_server_execute_result' indexa el array global 'error_code_names[]' (7 elementos, índices 0–6) con un valor 'execResult-&gt;execResult' no verificado recibido del servidor, permitiendo una lectura fuera de límites cuando el servidor envía un valor 'execResult' de 7 o superior. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.c#L528",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.c#L75-L76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.c#L1014-L1017",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.c#L40-L46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/9362a0bf8dda04eedbca07d5dfaec1044e67cc6b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78q6-67m7-wwf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25952",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:41.290",
      "lastModified" : "2026-02-27T14:55:25.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, `xf_SetWindowMinMaxInfo` desreferencia un puntero `xfAppWindow` liberado porque `xf_rail_get_window` en `xf_rail_server_min_max_info` devuelve un puntero desprotegido de la tabla hash `railWindows`, y el hilo principal puede eliminar la ventana concurrentemente (a través de una orden de eliminación de ventana) mientras el hilo del canal RAIL sigue usando el puntero. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1167",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1174",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1178",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1111",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1128",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1394",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1428",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqm-cwjg-7w9x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqm-cwjg-7w9x",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25953",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:41.483",
      "lastModified" : "2026-02-27T14:55:56.937",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer via `xf_rail_get_window` without any lifetime protection, while the main thread can concurrently delete the window through a fastpath window-delete order. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, 'xf_AppUpdateWindowFromSurface' lee de un 'xfAppWindow' liberado porque el hilo RDPGFX DVC obtiene un puntero sin formato a través de 'xf_rail_get_window' sin ninguna protección de vida útil, mientras que el hilo principal puede eliminar concurrentemente la ventana a través de una orden de eliminación de ventana de ruta rápida. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1237",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L257-L290",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L643-L647",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1394-L1428",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1462-L1470",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1491",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L254-L286",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L278-L279",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6rq-rxpc-rh3p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6rq-rxpc-rh3p",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25954",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:41.680",
      "lastModified" : "2026-02-27T14:56:16.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, 'xf_rail_server_local_move_size' desreferencia un puntero 'xfAppWindow' liberado porque 'xf_rail_get_window' devuelve un puntero desprotegido de la tabla hash 'railWindows', y el hilo principal puede eliminar la ventana concurrentemente (a través de una orden de eliminación de ventana) mientras el hilo del canal RAIL sigue usando el puntero. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1076",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1133",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1347",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1350-L1359",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L647",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cc88-4j37-mw6j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cc88-4j37-mw6j",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25955",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:41.857",
      "lastModified" : "2026-02-27T14:56:40.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer, because `gdi_DeleteSurface` frees `surface->data` without invalidating the `appWindow->image` that aliases it. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, `xf_AppUpdateWindowFromSurface` reutiliza una `XImage` en caché cuyo puntero `data` hace referencia a un búfer de superficie RDPGFX liberado, porque `gdi_DeleteSurface` libera `surface-&gt;data` sin invalidar la `appWindow-&gt;image` que lo aliasa. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1492",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1494-L1500",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1528",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L1224-L1227",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/169d358734509e82663a0d6a0085ae726d439d8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g54-x8v7-559x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g54-x8v7-559x",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25959",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:42.023",
      "lastModified" : "2026-02-27T14:52:51.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread calls `xf_cliprdr_server_format_data_response` which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls `xf_cliprdr_clear_cached_data` → `HashTable_Clear` which frees the same data via `xf_cached_data_free`, triggering a heap use after free. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, 'xf_cliprdr_provide_data_' pasa 'pDstData' liberado a 'XChangeProperty' porque el hilo del canal cliprdr llama a 'xf_cliprdr_server_format_data_response' que convierte y usa los datos del portapapeles sin mantener ningún bloqueo, mientras que el hilo de eventos X11 llama concurrentemente a 'xf_cliprdr_clear_cached_data' ? 'HashTable_Clear' que libera los mismos datos a través de 'xf_cached_data_free', lo que desencadena un uso de memoria dinámica después de liberación. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1229-L1243",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1337-L1344",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L200-L208",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2295",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2323-L2334",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2363",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L933",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/d3e8b3b9365be96a4f11dda149d71b3287227d0a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78xg-v4p2-4w3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78xg-v4p2-4w3c",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25997",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:42.210",
      "lastModified" : "2026-02-27T14:57:09.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread during auto-reconnect) frees the array while the X11 event thread concurrently iterates it in `xf_clipboard_changed`, triggering a heap use after free. Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, 'xf_clipboard_format_equal' lee memoria liberada de 'lastSentFormats' porque 'xf_clipboard_formats_free' (llamada desde el hilo del canal cliprdr durante la reconexión automática) libera el array mientras el hilo de eventos X11 lo itera concurrentemente en 'xf_clipboard_changed', desencadenando un uso de memoria del heap después de su liberación. La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1884",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1889",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L265",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L616",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L831",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L851-L855",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L868-L875",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/58409406afe7c2a8a71ed2dc8e22075be4f41c0c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5j3-m6jf-3jq4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5j3-m6jf-3jq4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26271",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:42.713",
      "lastModified" : "2026-02-27T16:46:56.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (libfreerdp/codec/color.c) can be triggered by crafted RDP Window Icon (TS_ICON_INFO) data. The bug is reachable over the network when a client processes icon data from an RDP server (or from a man-in-the-middle). Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, una lectura excesiva de búfer en 'freerdp_image_copy_from_icon_data()' ('libfreerdp/codec/color.c') puede ser activada por datos de icono de ventana RDP (TS_ICON_INFO) especialmente diseñados. El error es alcanzable a través de la red cuando un cliente procesa datos de icono de un servidor RDP (o de un man-in-the-middle). La versión 3.23.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/f5e20403d6e325e11b68129803f967fb5aeec1cb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hr4m-ph4g-48j6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26955",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:42.863",
      "lastModified" : "2026-02-27T14:50:07.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an RDPGFX ClearCodec surface command with an out-of-bounds destination rectangle. The `gdi_SurfaceCommand_ClearCodec()` handler does not call `is_within_surface()` to validate the command rectangle against the destination surface dimensions, allowing attacker-controlled `cmd->left`/`cmd->top` (and subcodec rectangle offsets) to reach image copy routines that write into `surface->data` without bounds enforcement. The OOB write corrupts an adjacent `gdiGfxSurface` struct's `codecs*` pointer with attacker-controlled pixel data, and corruption of `codecs*` is sufficient to reach an indirect function pointer call (`NSC_CONTEXT.decode` at `nsc.c:500`) on a subsequent codec command — full instruction pointer (RIP) control demonstrated in exploitability harness. Users should upgrade to version 3.23.0 to receive a patch."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, un servidor RDP malicioso puede desencadenar un desbordamiento de búfer de montón en clientes FreeRDP que utilizan la tubería de superficie GDI (por ejemplo, 'xfreerdp') enviando un comando de superficie RDPGFX ClearCodec con un rectángulo de destino fuera de límites. El gestor 'gdi_SurfaceCommand_ClearCodec()' no llama a 'is_within_surface()' para validar el rectángulo del comando contra las dimensiones de la superficie de destino, permitiendo que 'cmd-&gt;left'/'cmd-&gt;top' (y los desplazamientos del rectángulo del subcódec) controlados por el atacante alcancen rutinas de copia de imagen que escriben en 'surface-&gt;data' sin aplicación de límites. La escritura OOB corrompe el puntero 'codecs*' de una estructura 'gdiGfxSurface' adyacente con datos de píxeles controlados por el atacante, y la corrupción de 'codecs*' es suficiente para alcanzar una llamada a puntero de función indirecta ('NSC_CONTEXT.decode' en 'nsc.c:500') en un comando de códec subsiguiente — control total del puntero de instrucción (RIP) demostrado en el arnés de explotabilidad. Los usuarios deben actualizar a la versión 3.23.0 para recibir un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/7d8fdce2d0ef337cb86cb37fc0c436c905e04d77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mr6w-ch7c-mqqj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26965",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:43.047",
      "lastModified" : "2026-02-27T14:49:57.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel` without verifying that `(nYDst+nSrcHeight)` fits in the destination height or that `(nXDst+nSrcWidth)` fits in the destination stride. When `TempFormat != DstFormat`, `pDstData` becomes `planar->pTempData` (sized for the desktop), while `nYDst` is only validated against the **surface** by `is_within_surface()`. A malicious RDP server can exploit this to perform a heap out-of-bounds write with attacker-controlled offset and pixel data on any connecting FreeRDP client. The OOB write reaches up to 132,096 bytes past the temp buffer end, and  on the brk heap (desktop ≤ 128×128), an adjacent `NSC_CONTEXT` struct's `decode` function pointer is overwritten with attacker-controlled pixel data — control-flow–relevant corruption (function pointer overwritten) demonstrated under deterministic heap layout (`nsc->decode = 0xFF414141FF414141`). Version 3.23.0 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, en la ruta de decodificación planar RLE, planar_decompress_plane_rle() escribe en pDstData en ((nYDst+y) * nDstStep) + (4*nXDst) + nChannel sin verificar que (nYDst+nSrcHeight) encaje en la altura de destino o que (nXDst+nSrcWidth) encaje en el paso de destino. Cuando TempFormat != DstFormat, pDstData se convierte en planar-&gt;pTempData (dimensionado para el escritorio), mientras que nYDst solo se valida contra la superficie mediante is_within_surface(). Un servidor RDP malicioso puede explotar esto para realizar una escritura fuera de límites en el heap con un desplazamiento y datos de píxeles controlados por el atacante en cualquier cliente FreeRDP que se conecte. La escritura OOB alcanza hasta 132.096 bytes más allá del final del búfer temporal, y en el heap brk (escritorio ? 128×128), el puntero de función decode de una estructura NSC_CONTEXT adyacente se sobrescribe con datos de píxeles controlados por el atacante — corrupción relevante para el flujo de control (puntero de función sobrescrito) demostrada bajo un diseño de heap determinista (nsc-&gt;decode = 0xFF414141FF414141). La versión 3.23.0 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/a0be5cb87d760bb1c803ad1bb835aa1e73e62abc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5vgf-mw4f-r33h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27015",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T21:16:43.203",
      "lastModified" : "2026-02-27T14:48:24.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server to crash the FreeRDP client via a reachable `WINPR_ASSERT` → `abort()`. The crash occurs in upstream builds where `WITH_VERBOSE_WINPR_ASSERT=ON` (default in FreeRDP 3.22.0 / current WinPR CMake defaults). Smartcard redirection must be explicitly enabled by the user (e.g., `xfreerdp /smartcard`; `/smartcard-logon` implies `/smartcard`). Version 3.23.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, una comprobación de límites faltante en 'smartcard_unpack_read_size_align()' ('libfreerdp/utils/smartcard_pack.c:1703') permite a un servidor RDP malicioso bloquear el cliente FreeRDP a través de un 'WINPR_ASSERT' ? 'abort()' alcanzable. El bloqueo ocurre en compilaciones upstream donde 'WITH_VERBOSE_WINPR_ASSERT=ON' (predeterminado en FreeRDP 3.22.0 / valores predeterminados actuales de WinPR CMake). La redirección de tarjeta inteligente debe ser habilitada explícitamente por el usuario (p. ej., 'xfreerdp /smartcard'; '/smartcard-logon' implica '/smartcard'). La versión 3.23.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/65d59d3b3c2f630f2ea862687ecf5f95f8115244",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7g72-39pq-4725",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7g72-39pq-4725",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2845",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-25T21:16:44.547",
      "lastModified" : "2026-02-28T01:05:22.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated user to cause denial of service by exploiting a Bitbucket Server import endpoint via repeatedly sending large responses."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 11.2 anterior a la 18.7.5, la 18.8 anterior a la 18.8.5 y la 18.9 anterior a la 18.9.1 que podría haber permitido a un usuario autenticado causar una denegación de servicio al explotar un endpoint de importación del servidor de Bitbucket mediante el envío repetido de respuestas grandes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@gitlab.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "2C284DA2-89BA-4728-B503-BF3279EFE9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "18.7.5",
            "matchCriteriaId" : "5F9A1A01-1984-4982-8650-39DD7DFDBA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "432C7223-F8B6-4EBA-84E2-2BB8A0F367D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndExcluding" : "18.8.5",
            "matchCriteriaId" : "630677C7-21EB-4E91-BB15-4610DCD22F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "795727F0-1B38-483F-BEE8-FB252EE57AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "73CCBA34-57C3-454D-A898-5D216EE1D5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/work_items/570554",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3172",
      "sourceIdentifier" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
      "published" : "2026-02-25T21:16:44.857",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la construcción paralela de índices HNSW en pgvector 0.6.0 hasta 0.8.1 permite a un usuario de base de datos filtrar datos sensibles de otras relaciones o bloquear el servidor de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pgvector/pgvector/issues/959",
        "source" : "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3200",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T21:16:45.337",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/getUser/getUsers of the file /server/controller/user.js. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en z-9527 admin 1.0/2.0. El elemento afectado es la función checkName/register/login/getUser/getUsers del archivo /server/controller/user.js. La manipulación conduce a inyección SQL. El ataque puede ser iniciado remotamente. El exploit está disponible públicamente y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-2",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347772",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347772",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.758325",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.758326",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.758327",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.758328",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.758330",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26984",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:24.173",
      "lastModified" : "2026-03-05T17:41:15.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to versions 26.0.5, 27.0.2, and 28.0.0, an authenticated user with sufficient privileges can exploit a path traversal vulnerability to upload a malicious file to an arbitrary location on the server. Once uploaded, the file can be used to achieve remote code execution (RCE). An attacker must be authenticated and have the appropriate permissions to exploit this issue. If the server is configured as read-only, remote code execution (RCE) is not possible; however, the malicious file upload may still be achievable. This problem is fixed in LORIS v26.0.5 and above, v27.0.2 and above, and v28.0.0 and above. As a workaround, LORIS administrators can disable the media module if it is not being used."
      }, {
        "lang" : "es",
        "value" : "LORIS (Longitudinal Online Research and Imaging System) es una aplicación web autoalojada que proporciona gestión de datos y proyectos para la investigación en neuroimagen. Antes de las versiones 26.0.5, 27.0.2 y 28.0.0, un usuario autenticado con privilegios suficientes puede explotar una vulnerabilidad de salto de ruta para cargar un archivo malicioso en una ubicación arbitraria en el servidor. Una vez cargado, el archivo puede usarse para lograr la ejecución remota de código (RCE). Un atacante debe estar autenticado y tener los permisos apropiados para explotar este problema. Si el servidor está configurado como de solo lectura, la ejecución remota de código (RCE) no es posible; sin embargo, la carga del archivo malicioso aún puede ser factible. Este problema está solucionado en LORIS v26.0.5 y superiores, v27.0.2 y superiores, y v28.0.0 y superiores. Como solución alternativa, los administradores de LORIS pueden deshabilitar el módulo de medios si no se está utilizando."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgill:loris:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.0.5",
            "matchCriteriaId" : "B143A02C-B7A7-48AB-BB97-804A089C1081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgill:loris:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.0.2",
            "matchCriteriaId" : "E1883C04-6846-427A-BFFE-4C3AF35CCC19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aces/Loris/releases/tag/v26.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/aces/Loris/releases/tag/v27.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/aces/Loris/security/advisories/GHSA-mpgc-c48m-6v2h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26985",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:24.360",
      "lastModified" : "2026-03-05T17:40:35.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Starting in version 24.0.0 and prior to versions 26.0.5, 27.0.2, and 28.0.0, an authenticated user with the appropriate authorization can read configuration files on the server by exploiting a path traversal vulnerability. Some of these files contain hard-coded credentials. The vulnerability allows an attacker to read configuration files containing hard-coded credentials. The attacker could then authenticate to the database or other services if those credentials are reused. The attacker must be authenticated and have the required permissions. However, the vulnerability is easy to exploit and the application source code is public. This problem is fixed in LORIS v26.0.5 and v27.0.2 and above, and v28.0.0 and above. As a workaround, the electrophysiogy_browser in LORIS can be disabled by an administrator using the module manager."
      }, {
        "lang" : "es",
        "value" : "LORIS (Sistema Longitudinal de Investigación y Obtención de Imágenes en Línea) es una aplicación web autoalojada que proporciona gestión de datos y proyectos para la investigación en neuroimagen. A partir de la versión 24.0.0 y antes de las versiones 26.0.5, 27.0.2 y 28.0.0, un usuario autenticado con la autorización apropiada puede leer archivos de configuración en el servidor explotando una vulnerabilidad de salto de ruta. Algunos de estos archivos contienen credenciales codificadas. La vulnerabilidad permite a un atacante leer archivos de configuración que contienen credenciales codificadas. El atacante podría entonces autenticarse en la base de datos u otros servicios si esas credenciales se reutilizan. El atacante debe estar autenticado y tener los permisos requeridos. Sin embargo, la vulnerabilidad es fácil de explotar y el código fuente de la aplicación es público. Este problema está solucionado en LORIS v26.0.5 y v27.0.2 y superiores, y v28.0.0 y superiores. Como solución alternativa, el electrophysiogy_browser en LORIS puede ser deshabilitado por un administrador usando el gestor de módulos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgill:loris:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "26.0.5",
            "matchCriteriaId" : "97AF29D7-60B4-4DEA-9B6F-1C0D48CA5577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcgill:loris:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.0.2",
            "matchCriteriaId" : "E1883C04-6846-427A-BFFE-4C3AF35CCC19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aces/Loris/releases/tag/v26.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/aces/Loris/releases/tag/v27.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/aces/Loris/security/advisories/GHSA-g3pp-rqvq-xxhp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26986",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:24.540",
      "lastModified" : "2026-02-27T19:11:09.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls `free(appWindow)` on title allocation failure without first removing the entry from the `railWindows` hash table, leaving a dangling pointer that is freed again on disconnect. Version 3.23.0 fixes the vulnerability."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, 'rail_window_free' desreferencia un puntero 'xfAppWindow' liberado durante la limpieza de 'HashTable_Free' porque 'xf_rail_window_common' llama a 'free(appWindow)' en caso de fallo en la asignación del título sin antes eliminar la entrada de la tabla hash 'railWindows', dejando un puntero colgante que se libera de nuevo al desconectarse. La versión 3.23.0 corrige la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1297",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1316-L1327",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L386-L394",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L395-L399",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L401-L404",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/b4f0f0a18fe53aa8d47d062f91471f4e9c5e0d51",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-crqx-g6x5-rx47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27116",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:24.723",
      "lastModified" : "2026-03-05T17:22:12.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected HTML injection vulnerability exists in the Projects module where the `filter` URL parameter is rendered into the DOM without output encoding when the user clicks \"Filter.\" While `<script>` and `<iframe>` are blocked, `<svg>`, `<a>`, and formatting tags (`<h1>`, `<b>`, `<u>`) render without restriction — enabling SVG-based phishing buttons, external redirect links, and content spoofing within the trusted application origin. Version 2.0.0 fixes this issue."
      }, {
        "lang" : "es",
        "value" : "Vikunja es una plataforma de gestión de tareas de código abierto y autohospedada. Antes de la versión 2.0.0, existe una vulnerabilidad de inyección HTML reflejada en el módulo Proyectos, donde el parámetro URL «filter» se representa en el DOM sin codificación de salida cuando el usuario hace clic en «Filtrar». Aunque `"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "53D82FAD-8E42-40F8-A11D-1FE7EDB4620B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-4qgr-4h56-8895",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://vikunja.io/changelog/vikunja-v2.0.0-was-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27148",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:25.317",
      "lastModified" : "2026-03-10T19:21:01.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Storybook is a frontend workshop for building user interface components and pages in isolation. Prior to versions 7.6.23, 8.6.17, 9.1.19, and 10.2.10, the WebSocket functionality in Storybook's dev server, used to create and update stories, is vulnerable to WebSocket hijacking. This vulnerability only affects the Storybook dev server; production builds are not impacted. Exploitation requires a developer to visit a malicious website while their local Storybook dev server is running. Because the WebSocket connection does not validate the origin of incoming connections, a malicious site can silently send WebSocket messages to the local instance without any further user interaction. If the Storybook dev server is intentionally exposed publicly (e.g. for design reviews or stakeholder demos) the risk is higher, as no malicious site visit is required. Any unauthenticated attacker can send WebSocket messages to it directly. The vulnerability affects the WebSocket message handlers for creating and saving stories. Both are vulnerable to injection via unsanitized input in the componentFilePath field, which can be exploited to achieve persistent XSS or Remote Code Execution (RCE). Versions 7.6.23, 8.6.17, 9.1.19, and 10.2.10 contain a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Storybook es un taller de frontend para construir componentes de interfaz de usuario y páginas de forma aislada. Anteriormente a las versiones 7.6.23, 8.6.17, 9.1.19 y 10.2.10, la funcionalidad WebSocket en el servidor de desarrollo de Storybook, utilizada para crear y actualizar historias, es vulnerable a secuestro de WebSocket. Esta vulnerabilidad solo afecta al servidor de desarrollo de Storybook; las compilaciones de producción no se ven afectadas. La explotación requiere que un desarrollador visite un sitio web malicioso mientras su servidor de desarrollo local de Storybook está en ejecución. Debido a que la conexión WebSocket no valida el origen de las conexiones entrantes, un sitio malicioso puede enviar silenciosamente mensajes WebSocket a la instancia local sin ninguna interacción adicional del usuario. Si el servidor de desarrollo de Storybook se expone intencionalmente al público (por ejemplo, para revisiones de diseño o demostraciones a partes interesadas) el riesgo es mayor, ya que no se requiere la visita a un sitio malicioso. Cualquier atacante no autenticado puede enviarle mensajes WebSocket directamente. La vulnerabilidad afecta a los manejadores de mensajes WebSocket para crear y guardar historias. Ambos son vulnerables a la inyección a través de entrada no saneada en el campo componentFilePath, lo que puede ser explotado para lograr XSS persistente o Ejecución Remota de Código (RCE). Las versiones 7.6.23, 8.6.17, 9.1.19 y 10.2.10 contienen una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storybook:storybook:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.6.23",
            "matchCriteriaId" : "C50B2AE6-4772-4446-8E24-48154699B9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storybook:storybook:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.6.17",
            "matchCriteriaId" : "68E89DDA-70B9-40DF-B30D-D3127CFD9BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storybook:storybook:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.1.19",
            "matchCriteriaId" : "8AA802BF-9FFA-404E-ADAF-898977B14384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storybook:storybook:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.10",
            "matchCriteriaId" : "9B5A0408-7FEE-4184-8BB7-47D462654B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/storybookjs/storybook/commit/0affdf928bd6fafbadfb1dfe22ce6104805e10e8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/commit/54689a8add18ea75d628c540f4bc677592a1e685",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/commit/b8cfa77c73940c140acdcd8a06ab1ea913c44761",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/commit/d34085f39c647f5c23c3a3b2d197c18602fcf876",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/releases/tag/v10.2.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/releases/tag/v7.6.23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/releases/tag/v8.6.17",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/releases/tag/v9.1.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/storybookjs/storybook/security/advisories/GHSA-mjf5-7g4m-gx5w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27575",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:26.383",
      "lastModified" : "2026-03-05T17:21:37.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to set weak passwords (e.g., 1234, password) without enforcing minimum strength requirements. Additionally, active sessions remain valid after a user changes their password. An attacker who compromises an account (via brute-force or credential stuffing) can maintain persistent access even after the victim resets their password. Version 2.0.0 contains a fix."
      }, {
        "lang" : "es",
        "value" : "Vikunja es una plataforma de gestión de tareas de código abierto autoalojada. Antes de la versión 2.0.0, la aplicación permite a los usuarios establecer contraseñas débiles (p. ej., 1234, password) sin aplicar requisitos de fortaleza mínima. Además, las sesiones activas permanecen válidas después de que un usuario cambia su contraseña. Un atacante que compromete una cuenta (mediante fuerza bruta o relleno de credenciales) puede mantener acceso persistente incluso después de que la víctima restablece su contraseña. La versión 2.0.0 contiene una corrección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        }, {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "53D82FAD-8E42-40F8-A11D-1FE7EDB4620B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-3ccg-x393-96v8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://vikunja.io/changelog/vikunja-v2.0.0-was-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27616",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:26.627",
      "lastModified" : "2026-03-05T16:35:10.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to upload SVG files as task attachments. SVG is an XML-based format that supports JavaScript execution through elements such as <script> tags or event handlers like onload. The application does not sanitize SVG content before storing it. When the uploaded SVG file is accessed via its direct URL, it is rendered inline in the browser under the application's origin. As a result, embedded JavaScript executes in the context of the authenticated user. Because the authentication token is stored in localStorage, it is accessible via JavaScript and can be retrieved by a malicious payload. Version 2.0.0 patches this issue."
      }, {
        "lang" : "es",
        "value" : "Vikunja es una plataforma de gestión de tareas de código abierto y autoalojada. Antes de la versión 2.0.0, la aplicación permite a los usuarios subir archivos SVG como adjuntos de tareas. SVG es un formato basado en XML que soporta la ejecución de JavaScript a través de elementos como etiquetas "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "53D82FAD-8E42-40F8-A11D-1FE7EDB4620B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-7jp5-298q-jg98",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/user-attachments/files/25414870/Stored.XSS.Proof.of.concept.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vikunja.io/changelog/vikunja-v2.0.0-was-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27819",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:27.127",
      "lastModified" : "2026-03-05T16:32:00.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vikunja/pkg/modules/dump/restore.go of the go-vikunja/vikunja repository fails to sanitize file paths within the provided ZIP archive. A maliciously crafted ZIP can bypass the intended extraction directory to overwrite arbitrary files on the host system. Additionally, we’ve discovered that a malformed archive triggers a runtime panic, crashing the process immediately after the database has been wiped permanently. The application trusts the metadata in the ZIP archive. It uses the Name attribute of the zip.File struct directly in os.OpenFile calls without validation, allowing files to be written outside the intended directory. The restoration logic assumes a specific directory structure within the ZIP. When provided with a \"minimalist\" malicious ZIP, the application fails to validate the length of slices derived from the archive contents. Specifically, at line 154, the code attempts to access an index of len(ms)-2 on an insufficiently populated slice, triggering a panic. Version 2.0.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vikunja es una plataforma de gestión de tareas de código abierto y autoalojada. Antes de la versión 2.0.0, la función restoreConfig en vikunja/pkg/modules/dump/restore.go del repositorio go-vikunja/vikunja no logra sanear las rutas de archivo dentro del archivo ZIP proporcionado. Un ZIP creado maliciosamente puede eludir el directorio de extracción previsto para sobrescribir archivos arbitrarios en el sistema anfitrión. Además, hemos descubierto que un archivo malformado desencadena un pánico en tiempo de ejecución, bloqueando el proceso inmediatamente después de que la base de datos haya sido borrada permanentemente. La aplicación confía en los metadatos del archivo ZIP. Utiliza el atributo Name de la estructura zip.File directamente en las llamadas a os.OpenFile sin validación, permitiendo que los archivos se escriban fuera del directorio previsto. La lógica de restauración asume una estructura de directorio específica dentro del ZIP. Cuando se le proporciona un ZIP malicioso 'minimalista', la aplicación no logra validar la longitud de las 'slices' derivadas del contenido del archivo. Específicamente, en la línea 154, el código intenta acceder a un índice de len(ms)-2 en una 'slice' insuficientemente poblada, desencadenando un pánico. La versión 2.0.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "53D82FAD-8E42-40F8-A11D-1FE7EDB4620B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-42wg-38gx-85rh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://vikunja.io/changelog/vikunja-v2.0.0-was-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27950",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:27.297",
      "lastModified" : "2026-02-27T19:10:21.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, la corrección para el uso después de liberación del montón descrita en CVE-2026-24680 está incompleta. Aunque el flujo de ejecución vulnerable referenciado en el aviso existe en la implementación de SDL2, la corrección parece haberse aplicado solo a la ruta de código de SDL3. En la implementación de SDL2, el puntero no se anula después de la liberación. Esto crea una situación donde el aviso sugiere que la vulnerabilidad está completamente resuelta, mientras que las compilaciones o entornos que aún usan SDL2 pueden retener la lógica vulnerable. Una corrección completa está disponible en la versión 3.23.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/blob/master/client/SDL/SDL2/sdl_pointer.cpp#L63-L64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/5f62aa11c1bdf00f94c40ea9ebb260a752740b80",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/c42ecbd183b001e76bfc3614cddfad0034acc758",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rvfg-86cr-5r6p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27951",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T22:16:27.610",
      "lastModified" : "2026-02-27T19:09:27.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `>= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de la versión 3.23.0, la función 'Stream_EnsureCapacity' puede crear un bucle de bloqueo infinito. Esto puede afectar a todas las implementaciones de cliente y servidor que utilizan FreeRDP. Para una explotación práctica, esto solo funcionará en sistemas de 32 bits donde la memoria física disponible sea '&gt;= SIZE_MAX'. La versión 3.23.0 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.0",
            "matchCriteriaId" : "31715854-6D23-4207-AB69-27707C7B2D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2694",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-25T22:16:28.027",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'can_edit' and 'can_delete' function in all versions up to, and including, 6.15.16. This makes it possible for authenticated attackers, with Contributor-level access and above, to update or trash events, organizers and venues via REST API."
      }, {
        "lang" : "es",
        "value" : "El plugin The Events Calendar para WordPress es vulnerable a la modificación no autorizada de datos y a la pérdida de datos debido a una verificación de capacidad inadecuada en la función 'can_edit' y 'can_delete' en todas las versiones hasta la 6.15.16, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, actualizar o enviar a la papelera eventos, organizadores y ubicaciones a través de la API REST."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.15.16/src/Tribe/REST/V1/Endpoints/Single_Event.php#L498",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.15.16/src/Tribe/REST/V1/Endpoints/Single_Event.php#L563",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.15.16/src/Tribe/REST/V1/Endpoints/Single_Venue.php#L529",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.15.16/src/Tribe/REST/V1/Endpoints/Single_Venue.php#L583",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3468694/the-events-calendar",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/67351a37-a457-48d6-b40a-95a7e3a0d746?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:20.440",
      "lastModified" : "2026-03-05T16:29:28.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form data. When chained with an expression sandbox escape, this could escalate to remote code execution on the n8n host. The vulnerability requires a specific workflow configuration to be exploitable. First, a form node with a field interpolating a value provided by an unauthenticated user, e.g. a form submitted value. Second, the field value must begin with an `=` character, which caused n8n to treat it as an expression and triggered a double-evaluation of the field content. There is no practical reason for a workflow designer to prefix a field with `=` intentionally — the character is not rendered in the output, so the result would not match the designer's expectations. If added accidentally, it would be noticeable and very unlikely to persist. An unauthenticated attacker would need to either know about this specific circumstance on a target instance or discover a matching form by chance. Even when the preconditions are met, the expression injection alone is limited to data accessible within the n8n expression context. Escalation to remote code execution requires chaining with a separate sandbox escape vulnerability. The issue has been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Review usage of form nodes manually for above mentioned preconditions, disable the Form node by adding `n8n-nodes-base.form` to the `NODES_EXCLUDE` environment variable, and/or disable the Form Trigger node by adding `n8n-nodes-base.formTrigger` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 2.10.1, 2.9.3 y 1.123.22, existía una vulnerabilidad de inyección de expresiones de segundo orden en los nodos de formulario de n8n que podría permitir a un atacante no autenticado inyectar y evaluar expresiones n8n arbitrarias al enviar datos de formulario manipulados. Cuando se encadena con un escape de sandbox de expresiones, esto podría escalar a ejecución remota de código en el host n8n. La vulnerabilidad requiere una configuración de flujo de trabajo específica para ser explotable. Primero, un nodo de formulario con un campo que interpola un valor proporcionado por un usuario no autenticado, p. ej., un valor enviado en un formulario. Segundo, el valor del campo debe comenzar con un carácter '=', lo que hizo que n8n lo tratara como una expresión y desencadenara una doble evaluación del contenido del campo. No hay una razón práctica para que un diseñador de flujo de trabajo prefije un campo con '=' intencionalmente — el carácter no se renderiza en la salida, por lo que el resultado no coincidiría con las expectativas del diseñador. Si se añade accidentalmente, sería notorio y muy poco probable que persistiera. Un atacante no autenticado necesitaría conocer esta circunstancia específica en una instancia objetivo o descubrir un formulario coincidente por casualidad. Incluso cuando se cumplen las precondiciones, la inyección de expresiones por sí sola se limita a los datos accesibles dentro del contexto de expresiones de n8n. La escalada a ejecución remota de código requiere encadenarse con una vulnerabilidad de escape de sandbox separada. El problema ha sido solucionado en las versiones de n8n 2.10.1, 2.9.3 y 1.123.22. Los usuarios deben actualizar a una de estas versiones o posteriores para remediar la vulnerabilidad. Si la actualización no es posible de inmediato, los administradores deben considerar las siguientes mitigaciones temporales. Revisar manualmente el uso de los nodos de formulario para las precondiciones mencionadas anteriormente, deshabilitar el nodo Formulario añadiendo 'n8n-nodes-base.form' a la variable de entorno 'NODES_EXCLUDE', y/o deshabilitar el nodo Form Trigger añadiendo 'n8n-nodes-base.formTrigger' a la variable de entorno 'NODES_EXCLUDE'. Estas soluciones alternativas no remedian completamente el riesgo y solo deben usarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.22",
            "matchCriteriaId" : "77E36F68-2FDD-4771-B2DD-3F0A168E92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.3",
            "matchCriteriaId" : "CDB18D4D-1D4C-422A-BE3E-0FF8FC9DDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "C2CBC039-F880-4DB3-968B-2520126388E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/562d867483e871b0f1e31776252e23bd721df75b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/issues/19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.9.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-75g8-rv7v-32f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:20.677",
      "lastModified" : "2026-03-05T16:22:42.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python objects, allowing an attacker to exfiltrate file contents or achieve RCE. On instances using internal Task Runners (default runner mode), this could result in full compromise of the n8n host. On instances using external Task Runners, the attacker might gain access to or impact other task executed on the Task Runner. Task Runners must be enabled using `N8N_RUNNERS_ENABLED=true`. The issue has been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to this version or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only., and/or disable the Code node by adding `n8n-nodes-base.code` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 2.10.1, 2.9.3 y 1.123.22, un usuario autenticado con permiso para crear o modificar flujos de trabajo podía usar el nodo de Código Python para escapar del sandbox. El sandbox no restringía suficientemente el acceso a ciertos objetos Python incorporados, permitiendo a un atacante exfiltrar contenidos de archivos o lograr RCE. En instancias que usan Task Runners internos (modo de ejecutor predeterminado), esto podría resultar en un compromiso total del host de n8n. En instancias que usan Task Runners externos, el atacante podría obtener acceso o impactar otras tareas ejecutadas en el Task Runner. Los Task Runners deben habilitarse usando `N8N_RUNNERS_ENABLED=true`. El problema ha sido solucionado en las versiones de n8n 2.10.1, 2.9.3 y 1.123.22. Los usuarios deben actualizar a esta versión o posterior para remediar la vulnerabilidad. Si la actualización no es posible de inmediato, los administradores deben considerar las siguientes mitigaciones temporales. Limitar los permisos de creación y edición de flujos de trabajo solo a usuarios de plena confianza, y/o deshabilitar el nodo de Código añadiendo `n8n-nodes-base.code` a la variable de entorno `NODES_EXCLUDE`. Estas soluciones provisionales no remedian completamente el riesgo y solo deben usarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.22",
            "matchCriteriaId" : "77E36F68-2FDD-4771-B2DD-3F0A168E92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.3",
            "matchCriteriaId" : "CDB18D4D-1D4C-422A-BE3E-0FF8FC9DDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "C2CBC039-F880-4DB3-968B-2520126388E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.9.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-mmgg-m5j7-f83h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27495",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:20.853",
      "lastModified" : "2026-03-04T03:41:31.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit a vulnerability in the JavaScript Task Runner sandbox to execute arbitrary code outside the sandbox boundary. On instances using internal Task Runners (default runner mode), this could result in full compromise of the n8n host. On instances using external Task Runners, the attacker might gain access to or impact other task executed on the Task Runner. Task Runners must be enabled using `N8N_RUNNERS_ENABLED=true`. The issue has been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or use external runner mode (`N8N_RUNNERS_MODE=external`) to limit the blast radius. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Prior a las versiones 2.10.1, 2.9.3 y 1.123.22, un usuario autenticado con permiso para crear o modificar flujos de trabajo podría explotar una vulnerabilidad en el sandbox de JavaScript Task Runner para ejecutar código arbitrario fuera del límite del sandbox. En instancias que utilizan Task Runners internos (modo de ejecutor predeterminado), esto podría resultar en un compromiso total del host de n8n. En instancias que utilizan Task Runners externos, el atacante podría obtener acceso o impactar otras tareas ejecutadas en el Task Runner. Los Task Runners deben habilitarse usando 'N8N_RUNNERS_ENABLED=true'. El problema ha sido solucionado en las versiones de n8n 2.10.1, 2.9.3 y 1.123.22. Los usuarios deben actualizar a una de estas versiones o posteriores para remediar la vulnerabilidad. Si la actualización no es posible de inmediato, los administradores deben considerar las siguientes mitigaciones temporales. Limitar los permisos de creación y edición de flujos de trabajo solo a usuarios de plena confianza, y/o usar el modo de ejecutor externo ('N8N_RUNNERS_MODE=external') para limitar el radio de impacto. Estas soluciones provisionales no remedian completamente el riesgo y solo deben usarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.22",
            "matchCriteriaId" : "77E36F68-2FDD-4771-B2DD-3F0A168E92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.3",
            "matchCriteriaId" : "CDB18D4D-1D4C-422A-BE3E-0FF8FC9DDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "C2CBC039-F880-4DB3-968B-2520126388E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.n8n.io/hosting/configuration/task-runners",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.9.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-jjpj-p2wh-qf23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27497",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:21.037",
      "lastModified" : "2026-03-04T03:35:58.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write arbitrary files on the n8n server. The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Merge node by adding `n8n-nodes-base.merge` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 2.10.1, 2.9.3 y 1.123.22, un usuario autenticado con permiso para crear o modificar flujos de trabajo podría aprovechar el modo de consulta SQL del nodo Merge para ejecutar código arbitrario y escribir archivos arbitrarios en el servidor n8n. Los problemas se han solucionado en las versiones de n8n 2.10.1, 2.9.3 y 1.123.22. Los usuarios deben actualizar a una de estas versiones o posteriores para remediar todas las vulnerabilidades conocidas. Si la actualización no es posible de inmediato, los administradores deben considerar las siguientes mitigaciones temporales. Limitar los permisos de creación y edición de flujos de trabajo solo a usuarios de plena confianza, y/o deshabilitar el nodo Merge añadiendo 'n8n-nodes-base.merge' a la variable de entorno 'NODES_EXCLUDE'. Estas soluciones provisionales no remedian completamente el riesgo y solo deben usarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.22",
            "matchCriteriaId" : "77E36F68-2FDD-4771-B2DD-3F0A168E92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.3",
            "matchCriteriaId" : "CDB18D4D-1D4C-422A-BE3E-0FF8FC9DDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "C2CBC039-F880-4DB3-968B-2520126388E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.9.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-wxx7-mcgf-j869",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27498",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:21.213",
      "lastModified" : "2026-03-04T03:33:32.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with permission to create or modify workflows could chain the Read/Write Files from Disk node with git operations to achieve remote code execution. By writing to specific configuration files and then triggering a git operation, the attacker could execute arbitrary shell commands on the n8n host. The issue has been fixed in n8n versions 2.2.0 and 1.123.8. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Read/Write Files from Disk node by adding `n8n-nodes-base.readWriteFile` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 2.2.0 y 1.123.8, un usuario autenticado con permiso para crear o modificar flujos de trabajo podía encadenar el nodo Read/Write Files from Disk con operaciones git para lograr la ejecución remota de código. Al escribir en archivos de configuración específicos y luego activar una operación git, el atacante podía ejecutar comandos de shell arbitrarios en el host de n8n. El problema ha sido solucionado en las versiones 2.2.0 y 1.123.8 de n8n. Los usuarios deben actualizar a una de estas versiones o posteriores para remediar la vulnerabilidad. Si la actualización no es posible de inmediato, los administradores deben considerar las siguientes mitigaciones temporales. Limite los permisos de creación y edición de flujos de trabajo solo a usuarios de plena confianza, y/o deshabilite el nodo Read/Write Files from Disk añadiendo 'n8n-nodes-base.readWriteFile' a la variable de entorno 'NODES_EXCLUDE'. Estas soluciones provisionales no remedian completamente el riesgo y solo deben usarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.8",
            "matchCriteriaId" : "39CFFDB2-C60B-4006-A603-DBD521531A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "06724F9B-7063-466A-8B43-B10770A2932C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/97365caf253978ba8e46d7bc53fa7ac3b6f67b32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/e22acaab3dcb2004e5fe0bf9ef2db975bde61866",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/releases/tag/n8n@2.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-x2mw-7j39-93xq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27577",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:21.387",
      "lastModified" : "2026-03-04T14:00:14.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits in the expression evaluation of n8n have been identified and patched following CVE-2025-68613. An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 2.10.1, 2.9.3 y 1.123.22, se han identificado y parcheado exploits adicionales en la evaluación de expresiones de n8n tras CVE-2025-68613. Un usuario autenticado con permiso para crear o modificar flujos de trabajo podría abusar de expresiones manipuladas en los parámetros del flujo de trabajo para desencadenar la ejecución no intencionada de comandos del sistema en el host que ejecuta n8n. Los problemas han sido solucionados en las versiones de n8n 2.10.1, 2.9.3 y 1.123.22. Los usuarios deberían actualizar a una de estas versiones o posteriores para remediar todas las vulnerabilidades conocidas. Si la actualización no es posible de inmediato, los administradores deberían considerar las siguientes mitigaciones temporales. Limitar los permisos de creación y edición de flujos de trabajo solo a usuarios de plena confianza, y/o desplegar n8n en un entorno endurecido con privilegios de sistema operativo y acceso a la red restringidos para reducir el impacto de una posible explotación. Estas soluciones provisionales no remedian completamente el riesgo y solo deberían usarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.22",
            "matchCriteriaId" : "77E36F68-2FDD-4771-B2DD-3F0A168E92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.3",
            "matchCriteriaId" : "CDB18D4D-1D4C-422A-BE3E-0FF8FC9DDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "C2CBC039-F880-4DB3-968B-2520126388E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.n8n.io/hosting/securing/overview",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/1479aab2d32fe0ee087f82b9038b1035c98be2f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/9e5212ecbc5d2d4e6f340b636a5e84be6369882e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-vpcf-gvg4-6qwr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27578",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:21.560",
      "lastModified" : "2026-03-04T03:24:40.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could inject arbitrary scripts into pages rendered by the n8n application using different techniques on various nodes (Form Trigger node, Chat Trigger node, Send & Wait node, Webhook Node, and Chat Node). Scripts injected by a malicious workflow execute in the browser of any user who visits the affected page, enabling session hijacking and account takeover. The issues have been fixed in n8n versions 2.10.1 and 1.123.21. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Webhook node by adding `n8n-nodes-base.webhook` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures."
      }, {
        "lang" : "es",
        "value" : "n8n es una plataforma de automatización de flujos de trabajo de código abierto. Antes de las versiones 2.10.1, 2.9.3 y 1.123.22, un usuario autenticado con permiso para crear o modificar flujos de trabajo podía inyectar scripts arbitrarios en páginas renderizadas por la aplicación n8n utilizando diferentes técnicas en varios nodos (nodo Form Trigger, nodo Chat Trigger, nodo Send &amp; Wait, nodo Webhook y nodo Chat). Los scripts inyectados por un flujo de trabajo malicioso se ejecutan en el navegador de cualquier usuario que visite la página afectada, lo que permite el secuestro de sesión y la toma de control de cuentas. Los problemas se han solucionado en las versiones de n8n 2.10.1 y 1.123.21. Los usuarios deben actualizar a una de estas versiones o posteriores para remediar la vulnerabilidad. Si la actualización no es posible de inmediato, los administradores deben considerar las siguientes mitigaciones temporales. Limite los permisos de creación y edición de flujos de trabajo solo a usuarios de plena confianza, y/o deshabilite el nodo Webhook añadiendo 'n8n-nodes-base.webhook' a la variable de entorno 'NODES_EXCLUDE'. Estas soluciones provisionales no remedian completamente el riesgo y solo deben utilizarse como medidas de mitigación a corto plazo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.123.22",
            "matchCriteriaId" : "77E36F68-2FDD-4771-B2DD-3F0A168E92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.3",
            "matchCriteriaId" : "CDB18D4D-1D4C-422A-BE3E-0FF8FC9DDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.10.1",
            "matchCriteriaId" : "C2CBC039-F880-4DB3-968B-2520126388E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/n8n-io/n8n/commit/062644ef786b6af480afe4a0f12bc6d70040534a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/1479aab2d32fe0ee087f82b9038b1035c98be2f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/commit/9e5212ecbc5d2d4e6f340b636a5e84be6369882e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/n8n-io/n8n/security/advisories/GHSA-2p9h-rqjw-gm92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27613",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-25T23:16:21.743",
      "lastModified" : "2026-03-04T03:21:58.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. A vulnerability in versions prior to 2.01 allows unauthenticated remote attackers to bypass the web server's CGI parameter security controls. Depending on the server configuration and the specific CGI executable in use, the impact is either source code disclosure or remote code execution (RCE). Anyone hosting CGI scripts (particularly interpreted languages like PHP) using vulnerable versions of TinyWeb is impacted. The problem has been patched in version 2.01. If upgrading is not immediately possible, ensure `STRICT_CGI_PARAMS` is enabled (it is defined by default in `define.inc`) and/or do not use CGI executables that natively accept dangerous command-line flags (such as `php-cgi.exe`). If hosting PHP, consider placing the server behind a Web Application Firewall (WAF) that explicitly blocks URL query string parameters that begin with a hyphen (`-`) or contain encoded double quotes (`%22`)."
      }, {
        "lang" : "es",
        "value" : "TinyWeb es un servidor web (HTTP, HTTPS) escrito en Delphi para Win32. Una vulnerabilidad en versiones anteriores a la 2.01 permite a atacantes remotos no autenticados eludir los controles de seguridad de parámetros CGI del servidor web. Dependiendo de la configuración del servidor y del ejecutable CGI específico en uso, el impacto es la divulgación de código fuente o la ejecución remota de código (RCE). Cualquiera que aloje scripts CGI (particularmente lenguajes interpretados como PHP) usando versiones vulnerables de TinyWeb está afectado. El problema ha sido parcheado en la versión 2.01. Si la actualización no es posible de inmediato, asegúrese de que `STRICT_CGI_PARAMS` esté habilitado (está definido por defecto en `define.inc`) y/o no utilice ejecutables CGI que acepten de forma nativa indicadores de línea de comandos peligrosos (como `php-cgi.exe`). Si aloja PHP, considere colocar el servidor detrás de un cortafuegos de aplicaciones web (WAF) que bloquee explícitamente los parámetros de cadena de consulta de URL que comienzan con un guion (`-`) o contienen comillas dobles codificadas (`%22`)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:tinyweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.01",
            "matchCriteriaId" : "B119C41C-4D84-41B3-8797-7DAD79FCF822"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maximmasiutin/TinyWeb/commit/d9dbda8db49da69d2160e1c527e782b73b5ffb6b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/releases/tag/v2.01",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-rfx5-fh9m-9jj9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.masiutin.net/tinyweb-cve-2026-27613.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3209",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-25T23:16:21.920",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in fosrl Pangolin up to 1.15.4-s.3. This affects the function verifyRoleAccess/verifyApiKeyRoleAccess of the component Role Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 1.15.4-s.4 mitigates this issue. The identifier of the patch is 5e37c4e85fae68e756be5019a28ca903b161fdd5. Upgrading the affected component is advised."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en fosrl Pangolin hasta 1.15.4-s.3. Esto afecta a la función verifyRoleAccess/verifyApiKeyRoleAccess del componente Gestor de Roles. La manipulación conduce a controles de acceso inadecuados. La explotación remota del ataque es posible. El exploit ha sido revelado al público y puede ser utilizado. Actualizar a la versión 1.15.4-s.4 mitiga este problema. El identificador del parche es 5e37c4e85fae68e756be5019a28ca903b161fdd5. Se aconseja actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/henrrrychau/0457bef6776d0c99688f9cf55cdf55f7",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/fosrl/pangolin/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/fosrl/pangolin/commit/5e37c4e85fae68e756be5019a28ca903b161fdd5",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/fosrl/pangolin/pull/2511",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/fosrl/pangolin/releases/tag/1.15.4-s.4",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.347796",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.347796",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765676",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.766215",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26186",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:23.450",
      "lastModified" : "2026-03-02T15:45:35.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbitrary SQL expressions via the `order_key` query parameter. Due to unsafe use of `goqu.I()` when constructing the `ORDER BY` clause, specially crafted input could escape identifier quoting and be interpreted as executable SQL. An authenticated attacker with access to the affected endpoint could inject SQL expressions into the underlying MySQL query. Although the injection occurs in an `ORDER BY` context, it is sufficient to enable blind SQL injection techniques that can disclose database information through conditional expressions that affect result ordering. Crafted expressions may also cause excessive computation or query failures, potentially leading to degraded performance or denial of service. No direct evidence of reliable data modification or stacked query execution was demonstrated. Version 4.80.1 fixes the issue. If an immediate upgrade is not possible, users should restrict access to the affected endpoint to trusted roles only and ensure that any user-supplied sort or column parameters are strictly allow-listed at the application or proxy layer."
      }, {
        "lang" : "es",
        "value" : "Fleet es un software de gestión de dispositivos de código abierto. Una vulnerabilidad de inyección SQL en versiones anteriores a la 4.80.1 permitía a usuarios autenticados inyectar expresiones SQL arbitrarias a través del parámetro de consulta `order_key`. Debido al uso inseguro de `goqu.I()` al construir la cláusula `ORDER BY`, una entrada especialmente diseñada podría evadir el entrecomillado de identificadores y ser interpretada como SQL ejecutable. Un atacante autenticado con acceso al endpoint afectado podría inyectar expresiones SQL en la consulta MySQL subyacente. Aunque la inyección ocurre en un contexto `ORDER BY`, es suficiente para habilitar técnicas de inyección SQL ciega que pueden divulgar información de la base de datos a través de expresiones condicionales que afectan el orden de los resultados. Las expresiones diseñadas también pueden causar una computación excesiva o fallos en las consultas, lo que podría llevar a un rendimiento degradado o a una denegación de servicio. No se demostró evidencia directa de modificación de datos fiable o ejecución de consultas apiladas. La versión 4.80.1 corrige el problema. Si una actualización inmediata no es posible, los usuarios deben restringir el acceso al endpoint afectado solo a roles de confianza y asegurarse de que cualquier parámetro de ordenación o columna proporcionado por el usuario esté estrictamente en una lista blanca en la capa de aplicación o proxy."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.80.1",
            "matchCriteriaId" : "A1490125-39FE-4B90-AC5F-62B26ED3C509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-49xw-vfc4-7p43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27630",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:23.813",
      "lastModified" : "2026-02-28T01:01:22.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 are vulnerable to a Denial of Service (DoS) attack known as Slowloris. The server spawns a new OS thread for every incoming connection without enforcing a maximum concurrency limit or an appropriate request timeout. An unauthenticated remote attacker can exhaust server concurrency limits and memory by opening numerous connections and sending data exceptionally slowly (e.g. 1 byte every few minutes). Anyone hosting services using TinyWeb is impacted. Version 2.02 fixes the issue. The patch introduces a `CMaxConnections` limit (set to 512) and a `CConnectionTimeoutSecs` idle timeout (set to 30 seconds). As a temporary workaround if upgrading is not immediately possible, consider placing the server behind a robust reverse proxy or Web Application Firewall (WAF) such as nginx, HAProxy, or Cloudflare, configured to buffer incomplete requests and aggressively enforce connection limits and timeouts."
      }, {
        "lang" : "es",
        "value" : "TinyWeb es un servidor web (HTTP, HTTPS) escrito en Delphi para Win32. Las versiones anteriores a la 2.02 son vulnerables a un ataque de denegación de servicio (DoS) conocido como Slowloris. El servidor genera un nuevo hilo del sistema operativo para cada conexión entrante sin imponer un límite máximo de concurrencia o un tiempo de espera de solicitud adecuado. Un atacante remoto no autenticado puede agotar los límites de concurrencia del servidor y la memoria abriendo numerosas conexiones y enviando datos excepcionalmente lento (por ejemplo, 1 byte cada pocos minutos). Cualquiera que aloje servicios usando TinyWeb se ve afectado. La versión 2.02 corrige el problema. El parche introduce un límite 'CMaxConnections' (establecido en 512) y un tiempo de espera de inactividad 'CConnectionTimeoutSecs' (establecido en 30 segundos). Como solución alternativa temporal si la actualización no es posible de inmediato, considere colocar el servidor detrás de un proxy inverso robusto o un cortafuegos de aplicaciones web (WAF) como nginx, HAProxy o Cloudflare, configurado para almacenar en búfer las solicitudes incompletas y aplicar agresivamente los límites y tiempos de espera de conexión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:tinyweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.02",
            "matchCriteriaId" : "8AAA8D54-16C4-42CC-A7B8-6CDCFAA96A00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maximmasiutin/TinyWeb/commit/23268c8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-ccv5-8948-c99c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.masiutin.net/tinyweb-cve-2026-27630.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27633",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:24.130",
      "lastModified" : "2026-02-28T01:00:49.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 have a Denial of Service (DoS) vulnerability via memory exhaustion. Unauthenticated remote attackers can send an HTTP POST request to the server with an exceptionally large `Content-Length` header (e.g., `2147483647`). The server continuously allocates memory for the request body (`EntityBody`) while streaming the payload without enforcing any maximum limit, leading to all available memory being consumed and causing the server to crash. Anyone hosting services using TinyWeb is impacted. Version 2.02 fixes the issue. The patch introduces a `CMaxEntityBodySize` limit (set to 10MB) for the maximum size of accepted payloads. As a temporary workaround if upgrading is not immediately possible, consider placing the server behind a Web Application Firewall (WAF) or reverse proxy (like nginx or Cloudflare) configured to explicitly limit the maximum allowed HTTP request body size (e.g., `client_max_body_size` in nginx)."
      }, {
        "lang" : "es",
        "value" : "TinyWeb es un servidor web (HTTP, HTTPS) escrito en Delphi para Win32. Las versiones anteriores a la versión 2.02 tienen una vulnerabilidad de denegación de servicio (DoS) a través del agotamiento de la memoria. Atacantes remotos no autenticados pueden enviar una solicitud POST HTTP al servidor con una cabecera 'Content-Length' excepcionalmente grande (p. ej., '2147483647'). El servidor asigna continuamente memoria para el cuerpo de la solicitud ('EntityBody') mientras transmite la carga útil sin imponer ningún límite máximo, lo que lleva a que toda la memoria disponible sea consumida y provoca la caída del servidor. Cualquiera que aloje servicios usando TinyWeb se ve afectado. La versión 2.02 corrige el problema. El parche introduce un límite 'CMaxEntityBodySize' (establecido en 10MB) para el tamaño máximo de las cargas útiles aceptadas. Como solución alternativa temporal si la actualización no es posible de inmediato, considere colocar el servidor detrás de un Cortafuegos de Aplicaciones Web (WAF) o un proxy inverso (como nginx o Cloudflare) configurado para limitar explícitamente el tamaño máximo permitido del cuerpo de la solicitud HTTP (p. ej., 'client_max_body_size' en nginx)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:tinyweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.02",
            "matchCriteriaId" : "8AAA8D54-16C4-42CC-A7B8-6CDCFAA96A00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maximmasiutin/TinyWeb/commit/1cb5a1d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-992w-gmcm-fmgr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.masiutin.net/tinyweb-cve-2026-27633.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27635",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:24.307",
      "lastModified" : "2026-02-27T18:36:30.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.0, when model render generation is enabled, a logged-in user can achieve RCE by uploading a ZIP containing a file with a shell metacharacter in its name. The filename reaches a Ruby backtick call unsanitized. Version 0.133.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Manyfold es una aplicación web de código abierto y autoalojada para gestionar una colección de modelos 3D, particularmente enfocada en la impresión 3D. Antes de la versión 0.133.0, cuando la generación de renderizados de modelos está habilitada, un usuario autenticado puede lograr RCE al subir un archivo ZIP que contiene un archivo con un metacaracter de shell en su nombre. El nombre del archivo llega a una llamada de backtick de Ruby sin sanear. La versión 0.133.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manyfold:manyfold:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.133.0",
            "matchCriteriaId" : "6F54584E-5C84-449F-848F-730DC1BECAC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-p589-cf26-v7h2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27709",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:24.490",
      "lastModified" : "2026-02-27T17:54:12.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, NanaZip’s `.NET Single File Application` parser has an out-of-bounds read vulnerability in manifest parsing. A crafted bundle can provide a malformed `RelativePathLength` so the parser constructs a `std::string` from memory beyond `HeaderBuffer`, leading to crash and potential in-process memory disclosure. Versions 6.0.1638.0 and 6.5.1638.0 fix the issue."
      }, {
        "lang" : "es",
        "value" : "NanaZip es un archivador de archivos de código abierto. A partir de la versión 5.0.1252.0 y anteriores a las versiones 6.0.1638.0 y 6.5.1638.0, el analizador de 'Aplicación de Archivo Único .NET' de NanaZip tiene una vulnerabilidad de lectura fuera de límites en el análisis del manifiesto. Un paquete manipulado puede proporcionar una 'RelativePathLength' malformada de modo que el analizador construye un 'std::string' a partir de memoria más allá de 'HeaderBuffer', lo que lleva a un fallo y a una posible divulgación de memoria en proceso. Las versiones 6.0.1638.0 y 6.5.1638.0 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1252.0",
            "versionEndExcluding" : "6.0.1638.0",
            "matchCriteriaId" : "3FBBB6F3-97EF-461D-A68D-980227F4E432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-vr4w-xc78-w6fv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-vr4w-xc78-w6fv",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27710",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:24.663",
      "lastModified" : "2026-02-27T17:53:13.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a denial-of-service vulnerability exists in NanaZip’s `.NET Single File Application` parser. A crafted bundle can force an integer underflow in header-size calculation and trigger an unbounded memory allocation attempt during archive open. Versions 6.0.1638.0 and 6.5.1638.0 fix the issue."
      }, {
        "lang" : "es",
        "value" : "NanaZip es un archivador de archivos de código abierto. A partir de la versión 5.0.1252.0 y anterior a las versiones 6.0.1638.0 y 6.5.1638.0, existe una vulnerabilidad de denegación de servicio en el analizador de 'aplicación de archivo único .NET' de NanaZip. Un paquete manipulado puede forzar un desbordamiento negativo de enteros en el cálculo del tamaño de la cabecera y desencadenar un intento de asignación de memoria ilimitada durante la apertura del archivo. Las versiones 6.0.1638.0 y 6.5.1638.0 corrigen el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1252.0",
            "versionEndExcluding" : "6.0.1638.0",
            "matchCriteriaId" : "3FBBB6F3-97EF-461D-A68D-980227F4E432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-89qw-8p49-32wf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-89qw-8p49-32wf",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27711",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:24.843",
      "lastModified" : "2026-02-27T17:51:29.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, a memory corruption vulnerability in NanaZip’s UFS parser allows a crafted `.ufs/.ufs2/.img` file to trigger out-of-bounds memory access during archive open/listing. The bug is reachable via normal user file-open flow and can cause process crash, hang, and potentially exploitable heap corruption. Versions 6.0.1638.0 and 6.5.1638.0 fix the issue."
      }, {
        "lang" : "es",
        "value" : "NanaZip es un archivador de archivos de código abierto. A partir de la versión 5.0.1252.0 y antes de las versiones 6.0.1638.0 y 6.5.1638.0, una vulnerabilidad de corrupción de memoria en el analizador UFS de NanaZip permite que un archivo '.ufs/.ufs2/.img' manipulado active un acceso a memoria fuera de límites durante la apertura/listado del archivo. El error es accesible a través del flujo normal de apertura de archivos por parte del usuario y puede causar el bloqueo del proceso, el cuelgue y una corrupción de pila potencialmente explotable. Las versiones 6.0.1638.0 y 6.5.1638.0 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m2team:nanazip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.1252.0",
            "versionEndExcluding" : "6.0.1638.0",
            "matchCriteriaId" : "3FBBB6F3-97EF-461D-A68D-980227F4E432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-rjwv-4w7x-hc9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/M2Team/NanaZip/security/advisories/GHSA-rjwv-4w7x-hc9c",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27735",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:25.017",
      "lastModified" : "2026-04-14T00:44:04.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. Because the tool used GitPython's repo.index.add() rather than the Git CLI, relative paths containing `../` sequences that resolve outside the repository were accepted and staged into the Git index. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Servidores de Protocolo de Contexto de Modelo es una colección de implementaciones de referencia para el protocolo de contexto de modelo (MCP). En versiones de mcp-server-git anteriores a 2026.1.14, la herramienta git_add no validaba que las rutas de archivo proporcionadas en el argumento files estuvieran dentro de los límites del repositorio. Debido a que la herramienta utilizaba repo.index.add() de GitPython en lugar de la CLI de Git, las rutas relativas que contenían secuencias '../' que se resolvían fuera del repositorio eran aceptadas y preparadas en el índice de Git. Se aconseja a los usuarios que actualicen a la versión 2026.1.14 o posterior para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:model_context_protocol_servers:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.1.14",
            "matchCriteriaId" : "616D49C1-29CD-4DDA-B19A-9AA1001A2E2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modelcontextprotocol/servers/pull/3164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-vjqx-cfc4-9h6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27798",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:25.193",
      "lastModified" : "2026-02-27T16:03:31.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, ocurre una vulnerabilidad de lectura excesiva del búfer de pila al procesar una imagen con dimensiones pequeñas utilizando el operador -wavelet-denoise. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "F5891403-B079-4CD7-BA2A-361146A2F475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/0377e60b3c0d766bd7271221c95d9ee54f6a3738",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27799",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:25.393",
      "lastModified" : "2026-02-27T16:01:02.333",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a patch."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-15 y 6.9.13-40, existe una vulnerabilidad de lectura excesiva de búfer de pila en el gestor del formato de imagen DJVU. La vulnerabilidad ocurre debido a un truncamiento de enteros al calcular el 'stride' (tamaño de fila) para la asignación del búfer de píxeles. El cálculo del 'stride' desborda un entero con signo de 32 bits, lo que resulta en lecturas de memoria fuera de límites. Las versiones 7.1.2-15 y 6.9.13-40 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-40",
            "matchCriteriaId" : "C6F44A65-1733-4752-AAD0-BCCC7BDBC877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-15",
            "matchCriteriaId" : "6AFFD439-1068-4B6F-AE01-724AC62CDCEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "F5891403-B079-4CD7-BA2A-361146A2F475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r99p-5442-q2x2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27800",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:25.590",
      "lastModified" : "2026-03-04T03:16:37.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior to version 0.224.4. The `extract_zip()` function in `crates/util/src/archive.rs` fails to validate ZIP entry filenames for path traversal sequences (e.g., `../`). This allows a malicious extension to write files outside its designated sandbox directory by downloading and extracting a crafted ZIP archive. Version 0.224.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Zed, un editor de código, presenta una vulnerabilidad de Zip Slip (salto de ruta) en su funcionalidad de extracción de archivos de extensión anterior a la versión 0.224.4. La función 'extract_zip()' en 'crates/util/src/archive.rs' no valida los nombres de archivo de las entradas ZIP en busca de secuencias de salto de ruta (por ejemplo, '../'). Esto permite que una extensión maliciosa escriba archivos fuera de su directorio sandbox designado al descargar y extraer un archivo ZIP manipulado. La versión 0.224.4 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zed:zed:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.224.4",
            "matchCriteriaId" : "63C50DD7-F03F-4305-94DE-F5BFF201BA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zed-industries/zed/security/advisories/GHSA-v385-xh3h-rrfr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27804",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:25.793",
      "lastModified" : "2026-03-04T03:09:41.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.3 and 9.1.1-alpha.4, an unauthenticated attacker can forge a Google authentication token with `alg: \"none\"` to log in as any user linked to a Google account, without knowing their credentials. All deployments with Google authentication enabled are affected. The fix in versions 8.6.3 and 9.1.1-alpha.4 hardcodes the expected `RS256` algorithm instead of trusting the JWT header, and replaces the Google adapter's custom key fetcher with `jwks-rsa` which rejects unknown key IDs. As a workaround, dsable Google authentication until upgrading is possible."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede implementarse en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.3 y 9.1.1-alpha.4, un atacante no autenticado puede falsificar un token de autenticación de Google con 'alg: \"none\"' para iniciar sesión como cualquier usuario vinculado a una cuenta de Google, sin conocer sus credenciales. Todas las implementaciones con autenticación de Google habilitada se ven afectadas. La corrección en las versiones 8.6.3 y 9.1.1-alpha.4 codifica de forma rígida el algoritmo 'RS256' esperado en lugar de confiar en el encabezado JWT, y reemplaza el recuperador de claves personalizado del adaptador de Google con 'jwks-rsa' que rechaza los ID de clave desconocidos. Como solución alternativa, deshabilite la autenticación de Google hasta que sea posible la actualización."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        }, {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.3",
            "matchCriteriaId" : "6013714D-C959-4E21-90BC-38DB536DDD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.3.1",
            "matchCriteriaId" : "6DF6F6EE-4C02-49CB-9B73-D8C2A567DC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.3.1:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DF17F1D3-1FF0-4F19-AF82-A8866CE625D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.3.1:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "98AB1B71-E3FD-457A-AA25-074E2F5A0581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.3.1:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C73893F8-315F-4FE3-9ADB-DD2965797C46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/commit/9b94083accb7f3e72c6b8126c195c7a03dd2dfd7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/commit/9d5942d50e55c822924c27b05aa98f1393e7a330",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/8.6.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/9.3.1-alpha.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27808",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:26.013",
      "lastModified" : "2026-02-28T01:00:17.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mailpit is an email testing tool and API for developers. Prior to version 1.29.2, the Link Check API (/api/v1/message/{ID}/link-check) is vulnerable to Server-Side Request Forgery (SSRF). The server performs HTTP HEAD requests to every URL found in an email without validating target hosts or filtering private/internal IP addresses. The response returns status codes and status text per link, making this a non-blind SSRF. In the default configuration (no authentication on SMTP or API), this is fully exploitable remotely with zero user interaction. This is the same class of vulnerability that was fixed in the HTML Check API (CVE-2026-23845 / GHSA-6jxm-fv7w-rw5j) and the screenshot proxy (CVE-2026-21859 / GHSA-8v65-47jx-7mfr), but the Link Check code path was not included in either fix. Version 1.29.2 fixes this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Mailpit es una herramienta de prueba de correo electrónico y API para desarrolladores. Antes de la versión 1.29.2, la API de verificación de enlaces (Link Check API) (/api/v1/message/{ID}/link-check) es vulnerable a la falsificación de petición del lado del servidor (SSRF). El servidor realiza peticiones HTTP HEAD a cada URL encontrada en un correo electrónico sin validar los hosts de destino ni filtrar las direcciones IP privadas/internas. La respuesta devuelve códigos de estado y texto de estado por enlace, lo que la convierte en una SSRF no ciega. En la configuración predeterminada (sin autenticación en SMTP o API), esto es totalmente explotable de forma remota con cero interacción del usuario. Esta es la misma clase de vulnerabilidad que se corrigió en la API de verificación de HTML (HTML Check API) (CVE-2026-23845 / GHSA-6jxm-fv7w-rw5j) y el proxy de captura de pantalla (CVE-2026-21859 / GHSA-8v65-47jx-7mfr), pero la ruta de código de verificación de enlaces (Link Check) no se incluyó en ninguna de las correcciones. La versión 1.29.2 corrige esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axllent:mailpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.29.2",
            "matchCriteriaId" : "24EB3804-DA8E-43E1-82F0-0E365C797AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axllent/mailpit/commit/10ad4df8cc0cd9e51dea1b4410009545eef7fbf5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/releases/tag/v1.29.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-mpf7-p9x7-96r3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/axllent/mailpit/security/advisories/GHSA-mpf7-p9x7-96r3",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27809",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:26.233",
      "lastModified" : "2026-03-02T18:55:10.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data (e.g. a literal run that extends past the expected row size), decode_rle() raises ValueError which propagated all the way to the user, crashing psd.composite() and psd-tools export. decompress() already had a fallback that replaces failed channels with black pixels when result is None, but it never triggered because the ValueError from decode_rle() was not caught. The fix in version 1.12.2 wraps the decode_rle() call in a try/except so the existing fallback handles the error gracefully."
      }, {
        "lang" : "es",
        "value" : "psd-tools es un paquete de Python para trabajar con archivos PSD de Adobe Photoshop. Antes de la versión 1.12.2, cuando un archivo PSD contiene datos de imagen comprimidos RLE malformados (por ejemplo, una secuencia literal que se extiende más allá del tamaño de fila esperado), decode_rle() lanza un ValueError que se propagaba hasta el usuario, provocando el fallo de psd.composite() y psd-tools export. decompress() ya tenía una alternativa que reemplaza los canales fallidos con píxeles negros cuando el resultado es None, pero nunca se activaba porque el ValueError de decode_rle() no era capturado. La corrección en la versión 1.12.2 envuelve la llamada a decode_rle() en un bloque try/except para que la alternativa existente maneje el error de forma elegante."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-409"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        }, {
          "lang" : "en",
          "value" : "CWE-704"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psd-tools_project:psd-tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12.2",
            "matchCriteriaId" : "A84A4E59-9D62-4B75-B39E-58413BDCAAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/psd-tools/psd-tools/commit/6c0a78f195b5942757886a1863793fd5946c1fb1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/psd-tools/psd-tools/releases/tag/v1.12.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/psd-tools/psd-tools/security/advisories/GHSA-24p2-j2jr-386w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27812",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:26.467",
      "lastModified" : "2026-03-05T17:47:02.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. A vulnerability in versions prior to 0.1.85 is a Password Reset Poisoning (Host Header / Forwarded Header trust issue), which allows attackers to manipulate the password reset link. Attackers can exploit this flaw to inject their own domain into the password reset link, leading to the potential for account takeover. The vulnerability has been fixed in version v0.1.85. If upgrading is not immediately possible, users can mitigate the vulnerability by disabling the \"forgot password\" feature until an upgrade to a patched version can be performed. This will prevent attackers from exploiting the vulnerability via the affected endpoint."
      }, {
        "lang" : "es",
        "value" : "Sub2API es una plataforma de pasarela de API de IA diseñada para distribuir y gestionar cuotas de API de suscripciones de productos de IA. Una vulnerabilidad en versiones anteriores a la 0.1.85 es un Envenenamiento de Restablecimiento de Contraseña (problema de confianza en el encabezado Host / Forwarded), que permite a los atacantes manipular el enlace de restablecimiento de contraseña. Los atacantes pueden exploit esta falla para inyectar su propio dominio en el enlace de restablecimiento de contraseña, lo que lleva al potencial de toma de control de la cuenta. La vulnerabilidad ha sido corregida en la versión v0.1.85. Si la actualización no es posible de inmediato, los usuarios pueden mitigar la vulnerabilidad deshabilitando la función 'olvidé mi contraseña' hasta que se pueda realizar una actualización a una versión parcheada. Esto evitará que los atacantes exploten la vulnerabilidad a través del endpoint afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sub2api:sub2api:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.85",
            "matchCriteriaId" : "AE645367-957B-439F-97E6-91C32C6D32AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wei-Shaw/sub2api/security/advisories/GHSA-vc2q-289v-74g3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27818",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:26.653",
      "lastModified" : "2026-03-04T21:12:51.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers. A validation bug in versions prior to 4.0.3 allows an attacker to proxy domains not explicitly allowed in the `proxyableDomains` configuration. Version 4.0.3 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "TerriaJS-Server es un servidor NodeJS Express para TerriaJS, una biblioteca para construir exploradores de datos geoespaciales basados en la web. Un error de validación en versiones anteriores a la 4.0.3 permite a un atacante hacer proxy de dominios no permitidos explícitamente en la configuración 'proxyableDomains'. La versión 4.0.3 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terria:terriajs-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5F06F22F-B847-4FB2-96C4-F4D83A704CC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TerriaJS/terriajs-server/commit/3aaa5d9717162b245ae4569232bbe7d8673c913f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TerriaJS/terriajs-server/security/advisories/GHSA-w789-49fc-v8hr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27821",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:26.813",
      "lastModified" : "2026-03-11T23:23:32.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in `src/filters/dmx_nhml.c`. The value of the xmlHeaderEnd XML attribute is copied from att->value into szXmlHeaderEnd[1000] using strcpy() without any length validation. If the input exceeds 1000 bytes, it overwrites beyond the stack buffer boundary. Commit 9bd7137fded2db40de61a2cf3045812c8741ec52 patches the issue."
      }, {
        "lang" : "es",
        "value" : "GPAC es un framework multimedia de código abierto. En versiones hasta la 26.02.0 inclusive, se produce un desbordamiento de búfer de pila durante el análisis de archivos NHML en `src/filters/dmx_nhml.c`. El valor del atributo XML xmlHeaderEnd se copia de att-&gt;value a szXmlHeaderEnd[1000] usando strcpy() sin ninguna validación de longitud. Si la entrada excede los 1000 bytes, sobrescribe más allá del límite del búfer de pila. El commit 9bd7137fded2db40de61a2cf3045812c8741ec52 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.02.0",
            "matchCriteriaId" : "1E51A88A-96CF-4325-8493-FDB8E41EAC7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/9bd7137fded2db40de61a2cf3045812c8741ec52",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gpac/gpac/security/advisories/GHSA-q7qh-8r2r-q559",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/security/advisories/GHSA-q7qh-8r2r-q559",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27933",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:26.973",
      "lastModified" : "2026-02-27T17:27:19.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Manyfold es una aplicación web de código abierto y autoalojada para gestionar una colección de modelos 3D, particularmente enfocada en la impresión 3D. Las versiones anteriores a la 0.133.0 son vulnerables al secuestro de sesión a través de la fuga de cookies en cachés de proxy. La versión 0.133.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manyfold:manyfold:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.133.0",
            "matchCriteriaId" : "6F54584E-5C84-449F-848F-730DC1BECAC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27967",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:27.137",
      "lastModified" : "2026-03-05T16:10:10.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading and writing files **outside the project directory** when a project contains symbolic links pointing to external paths. This bypasses the intended workspace boundary and privacy protections (`file_scan_exclusions`, `private_files`), potentially leaking sensitive user data to the LLM. Version 0.225.9 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Zed, un editor de código, tiene una vulnerabilidad de escape de symlink en versiones anteriores a la 0.225.9 en las herramientas de archivo del Agente ('read_file', 'edit_file'). Permite leer y escribir archivos fuera del directorio del proyecto cuando un proyecto contiene enlaces simbólicos que apuntan a rutas externas. Esto elude el límite de espacio de trabajo previsto y las protecciones de privacidad ('file_scan_exclusions', 'private_files'), lo que podría filtrar datos sensibles del usuario al LLM. La versión 0.225.9 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zed:zed:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.225.9",
            "matchCriteriaId" : "F2B65125-64EB-4054-BE09-6EFDEE894188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zed-industries/zed/security/advisories/GHSA-786m-x2vc-5235",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27976",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T00:16:27.293",
      "lastModified" : "2026-03-05T16:08:38.163",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar::Archive::unpack`) creates symlinks from the archive without validation, and the path guard (`writeable_path_from_extension`) only performs lexical prefix checks without resolving symlinks. An attacker can ship a tar that first creates a symlink inside the extension workdir pointing outside (e.g., `escape -> /`), then writes files through the symlink, causing writes to arbitrary host paths. This escapes the extension sandbox and enables code execution. Version 0.224.4 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Zed, un editor de código, tiene un instalador de extensiones que permite descargas tar/gzip. Antes de la versión 0.224.4, el extractor de tar ('async_tar::Archive::unpack') crea enlaces simbólicos (symlinks) desde el archivo sin validación, y el protector de rutas ('writeable_path_from_extension') solo realiza comprobaciones de prefijo léxico sin resolver enlaces simbólicos (symlinks). Un atacante puede enviar un tar que primero crea un enlace simbólico (symlink) dentro del directorio de trabajo de la extensión apuntando hacia afuera (por ejemplo, 'escape -&gt; /'), luego escribe archivos a través del enlace simbólico (symlink), provocando escrituras en rutas de host arbitrarias. Esto escapa de la sandbox de la extensión y permite la ejecución de código. La versión 0.224.4 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zed:zed:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.224.4",
            "matchCriteriaId" : "63C50DD7-F03F-4305-94DE-F5BFF201BA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zed-industries/zed/security/advisories/GHSA-59p4-3mhm-qm3r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27829",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:24.390",
      "lastModified" : "2026-03-09T20:47:35.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Astro is a web framework. In versions 9.0.0 through 9.5.3, a bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch content from unauthorized remote hosts. Astro provides an `inferSize` option that fetches remote images at render time to determine their dimensions. Remote image fetches are intended to be restricted to domains the site developer has manually authorized (using the `image.domains` or `image.remotePatterns` options). However, when `inferSize` is used, no domain validation is performed — the image is fetched from any host regardless of the configured restrictions. An attacker who can influence the image URL (e.g., via CMS content or user-supplied data) can cause the server to fetch from arbitrary hosts. This allows bypassing `image.domains` / `image.remotePatterns` restrictions to make server-side requests to unauthorized hosts. This includes the risk of server-side request forgery (SSRF) against internal network services and cloud metadata endpoints. Version 9.5.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Astro es un framework web. En las versiones 9.0.0 a 9.5.3, un error en la pipeline de imágenes de Astro permite eludir las restricciones de `image.domains` / `image.remotePatterns`, lo que permite al servidor obtener contenido de hosts remotos no autorizados. Astro proporciona una opción `inferSize` que obtiene imágenes remotas en el momento de la renderización para determinar sus dimensiones. La obtención de imágenes remotas está destinada a restringirse a dominios que el desarrollador del sitio ha autorizado manualmente (utilizando las opciones `image.domains` o `image.remotePatterns`). Sin embargo, cuando se utiliza `inferSize`, no se realiza ninguna validación de dominio — la imagen se obtiene de cualquier host independientemente de las restricciones configuradas. Un atacante que puede influir en la URL de la imagen (por ejemplo, a través de contenido de CMS o datos proporcionados por el usuario) puede hacer que el servidor obtenga contenido de hosts arbitrarios. Esto permite eludir las restricciones de `image.domains` / `image.remotePatterns` para realizar peticiones del lado del servidor a hosts no autorizados. Esto incluye el riesgo de falsificación de petición del lado del servidor (SSRF) contra servicios de red internos y puntos finales de metadatos en la nube. La versión 9.5.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:astro:\\@astrojs\\/node:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "4544AFCE-A719-4079-859C-E356B5871A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/withastro/astro/commit/e01e98b063e90d274c42130ec2a60cc0966622c9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/withastro/astro/security/advisories/GHSA-cj9f-h6r6-4cx2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27830",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:24.583",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances. Several c3p0 `ConnectionPoolDataSource` implementations have a property called `userOverridesAsString` which conceptually represents a `Map<String,Map<String,String>>`. Prior to v0.12.0, that property was maintained as a hex-encoded serialized object. Any attacker able to reset this property, on an existing `ConnectionPoolDataSource` or via maliciously crafted serialized objects or `javax.naming.Reference` instances could be tailored execute unexpected code on the application's `CLASSPATH`. The danger of this vulnerability was strongly magnified by vulnerabilities in c3p0's main dependency, mchange-commons-java. This library includes code that mirrors early implementations of JNDI functionality, including ungated support for remote `factoryClassLocation` values. Attackers could set c3p0's `userOverridesAsString` hex-encoded serialized objects that include objects \"indirectly serialized\" via JNDI references. Deserialization of those objects and dereferencing of the embedded `javax.naming.Reference` objects could provoke download and execution of malicious code from a remote `factoryClassLocation`. Although hazard presented by c3p0's vulnerabilites are exarcerbated by vulnerabilities in mchange-commons-java, use of Java-serialized-object hex as the format for a writable Java-Bean property, of objects that may be exposed across JNDI interfaces, represents a serious independent fragility. The `userOverridesAsString` property of c3p0 `ConnectionPoolDataSource` classes has been reimplemented to use a safe CSV-based format, rather than rely upon potentially dangerous Java object deserialization. c3p0-0.12.0+ and above depend upon mchange-commons-java 0.4.0+, which gates support for remote `factoryClassLocation` values by configuration parameters that default to restrictive values. c3p0 additionally enforces the new mchange-commons-java `com.mchange.v2.naming.nameGuardClassName` to prevent injection of unexpected, potentially remote JNDI names. There is no supported workaround for versions of c3p0 prior to 0.12.0."
      }, {
        "lang" : "es",
        "value" : "c3p0, una biblioteca de pooling de conexiones JDBC, es vulnerable al ataque a través de objetos serializados en Java creados maliciosamente e instancias de `javax.naming.Reference`. Varias implementaciones de `ConnectionPoolDataSource` de c3p0 tienen una propiedad llamada `userOverridesAsString` que representa conceptualmente un `Map&gt;`. Antes de la v0.12.0, esa propiedad se mantenía como un objeto serializado codificado en hexadecimal. Cualquier atacante capaz de restablecer esta propiedad, en un `ConnectionPoolDataSource` existente o a través de objetos serializados creados maliciosamente o instancias de `javax.naming.Reference`, podría ser manipulado para ejecutar código inesperado en el `CLASSPATH` de la aplicación. El peligro de esta vulnerabilidad fue fuertemente magnificado por vulnerabilidades en la dependencia principal de c3p0, mchange-commons-java. Esta biblioteca incluye código que refleja implementaciones tempranas de la funcionalidad JNDI, incluyendo soporte sin restricciones para valores remotos de `factoryClassLocation`. Los atacantes podrían establecer objetos serializados codificados en hexadecimal de `userOverridesAsString` de c3p0 que incluyen objetos 'serializados indirectamente' a través de referencias JNDI. La deserialización de esos objetos y la desreferenciación de los objetos `javax.naming.Reference` incrustados podrían provocar la descarga y ejecución de código malicioso desde un `factoryClassLocation` remoto. Aunque el peligro presentado por las vulnerabilidades de c3p0 se ve exacerbado por las vulnerabilidades en mchange-commons-java, el uso de hexadecimal de objetos serializados en Java como formato para una propiedad Java-Bean escribible, de objetos que pueden ser expuestos a través de interfaces JNDI, representa una grave fragilidad independiente. La propiedad `userOverridesAsString` de las clases `ConnectionPoolDataSource` de c3p0 ha sido reimplementada para usar un formato seguro basado en CSV, en lugar de depender de la deserialización de objetos Java potencialmente peligrosa. c3p0-0.12.0+ y versiones superiores dependen de mchange-commons-java 0.4.0+, que restringe el soporte para valores remotos de `factoryClassLocation` mediante parámetros de configuración que por defecto son valores restrictivos. c3p0 adicionalmente impone el nuevo `com.mchange.v2.naming.nameGuardClassName` de mchange-commons-java para prevenir la inyección de nombres JNDI inesperados, potencialmente remotos. No hay solución alternativa soportada para versiones de c3p0 anteriores a la 0.12.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.mchange.com/projects/c3p0/#configuring_security",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.mchange.com/projects/c3p0/#security-note",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27831",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:24.770",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rldns is an open source DNS server. Version 1.3 has a heap-based out-of-bounds read that leads to denial of service. Version 1.4 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "rldns es un servidor DNS de código abierto. La versión 2.3 tiene una lectura fuera de límites basada en el heap que conduce a denegación de servicio. La versión 1.4 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bluedragonsecurity/rldns-1.3-heap-out-of-bounds-vulnerability-fixed-in-rldns-1.4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/bluedragonsecurity/rldns/security/advisories/GHSA-fv38-45j4-g9x4",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/bluedragonsecurity/rldns_archives/blob/main/diff/rldns-1.4.diff",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://medium.com/@w1sdom/heap-based-buffer-over-read-vulnerability-in-rldns-1-3-5da3bccdc031",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/bluedragonsecurity/rldns/security/advisories/GHSA-fv38-45j4-g9x4",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27837",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:24.937",
      "lastModified" : "2026-02-28T00:58:17.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dottie provides nested object access and manipulation in JavaScript. Versions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132. The prototype pollution guard introduced in commit `7d3aee1` only validates the first segment of a dot-separated path, allowing an attacker to bypass the protection by placing `__proto__` at any position other than the first. Both `dottie.set()` and `dottie.transform()` are affected. Version 2.0.7 contains an updated fix to address the residual vulnerability."
      }, {
        "lang" : "es",
        "value" : "Dottie proporciona acceso y manipulación de objetos anidados en JavaScript. Las versiones 2.0.4 a 2.0.6 contienen una corrección incompleta para CVE-2023-26132. La protección contra la contaminación de prototipos introducida en el commit '7d3aee1' solo valida el primer segmento de una ruta separada por puntos, permitiendo a un atacante eludir la protección colocando '__proto__' en cualquier posición que no sea la primera. Tanto 'dottie.set()' como 'dottie.transform()' se ven afectados. La versión 2.0.7 contiene una corrección actualizada para abordar la vulnerabilidad residual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dottie_project:dottie:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.4",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "FF86BC0C-9F05-4A84-95F1-40400ECB4DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-4gxf-g5gf-22h4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/mickhansen/dottie.js/commit/7e8fa1345a4b46325f0eab8d7aeb1c4deaefdb14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mickhansen/dottie.js/security/advisories/GHSA-r5mx-6wc6-7h9w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mickhansen/dottie.js/security/advisories/GHSA-r5mx-6wc6-7h9w",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27840",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:25.103",
      "lastModified" : "2026-03-05T16:04:57.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. Starting in version 2.31.0 and prior to versions 3.4.7 and 4.11.0, opaque OIDC access tokens in the v2 format truncated to 80 characters are still considered valid.  Zitadel uses a symmetric AES encryption for opaque tokens. The cleartext payload is a concatenation of a couple of identifiers, such as a token ID and user ID. Internally Zitadel has 2 different versions of token payloads. v1 tokens are no longer created, but are still verified as to not invalidate existing session after upgrade. The cleartext payload has a format of `<token_id>:<user_id>`. v2 tokens distinguished further where the `token_id` is of the format `v2_<oidc_session_id>-at_<access_token_id>`. V1 token authZ/N session data is retrieved from the database using the (simple) `token_id` value and `user_id` value. The `user_id` (called `subject` in some parts of our code) was used as being the trusted user ID. V2 token authZ/N session data is retrieved from the database using the `oidc_session_id` and `access_token_id` and in this case the `user_id` from the token is ignored and taken from the session data in the database. By truncating the token to 80 chars, the user_id is now missing from the cleartext of the v2 token. The back-end still accepts this for above reasons. This issue is not considered exploitable, but may look awkward when reproduced. The patch in versions 4.11.0 and 3.4.7 resolves the issue by verifying the `user_id` from the token against the session data from the database. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidades de código abierto. A partir de la versión 2.31.0 y antes de las versiones 3.4.7 y 4.11.0, los tokens de acceso OIDC opacos en formato v2 truncados a 80 caracteres todavía se consideran válidos. Zitadel utiliza un cifrado AES simétrico para tokens opacos. La carga útil en texto claro es una concatenación de un par de identificadores, como un ID de token y un ID de usuario. Internamente, Zitadel tiene 2 versiones diferentes de cargas útiles de token. Los tokens v1 ya no se crean, pero aún se verifican para no invalidar las sesiones existentes después de la actualización. La carga útil en texto claro tiene un formato de ':'. Los tokens v2 se distinguen aún más donde el 'token_id' tiene el formato 'v2_-at_'. Los datos de sesión de authZ/N del token v1 se recuperan de la base de datos utilizando el valor (simple) de 'token_id' y el valor de 'user_id'. El 'user_id' (llamado 'subject' en algunas partes de nuestro código) se utilizaba como el ID de usuario de confianza. Los datos de sesión de authZ/N del token v2 se recuperan de la base de datos utilizando el 'oidc_session_id' y el 'access_token_id' y, en este caso, el 'user_id' del token se ignora y se toma de los datos de sesión en la base de datos. Al truncar el token a 80 caracteres, el 'user_id' ahora falta en el texto claro del token v2. El back-end todavía acepta esto por las razones mencionadas. Este problema no se considera explotable, pero puede parecer incómodo cuando se reproduce. El parche en las versiones 4.11.0 y 3.4.7 resuelve el problema verificando el 'user_id' del token contra los datos de sesión de la base de datos. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-302"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.31.0",
            "versionEndIncluding" : "2.71.19",
            "matchCriteriaId" : "D62A054C-6B24-4F4D-9587-C98EBF9EC49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.4.7",
            "matchCriteriaId" : "13AFE625-3EEE-4FC7-8F6A-BA4DDC111D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.11.0",
            "matchCriteriaId" : "3DA193AE-B1BE-4BDD-B4B2-3A59926CC0BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/releases/tag/v3.4.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/releases/tag/v4.11.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-6mq3-xmgp-pjm5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27884",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:25.293",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetExec is a network execution tool. Prior to version 1.5.1, the module spider_plus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as `../` in them. An attacker can craft a filename in an SMB share that includes these characters, which when spider_plus crawls and downloads, can write or overwrite arbitrary files. The issue is patched in v1.5.1. As a workaround, do not run spider_plus with DOWNLOAD=true against targets."
      }, {
        "lang" : "es",
        "value" : "NetExec es una herramienta de ejecución de red. Antes de la versión 1.5.1, el módulo spider_plus crea incorrectamente la ruta del archivo y la carpeta de salida al guardar archivos de recursos compartidos SMB. No tiene en cuenta que es posible que los recursos compartidos SMB de Linux contengan caracteres de salto de ruta como '../'. Un atacante puede crear un nombre de archivo en un recurso compartido SMB que incluya estos caracteres, lo que, cuando spider_plus rastrea y descarga, puede escribir o sobrescribir archivos arbitrarios. El problema está parcheado en la v1.5.1. Como solución alternativa, no ejecute spider_plus con DOWNLOAD=true contra los objetivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pennyw0rth/NetExec/commit/7d027f2774d0520b322d60f9c99b9ab3edb4035e",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Pennyw0rth/NetExec/issues/1120",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Pennyw0rth/NetExec/pull/1121",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Pennyw0rth/NetExec/security/advisories/GHSA-fccr-6qm2-7h27",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27888",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:25.470",
      "lastModified" : "2026-02-27T17:26:35.363",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing the `xfa` property of a reader or writer and the corresponding stream being compressed using `/FlateDecode`. This has been fixed in pypdf 6.7.3. As a workaround, apply the patch manually."
      }, {
        "lang" : "es",
        "value" : "pypdf es una biblioteca PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.7.3, un atacante que utiliza esta vulnerabilidad puede crear un PDF que provoca el agotamiento de la RAM. Esto requiere acceder a la propiedad 'xfa' de un lector o escritor y que el flujo correspondiente esté comprimido usando '/FlateDecode'. Esto ha sido corregido en pypdf 6.7.3. Como solución alternativa, aplique el parche manualmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.3",
            "matchCriteriaId" : "0D1A89CB-658B-4621-BAA0-A09F972C335C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/7a4c8246ed48d9d328fb596942271da47b6d109c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3658",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.7.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-x7hp-r3qg-r3cj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27896",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:25.630",
      "lastModified" : "2026-04-14T00:40:00.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1. Go's standard library performs case-insensitive matching of JSON keys to struct field tags — a field tagged json:\"method\" would also match \"Method\", \"METHOD\", etc. This violated the JSON-RPC 2.0 specification, which defines exact field names. A malicious MCP peer may have been able to send protocol messages with non-standard field casing that the SDK would silently accept. This had the potential for bypassing intermediary inspection and coss-implementation inconsistency. Go's standard JSON unmarshaling was replaced with a case-sensitive decoder in commit 7b8d81c. Users are advised to update to v1.3.1 to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "El SDK de Go MCP utilizaba la función estándar `encoding/json.Unmarshal` de Go para el análisis de mensajes del protocolo JSON-RPC y MCP en versiones anteriores a la 1.3.1. La biblioteca estándar de Go realiza una coincidencia que no distingue entre mayúsculas y minúsculas de las claves JSON con las etiquetas de campo de las estructuras — un campo etiquetado como json:'method' también coincidiría con 'Method', 'METHOD', etc. Esto violaba la especificación JSON-RPC 2.0, que define nombres de campo exactos. Un par MCP malicioso podría haber sido capaz de enviar mensajes de protocolo con un uso de mayúsculas y minúsculas no estándar en los campos que el SDK aceptaría silenciosamente. Esto tenía el potencial de eludir la inspección intermedia y la inconsistencia entre implementaciones. El desenmascaramiento JSON estándar de Go fue reemplazado por un decodificador que distingue entre mayúsculas y minúsculas en el commit 7b8d81c. Se aconseja a los usuarios actualizar a la versión 1.3.1 para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        }, {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:mcp_go_sdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "F490537C-6089-4989-A1B4-4072EADBA4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modelcontextprotocol/go-sdk/commit/7b8d81c264074404abdf5aa16e2cf0c2d9c64cc0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/modelcontextprotocol/go-sdk/security/advisories/GHSA-wvj2-96wp-fq3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27945",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:25.800",
      "lastModified" : "2026-03-05T16:04:24.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. Zitadel Action V2 (introduced as early preview in 2.59.0, beta in 3.0.0 and GA in 4.0.0) is a webhook based approach to allow developers act on API request to Zitadel and customize flows such the issue of a token. Zitadel's Action target URLs can point to local hosts, potentially allowing adversaries to gather internal network information and connect to internal services. When the URL points to a local host / IP address, an adversary might gather information about the internal network structure, the services exposed on internal hosts etc. This is sometimes called a Server-Side Request Forgery (SSRF). Zitadel Actions expect responses according to specific schemas, which reduces the threat vector. The patch in version 4.11.1 resolves the issue by checking the target URL against a denylist. By default localhost, resp. loopback IPs are denied. Note that this fix was only released on v4.x. Due to the stage (preview / beta) in which the functionality was in v2.x and v3.x, the changes that have been applied to it since then and the severity, respectively the actual thread vector, a backport to the corresponding versions was not feasible. Please check the workaround section for alternative solutions if an upgrade to v4.x is not possible. If an upgrade is not possible, prevent actions from using unintended endpoints by setting network policies or firewall rules in one's own infrastructure. Note that this is outside of the functionality provided by Zitadel."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidad de código abierto. Zitadel Action V2 (introducida como vista previa temprana en 2.59.0, beta en 3.0.0 y GA en 4.0.0) es un enfoque basado en webhooks para permitir a los desarrolladores actuar sobre peticiones API a Zitadel y personalizar flujos como la emisión de un token. Las URL de destino de las acciones de Zitadel pueden apuntar a hosts locales, lo que potencialmente permite a los adversarios recopilar información de la red interna y conectarse a servicios internos. Cuando la URL apunta a un host local / dirección IP, un adversario podría recopilar información sobre la estructura de la red interna, los servicios expuestos en hosts internos, etc. Esto a veces se denomina falsificación de petición del lado del servidor (SSRF). Las acciones de Zitadel esperan respuestas según esquemas específicos, lo que reduce el vector de amenaza. El parche en la versión 4.11.1 resuelve el problema comprobando la URL de destino contra una lista de denegación. Por defecto, localhost, resp. las IP de bucle invertido son denegadas. Tenga en cuenta que esta corrección solo se lanzó en v4.x. Debido a la etapa (vista previa / beta) en la que se encontraba la funcionalidad en v2.x y v3.x, los cambios que se le han aplicado desde entonces y la gravedad, respectivamente el vector de amenaza real, una retrocompatibilidad a las versiones correspondientes no fue factible. Consulte la sección de solución alternativa para soluciones alternativas si una actualización a v4.x no es posible. Si una actualización no es posible, evite que las acciones utilicen puntos finales no deseados configurando políticas de red o reglas de cortafuegos en la propia infraestructura. Tenga en cuenta que esto está fuera de la funcionalidad proporcionada por Zitadel."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.59.0",
            "versionEndIncluding" : "3.4.6",
            "matchCriteriaId" : "73FC526B-2AFD-4993-8601-63B7BE3AE63D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.11.1",
            "matchCriteriaId" : "13ECEC48-A3CD-4641-80F0-FA92B8317252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/releases/tag/v3.4.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/releases/tag/v4.11.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-7777-fhq9-592v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27946",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T01:16:25.973",
      "lastModified" : "2026-03-05T14:54:10.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. Prior to versions 4.11.1 and 3.4.7, a vulnerability in Zitadel's self-management capability allowed users to mark their email and phone as verified without going through an actual verification process. The patch in versions 4.11.1 and 3.4.7 resolves the issue by requiring the correct permission in case the verification flag is provided and only allows self-management of the email address and/or phone number itself. If an upgrade is not possible, an action (v2) could be used to prevent setting the verification flag on the own user."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidades de código abierto. Antes de las versiones 4.11.1 y 3.4.7, una vulnerabilidad en la capacidad de autogestión de Zitadel permitía a los usuarios marcar su correo electrónico y teléfono como verificados sin pasar por un proceso de verificación real. El parche en las versiones 4.11.1 y 3.4.7 resuelve el problema al requerir el permiso correcto en caso de que se proporcione la bandera de verificación y solo permite la autogestión de la propia dirección de correo electrónico y/o número de teléfono. Si una actualización no es posible, se podría usar una acción (v2) para evitar establecer la bandera de verificación en el propio usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.7",
            "matchCriteriaId" : "546DD2A6-08A7-4507-A744-0322D117AC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.11.0",
            "matchCriteriaId" : "3DA193AE-B1BE-4BDD-B4B2-3A59926CC0BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-282g-fhmx-xf54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1557",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T02:16:19.990",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Responsive Images para WordPress es vulnerable a salto de ruta en todas las versiones hasta la 1.0, inclusive, a través del parámetro 'src'. Esto permite a atacantes no autenticados leer el contenido de archivos arbitrarios en el servidor, que pueden contener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-images/tags/1.0/SBOutputFile.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-images/tags/1.0/WPResponsiveImages.php#L265",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-images/tags/1.0/image_handler.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-images/trunk/SBOutputFile.php#L33",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-images/trunk/WPResponsiveImages.php#L265",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-images/trunk/image_handler.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/22c6f81b-d456-44b9-ba6c-8b207a9ee6e1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22728",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-26T02:16:20.187",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitnami Sealed Secrets is vulnerable to a scope-widening attack during\nthe secret rotation (/v1/rotate) flow. The rotation handler derives the\nsealing scope for the newly encrypted output from untrusted\nspec.template.metadata.annotations present in the input SealedSecret.\nBy submitting a victim SealedSecret to the rotate endpoint with the\nannotation sealedsecrets.bitnami.com/cluster-wide=true injected into the\ntemplate metadata, a remote attacker can obtain a rotated version of the\nsecret that is cluster-wide. This bypasses original \"strict\" or\n\"namespace-wide\" constraints, allowing the attacker to retarget and unseal\nthe secret in any namespace or under any name to recover the plaintext\ncredentials."
      }, {
        "lang" : "es",
        "value" : "Bitnami Sealed Secrets es vulnerable a un ataque de ampliación de alcance durante el flujo de rotación de secretos (/v1/rotate). El gestor de rotación deriva el alcance de sellado para la salida recién cifrada de anotaciones no confiables spec.template.metadata.annotations presentes en el SealedSecret de entrada. Al enviar un SealedSecret víctima al endpoint de rotación con la anotación sealedsecrets.bitnami.com/cluster-wide=true inyectada en los metadatos de la plantilla, un atacante remoto puede obtener una versión rotada del secreto que es a nivel de clúster. Esto elude las restricciones originales 'strict' o 'namespace-wide', permitiendo al atacante reorientar y desellar el secreto en cualquier espacio de nombres o bajo cualquier nombre para recuperar las credenciales en texto plano."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bitnami-labs/sealed-secrets/security/advisories/GHSA-465p-v42x-3fmj",
        "source" : "security@vmware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27887",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:20.360",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size (e.g. tables with many rows or large content bodies), Spin may in some cases attempt to buffer the entire response before delivering it to the guest, which can lead to the host process running out of memory, panicking, and crashing. In addition, a malicious guest application could incrementally insert a large number of rows or values into a database and then retrieve them all in a single query, leading to large host allocations. Spin 3.6.1, SpinKube 0.6.2, and `containerd-shim-spin` 0.22.1 have been patched to address the issue. As a workaround, configure Spin to only allow access to trusted databases and HTTP servers which limit response sizes."
      }, {
        "lang" : "es",
        "value" : "Spin es una herramienta de desarrollo de código abierto para construir y ejecutar aplicaciones sin servidor impulsadas por WebAssembly. Cuando Spin está configurado para permitir conexiones a una base de datos o servidor web que podría devolver respuestas de tamaño ilimitado (p. ej., tablas con muchas filas o cuerpos de contenido grandes), Spin puede, en algunos casos, intentar almacenar en búfer la respuesta completa antes de entregarla al invitado, lo que puede llevar a que el proceso anfitrión se quede sin memoria, entre en pánico y se bloquee. Además, una aplicación invitada maliciosa podría insertar incrementalmente un gran número de filas o valores en una base de datos y luego recuperarlos todos en una sola consulta, lo que llevaría a grandes asignaciones del anfitrión. Spin 3.6.1, SpinKube 0.6.2 y 'containerd-shim-spin' 0.22.1 han sido parcheados para abordar el problema. Como solución alternativa, configure Spin para permitir el acceso solo a bases de datos y servidores HTTP de confianza que limiten los tamaños de respuesta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        }, {
          "lang" : "en",
          "value" : "CWE-774"
        }, {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spinframework/spin/security/advisories/GHSA-mv4f-6ffm-32wx",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27899",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:20.557",
      "lastModified" : "2026-03-02T18:52:39.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with `\"IsAdmin\": true` in the JSON body. After logging out and back in, the session picks up admin privileges from the database. When a user updates their own profile, the server parses the full JSON body into the user model, including the `IsAdmin` boolean field. A function responsible for preserving calculated or protected attributes pins certain fields to their database values (such as base model data, linked peer count, and authentication data), but it does not do this for `IsAdmin`. As a result, whatever value the client sends for `IsAdmin` is written directly to the database. After the exploit, the attacker has full admin access to the WireGuard VPN management portal. The problem was fixed in v2.1.3. The docker images for the tag 'latest' built from the master branch also include the fix."
      }, {
        "lang" : "es",
        "value" : "WireGuard Portal (o wg-portal) es un portal de configuración basado en web para la gestión de servidores WireGuard. Antes de la versión 2.1.3, cualquier usuario autenticado no administrador puede convertirse en un administrador completo enviando una única solicitud PUT a su propio endpoint de perfil de usuario con 'IsAdmin': true en el cuerpo JSON. Después de cerrar y volver a iniciar sesión, la sesión adquiere privilegios de administrador de la base de datos. Cuando un usuario actualiza su propio perfil, el servidor analiza el cuerpo JSON completo en el modelo de usuario, incluyendo el campo booleano IsAdmin. Una función responsable de preservar atributos calculados o protegidos fija ciertos campos a sus valores de base de datos (como datos del modelo base, recuento de pares vinculados y datos de autenticación), pero no lo hace para IsAdmin. Como resultado, cualquier valor que el cliente envíe para IsAdmin se escribe directamente en la base de datos. Después del exploit, el atacante tiene acceso de administrador completo al portal de gestión de VPN de WireGuard. El problema se solucionó en la v2.1.3. Las imágenes de docker para la etiqueta 'latest' construidas desde la rama master también incluyen la solución."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wgportal:wireguard_portal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "EBB8589E-9B73-45D5-A26F-84E7A69EE57B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h44z/wg-portal/security/advisories/GHSA-5rmx-256w-8mj9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27900",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:20.770",
      "lastModified" : "2026-03-11T23:22:38.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are explicitly enabled (for example in local troubleshooting, CI/CD jobs, or centralized log collection). If enabled, sensitive values may be written to logs and then retained, shared, or exported beyond the original execution environment. An authenticated user with access to provider debug logs (through log aggregation systems, CI/CD pipelines, or debug output) would thus be able to extract these sensitive credentials. Versions 3.9.0 and later sanitize debug logs by logging only non-sensitive metadata such as labels, regions, and resource IDs while redacting credentials, tokens, keys, scripts, and other sensitive content. Some other mitigations and workarounds are available. Disable Terraform/provider debug logging or set it to `WARN` level or above, restrict access to existing and historical logs, purge/retention-trim logs that may contain sensitive values, and/or rotate potentially exposed secrets/credentials."
      }, {
        "lang" : "es",
        "value" : "El proveedor de Terraform para Linode versiones anteriores a la v3.9.0 registró información sensible, incluyendo algunas contraseñas, contenido de StackScript y datos de almacenamiento de objetos, en los registros de depuración sin redacción. El registro de depuración del proveedor no está habilitado por defecto. Este problema se expone cuando los registros de depuración/proveedor se habilitan explícitamente (por ejemplo, en la resolución de problemas local, trabajos de CI/CD o recolección centralizada de registros). Si está habilitado, los valores sensibles pueden escribirse en los registros y luego retenerse, compartirse o exportarse más allá del entorno de ejecución original. Un usuario autenticado con acceso a los registros de depuración del proveedor (a través de sistemas de agregación de registros, pipelines de CI/CD o salida de depuración) podría así extraer estas credenciales sensibles. Las versiones 3.9.0 y posteriores sanean los registros de depuración registrando solo metadatos no sensibles como etiquetas, regiones e IDs de recursos, mientras redactan credenciales, tokens, claves, scripts y otro contenido sensible. Algunas otras mitigaciones y soluciones alternativas están disponibles. Deshabilite el registro de depuración de Terraform/proveedor o configúrelo al nivel WARN o superior, restrinja el acceso a los registros existentes e históricos, purgue/recorte por retención los registros que puedan contener valores sensibles, y/o rote los secretos/credenciales potencialmente expuestos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terraform:linode_provider:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.0",
            "matchCriteriaId" : "F84899D2-CBC5-46AA-9147-C6262BA3C0A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linode/terraform-provider-linode/commit/43a925d826b999f0355de3dc7330c55f496824c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/linode/terraform-provider-linode/pull/2269",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/linode/terraform-provider-linode/releases/tag/v3.9.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/linode/terraform-provider-linode/security/advisories/GHSA-5rc7-2jj6-mp64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27901",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:20.967",
      "lastModified" : "2026-03-05T14:49:14.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Svelte performance oriented web framework. Prior to version 5.53.5, the contents of `bind:innerText` and `bind:textContent` on `contenteditable` elements were not properly escaped. This could enable HTML injection and Cross-Site Scripting (XSS) if rendering untrusted data as the binding's initial value on the server. Version 5.53.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Framework web Svelte orientado al rendimiento. Antes de la versión 5.53.5, el contenido de `bind:innerText` y `bind:textContent` en elementos `contenteditable` no se escapaba correctamente. Esto podría permitir la inyección de HTML y cross-site scripting (XSS) si se renderizaban datos no confiables como el valor inicial del enlace en el servidor. La versión 5.53.5 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.53.5",
            "matchCriteriaId" : "94559490-A41A-4BD6-8BBB-2B7DE3ED2371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:5.53.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5AA08C57-D7C4-48C9-BC0C-98B99E99E42E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/svelte/commit/0df5abcae223058ceb95491470372065fb87951d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/svelte/releases/tag/svelte%405.53.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/svelte/security/advisories/GHSA-phwv-c562-gvmh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27902",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:21.170",
      "lastModified" : "2026-03-05T14:48:34.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Svelte performance oriented web framework. Prior to version 5.53.5, errors from `transformError` were not correctly escaped prior to being embedded in the HTML output, causing potential HTML injection and XSS if attacker-controlled content is returned from `transformError`. Version 5.53.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Framework web Svelte orientado al rendimiento. Antes de la versión 5.53.5, los errores de `transformError` no se escapaban correctamente antes de ser incrustados en la salida HTML, lo que causaba una posible inyección HTML y XSS si el contenido controlado por el atacante se devuelve desde `transformError`. La versión 5.53.5 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.53.0",
            "versionEndExcluding" : "5.53.5",
            "matchCriteriaId" : "EFAD88AD-F168-4A28-AAF0-17FBF87C580A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/svelte/commit/0298e979371bb583855c9810db79a70a551d22b9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/svelte/releases/tag/svelte%405.53.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/svelte/security/advisories/GHSA-qgvg-pr8v-6rr3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27903",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:21.353",
      "lastModified" : "2026-02-27T17:21:22.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue."
      }, {
        "lang" : "es",
        "value" : "minimatch es una utilidad de coincidencia mínima para convertir expresiones glob en objetos RegExp de JavaScript. Antes de las versiones 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5 y 3.1.3, 'matchOne()' realiza un retroceso recursivo ilimitado cuando un patrón glob contiene múltiples segmentos '**' (GLOBSTAR) no adyacentes y la ruta de entrada no coincide. La complejidad temporal es O(C(n, k)) -- binomial -- donde 'n' es el número de segmentos de ruta y 'k' es el número de globstars. Con k=11 y n=30, una llamada a la API predeterminada de 'minimatch()' se detiene durante aproximadamente 5 segundos. Con k=13, supera los 15 segundos. No existe memoización ni presupuesto de llamadas para limitar este comportamiento. Cualquier aplicación donde un atacante pueda influir en el patrón glob pasado a 'minimatch()' es vulnerable. La superficie de ataque realista incluye herramientas de compilación y ejecutores de tareas que aceptan argumentos glob proporcionados por el usuario (configuración de ESLint, Webpack, Rollup), sistemas multi-inquilino donde un inquilino configura reglas basadas en glob que se ejecutan en un proceso compartido, interfaces de administrador o desarrollador que aceptan configuración de reglas de ignorar o de filtro como globs, y pipelines de CI/CD que evalúan archivos de configuración enviados por el usuario que contienen patrones glob. Un atacante que pueda colocar un patrón diseñado en cualquiera de estas rutas puede detener el bucle de eventos de Node.js durante decenas de segundos por invocación. El patrón es de 56 bytes para una detención de 5 segundos y no requiere autenticación en contextos donde la entrada del patrón es parte de la característica. Las versiones 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5 y 3.1.3 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "7BC88877-A42C-4FBD-834C-95775A0CAD0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.2.5",
            "matchCriteriaId" : "39C23B15-E8E5-4847-A6EF-0940FA9F26BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.8",
            "matchCriteriaId" : "DA03D53D-D7C4-424A-A3BA-C8C3B90D3EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "B3677470-9515-47D2-B5FB-4FA1F700ED55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.4.8",
            "matchCriteriaId" : "A34E360D-31EA-43CF-957E-5D2208076EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.6",
            "matchCriteriaId" : "6391D830-3745-4C96-A6CF-A6C75CC221A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.7",
            "matchCriteriaId" : "3E6BE4CC-B5A1-4FC8-8776-9BEA2B10F6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.3",
            "matchCriteriaId" : "5B5B4C6E-7FBB-4C95-BD32-B3A16C6B1E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27904",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:21.760",
      "lastModified" : "2026-02-27T17:16:23.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue."
      }, {
        "lang" : "es",
        "value" : "minimatch es una utilidad de coincidencia mínima para convertir expresiones glob en objetos RegExp de JavaScript. Antes de las versiones 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5 y 3.1.4, los extglobs anidados '*( )' producen regexps con cuantificadores anidados ilimitados (por ejemplo, '(?:(?:a|b)*)*'), que exhiben retroceso catastrófico en V8. Con un patrón de 12 bytes '*(*(*(a|b)))' y una entrada no coincidente de 18 bytes, 'minimatch()' se detiene durante más de 7 segundos. Añadir un solo nivel de anidamiento o unos pocos caracteres de entrada eleva esto a minutos. Este es el hallazgo más grave: se activa por la API predeterminada de 'minimatch()' sin opciones especiales, y el patrón mínimo viable es de solo 12 bytes. El mismo problema afecta a los extglobs '+()' por igual. Las versiones 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5 y 3.1.4 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "41106C86-4D1E-40C7-851F-2564462205C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.2.5",
            "matchCriteriaId" : "39C23B15-E8E5-4847-A6EF-0940FA9F26BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.8",
            "matchCriteriaId" : "DA03D53D-D7C4-424A-A3BA-C8C3B90D3EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.2.2",
            "matchCriteriaId" : "B3677470-9515-47D2-B5FB-4FA1F700ED55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.4.8",
            "matchCriteriaId" : "A34E360D-31EA-43CF-957E-5D2208076EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.6",
            "matchCriteriaId" : "6391D830-3745-4C96-A6CF-A6C75CC221A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.7",
            "matchCriteriaId" : "3E6BE4CC-B5A1-4FC8-8776-9BEA2B10F6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.3",
            "matchCriteriaId" : "5B5B4C6E-7FBB-4C95-BD32-B3A16C6B1E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27938",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:21.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WPGraphQL provides a GraphQL API for WordPress sites. Prior to version 2.9.1, the `wp-graphql/wp-graphql` repository contains a GitHub Actions workflow (`release.yml`) vulnerable to OS command injection through direct use of `${{ github.event.pull_request.body }}` inside a `run:` shell block. When a pull request from `develop` to `master` is merged, the PR body is injected verbatim into a shell command, allowing arbitrary command execution on the Actions runner. Version 2.9.1 contains a fix for the vulnerability."
      }, {
        "lang" : "es",
        "value" : "WPGraphQL proporciona una API GraphQL para sitios de WordPress. Antes de la versión 2.9.1, el repositorio 'wp-graphql/wp-graphql' contiene un flujo de trabajo de GitHub Actions ('release.yml') vulnerable a la inyección de comandos del sistema operativo mediante el uso directo de '${{ github.event.pull_request.body }}' dentro de un bloque de shell 'run:'. Cuando se fusiona una solicitud de extracción de 'develop' a 'master', el cuerpo de la PR se inyecta textualmente en un comando de shell, lo que permite la ejecución arbitraria de comandos en el ejecutor de Actions. La versión 2.9.1 contiene una solución para la vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wp-graphql/wp-graphql/commit/de0c2d590593f1099546ad517106e454a498bc58",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-4q9f-mjxf-rx7x",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27941",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:22.160",
      "lastModified" : "2026-03-06T20:06:09.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix."
      }, {
        "lang" : "es",
        "value" : "OpenLIT es una plataforma de código abierto para ingeniería de IA. Antes de la versión 1.37.1, varios flujos de trabajo de GitHub Actions en el repositorio de GitHub de OpenLIT utilizan el evento 'pull_request_target' mientras extraen y ejecutan código no confiable de solicitudes de extracción bifurcadas. Estos flujos de trabajo se ejecutan con el contexto de seguridad del repositorio base, incluyendo un 'GITHUB_TOKEN' con privilegios de escritura y numerosos secretos sensibles (claves de API, tokens de base de datos/almacén vectorial y una clave de cuenta de servicio de Google Cloud). La versión 1.37.1 contiene una corrección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openlit:openlit_software_development_kit:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "1.36.2",
            "versionEndExcluding" : "1.37.1",
            "matchCriteriaId" : "4A765658-CA39-4F2B-94EF-64D0345C0F1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openlit/openlit/commit/4a62039a1659d6cbb8913172693f587b5fc2546c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openlit/openlit/security/advisories/GHSA-9jgv-x8cq-296q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27942",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:22.357",
      "lastModified" : "2026-03-02T14:54:48.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. Prior to version 5.3.8, the application crashes with stack overflow when user use XML builder with `preserveOrder:true`. Version 5.3.8 fixes the issue. As a workaround, use XML builder with `preserveOrder:false` or check the input data before passing to builder."
      }, {
        "lang" : "es",
        "value" : "fast-xml-parser permite a los usuarios validar XML, analizar XML a objeto JS o construir XML a partir de un objeto JS sin librerías basadas en C/C++ y sin callback. Antes de la versión 5.3.8, la aplicación falla con desbordamiento de pila cuando el usuario utiliza el constructor de XML con 'preserveOrder:true'. La versión 5.3.8 soluciona el problema. Como solución alternativa, utilice el constructor de XML con 'preserveOrder:false' o verifique los datos de entrada antes de pasarlos al constructor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naturalintelligence:fast-xml-parser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "35A8D5CD-CAD7-4002-83AE-C33D00BD6FCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naturalintelligence:fast-xml-parser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.3.8",
            "matchCriteriaId" : "E219549C-3C6A-44BE-A74E-A7AEF8020F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27943",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:22.547",
      "lastModified" : "2026-02-27T14:51:27.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, the eye exam (eye_mag) view loads data by `form_id` (or equivalent) without verifying that the form belongs to the current user’s patient/encounter context. An authenticated user can access or edit any patient’s eye exam by supplying another form ID; in some flows the session’s active patient may also be switched. A fix is available on the `main` branch of the OpenEMR GitHub repository."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de la práctica médica y de registros de salud electrónicos de código abierto y gratuita. En versiones hasta la 8.0.0 inclusive, la vista del examen ocular (eye_mag) carga datos por 'form_id' (o equivalente) sin verificar que el formulario pertenece al contexto de paciente/encuentro del usuario actual. Un usuario autenticado puede acceder o editar el examen ocular de cualquier paciente al proporcionar otro ID de formulario; en algunos flujos, el paciente activo de la sesión también puede ser cambiado. Una solución está disponible en la rama 'main' del repositorio de GitHub de OpenEMR."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0",
            "matchCriteriaId" : "1D995E4F-C6E0-47AC-9F5A-4E828BA9A292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/c87489bf63f2701b634d948279e104f2ed3df1c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-q96x-qw99-6xq9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27948",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:22.733",
      "lastModified" : "2026-02-28T00:56:59.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scripting via URL-parameter `?setck=...`. Version 1.20.9 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Copyparty es un servidor de archivos portátil. En versiones anteriores a la 1.20.9, un XSS permite cross-site scripting reflejado a través del parámetro URL '?setck=...'. La versión 1.20.9 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:9001:copyparty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20.9",
            "matchCriteriaId" : "2F7BCD65-4E73-467D-B9AF-D514441AEA9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/9001/copyparty/commit/31b2801fd041f803f4a3d5c12c7d7cb5419048bc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/9001/copyparty/security/advisories/GHSA-62cr-6wp5-q43h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27952",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:22.940",
      "lastModified" : "2026-03-02T18:43:36.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incorrectly whitelisted the `numpy` package as safe within the sandbox. This allowed authenticated users to bypass the sandbox and achieve arbitrary code execution on the API server. The escape path was through `numpy.ma.core.inspect`, which exposes Python's introspection utilities — including `sys.modules` — thereby providing access to unfiltered system-level functionality like `os.system`. This vulnerability affects the Agenta self-hosted platform (API server), not the SDK when used as a standalone Python library. The custom code evaluator runs server-side within the API process. The issue is fixed in v0.48.1 by removing `numpy` from the sandbox allowlist. In later versions (v0.60+), the RestrictedPython sandbox was removed entirely and replaced with a different execution model."
      }, {
        "lang" : "es",
        "value" : "Agenta es una plataforma LLMOps de código abierto. En Agenta-API, antes de la versión 0.48.1, existía una vulnerabilidad de escape de sandbox de Python en el evaluador de código personalizado de Agenta. Agenta utilizaba RestrictedPython como mecanismo de sandboxing para el código de evaluador proporcionado por el usuario, pero incluyó incorrectamente el paquete 'numpy' en la lista blanca como seguro dentro del sandbox. Esto permitía a los usuarios autenticados eludir el sandbox y lograr la ejecución de código arbitrario en el servidor API. La ruta de escape fue a través de 'numpy.ma.core.inspect', que expone las utilidades de introspección de Python —incluyendo 'sys.modules'—, proporcionando así acceso a funcionalidades a nivel de sistema sin filtrar como 'os.system'. Esta vulnerabilidad afecta a la plataforma autoalojada de Agenta (servidor API), no al SDK cuando se utiliza como una librería Python independiente. El evaluador de código personalizado se ejecuta en el lado del servidor dentro del proceso API. El problema se solucionó en la v0.48.1 eliminando 'numpy' de la lista de permitidos del sandbox. En versiones posteriores (v0.60+), el sandbox de RestrictedPython se eliminó por completo y se reemplazó por un modelo de ejecución diferente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentatech:agenta:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.48.1",
            "matchCriteriaId" : "97DA97AA-00E2-48A5-8EEE-2F922094E66F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Agenta-AI/agenta/security/advisories/GHSA-pmgp-2m3v-34mq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27954",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:23.147",
      "lastModified" : "2026-02-28T00:56:08.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints  (holdaction.php, blockuser.php, and transferchat.php) load chat objects by ID without calling `erLhcoreClassChat::hasAccessToRead()`, allowing operators to act on chats in departments they are not assigned to. Operators with the relevant role permissions (holduse, allowblockusers, allowtransfer) can hold, block users from, or transfer chats in departments they are not assigned to. This is a horizontal privilege escalation within one organization. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "Live Helper Chat es una aplicación de código abierto que permite sitios web de soporte en vivo. En versiones hasta la 4.52 inclusive, tres puntos finales de acción de chat (holdaction.PHP, blockuser.PHP y transferchat.PHP) cargan objetos de chat por ID sin llamar a 'erLhcoreClassChat::hasAccessToRead()', lo que permite a los operadores actuar sobre chats en departamentos a los que no están asignados. Los operadores con los permisos de rol relevantes (holduse, allowblockusers, allowtransfer) pueden retener, bloquear usuarios de, o transferir chats en departamentos a los que no están asignados. Esto es una escalada de privilegios horizontal dentro de una organización. A la fecha de publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livehelperchat:live_helper_chat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.52",
            "matchCriteriaId" : "25D6DDBF-F7C2-4269-B928-4EFAB78A8992"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LiveHelperChat/livehelperchat/security/advisories/GHSA-87wc-2p86-h3w7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27959",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:23.317",
      "lastModified" : "2026-02-28T00:55:26.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Koa is middleware for Node.js using ES2017 async functions. Prior to versions 3.1.2 and 2.16.4, Koa's `ctx.hostname` API performs naive parsing of the HTTP Host header, extracting everything before the first colon without validating the input conforms to RFC 3986 hostname syntax. When a malformed Host header containing a `@` symbol is received, `ctx.hostname` returns `evil[.]com` - an attacker-controlled value. Applications using `ctx.hostname` for URL generation, password reset links, email verification URLs, or routing decisions are vulnerable to Host header injection attacks. Versions 3.1.2 and 2.16.4 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Koa es un middleware para Node.js que utiliza funciones asíncronas de ES2017. Antes de las versiones 3.1.2 y 2.16.4, la API `ctx.hostname` de Koa realiza un análisis ingenuo del encabezado Host HTTP, extrayendo todo lo que precede al primer signo de dos puntos sin validar que la entrada cumpla con la sintaxis de nombre de host de RFC 3986. Cuando se recibe un encabezado Host malformado que contiene un símbolo '@', `ctx.hostname` devuelve 'evil[.]com' - un valor controlado por el atacante. Las aplicaciones que utilizan `ctx.hostname` para la generación de URL, enlaces de restablecimiento de contraseña, URL de verificación de correo electrónico o decisiones de enrutamiento son vulnerables a ataques de inyección de encabezado Host. Las versiones 3.1.2 y 2.16.4 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koajs:koa:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.16.14",
            "matchCriteriaId" : "47B8F313-898E-4B6D-936A-8F35AC7E7C20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koajs:koa:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "D5367576-B8D5-45EE-9214-D40A4E6E1049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/koajs/koa/commit/55ab9bab044ead4e82c70a30a4f9dc0fc9c1b6df",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/koajs/koa/commit/b76ddc01fdb703e51652b0fd131d16394cadcfeb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27961",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:23.483",
      "lastModified" : "2026-03-02T18:40:39.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when running evaluators. This does not affect standalone SDK usage — it only impacts self-hosted or managed Agenta platform deployments. Version 0.86.8 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Agenta es una plataforma LLMOps de código abierto. Una vulnerabilidad de inyección de plantillas del lado del servidor (SSTI) existe en versiones anteriores a la 0.86.8 en la renderización de plantillas del evaluador del servidor API de Agenta. Aunque el código vulnerable reside en el paquete SDK, se ejecuta del lado del servidor dentro del proceso de la API al ejecutar evaluadores. Esto no afecta el uso autónomo del SDK — solo afecta las implementaciones de la plataforma Agenta autoalojadas o gestionadas. La versión 0.86.8 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentatech:agenta:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.86.8",
            "matchCriteriaId" : "FF609F89-BEC4-4CB7-8818-18575B3796E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Agenta-AI/agenta/security/advisories/GHSA-cfr2-mp74-3763",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27965",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:23.647",
      "lastModified" : "2026-03-02T18:36:24.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that arbitrary code is later executed when that backup is restored. This can be used to provide that attacker with unintended/unauthorized access to the production deployment environment — allowing them to access information available in that environment as well as run any additional arbitrary commands there. Versions 23.0.3 and 22.0.4 contain a patch. Some workarounds are available. Those who intended to use an external decompressor then can always specify that decompressor command in the `--external-decompressor` flag value for `vttablet` and `vtbackup`. That then overrides any value specified in the manifest file. Those who did not intend to use an external decompressor, nor an internal one, can specify a value such as `cat` or `tee` in the `--external-decompressor` flag value for `vttablet` and `vtbackup` to ensure that a harmless command is always used."
      }, {
        "lang" : "es",
        "value" : "Vitess es un sistema de clústeres de bases de datos para el escalado horizontal de MySQL. Antes de las versiones 23.0.3 y 22.0.4, cualquier persona con acceso de lectura/escritura a la ubicación de almacenamiento de copias de seguridad (por ejemplo, un bucket S3) podía manipular los archivos de manifiesto de las copias de seguridad para que posteriormente se ejecutara código arbitrario al restaurar dichas copias. Esto se puede utilizar para proporcionar al atacante un acceso no deseado/no autorizado al entorno de implementación de producción, lo que le permite acceder a la información disponible en ese entorno, así como ejecutar cualquier comando arbitrario adicional en él. Las versiones 23.0.3 y 22.0.4 contienen un parche. Hay algunas soluciones alternativas disponibles. Aquellos que tengan intención de utilizar un descompresor externo pueden especificar siempre ese comando de descompresión en el valor del indicador '--external-decompressor' para 'vttablet' y 'vtbackup'. Esto anula cualquier valor especificado en el archivo de manifiesto. Aquellos que no tengan intención de utilizar un descompresor externo ni uno interno pueden especificar un valor como «cat» o «tee» en el valor del indicador '--external-decompressor' para 'vttablet' y 'vtbackup'a fin de garantizar que siempre se utilice un comando inofensivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:vitess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.0.4",
            "matchCriteriaId" : "918163A7-23FD-40D2-B3E3-7B7ED4E79E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:vitess:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.3",
            "matchCriteriaId" : "AB25FA07-F72B-445D-AA0C-E97D2E5E7CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitessio/vitess/commit/4c0173293907af9cb942a6683c465c3f1e9fdb5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/issues/19459",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/pull/19460",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/security/advisories/GHSA-8g8j-r87h-p36x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27966",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:23.833",
      "lastModified" : "2026-02-28T00:54:27.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.8.0, the CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which automatically exposes LangChain’s Python REPL tool (`python_repl_ast`). As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE). Version 1.8.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Langflow es una herramienta para construir y desplegar agentes y flujos de trabajo impulsados por IA. Antes de la versión 1.8.0, el nodo CSV Agent en Langflow codifica de forma rígida 'allow_dangerous_code=True', lo que expone automáticamente la herramienta Python REPL de LangChain ('python_repl_ast'). Como resultado, un atacante puede ejecutar comandos arbitrarios de Python y del sistema operativo en el servidor a través de inyección de prompts, lo que lleva a una ejecución remota de código (RCE) completa. La versión 1.8.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "2F2C3DDC-4ECF-4814-AC58-D3D09E54D9B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langflow-ai/langflow/commit/d8c6480daa17b2f2af0b5470cdf5c3d28dc9e508",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langflow-ai/langflow/security/advisories/GHSA-3645-fxcv-hqr4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27968",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:23.990",
      "lastModified" : "2026-03-02T18:04:44.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Packistry is a self-hosted Composer repository designed to handle PHP package distribution. Prior to version 0.13.0, RepositoryAwareController::authorize() verified token presence and ability, but did not enforce token expiration. As a result, an expired deploy token with the correct ability could still access repository endpoints (e.g., Composer metadata/download APIs). The fix in version 0.13.0 adds an explicit expiration check, and tests now test expired deploy tokens to ensure they are rejected."
      }, {
        "lang" : "es",
        "value" : "Packistry es un repositorio Composer autoalojado diseñado para gestionar la distribución de paquetes PHP. Antes de la versión 0.13.0, RepositoryAwareController::authorize() verificaba la presencia y la capacidad del token, pero no aplicaba la caducidad del mismo. Como resultado, un token de despliegue caducado con la capacidad correcta aún podía acceder a los puntos finales del repositorio (p. ej., las API de metadatos/descarga de Composer). La corrección en la versión 0.13.0 añade una verificación de caducidad explícita, y las pruebas ahora verifican los tokens de despliegue caducados para asegurar que sean rechazados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:packistryphp:packistry:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.0",
            "matchCriteriaId" : "568FC6E5-5DBD-429D-8265-A6FDB4129456"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/packistry/packistry/commit/7740b48f0f4ecbe63099fb056c8a146180f8b283",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/packistry/packistry/pull/276",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/packistry/packistry/security/advisories/GHSA-4r9m-jp53-vgmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27969",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:24.177",
      "lastModified" : "2026-02-27T18:28:21.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that files in the manifest — which may be files that they have also added to the manifest and backup contents — are written to any accessible location on restore. This is a common path traversal security issue. This can be used to provide that attacker with unintended/unauthorized access to the production deployment environment — allowing them to access information available in that environment as well as run any additional arbitrary commands there. Versions 23.0.3 and 22.0.4 contain a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Vitess es un sistema de clustering de bases de datos para el escalado horizontal de MySQL. Antes de las versiones 23.0.3 y 22.0.4, cualquier persona con acceso de lectura/escritura a la ubicación de almacenamiento de copias de seguridad (por ejemplo, un bucket de S3) puede manipular los archivos de manifiesto de copia de seguridad para que los archivos en el manifiesto — que pueden ser archivos que también hayan añadido al manifiesto y al contenido de la copia de seguridad — se escriban en cualquier ubicación accesible al restaurar. Este es un problema de seguridad común de salto de ruta. Esto puede usarse para proporcionar a ese atacante acceso no intencionado/no autorizado al entorno de despliegue de producción — permitiéndoles acceder a la información disponible en ese entorno, así como ejecutar cualquier comando arbitrario adicional allí. Las versiones 23.0.3 y 22.0.4 contienen un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:vitess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.0.4",
            "matchCriteriaId" : "918163A7-23FD-40D2-B3E3-7B7ED4E79E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:vitess:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.3",
            "matchCriteriaId" : "AB25FA07-F72B-445D-AA0C-E97D2E5E7CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitessio/vitess/commit/c565cab615bc962bda061dcd645aa7506c59ca4a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/pull/19470",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/security/advisories/GHSA-r492-hjgh-c9gw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27970",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:24.353",
      "lastModified" : "2026-02-27T17:11:53.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and 19.2.19 have a cross-Site scripting vulnerability in the Angular internationalization (i18n) pipeline. In ICU messages (International Components for Unicode), HTML from translated content was not properly sanitized and could execute arbitrary JavaScript. Angular i18n typically involves three steps, extracting all messages from an application in the source language, sending the messages to be translated, and then merging their translations back into the final source code. Translations are frequently handled by contracts with specific partner companies, and involve sending the source messages to a separate contractor before receiving final translations for display to the end user. If the returned translations have malicious content, it could be rendered into the application and execute arbitrary JavaScript. When successfully exploited, this vulnerability allows for execution of attacker controlled JavaScript in the application origin. Depending on the nature of the application being exploited this could lead to credential exfiltration and/or page vandalism. Several preconditions apply to the attack. The attacker must compromise the translation file (xliff, xtb, etc.). Unlike most XSS vulnerabilities, this issue is not exploitable by arbitrary users. An attacker must first compromise an application's translation file before they can escalate privileges into the Angular application client. The victim application must use Angular i18n, use one or more ICU messages, render an ICU message, and not defend against XSS via a safe content security policy. Versions 21.2.0, 21.1.6, 20.3.17, and 19.2.19 patch the issue. Until the patch is applied, developers should consider reviewing and verifying translated content received from untrusted third parties before incorporating it in an Angular application, enabling strict CSP controls to block unauthorized JavaScript from executing on the page, and enabling Trusted Types to enforce proper HTML sanitization."
      }, {
        "lang" : "es",
        "value" : "Angular es una plataforma de desarrollo para construir aplicaciones web móviles y de escritorio usando TypeScript/JavaScript y otros lenguajes. Versiones anteriores a 21.2.0, 21.1.16, 20.3.17 y 19.2.19 tienen una vulnerabilidad de cross-site scripting en la tubería de internacionalización (i18n) de Angular. En los mensajes ICU (International Components for Unicode), el HTML del contenido traducido no se sanitizaba correctamente y podía ejecutar JavaScript arbitrario. La i18n de Angular típicamente involucra tres pasos: extraer todos los mensajes de una aplicación en el lenguaje fuente, enviar los mensajes para ser traducidos y luego fusionar sus traducciones de vuelta al código fuente final. Las traducciones son frecuentemente manejadas por contratos con compañías asociadas específicas, e involucran el envío de los mensajes fuente a un contratista separado antes de recibir las traducciones finales para su visualización al usuario final. Si las traducciones devueltas tienen contenido malicioso, este podría ser renderizado en la aplicación y ejecutar JavaScript arbitrario. Cuando se explota con éxito, esta vulnerabilidad permite la ejecución de JavaScript controlado por el atacante en el origen de la aplicación. Dependiendo de la naturaleza de la aplicación explotada, esto podría llevar a la exfiltración de credenciales y/o vandalismo de página. Varias precondiciones se aplican al ataque. El atacante debe comprometer el archivo de traducción (xliff, xtb, etc.). A diferencia de la mayoría de las vulnerabilidades XSS, este problema no es explotable por usuarios arbitrarios. Un atacante debe primero comprometer el archivo de traducción de una aplicación antes de que pueda escalar privilegios en el cliente de la aplicación Angular. La aplicación víctima debe usar Angular i18n, usar uno o más mensajes ICU, renderizar un mensaje ICU y no defenderse contra XSS a través de una política de seguridad de contenido segura. Las versiones 21.2.0, 21.1.6, 20.3.17 y 19.2.19 parchean el problema. Hasta que se aplique el parche, los desarrolladores deberían considerar revisar y verificar el contenido traducido recibido de terceros no confiables antes de incorporarlo en una aplicación Angular, habilitar controles CSP estrictos para bloquear la ejecución de JavaScript no autorizado en la página y habilitar Trusted Types para forzar una sanitización HTML adecuada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "19.2.19",
            "matchCriteriaId" : "F31C6FF7-F094-4AA9-B370-584B3E38677A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.3.17",
            "matchCriteriaId" : "1041B5A8-1BDA-46DD-9D1A-AD34856FC36F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.1.6",
            "matchCriteriaId" : "66E854B9-DE6B-4A38-8CED-098738AF7AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.2.0:next0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E704C1A-A984-4809-B67D-50982182527A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.2.0:next1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2175852C-07A5-4A07-B632-3BDE8312D3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.2.0:next2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E9E0E76F-101F-44E4-AEC0-948593438B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.2.0:next3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2521B32B-A211-4570-98FB-FAEE33551018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular:angular:21.2.0:rc0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "07CCF64D-3102-4253-8A52-58CC3EA04DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/angular/angular/commit/306f367899dfc2e04238fecd3455547b5d54075d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/angular/angular/commit/7d58b798c626bb0e4e5f89ca8affdce4f352b232",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/angular/angular/commit/b85830953281ff3a1a77bbfe69019d352d509c93",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/angular/angular/pull/67183",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/angular/angular/security/advisories/GHSA-prjf-86w9-mfqv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27973",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T02:16:24.553",
      "lastModified" : "2026-03-12T20:26:51.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges can execute code in victim users' browsers/WebViews, potentially leading to session hijacking, data exfiltration, and unauthorized access to native device APIs. The issue is fixed in audiobookshelf-app version 0.12.0-beta, corresponding to audiobookshelf version 2.12.0."
      }, {
        "lang" : "es",
        "value" : "Audiobookshelf es un servidor de audiolibros y podcasts autoalojado. Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en versiones anteriores a la 0.12.0-beta de la aplicación móvil Audiobookshelf que permite la ejecución arbitraria de JavaScript a través de metadatos de biblioteca maliciosos. Atacantes con privilegios de modificación de biblioteca pueden ejecutar código en los navegadores/WebViews de los usuarios víctimas, lo que podría llevar al secuestro de sesión, la exfiltración de datos y el acceso no autorizado a las API de dispositivos nativos. El problema está solucionado en la versión 0.12.0-beta de audiobookshelf-app, correspondiente a la versión 2.12.0 de audiobookshelf."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiobookshelf:audiobookshelf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "018123B2-0D17-47FF-B878-D2FDCAF2BAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiobookshelf:audiobookshelf_mobile_app:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.12.0",
            "matchCriteriaId" : "BB5F33E7-D91F-4887-9CA4-59CF349DC460"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advplyr/audiobookshelf-app/commit/b2c2b625e3cf586562397f4c02e38059f2b8ef5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-2433-p93m-xhhg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2029",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T02:16:24.723",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[labb_pricing_item]` shortcode's `title` and `value` attributes in all versions up to, and including, 3.9.2 due to insufficient input sanitization and output escaping. Specifically, the plugin uses `htmlspecialchars_decode()` after `wp_kses_post()`, which decodes HTML entities back into executable code after sanitization has occurred. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Livemesh Addons for Beaver Builder para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de los atributos 'title' y 'value' del shortcode '[labb_pricing_item]' en todas las versiones hasta la 3.9.2, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida inadecuado. Específicamente, el plugin utiliza 'htmlspecialchars_decode()' después de 'wp_kses_post()', lo que decodifica las entidades HTML de nuevo a código ejecutable después de que se ha producido la sanitización. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/addons-for-beaver-builder/tags/3.9.2/includes/modules/labb-pricing-table/labb-pricing-table.php#L51",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/addons-for-beaver-builder/tags/3.9.2/includes/modules/labb-pricing-table/labb-pricing-table.php#L59",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8bc96b4f-256e-491b-9d27-de1adbf67643?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2489",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T02:16:24.890",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TP2WP Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Watched domains' textarea on the attachment importer settings page in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping when domains are saved via AJAX and rendered with echo implode() without esc_textarea(). This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the attachment importer settings page."
      }, {
        "lang" : "es",
        "value" : "El plugin TP2WP Importer para WordPress es vulnerable a cross-site scripting almacenado a través del área de texto 'Watched domains' en la página de configuración del importador de adjuntos en todas las versiones hasta la 1.1, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes cuando los dominios se guardan a través de AJAX y se renderizan con echo implode() sin esc_textarea(). Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a la página de configuración del importador de adjuntos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/tp2wp-importer/tags/1.1/attachments/templates/page.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/tp2wp-importer/trunk/attachments/templates/page.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4eacf7b7-100b-423d-920f-14f3e33f5f60?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2498",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T02:16:25.067",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Social Meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Social Meta para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.0.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-social-meta/tags/1.0.1/wpsm.php#L158",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-social-meta/tags/1.0.1/wpsm.php#L205",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-social-meta/trunk/wpsm.php#L158",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-social-meta/trunk/wpsm.php#L205",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/313906d3-3999-4255-b9ac-580d9d3e80e6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2499",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T02:16:25.233",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Logo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Custom Logo para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 2.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con permisos de nivel de administrador y superiores, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/custom-logo/tags/2.2/custom-logo.php#L18",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/custom-logo/trunk/custom-logo.php#L18",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/92705581-9a0d-4d23-9118-fec9100e4ce1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2506",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T02:16:25.410",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EM Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to the plugin storing attacker-controlled 'customer_name' data and rendering it in the admin customer list without output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the EMCC Customers page."
      }, {
        "lang" : "es",
        "value" : "El plugin EM Cost Calculator para WordPress es vulnerable a cross-site scripting almacenado en versiones hasta la 2.3.1, inclusive. Esto se debe a que el plugin almacena datos 'customer_name' controlados por el atacante y los renderiza en la lista de clientes del administrador sin escape de salida. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios que se ejecutan cuando un administrador ve la página de Clientes de EMCC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cost-calculator/tags/2.3.1/em-cost-calc-admin-page.php#L59",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cost-calculator/tags/2.3.1/em-cost-calculator-widget.php#L655",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cost-calculator/tags/2.3.1/em-cost-calculator-widget.php#L682",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cost-calculator/tags/2.3.1/em-cost-calculator-widget.php#L701",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1eef338a-ccc7-41a2-b87a-0945e39380d2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1779",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T03:16:03.827",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthenticated attackers to log in a newly registered user on the site who has the 'urm_user_just_created' user meta set."
      }, {
        "lang" : "es",
        "value" : "El plugin User Registration &amp; Membership para WordPress es vulnerable a una omisión de autenticación en versiones hasta la 5.1.2, inclusive. Esto se debe a una autenticación incorrecta en la función 'register_member'. Esto posibilita que atacantes no autenticados inicien sesión como un usuario recién registrado en el sitio que tiene establecida la meta de usuario 'urm_user_just_created'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.0.4/modules/membership/includes/AJAX.php#L246",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d99bc021-ba9e-4294-8dd2-c25bc8007d05?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23999",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:04.010",
      "lastModified" : "2026-03-02T15:47:56.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. In versions prior to 4.80.1, Fleet generated device lock and wipe PINs using a predictable algorithm based solely on the current Unix timestamp. Because no secret key or additional entropy was used, the resulting PIN could potentially be derived if the approximate time the device was locked is known. Fleet’s device lock and wipe commands generate a 6-digit PIN that is displayed to administrators for unlocking a device. In affected versions, this PIN was deterministically derived from the current timestamp. An attacker with physical possession of a locked device and knowledge of the approximate time the lock command was issued could theoretically predict the correct PIN within a limited search window. However, successful exploitation is constrained by multiple factors: Physical access to the device is required, the approximate lock time must be known, the operating system enforces rate limiting on PIN entry attempts, attempts would need to be spread over, and device wipe operations would typically complete before sufficient attempts could be made. As a result, this issue does not allow remote exploitation, fleet-wide compromise, or bypass of Fleet authentication controls. Version 4.80.1 contains a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Fleet es un software de gestión de dispositivos de código abierto. En versiones anteriores a la 4.80.1, Fleet generaba PINs de bloqueo y borrado de dispositivos utilizando un algoritmo predecible basado únicamente en la marca de tiempo Unix actual. Debido a que no se utilizaba ninguna clave secreta o entropía adicional, el PIN resultante podría derivarse potencialmente si se conoce la hora aproximada en que se bloqueó el dispositivo. Los comandos de bloqueo y borrado de dispositivos de Fleet generan un PIN de 6 dígitos que se muestra a los administradores para desbloquear un dispositivo. En las versiones afectadas, este PIN se derivaba de forma determinista de la marca de tiempo actual. Un atacante con posesión física de un dispositivo bloqueado y conocimiento de la hora aproximada en que se emitió el comando de bloqueo podría, teóricamente, predecir el PIN correcto dentro de una ventana de búsqueda limitada. Sin embargo, la explotación exitosa está limitada por múltiples factores: Se requiere acceso físico al dispositivo, se debe conocer la hora aproximada de bloqueo, el sistema operativo impone límites de velocidad en los intentos de entrada del PIN, los intentos tendrían que distribuirse, y las operaciones de borrado del dispositivo normalmente se completarían antes de que se pudieran realizar suficientes intentos. Como resultado, este problema no permite la explotación remota, el compromiso de toda la flota o la elusión de los controles de autenticación de Fleet. La versión 4.80.1 contiene un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 0.6,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.80.1",
            "matchCriteriaId" : "A1490125-39FE-4B90-AC5F-62B26ED3C509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-ppwx-5jq7-px2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24004",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:04.183",
      "lastModified" : "2026-03-02T15:49:08.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s Android MDM Pub/Sub handling could allow unauthenticated requests to trigger device unenrollment events. This may result in unauthorized removal of individual Android devices from Fleet management. If Android MDM is enabled, an attacker could send a crafted request to the Android Pub/Sub endpoint to unenroll a targeted Android device from Fleet without authentication. This issue does not grant access to Fleet, allow execution of commands, or provide visibility into device data. Impact is limited to disruption of Android device management for the affected device. Version 4.80.1 fixes the issue. If an immediate upgrade is not possible, affected Fleet users should temporarily disable Android MDM."
      }, {
        "lang" : "es",
        "value" : "Fleet es un software de gestión de dispositivos de código abierto. En versiones anteriores a la 4.80.1, una vulnerabilidad en el manejo de Pub/Sub de MDM de Android de Fleet podría permitir que solicitudes no autenticadas desencadenen eventos de desinscripción de dispositivos. Esto puede resultar en la eliminación no autorizada de dispositivos Android individuales de la gestión de Fleet. Si el MDM de Android está habilitado, un atacante podría enviar una solicitud manipulada al endpoint de Pub/Sub de Android para desinscribir un dispositivo Android objetivo de Fleet sin autenticación. Este problema no otorga acceso a Fleet, no permite la ejecución de comandos ni proporciona visibilidad de los datos del dispositivo. El impacto se limita a la interrupción de la gestión de dispositivos Android para el dispositivo afectado. La versión 4.80.1 corrige el problema. Si una actualización inmediata no es posible, los usuarios afectados de Fleet deberían deshabilitar temporalmente el MDM de Android."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.80.1",
            "matchCriteriaId" : "A1490125-39FE-4B90-AC5F-62B26ED3C509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-9pm7-6g36-6j78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25963",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:04.350",
      "lastModified" : "2026-02-27T16:05:58.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion API could allow a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. Fleet supports certificate templates that are scoped to individual teams. In affected versions, the batch deletion endpoint validated authorization using a user-supplied team identifier but did not verify that the certificate template IDs being deleted actually belonged to that team. As a result, a team administrator could delete certificate templates associated with other teams, potentially disrupting certificate-based workflows such as device enrollment, Wi-Fi authentication, VPN access, or other certificate-dependent configurations for the affected teams. This issue does not allow privilege escalation, access to sensitive data, or compromise of Fleet’s control plane. Impact is limited to integrity and availability of certificate templates across teams. Version 4.80.1 patches the issue. If an immediate upgrade is not possible, administrators should restrict access to certificate template management to trusted users and avoid delegating team administrator permissions where not strictly required."
      }, {
        "lang" : "es",
        "value" : "Fleet es un software de gestión de dispositivos de código abierto. En versiones anteriores a la 4.80.1, una verificación de autorización defectuosa en la API de eliminación de plantillas de certificados de Fleet podría permitir a un administrador de equipo eliminar plantillas de certificados pertenecientes a otros equipos dentro de la misma instancia de Fleet. Fleet admite plantillas de certificados con ámbito para equipos individuales. En las versiones afectadas, el endpoint de eliminación por lotes validaba la autorización utilizando un identificador de equipo proporcionado por el usuario, pero no verificaba que los ID de las plantillas de certificados que se estaban eliminando realmente pertenecieran a ese equipo. Como resultado, un administrador de equipo podría eliminar plantillas de certificados asociadas con otros equipos, interrumpiendo potencialmente flujos de trabajo basados en certificados como la inscripción de dispositivos, la autenticación Wi-Fi, el acceso VPN u otras configuraciones dependientes de certificados para los equipos afectados. Este problema no permite la escalada de privilegios, el acceso a datos sensibles o el compromiso del plano de control de Fleet. El impacto se limita a la integridad y disponibilidad de las plantillas de certificados entre equipos. La versión 4.80.1 corrige el problema. Si una actualización inmediata no es posible, los administradores deben restringir el acceso a la gestión de plantillas de certificados a usuarios de confianza y evitar delegar permisos de administrador de equipo donde no sean estrictamente necesarios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.2,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.80.1",
            "matchCriteriaId" : "A1490125-39FE-4B90-AC5F-62B26ED3C509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-5jvp-m9h4-253h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27465",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:04.520",
      "lastModified" : "2026-03-02T15:48:25.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s configuration API could expose Google Calendar service account credentials to authenticated users with low-privilege roles. This may allow unauthorized access to Google Calendar resources associated with the service account. Fleet returns configuration data through an API endpoint that is accessible to authenticated users, including those with the lowest-privilege “Observer” role. In affected versions, Google Calendar service account credentials were not properly obfuscated before being returned. As a result, a low-privilege user could retrieve the service account’s private key material. Depending on how the Google Calendar integration is configured, this could allow unauthorized access to calendar data or other Google Workspace resources associated with the service account. This issue does not allow escalation of privileges within Fleet or access to device management functionality. Version 4.80.1 patches the issue. If an immediate upgrade is not possible, administrators should remove the Google Calendar integration from Fleet and rotate the affected Google service account credentials."
      }, {
        "lang" : "es",
        "value" : "Fleet es software de gestión de dispositivos de código abierto. En versiones anteriores a la 4.80.1, una vulnerabilidad en la API de configuración de Fleet podría exponer las credenciales de la cuenta de servicio de Google Calendar a usuarios autenticados con roles de bajo privilegio. Esto podría permitir el acceso no autorizado a los recursos de Google Calendar asociados con la cuenta de servicio. Fleet devuelve datos de configuración a través de un endpoint de API que es accesible para usuarios autenticados, incluidos aquellos con el rol de menor privilegio 'Observer'. En las versiones afectadas, las credenciales de la cuenta de servicio de Google Calendar no se ofuscaron correctamente antes de ser devueltas. Como resultado, un usuario de bajo privilegio podría recuperar el material de la clave privada de la cuenta de servicio. Dependiendo de cómo esté configurada la integración de Google Calendar, esto podría permitir el acceso no autorizado a datos del calendario u otros recursos de Google Workspace asociados con la cuenta de servicio. Este problema no permite la escalada de privilegios dentro de Fleet ni el acceso a la funcionalidad de gestión de dispositivos. La versión 4.80.1 corrige el problema. Si una actualización inmediata no es posible, los administradores deben eliminar la integración de Google Calendar de Fleet y rotar las credenciales de la cuenta de servicio de Google afectadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.80.1",
            "matchCriteriaId" : "A1490125-39FE-4B90-AC5F-62B26ED3C509"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-2v6m-6xw3-6467",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27963",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:04.687",
      "lastModified" : "2026-02-27T17:08:05.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges can execute code in victim users' browsers, potentially leading to session hijacking and data exfiltration. Version 2.32.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Audiobookshelf es un servidor de audiolibros y podcasts autoalojado. Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en las versiones anteriores a la 2.32.0 de la aplicación, la cual permite la ejecución arbitraria de JavaScript a través de metadatos de biblioteca maliciosos. Atacantes con privilegios de modificación de biblioteca pueden ejecutar código en los navegadores de los usuarios víctimas, lo que podría llevar al secuestro de sesión y a la exfiltración de datos. La versión 2.32.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiobookshelf:audiobookshelf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.32.0",
            "matchCriteriaId" : "1CC230DA-0DE9-4D9F-AB14-18D06184617E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advplyr/audiobookshelf/commit/503f4611b221a5bde19024e657021670df204478",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-69cp-m725-wf78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27974",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:04.970",
      "lastModified" : "2026-03-12T20:23:44.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Audiobookshelf is a self-hosted audiobook and podcast server. A cross-site scripting (XSS) vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification privileges (or control over a malicious podcast RSS feed) can execute code in victim users' WebViews, potentially leading to session hijacking, data exfiltration, and unauthorized access to native device APIs. audiobookshelf-app version 0.12.0-beta fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Audiobookshelf es un servidor de audiolibros y podcasts autoalojado. Una vulnerabilidad de cross-site scripting (XSS) existe en versiones anteriores a la 0.12.0-beta de la aplicación móvil de Audiobookshelf que permite la ejecución arbitraria de JavaScript a través de metadatos de biblioteca maliciosos. Atacantes con privilegios de modificación de biblioteca (o control sobre un feed RSS de podcast malicioso) pueden ejecutar código en los WebViews de los usuarios víctimas, lo que podría llevar al secuestro de sesión, exfiltración de datos y acceso no autorizado a las API de dispositivos nativos. La versión 0.12.0-beta de audiobookshelf-app soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:audiobookshelf:audiobookshelf_mobile_app:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.12.0",
            "matchCriteriaId" : "BB5F33E7-D91F-4887-9CA4-59CF349DC460"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advplyr/audiobookshelf-app/commit/bab95530c8c3d7a4b4cec5b059da8b79ad50223e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-8c9r-pvrj-vcf5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27975",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T03:16:05.130",
      "lastModified" : "2026-03-02T17:24:59.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13."
      }, {
        "lang" : "es",
        "value" : "Ajenti es un panel de administración de servidor modular para Linux y BSD. Antes de la versión 2.2.13, un usuario no autenticado podría obtener acceso a un servidor para ejecutar código arbitrario en este servidor. Esto está corregido en la versión 2.2.13."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajenti:ajenti:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.13",
            "matchCriteriaId" : "46C8FC13-F70C-416C-8601-0E5AFF54545D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ajenti/ajenti/releases/tag/v2.2.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2356",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T03:16:05.293",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2 via the 'register_member' function, due to missing validation on the 'member_id' user controlled key. This makes it possible for unauthenticated attackers to delete arbitrary user accounts that newly registered on the site who has the 'urm_user_just_created' user meta set."
      }, {
        "lang" : "es",
        "value" : "El plugin User Registration &amp; Membership – Custom Registration Form, Login Form, and User Profile para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 5.1.2, inclusive, a través de la función 'register_member', debido a la falta de validación en la clave 'member_id' controlada por el usuario. Esto hace posible que atacantes no autenticados eliminen cuentas de usuario arbitrarias que se registraron recientemente en el sitio y que tienen configurado el metadato de usuario 'urm_user_just_created'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.1.1/modules/membership/includes/AJAX.php#L142",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a5a1ccb2-4f78-4855-a01d-b15f73407822?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1311",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T05:17:41.933",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload a malicious ZIP archive with path traversal sequences to write arbitrary files anywhere on the server, including executable PHP files. This can lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "El plugin Worry Proof Backup para WordPress es vulnerable a salto de ruta en todas las versiones hasta, e incluyendo, la 0.2.4 a través de la funcionalidad de carga de copias de seguridad. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, carguen un archivo ZIP malicioso con secuencias de salto de ruta para escribir archivos arbitrarios en cualquier lugar del servidor, incluyendo archivos PHP ejecutables. Esto puede llevar a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/worry-proof-backup/tags/0.2.4/inc/libs/upload-backup.php#L97",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/worry-proof-backup/trunk/inc/libs/upload-backup.php#L97",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ffd6ce0-2536-43a5-9925-438bc653d0e5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23703",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-26T06:17:15.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute arbitrary code with SYSTEM privilege."
      }, {
        "lang" : "es",
        "value" : "El instalador de FinalCode Cliente proporcionado por Digital Arts Inc. contiene una vulnerabilidad de permisos predeterminados incorrectos. Un usuario no administrativo puede ejecutar código arbitrario con privilegios de SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN48498976/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260226_01.pdf",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25191",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-26T06:17:16.200",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege."
      }, {
        "lang" : "es",
        "value" : "El instalador de FinalCode Cliente proporcionado por Digital Arts Inc. contiene un problema con la ruta de búsqueda de DLL. Si se dirige a un usuario a colocar un archivo DLL malicioso y el instalador en el mismo directorio y ejecuta el instalador, se podría ejecutar código arbitrario con el privilegio de ejecución del instalador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN48498976/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260226_01.pdf",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1692",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:18.160",
      "lastModified" : "2026-03-12T14:20:44.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to lure a successfully authenticated user to a malicious website.\n\nThis vulnerability only affects the following two endpoints: GraphicalData/js/signalR/connect and GraphicalData/js/signalR/reconnect."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación de origen faltante en WebSockets afecta a los servicios web GraphicalData utilizados por las características WebVue, WebScheduler, TouchVue y SnapVue de PcVue en la versión 12.0.0 hasta la 16.3.3 incluida. Podría permitir a un atacante remoto atraer a un usuario autenticado con éxito a un sitio web malicioso.\n\nEsta vulnerabilidad solo afecta a los dos siguientes endpoints: GraphicalData/js/signalR/connect y GraphicalData/js/signalR/reconnect."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1385"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "991311B5-07A8-4CA5-9A07-17D0110128AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1693",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:18.490",
      "lastModified" : "2026-03-12T14:23:22.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials."
      }, {
        "lang" : "es",
        "value" : "El flujo de tipo de concesión OAuth Credenciales de Contraseña del Propietario del Recurso (ROPC) sigue siendo utilizado por los servicios web utilizados por las características WebVue, WebScheduler, TouchVue y Snapvue de PcVue en la versión 12.0.0 hasta la 16.3.3 incluida a pesar de estar desaprobado. Podría permitir a un atacante remoto robar credenciales de usuario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-477"
        }, {
          "lang" : "en",
          "value" : "CWE-1390"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "991311B5-07A8-4CA5-9A07-17D0110128AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1694",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:18.763",
      "lastModified" : "2026-03-12T14:25:17.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration."
      }, {
        "lang" : "es",
        "value" : "Los encabezados HTTP son añadidos por la configuración predeterminada de IIS y ASP.net, y no son eliminados en la fase de despliegue de los servicios web utilizados por las funcionalidades WebVue, WebScheduler, TouchVue y SnapVue de PcVue desde la versión 12.0.0 hasta la 16.3.3 incluida. Esto expone innecesariamente información sensible sobre la configuración del servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "991311B5-07A8-4CA5-9A07-17D0110128AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1695",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:19.063",
      "lastModified" : "2026-03-12T13:50:53.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to trick a legitimate user into loading content from another site upon unsuccessful user authentication on an unknown application (unknown client_id).\n\nThis vulnerability only affects the error page of the OAuth server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad XSS afecta los servicios web OAuth utilizados por las características WebVue, WebScheduler, TouchVue y SnapVue de PcVue en la versión 12.0.0 hasta la 16.3.3 incluida. Podría permitir a un atacante remoto engañar a un usuario legítimo para que cargue contenido de otro sitio tras una autenticación de usuario fallida en una aplicación desconocida (client_id desconocido).\n\nEsta vulnerabilidad solo afecta la página de error del servidor OAuth."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "991311B5-07A8-4CA5-9A07-17D0110128AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1696",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:19.323",
      "lastModified" : "2026-03-12T14:26:15.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some HTTP security headers are not properly set by the web server when sending responses to the client application."
      }, {
        "lang" : "es",
        "value" : "Algunas cabeceras de seguridad HTTP no se establecen correctamente por el servidor web al enviar respuestas a la aplicación cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "991311B5-07A8-4CA5-9A07-17D0110128AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1697",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:19.620",
      "lastModified" : "2026-03-12T14:27:33.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included."
      }, {
        "lang" : "es",
        "value" : "Faltan los atributos Secure y SameSite en los servicios web GraphicalData y la aplicación web WebClient de PcVue en las versiones 12.0.0 hasta la 16.3.3 incluida."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-614"
        }, {
          "lang" : "en",
          "value" : "CWE-1275"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "991311B5-07A8-4CA5-9A07-17D0110128AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1698",
      "sourceIdentifier" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
      "published" : "2026-02-26T08:16:19.897",
      "lastModified" : "2026-03-12T14:30:52.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior.\n\nThis vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout\nof the WebClient and WebScheduler web apps."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ataque de encabezado Host HTTP afecta a las aplicaciones web WebClient y WebScheduler de PcVue en las versiones 15.0.0 hasta la 16.3.3 incluidas, permitiendo a un atacante remoto inyectar cargas útiles maliciosas que manipulan el comportamiento del lado del servidor.\n\nEsta vulnerabilidad solo afecta a los puntos finales /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback y /Authentication/Logout de las aplicaciones web WebClient y WebScheduler."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Clear",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-644"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndIncluding" : "15.2.13",
            "matchCriteriaId" : "1A2EFF1A-72B6-4643-A12D-A3D21F733578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.3.4",
            "matchCriteriaId" : "36C7C670-9A8E-49CD-A04C-8426A4C0C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pcvue.com/security/#SB2026-2",
        "source" : "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28083",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-26T09:16:14.857",
      "lastModified" : "2026-04-23T15:37:22.883",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en UX-themes Flatsome flatsome permite XSS Almacenado. Este problema afecta a Flatsome: desde n/a hasta &lt;= 3.20.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/flatsome/vulnerability/wordpress-flatsome-theme-3-20-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28131",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-26T09:16:15.050",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Data.This issue affects Elementor Addon Elements: from n/a through <= 1.14.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inserción de información sensible en datos enviados en WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder permite recuperar datos sensibles incrustados. Este problema afecta a Elementor Addon Elements: desde n/a hasta &lt;= 1.14.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/addon-elements-for-elementor-page-builder/vulnerability/wordpress-elementor-addon-elements-plugin-1-14-4-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28132",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-26T09:16:15.217",
      "lastModified" : "2026-04-28T15:16:27.130",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Code Injection.This issue affects WooCommerce Photo Reviews: from n/a through <= 1.4.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Inadecuada de Etiquetas HTML Relacionadas con Scripts en una Página Web (XSS Básico) en villatheme WooCommerce Photo Reviews woocommerce-photo-reviews permite la Inyección de Código. Este problema afecta a WooCommerce Photo Reviews: desde n/a hasta &lt;= 1.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woocommerce-photo-reviews/vulnerability/wordpress-woocommerce-photo-reviews-plugin-1-4-4-content-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28136",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-26T09:16:15.363",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from n/a through <= 6.9.12."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') vulnerabilidad en VeronaLabs WP SMS wp-sms permite la inyección SQL. Este problema afecta a WP SMS: desde n/a hasta &lt;= 6.9.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wp-sms/vulnerability/wordpress-wp-sms-plugin-6-9-12-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28138",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-02-26T09:16:15.510",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en Stylemix uListing ulisting permite la inyección de objetos. Este problema afecta a uListing: desde n/a hasta &lt;= 2.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-2-0-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1198",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-26T12:15:58.550",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in \"Obroty na kontach\" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed.\nThis issue was fixed in 6.30@A04.4_u06."
      }, {
        "lang" : "es",
        "value" : "SIMPLE.ERP es vulnerable a la inyección SQL en la funcionalidad de búsqueda en la ventana 'Obroty na kontach'. La falta de validación de entrada permite a un atacante autenticado preparar una consulta maliciosa a la base de datos que será ejecutada.\nEste problema fue solucionado en 6.30@A04.4_u06."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/02/CVE-2026-1198",
        "source" : "cvd@cert.pl"
      }, {
        "url" : "https://simple.com.pl/",
        "source" : "cvd@cert.pl"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2677",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-26T13:16:16.740",
      "lastModified" : "2026-03-02T17:15:51.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting Reflejado (XSS) en la plataforma web A3factura, en el parámetro 'name', en el endpoint 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management', lo que podría permitir a un atacante ejecutar código arbitrario en el navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolterskluwer:a3factura:4.111.2:rev.1:*:*:*:*:*:*",
            "matchCriteriaId" : "463E4777-35F8-4E5F-80BD-790CE98A2975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-a3factura-software",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2678",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-26T13:16:16.917",
      "lastModified" : "2026-03-02T17:12:37.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting Reflejado (XSS) en la plataforma web A3factura, en el parámetro 'name', parámetro 'name', en el endpoint 'a3factura-app.wolterskluwer.es/#/incomes/customers', lo que podría permitir a un atacante ejecutar código arbitrario en el navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolterskluwer:a3factura:4.111.2:rev.1:*:*:*:*:*:*",
            "matchCriteriaId" : "463E4777-35F8-4E5F-80BD-790CE98A2975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-a3factura-software",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2679",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-26T13:16:17.080",
      "lastModified" : "2026-03-02T16:58:13.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting Reflejado (XSS) en la plataforma web A3factura, en el parámetro 'customerName', en el endpoint 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices', lo que podría permitir a un atacante ejecutar código arbitrario en el navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolterskluwer:a3factura:4.111.2:rev.1:*:*:*:*:*:*",
            "matchCriteriaId" : "463E4777-35F8-4E5F-80BD-790CE98A2975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-a3factura-software",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2680",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-02-26T13:16:17.253",
      "lastModified" : "2026-03-02T16:32:48.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) Reflejado en la plataforma web A3factura, en el parámetro 'customerVATNumber', en el endpoint 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes', lo que podría permitir a un atacante ejecutar código arbitrario en el navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolterskluwer:a3factura:4.111.2:rev.1:*:*:*:*:*:*",
            "matchCriteriaId" : "463E4777-35F8-4E5F-80BD-790CE98A2975"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-a3factura-software",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26077",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T15:17:36.653",
      "lastModified" : "2026-03-02T21:53:56.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints (SendGrid, Mailjet, Mandrill, Postmark, SparkPost) in the `WebhooksController` accepted requests without a valid authentication token when no token was configured. This allowed unauthenticated attackers to forge webhook payloads and artificially inflate user bounce scores, potentially causing legitimate user emails to be disabled. The Mailpace endpoint had no token validation at all. Starting in versions 2025.12.2, 2026.1.1, and 2026.2.0, all webhook endpoints reject requests with a 406 response when no authentication token is configured. As a workaround, ensure that webhook authentication tokens are configured for all email provider integrations in site settings (e.g., `sendgrid_verification_key`, `mailjet_webhook_token`, `postmark_webhook_token`, `sparkpost_webhook_token`). There's no current workaround for mailpace before getting this fix."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, varios puntos finales de webhook (SendGrid, Mailjet, Mandrill, Postmark, SparkPost) en el 'WebhooksController' aceptaban solicitudes sin un token de autenticación válido cuando no se había configurado ningún token. Esto permitía a atacantes no autenticados falsificar cargas útiles de webhook e inflar artificialmente las puntuaciones de rebote de los usuarios, lo que podría provocar la desactivación de correos electrónicos legítimos de usuarios. El punto final de Mailpace no tenía ninguna validación de token. A partir de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, todos los puntos finales de webhook rechazan las solicitudes con una respuesta 406 cuando no hay un token de autenticación configurado. Como solución alternativa, asegúrese de que los tokens de autenticación de webhook estén configurados para todas las integraciones de proveedores de correo electrónico en la configuración del sitio (p. ej., 'sendgrid_verification_key', 'mailjet_webhook_token', 'postmark_webhook_token', 'sparkpost_webhook_token'). No hay una solución alternativa actual para Mailpace antes de obtener esta corrección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-j67c-53j2-4hfw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2244",
      "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
      "published" : "2026-02-26T15:17:45.250",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a built-in startup script.\n\nAll instances after January 30th, 2026 have been patched to protect from this vulnerability. No user action is required for this."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Google Cloud Vertex AI Workbench desde el 21/7/2025 hasta el 30/1/2026 permite a un atacante exfiltrar tokens de acceso válidos de Google Cloud de otros usuarios mediante el abuso de un script de inicio incorporado.\n\nTodas las instancias posteriores al 30 de enero de 2026 han sido parcheadas para protegerse de esta vulnerabilidad. No se requiere ninguna acción del usuario para esto."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "CLEAR"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloud.google.com/vertex-ai/docs/workbench/release-notes#February_20_2026",
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3071",
      "sourceIdentifier" : "6f8de1f0-f67e-45a6-b68f-98777fdb759c",
      "published" : "2026-02-26T15:17:48.803",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model."
      }, {
        "lang" : "es",
        "value" : "Deserialización de datos no confiables en la clase LanguageModel de Flair desde las versiones 0.4.1 hasta las más recientes son vulnerables a ejecución de código arbitrario al cargar un modelo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "6f8de1f0-f67e-45a6-b68f-98777fdb759c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "6f8de1f0-f67e-45a6-b68f-98777fdb759c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hiddenlayer.com/sai-security-advisory/2026-02-flair",
        "source" : "6f8de1f0-f67e-45a6-b68f-98777fdb759c"
      }, {
        "url" : "https://www.hiddenlayer.com/sai-security-advisory/2026-02-flair",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26078",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T16:24:06.997",
      "lastModified" : "2026-03-02T21:52:09.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, when the `patreon_webhook_secret` site setting is blank, an attacker can forge valid webhook signatures by computing an HMAC-MD5 with an empty string as the key. Since the request body is known to the sender, the attacker can produce a matching signature and send arbitrary webhook payloads. This allows unauthorized creation, modification, or deletion of Patreon pledge data and triggering patron-to-group synchronization. This vulnerability is patched in versions 2025.12.2, 2026.1.1, and 2026.2.0. The fix rejects webhook requests when the webhook secret is not configured, preventing signature forgery with an empty key. As a workaround, configure the `patreon_webhook_secret` site setting with a strong, non-empty secret value. When the secret is non-empty, an attacker cannot forge valid signatures without knowing the secret."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, cuando la configuración del sitio 'patreon_webhook_secret' está en blanco, un atacante puede falsificar firmas de webhook válidas calculando un HMAC-MD5 con una cadena vacía como clave. Dado que el cuerpo de la solicitud es conocido por el remitente, el atacante puede producir una firma coincidente y enviar cargas útiles de webhook arbitrarias. Esto permite la creación, modificación o eliminación no autorizada de datos de promesas de Patreon y el desencadenamiento de la sincronización de mecenas a grupo. Esta vulnerabilidad está parcheada en las versiones 2025.12.2, 2026.1.1 y 2026.2.0. La corrección rechaza las solicitudes de webhook cuando el secreto de webhook no está configurado, evitando la falsificación de firmas con una clave vacía. Como solución alternativa, configure la configuración del sitio 'patreon_webhook_secret' con un valor secreto fuerte y no vacío. Cuando el secreto no está vacío, un atacante no puede falsificar firmas válidas sin conocer el secreto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-frx4-wg35-4r68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26207",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T16:24:07.163",
      "lastModified" : "2026-03-02T21:51:04.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, `discourse-policy` plugin allows any authenticated user to interact with policies on posts they do not have permission to view. The `PolicyController` loads posts by ID without verifying the current user's access, enabling policy group members to accept/unaccept policies on posts in private categories or PMs they cannot see and any authenticated user to enumerate which post IDs have policies attached via differentiated error responses (information disclosure). The issue is patched in versions 2025.12.2, 2026.1.1, and 2026.2.0 by adding a `guardian.can_see?(@post)` check in the `set_post` before_action, ensuring post visibility is verified before any policy action is processed. As a workaround, disabling the discourse-policy plugin (`policy_enabled = false`) eliminates the vulnerability. There is no other workaround without upgrading."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, el plugin 'discourse-policy' permite a cualquier usuario autenticado interactuar con políticas en publicaciones que no tienen permiso para ver. El 'PolicyController' carga publicaciones por ID sin verificar el acceso del usuario actual, permitiendo a los miembros del grupo de políticas aceptar/rechazar políticas en publicaciones en categorías privadas o mensajes privados (PMs) que no pueden ver y a cualquier usuario autenticado enumerar qué IDs de publicaciones tienen políticas adjuntas a través de respuestas de error diferenciadas (revelación de información). El problema se ha parcheado en las versiones 2025.12.2, 2026.1.1 y 2026.2.0 al añadir una verificación 'guardian.can_see?(@post)' en la acción previa 'set_post', asegurando que la visibilidad de la publicación se verifica antes de que se procese cualquier acción de política. Como solución alternativa, deshabilitar el plugin discourse-policy ('policy_enabled = false') elimina la vulnerabilidad. No hay otra solución alternativa sin actualizar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-jr4h-w6p5-w55r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26228",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T16:24:07.343",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalization or directory containment checks, allowing an authenticated attacker with network reachability to the Remote Access Server to request files outside the intended directory. The impact is bounded by the Android application sandbox and storage restrictions, typically limiting exposure to app-internal and app-specific external storage."
      }, {
        "lang" : "es",
        "value" : "VideoLAN VLC para Android anterior a la versión 3.7.0 contiene una vulnerabilidad de salto de ruta en el enrutamiento del servidor de acceso remoto para el endpoint autenticado GET /download. El parámetro de consulta 'file' se concatena en una ruta del sistema de archivos bajo el directorio de descarga configurado sin comprobaciones de canonicalización o contención de directorio, permitiendo a un atacante autenticado con accesibilidad de red al servidor de acceso remoto solicitar archivos fuera del directorio previsto. El impacto está limitado por el sandbox de la aplicación Android y las restricciones de almacenamiento, lo que normalmente limita la exposición al almacenamiento interno de la aplicación y al almacenamiento externo específico de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/videolan/vlc-android/releases/tag/3.7.0",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.videolan.org/vlc/download-android.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/vlc-for-android-remote-access-path-traversal",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26265",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T16:24:07.543",
      "lastModified" : "2026-03-02T21:37:36.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, an IDOR vulnerability in the directory items endpoint allows any user, including anonymous users, to retrieve private user field values for all users in the directory. The `user_field_ids` parameter in `DirectoryItemsController#index` accepts arbitrary user field IDs without authorization checks, bypassing the visibility restrictions (`show_on_profile` / `show_on_user_card`) that are enforced elsewhere (e.g., `UserCardSerializer` via `Guardian#allowed_user_field_ids`). An attacker can request `GET /directory_items.json?period=all&user_field_ids=<id>` with any private field ID and receive that field's value for every user in the directory response. This enables bulk exfiltration of private user data such as phone numbers, addresses, or other sensitive custom fields that admins have explicitly configured as non-public. The issue is patched in versions 2025.12.2, 2026.1.1, and 2026.2.0 by filtering `user_field_ids` against `UserField.public_fields` for non-staff users before building the custom field map. As a workaround, site administrators can remove sensitive data from private user fields, or disable the user directory via the `enable_user_directory` site setting."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, una vulnerabilidad IDOR en el endpoint de elementos del directorio permite a cualquier usuario, incluidos los usuarios anónimos, recuperar valores de campos de usuario privados para todos los usuarios en el directorio. El parámetro 'user_field_ids' en 'DirectoryItemsController#index' acepta IDs de campos de usuario arbitrarios sin comprobaciones de autorización, eludiendo las restricciones de visibilidad ('show_on_profile' / 'show_on_user_card') que se aplican en otros lugares (por ejemplo, 'UserCardSerializer' a través de 'Guardian#allowed_user_field_ids'). Un atacante puede solicitar 'GET /directory_items.json?period=all&amp;user_field_ids=' con cualquier ID de campo privado y recibir el valor de ese campo para cada usuario en la respuesta del directorio. Esto permite la exfiltración masiva de datos de usuario privados como números de teléfono, direcciones u otros campos personalizados sensibles que los administradores han configurado explícitamente como no públicos. El problema está parcheado en las versiones 2025.12.2, 2026.1.1 y 2026.2.0 filtrando 'user_field_ids' contra 'UserField.public_fields' para usuarios que no son personal antes de construir el mapa de campos personalizados. Como solución alternativa, los administradores del sitio pueden eliminar datos sensibles de los campos de usuario privados, o deshabilitar el directorio de usuarios a través de la configuración del sitio 'enable_user_directory'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-crxf-p6jm-vpgw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28295",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-26T16:24:09.370",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en el backend FTP de GVfs. Un servidor FTP malicioso puede explotar esta vulnerabilidad al proporcionar una dirección IP y un puerto arbitrarios en su respuesta de modo pasivo (PASV). El cliente confía incondicionalmente en esta información e intenta conectarse al endpoint especificado, lo que permite al servidor malicioso sondear puertos abiertos accesibles desde la red del cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-28295",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2443004",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28296",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-26T16:24:09.580",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en el backend FTP de GVfs. Un atacante remoto podría explotar esta vulnerabilidad de validación de entrada al proporcionar rutas de archivo especialmente diseñadas que contienen secuencias de retorno de carro y salto de línea (CRLF). Estas secuencias no saneadas permiten al atacante terminar comandos FTP previstos e inyectar comandos FTP arbitrarios, lo que podría llevar a la ejecución de código arbitrario u otros impactos graves."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-28296",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2443003",
        "source" : "secalert@redhat.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23747",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T18:23:06.317",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The golioth_payload_as_int() and golioth_payload_as_float() helpers copy network-supplied payload data into fixed-size stack buffers using memcpy() with a length derived from payload_size. The only length checks are guarded by assert(); in release builds, the asserts are compiled out and memcpy() may copy an unbounded payload_size. Payloads larger than 12 bytes (int) or 32 bytes (float) can overflow the stack, resulting in a crash/denial of service. This is reachable via LightDB State on_payload with a malicious server or MITM."
      }, {
        "lang" : "es",
        "value" : "La versión 0.10.0 del SDK de firmware de Golioth anterior a la 0.22.0, corregida en el commit 48f521b, contiene un desbordamiento de búfer basado en pila en Payload Utils. Las funciones auxiliares golioth_payload_as_int() y golioth_payload_as_float() copian datos de carga útil suministrados por la red en búferes de pila de tamaño fijo usando memcpy() con una longitud derivada de payload_size. Las únicas comprobaciones de longitud están protegidas por assert(); en las compilaciones de lanzamiento, los asserts se eliminan en la compilación y memcpy() puede copiar un payload_size ilimitado. Las cargas útiles de más de 12 bytes ('int') o 32 bytes ('float') pueden desbordar la pila, lo que resulta en un fallo/denegación de servicio. Esto es accesible a través de LightDB State on_payload con un servidor malicioso o MitM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.secmate.dev/posts/golioth-vulnerabilities-disclosure/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/golioth-firmware-sdk/commit/48f521bcc0187ada2b9cbdad31dc380e6c7b7332",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/golioth-firmware-sdk/releases/tag/v0.22.0",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://secmate.dev/disclosures/SECMATE-2025-0015",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/golioth-firmware-sdk-payload-utils-stack-based-buffer-overflow",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23748",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T18:23:06.550",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing. When processing a string payload, a payload_size value less than 2 can cause a size_t underflow when computing the number of bytes to copy (nbytes). The subsequent memcpy() reads past the end of the network buffer, which can crash the device. The condition is reachable from on_payload, and golioth_payload_is_null() does not block payload_size==1. A malicious server or MITM can trigger a denial of service."
      }, {
        "lang" : "es",
        "value" : "Golioth Firmware SDK versión 0.10.0 anterior a la 0.22.0, corregida en el commit d7f55b38, contienen una lectura fuera de límites en el análisis de cadenas de LightDB State. Al procesar una carga útil de cadena, un valor de payload_size inferior a 2 puede causar un underflow de size_t al calcular el número de bytes a copiar (nbytes). El memcpy() subsiguiente lee más allá del final del búfer de red, lo que puede bloquear el dispositivo. La condición es alcanzable desde on_payload, y golioth_payload_is_null() no bloquea payload_size==1. Un servidor malicioso o MitM puede desencadenar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.secmate.dev/posts/golioth-vulnerabilities-disclosure/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/golioth-firmware-sdk/commit/d7f55b380d8be8b29bd101ce06e421af2e88c12b",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/golioth-firmware-sdk/releases/tag/v0.22.0",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://secmate.dev/disclosures/SECMATE-2025-0016",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/golioth-firmware-sdk-lightdb-state-out-of-bounds-read",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23749",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T18:23:06.763",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path. blockwise_transfer_init() accepts a path whose length equals CONFIG_GOLIOTH_COAP_MAX_PATH_LEN and copies it using strncpy() without guaranteeing a trailing NUL byte, leaving ctx->path unterminated. A later strlen() on this buffer (in golioth_coap_client_get_internal()) can read past the end of the allocation, resulting in a crash/denial of service. The input is application-controlled (not network by default)."
      }, {
        "lang" : "es",
        "value" : "Golioth Firmware SDK versión 0.19.1 anterior a la 0.22.0, corregido en el commit 0e788217, contiene una lectura fuera de límites debido a una terminación nula incorrecta de una ruta de transferencia por bloques. blockwise_transfer_init() acepta una ruta cuya longitud es igual a CONFIG_GOLIOTH_COAP_MAX_PATH_LEN y la copia usando strncpy() sin garantizar un byte NUL final, dejando ctx-&gt;path sin terminar. Un strlen() posterior en este búfer (en golioth_coap_client_get_internal()) puede leer más allá del final de la asignación, lo que resulta en un fallo/denegación de servicio. La entrada es controlada por la aplicación (no por la red por defecto)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.secmate.dev/posts/golioth-vulnerabilities-disclosure/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/golioth-firmware-sdk/commit/0e788217ab4b61a7c1d9fadd1b4a40f5f538a26d",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/golioth-firmware-sdk/releases/tag/v0.22.0",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://secmate.dev/disclosures/SECMATE-2025-0017",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/golioth-firmware-sdk-blockwise-transfer-path-out-of-bounds-read",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23750",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T18:23:06.980",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling. server_cert_write() allocates a heap buffer of size CONFIG_POUCH_SERVER_CERT_MAX_LEN when receiving the first fragment, then appends subsequent fragments using memcpy() without verifying that sufficient capacity remains. An adjacent BLE client can send unauthenticated fragments whose combined size exceeds the allocated buffer, causing a heap overflow and crash; integrity impact is also possible due to memory corruption."
      }, {
        "lang" : "es",
        "value" : "Golioth Pouch versión 0.1.0, anterior al commit 1b2219a1, contiene un desbordamiento de búfer basado en montículo en el manejo de certificados del servidor BLE GATT. server_cert_write() asigna un búfer de montículo del tamaño CONFIG_POUCH_SERVER_CERT_MAX_LEN al recibir el primer fragmento, luego añade fragmentos subsiguientes usando memcpy() sin verificar que quede suficiente capacidad. Un cliente BLE adyacente puede enviar fragmentos no autenticados cuyo tamaño combinado excede el búfer asignado, causando un desbordamiento de montículo y un fallo; también es posible un impacto en la integridad debido a la corrupción de memoria."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.secmate.dev/posts/golioth-vulnerabilities-disclosure/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/golioth/pouch/commit/1b2219a1",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://secmate.dev/disclosures/SECMATE-2025-0018",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/golioth-pouch-ble-gatt-heap-based-buffer-overflow",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26227",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T18:23:07.190",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password (OTP) verification. The Remote Access Server uses a 4-digit OTP and does not enforce effective throttling or lockout within the OTP validity window, allowing an attacker with network reachability to the server to repeatedly attempt OTP verification until a valid user_session cookie is issued. Successful exploitation results in unauthorized access to the Remote Access interface, limited to media files explicitly shared by the VLC for Android user."
      }, {
        "lang" : "es",
        "value" : "VideoLAN VLC para Android anterior a la versión 3.7.0 contiene una omisión de autenticación en la característica del servidor de acceso remoto debido a la falta o insuficiencia de limitación de velocidad en la verificación de contraseña de un solo uso (OTP). El servidor de acceso remoto utiliza una OTP de 4 dígitos y no aplica una limitación o bloqueo efectivo dentro de la ventana de validez de la OTP, permitiendo a un atacante con accesibilidad de red al servidor intentar repetidamente la verificación de la OTP hasta que se emita una cookie de user_session válida. La explotación exitosa resulta en acceso no autorizado a la interfaz de acceso remoto, limitado a los archivos multimedia compartidos explícitamente por el usuario de VLC para Android."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "references" : [ {
        "url" : "https://https://github.com/videolan/vlc-android/releases/tag/3.7.0",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.videolan.org/vlc/download-android.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/vlc-for-android-remote-access-otp-authentication-bypass",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26682",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-26T18:23:07.347",
      "lastModified" : "2026-03-03T20:06:53.093",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java component"
      }, {
        "lang" : "es",
        "value" : "Un problema en fastCMS antes de la v.0.1.6 permite a un atacante local ejecutar código arbitrario a través del componente PluginController.java"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xjd2020:fastcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.6",
            "matchCriteriaId" : "A1447FD1-1B56-4623-9F22-32D55BB477DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/sorzs/e3913b814e2e5548aa66de6c25b0510a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sorzs/test/tree/main/fastcms-rce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26932",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-02-26T18:23:07.470",
      "lastModified" : "2026-03-12T20:23:24.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requires the pgsql protocol to be explicitly enabled and configured to monitor traffic on the targeted port."
      }, {
        "lang" : "es",
        "value" : "Validación incorrecta de índice de array (CWE-129) en el analizador del protocolo PostgreSQL en Packetbeat puede conducir a denegación de servicio a través de manipulación de datos de entrada (CAPEC-153). Un atacante puede enviar un paquete especialmente diseñado causando un pánico en tiempo de ejecución de Go que termina el proceso de Packetbeat. Esta vulnerabilidad requiere que el protocolo pgsql esté explícitamente habilitado y configurado para monitorear el tráfico en el puerto objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:packetbeat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.11",
            "matchCriteriaId" : "5B3AF1B0-F18A-41C2-B4AC-0156C95D7153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elasticsearch:packetbeat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.5",
            "matchCriteriaId" : "4936046E-0E8D-4A75-8FD4-F4266B47A8FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-10/385247",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26934",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-02-26T18:23:07.647",
      "lastModified" : "2026-03-02T15:59:55.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted, malformed payload causing excessive resource consumption and resulting in Kibana becoming unresponsive or crashing."
      }, {
        "lang" : "es",
        "value" : "La Validación Incorrecta de la Cantidad Especificada en la Entrada (CWE-1284) en Kibana puede permitir a un atacante autenticado con privilegios de solo lectura causar una denegación de servicio mediante Manipulación de Datos de Entrada (CAPEC-153). Un atacante puede enviar una carga útil malformada y especialmente diseñada, causando un consumo excesivo de recursos y provocando que Kibana deje de responder o se bloquee."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.18.0",
            "versionEndExcluding" : "8.19.12",
            "matchCriteriaId" : "D88B8A69-2A25-4EB1-AAE4-C18A9F954D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.6",
            "matchCriteriaId" : "F14ACA8C-46A2-42EF-9F63-AEF657C6736A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E90DE12-A5EC-4C3C-A86E-BF5AA0778628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-12/385248",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26935",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-02-26T18:23:07.817",
      "lastModified" : "2026-03-02T15:58:14.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)"
      }, {
        "lang" : "es",
        "value" : "Inadecuada validación de entrada (CWE-20) en el punto final interno de búsqueda de Content Connectors en Kibana puede conducir a denegación de servicio mediante manipulación de datos de entrada (CAPEC-153)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.4.0",
            "versionEndExcluding" : "8.19.12",
            "matchCriteriaId" : "29B0B2CE-953F-4AD3-A8AC-3643A28586B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.6",
            "matchCriteriaId" : "F14ACA8C-46A2-42EF-9F63-AEF657C6736A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E90DE12-A5EC-4C3C-A86E-BF5AA0778628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-13/385249",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26936",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-02-26T18:23:07.973",
      "lastModified" : "2026-03-02T16:01:07.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492)."
      }, {
        "lang" : "es",
        "value" : "Complejidad Ineficiente de Expresiones Regulares (CWE-1333) en el Motor de Anonimización de Inferencia de IA en Kibana puede provocar denegación de servicio mediante la Expansión Exponencial de Expresiones Regulares (CAPEC-492)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.11",
            "matchCriteriaId" : "6617179C-2808-48E0-9794-119BBEE79D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.5",
            "matchCriteriaId" : "777B69F7-F3EB-491F-8B6D-418A0E9C0D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-14/385250",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22715",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-26T19:32:37.893",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMWare Workstation and Fusion contain a logic flaw in the management of network packets. \n\nKnown attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. \n\nResolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1"
      }, {
        "lang" : "es",
        "value" : "VMWare Workstation y Fusion contienen una falla lógica en la gestión de paquetes de red.\n\nVectores de ataque conocidos: Un actor malicioso con privilegios administrativos en una VM invitada podría interrumpir o interceptar las conexiones de red de otras VM invitadas.\n\nResolución: Para remediar CVE-2026-22715, actualice a VMware Workstation o Fusion Versión 25H2U1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-923"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986",
        "source" : "security@vmware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22722",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-26T19:32:38.057",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the \"Fixed version\" column of the 'Response Matrix'"
      }, {
        "lang" : "es",
        "value" : "Un actor malicioso con privilegios de usuario autenticado en un host de estación de trabajo basado en Windows podría causar un error de desreferencia de puntero nulo. Para remediar CVE-2026-22722, aplique los parches listados en la columna \"Versión corregida\" de la 'Matriz de respuesta'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986",
        "source" : "security@vmware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26937",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-02-26T19:32:39.747",
      "lastModified" : "2026-03-02T15:43:52.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)"
      }, {
        "lang" : "es",
        "value" : "Consumo de Recursos No Controlado (CWE-400) en el componente Timelion de Kibana puede provocar denegación de servicio a través de Manipulación de Datos de Entrada (CAPEC-153)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.19.11",
            "matchCriteriaId" : "6617179C-2808-48E0-9794-119BBEE79D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.2.5",
            "matchCriteriaId" : "777B69F7-F3EB-491F-8B6D-418A0E9C0D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26938",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2026-02-26T19:32:39.903",
      "lastModified" : "2026-03-02T15:40:36.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales Utilizados en un Motor de Plantillas (CWE-1336) existe en Workflows en Kibana, lo que podría permitir a un atacante leer archivos arbitrarios del sistema de archivos del servidor de Kibana, y realizar Falsificación de Petición del Lado del Servidor (SSRF) a través de Inyección de Código (CAPEC-242). Esto requiere un usuario autenticado que tenga el privilegio workflowsManagement:executeWorkflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@elastic.co",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:kibana:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E90DE12-A5EC-4C3C-A86E-BF5AA0778628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/kibana-9-3-1-security-update-esa-2026-17/385253",
        "source" : "security@elastic.co",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1241",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-26T20:31:33.657",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges."
      }, {
        "lang" : "es",
        "value" : "Las cámaras Pelco, Inc. Sarix Professional 3 Series son vulnerables a un problema de omisión de autenticación en su interfaz de gestión web. El fallo se deriva de una aplicación inadecuada de los controles de acceso, permitiendo que cierta funcionalidad sea accedida sin la autenticación adecuada. Esta debilidad puede conducir a la visualización no autorizada de transmisiones de video en vivo, creando preocupaciones de privacidad y riesgos operativos para las organizaciones que dependen de estas cámaras. Además, puede exponer a los operadores a desafíos regulatorios y de cumplimiento."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-02",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1565",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-26T20:31:34.317",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WPUF_Admin_Settings::check_filetype_and_ext' function and in the 'Admin_Tools::check_filetype_and_ext' function in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
      }, {
        "lang" : "es",
        "value" : "El plugin User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership &amp; User Registration para WordPress es vulnerable a la carga arbitraria de archivos debido a una validación incorrecta del tipo de archivo en la función «WPUF_Admin_Settings::check_filetype_and_ext» y en la función «Admin_Tools::check_filetype_and_ext» en todas las versiones hasta la 4.2.8, incluida. Esto permite a los atacantes autenticados, con acceso de nivel de autor o superior, cargar archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-user-frontend/trunk/admin/class-admin-settings.php?rev=3448772#L571",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-user-frontend/trunk/admin/class-admin-settings.php?rev=3448772#L600",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-user-frontend/trunk/includes/Admin/Admin_Tools.php?rev=3448772#L444",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-user-frontend/trunk/includes/Admin/Admin_Tools.php?rev=3448772#L537",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3468395/wp-user-frontend/trunk/includes/Admin/Admin_Tools.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2c358cbe-7600-43a1-94a3-1530cdb5a9f3?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23939",
      "sourceIdentifier" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "published" : "2026-02-26T20:31:35.763",
      "lastModified" : "2026-04-06T17:17:07.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Store.Local' module) allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines 'Elixir.Hexpm.Store.Local':get/3, 'Elixir.Hexpm.Store.Local':put/4, 'Elixir.Hexpm.Store.Local':delete/2, 'Elixir.Hexpm.Store.Local':delete_many/2.\n\nThis issue does NOT affect hex.pm the service. Only self-hosted deployments using the Local Storage backend are affected.\n\nThis issue affects hexpm: from 931ee0ed46fa89218e0400a4f6e6d15f96406050 before 5d2ccd2f14f45a63225a73fb5b1c937baf36fdc0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Limitación Inadecuada de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta') en hexpm hexpm/hexpm (módulo 'Elixir.Hexpm.Store.Local') permite Salto de Ruta Relativo. Esta vulnerabilidad está asociada con los archivos de programa lib/hexpm/store/local.ex y las rutinas de programa 'Elixir.Hexpm.Store.Local':get/3, 'Elixir.Hexpm.Store.Local':put/4, 'Elixir.Hexpm.Store.Local':delete/2, 'Elixir.Hexpm.Store.Local':delete_many/2.\n\nEste problema NO afecta a hex.pm el servicio. Solo las implementaciones autoalojadas que utilizan el backend de Almacenamiento Local se ven afectadas.\n\nEste problema afecta a hexpm: desde 931ee0ed46fa89218e0400a4f6e6d15f96406050 antes de 5d2ccd2f14f45a63225a73fb5b1c937baf36fdc0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hex:hexpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2014-09-29",
            "versionEndExcluding" : "2026-02-26",
            "matchCriteriaId" : "DCABE381-093D-4100-A8AB-0660BBF3F8E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.erlef.org/cves/CVE-2026-23939.html",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/hexpm/hexpm/commit/5d2ccd2f14f45a63225a73fb5b1c937baf36fdc0",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hexpm/security/advisories/GHSA-42mv-r64p-4869",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://osv.dev/vulnerability/EEF-CVE-2026-23939",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26973",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T20:31:37.327",
      "lastModified" : "2026-03-02T21:36:35.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Versions prior to 2025.12.2, 2026.1.1, and 2026.2.0 have an IDOR (Insecure Direct Object Reference) in `ReviewableNotesController`. When `enable_category_group_moderation` is enabled, a user belonging to a  category moderation group can create or delete their own notes on **any** reviewable in the system, including reviewables in categories they do not moderate. The controller used an unscoped `Reviewable.find` and the `ensure_can_see` guard only checked whether the user could access the review queue in general, not whether they could access the specific reviewable. Only instances with `enable_category_group_moderation` enabled are affected. Staff users (admins/moderators) are not impacted as they already have access to all reviewables. The issue is patched in versions 2025.12.2, 2026.1.1, and 2026.2.0 by scoping the reviewable lookup through `Reviewable.viewable_by(current_user)`. As a workaround, disable the `enable_category_group_moderation` site setting. This removes the attack surface as only staff users will have access to the review queue."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Versiones anteriores a 2025.12.2, 2026.1.1 y 2026.2.0 tienen una IDOR (Referencia Directa Insegura a Objeto) en `ReviewableNotesController`. Cuando `enable_category_group_moderation` está habilitado, un usuario que pertenece a un grupo de moderación de categoría puede crear o eliminar sus propias notas en cualquier elemento revisable del sistema, incluyendo elementos revisables en categorías que no modera. El controlador usó un `Reviewable.find` sin ámbito y la protección `ensure_can_see` solo verificaba si el usuario podía acceder a la cola de revisión en general, no si podía acceder al elemento revisable específico. Solo las instancias con `enable_category_group_moderation` habilitado se ven afectadas. Los usuarios del personal (administradores/moderadores) no se ven afectados ya que ya tienen acceso a todos los elementos revisables. El problema está parcheado en las versiones 2025.12.2, 2026.1.1 y 2026.2.0 al limitar la búsqueda de elementos revisables a través de `Reviewable.viewable_by(current_user)`. Como solución alternativa, deshabilite la configuración del sitio `enable_category_group_moderation`. Esto elimina la superficie de ataque ya que solo los usuarios del personal tendrán acceso a la cola de revisión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-c587-qx78-vhmx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26979",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T20:31:37.833",
      "lastModified" : "2026-03-02T21:34:00.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able to close, archive and pin topics in private categories they don't have access to. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, los usuarios TL4 pueden cerrar, archivar y fijar temas en categorías privadas a las que no tienen acceso. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No hay soluciones alternativas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-9c7p-fqc5-c24f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27141",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2026-02-26T20:31:38.017",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic"
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de una comprobación de nulo, el envío de tramas HTTP/2 0x0a-0x0f causará que un servidor en ejecución colapse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/746180",
        "source" : "security@golang.org"
      }, {
        "url" : "https://go.dev/issue/77652",
        "source" : "security@golang.org"
      }, {
        "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-27141",
        "source" : "security@golang.org"
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2026-4559",
        "source" : "security@golang.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27509",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T20:31:38.447",
      "lastModified" : "2026-03-12T20:17:02.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unitree Go2 firmware versions V1.1.7 through V1.1.9 and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated attacker can join DDS domain 0 and publish a crafted message (api_id=1002) containing arbitrary Python, which the robot writes to disk under /unitree/etc/programming/ and binds to a physical controller keybinding. When the keybinding is pressed, the code executes as root and the binding persists across reboots."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Unitree Go2 V1.1.7 a V1.1.9 y V1.1.11 (EDU) no implementan autenticación ni autorización DDS para el tema de Eclipse CycloneDDS rt/api/programming_actuator/request gestionado por actuator_manager.py. Un atacante adyacente a la red y no autenticado puede unirse al dominio DDS 0 y publicar un mensaje manipulado (api_id=1002) que contiene Python arbitrario, el cual el robot escribe en el disco bajo /unitree/etc/programming/ y lo vincula a una asignación de teclas de un controlador físico. Cuando se pulsa la asignación de teclas, el código se ejecuta como root y la vinculación persiste a través de los reinicios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.7",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "2736E1DA-AA06-4AEE-8EEC-4731BF3A4AB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372BB5C0-26D8-4E99-A63E-F4FB2D0A50C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_edu_firmware:1.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D56F44-88E0-4091-AC92-CEB384C5F86C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2_edu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8501EA-2CCC-4615-92FD-A3C46A71FEAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://boschko.ca/unitree-go2-rce/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.unitree.com/products/unitree-go2",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/unitree-go2-missing-dds-authentication-enables-adjacent-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27510",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T20:31:38.663",
      "lastModified" : "2026-03-12T20:03:22.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of user-created programmes. The Android application stores programs in a local SQLite database (unitree_go2.db, table dog_programme) and transmits the programme_text content, including the pyCode field, to the robot. The robot's actuator_manager.py executes the supplied Python as root without integrity verification or content validation. An attacker with local access to the Android device can tamper with the stored programme record to inject arbitrary Python that executes when the user triggers the program via a controller keybinding, and the malicious binding persists across reboots. Additionally, a malicious program shared through the application's community marketplace can result in arbitrary code execution on any robot that imports and runs it."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de Unitree Go2 1.1.7 a 1.1.11, cuando se usan con la aplicación de Android Unitree Go2 (com.unitree.doggo2), son vulnerables a la ejecución remota de código debido a la falta de protección de integridad y validación de programas creados por el usuario. La aplicación de Android almacena programas en una base de datos SQLite local (unitree_go2.db, tabla dog_programme) y transmite el contenido de programme_text, incluido el campo pyCode, al robot. El archivo actuator_manager.py del robot ejecuta el Python suministrado como root sin verificación de integridad o validación de contenido. Un atacante con acceso local al dispositivo Android puede manipular el registro de programa almacenado para inyectar Python arbitrario que se ejecuta cuando el usuario activa el programa a través de una asignación de tecla del controlador, y la asignación maliciosa persiste a través de los reinicios. Además, un programa malicioso compartido a través del mercado comunitario de la aplicación puede resultar en la ejecución de código arbitrario en cualquier robot que lo importe y ejecute."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.7",
            "versionEndIncluding" : "1.1.11",
            "matchCriteriaId" : "7E214A36-96C5-47AB-89FA-5891DFC99288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372BB5C0-26D8-4E99-A63E-F4FB2D0A50C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://boschko.ca/unitree-go2-rce/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.unitree.com/products/unitree-go2",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/unitree-go2-mobile-program-tampering-enables-root-rce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22205",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T21:28:52.217",
      "lastModified" : "2026-03-02T16:08:10.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive internal data."
      }, {
        "lang" : "es",
        "value" : "Las versiones de SPIP anteriores a la 4.4.10 contienen una vulnerabilidad de omisión de autenticación causada por la manipulación de tipos de PHP que permite a atacantes no autenticados acceder a información protegida. Los atacantes pueden explotar comparaciones de tipos laxas en la lógica de autenticación para omitir la verificación de inicio de sesión y recuperar datos internos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.10",
            "matchCriteriaId" : "F8A30C8A-7D63-4644-84BA-C000DF7AA294"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-sql-injection-rce-via-union-php-tags",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22206",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T21:28:52.397",
      "lastModified" : "2026-03-02T15:58:07.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server."
      }, {
        "lang" : "es",
        "value" : "Las versiones de SPIP anteriores a la 4.4.10 contienen una vulnerabilidad de inyección SQL que permite a usuarios autenticados con bajos privilegios ejecutar consultas SQL arbitrarias manipulando técnicas de inyección basadas en UNION. Los atacantes pueden explotar esta falla de inyección SQL combinada con el procesamiento de etiquetas PHP para lograr la ejecución remota de código en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.10",
            "matchCriteriaId" : "F8A30C8A-7D63-4644-84BA-C000DF7AA294"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-10.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/spip-sql-injection-rce-via-union-php-tags",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22207",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-26T21:28:52.570",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privileges when the root_api_key configuration is omitted. Attackers can send requests to protected endpoints without authentication headers to access administrative functions including account management, resource operations, and system configuration."
      }, {
        "lang" : "es",
        "value" : "OpenViking hasta la versión 0.1.18, anterior al commit 0251c70, contiene una vulnerabilidad de control de acceso roto que permite a atacantes no autenticados obtener privilegios ROOT cuando se omite la configuración root_api_key. Los atacantes pueden enviar solicitudes a puntos finales protegidos sin encabezados de autenticación para acceder a funciones administrativas, incluyendo la gestión de cuentas, operaciones de recursos y la configuración del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/volcengine/OpenViking/commit/0251c7045b3f8092c4d2e1565115b1ba23db282f",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/volcengine/OpenViking/issues/302",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/volcengine/OpenViking/pull/310",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/openviking-missing-root-api-key-allows-anonymous-root-access",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/volcengine/OpenViking/issues/302",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27021",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T21:28:53.927",
      "lastModified" : "2026-03-02T21:31:27.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the voters endpoint in the poll plugin lacked post visibility checks which allowed unauthorized access to voters details of polls in any post. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, el endpoint de votantes en el plugin de encuestas carecía de comprobaciones de visibilidad de publicaciones, lo que permitía el acceso no autorizado a los detalles de los votantes de las encuestas en cualquier publicación. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.0",
            "matchCriteriaId" : "6DB837D7-28C8-4E0F-B55F-AAAA36F32035"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-f5m5-9hpw-7c2g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27149",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T21:28:54.193",
      "lastModified" : "2026-03-02T18:14:00.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, SQL injection in PM tag filtering (`list_private_messages_tag`) allows bypassing tag filter conditions, potentially disclosing unauthorized private message metadata. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, una inyección SQL en el filtrado de etiquetas de mensajes privados ('list_private_messages_tag') permite eludir las condiciones del filtro de etiquetas, lo que podría revelar metadatos de mensajes privados no autorizados. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-m6qf-h49w-h38w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27150",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T21:28:54.343",
      "lastModified" : "2026-03-02T18:22:27.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing `validate_before_create` authorization in Data Explorer's `QueryGroupBookmarkable` allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata disclosure via bookmark reminder notifications. Versions 2025.12.2, 2026.1.1, and 2026.2.0 fix this issue and also make sure `validate_before_create` throws NotImplementedError in BaseBookmarkable if not implemented, to prevent similar issues in the future. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, la falta de autorización 'validate_before_create' en 'QueryGroupBookmarkable' de Data Explorer permite a cualquier usuario autenticado crear marcadores para grupos de consultas a los que no tienen acceso, lo que permite la divulgación de metadatos a través de notificaciones de recordatorio de marcadores. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 solucionan este problema y también aseguran que 'validate_before_create' arroje un NotImplementedError en BaseBookmarkable si no se implementa, para prevenir problemas similares en el futuro. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-rw95-54qr-qrw8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27151",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T21:28:54.493",
      "lastModified" : "2026-03-02T18:02:24.923",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the `move_posts` action only checked `can_move_posts?` on the source topic but never validated write permissions on the destination topic. This allowed TL4 users and category group moderators to move posts into topics in categories where they lack posting privileges (e.g., read-only categories or categories with group-restricted write access). Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, la acción `move_posts` solo verificaba `can_move_posts?` en el tema de origen, pero nunca validaba los permisos de escritura en el tema de destino. Esto permitía a los usuarios TL4 y a los moderadores de grupos de categorías mover publicaciones a temas en categorías donde carecen de privilegios de publicación (por ejemplo, categorías de solo lectura o categorías con acceso de escritura restringido por grupo). Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-m69h-9m2g-cfgw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27152",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T21:28:54.650",
      "lastModified" : "2026-03-02T18:03:28.333",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, DM communication-preference bypass when adding members via `Chat::AddUsersToChannel` — a user could add targets who have blocked/ignored/muted them to an existing DM channel, bypassing per-recipient PM restrictions that are enforced during DM channel creation. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, se producía una omisión de las preferencias de comunicación de MD al añadir miembros a través de `Chat::AddUsersToChannel` — un usuario podía añadir objetivos que los habían bloqueado/ignorado/silenciado a un canal de MD existente, omitiendo las restricciones de MP por destinatario que se aplican durante la creación del canal de MD. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-f8ff-pxg3-7967",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27162",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T21:28:54.800",
      "lastModified" : "2026-03-02T18:07:19.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, `posts_nearby` was checking topic access but then returning all posts regardless of type, including whispers that should only be visible to whisperers. Use `Post.secured(guardian)` to properly filter post types based on user permissions. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, `posts_nearby` verificaba el acceso al tema pero luego devolvía todas las publicaciones independientemente del tipo, incluyendo whispers que solo deberían ser visibles para whisperers. Use `Post.secured(guardian)` para filtrar correctamente los tipos de publicaciones según los permisos del usuario. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-gffm-43j4-372w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25741",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:46.170",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zulip is an open-source team collaboration tool. Prior to commit bf28c82dc9b1f630fa8e9106358771b20a0040f7, the API endpoint for creating a card update session during an upgrade flow was accessible to users with only organization member privileges. When the associated Stripe Checkout session is completed, the Stripe webhook updates the organization’s default payment method. Because no billing-specific authorization check is enforced, a regular (non-billing) member can change the organization’s payment method. This vulnerability affected the Zulip Cloud payment processing system, and has been patched as of commit bf28c82dc9b1f630fa8e9106358771b20a0040f7. Self-hosted deploys are no longer affected and no patch or upgrade is required for them."
      }, {
        "lang" : "es",
        "value" : "Zulip es una herramienta de colaboración en equipo de código abierto. Antes del commit bf28c82dc9b1f630fa8e9106358771b20a0040f7, el endpoint de la API para crear una sesión de actualización de tarjeta durante un flujo de actualización era accesible para usuarios con solo privilegios de miembro de la organización. Cuando la sesión de Stripe Checkout asociada se completa, el webhook de Stripe actualiza el método de pago predeterminado de la organización. Debido a que no se aplica una verificación de autorización específica de facturación, un miembro regular (no de facturación) puede cambiar el método de pago de la organización. Esta vulnerabilidad afectó al sistema de procesamiento de pagos de Zulip Cloud, y ha sido parcheada a partir del commit bf28c82dc9b1f630fa8e9106358771b20a0040f7. Las implementaciones autoalojadas ya no se ven afectadas y no se requiere ningún parche o actualización para ellas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zulip/zulip/commit/bf28c82dc9b1f630fa8e9106358771b20a0040f7",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/zulip/zulip/security/advisories/GHSA-vhhx-84f7-rc8j",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27153",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:47.570",
      "lastModified" : "2026-03-02T18:07:51.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, moderators could export user Chat DMs via the CSV export endpoint by exploiting an overly permissive allowlist in `can_export_entity?`. The method allowed moderators to export any entity not explicitly blocked instead of restricting to an explicit allowlist. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, los moderadores podían exportar DMs de chat de usuario a través del endpoint de exportación CSV explotando una lista de permitidos excesivamente permisiva en 'can_export_entity?'. El método permitía a los moderadores exportar cualquier entidad no bloqueada explícitamente en lugar de restringir a una lista de permitidos explícita. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-5cp2-jq8m-33mf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27154",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:47.730",
      "lastModified" : "2026-03-02T18:13:16.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, a user full name can be evaluated as raw HTML when the following settings are set: `display_name_on_posts` => true; and `prioritize_username_in_ux` => false. Editing a post of a malicious user would trigger an XSS. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, el nombre completo de un usuario puede ser evaluado como HTML sin procesar cuando las siguientes configuraciones están establecidas: 'display_name_on_posts' =&gt; true; y 'prioritize_username_in_ux' =&gt; false. Editar una publicación de un usuario malicioso activaría un XSS. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No hay soluciones alternativas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-xv43-5gcp-wgw8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27449",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:47.960",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Umbraco Engage is a business intelligence platform. A vulnerability has been identified in Umbraco Engage prior to versions 16.2.1 and 17.1.1 where certain API endpoints are exposed without enforcing authentication or authorization checks. The affected endpoints can be accessed directly over the network without requiring a valid session or user credentials. By supplying a user-controlled identifier parameter (e.g., ?id=), an attacker can retrieve sensitive data associated with arbitrary records. Because no access control validation is performed, the endpoints are vulnerable to enumeration attacks, allowing attackers to iterate over identifiers and extract data at scale. An unauthenticated attacker can retrieve sensitive Engage-related data by directly querying the affected API endpoints. The vulnerability allows arbitrary record access through predictable or enumerable identifiers. The confidentiality impact is considered high. No direct integrity or availability impact has been identified. The scope of exposed data depends on the deployment but may include analytics data, tracking data, customer-related information, or other Engage-managed content. The vulnerability affects both v16 and v17. Patches have already been released. Users are advised to update to 16.2.1 or 17.1.1. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Umbraco Engage es una plataforma de inteligencia de negocios. Una vulnerabilidad ha sido identificada en Umbraco Engage en versiones anteriores a la 16.2.1 y 17.1.1 donde ciertos endpoints de la API están expuestos sin aplicar comprobaciones de autenticación o autorización. Los endpoints afectados pueden ser accedidos directamente a través de la red sin requerir una sesión válida o credenciales de usuario. Al proporcionar un parámetro identificador controlado por el usuario (por ejemplo, ?id=), un atacante puede recuperar datos sensibles asociados con registros arbitrarios. Debido a que no se realiza ninguna validación de control de acceso, los endpoints son vulnerables a ataques de enumeración, permitiendo a los atacantes iterar sobre identificadores y extraer datos a escala. Un atacante no autenticado puede recuperar datos sensibles relacionados con Engage consultando directamente los endpoints de la API afectados. La vulnerabilidad permite el acceso arbitrario a registros a través de identificadores predecibles o enumerables. El impacto en la confidencialidad se considera alto. No se ha identificado ningún impacto directo en la integridad o disponibilidad. El alcance de los datos expuestos depende de la implementación, pero puede incluir datos analíticos, datos de seguimiento, información relacionada con clientes u otro contenido gestionado por Engage. La vulnerabilidad afecta tanto a la v16 como a la v17. Los parches ya han sido lanzados. Se aconseja a los usuarios actualizar a la 16.2.1 o 17.1.1. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/umbraco/Umbraco.Engage.Issues/security/advisories/GHSA-86vq-ccwf-rm62",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27457",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:48.133",
      "lastModified" : "2026-02-27T17:05:12.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weblate is a web based localization tool. Prior to version 5.16.1, the REST API's `AddonViewSet` (`weblate/api/views.py`, line 2831) uses `queryset = Addon.objects.all()` without overriding `get_queryset()` to scope results by user permissions. This allows any authenticated user (or anonymous users if `REQUIRE_LOGIN` is not set) to list and retrieve ALL addons across all projects and components via `GET /api/addons/` and `GET /api/addons/{id}/`. Version 5.16.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Weblate es una herramienta de localización basada en web. Antes de la versión 5.16.1, el `AddonViewSet` de la API REST (`weblate/api/views.py`, línea 2831) utiliza `queryset = Addon.objects.all()` sin sobrescribir `get_queryset()` para limitar el alcance de los resultados por permisos de usuario. Esto permite a cualquier usuario autenticado (o usuarios anónimos si `REQUIRE_LOGIN` no está configurado) listar y recuperar TODOS los complementos en todos los proyectos y componentes a través de `GET /api/addons/` y `GET /api/addons/{id}/`. La versión 5.16.1 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.16.1",
            "matchCriteriaId" : "CFDB43E7-50FD-4502-A4AB-338C87AD180C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WeblateOrg/weblate/commit/3f58f9a4152bc0cbdd6eff5954f9c7bc4d9f0af9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/commit/7802c9b121eb407c48d4adddd4f2458fb3efef0f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/pull/18107",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/pull/18164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.16.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/WeblateOrg/weblate/security/advisories/GHSA-wppc-7cq7-cgfv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27835",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:49.333",
      "lastModified" : "2026-03-03T20:01:10.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, `RepetitionsConfigViewSet` and `MaxRepetitionsConfigViewSet` return all users' repetition config data because their `get_queryset()` calls `.all()` instead of filtering by the authenticated user. Any registered user can enumerate every other user's workout structure. Commit 1fda5690b35706bb137850c8a084ec6a13317b64 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "wger es un gestor de entrenamientos y fitness gratuito y de código abierto. En versiones hasta la 2.4 inclusive, 'RepetitionsConfigViewSet' y 'MaxRepetitionsConfigViewSet' devuelven los datos de configuración de repeticiones de todos los usuarios porque su 'get_queryset()' llama a '.all()' en lugar de filtrar por el usuario autenticado. Cualquier usuario registrado puede enumerar la estructura de entrenamiento de cualquier otro usuario. El commit 1fda5690b35706bb137850c8a084ec6a13317b64 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wger:wger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "069E9B5B-A461-47CB-90EA-9A0F99C25C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wger-project/wger/commit/1fda5690b35706bb137850c8a084ec6a13317b64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wger-project/wger/security/advisories/GHSA-xf68-8hjw-7mpm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28218",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:49.600",
      "lastModified" : "2026-03-02T18:12:49.360",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, fail-open access control in Data Explorer plugin allows any authenticated user to execute SQL queries that have no explicit group assignments, including built-in system queries. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. As a workaround, either explicitly set group permissions on each Data Explorer query that doesn't have permissions, or disable discourse-data-explorer plugin."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, el control de acceso fail-open en el plugin Data Explorer permite a cualquier usuario autenticado ejecutar consultas SQL que no tienen asignaciones de grupo explícitas, incluyendo consultas de sistema integradas. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 aplican un parche para el problema. Como solución alternativa, o bien establecer explícitamente permisos de grupo en cada consulta de Data Explorer que no tiene permisos, o deshabilitar el plugin discourse-data-explorer."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-jxrc-72mr-mfh5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28219",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:49.767",
      "lastModified" : "2026-03-02T18:12:13.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, an improper authorization check in the topic management logic allows authenticated users to modify privileged attributes of their topics. By manipulating specific parameters in a PUT or POST request, a regular user can elevate a topic’s status to a site-wide notice or banner, bypassing intended administrative restrictions. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. There are no practical workarounds to prevent this behavior other than applying the security patch. Administrators concerned about unauthorized promotions should audit recent changes to site banners and global notices until the fix is deployed."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, una verificación de autorización incorrecta en la lógica de gestión de temas permite a los usuarios autenticados modificar atributos privilegiados de sus temas. Al manipular parámetros específicos en una solicitud PUT o POST, un usuario regular puede elevar el estado de un tema a un aviso o banner de todo el sitio, eludiendo las restricciones administrativas previstas. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 aplican un parche al problema. No existen soluciones alternativas prácticas para prevenir este comportamiento aparte de aplicar el parche de seguridad. Los administradores preocupados por las promociones no autorizadas deberían auditar los cambios recientes en los banners del sitio y los avisos globales hasta que se implemente la corrección."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-8v26-9f7h-jc8x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28227",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T22:20:49.927",
      "lastModified" : "2026-03-02T18:11:29.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users can publish topics into staff-only categories via the `publish_to_category` topic timer, bypassing authorization checks. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de las versiones 2025.12.2, 2026.1.1 y 2026.2.0, los usuarios TL4 pueden publicar temas en categorías solo para el personal a través del temporizador de temas 'publish_to_category', omitiendo las comprobaciones de autorización. Las versiones 2025.12.2, 2026.1.1 y 2026.2.0 parchean el problema. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.2,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.12.2",
            "matchCriteriaId" : "452E5338-8153-4A3E-B634-CAE43E14B557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2026.1.0",
            "versionEndExcluding" : "2026.1.1",
            "matchCriteriaId" : "1CAFCC9D-53D7-4017-85A5-EE6CA5A6A11C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*",
            "matchCriteriaId" : "BB002FDC-BC71-4C46-8AAF-A34EC717E0E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-m49w-78mh-87jp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3261",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-26T22:20:51.757",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode School Management System 1.0. This impacts an unknown function of the file /settings/index.php of the component Setting Handler. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en itsourcecode School Management System 1.0. Esto afecta a una función desconocida del archivo /settings/index.php del componente Gestor de Configuración. Esta manipulación del argumento ID causa inyección SQL. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:school_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F6842D-98A5-4EDC-9580-D40F28FCB304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ning-BJ/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.749364",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3262",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-26T22:20:51.980",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en go2ismail Asp.Net-Core-Inventory-Order-Management-System hasta 9.20250118. Afectada es una función desconocida del componente Interfaz Administrativa. Dicha manipulación lleva a ejecución después de redirección. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-698"
        }, {
          "lang" : "en",
          "value" : "CWE-705"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go2ismail:asp.net-core-inventory-order-management-system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.20250118",
            "matchCriteriaId" : "323184A1-0FE0-498A-A3F1-E5A8CACFE6BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ghufran2/CVE-Asp.Net-Core-Inventory-Order-Management-System-Advisories/blob/main/Asp.Net-Core-Inventory-Order-Management-System%20Privilege%20Escalation%20via%20Client-Side%20Redirect%20Bypass.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758333",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3263",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-26T22:20:52.207",
      "lastModified" : "2026-03-03T00:41:59.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en go2ismail Asp.Net-Core-Inventory-Order-Management-System hasta la versión 9.20250118. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /api/Security/ del componente Security API. Realizar una manipulación resulta en una autorización indebida. La explotación remota del ataque es posible. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go2ismail:asp.net-core-inventory-order-management-system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.20250118",
            "matchCriteriaId" : "323184A1-0FE0-498A-A3F1-E5A8CACFE6BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ghufran2/CVE-Asp.Net-Core-Inventory-Order-Management-System-Advisories/blob/main/Asp.Net-Core-Inventory-Order-Management-System%20IDOR%20to%20Full%20System%20Compromise.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27638",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:34.807",
      "lastModified" : "2026-02-27T17:03:28.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Actual is a local-first personal finance tool. Prior to version 26.2.1, in multi-user mode (OpenID), the sync API endpoints (`/sync/*`) don't verify that the authenticated user owns or has access to the file being operated on. Any authenticated user can read, modify, and overwrite any other user's budget files by providing their file ID. Version 26.2.1 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Actual es una herramienta de finanzas personales local-first. Antes de la versión 26.2.1, en modo multiusuario (OpenID), los endpoints de la API de sincronización ('/sync/*') no verifican que el usuario autenticado posea o tenga acceso al archivo sobre el que se está operando. Cualquier usuario autenticado puede leer, modificar y sobrescribir los archivos de presupuesto de cualquier otro usuario proporcionando su ID de archivo. La versión 26.2.1 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actualbudget:actual:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "26.2.1",
            "matchCriteriaId" : "E756E18C-B2C7-46B3-AF5A-D5BCC86C53B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/actualbudget/actual/commit/9966c024cb75f57943193cac8e42f401efed9d08",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/actualbudget/actual/releases/tag/v26.2.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/actualbudget/actual/security/advisories/GHSA-qmjj-p7m9-wjrv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27838",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:34.963",
      "lastModified" : "2026-03-03T00:50:54.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wger is a free, open-source workout and fitness manager. Five routine detail action endpoints check a cache before calling `self.get_object()`. In versions up to and including 2.4, ache keys are scoped only by `pk` — no user ID is included. When a victim has previously accessed their routine via the API, an attacker can retrieve the cached response for the same PK without any ownership check. Commit e964328784e2ee2830a1991d69fadbce86ac9fbf contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "wger es un gestor de entrenamientos y fitness gratuito y de código abierto. Cinco endpoints de acción de detalle de rutina verifican una caché antes de llamar a `self.get_object()`. En versiones hasta la 2.4 inclusive, las claves de caché se limitan solo por `pk` — no se incluye ningún ID de usuario. Cuando una víctima ha accedido previamente a su rutina a través de la API, un atacante puede recuperar la respuesta en caché para el mismo PK sin ninguna verificación de propiedad. El commit e964328784e2ee2830a1991d69fadbce86ac9fbf contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wger:wger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "069E9B5B-A461-47CB-90EA-9A0F99C25C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wger-project/wger/commit/e964328784e2ee2830a1991d69fadbce86ac9fbf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wger-project/wger/security/advisories/GHSA-42cr-w2gr-m54q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27839",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:35.123",
      "lastModified" : "2026-03-03T00:49:06.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, three `nutritional_values` action endpoints fetch objects via `Model.objects.get(pk=pk)` — a raw ORM call that bypasses the user-scoped queryset. Any authenticated user can read another user's private nutrition plan data, including caloric intake and full macro breakdown, by supplying an arbitrary PK. Commit 29876a1954fe959e4b58ef070170e81703dab60e contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "wger es un gestor gratuito y de código abierto de entrenamientos y estado físico. En las versiones hasta la 2.4 inclusive, tres puntos finales de acción 'nutritional_values' recuperan objetos a través de 'Model.objects.get(pk=pk)' — una llamada ORM directa que omite el queryset con ámbito de usuario. Cualquier usuario autenticado puede leer los datos del plan de nutrición privado de otro usuario, incluyendo la ingesta calórica y el desglose completo de macronutrientes, al proporcionar un PK arbitrario. El commit 29876a1954fe959e4b58ef070170e81703dab60e contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wger:wger:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "069E9B5B-A461-47CB-90EA-9A0F99C25C77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wger-project/wger/commit/29876a1954fe959e4b58ef070170e81703dab60e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wger-project/wger/security/advisories/GHSA-g8gc-6c4h-jg86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28207",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:35.277",
      "lastModified" : "2026-05-01T14:38:16.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.2, a command injection vulnerability (CWE-78) in the Zen C compiler allows local attackers to execute arbitrary shell commands by providing a specially crafted output filename via the `-o` command-line argument. The vulnerability existed in the `main` application logic (specifically in `src/main.c`), where the compiler constructed a shell command string to invoke the backend C compiler. This command string was built by concatenating various arguments, including the user-controlled output filename, and was subsequently executed using the `system()` function. Because `system()` invokes a shell to parse and execute the command, shell metacharacters within the output filename were interpreted by the shell, leading to arbitrary command execution. An attacker who can influence the command-line arguments passed to the `zc` compiler (like through a build script or a CI/CD pipeline configuration) can execute arbitrary commands with the privileges of the user running the compiler. The vulnerability has been fixed in version 0.4.2 by removing `system()` calls, implementing `ArgList`, and internal argument handling. Users are advised to update to Zen C version v0.4.2 or later."
      }, {
        "lang" : "es",
        "value" : "Zen C es un lenguaje de programación de sistemas que compila a GNU C/C11 legible por humanos. Antes de la versión 0.4.2, una vulnerabilidad de inyección de comandos (CWE-78) en el compilador Zen C permite a atacantes locales ejecutar comandos de shell arbitrarios proporcionando un nombre de archivo de salida especialmente diseñado a través del argumento de línea de comandos '-o'. La vulnerabilidad existía en la lógica de la aplicación 'main' (específicamente en 'src/main.c'), donde el compilador construía una cadena de comandos de shell para invocar al compilador C de backend. Esta cadena de comandos se construía concatenando varios argumentos, incluyendo el nombre de archivo de salida controlado por el usuario, y posteriormente se ejecutaba usando la función 'system()'. Debido a que 'system()' invoca un shell para analizar y ejecutar el comando, los metacaracteres de shell dentro del nombre de archivo de salida eran interpretados por el shell, lo que llevaba a la ejecución arbitraria de comandos. Un atacante que puede influir en los argumentos de línea de comandos pasados al compilador 'zc' (como a través de un script de compilación o una configuración de pipeline de CI/CD) puede ejecutar comandos arbitrarios con los privilegios del usuario que ejecuta el compilador. La vulnerabilidad ha sido corregida en la versión 0.4.2 eliminando las llamadas a 'system()', implementando 'ArgList' y el manejo interno de argumentos. Se aconseja a los usuarios actualizar a la versión v0.4.2 de Zen C o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zenc-lang:zen_c:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.2",
            "matchCriteriaId" : "E084A39F-FF3F-487E-8E8A-F8F3C322A5AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/z-libs/Zen-C/security/advisories/GHSA-9rff-x96h-76h2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://f0nduesav0yarde.github.io/blog/vulnerabilities/cve-2026-28207/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z-libs/Zen-C/security/advisories/GHSA-9rff-x96h-76h2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28208",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:35.440",
      "lastModified" : "2026-03-02T21:16:27.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix. This can often lead to remote code execution (e.g., overwriting shell profiles, source code, cron jobs, etc). Version 7.5.8 has a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "Junrar es una biblioteca de archivo RAR de Java de código abierto. Antes de la versión 7.5.8, una vulnerabilidad de salto de ruta con barra invertida en 'LocalFolderExtractor' permite a un atacante escribir archivos arbitrarios con contenido controlado por el atacante en cualquier lugar del sistema de archivos cuando se extrae un archivo RAR manipulado en Linux/Unix. Esto a menudo puede conducir a la ejecución remota de código (por ejemplo, sobrescribiendo perfiles de shell, código fuente, tareas cron, etc.). La versión 7.5.8 tiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:junrar_project:junrar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.5.8",
            "matchCriteriaId" : "38B5DED4-B9D7-4E60-8BB6-9D017DECD809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/junrar/junrar/commit/947ff1d33f00f940aa68ae2593500291d799d954",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/junrar/junrar/releases/tag/v7.5.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/junrar/junrar/security/advisories/GHSA-j273-m5qq-6825",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/junrar/junrar/security/advisories/GHSA-j273-m5qq-6825",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28211",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:35.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NVDA Dev & Test Toolbox is an NVDA add-on for gathering tools to help NVDA development and testing. A vulnerability exists in versions 2.0 through 8.0 in the Log Reader feature of this add-on. A maliciously crafted log file can lead to arbitrary code execution when a user reads it with log reader commands. The log reading command process speech log entries in an unsafe manner. Python expressions embedded in the log may be evaluated when when speech entries are read with log reading commands. An attacker can exploit this by convincing a user to open a malicious crafted log file and to analyze it using the log reading commands. When the log is read, attacker-controlled code may execute with the privileges of the current user.\nThis issue does not require elevated privileges and relies solely on user interaction (opening the log file). Version 9.0 contains a fix for the issue. As a workaround, avoid using log reading commands, or at least, commands to move to next/previous log message (any message or commands for each type of message). For more security, one may disable their gestures in the input gesture dialog."
      }, {
        "lang" : "es",
        "value" : "La Caja de Herramientas de Desarrollo y Prueba de NVDA es un complemento de NVDA para recopilar herramientas que ayuden al desarrollo y las pruebas de NVDA. Existe una vulnerabilidad en las versiones 2.0 a 8.0 en la función Lector de Registros de este complemento. Un archivo de registro creado con fines maliciosos puede conducir a la ejecución de código arbitrario cuando un usuario lo lee con comandos del lector de registros. El comando de lectura de registros procesa las entradas de registro de voz de manera insegura. Las expresiones de Python incrustadas en el registro pueden ser evaluadas cuando las entradas de voz son leídas con comandos de lectura de registros. Un atacante puede explotar esto convenciendo a un usuario de abrir un archivo de registro creado con fines maliciosos y de analizarlo usando los comandos de lectura de registros. Cuando se lee el registro, el código controlado por el atacante puede ejecutarse con los privilegios del usuario actual.\nEste problema no requiere privilegios elevados y se basa únicamente en la interacción del usuario (abrir el archivo de registro). La versión 9.0 contiene una corrección para el problema. Como solución alternativa, evite usar los comandos de lectura de registros, o al menos, los comandos para moverse al mensaje de registro siguiente/anterior (cualquier mensaje o comandos para cada tipo de mensaje). Para mayor seguridad, se pueden deshabilitar sus gestos en el diálogo de gestos de entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CyrilleB79/NVDA-Dev-Test-Toolbox/commit/21a0544432b08971b5d18320e8256be12c610bea",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/CyrilleB79/NVDA-Dev-Test-Toolbox/releases/tag/V9.0",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/CyrilleB79/NVDA-Dev-Test-Toolbox/security/advisories/GHSA-39pg-6xpm-mjgf",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28213",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:35.770",
      "lastModified" : "2026-02-28T01:18:18.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EverShop is a TypeScript-first eCommerce platform. Versions prior to 2.1.1 have a vulnerability in the \"Forgot Password\" functionality. When specifying a target email address, the API response returns the password reset token. This allows an attacker to take over the associated account. Version 2.1.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "EverShop es una plataforma de comercio electrónico TypeScript-first. Versiones anteriores a la 2.1.1 tienen una vulnerabilidad en la funcionalidad de 'Olvidé mi contraseña'. Al especificar una dirección de correo electrónico objetivo, la respuesta de la API devuelve el token de restablecimiento de contraseña. Esto permite a un atacante tomar el control de la cuenta asociada. La versión 2.1.1 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evershop:evershop:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "454D1A1C-4946-4C6C-A2D8-B07AEF27E3E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/evershopcommerce/evershop/releases/tag/v2.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/evershopcommerce/evershop/security/advisories/GHSA-cg73-g723-39jw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28215",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:35.940",
      "lastModified" : "2026-02-27T15:53:07.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, an unauthenticated attacker can overwrite the entire infrastructure configuration of a self-hosted Hoppscotch instance including OAuth provider credentials and SMTP settings  by sending a single HTTP POST request with no authentication. The endpoint POST /v1/onboarding/config has no authentication guard and performs no check on whether onboarding was already completed. A successful exploit allows the attacker to replace the instance's Google/GitHub/Microsoft OAuth application credentials with their own, causing all subsequent user logins via SSO to authenticate against the attacker's OAuth app. The attacker captures OAuth tokens and email addresses of every user who logs in after the exploit. Additionally, the endpoint returns a recovery token that can be used to read all stored secrets in plaintext, including SMTP passwords and any other configured credentials. Version 2026.2.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "hoppscotch es un ecosistema de desarrollo de API de código abierto. Antes de la versión 2026.2.0, un atacante no autenticado puede sobrescribir toda la configuración de infraestructura de una instancia de Hoppscotch autoalojada, incluyendo las credenciales del proveedor OAuth y la configuración SMTP, enviando una única solicitud HTTP POST sin autenticación. El endpoint POST /v1/onboarding/config no tiene protección de autenticación y no realiza ninguna comprobación sobre si la incorporación ya se completó. Un exploit exitoso permite al atacante reemplazar las credenciales de la aplicación OAuth de Google/GitHub/Microsoft de la instancia con las suyas propias, haciendo que todos los inicios de sesión de usuario posteriores a través de SSO se autentiquen contra la aplicación OAuth del atacante. El atacante captura tokens OAuth y direcciones de correo electrónico de cada usuario que inicia sesión después del exploit. Además, el endpoint devuelve un token de recuperación que puede usarse para leer todos los secretos almacenados en texto plano, incluyendo contraseñas SMTP y cualquier otra credencial configurada. La versión 2026.2.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoppscotch:hoppscotch:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.2.0",
            "matchCriteriaId" : "3FF8DA47-4B0B-4592-80AD-66C7913AD164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hoppscotch/hoppscotch/releases/tag/2026.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-jwv8-867r-q9fg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28216",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:36.100",
      "lastModified" : "2026-02-27T15:51:42.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, any logged-in user can read, modify or delete another user's personal environment by ID. `user-environments.resolver.ts:82-109`, `updateUserEnvironment` mutation uses `@UseGuards(GqlAuthGuard)` but is missing the `@GqlUser()` decorator entirely. The user's identity is never extracted, so the service receives only the environment ID and performs a `prisma.userEnvironment.update({ where: { id } })` without any ownership filter. `deleteUserEnvironment` does extract the user but the service only uses the UID to check if the target is a global environment. Actual delete query uses WHERE { id } without AND userUid. hoppscotch environments store API keys, auth tokens and secrets used in API requests. An authenticated attacker who obtains another user's environment ID can read their secrets, replace them with malicious values or delete them entirely. The environment ID format is CUID, which limits mass exploitation but insider threat and combined info leak scenarios are realistic. Version 2026.2.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "hoppscotch es un ecosistema de desarrollo de API de código abierto. Antes de la versión 2026.2.0, cualquier usuario autenticado puede leer, modificar o eliminar el entorno personal de otro usuario por ID. `user-environments.resolver.ts:82-109`, la mutación `updateUserEnvironment` utiliza `@UseGuards(GqlAuthGuard)` pero carece por completo del decorador `@GqlUser()`. La identidad del usuario nunca se extrae, por lo que el servicio recibe solo el ID del entorno y realiza una `prisma.userEnvironment.update({ where: { id } })` sin ningún filtro de propiedad. La mutación `deleteUserEnvironment` sí extrae al usuario, pero el servicio solo utiliza el UID para verificar si el objetivo es un entorno global. La consulta de eliminación real utiliza WHERE { id } sin AND userUid. Los entornos de hoppscotch almacenan claves API, tokens de autenticación y secretos utilizados en solicitudes API. Un atacante autenticado que obtiene el ID del entorno de otro usuario puede leer sus secretos, reemplazarlos con valores maliciosos o eliminarlos por completo. El formato del ID del entorno es CUID, lo que limita la explotación masiva, pero las amenazas internas y los escenarios combinados de fuga de información son realistas. La versión 2026.2.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoppscotch:hoppscotch:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.2.0",
            "matchCriteriaId" : "3FF8DA47-4B0B-4592-80AD-66C7913AD164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hoppscotch/hoppscotch/releases/tag/2026.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-72rv-vc3j-5vqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28217",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:36.263",
      "lastModified" : "2026-02-27T15:50:55.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, the `userCollection` GraphQL query accepts an arbitrary collection ID and returns the full collection data — including title, type, and the serialized `data` field containing HTTP requests with headers and potentially secrets — to any authenticated user, without verifying that the requesting user owns the collection. This is an Insecure Direct Object Reference (IDOR) caused by a missing authorization check that exists on every other operation in the same resolver. Version 2026.2.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "hoppscotch es un ecosistema de desarrollo de API de código abierto. Antes de la versión 2026.2.0, la consulta GraphQL 'userCollection' acepta un ID de colección arbitrario y devuelve los datos completos de la colección — incluyendo título, tipo y el campo 'data' serializado que contiene solicitudes HTTP con encabezados y potencialmente secretos — a cualquier usuario autenticado, sin verificar que el usuario solicitante sea el propietario de la colección. Esto es una Referencia Directa a Objeto Insegura (IDOR) causada por una verificación de autorización faltante que existe en cualquier otra operación en el mismo *resolver*. La versión 2026.2.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoppscotch:hoppscotch:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.2.0",
            "matchCriteriaId" : "3FF8DA47-4B0B-4592-80AD-66C7913AD164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hoppscotch/hoppscotch/releases/tag/2026.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-m5pg-r4jp-qq75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28225",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:36.413",
      "lastModified" : "2026-02-27T16:55:07.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.1, the `get_model` method in `ModelFilesController` (line 158-160) loads models using `Model.find_param(params[:model_id])` without `policy_scope()`, bypassing Pundit authorization. All other controllers correctly use `policy_scope(Model).find_param()` (e.g., `ModelsController` line 263). Version 0.133.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Manyfold es una aplicación web de código abierto y autoalojada para gestionar una colección de modelos 3D, particularmente enfocada en la impresión 3D. Antes de la versión 0.133.1, el método `get_model` en `ModelFilesController` (línea 158-160) carga modelos usando `Model.find_param(params[:model_id])` sin `policy_scope()`, eludiendo la autorización de Pundit. Todos los demás controladores usan correctamente `policy_scope(Model).find_param()` (por ejemplo, `ModelsController` línea 263). La versión 0.133.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manyfold:manyfold:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.133.1",
            "matchCriteriaId" : "E2BF73EA-32B4-4B68-92BC-BC17A045C023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-v8pw-3r2f-3fqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28226",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:36.570",
      "lastModified" : "2026-03-03T00:44:26.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phishing Club is a phishing simulation and man-in-the-middle framework. Prior to version 1.30.2, an authenticated SQL injection vulnerability exists in the GetOrphaned recipient listing endpoint in versions prior to v1.30.2. The endpoint constructs a raw SQL query and concatenates the user-controlled sortBy value directly into the ORDER BY clause without allowlist validation. Because unknown values are silently passed through `RemapOrderBy()`, an authenticated attacker can inject SQL expressions into the `ORDER BY` clause. This issue was patched in v1.30.2 by validating the order-by column against an allowlist and clearing unknown mappings."
      }, {
        "lang" : "es",
        "value" : "Phishing Club es un framework de simulación de phishing y man-in-the-middle. Antes de la versión 1.30.2, existe una vulnerabilidad de inyección SQL autenticada en el endpoint de listado de destinatarios GetOrphaned en versiones anteriores a la v1.30.2. El endpoint construye una consulta SQL en bruto y concatena el valor sortBy controlado por el usuario directamente en la cláusula ORDER BY sin validación de lista de permitidos. Debido a que los valores desconocidos se pasan silenciosamente a través de 'RemapOrderBy()', un atacante autenticado puede inyectar expresiones SQL en la cláusula 'ORDER BY'. Este problema fue parcheado en la v1.30.2 al validar la columna de ordenación contra una lista de permitidos y limpiar las asignaciones desconocidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phishing.club:phishing_club:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.30.2",
            "matchCriteriaId" : "7B03A9F0-8C4F-4011-9470-DE3BC9A938C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phishingclub/phishingclub/commit/c7e666da9a71cd519f317cbf67ade10068a33070",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/phishingclub/phishingclub/security/advisories/GHSA-4r69-4qff-ccj3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28230",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:36.733",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId (a sequential integer starting from 1) without verifying that the requesting charger matches the charger that originally started the transaction. Any authenticated charger can terminate any other charger’s active session across the entire network. The root cause is in OcppServerRepositoryImpl.getTransaction() which queries only by transactionId with no chargeBoxId ownership check. The validator checks that the transaction exists and is not already stopped but never verifies identity. As an attacker controlling a single registered charger I could enumerate sequential transaction IDs and send StopTransaction messages targeting active sessions on every other charger on the network simultaneously. Combined with FINDING-014 (unauthenticated SOAP endpoints), no registered charger is even required — the attack is executable with a single curl command requiring only a known chargeBoxId. Commit 7f169c6c5b36a9c458ec41ce8af581972e5c724e contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "SteVe es un sistema de gestión de estaciones de carga de vehículos eléctricos de código abierto. En versiones hasta la 3.11.0 inclusive, cuando un cargador envía un mensaje StopTransaction, SteVe busca la transacción únicamente por transactionId (un entero secuencial que comienza en 1) sin verificar que el cargador solicitante coincida con el cargador que inició originalmente la transacción. Cualquier cargador autenticado puede terminar la sesión activa de cualquier otro cargador en toda la red. La causa raíz se encuentra en OcppServerRepositoryImpl.getTransaction() que consulta únicamente por transactionId sin una verificación de propiedad de chargeBoxId. El validador verifica que la transacción existe y no está ya detenida, pero nunca verifica la identidad. Como un atacante que controla un único cargador registrado, podría enumerar IDs de transacción secuenciales y enviar mensajes StopTransaction dirigidos a sesiones activas en todos los demás cargadores de la red simultáneamente. Combinado con FINDING-014 (endpoints SOAP no autenticados), ni siquiera se requiere un cargador registrado; el ataque es ejecutable con un solo comando curl que requiere solo un chargeBoxId conocido. El commit 7f169c6c5b36a9c458ec41ce8af581972e5c724e contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steve-community:steve:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.11.0",
            "matchCriteriaId" : "9013F4F8-9CF8-4EEA-AB1F-444A22F863F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/steve-community/steve/commit/7f169c6c5b36a9c458ec41ce8af581972e5c724e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/steve-community/steve/security/advisories/GHSA-6x38-4w7h-cwr8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28269",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:36.910",
      "lastModified" : "2026-03-03T19:53:18.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiteworks is a private data network (PDN). Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality allows authenticated users to redirect command output to arbitrary file locations. This could be exploited to overwrite critical system files and gain elevated access. Version 9.2.0 contains a patch."
      }, {
        "lang" : "es",
        "value" : "Kiteworks es una red de datos privada (PDN). Antes de la versión 9.2.0, una vulnerabilidad en la funcionalidad de ejecución de comandos de Kiteworks permite a usuarios autenticados redirigir la salida de comandos a ubicaciones de archivo arbitrarias. Esto podría ser explotado para sobrescribir archivos críticos del sistema y obtener acceso elevado. La versión 9.2.0 contiene un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "B494C8D4-2D4B-4F5E-99C1-4CCE8DF6C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-6j64-6fpp-9453",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28274",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:37.073",
      "lastModified" : "2026-02-27T19:07:37.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 are vulnerable to Stored Cross-Site Scripting (XSS) in the document upload functionality. Any user with upload permissions within the \"Initiatives\" section can upload a malicious `.html` or `.htm` file as a document. Because the uploaded HTML file is served under the application's origin without proper sandboxing, the embedded JavaScript executes in the context of the application. As a result, authentication tokens, session cookies, or other sensitive data can be exfiltrated to an attacker-controlled server. Additionally, since the uploaded file is hosted under the application's domain, simply sharing the direct file link may result in execution of the malicious script when accessed. Version 0.32.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Initiative es una plataforma de gestión de proyectos autohospedada. Las versiones de la aplicación anteriores a la 0.32.4 son vulnerables a Cross-Site Scripting Almacenado (XSS) en la funcionalidad de carga de documentos. Cualquier usuario con permisos de carga dentro de la sección 'Initiatives' puede cargar un archivo .html o .htm malicioso como documento. Debido a que el archivo HTML cargado se sirve bajo el origen de la aplicación sin un sandboxing adecuado, el JavaScript incrustado se ejecuta en el contexto de la aplicación. Como resultado, los tokens de autenticación, las cookies de sesión u otros datos sensibles pueden ser exfiltrados a un servidor controlado por el atacante. Además, dado que el archivo cargado está alojado bajo el dominio de la aplicación, simplemente compartir el enlace directo al archivo puede resultar en la ejecución del script malicioso al ser accedido. La versión 0.32.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morelitea:initiative:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.32.2",
            "matchCriteriaId" : "14E07E5B-5651-4A27-86E2-CE508B70B3B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Morelitea/initiative/releases/tag/v0.32.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Morelitea/initiative/security/advisories/GHSA-v38c-x27x-p584",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28275",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:37.240",
      "lastModified" : "2026-02-27T19:07:07.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 do not invalidate previously issued JWT access tokens after a user changes their password. As a result, older tokens remain valid until expiration and can still be used to access protected API endpoints. This behavior allows continued authenticated access even after the account password has been updated. Version 0.32.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Initiative es una plataforma de gestión de proyectos autoalojada. Las versiones de la aplicación anteriores a la 0.32.4 no invalidan los tokens de acceso JWT emitidos previamente después de que un usuario cambia su contraseña. Como resultado, los tokens más antiguos permanecen válidos hasta su expiración y aún pueden utilizarse para acceder a puntos finales de API protegidos. Este comportamiento permite el acceso autenticado continuado incluso después de que la contraseña de la cuenta haya sido actualizada. La versión 0.32.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morelitea:initiative:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.32.4",
            "matchCriteriaId" : "0B50ACE8-1939-4039-8DC6-F45DB13167D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Morelitea/initiative/releases/tag/v0.32.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Morelitea/initiative/security/advisories/GHSA-hww6-3fww-xw3h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28276",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:37.397",
      "lastModified" : "2026-02-27T19:06:01.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Initiative is a self-hosted project management platform. An access control vulnerability exists in Initiative versions prior to 0.32.2 where uploaded documents are served from a publicly accessible /uploads/ directory without any authentication or authorization checks. Any uploaded file can be accessed directly via its URL by unauthenticated users (e.g., in an incognito browser session), leading to potential disclosure of sensitive documents. The problem was patched in v0.32.2, and the patch was further improved on in 032.4."
      }, {
        "lang" : "es",
        "value" : "Initiative es una plataforma de gestión de proyectos autoalojada. Existe una vulnerabilidad de control de acceso en las versiones de Initiative anteriores a la 0.32.2 donde los documentos subidos se sirven desde un directorio /uploads/ de acceso público sin ninguna comprobación de autenticación o autorización. Cualquier archivo subido puede ser accedido directamente a través de su URL por usuarios no autenticados (por ejemplo, en una sesión de navegador de incógnito), lo que lleva a la posible divulgación de documentos sensibles. El problema fue parcheado en la v0.32.2, y el parche fue mejorado aún más en la 0.32.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:morelitea:initiative:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.32.2",
            "matchCriteriaId" : "14E07E5B-5651-4A27-86E2-CE508B70B3B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Morelitea/initiative/releases/tag/v0.32.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Morelitea/initiative/security/advisories/GHSA-w34j-fx72-h2pq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28279",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:37.567",
      "lastModified" : "2026-02-28T01:17:13.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the `osctrl-admin` environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when creating or editing environments. These commands are embedded into enrollment one-liner scripts generated using Go's `text/template` package (which does not perform shell escaping) and execute on every endpoint that enrolls using the compromised environment. An attacker with administrator access can achieve remote code execution on every endpoint that enrolls using the compromised environment. Commands execute as root/SYSTEM (the privilege level used for osquery enrollment) before osquery is installed, leaving no agent-level audit trail. This enables backdoor installation, credential exfiltration, and full endpoint compromise. This is fixed in osctrl `v0.5.0`. As a workaround, restrict osctrl administrator access to trusted personnel, review existing environment configurations for suspicious hostnames, and/or monitor enrollment scripts for unexpected commands."
      }, {
        "lang" : "es",
        "value" : "osctrl es una solución de gestión de osquery. Antes de la versión 0.5.0, existe una vulnerabilidad de inyección de comandos del sistema operativo en la configuración del entorno de `osctrl-admin`. Un administrador autenticado puede inyectar comandos de shell arbitrarios a través del parámetro de nombre de host al crear o editar entornos. Estos comandos se incrustan en scripts de una sola línea de inscripción generados usando el paquete `text/template` de Go (que no realiza el escape de shell) y se ejecutan en cada punto final que se inscribe usando el entorno comprometido. Un atacante con acceso de administrador puede lograr la ejecución remota de código en cada punto final que se inscribe usando el entorno comprometido. Los comandos se ejecutan como root/SYSTEM (el nivel de privilegio utilizado para la inscripción de osquery) antes de que se instale osquery, sin dejar rastro de auditoría a nivel de agente. Esto permite la instalación de puertas traseras, la exfiltración de credenciales y el compromiso total del punto final. Esto se corrige en osctrl `v0.5.0`. Como solución alternativa, restrinja el acceso de administrador de osctrl a personal de confianza, revise las configuraciones de entorno existentes en busca de nombres de host sospechosos y/o monitoree los scripts de inscripción en busca de comandos inesperados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmpsec:osctrl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.0",
            "matchCriteriaId" : "CCE1BE74-A736-44A6-ABC7-D1D48E7A0EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jmpsec/osctrl/pull/777",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jmpsec/osctrl/pull/780",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jmpsec/osctrl/security/advisories/GHSA-rchw-322g-f7rm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28280",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-26T23:16:37.740",
      "lastModified" : "2026-02-28T01:14:46.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "osctrl is an osquery management solution. Prior to version 0.5.0, a stored cross-site scripting (XSS) vulnerability exists in the `osctrl-admin` on-demand query list. A user with query-level permissions can inject arbitrary JavaScript via the query parameter when running an on-demand query. The payload is stored and executes in the browser of any user (including administrators) who visits the query list page. This can be chained with CSRF token extraction to escalate privileges and take actions as the logged in user. An attacker with query-level permissions (the lowest privilege tier) can execute arbitrary JavaScript in the browsers of all users who view the query list. Depending on their level of access, it can lead to full platform compromise if an administrator executes the payload. The issue is fixed in osctrl `v0.5.0`. As a workaround, restrict query-level permissions to trusted users, monitor query list for suspicious payloads, and/or review osctrl user accounts for unauthorized administrators."
      }, {
        "lang" : "es",
        "value" : "osctrl es una solución de gestión de osquery. Antes de la versión 0.5.0, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en la lista de consultas bajo demanda de 'osctrl-admin'. Un usuario con permisos a nivel de consulta puede inyectar JavaScript arbitrario a través del parámetro de consulta al ejecutar una consulta bajo demanda. La carga útil se almacena y se ejecuta en el navegador de cualquier usuario (incluidos los administradores) que visita la página de la lista de consultas. Esto se puede encadenar con la extracción de tokens CSRF para escalar privilegios y realizar acciones como el usuario conectado. Un atacante con permisos a nivel de consulta (el nivel de privilegio más bajo) puede ejecutar JavaScript arbitrario en los navegadores de todos los usuarios que ven la lista de consultas. Dependiendo de su nivel de acceso, puede llevar a un compromiso total de la plataforma si un administrador ejecuta la carga útil. El problema está solucionado en osctrl 'v0.5.0'. Como solución alternativa, restrinja los permisos a nivel de consulta a usuarios de confianza, supervise la lista de consultas en busca de cargas útiles sospechosas, y/o revise las cuentas de usuario de osctrl en busca de administradores no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jmpsec:osctrl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.0",
            "matchCriteriaId" : "CCE1BE74-A736-44A6-ABC7-D1D48E7A0EA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jmpsec/osctrl/pull/778",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jmpsec/osctrl/pull/780",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/jmpsec/osctrl/security/advisories/GHSA-4rv8-5cmm-2r22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3264",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-26T23:16:37.910",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administrative Interface. Executing a manipulation can lead to execution after redirect. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en go2ismail Free-CRM hasta b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Afectada por este problema es alguna funcionalidad desconocida del componente Interfaz Administrativa. Ejecutar una manipulación puede llevar a la ejecución después de redirección. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Este producto implementa una publicación continua para entrega en curso, lo que significa que la información de la versión para las publicaciones afectadas o actualizadas no está disponible. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-698"
        }, {
          "lang" : "en",
          "value" : "CWE-705"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go2ismail:free-crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-09-21",
            "matchCriteriaId" : "02CD2368-0789-48DC-B1F5-BA92C621D4D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ghufran2/CVE-Free-CRM-Advisories/blob/main/Free-CRM%20Privilege%20Escalation%20via%20Client-Side%20Redirect%20Authorization%20Bypass.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347987",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347987",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3265",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-26T23:16:38.120",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. This affects an unknown part of the file /api/Security/ of the component Security API. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en go2ismail Free-CRM hasta b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Esto afecta una parte desconocida del archivo /api/Security/ del componente Security API. La manipulación conduce a una autorización indebida. El ataque es posible de llevar a cabo remotamente. El exploit está disponible públicamente y podría ser utilizado. Este producto adopta una estrategia de lanzamiento continuo para mantener la entrega continua. Por lo tanto, los detalles de la versión para las versiones afectadas o actualizadas no pueden especificarse. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go2ismail:free-crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-09-21",
            "matchCriteriaId" : "02CD2368-0789-48DC-B1F5-BA92C621D4D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ghufran2/CVE-Free-CRM-Advisories/blob/main/Free-CRM%20IDOR.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347988",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347988",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3268",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-26T23:16:38.337",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in psi-probe PSI Probe up to 5.3.0. The affected element is an unknown function of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/RemoveSessAttributeController.java of the component Session Attribute Handler. Performing a manipulation results in improper access controls. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en psi-probe PSI Probe hasta la versión 5.3.0. El elemento afectado es una función desconocida del archivo psi-probe-core/src/main/java/psiprobe/controllers/sessions/RemoveSessAttributeController.java del componente Gestor de Atributos de Sesión. Realizar una manipulación resulta en controles de acceso inadecuados. El ataque puede ser iniciado remotamente. El exploit ahora es público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psi-probe:psi_probe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0",
            "matchCriteriaId" : "C781474C-E255-4F0D-9468-D23DB4701ACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347992",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347992",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758664",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1585",
      "sourceIdentifier" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "published" : "2026-02-27T00:16:55.430",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de ejecución de servicio de Windows sin comillas en IJ Scan Utility para Windows versiones 1.1.2 a 1.5.0 puede permitir a un atacante local ejecutar un archivo malicioso con los privilegios del servicio afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "references" : [ {
        "url" : "https://canon.jp/support/support-info/260226vulnerability-response",
        "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
      }, {
        "url" : "https://psirt.canon/advisory-information/cp2026-002/",
        "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
      }, {
        "url" : "https://www.canon-europe.com/support/product-security/",
        "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
      }, {
        "url" : "https://www.usa.canon.com/support/canon-product-advisories/CPA2026-002-Vulnerability-Remediation-for-IJ-Scan-Utility-for-Windows",
        "source" : "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20733",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:55.620",
      "lastModified" : "2026-03-05T20:16:11.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son públicamente accesibles a través de plataformas de mapeo web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudcharge:cloudcharge.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CA35D5-7E3D-40B4-BFD4-AF01B343733E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cloudcharge.tech/support/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-03.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20781",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:55.807",
      "lastModified" : "2026-03-05T20:16:11.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling \nattackers to perform unauthorized station impersonation and manipulate \ndata sent to the backend. An unauthenticated attacker can connect to the\n OCPP WebSocket endpoint using a known or discovered charging station \nidentifier, then issue or receive OCPP commands as a legitimate charger.\n Given that no authentication is required, this can lead to privilege \nescalation, unauthorized control of charging infrastructure, and \ncorruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a la escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudcharge:cloudcharge.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CA35D5-7E3D-40B4-BFD4-AF01B343733E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cloudcharge.tech/support/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-03.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20791",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:56.010",
      "lastModified" : "2026-03-05T20:16:12.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son de acceso público a través de plataformas de mapeo basadas en la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chargemap:chargemap.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD91DDB-F7D6-4D65-87B7-47B954DD1F51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chargemap.com/en-us/support",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-05.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20792",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:56.180",
      "lastModified" : "2026-03-05T20:16:12.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on \nthe number of authentication requests. This absence of rate limiting may\n allow an attacker to conduct denial-of-service attacks by suppressing \nor misrouting legitimate charger telemetry, or conduct brute-force \nattacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante llevar a cabo ataques de denegación de servicio al suprimir o redirigir erróneamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chargemap:chargemap.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD91DDB-F7D6-4D65-87B7-47B954DD1F51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chargemap.com/en-us/support",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-05.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20895",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:56.350",
      "lastModified" : "2026-03-05T21:16:14.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely \nassociate sessions but allows multiple endpoints to connect using the \nsame session identifier. This implementation results in predictable \nsession identifiers and enables session hijacking or shadowing, where \nthe most recent connection displaces the legitimate charging station and\n receives backend commands intended for that station. This vulnerability\n may allow unauthorized users to authenticate as other users or enable a\n malicious actor to cause a denial-of-service condition by overwhelming \nthe backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación da lugar a identificadores de sesión predecibles y permite el secuestro o shadowing de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev2go:ev2go.io:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6AD607-0D02-460B-BB0F-0292101256B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ev2go.io/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-04.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22890",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:56.523",
      "lastModified" : "2026-03-05T21:16:14.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son accesibles públicamente a través de plataformas de mapeo basadas en la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev2go:ev2go.io:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6AD607-0D02-460B-BB0F-0292101256B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ev2go.io/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-04.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24731",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:56.683",
      "lastModified" : "2026-03-05T21:16:15.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling \nattackers to perform unauthorized station impersonation and manipulate \ndata sent to the backend. An unauthenticated attacker can connect to the\n OCPP WebSocket endpoint using a known or discovered charging station \nidentifier, then issue or receive OCPP commands as a legitimate charger.\n Given that no authentication is required, this can lead to privilege \nescalation, unauthorized control of charging infrastructure, and \ncorruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular los datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, y luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede conducir a escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev2go:ev2go.io:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6AD607-0D02-460B-BB0F-0292101256B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ev2go.io/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-04.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25113",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:56.853",
      "lastModified" : "2026-03-05T21:16:15.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on \nthe number of authentication requests. This absence of rate limiting may\n allow an attacker to conduct denial-of-service attacks by suppressing \nor mis-routing legitimate charger telemetry, or conduct brute-force \nattacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio al suprimir o redirigir incorrectamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swtchenergy:swtchenergy.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9A325-1924-47AF-9E3C-51FEF069A2B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://swtchenergy.com/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25114",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:57.030",
      "lastModified" : "2026-03-05T21:16:15.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on \nthe number of authentication requests. This absence of rate limiting may\n allow an attacker to conduct denial-of-service attacks by suppressing \nor mis-routing legitimate charger telemetry, or conduct brute-force \nattacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio al suprimir o redirigir incorrectamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudcharge:cloudcharge.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CA35D5-7E3D-40B4-BFD4-AF01B343733E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cloudcharge.tech/support/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-03.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25711",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:57.200",
      "lastModified" : "2026-03-05T21:16:16.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely \nassociate sessions but allows multiple endpoints to connect using the \nsame session identifier. This implementation results in predictable \nsession identifiers and enables session hijacking or shadowing, where \nthe most recent connection displaces the legitimate charging station and\n receives backend commands intended for that station. This vulnerability\n may allow unauthorized users to authenticate as other users or enable a\n malicious actor to cause a denial-of-service condition by overwhelming \nthe backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación resulta en identificadores de sesión predecibles y permite el secuestro o la suplantación de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir que un actor malicioso cause una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chargemap:chargemap.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD91DDB-F7D6-4D65-87B7-47B954DD1F51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chargemap.com/en-us/support",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-05.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25778",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:57.383",
      "lastModified" : "2026-03-05T21:16:16.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely \nassociate sessions but allows multiple endpoints to connect using the \nsame session identifier. This implementation results in predictable \nsession identifiers and enables session hijacking or shadowing, where \nthe most recent connection displaces the legitimate charging station and\n receives backend commands intended for that station. This vulnerability\n may allow unauthorized users to authenticate as other users or enable a\n malicious actor to cause a denial-of-service condition by overwhelming \nthe backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación resulta en identificadores de sesión predecibles y permite el secuestro o la suplantación de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swtchenergy:swtchenergy.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9A325-1924-47AF-9E3C-51FEF069A2B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://swtchenergy.com/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25851",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:57.550",
      "lastModified" : "2026-03-05T21:16:16.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling \nattackers to perform unauthorized station impersonation and manipulate \ndata sent to the backend. An unauthenticated attacker can connect to the\n OCPP WebSocket endpoint using a known or discovered charging station \nidentifier, then issue or receive OCPP commands as a legitimate charger.\n Given that no authentication is required, this can lead to privilege \nescalation, unauthorized control of charging infrastructure, and \ncorruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular los datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a una escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chargemap:chargemap.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD91DDB-F7D6-4D65-87B7-47B954DD1F51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chargemap.com/en-us/support",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-05.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25945",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:57.730",
      "lastModified" : "2026-03-05T21:16:16.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on \nthe number of authentication requests. This absence of rate limiting may\n allow an attacker to conduct denial-of-service attacks by suppressing \nor mis-routing legitimate charger telemetry, or conduct brute-force \nattacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio al suprimir o redirigir incorrectamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev2go:ev2go.io:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6AD607-0D02-460B-BB0F-0292101256B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ev2go.io/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-04.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27652",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:57.900",
      "lastModified" : "2026-03-05T21:16:17.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely \nassociate sessions but allows multiple endpoints to connect using the \nsame session identifier. This implementation results in predictable \nsession identifiers and enables session hijacking or shadowing, where \nthe most recent connection displaces the legitimate charging station and\n receives backend commands intended for that station. This vulnerability\n may allow unauthorized users to authenticate as other users or enable a\n malicious actor to cause a denial-of-service condition by overwhelming \nthe backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación da lugar a identificadores de sesión predecibles y permite el secuestro o la suplantación de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudcharge:cloudcharge.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CA35D5-7E3D-40B4-BFD4-AF01B343733E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cloudcharge.tech/support/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-03.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27767",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:58.073",
      "lastModified" : "2026-03-05T21:16:17.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling \nattackers to perform unauthorized station impersonation and manipulate \ndata sent to the backend. An unauthenticated attacker can connect to the\n OCPP WebSocket endpoint using a known or discovered charging station \nidentifier, then issue or receive OCPP commands as a legitimate charger.\n Given that no authentication is required, this can lead to privilege \nescalation, unauthorized control of charging infrastructure, and \ncorruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swtchenergy:swtchenergy.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9A325-1924-47AF-9E3C-51FEF069A2B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://swtchenergy.com/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27772",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:58.250",
      "lastModified" : "2026-03-05T21:16:18.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling \nattackers to perform unauthorized station impersonation and manipulate \ndata sent to the backend. An unauthenticated attacker can connect to the\n OCPP WebSocket endpoint using a known or discovered charging station \nidentifier, then issue or receive OCPP commands as a legitimate charger.\n Given that no authentication is required, this can lead to privilege \nescalation, unauthorized control of charging infrastructure, and \ncorruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev.energy:ev.energy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8630FC-2F5D-4362-8AD7-F2A2A73A20F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.ev.energy/en-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27773",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T00:16:58.423",
      "lastModified" : "2026-03-05T21:16:18.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de estaciones de carga son accesibles públicamente a través de plataformas de mapeo basadas en la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swtchenergy:swtchenergy.com:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD9A325-1924-47AF-9E3C-51FEF069A2B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://swtchenergy.com/contact/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2597",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-02-27T00:16:58.587",
      "lastModified" : "2026-03-03T19:35:46.163",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes().\n\nThe function does not validate that the length parameter is non-negative. If a negative value (e.g. -1) is supplied, the expression length + 1u causes an integer wraparound, resulting in a zero-byte allocation. The subsequent call to chosen random function (e.g. getrandom) passes the original negative value, which is implicitly converted to a large unsigned value (typically SIZE_MAX). This can result in writes beyond the allocated buffer, leading to heap memory corruption and application crash (denial of service).\n\nIn common usage, the length argument is typically hardcoded by the caller, which reduces the likelihood of attacker-controlled exploitation. Applications that pass untrusted input to this parameter may be affected."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crypt::SysRandom::XS anteriores a la 0.010 para Perl son vulnerables a un desbordamiento de búfer de montón en la función XS random_bytes().\n\nLa función no valida que el parámetro de longitud no sea negativo. Si se proporciona un valor negativo (p. ej., -1), la expresión length + 1u causa un desbordamiento de enteros, lo que resulta en una asignación de cero bytes. La llamada subsiguiente a la función aleatoria elegida (p. ej., getrandom) pasa el valor negativo original, que se convierte implícitamente a un valor sin signo grande (típicamente SIZE_MAX). Esto puede resultar en escrituras más allá del búfer asignado, lo que lleva a corrupción de memoria de montón y a un fallo de la aplicación (denegación de servicio).\n\nEn el uso común, el argumento de longitud suele estar codificado de forma rígida por el llamador, lo que reduce la probabilidad de explotación controlada por el atacante. Las aplicaciones que pasan entrada no confiable a este parámetro pueden verse afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leont:crypt\\:\\:sysrandom\\:\\:xs:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "0.010",
            "matchCriteriaId" : "AD58A198-257B-424C-8927-5C5A5D11B535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://metacpan.org/dist/Crypt-SysRandom-XS/changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://metacpan.org/release/LEONT/Crypt-SysRandom-XS-0.011/source/lib/Crypt/SysRandom/XS.xs#L51-52",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3269",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T00:16:58.717",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en psi-probe PSI Probe hasta la versión 5.3.0. El elemento afectado es la función handleRequestInternal del archivo psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java del componente Gestor de Sesiones. La ejecución de una manipulación puede llevar a una denegación de servicio. El ataque puede ser lanzado remotamente. El exploit ha sido publicado y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psi-probe:psi_probe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0",
            "matchCriteriaId" : "C781474C-E255-4F0D-9468-D23DB4701ACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347993",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347993",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3270",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T00:16:58.930",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en psi-probe PSI Probe hasta 5.3.0. Esto afecta la función lookup del archivo psi-probe-core/src/main/java/psiprobe/tools/Whois.java del componente Whois. La manipulación conduce a falsificación de petición del lado del servidor. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psi-probe:psi_probe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0",
            "matchCriteriaId" : "C781474C-E255-4F0D-9468-D23DB4701ACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AnalogyC0de/public_exp/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347994",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347994",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758666",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3271",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T00:16:59.143",
      "lastModified" : "2026-02-27T18:30:41.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tenda F453 1.0.0.3. Esto afecta la función fromP2pListFilter del archivo /goform/P2pListFilterof del componente httpd. La manipulación del argumento page resulta en desbordamiento de búfer. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_70/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347995",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347995",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3272",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T00:16:59.360",
      "lastModified" : "2026-02-27T15:48:08.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Tenda F453 1.0.0.3. Se ve afectada la función fromDhcpListClient del archivo /goform/DhcpListClient del componente httpd. Esta manipulación del argumento page causa desbordamiento de búfer. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_71/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347996",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347996",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759603",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20742",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:17.317",
      "lastModified" : "2026-02-27T23:13:46.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into requests sent to the templates route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en las solicitudes enviadas a la ruta templates."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20902",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:17.520",
      "lastModified" : "2026-02-27T23:13:13.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the map filename field during the map \nupload action of the parameters route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo (OS) existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al inyectar entrada maliciosa en el campo de nombre de archivo del mapa durante la acción de carga de mapas de la ruta de parámetros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20910",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:17.707",
      "lastModified" : "2026-02-27T23:12:37.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the devices field of the firmware update\n update action to achieve remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, permitiendo a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en el campo devices de la acción de actualización de firmware para lograr la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21389",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:17.890",
      "lastModified" : "2026-02-27T23:12:14.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the request body sent to the contacts \nimport route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo (OS) existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en el cuerpo de la solicitud enviado a la ruta de importación de contactos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21718",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:18.073",
      "lastModified" : "2026-02-27T23:11:48.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability exists in Copeland XWEB Pro \nversion 1.12.1 and prior, enabling any attackers to bypass the \nauthentication requirement and achieve pre-authenticated code execution \non the system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación existe en Copeland XWEB Pro versión 1.12.1 y anteriores, lo que permite a cualquier atacante omitir el requisito de autenticación y lograr la ejecución de código preautenticado en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22878",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:18.260",
      "lastModified" : "2026-03-05T21:16:14.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son accesibles públicamente a través de plataformas de mapeo basadas en la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobility46:mobility46.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F700FD43-B735-4BFC-A859-8A84EE6318CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mobility46.se/en/contact-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24445",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:18.430",
      "lastModified" : "2026-03-05T21:16:15.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on \nthe number of authentication requests. This absence of rate limiting may\n allow an attacker to conduct denial-of-service attacks by suppressing \nor mis-routing legitimate charger telemetry, or conduct brute-force \nattacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio al suprimir o redirigir incorrectamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev.energy:ev.energy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8630FC-2F5D-4362-8AD7-F2A2A73A20F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.ev.energy/en-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24517",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:18.597",
      "lastModified" : "2026-03-09T20:01:15.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into requests sent to the firmware update \nroute."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en las solicitudes enviadas a la ruta de actualización del firmware."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24663",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:18.790",
      "lastModified" : "2026-03-09T19:58:18.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection vulnerability exists in XWEB Pro version 1.12.1 \nand prior, enabling an unauthenticated attacker to achieve remote code \nexecution on the system by sending a crafted request to the libraries \ninstallation route and injecting malicious input into the request body."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante no autenticado lograr la ejecución remota de código en el sistema al enviar una solicitud manipulada a la ruta de instalación de las bibliotecas e inyectar entrada maliciosa en el cuerpo de la solicitud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24689",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:18.983",
      "lastModified" : "2026-03-09T19:57:24.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the devices field of the firmware update\n apply action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en el campo devices de la acción de aplicación de actualización de firmware."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24695",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:19.180",
      "lastModified" : "2026-03-09T19:56:28.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\n\n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into OpenSSL argument fields within requests \nsent to the utility route, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en campos de argumentos de OpenSSL dentro de solicitudes enviadas a la ruta de utilidad, lo que lleva a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25085",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:19.367",
      "lastModified" : "2026-03-09T19:55:21.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in\n which an unexpected return value from the authentication routine is \nlater on processed as a legitimate value, resulting in an authentication\n bypass."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad en Copeland XWEB Pro versión 1.12.1 y anteriores, en la que un valor de retorno inesperado de la rutina de autenticación es posteriormente procesado como un valor legítimo, resultando en un bypass de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-394"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25109",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:19.560",
      "lastModified" : "2026-03-09T19:54:08.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the devices field when accessing the get\n setup route, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, permitiendo a un atacante autenticado lograr la ejecución remota de código en el sistema al inyectar entrada maliciosa en el campo devices al acceder a la ruta get setup, lo que lleva a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25111",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:19.747",
      "lastModified" : "2026-03-09T19:53:03.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into requests sent to the restore route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo (OS) existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en las solicitudes enviadas a la ruta de restauración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25195",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:19.937",
      "lastModified" : "2026-03-09T19:49:34.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n supplying a crafted firmware update file via the firmware update route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al proporcionar un archivo de actualización de firmware manipulado a través de la ruta de actualización de firmware."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25774",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:20.123",
      "lastModified" : "2026-03-05T21:16:16.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son de acceso público a través de plataformas de mapeo basadas en la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev.energy:ev.energy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8630FC-2F5D-4362-8AD7-F2A2A73A20F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.ev.energy/en-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26290",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:20.433",
      "lastModified" : "2026-03-05T21:16:17.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely \nassociate sessions but allows multiple endpoints to connect using the \nsame session identifier. This implementation results in predictable \nsession identifiers and enables session hijacking or shadowing, where \nthe most recent connection displaces the legitimate charging station and\n receives backend commands intended for that station. This vulnerability\n may allow unauthorized users to authenticate as other users or enable a\n malicious actor to cause a denial-of-service condition by overwhelming \nthe backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación da lugar a identificadores de sesión predecibles y permite el secuestro de sesión o shadowing, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ev.energy:ev.energy:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F8630FC-2F5D-4362-8AD7-F2A2A73A20F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.ev.energy/en-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26305",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:20.617",
      "lastModified" : "2026-03-05T21:16:17.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on \nthe number of authentication requests. This absence of rate limiting may\n allow an attacker to conduct denial-of-service attacks by suppressing \nor mis-routing legitimate charger telemetry, or conduct brute-force \nattacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio al suprimir o redirigir incorrectamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobility46:mobility46.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F700FD43-B735-4BFC-A859-8A84EE6318CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mobility46.se/en/contact-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27028",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:20.790",
      "lastModified" : "2026-03-05T21:16:17.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling \nattackers to perform unauthorized station impersonation and manipulate \ndata sent to the backend. An unauthenticated attacker can connect to the\n OCPP WebSocket endpoint using a known or discovered charging station \nidentifier, then issue or receive OCPP commands as a legitimate charger.\n Given that no authentication is required, this can lead to privilege \nescalation, unauthorized control of charging infrastructure, and \ncorruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular los datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobility46:mobility46.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F700FD43-B735-4BFC-A859-8A84EE6318CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mobility46.se/en/contact-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27647",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T01:16:20.967",
      "lastModified" : "2026-03-05T21:16:17.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely \nassociate sessions but allows multiple endpoints to connect using the \nsame session identifier. This implementation results in predictable \nsession identifiers and enables session hijacking or shadowing, where \nthe most recent connection displaces the legitimate charging station and\n receives backend commands intended for that station. This vulnerability\n may allow unauthorized users to authenticate as other users or enable a\n malicious actor to cause a denial-of-service condition by overwhelming \nthe backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación resulta en identificadores de sesión predecibles y permite el secuestro o la suplantación de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir que un actor malicioso cause una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobility46:mobility46.se:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F700FD43-B735-4BFC-A859-8A84EE6318CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.mobility46.se/en/contact-us",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3273",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T01:16:21.143",
      "lastModified" : "2026-02-27T15:47:32.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Such manipulation of the argument mit_ssid_index leads to buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Tenda F453 1.0.0.3. Afectada por esta vulnerabilidad es la función formWrlsafeset del archivo /goform/AdvSetWrlsafeset del componente httpd. Dicha manipulación del argumento mit_ssid_index conduce a un desbordamiento de búfer. El ataque puede ejecutarse remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_73/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347997",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347997",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759606",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20764",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:18.140",
      "lastModified" : "2026-02-27T23:11:05.393",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n providing malicious input via the device hostname configuration which \nis later processed during system setup, resulting in remote code \nexecution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, permitiendo a un atacante autenticado lograr la ejecución remota de código en el sistema al proporcionar una entrada maliciosa a través de la configuración del nombre de host del dispositivo que se procesa posteriormente durante la configuración del sistema, lo que resulta en ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20797",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:18.343",
      "lastModified" : "2026-02-27T23:10:35.547",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack based buffer overflow exists in an API route of XWEB Pro version\n 1.12.1 and prior, enabling unauthenticated attackers to cause stack \ncorruption and a termination of the program."
      }, {
        "lang" : "es",
        "value" : "Existe un desbordamiento de búfer basado en pila en una ruta de API de XWEB Pro versión 1.12.1 y anteriores, lo que permite a atacantes no autenticados causar corrupción de pila y la terminación del programa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22877",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:18.507",
      "lastModified" : "2026-02-27T23:09:41.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 \nand prior, enabling unauthenticated attackers to read arbitrary files on\n the system, and potentially causing a denial-of-service attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de lectura arbitraria de archivos existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a atacantes no autenticados leer archivos arbitrarios en el sistema, y potencialmente causar un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23702",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:18.700",
      "lastModified" : "2026-02-27T23:08:42.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n sending malicious input injected into the server username field of the \nimport preconfiguration action in the API V1 route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al enviar una entrada maliciosa inyectada en el campo de nombre de usuario del servidor de la acción de importación de preconfiguración en la ruta de la API V1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24452",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:18.897",
      "lastModified" : "2026-02-27T23:08:17.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n supplying a crafted template file to the devices route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al suministrar un archivo de plantilla manipulado a la ruta devices."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24497",
      "sourceIdentifier" : "vuln@krcert.or.kr",
      "published" : "2026-02-27T02:16:19.100",
      "lastModified" : "2026-03-17T15:46:16.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basado en pila en SimTech Systems, Inc. ThinkWise permite la inclusión remota de código. Este problema afecta a ThinkWise: de 7 a 23."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vuln@krcert.or.kr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vuln@krcert.or.kr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkwise:thinkwise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7",
            "versionEndExcluding" : "23",
            "matchCriteriaId" : "98EC2E0E-92BA-4B6B-909D-A85B95B0CF91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuNo=205023&pageIndex=1&categoryCode=&nttId=71985",
        "source" : "vuln@krcert.or.kr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.thinkwise.co.kr/bbs/board.php?bo_table=patch&wr_id=19352",
        "source" : "vuln@krcert.or.kr",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24498",
      "sourceIdentifier" : "vuln@krcert.or.kr",
      "published" : "2026-02-27T02:16:19.403",
      "lastModified" : "2026-03-17T15:46:33.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects ipTIME T5008: through 15.26.8; ipTIME AX2004M: through 15.26.8; ipTIME AX3000Q: through 15.26.8; ipTIME AX6000M: through 15.26.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de exposición de información sensible a un actor no autorizado en EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M permite la omisión de autenticación. Este problema afecta a ipTIME T5008: hasta 15.26.8; ipTIME AX2004M: hasta 15.26.8; ipTIME AX3000Q: hasta 15.26.8; ipTIME AX6000M: hasta 15.26.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vuln@krcert.or.kr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vuln@krcert.or.kr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:t5008_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.27.2",
            "matchCriteriaId" : "A7DAE25A-E048-4B95-A1E0-457E385EBE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:t5008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABD91BD-7958-41EC-88F2-046506F97997"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:ax2004m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.27.2",
            "matchCriteriaId" : "E47E8184-94CB-48FA-800E-1CD61723BB78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:ax2004m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFBFCC0C-84BB-4F90-B22A-91C0F07E0012"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:ax3000q_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.27.2",
            "matchCriteriaId" : "7D82B0F8-9B9D-4003-AC2F-B0642B926263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:ax3000q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CAA991-6478-4247-BDD1-53BA942E46CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iptime:ax6000m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.27.2",
            "matchCriteriaId" : "2678F85D-C492-4438-99C1-029BCD38CE06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iptime:ax6000m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3DD3F-F602-4D44-879A-AD6BDEC007B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iptime.com/iptime/?page_id=126&dffid=1&dfsid=15&dftid=589&uid=26901&mod=document",
        "source" : "vuln@krcert.or.kr",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuNo=205023&pageIndex=1&categoryCode=&nttId=71987",
        "source" : "vuln@krcert.or.kr",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25037",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:19.603",
      "lastModified" : "2026-02-27T23:07:40.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n configuring a maliciously crafted LCD state which is later processed \nduring system setup, enabling remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo (OS) existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al configurar un estado LCD maliciosamente diseñado que es procesado posteriormente durante la configuración del sistema, lo que permite la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25105",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:19.800",
      "lastModified" : "2026-02-27T23:07:06.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \n\n\n\n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into parameters of the Modbus command tool in\n the debug route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en los parámetros de la herramienta de comandos Modbus en la ruta de depuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25196",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:20.000",
      "lastModified" : "2026-02-27T23:06:36.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the Wi-Fi SSID and/or password fields \ncan lead to remote code execution when the configuration is processed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al inyectar entrada maliciosa en los campos de SSID y/o contraseña de Wi-Fi, lo cual puede resultar en la ejecución remota de código cuando se procesa la configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25721",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:20.170",
      "lastModified" : "2026-02-27T23:06:02.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection \nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into the server username and/or password \nfields of the restore action in the API V1 route."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en los campos de nombre de usuario y/o contraseña del servidor de la acción de restauración en la ruta API V1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3037",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-02-27T02:16:20.330",
      "lastModified" : "2026-02-28T01:13:53.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection vulnerability exists in XWEB Pro version 1.12.1 \nand prior, enabling an authenticated attacker to achieve remote code \nexecution on the system by modifying malicious input injected into the \nMBird SMS service URL and/or code via the utility route which is later \nprocessed during system setup, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del sistema operativo (OS) existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema al modificar una entrada maliciosa inyectada en la URL del servicio SMS de MBird y/o en el código a través de la ruta de utilidad, que luego se procesa durante la configuración del sistema, lo que lleva a la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "BF93AA67-7ABF-45C8-8376-7A28F7D65464"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEA10B9B-531A-4775-B32D-AC743D696126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "088F312E-06DF-4B90-A478-A6B5A39DE0F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A524988E-E22F-4B0F-AEE6-46B3F103989C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "E13AD164-C82A-4D6C-84C0-83EB8B0A611C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1707F67B-6365-4065-812C-7CC596C6CFF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3274",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T02:16:20.533",
      "lastModified" : "2026-02-27T15:46:57.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the argument page results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Tenda F453 1.0.0.3. Este problema afecta a la función frmL7ProtForm del archivo /goform/L7Prot del componente httpd. La manipulación del argumento page resulta en desbordamiento de búfer. El ataque puede llevarse a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_74/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347998",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347998",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759621",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3275",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T02:16:20.747",
      "lastModified" : "2026-02-27T15:46:20.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Executing a manipulation of the argument entrys can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Tenda F453 1.0.0.3. Esto afecta a la función fromAddressNat del archivo /goform/addressNat del componente httpd. La ejecución de una manipulación del argumento entrys puede conducir a un desbordamiento de búfer. El ataque puede realizarse de forma remota. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_75/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.347999",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.347999",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759622",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3281",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T02:16:20.963",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/bandrank.c. Performing a manipulation of the argument index results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is named fd28c5463697712cb0ab116a2c55e4f4d92c4088. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en libvips 8.19.0. Esto afecta la función vips_bandrank_build del archivo libvips/conversion/bandrank.c. Realizar una manipulación del argumento index resulta en desbordamiento de búfer basado en montículo. El ataque debe ser iniciado desde una posición local. El exploit ahora es público y puede ser usado. El parche se llama fd28c5463697712cb0ab116a2c55e4f4d92c4088. Se sugiere instalar un parche para abordar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:8.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180A1691-C529-44F7-B4C3-92A1A9618594"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/fd28c5463697712cb0ab116a2c55e4f4d92c4088",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4878",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4878#issue-3944209102",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4895",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348010",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348010",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3282",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T03:16:02.713",
      "lastModified" : "2026-03-02T17:58:30.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conversion/unpremultiply.c. Executing a manipulation of the argument alpha_band can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called 7215ead1e0cd7d3703cc4f5fca06d7d0f4c22b91. A patch should be applied to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en libvips 8.19.0. Esta vulnerabilidad afecta a la función vips_unpremultiply_build del archivo libvips/conversion/unpremultiply.c. La ejecución de una manipulación del argumento alpha_band puede llevar a una lectura fuera de límites. El ataque debe ser lanzado localmente. El exploit ha sido publicado y puede ser usado. Este parche se llama 7215ead1e0cd7d3703cc4f5fca06d7d0f4c22b91. Se debe aplicar un parche para remediar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:8.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180A1691-C529-44F7-B4C3-92A1A9618594"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/7215ead1e0cd7d3703cc4f5fca06d7d0f4c22b91",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4881",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4881#issue-3944216443",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4886",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348011",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348011",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3283",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T03:16:02.940",
      "lastModified" : "2026-03-02T17:56:47.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_band leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. To fix this issue, it is recommended to deploy a patch."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en libvips 8.19.0. Este problema afecta la función vips_extract_band_build del archivo libvips/conversion/extract.c. La manipulación del argumento extract_band lleva a lectura fuera de límites. El ataque necesita ser realizado localmente. El exploit ha sido divulgado al público y puede ser usado. El identificador del parche es 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:8.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180A1691-C529-44F7-B4C3-92A1A9618594"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/24795bb3d19d84f7b6f5ed86451ad556c8f2fe70",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4880",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4880#issue-3944214985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4887",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348012",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348012",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758863",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3284",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T03:16:03.167",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_area results in integer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch is identified as 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en libvips 8.19.0. La función afectada es vips_extract_area_build del archivo libvips/conversion/extract.c. La manipulación del argumento extract_area resulta en desbordamiento de entero. El ataque requiere un enfoque local. El exploit se ha hecho público y podría ser utilizado. El parche se identifica como 24795bb3d19d84f7b6f5ed86451ad556c8f2fe70. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libvips:libvips:8.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180A1691-C529-44F7-B4C3-92A1A9618594"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libvips/libvips/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/libvips/libvips/commit/24795bb3d19d84f7b6f5ed86451ad556c8f2fe70",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4879",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/issues/4879#issue-3944211794",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libvips/libvips/pull/4887",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348013",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348013",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758864",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3285",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T03:16:03.397",
      "lastModified" : "2026-03-02T15:41:29.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: 7149c59a39ba44feca261b12f06089f265fec176. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en berry-lang berry hasta la versión 1.1.0. El elemento afectado es la función scan_string del archivo src/be_lexer.c. Esta manipulación causa una lectura fuera de límites. El ataque requiere acceso local. El exploit ha sido divulgado públicamente y puede ser utilizado. Nombre del parche: 7149c59a39ba44feca261b12f06089f265fec176. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:berry-lang:berry:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC373AB-A1DB-4EDF-A680-94A7E0E50F7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/berry-lang/berry/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/berry-lang/berry/commit/7149c59a39ba44feca261b12f06089f265fec176",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/berry-lang/berry/issues/509",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/berry-lang/berry/pull/511",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0211/blob/main/be/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348014",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348014",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-27T04:16:03.227",
      "lastModified" : "2026-02-27T19:13:57.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exact string such as --compress-program was denied."
      }, {
        "lang" : "es",
        "value" : "En OpenClaw antes de 2026.2.23, la validación de tools.exec.safeBins para sort podría ser eludida a través de abreviaturas de opciones largas de GNU (como --compress-prog) en modo de lista de permitidos, lo que llevaba a rutas de ejecución sin aprobación que estaban destinadas a requerir aprobación. Solo una cadena exacta como --compress-program era denegada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.23",
            "matchCriteriaId" : "19EDA1E2-F0D6-44F4-A333-C32DCE286DA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6h-g97w-fg78",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-27T04:16:03.410",
      "lastModified" : "2026-03-06T19:15:08.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data."
      }, {
        "lang" : "es",
        "value" : "En OCaml anterior a 4.14.3 y 5.x anterior a 5.4.1, un desbordamiento de lectura de búfer en la deserialización de Marshal (runtime/intern.c) permite la ejecución remota de código a través de una cadena de ataque multifase. La vulnerabilidad radica en la falta de validación de límites en la función readblock(), que realiza operaciones memcpy() sin límites utilizando longitudes controladas por el atacante a partir de datos Marshal manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.3",
            "matchCriteriaId" : "C54A8C4D-61D8-446B-8DCA-FBF8394EE7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocaml:ocaml:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.4.1",
            "matchCriteriaId" : "296325F6-F724-4C88-9A80-6D5696A35225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ocaml/security-advisories/blob/generated-osv/2026/OSEC-2026-01.json",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://osv.dev/vulnerability/OSEC-2026-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2428",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-27T04:16:03.600",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.1.17. This is due to the PayPal IPN (Instant Payment Notification) verification being disabled by default (`disable_ipn_verification` defaults to `'yes'` in `PayPalSettings.php`). This makes it possible for unauthenticated attackers to send forged PayPal IPN notifications to the publicly accessible IPN endpoint, marking unpaid form submissions as \"paid\" and triggering post-payment automation (emails, access grants, digital product delivery)."
      }, {
        "lang" : "es",
        "value" : "El plugin Fluent Forms Pro Add On Pack para WordPress es vulnerable a la Verificación Insuficiente de Autenticidad de Datos en todas las versiones hasta la 6.1.17, inclusive. Esto se debe a que la verificación de PayPal IPN (Notificación Instantánea de Pago) está deshabilitada por defecto (disable_ipn_verification tiene un valor predeterminado de 'yes' en PayPalSettings.php). Esto permite que atacantes no autenticados envíen notificaciones PayPal IPN falsificadas al endpoint IPN de acceso público, marcando las entregas de formularios no pagadas como 'pagadas' y activando la automatización posterior al pago (correos electrónicos, concesión de accesos, entrega de productos digitales)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluentforms.com/docs/changelog/#2-toc-title",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5c62e54-da06-4b44-ba70-63065e664b0d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3286",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T04:16:03.770",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the argument img leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. El elemento afectado es la función Save del archivo paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java del componente Image Save Endpoint. Dicha manipulación del argumento img conduce a falsificación de petición del lado del servidor. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itwanger:paicoding:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EA4171-1A17-4A58-B220-40FA71E802C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itwanger:paicoding:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577FD1C9-DC07-484C-B324-190BBD534203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itwanger:paicoding:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43617678-3FD4-4081-86B5-E0875CDD8D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itwanger:paicoding:1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C92790-CA2A-4213-905A-7DA11ADFFA7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/NK7KdbIrboeB6WxwfhucW1YgnCb?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348015",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry", "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.348015",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1442",
      "sourceIdentifier" : "cve@takeonme.org",
      "published" : "2026-02-27T05:18:18.713",
      "lastModified" : "2026-03-11T19:40:00.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models. This issue appears to affect all of Unitree’s current offerings as of February 26, 2026, and so should be considered a vulnerability in both the firmware generation and extraction processes. At the time of this release, there is no publicly-documented mechanism to subvert the update process and insert poisoned firmware packages without the equipment owner’s knowledge."
      }, {
        "lang" : "es",
        "value" : "Dado que el algoritmo de cifrado utilizado para proteger las actualizaciones de firmware está a su vez cifrado utilizando material clave disponible para un atacante (o cualquiera que preste atención), las actualizaciones de firmware pueden ser alteradas por un usuario no autorizado, y luego confiadas por un producto Unitree, como el Unitree Go2 y otros modelos. Este problema parece afectar a todas las ofertas actuales de Unitree a partir del 26 de febrero de 2026, y por lo tanto debe considerarse una vulnerabilidad tanto en los procesos de generación como de extracción de firmware. En el momento de esta publicación, no existe un mecanismo documentado públicamente para subvertir el proceso de actualización e insertar paquetes de firmware envenenados sin el conocimiento del propietario del equipo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@takeonme.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@takeonme.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_edu_standard_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C9389B-B19D-459E-B1ED-342475B5F588"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2_edu_standard:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B985D2-B874-467B-8629-46F01E785BD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_air_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AFB2CB-9E22-417D-BB7E-05C694381FCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2_air:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB35DA4B-ABEA-493A-BB11-63AA72DAE05C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68718176-2ECF-4F6B-8012-D753FE43BA97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14007E03-A338-48EA-8DCD-DEF3970AA5D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_x_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D71A36-EC3E-4C55-BDC4-876D78B17148"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB316DA-DEC5-4BD4-A314-8AF480632868"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go1_air_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B7973E-1018-44F0-A070-5B1D0A4AD0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go1_air:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB92A00-F973-4A6A-A4DF-55B1E05F075B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go1_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7321D3B-6F10-45C8-9C0B-FDFC02B0A393"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go1_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D2B494-B3A0-4FA8-99A8-F52EF5C317C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:unitree:go2_edu_plus_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D4BC75-48FB-415E-A2E7-CF0C70C91740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:unitree:go2_edu_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE1CAC4-BD1B-4449-8735-C09DE5C3AACE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001111111111110101111111111000000000000000000000000000000000000000000000000000000101",
        "source" : "cve@takeonme.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bin4ry/UniTEABag",
        "source" : "cve@takeonme.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/posts/kevin-finisterre-6431069a_in-case-you-want-to-teabag-unitree-robotics-activity-7432984361014091776-zB4D",
        "source" : "cve@takeonme.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x.com/bin4rydigit/status/2027197985625420242",
        "source" : "cve@takeonme.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1558",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-27T05:18:19.950",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to, and including, 10.3.2. This is due to the /wp-json/wp-recipe-maker/v1/integrations/instacart REST API endpoint's permission_callback being set to __return_true and a lack of subsequent authorization or ownership checks on the user-supplied recipeId. This makes it possible for unauthenticated attackers to overwrite arbitrary post metadata (wprm_instacart_combinations) for any post ID on the site via the recipeId parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Recipe Maker para WordPress es vulnerable a una Referencia Directa a Objeto Insegura (IDOR) en versiones hasta la 10.3.2, inclusive. Esto se debe a que el endpoint de la API REST /wp-json/wp-recipe-maker/v1/integrations/instacart tiene su permission_callback configurado como __return_true y a la falta de comprobaciones posteriores de autorización o propiedad en el recipeId proporcionado por el usuario. Esto hace posible que atacantes no autenticados sobrescriban metadatos de publicaciones arbitrarios (wprm_instacart_combinations) para cualquier ID de publicación en el sitio a través del parámetro recipeId."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.3.2/includes/public/api/class-wprm-api-integrations.php#L40",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.3.2/includes/public/class-wprm-instacart.php#L110",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3464195%40wp-recipe-maker%2Ftrunk&old=3441130%40wp-recipe-maker%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/90a5589f-f0e9-4511-9c5e-0afcee0824d5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-27T05:18:20.757",
      "lastModified" : "2026-03-05T05:16:37.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitrage service runs under. This may result in unauthorized access to the host and further compromise of the Vitrage service. All deployments exposing the Vitrage API are affected. This occurs in _create_query_function in vitrage/graph/query.py."
      }, {
        "lang" : "es",
        "value" : "En el analizador de consultas de OpenStack Vitrage antes de las versiones 12.0.1, 13.0.0, 14.0.0 y 15.0.0, un usuario con permiso para acceder a la API de Vitrage podría desencadenar la ejecución de código en el host del servicio Vitrage como el usuario bajo el cual se ejecuta el servicio Vitrage. Esto podría resultar en acceso no autorizado al host y un compromiso adicional del servicio Vitrage. Todas las implementaciones que exponen la API de Vitrage se ven afectadas. Esto ocurre en _create_query_function en vitrage/graph/query.py."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:vitrage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.01",
            "matchCriteriaId" : "819FA93C-959C-4AF7-B901-F84A7300387E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:vitrage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.1",
            "matchCriteriaId" : "08776A5E-89BE-4C75-A80D-144381B2B783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:vitrage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.0.1",
            "matchCriteriaId" : "085F48A1-4497-48BD-87DC-662CFF9D209F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openstack:vitrage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4FBEE245-024B-4950-B5CD-9B0B9AB40847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openstack/vitrage/blob/a1f86950e1314b0c740f9cd9b7e9dbab7d02af51/vitrage/graph/query.py#L70",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://storyboard.openstack.org/#%21/story/2011539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/03/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3287",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T05:18:21.190",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the file mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/controller/app/SpuController.java of the component App-side Product Pagination Endpoint. Performing a manipulation of the argument sortField/sort results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en youlaitech youlai-mall 2.0.0. Esto afecta a la función listPagedSpuForApp del archivo mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/controller/app/SpuController.java del componente App-side Product Pagination Endpoint. Realizar una manipulación del argumento sortField/sort resulta en inyección SQL. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:youlai:youlai-mall:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E843DD0-1FE2-4487-B584-A33F72DDCBDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fx4tqqfvdw4.feishu.cn/docx/E1YgdZUApoBU2bxDl37cLgqsnof?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348016",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348016",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3289",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T05:18:21.613",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetadata of the file TemplateCacheComponent.java of the component Template Cache Generation. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Sanluan PublicCMS 6.202506.d. Esto afecta a la función saveMetadata del archivo TemplateCacheComponent.java del componente Template Cache Generation. Una manipulación puede conducir a un salto de ruta. El ataque puede ejecutarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publiccms:publiccms:6.202506.d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5459C26E-3093-4EF1-B844-646DFA669947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.348017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/pa2fpb/wdggytgi4vhl93zd?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3292",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T05:18:21.927",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en jizhiCMS hasta la versión 2.5.6. Afectada es la función findAll en la biblioteca frphp/lib/Model.php del componente Batch Interface. La manipulación del argumento data conduce a inyección SQL. El ataque es posible de ser llevado a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jizhicms:jizhicms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.6",
            "matchCriteriaId" : "09721DA8-D697-4778-89A7-2B7D804451CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/0psPwn/46468da7329f7c676c737b4b6b473ddc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.760180",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27653",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-27T06:17:59.753",
      "lastModified" : "2026-03-17T15:48:27.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "Los instaladores para múltiples productos proporcionados por Soliton Systems K.K. contienen un problema con permisos predeterminados incorrectos, lo que puede permitir que se ejecute código arbitrario con privilegios de SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soliton:securebrowser_for_onegate:1.0.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "8479857E-911F-493B-B6BE-E11C385548F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soliton:securebrowser_ii:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.15",
            "matchCriteriaId" : "F265960F-EDD1-41AD-905D-45085D29513D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soliton:secureworkspace:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.4.8",
            "matchCriteriaId" : "4BBE1A75-C87A-4B74-B68D-1E3B793C00A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN41357120/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.soliton.co.jp/support/2026/006679.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-27T06:18:00.077",
      "lastModified" : "2026-03-07T17:15:51.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file."
      }, {
        "lang" : "es",
        "value" : "telnetd en GNU inetutils hasta la versión 2.7 permite la escalada de privilegios que puede ser explotada al abusar del soporte de credenciales de servicio de systemd añadido a la implementación de login(1) de util-linux en la versión 2.40. Esto está relacionado con el control del cliente sobre la variable de entorno CREDENTIALS_DIRECTORY, y requiere que un usuario local sin privilegios cree un archivo login.noauth."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@mitre.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "6381CFAE-9A10-40ED-BC93-1DB55CB44327"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.hadrons.org/cgit/debian/pkgs/inetutils.git/commit/?id=3953943d8296310485f98963883a798545ab9a6c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2026/02/24/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/06/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3293",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T06:18:00.250",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts can lead to inefficient regular expression complexity. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5fb0a8a318a2ed87f4022a1f56e742424ba94052. A patch should be applied to remediate this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en snowflakedb snowflake-jdbc hasta la versión 4.0.1 que afecta a SdkProxyRoutePlanner del archivo src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java del componente JDBC URL gestor. Manipular el argumento nonProxyHosts puede llevar a una complejidad ineficiente de la expresión regular. El ataque solo puede ejecutarse localmente. El exploit se ha puesto a disposición del público y podría usarse para ataques. Este parche se llama 5fb0a8a318a2ed87f4022a1f56e742424ba94052. Es preciso aplicar el parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snowflake:snowflake_jdbc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "22573F77-B438-4C02-AFF5-33EC07628C5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/snowflakedb/snowflake-jdbc/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/snowflakedb/snowflake-jdbc/commit/5fb0a8a318a2ed87f4022a1f56e742424ba94052",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/snowflakedb/snowflake-jdbc/issues/2505",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/snowflakedb/snowflake-jdbc/issues/2505#issue-3951994646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://snowflakecomputing.atlassian.net/browse/SNOW-3104251",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348035",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348035",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.760428",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3301",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T06:18:00.480",
      "lastModified" : "2026-02-27T15:36:49.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Totolink N300RH 6.1c.1353_B20190305, la cual afecta a la función setWebWlanIdx del archivo /cgi-bin/cstecgi.cgi del componente Interfaz de Gestión Web. Manipular el argumento webWlanIdx resulta en inyección de comandos del sistema operativo. El ataque puede iniciarse en remoto. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:n300rh_firmware:6.1c.1349_b20181018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBEBCE02-A9A6-48EE-BCEB-DA0D345E899B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:n300rh_firmware:6.1c.1353_b20190305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CB74DE-93CC-4E74-860E-233303AF77ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:n300rh:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28EE5BE0-2048-42F8-BA04-0765D82F36BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/N300RHv4/01_setWebWlanIdx_RCE/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348052",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348052",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3302",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-27T07:17:12.300",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the component Sign Up Page. Executing a manipulation of the argument Email can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en SourceCodester Doctor Appointment System 1.0, la cual afecta a alguna funcionalidad desconocida del archivo /register.php del componente Página de Registro. Manipular el argumento Email puede conducir a cross site scripting. El ataque puede lanzarse en remoto. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remyandrade:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EF490E-25B3-4801-8C36-95EFA5F8F1BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rayficom/Proof-of-Concept/blob/main/20260219/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348053",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348053",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.762427",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0871",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-27T08:17:09.410",
      "lastModified" : "2026-03-05T02:03:32.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the \"Only administrators can view\" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Keycloak. Un administrador con permiso 'manage-users' puede eludir la configuración 'Solo los administradores pueden ver' para atributos no gestionados, permitiéndoles modificar estos atributos. Este control de acceso inadecuado puede llevar a cambios no autorizados en los perfiles de usuario, incluso cuando el sistema está configurado para restringir dichas modificaciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.4.9",
            "matchCriteriaId" : "FEA48695-84DD-43C9-A163-38507A9A6582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:-:*:*:*:text-only:*:*:*",
            "matchCriteriaId" : "1830E455-7E11-4264-862D-05971A42D4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.4.0",
            "matchCriteriaId" : "1882E42C-6B1E-4E64-A8A9-28FE4DE7768E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2365",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:2366",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0871",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2428881",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0980",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-02-27T08:17:09.647",
      "lastModified" : "2026-03-27T00:16:21.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en rubyipmi, una gema utilizada en el componente Baseboard Management Controller (BMC) de Red Hat Satellite. Un atacante autenticado con permisos de creación o actualización de hosts podría explotar esta vulnerabilidad al crear un nombre de usuario malicioso para la interfaz BMC. Esto podría llevar a ejecución remota de código (RCE) en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C92A9-0677-442B-8D52-A448F2019903"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:logicminds:rubyipmi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.12.1",
            "matchCriteriaId" : "2D9CA1CC-62E9-4A85-8A56-C34BD5BDA6E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5968",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5970",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:5971",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-0980",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429874",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27776",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-02-27T08:17:09.850",
      "lastModified" : "2026-03-23T14:21:07.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This can be exploited only when IM-LogicDesigner is deployed on the system. Arbitrary code may be executed when some crafted file is imported by a user with the administrative privilege."
      }, {
        "lang" : "es",
        "value" : "El módulo IM-LogicDesigner de intra-mart Accel Platform contiene un problema de deserialización insegura. Esto puede ser explotado solo cuando IM-LogicDesigner está desplegado en el sistema. Se puede ejecutar código arbitrario cuando se importa algún archivo manipulado por un usuario con privilegios de administrador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "89F16356-1DDC-4B0E-A3BD-D6E28FFD05A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "411AC706-E6E8-43CB-B306-2843FF30EF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E28D8EF5-B2AE-4059-9938-E50D8561C4D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5C891F-D7DD-4114-A41E-F5BE6C090862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3C042BF5-B682-49B1-B55A-747FD8E404F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0144B6BE-5B86-40E8-B271-6400C8DA10AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.10:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E7139EEC-BA08-4A35-8757-88DA39DD3FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DD886B62-7059-436D-B694-3BB5BA52F9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E58764-9A88-4922-BD2F-23BB958C10C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "015F17DC-934C-4BB2-BD46-19DEED7EE505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "08F5637C-5BAD-45B4-8A9E-B785DB0E6876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.15:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B2E864-E7A1-440C-999A-4D0960AA7314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4462C2-897E-4AFA-97AB-21C7985896E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59B3CAB0-13AF-4CF4-A953-3FEFECF74DF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.19:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B6AD9220-23CA-410E-804D-BED13FDA10BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.20:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9347A2F6-6649-48A7-A96C-B8F92C60198A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.21:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BED774C-CF35-43C5-BECB-E87F0EF12500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.22:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA7CEA2-94C8-409D-AE35-D57EBF3968D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.23:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D3730474-4CD9-44D5-B500-D63D45702193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.24:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2632CAB9-A0F0-4CB3-A0D5-42D2A8F6FEE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.25:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4266B4E3-7796-448A-9F98-75480C23EB93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.26:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0F52F4-F4FC-47F7-9252-9A2D16ACD0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intra-mart:accel_platform:8.0.27:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4FAEDE-4933-45A1-8F55-E6CC71969AF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://global.intra-mart.support/hc/en-us/articles/55266898383641",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN80500630/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1626",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-02-27T09:16:15.863",
      "lastModified" : "2026-03-05T02:13:42.007",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede explotar el uso de suites de cifrado débiles basadas en CBC en el servicio SSH del dispositivo para potencialmente observar o manipular partes de la comunicación SSH cifrada, si son capaces de interceptar o interactuar con el tráfico de red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:lms1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "88192768-5BFB-4267-BF9A-7D35C79DC6AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:lms1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909B274C-06A9-4AFB-A298-6E32A0BD11B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:mrs1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "487CA09F-7ECD-4A1F-A2CF-DAA9FA6C68BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:mrs1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99E9D30-4967-46EB-A046-8FD8718FD9EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1627",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-02-27T09:16:16.050",
      "lastModified" : "2026-03-05T02:11:28.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede explotar el uso de algoritmos MAC obsoletos y débiles en el servicio SSH del dispositivo para comprometer potencialmente la integridad de la sesión SSH, permitiendo la manipulación de los datos transmitidos si el atacante puede interactuar con el tráfico de red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:lms1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "88192768-5BFB-4267-BF9A-7D35C79DC6AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:lms1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909B274C-06A9-4AFB-A298-6E32A0BD11B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:mrs1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "487CA09F-7ECD-4A1F-A2CF-DAA9FA6C68BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:mrs1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A99E9D30-4967-46EB-A046-8FD8718FD9EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21654",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2026-02-27T09:16:16.223",
      "lastModified" : "2026-03-02T18:25:01.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comandos del sistema operativo') en Johnson Controls Frick Controls Quantum HD permite la inyección de comandos del sistema operativo. La validación insuficiente de la entrada en ciertos parámetros puede permitir acciones inesperadas, lo que podría impactar la seguridad del dispositivo antes de que ocurra la autenticación. Este problema afecta a Frick Controls Quantum HD versión 10.22 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@jci.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.22",
            "matchCriteriaId" : "55477589-0B06-4570-B052-BAA9FC3D1F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:johnsoncontrols:frick_controls_quantum_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C46C22-63A5-4B14-919A-09756664CBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21656",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2026-02-27T09:16:16.417",
      "lastModified" : "2026-03-02T18:24:51.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control Inadecuado de la Generación de Código ('Inyección de Código') en Johnson Controls Frick Controls Quantum HD permite la Inyección de Código. La validación insuficiente de la entrada en ciertos parámetros puede permitir acciones inesperadas, lo que podría impactar la seguridad del dispositivo antes de que ocurra la autenticación. Este problema afecta a Frick Controls Quantum HD versión 10.22 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@jci.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.22",
            "matchCriteriaId" : "55477589-0B06-4570-B052-BAA9FC3D1F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:johnsoncontrols:frick_controls_quantum_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C46C22-63A5-4B14-919A-09756664CBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21657",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2026-02-27T09:16:16.600",
      "lastModified" : "2026-03-02T18:24:43.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control Inadecuado de la Generación de Código ('Inyección de Código') en Johnson Controls Frick Controls Quantum HD permite la inyección de código. La validación insuficiente de la entrada en ciertos parámetros puede permitir acciones inesperadas, lo que podría impactar la seguridad del dispositivo antes de que ocurra la autenticación. Este problema afecta a Frick Controls Quantum HD versión 10.22 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@jci.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.22",
            "matchCriteriaId" : "55477589-0B06-4570-B052-BAA9FC3D1F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:johnsoncontrols:frick_controls_quantum_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C46C22-63A5-4B14-919A-09756664CBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21658",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2026-02-27T09:16:16.773",
      "lastModified" : "2026-03-02T18:24:25.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código no autenticada, es decir, control inadecuado de la generación de código ('Inyección de código'), en Johnson Controls Frick Controls Quantum HD permite la inyección de código. La validación insuficiente de la entrada en ciertos parámetros puede permitir acciones inesperadas, lo que podría impactar la seguridad del dispositivo antes de que ocurra la autenticación. Este problema afecta a Frick Controls Quantum HD versión 10.22 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@jci.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.22",
            "matchCriteriaId" : "55477589-0B06-4570-B052-BAA9FC3D1F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:johnsoncontrols:frick_controls_quantum_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C46C22-63A5-4B14-919A-09756664CBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2251",
      "sourceIdentifier" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
      "published" : "2026-02-27T09:16:16.950",
      "lastModified" : "2026-03-02T18:24:15.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. \nThis issue affects Xerox FreeFlow Core versions up to and including 8.0.7.\n\n\n\n\n\n\n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on -  https://www.support.xerox.com/en-us/product/core/downloads \n\n  https://www.support.xerox.com/en-us/product/core/downloads"
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (Salto de ruta) en Xerox FreeFlow Core permite un salto de ruta no autorizado que conduce a RCE.\nEste problema afecta a las versiones de Xerox FreeFlow Core hasta la 8.0.7 inclusive.\n\nConsidere actualizar a la versión 8.1.0 de FreeFlow Core a través del software disponible en - https://www.support.xerox.com/en-us/product/core/downloads\n\nhttps://www.support.xerox.com/en-us/product/core/downloads"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerox:freeflow_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.0",
            "matchCriteriaId" : "BB016BFC-2C5B-4CFA-BC3C-B5A9DBF893F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2026/02/Xerox-Security-Bulletin-026-005-for-Xerox-Freeflow-Core.pdf",
        "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2252",
      "sourceIdentifier" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
      "published" : "2026-02-27T09:16:17.130",
      "lastModified" : "2026-03-02T18:24:05.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references.\n\nThis issue affects Xerox FreeFlow Core versions up to and including 8.0.7. \n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on -  https://www.support.xerox.com/en-us/product/core/downloads"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Entidad Externa XML (XXE) permite a un usuario malintencionado realizar una falsificación de petición del lado del servidor (SSRF) a través de una entrada XML manipulada que contiene referencias a entidades externas maliciosas.\n\nEste problema afecta a las versiones de Xerox FreeFlow Core hasta la 8.0.7 inclusive.\n\nConsidere actualizar a la versión 8.1.0 de FreeFlow Core a través del software disponible en - https://www.support.xerox.com/en-us/product/core/downloads"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xerox:freeflow_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.0",
            "matchCriteriaId" : "BB016BFC-2C5B-4CFA-BC3C-B5A9DBF893F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2026/02/Xerox-Security-Bulletin-026-005-for-Xerox-Freeflow-Core.pdf",
        "source" : "10b61619-3869-496c-8a1e-f291b0e71e3f",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2362",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-27T09:16:17.290",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the \"Long Description UI\" feature in all versions up to, and including, 2.3.1. This is due to the plugin's JavaScript retrieving the alt attribute using getAttribute() and unsafely concatenating it into innerHTML and insertAdjacentHTML calls without proper sanitization or escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the \"Long Description UI\" setting to be enabled and set to \"Link to description.\""
      }, {
        "lang" : "es",
        "value" : "El plugin WP Accessibility para WordPress es vulnerable a cross-site scripting persistente basado en DOM a través del atributo 'alt' de las imágenes procesadas por la función \"Long Description UI\" en todas las versiones hasta la 2.3.1, inclusive. Esto se debe a que el JavaScript del plugin recupera el atributo alt usando getAttribute() y lo concatena de forma insegura en llamadas a innerHTML e insertAdjacentHTML sin una sanitización o escape adecuados. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. La explotación requiere que la configuración \"Long Description UI\" esté habilitada y establecida en \"Link a description.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-accessibility/tags/2.3.1/js/wp-accessibility.js#L713",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-accessibility/tags/2.3.1/js/wp-accessibility.js#L807",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-accessibility/trunk/js/wp-accessibility.js#L713",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-accessibility/trunk/js/wp-accessibility.js#L807",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3464593%40wp-accessibility%2Ftrunk&old=3446333%40wp-accessibility%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b08284ad-717f-4bdb-8eaa-f44e9447ff25?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2383",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-27T09:16:17.480",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Simple Download Monitor para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de un campo personalizado en todas las versiones hasta la 4.0.5, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-download-monitor/tags/4.0.3/sdm-shortcodes.php#L543",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-download-monitor/trunk/sdm-shortcodes.php#L543",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3464024%40simple-download-monitor%2Ftrunk&old=3430786%40simple-download-monitor%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/556e41d1-2c98-4175-87ba-29689704c2f0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1305",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-27T10:16:21.863",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4. This is due to a flawed permission check in the `paidy_webhook_permission_check` function that unconditionally returns `true` when the webhook signature header is omitted. This makes it possible for unauthenticated attackers to bypass payment verification and fraudulently mark orders as \"Processing\" or \"Completed\" without actual payment via a crafted POST request to the Paidy webhook endpoint."
      }, {
        "lang" : "es",
        "value" : "El plugin Japanized para WooCommerce para WordPress es vulnerable a una autenticación incorrecta en versiones hasta la 2.8.4, inclusive. Esto se debe a una verificación de permisos defectuosa en la función `paidy_webhook_permission_check` que devuelve `true` incondicionalmente cuando se omite el encabezado de firma del webhook. Esto permite a atacantes no autenticados omitir la verificación de pago y marcar fraudulentamente pedidos como 'En procesamiento' o 'Completado' sin pago real, mediante una solicitud POST manipulada al punto final del webhook de Paidy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/tags/2.8.2/includes/gateways/paidy/class-wc-paidy-endpoint.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/tags/2.8.2/includes/gateways/paidy/class-wc-paidy-endpoint.php#L63",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/trunk/includes/gateways/paidy/class-wc-paidy-endpoint.php#L108",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/trunk/includes/gateways/paidy/class-wc-paidy-endpoint.php#L63",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464868/woocommerce-for-japan/trunk/includes/gateways/paidy/class-wc-paidy-endpoint.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8cef4b2b-ae8d-4e18-b763-6960a0b944f7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21659",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2026-02-27T10:16:22.373",
      "lastModified" : "2026-03-02T18:23:49.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthenticated attacker to\nexecute arbitrary code on the affected device, leading to full system compromise. \nThis issue affects Frick Controls Quantum HD: Frick Controls Quantum HD version 10.22 and prior."
      }, {
        "lang" : "es",
        "value" : "Ejecución remota de código no autenticada y revelación de información debido a una vulnerabilidad de inclusión local de ficheros (LFI) en Johnson Controls Frick Controls Quantum HD permiten a un atacante no autenticado ejecutar código arbitrario en el dispositivo afectado, lo que lleva a un compromiso total del sistema. Este problema afecta a Frick Controls Quantum HD: Frick Controls Quantum HD versión 10.22 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@jci.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.22",
            "matchCriteriaId" : "55477589-0B06-4570-B052-BAA9FC3D1F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:johnsoncontrols:frick_controls_quantum_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C46C22-63A5-4B14-919A-09756664CBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21660",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2026-02-27T10:16:22.563",
      "lastModified" : "2026-03-02T18:23:05.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise\nThis issue affects Frick Controls Quantum HD version 10.22 and prior."
      }, {
        "lang" : "es",
        "value" : "Credenciales de correo electrónico codificadas de forma rígida guardadas como texto plano en el firmware (CWE-256: Almacenamiento de Contraseña en Texto Plano) vulnerabilidad en Frick Controls Quantum HD versión 10.22 y anteriores conduce a acceso no autorizado, exposición de información sensible y posible uso indebido o compromiso del sistema.\nEste problema afecta a Frick Controls Quantum HD versión 10.22 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@jci.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.22",
            "matchCriteriaId" : "55477589-0B06-4570-B052-BAA9FC3D1F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:johnsoncontrols:frick_controls_quantum_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7C46C22-63A5-4B14-919A-09756664CBFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1434",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-27T11:16:04.770",
      "lastModified" : "2026-02-27T17:34:25.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s browser.\n\nThis issue was fixed in 4.6.7."
      }, {
        "lang" : "es",
        "value" : "Omega-PSIR es vulnerable a XSS Reflejado a través del parámetro lang. Un atacante puede crear una URL maliciosa que, al abrirse, provoca la ejecución de JavaScript arbitrario en el navegador de la víctima.\n\nEste problema se solucionó en 4.6.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pw:omega-psir:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.9",
            "versionEndExcluding" : "4.6.7",
            "matchCriteriaId" : "5B73E163-D82B-4472-84C5-D0E2A1AF1216"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/02/CVE-2026-1434",
        "source" : "cvd@cert.pl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.omegapsir.io/",
        "source" : "cvd@cert.pl",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24350",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-27T12:16:02.867",
      "lastModified" : "2026-02-27T18:33:58.880",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PluXml CMS is vulnerable to Stored XSS in file uploading functionality. An authenticated attacker can upload an SVG file containing a malicious payload, which will be executed when a victim clicks the link associated with the uploaded image.\nIn version 5.9.0-rc7 clicking the link associated with the uploaded image doesn't execute malicious code but directly accessing the file will still execute the embedded payload.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only versions 5.8.21 and 5.9.0-rc7 were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable."
      }, {
        "lang" : "es",
        "value" : "PluXml CMS es vulnerable a XSS Almacenado en la funcionalidad de carga de archivos. Un atacante autenticado puede cargar un archivo SVG que contiene una carga útil maliciosa, que se ejecutará cuando una víctima haga clic en el enlace asociado con la imagen cargada.\nEn la versión 5.9.0-rc7, hacer clic en el enlace asociado con la imagen cargada no ejecuta código malicioso, pero acceder directamente al archivo seguirá ejecutando la carga útil incrustada.\n\nSe notificó al proveedor con antelación sobre esta vulnerabilidad, pero no respondió dando los detalles de la vulnerabilidad ni del rango de versiones vulnerables. Solo se probaron las versiones 5.8.21 y 5.9.0-rc7 y se confirmó que eran vulnerables; no se probaron otras versiones por lo que también podrían ser vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.8.9:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "1F351A35-C607-4452-82DB-8F2548F5640A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8A60BA-2CCD-4CA1-85EB-C576B06084AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/03/CVE-2026-24350",
        "source" : "cvd@cert.pl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://pluxml.org/",
        "source" : "cvd@cert.pl",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24351",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-27T12:16:03.047",
      "lastModified" : "2026-02-27T18:34:15.210",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only versions 5.8.21 and 5.9.0-rc7 were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable."
      }, {
        "lang" : "es",
        "value" : "PluXml CMS es vulnerable a XSS Almacenado en la funcionalidad de edición de Páginas Estáticas. Un atacante con privilegios de edición puede inyectar HTML y JS arbitrarios en el sitio web, que será renderizado/ejecutado al visitar la página editada.\n\nSe notificó al proveedor con antelación sobre esta vulnerabilidad, pero no respondió dando los detalles de la vulnerabilidad ni del rango de versiones vulnerables. Solo se probaron las versiones 5.8.21 y 5.9.0-rc7 y se confirmó que eran vulnerables; no se probaron otras versiones por lo que también podrían ser vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.8.9:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "1F351A35-C607-4452-82DB-8F2548F5640A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8A60BA-2CCD-4CA1-85EB-C576B06084AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/03/CVE-2026-24350",
        "source" : "cvd@cert.pl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://pluxml.org/",
        "source" : "cvd@cert.pl",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24352",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-02-27T12:16:03.210",
      "lastModified" : "2026-02-27T18:36:00.687",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PluXml CMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID\nfor a victim and later hijack the authenticated session.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only versions 5.8.21 and 5.9.0-rc7 were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable."
      }, {
        "lang" : "es",
        "value" : "PluXml CMS permite que el identificador de sesión de un usuario sea establecido antes de la autenticación. El valor de este ID de sesión permanece igual después de la autenticación. Este comportamiento permite a un atacante fijar un ID de sesión para una víctima y luego secuestrar la sesión autenticada.\n\nSe notificó al proveedor con antelación sobre esta vulnerabilidad, pero no respondió dando los detalles de la vulnerabilidad ni el rango de versiones vulnerables. Solo se probaron las versiones 5.8.21 y 5.9.0-rc7 y se confirmó que eran vulnerables; no se probaron otras versiones por lo que también podrían ser vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.8.9:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "1F351A35-C607-4452-82DB-8F2548F5640A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluxml:pluxml:5.8.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8A60BA-2CCD-4CA1-85EB-C576B06084AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/03/CVE-2026-24350",
        "source" : "cvd@cert.pl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://pluxml.org/",
        "source" : "cvd@cert.pl",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2831",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-27T12:16:03.383",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin MailArchiver para WordPress es vulnerable a inyección SQL a través del parámetro 'logid' en todas las versiones hasta la 4.5.0, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, adjunten consultas SQL adicionales en consultas ya existentes que pueden usarse para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/tags/4.5.0/includes/features/class-events.php#L614",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/tags/4.5.0/includes/features/class-eventviewer.php#L79",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5bc8da1b-8095-46b5-8268-63bdddb4e629?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2751",
      "sourceIdentifier" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
      "published" : "2026-02-27T14:16:30.780",
      "lastModified" : "2026-03-09T20:50:29.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL ciega a través de claves de array no saneadas en la eliminación de dependencias de servicio. Vulnerabilidad en Centreon Centreon Web en el servidor central en Linux (módulos de dependencias de servicio) permite inyección SQL ciega. Este problema afecta a Centreon Web en el servidor central antes de 25.10.8, 24.10.20, 24.04.24."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.04.0",
            "versionEndExcluding" : "24.04.24.",
            "matchCriteriaId" : "59310DAC-2A79-48BE-8800-02F4E1292B9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.10.0",
            "versionEndExcluding" : "24.10.20",
            "matchCriteriaId" : "BBEDC030-8FF3-49AA-962F-6A997A58319C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.10.0",
            "versionEndExcluding" : "25.10.8",
            "matchCriteriaId" : "59EA86A8-6FF7-466E-A58D-7E51BBE187F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2751-centreon-web-high-severity-5504",
        "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3223",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2026-02-27T14:16:30.923",
      "lastModified" : "2026-04-14T00:33:21.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer."
      }, {
        "lang" : "es",
        "value" : "Escritura arbitraria de archivos y potencial escalada de privilegios explotando la vulnerabilidad zip slip en Google Web Designer."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:web_designer:14.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFBF3177-E4D5-4948-854C-B429D0BCE081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bughunters.google.com/reports/vrp/FJMQGy8oo",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3327",
      "sourceIdentifier" : "3ba556a3-57d7-4c5d-b460-9d6daa180ee1",
      "published" : "2026-02-27T15:16:30.950",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews < v1.0.31."
      }, {
        "lang" : "es",
        "value" : "Inyección de Iframe Autenticada en el plugin Web Previews de Dato CMS. Esta vulnerabilidad permite a un usuario autenticado malicioso evitar la restricción impuesta en la URL de frontend, permitiendo la carga de recursos externos u orígenes arbitrarios. Este problema afecta a Web Previews &lt; v1.0.31."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "3ba556a3-57d7-4c5d-b460-9d6daa180ee1",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "3ba556a3-57d7-4c5d-b460-9d6daa180ee1",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datocms/plugins/commit/7965eebf0973cc5ebb18bc5ff9ce7ff19e89bb2e",
        "source" : "3ba556a3-57d7-4c5d-b460-9d6daa180ee1"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2359",
      "sourceIdentifier" : "ce714d77-add3-4f53-aff5-83d477b104bb",
      "published" : "2026-02-27T16:16:25.467",
      "lastModified" : "2026-03-19T17:28:16.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by dropping connection during file upload, potentially causing resource exhaustion. Users should upgrade to version 2.1.0 to receive a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Multer es un middleware de node.js para gestionar multipart/form-data. Una vulnerabilidad en Multer anterior a la versión 2.1.0 permite a un atacante activar una Denegación de Servicio (DoS) al interrumpir la conexión durante la carga de archivos, lo que podría causar el agotamiento de recursos. Los usuarios deben actualizar a la versión 2.1.0 para recibir un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressjs:multer:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "782CDA46-E1F1-4E97-86C1-C9C0D58202DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.openjsf.org/security-advisories.html",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/expressjs/multer/commit/cccf0fe0e64150c4f42ccf6654165c0d66b9adab",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-2359",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2749",
      "sourceIdentifier" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
      "published" : "2026-02-27T16:16:25.700",
      "lastModified" : "2026-03-23T17:05:37.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Centreon Centreon Open Tickets en Servidor Central en Linux (módulos de Centroen Open Ticket). Este problema afecta a Centreon Open Tickets en Servidor Central: desde todas las versiones anteriores a 25.10.3, 24.10.8, 24.04.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:open_tickets:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.04.7",
            "matchCriteriaId" : "0B8ECB79-72C0-48E0-943D-48BC16E5A0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:open_tickets:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.10.0",
            "versionEndExcluding" : "24.10.8",
            "matchCriteriaId" : "6DA51F48-499E-4A3D-BC8C-DD11A677CB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:open_tickets:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.10.0",
            "versionEndExcluding" : "25.10.3",
            "matchCriteriaId" : "4D9EC496-A0B6-4B26-9ADB-A632A9B2C534"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155AD4FB-E527-4103-BCEF-801B653DEA37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2749-centreon-open-tickets-critical-severity-5493",
        "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2750",
      "sourceIdentifier" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
      "published" : "2026-02-27T16:16:25.827",
      "lastModified" : "2026-03-23T16:58:57.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10; 24.10;24.04."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de validación de entrada incorrecta en Centreon Centreon Open Tickets en el servidor central en Linux (módulos de Centreon Open Tickets). Este problema afecta a Centreon Open Tickets en el servidor central: desde todas las versiones anteriores a 25.10; 24.10; 24.04."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:web:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.04.24",
            "matchCriteriaId" : "1827AE36-2AA2-4800-A21D-74E185193E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.10.0",
            "versionEndExcluding" : "24.10.20",
            "matchCriteriaId" : "0082184F-EF71-4529-921A-DA7876F80B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.01.0",
            "versionEndExcluding" : "25.10.8",
            "matchCriteriaId" : "CA7B730E-209C-43B2-8F5A-C6FD8CB90443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://thewatch.centreon.com/latest-security-bulletins-64/cve-2026-2750-centreon-web-critical-severity-5503",
        "source" : "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3277",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-02-27T16:16:26.260",
      "lastModified" : "2026-03-30T21:17:10.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenID Connect (OIDC) authentication configuration in PowerShell \nUniversal before 2026.1.3 stores the OIDC client secret in cleartext in \nthe .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials"
      }, {
        "lang" : "es",
        "value" : "La configuración de autenticación de OpenID Connect (OIDC) en PowerShell Universal anterior a 2026.1.3 almacena el secreto de cliente de OIDC en texto claro en el script .universal/authentication.ps1, lo que permite a un atacante con acceso de lectura a ese archivo obtener las credenciales de cliente de OIDC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ironmansoftware:powershell_universal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.1.3",
            "matchCriteriaId" : "DDCF2FFB-2420-4494-9270-DAE5093BEC2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0006",
        "source" : "security@devolutions.net",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3304",
      "sourceIdentifier" : "ce714d77-add3-4f53-aff5-83d477b104bb",
      "published" : "2026-02-27T16:16:26.380",
      "lastModified" : "2026-03-19T17:28:33.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing resource exhaustion. Users should upgrade to version 2.1.0 to receive a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Multer es un middleware de node.js para manejar 'multipart/form-data'. Una vulnerabilidad en Multer anterior a la versión 2.1.0 permite a un atacante activar una denegación de servicio (DoS) enviando solicitudes malformadas, lo que podría causar el agotamiento de recursos. Los usuarios deberían actualizar a la versión 2.1.0 para recibir un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressjs:multer:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "782CDA46-E1F1-4E97-86C1-C9C0D58202DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.openjsf.org/security-advisories.html",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/expressjs/multer/commit/739919097dde3921ec31b930e4b9025036fa74ee",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/expressjs/multer/security/advisories/GHSA-xf7r-hgr6-v32p",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3304",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T17:16:30.497",
      "lastModified" : "2026-03-03T18:48:01.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, an arbitrary file exfiltration vulnerability in the fax sending endpoint allows any authenticated user to read and transmit any file on the server (including database credentials, patient documents, system files, and source code) via fax to an attacker-controlled phone number. The vulnerability exists because the endpoint accepts arbitrary file paths from user input and streams them to the fax gateway without path restrictions or authorization checks. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de práctica médica y registros de salud electrónicos de código abierto y gratuita. En versiones hasta la 8.0.0 inclusive, una vulnerabilidad de exfiltración de archivos arbitrarios en el endpoint de envío de fax permite a cualquier usuario autenticado leer y transmitir cualquier archivo en el servidor (incluyendo credenciales de la base de datos, documentos de pacientes, archivos del sistema y código fuente) vía fax a un número de teléfono controlado por el atacante. La vulnerabilidad existe porque el endpoint acepta rutas de archivo arbitrarias de la entrada del usuario y las transmite al gateway de fax sin restricciones de ruta o comprobaciones de autorización. Hasta el momento de la publicación, se conoce que haya versiones que parcheen el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.0",
            "matchCriteriaId" : "1D995E4F-C6E0-47AC-9F5A-4E828BA9A292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/blob/v7_0_4/interface/modules/custom_modules/oe-module-faxsms/src/Controller/EtherFaxActions.php#L177-L221",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-765x-8v97-c7g8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25147",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T17:16:30.933",
      "lastModified" : "2026-03-03T19:10:32.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, in `portal/portal_payment.php`, the patient id used for the page is taken from the request (`$pid = $_REQUEST['pid'] ?? $pid` and `$pid = ($_REQUEST['hidden_patient_code'] ?? null) > 0 ? $_REQUEST['hidden_patient_code'] : $pid`) instead of being fixed to the authenticated portal user. The portal session already has a valid `$pid` for the logged-in patient. Overwriting it with user-supplied values and using it without authorization allows a portal user to view and interact with another patient's demographics, invoices, and payment history—horizontal privilege escalation and IDOR. Version 8.0.0 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros médicos electrónicos y práctica médica de código abierto y gratuita. Antes de la versión 8.0.0, en 'portal/portal_payment.php', el ID de paciente utilizado para la página se toma de la solicitud ('$pid = $_REQUEST['pid'] ?? $pid' y '$pid = ($_REQUEST['hidden_patient_code'] ?? null) &gt; 0 ? $_REQUEST['hidden_patient_code'] : $pid') en lugar de estar fijo al usuario autenticado del portal. La sesión del portal ya tiene un '$pid' válido para el paciente que ha iniciado sesión. Sobrescribirlo con valores proporcionados por el usuario y usarlo sin autorización permite a un usuario del portal ver e interactuar con los datos demográficos, facturas e historial de pagos de otro paciente —escalada de privilegios horizontal e IDOR. La versión 8.0.0 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/d6ab3cd0b621b19b942cf49d2db2026e288aa214",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-mwmw-qxv3-8whh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2293",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2026-02-27T17:16:33.357",
      "lastModified" : "2026-04-14T00:30:36.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled.\n\n\n\nThis issue affects nest.Js: 11.1.13."
      }, {
        "lang" : "es",
        "value" : "Una aplicación NestJS que utiliza @nestjs/platform-fastify puede permitir la omisión del middleware de autenticación/autorización cuando las opciones de normalización de rutas de Fastify están habilitadas.\n\nEste problema afecta a nest.Js: 11.1.13."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "help@fluidattacks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nestjs:nest:11.1.13:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "738264DB-2E5D-413E-A768-643F1DFDD903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/neton",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/nestjs/nest/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nestjs/nest/releases/tag/v11.1.14",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21619",
      "sourceIdentifier" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "published" : "2026-02-27T18:16:11.373",
      "lastModified" : "2026-04-06T17:17:07.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Object Injection, Excessive Allocation. This vulnerability is associated with program files src/hex_api.erl, src/mix_hex_api.erl, apps/rebar/src/vendored/r3_hex_api.erl and program routines hex_core:request/4, mix_hex_api:request/4, r3_hex_api:request/4.\n\nThis issue affects hex_core: from 0.1.0 before 0.12.1; hex: from 2.3.0 before 2.3.2; rebar3: from 3.9.1 before 3.27.0."
      }, {
        "lang" : "es",
        "value" : "Consumo de Recursos No Controlado, vulnerabilidad de Deserialización de Datos No Confiables en hexpm hex_core (módulos hex_api), hexpm hex (módulos mix_hex_api), erlang rebar3 (módulos r3_hex_api) permite Inyección de Objetos, Asignación Excesiva. Esta vulnerabilidad está asociada con los archivos de programa src/hex_api.erl, src/mix_hex_api.erl, apps/rebar/src/vendored/r3_hex_api.erl y las rutinas de programa hex_core:request/4, mix_hex_api:request/4, r3_hex_api:request/4.\n\nEste problema afecta a hex_core: desde 0.1.0 antes de 0.12.1; hex: desde 2.3.0 antes de 2.3.2; rebar3: desde 3.9.1 antes de 3.27.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erlang:rebar3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.1",
            "versionEndExcluding" : "3.27.0",
            "matchCriteriaId" : "C21AB09A-0A82-419D-9A2E-A2C3F771655D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hex:hex:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "477DC32B-3F4B-4F45-BB4B-E0236656AB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hex:hex_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "0.12.1",
            "matchCriteriaId" : "91F2E848-912E-48E6-9784-7781F04E3222"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.erlef.org/cves/CVE-2026-21619.html",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/erlang/rebar3/commit/1d4478f527e373de0b225951e53115450e0d9b9d",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hex/commit/636739f3322514e9303ca335fb630696fcbb3c95",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hex_core/commit/cdf726095bca85ad2549d146df1e831ae93c2b13",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hex_core/security/advisories/GHSA-hx9w-f2w9-9g96",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://osv.dev/vulnerability/EEF-CVE-2026-21619",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26861",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-27T18:16:12.043",
      "lastModified" : "2026-03-03T18:46:02.547",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage. The handleCustomHtmlPreviewPostMessageEvent function in src/util/campaignRender/nativeDisplay.js performs insufficient origin validation using the includes() method, which can be bypassed by an attacker using a subdomain"
      }, {
        "lang" : "es",
        "value" : "CleverTap Web SDK versión 1.15.2 y anteriores es vulnerable a Cross-Site Scripting (XSS) a través de window.postMessage. La función handleCustomHtmlPreviewPostMessageEvent en src/util/campaignRender/nativeDisplay.js realiza una validación de origen insuficiente utilizando el método includes(), que puede ser eludida por un atacante utilizando un subdominio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clevertap:clevertap_web_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.2",
            "matchCriteriaId" : "A4F60CE8-3848-4625-82B3-64963E248307"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CleverTap/clevertap-web-sdk/blob/cf1b65d/src/util/campaignRender/nativeDisplay.js#L118-L121",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/CleverTap/clevertap-web-sdk/issues/424",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/CleverTap/clevertap-web-sdk/pull/417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-02-27T18:16:12.163",
      "lastModified" : "2026-03-03T18:44:20.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Builder module. The origin validation in src/modules/visualBuilder/pageBuilder.js (lines 56-60) uses the includes() method to verify the originUrl contains \"dashboard.clevertap.com\", which can be bypassed by an attacker using a crafted subdomain"
      }, {
        "lang" : "es",
        "value" : "CleverTap Web SDK versión 1.15.2 y anteriores es vulnerable a cross-site scripting (XSS) basado en DOM a través de window.postMessage en el módulo Visual Builder. La validación de origen en src/modules/visualBuilder/pageBuilder.js (líneas 56-60) utiliza el método includes() para verificar que la originUrl contiene 'dashboard.clevertap.com', lo cual puede ser eludido por un atacante utilizando un subdominio manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clevertap:clevertap_web_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.2",
            "matchCriteriaId" : "A4F60CE8-3848-4625-82B3-64963E248307"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CleverTap/clevertap-web-sdk/blob/cf1b65d/src/modules/visualBuilder/pageBuilder.js#L56-L60",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/CleverTap/clevertap-web-sdk/issues/442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/CleverTap/clevertap-web-sdk/pull/417",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27751",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T18:16:12.897",
      "lastModified" : "2026-03-04T02:08:00.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the management interface. Attackers can authenticate using the hardcoded default credentials without password change enforcement to gain full administrative control of the device."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 contienen una vulnerabilidad de credenciales por defecto que permite a atacantes remotos obtener acceso de administración a la interfaz de gestión. Los atacantes pueden autenticarse utilizando las credenciales por defecto almacenadas en el código sin forzar el cambio de contraseña para obtener control de administración total del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-use-of-default-credentials",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27752",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T18:16:13.083",
      "lastModified" : "2026-03-03T19:09:44.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain administrative access to the gateway."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 transmiten credenciales de autenticación a través de HTTP sin cifrar, lo que permite a los atacantes capturar las credenciales. Un atacante posicionado para observar el tráfico de red entre un usuario y el dispositivo puede interceptar las credenciales y reutilizarlas para obtener acceso administrativo a la pasarela."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-cleartext-credential-transmission",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27753",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T18:16:13.303",
      "lastModified" : "2026-03-03T19:09:33.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 contienen una vulnerabilidad de omisión de autenticación que permite a atacantes remotos realizar intentos de inicio de sesión ilimitados contra la interfaz de gestión. Los atacantes pueden llevar a cabo ataques de adivinación de contraseñas en línea sin restricciones de bloqueo de cuenta o limitación de velocidad para obtener acceso no autorizado a la interfaz de gestión del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-improper-login-rate-limiting",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22716",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-27T19:16:07.200",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to terminate certain Workstation processes."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en VMware Workstation 25H1 y versiones anteriores en cualquier plataforma permite a un actor con privilegios no administrativos en una VM invitada terminar ciertos procesos de Workstation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986",
        "source" : "security@vmware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27754",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T19:16:09.320",
      "lastModified" : "2026-03-03T19:09:23.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security. Attackers can exploit predictable session tokens combined with MD5's collision vulnerabilities to forge valid session cookies and gain unauthorized access to the device."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 utilizan la función hash MD5, criptográficamente rota, para la generación de cookies de sesión, debilitando la seguridad de la sesión. Los atacantes pueden explotar tokens de sesión predecibles combinados con las vulnerabilidades de colisión de MD5 para falsificar cookies de sesión válidas y obtener acceso no autorizado al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-328"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-md5-session-token-generation",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27755",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T19:16:09.527",
      "lastModified" : "2026-03-03T19:09:12.973",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 contienen una vulnerabilidad de generación de identificadores de sesión débil que permite a los atacantes falsificar sesiones autenticadas al calcular cookies predecibles basadas en MD5. Los atacantes que conocen o adivinan credenciales válidas pueden calcular el identificador de sesión sin conexión y omitir la autenticación sin completar el flujo de inicio de sesión, obteniendo acceso no autorizado al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-predictable-session-id",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27756",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T19:16:09.763",
      "lastModified" : "2026-03-03T19:12:22.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encoded before output. Attackers can craft malicious URLs that execute arbitrary JavaScript in the web interface when visited by authenticated users."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 contienen una vulnerabilidad de cross-site scripting reflejado en la interfaz de gestión donde la entrada del usuario no se codifica correctamente antes de la salida. Los atacantes pueden elaborar URL maliciosas que ejecutan JavaScript arbitrario en la interfaz web cuando son visitadas por usuarios autenticados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-reflected-xss-in-management-interface",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27757",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T19:16:09.990",
      "lastModified" : "2026-03-03T19:09:01.163",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password. Attackers who gain access to an authenticated session can modify credentials to maintain persistent access to the management interface."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 contienen una vulnerabilidad de autenticación que permite a los usuarios autenticados cambiar las contraseñas de las cuentas sin verificar la contraseña actual. Los atacantes que obtienen acceso a una sesión autenticada pueden modificar las credenciales para mantener un acceso persistente a la interfaz de gestión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-unverified-password-change",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27758",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T19:16:10.183",
      "lastModified" : "2026-03-03T19:08:51.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged requests. Attackers can craft malicious requests that execute unauthorized configuration or administrative actions with the victim's privileges when the authenticated user visits a malicious webpage."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware de SODOLA SL902-SWTGW124AS hasta la 200.1.20 contienen una vulnerabilidad de falsificación de petición en sitios cruzados en su interfaz de gestión que permite a los atacantes inducir a usuarios autenticados a enviar peticiones falsificadas. Los atacantes pueden elaborar peticiones maliciosas que ejecutan acciones de configuración o administración no autorizadas con los privilegios de la víctima cuando el usuario autenticado visita una página web maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sodola-network:sl902-swtgw124as_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "200.1.20",
            "matchCriteriaId" : "18BBB9A4-A6EC-45DD-955C-2070C0098E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sodola-network:sl902-swtgw124as:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542ED775-5070-40DA-88A5-6FA98075BAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-missing-csrf-protections",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2880",
      "sourceIdentifier" : "ce714d77-add3-4f53-aff5-83d477b104bb",
      "published" : "2026-02-27T19:16:12.807",
      "lastModified" : "2026-03-19T17:30:15.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware (for example, app.use('/secret', auth)).\n\nWhen Fastify router normalization options are enabled (such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related trailing-slash behavior), crafted request paths may bypass middleware checks while still being routed to protected handlers."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las versiones de @fastify/middie anteriores a la 9.2.0 puede resultar en una omisión de autenticación/autorización al usar middleware con ámbito de ruta (por ejemplo, app.use('/secret', auth)).\n\nCuando las opciones de normalización del router de Fastify están habilitadas (como ignoreDuplicateSlashes, useSemicolonDelimiter y el comportamiento relacionado con las barras finales), las rutas de solicitud manipuladas pueden omitir las comprobaciones del middleware mientras siguen siendo enrutadas a manejadores protegidos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openjsf:\\@fastify\\/middie:*:*:*:*:*:fastify:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "DC79079B-3710-4857-B247-AF5016559CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/middie/security/advisories/GHSA-8p85-9qpw-fwgw",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22717",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-02-27T20:21:36.713",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura fuera de límites en VMware Workstation 25H1 y versiones anteriores en cualquier plataforma permite a un actor con privilegios no administrativos en una máquina virtual invitada obtener una revelación de información limitada de la máquina donde está instalado VMware Workstation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36986",
        "source" : "security@vmware.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26997",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:37.503",
      "lastModified" : "2026-03-03T20:10:04.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated user can store the XSS payload. The payload is triggered by administrator. Version 5.5.3 #59 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "ClipBucket v5 es una plataforma de código abierto para compartir videos. Antes de la versión 5.5.3 #59, un usuario autenticado normal puede almacenar la carga útil de XSS. La carga útil es activada por el administrador. La versión 5.5.3 #59 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3",
            "versionEndExcluding" : "5.5.3-59",
            "matchCriteriaId" : "9AC9B64A-469F-4E76-9B21-E45B20FDD200"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/commit/2da4c8e41f9e4baf47ff89f8a674fbe9b63ac76d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-97r6-4hmx-hcrh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27200",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:37.950",
      "lastModified" : "2026-02-27T20:21:37.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27201",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.033",
      "lastModified" : "2026-02-27T20:21:38.033",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27500",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.100",
      "lastModified" : "2026-02-27T20:21:38.100",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27501",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.163",
      "lastModified" : "2026-02-27T20:21:38.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27573",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.300",
      "lastModified" : "2026-02-27T20:21:38.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27580",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.360",
      "lastModified" : "2026-02-27T20:21:38.360",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27581",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.423",
      "lastModified" : "2026-02-27T20:21:38.423",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27582",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.483",
      "lastModified" : "2026-02-27T20:21:38.483",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27583",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.550",
      "lastModified" : "2026-02-27T20:21:38.550",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Further research determined the situation described is not a vulnerability."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27707",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.760",
      "lastModified" : "2026-03-04T16:54:47.437",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting in version 2.0.0 and prior to version 3.1.0, an authentication guard logic flaw in `POST /api/v1/auth/jellyfin` allows an unauthenticated attacker to register a new Seerr account on any Plex-configured instance by authenticating with an attacker-controlled Jellyfin server. The attacker receives an authenticated session and can immediately use the application with default permissions, including the ability to submit media requests to Radarr/Sonarr. Any Seerr deployment where all three of the following are true may be vulnerable: `settings.main.mediaServerType` is set to `PLEX` (the most common deployment).; `settings.jellyfin.ip` is set to `\"\"` (default, meaning Jellyfin was never configured); and `settings.main.newPlexLogin` is set to `true` (default). Jellyfin-configured and Emby-configured deployments are not affected. Version 3.1.0 of Seerr fixes this issue."
      }, {
        "lang" : "es",
        "value" : "Seerr es un gestor de solicitudes y descubrimiento de medios de código abierto para Jellyfin, Plex y Emby. A partir de la versión 2.0.0 y antes de la versión 3.1.0, una falla lógica en la protección de autenticación en 'POST /API/v1/auth/jellyfin' permite a un atacante no autenticado registrar una nueva cuenta de Seerr en cualquier instancia configurada con Plex autenticándose con un servidor Jellyfin controlado por el atacante. El atacante recibe una sesión autenticada y puede usar inmediatamente la aplicación con permisos predeterminados, incluida la capacidad de enviar solicitudes de medios a Radarr/Sonarr. Cualquier implementación de Seerr donde se cumplan las tres condiciones siguientes puede ser vulnerable: 'settings.main.mediaServerType' está configurado como 'PLEX' (la implementación más común).; 'settings.jellyfin.ip' está configurado como '\"\"' (predeterminado, lo que significa que Jellyfin nunca fue configurado); y 'settings.main.newPlexLogin' está configurado como 'true' (predeterminado). Las implementaciones configuradas con Jellyfin y Emby no se ven afectadas. La versión 3.1.0 de Seerr soluciona este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        }, {
          "lang" : "en",
          "value" : "CWE-807"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seerr:seerr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "142465B9-9DE4-46F9-B457-572048968C86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seerr-team/seerr/commit/4ae20684092b5b28527b23dfbc1a3417858fee8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/seerr-team/seerr/releases/tag/v3.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/seerr-team/seerr/security/advisories/GHSA-rc4w-7m3r-c2f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27734",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:38.950",
      "lastModified" : "2026-03-04T16:50:52.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied \"container\" query parameter to the agent without validation. The agent constructs Docker Engine API URLs using fmt.Sprintf with the raw value instead of url.PathEscape(). Since Go's http.Client does not sanitize `../` sequences from URL paths sent over unix sockets, an authenticated user (including readonly role) can traverse to arbitrary Docker API endpoints on agent hosts, exposing sensitive infrastructure details. Version 0.18.4 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Beszel es una plataforma de monitorización de servidores. Antes de la versión 0.18.2, los endpoints autenticados de la API del hub GET /api/beszel/containers/logs y GET /api/beszel/containers/info pasaban el parámetro de consulta 'container' proporcionado por el usuario al agente sin validación. El agente construye URLs de la API de Docker Engine usando fmt.Sprintf con el valor sin procesar en lugar de url.PathEscape(). Dado que el http.Client de Go no sanitiza las secuencias '../' de las rutas URL enviadas a través de sockets Unix, un usuario autenticado (incluido el rol de solo lectura) puede acceder a endpoints arbitrarios de la API de Docker en los hosts del agente, exponiendo detalles sensibles de la infraestructura. La versión 0.18.4 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beszel:beszel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.18.2",
            "matchCriteriaId" : "E3248EB7-FB3C-4F5E-9EA7-8F74CF7B541F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/henrygd/beszel/releases/tag/v0.18.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/henrygd/beszel/security/advisories/GHSA-phwh-4f42-gwf3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27792",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:39.403",
      "lastModified" : "2026-03-04T16:49:30.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. A missing authorization vulnerability has been identified in the application starting in version 2.7.0 and prior to version 3.1.0. It allows authenticated users to access and modify data belonging to other users. This issue is due to the absence of the `isOwnProfileOrAdmin()` middleware on several push subscription API routes. Version 3.1.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Seerr es un gestor de solicitudes y descubrimiento de medios de código abierto para Jellyfin, Plex y Emby. Se ha identificado una vulnerabilidad por falta de autorización en la aplicación a partir de la versión 2.7.0 y anterior a la versión 3.1.0. Permite a usuarios autenticados acceder y modificar datos pertenecientes a otros usuarios. Este problema se debe a la ausencia del middleware `isOwnProfileOrAdmin()` en varias rutas de la API de suscripción push. La versión 3.1.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seerr:seerr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "944C97AD-14AF-4971-BB29-64BF4370AE2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seerr-team/seerr/commit/946bdecec524b4e7f8aaf8f2b3856f319a3580c1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/seerr-team/seerr/releases/tag/v3.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/seerr-team/seerr/security/advisories/GHSA-gx3h-3jg5-q65f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27793",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:39.587",
      "lastModified" : "2026-03-04T16:47:37.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.1.0, the `GET /api/v1/user/:id` endpoint returns the full settings object for any user, including Pushover, Pushbullet, and Telegram credentials, to any authenticated requester regardless of their privilege level. This vulnerability can be exploited alone or combined with the reported unauthenticated account creation vulnerability, CVE-2026-27707. When combined, the two vulnerabilities create a zero-prior-access chain that leaks third-party API credentials for all users, including administrators. Version 3.1.0 contains a fix for both this vulnerability and for CVE-2026-27707."
      }, {
        "lang" : "es",
        "value" : "Seerr es un gestor de solicitudes y descubrimiento de medios de código abierto para Jellyfin, Plex y Emby. Antes de la versión 3.1.0, el endpoint 'GET /api/v1/user/:id' devuelve el objeto de configuración completo para cualquier usuario, incluyendo credenciales de Pushover, Pushbullet y Telegram, a cualquier solicitante autenticado independientemente de su nivel de privilegio. Esta vulnerabilidad puede ser explotada sola o combinada con la vulnerabilidad de creación de cuentas no autenticadas reportada, CVE-2026-27707. Cuando se combinan, las dos vulnerabilidades crean una cadena de acceso previo cero que filtra credenciales de API de terceros para todos los usuarios, incluyendo administradores. La versión 3.1.0 contiene una solución para esta vulnerabilidad y para CVE-2026-27707."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seerr:seerr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "7BB6479F-6D32-46FD-8EB0-27A92F2C38C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seerr-team/seerr/commit/4f089b29d0bb41d382168b17aa152eb5b8a25303",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/seerr-team/seerr/releases/tag/v3.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/seerr-team/seerr/security/advisories/GHSA-f7xw-jcqr-57hp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27810",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:39.780",
      "lastModified" : "2026-03-04T16:40:42.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, an HTTP Response Header Injection vulnerability in the calibre Content Server allows any authenticated user to inject arbitrary HTTP headers into server responses via an unsanitized `content_disposition` query parameter in the `/get/` and `/data-files/get/` endpoints. All users running the calibre Content Server with authentication enabled are affected. The vulnerability is exploitable by any authenticated user and can also be triggered by tricking an authenticated victim into clicking a crafted link. Version 9.4.0 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos multiplataforma para ver, convertir, editar y catalogar libros electrónicos. Antes de la versión 9.4.0, una vulnerabilidad de inyección de encabezado de respuesta HTTP en el servidor de contenido de calibre permite a cualquier usuario autenticado inyectar encabezados HTTP arbitrarios en las respuestas del servidor a través de un parámetro de consulta 'content_disposition' no saneado en los puntos finales '/get/' y '/data-files/get/'. Todos los usuarios que ejecutan el servidor de contenido de calibre con la autenticación habilitada se ven afectados. La vulnerabilidad es explotable por cualquier usuario autenticado y también puede ser activada engañando a una víctima autenticada para que haga clic en un enlace manipulado. La versión 9.4.0 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-113"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.0",
            "matchCriteriaId" : "3665E54E-5F8D-405A-BA97-8DD783962094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-5fpj-fxw7-8grw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27824",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:39.973",
      "lastModified" : "2026-03-04T16:39:05.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, the calibre Content Server's brute-force protection mechanism uses a ban key derived from both `remote_addr` and the `X-Forwarded-For` header. Since the `X-Forwarded-For` header is read directly from the HTTP request without any validation or trusted-proxy configuration, an attacker can bypass IP-based bans by simply changing or adding this header, rendering the brute-force protection completely ineffective. This is particularly dangerous for calibre servers exposed to the internet, where brute-force protection is the primary defense against credential stuffing and password guessing attacks. Version 9.4.0 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "calibre es un gestor de libros electrónicos multiplataforma para ver, convertir, editar y catalogar libros electrónicos. Antes de la versión 9.4.0, el mecanismo de protección contra fuerza bruta del servidor de contenido de calibre utiliza una clave de prohibición derivada tanto de 'remote_addr' como del encabezado 'X-Forwarded-For'. Dado que el encabezado 'X-Forwarded-For' se lee directamente de la solicitud HTTP sin ninguna validación o configuración de proxy de confianza, un atacante puede eludir las prohibiciones basadas en IP simplemente cambiando o añadiendo este encabezado, lo que hace que la protección contra fuerza bruta sea completamente ineficaz. Esto es particularmente peligroso para los servidores de calibre expuestos a internet, donde la protección contra fuerza bruta es la defensa principal contra ataques de relleno de credenciales y adivinación de contraseñas. La versión 9.4.0 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.0",
            "matchCriteriaId" : "3665E54E-5F8D-405A-BA97-8DD783962094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kovidgoyal/calibre/security/advisories/GHSA-vhxc-r7v8-2xrw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27832",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:40.150",
      "lastModified" : "2026-03-04T16:10:29.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploitable through the `advancedQueryData` parameter (`comparator` field) on an authenticated endpoint. The endpoint `index.php?r=email/template/emailSelection` processes `advancedQueryData` and forwards the SQL comparator without a strict allowlist into SQL condition building. This enables blind boolean-based exfiltration of the `core_auth_password` table. Versions 26.0.8, 25.0.87, and 6.8.153 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta empresarial de gestión de relaciones con clientes y groupware. Las versiones anteriores a la 26.0.8, 25.0.87 y 6.8.153 tienen una vulnerabilidad de inyección SQL (SQLi), explotable a través del parámetro 'advancedQueryData' (campo 'comparator') en un endpoint autenticado. El endpoint 'index.php?r=email/template/emailSelection' procesa 'advancedQueryData' y reenvía el comparador SQL sin una lista de permitidos estricta a la construcción de condiciones SQL. Esto permite la exfiltración ciega basada en booleanos de la tabla 'core_auth_password'. Las versiones 26.0.8, 25.0.87 y 6.8.153 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.153",
            "matchCriteriaId" : "147BCA3A-D110-45F9-994F-76CA7CB68E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.87",
            "matchCriteriaId" : "A0895EF8-BAFE-41A6-90CE-EFAFBCE273D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0.1",
            "versionEndExcluding" : "26.0.8",
            "matchCriteriaId" : "2EA7FA63-F4BB-4188-AC74-0C7FD6783D64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-vfgv-8w8v-qpxr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27836",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:40.330",
      "lastModified" : "2026-03-04T16:08:53.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoint (`/api/webauthn/prepare`) creates new active user accounts without any authentication, CSRF protection, captcha, or configuration checks. This allows unauthenticated attackers to create unlimited user accounts even when registration is disabled. Version 4.0.18 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "phpMyFAQ es una aplicación web de preguntas frecuentes de código abierto. Antes de la versión 4.0.18, el endpoint de preparación de WebAuthn ('/API/webauthn/prepare') crea nuevas cuentas de usuario activas sin ninguna autenticación, protección CSRF, captcha o comprobaciones de configuración. Esto permite a atacantes no autenticados crear cuentas de usuario ilimitadas incluso cuando el registro está deshabilitado. La versión 4.0.18 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.18",
            "matchCriteriaId" : "14734A01-00F7-4499-A5DA-1FA0888B75A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpMyFAQ/commit/f2ab673f0668753cd0f7c7c8bc7fd2304dcf5cb1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-w22q-m2fm-x9f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27947",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:40.513",
      "lastModified" : "2026-03-04T16:07:30.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled files from `winmail.dat` and then invokes `zip` with a shell wildcard (`*`). Because extracted filenames are attacker-controlled, they can be interpreted as `zip` options and lead to arbitrary command execution. Versions 26.0.9, 25.0.87, and 6.8.154 fix the issue."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta empresarial de gestión de relaciones con clientes y groupware. Las versiones anteriores a 26.0.9, 25.0.87 y 6.8.154 tienen una vulnerabilidad de ejecución remota de código autenticada en el flujo de procesamiento de adjuntos TNEF. La ruta vulnerable extrae archivos controlados por el atacante de 'winmail.dat' y luego invoca 'zip' con un comodín de shell ('*'). Debido a que los nombres de archivo extraídos son controlados por el atacante, pueden ser interpretados como opciones de 'zip' y conducir a la ejecución de comandos arbitrarios. Las versiones 26.0.9, 25.0.87 y 6.8.154 solucionan el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.154",
            "matchCriteriaId" : "B7884A40-14BE-4D43-BAF3-12175EEB863D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.87",
            "matchCriteriaId" : "A0895EF8-BAFE-41A6-90CE-EFAFBCE273D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0.1",
            "versionEndExcluding" : "26.0.9",
            "matchCriteriaId" : "8DFBE230-B5B4-4163-B441-E9D0446D05DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-2rwh-9qp7-f92x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28231",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:40.697",
      "lastModified" : "2026-03-04T15:55:20.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in the encode path buffer validation of `_pillow_heif.c` allows an attacker to bypass bounds checks by providing large image dimensions, resulting in a heap out-of-bounds read. This can lead to information disclosure (server heap memory leaking into encoded images) or denial of service (process crash). No special configuration is required — this triggers under default settings. Version 1.3.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "pillow_heif es una librería de Python para trabajar con imágenes HEIF y un plugin para Pillow. Antes de la versión 1.3.0, un desbordamiento de entero en la validación del búfer de la ruta de codificación de _pillow_heif.c permite a un atacante eludir las comprobaciones de límites al proporcionar grandes dimensiones de imagen, lo que resulta en una lectura fuera de límites del heap. Esto puede conducir a la revelación de información (fuga de memoria del heap del servidor en las imágenes codificadas) o a la denegación de servicio (caída del proceso). No se requiere ninguna configuración especial; esto se activa con la configuración predeterminada. La versión 1.3.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigcat88:pillow-heif:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "D82BD595-9724-4EFC-BFBF-82CE89ED28A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigcat88/pillow_heif/commit/8305a15d3780c533b762578cbe987d27a2c59c7a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigcat88/pillow_heif/releases/tag/v1.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/bigcat88/pillow_heif/security/advisories/GHSA-5gjj-6r7v-ph3x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28354",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T20:21:40.883",
      "lastModified" : "2026-03-03T20:08:50.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item operations are vulnerable to authorization flaws, allowing a normal authenticated user to modify another user’s collection items. This affects both add item (/actions/add_to_collection.php) due to missing authorization checks and delete item (/manage_collections.php?mode=manage_items...) due to a broken ownership check in removeItemFromCollection(). As a result, attackers can insert and remove items from collections they do not own. Version 5.5.3 #59 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "ClipBucket v5 es una plataforma de código abierto para compartir videos. Antes de la versión 5.5.3 #59, las operaciones de elementos de colección son vulnerables a fallos de autorización, permitiendo a un usuario autenticado normal modificar los elementos de colección de otro usuario. Esto afecta tanto a la adición de elementos (/actions/add_to_collection.PHP) debido a la falta de comprobaciones de autorización como a la eliminación de elementos (/manage_collections.PHP?mode=manage_items...) debido a una comprobación de propiedad defectuosa en removeItemFromCollection(). Como resultado, los atacantes pueden insertar y eliminar elementos de colecciones que no les pertenecen. La versión 5.5.3 #59 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3",
            "versionEndExcluding" : "5.5.3-59",
            "matchCriteriaId" : "9AC9B64A-469F-4E76-9B21-E45B20FDD200"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-6wf8-rw5f-c9mv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3255",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-02-27T20:21:41.180",
      "lastModified" : "2026-03-04T15:51:09.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.\n\nThe HTTP::Session2 session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand() function is unsuitable for cryptographic usage.\n\nHTTP::Session2 after version 1.02 will attempt to use the /dev/urandom device to generate a session id, but if the device is unavailable (for example, under Windows), then it will revert to the insecure method described above."
      }, {
        "lang" : "es",
        "value" : "Las versiones de HTTP::Session2 anteriores a la 1.12 para Perl pueden generar identificadores de sesión débiles utilizando la función rand().\n\nEl generador de identificadores de sesión de HTTP::Session2 devuelve un hash SHA-1 inicializado con la función rand incorporada, el tiempo de época y el PID. El PID provendrá de un pequeño conjunto de números, y el tiempo de época puede ser adivinado, si no se filtra del encabezado HTTP Date. La función rand() incorporada no es adecuada para uso criptográfico.\n\nHTTP::Session2 después de la versión 1.02 intentará usar el dispositivo /dev/urandom para generar un identificador de sesión, pero si el dispositivo no está disponible (por ejemplo, bajo Windows), entonces revertirá al método inseguro descrito anteriormente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        }, {
          "lang" : "en",
          "value" : "CWE-340"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tokuhirom:http\\:\\:session2:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "1.12",
            "matchCriteriaId" : "D09565CB-6117-4D7D-BDFB-60715A2A058E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tokuhirom/HTTP-Session2/commit/9cfde4d7e0965172aef5dcfa3b03bb48df93e636.patch",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://metacpan.org/release/TOKUHIROM/HTTP-Session2-1.01/source/lib/HTTP/Session2/ServerStore.pm#L68",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://metacpan.org/release/TOKUHIROM/HTTP-Session2-1.11/source/lib/HTTP/Session2/Random.pm#L35",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://metacpan.org/release/TOKUHIROM/HTTP-Session2-1.12/changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28268",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:18.233",
      "lastModified" : "2026-03-06T21:03:09.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vikunja is an open-source self-hosted task management platform. Versions prior to 2.1.0 have a business logic vulnerability exists in the password reset mechanism of vikunja/api that allows password reset tokens to be reused indefinitely. Due to a failure to invalidate tokens upon use and a critical logic bug in the token cleanup cron job, reset tokens remain valid forever. This allows an attacker who intercepts a single reset token (via logs, browser history, or phishing) to perform a complete, persistent account takeover at any point in the future, bypassing standard authentication controls. Version 2.1.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Vikunja es una plataforma de gestión de tareas de código abierto autoalojada. En las versiones anteriores a la 2.1.0, existe una vulnerabilidad de lógica de negocio en el mecanismo de restablecimiento de contraseña de vikunja/API que permite que los tokens de restablecimiento de contraseña sean reutilizados indefinidamente. Debido a un fallo en la invalidación de tokens tras su uso y a un error de lógica crítico en el trabajo cron de limpieza de tokens, los tokens de restablecimiento permanecen válidos para siempre. Esto permite a un atacante que intercepta un único token de restablecimiento (a través de registros, historial del navegador o phishing) realizar una toma de control de cuenta completa y persistente en cualquier momento en el futuro, eludiendo los controles de autenticación estándar. La versión 2.1.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        }, {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "5F4164A9-6656-425E-81AF-BC892E137C82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vikunja/vikunja/commit/5c2195f9fca9ad208477e865e6009c37889f87b2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-rfjg-6m84-crj2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://vikunja.io/changelog/vikunja-v2.1.0-was-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28270",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:18.397",
      "lastModified" : "2026-03-04T19:50:06.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicious administrators could exploit this to upload unauthorized file types to the system. Version 9.2.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Kiteworks es una red de datos privada (PDN). Antes de la versión 9.2.0, una vulnerabilidad en la configuración de Kiteworks permite la carga de archivos arbitrarios sin la validación adecuada. Administradores maliciosos podrían explotar esto para cargar tipos de archivos no autorizados al sistema. La versión 9.2.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "B494C8D4-2D4B-4F5E-99C1-4CCE8DF6C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-v8x9-vwg6-cj45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28271",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:18.550",
      "lastModified" : "2026-03-04T19:49:31.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functionality allows bypassing of SSRF protections through DNS rebinding attacks. Malicious administrators could exploit this to access internal services that should be restricted. Version 9.2.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Kiteworks es una red de datos privada (PDN). Antes de la versión 9.2.0, una vulnerabilidad en la funcionalidad de configuración de Kiteworks permite eludir las protecciones de SSRF a través de ataques de reencuadernación de DNS. Administradores maliciosos podrían explotar esto para acceder a servicios internos que deberían estar restringidos. La versión 9.2.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-350"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "B494C8D4-2D4B-4F5E-99C1-4CCE8DF6C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rmfx-6h9w-fq87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28272",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:18.703",
      "lastModified" : "2026-03-04T19:48:26.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface. Version 9.2.0 contains a patch for the issue."
      }, {
        "lang" : "es",
        "value" : "Kiteworks es una red de datos privada (PDN). Antes de la versión 9.2.0, una vulnerabilidad en Kiteworks Email Protection Gateway permite a los administradores autenticados inyectar scripts maliciosos a través de una interfaz de configuración. El script almacenado se ejecuta cuando los usuarios interactúan con la interfaz de usuario afectada. La versión 9.2.0 contiene un parche para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "B494C8D4-2D4B-4F5E-99C1-4CCE8DF6C911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-7hxj-ch78-xqgr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28288",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:18.853",
      "lastModified" : "2026-03-09T20:23:10.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Dify es una plataforma de desarrollo de aplicaciones LLM de código abierto. Antes de la versión 1.9.0, las respuestas de la API de Dify a cuentas existentes y no existentes difieren, permitiendo a un atacante enumerar direcciones de correo electrónico registradas en Dify. La versión 1.9.0 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dify:dify:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.0",
            "matchCriteriaId" : "7A550B53-5989-4424-A1CE-46690BDDEC88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langgenius/dify/issues/24323",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/langgenius/dify/security/advisories/GHSA-9qpf-wcv3-w3qx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28338",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:19.017",
      "lastModified" : "2026-03-03T18:43:33.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's `vbhtml` and `yahtml` report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains executable JavaScript that runs when opened in a browser. Practical impact is limited because `vbhtml` and `yahtml` are legacy formats rarely used in practice. The default `html` format is properly escaped and not affected. Version 7.22.0 contains a fix for the issue."
      }, {
        "lang" : "es",
        "value" : "PMD es un analizador de código estático multilenguaje extensible. Antes de la versión 7.22.0, los formatos de informe 'vbhtml' y 'yahtml' de PMD insertan mensajes de violación de reglas en la salida HTML sin escapar. Cuando PMD analiza código fuente no confiable que contiene literales de cadena manipulados, el informe HTML generado contiene JavaScript ejecutable que se ejecuta al abrirse en un navegador. El impacto práctico es limitado porque 'vbhtml' y 'yahtml' son formatos heredados rara vez utilizados en la práctica. El formato 'html' predeterminado está correctamente escapado y no se ve afectado. La versión 7.22.0 contiene una solución para el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmd_project:pmd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.22.0",
            "matchCriteriaId" : "2F87D181-4848-4FBA-AD46-2576B496C60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pmd/pmd/commit/c140c0e1de5853a08efb84c9f91dfeb015882442",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pmd/pmd/pull/6475",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/pmd/pmd/security/advisories/GHSA-8rr6-2qw5-pc7r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28351",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:19.177",
      "lastModified" : "2026-03-03T18:36:06.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream using the RunLengthDecode filter. This has been fixed in pypdf 6.7.4. As a workaround, consider applying the changes from PR #3664."
      }, {
        "lang" : "es",
        "value" : "pypdf es una librería PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.7.4, un atacante que utiliza esta vulnerabilidad puede crear un PDF que conduce a un gran uso de memoria. Esto requiere analizar el flujo de contenido utilizando el filtro RunLengthDecode. Esto ha sido corregido en pypdf 6.7.4. Como solución alternativa, considere aplicar los cambios de la PR #3664."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.4",
            "matchCriteriaId" : "714937CD-E428-4BAC-948C-798559322278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/f309c6003746414dc7b5048c19e6d879ff2dc858",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3664",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.7.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-f2v5-7jq9-h8cg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28352",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:19.323",
      "lastModified" : "2026-03-03T18:31:21.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.11, the API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this is limited to getting the metadata (title, category chain, start/end date) for events in an existing series, deleting an existing event series, and modifying an existing event series. This vulnerability does NOT allow unauthorized access to events (beyond the basic metadata mentioned above), nor any kind of tampering with user-visible data in events. Version 3.3.11 fixes the issue. As a workaround, use the webserver to restrict access to the series management API endpoint."
      }, {
        "lang" : "es",
        "value" : "Indico es un sistema de gestión de eventos que utiliza Flask-Multipass, un sistema de autenticación multi-backend para Flask. En versiones anteriores a la 3.3.11, el endpoint de la API utilizado para gestionar series de eventos carece de una verificación de acceso, permitiendo acceso no autenticado/no autorizado a este endpoint. El impacto de esto se limita a obtener los metadatos (título, cadena de categoría, fecha de inicio/fin) para eventos en una serie existente, eliminar una serie de eventos existente y modificar una serie de eventos existente. Esta vulnerabilidad NO permite acceso no autorizado a eventos (más allá de los metadatos básicos mencionados anteriormente), ni ningún tipo de manipulación de datos visibles para el usuario en los eventos. La versión 3.3.11 corrige el problema. Como solución alternativa, utilice el servidor web para restringir el acceso al endpoint de la API de gestión de series."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.11",
            "matchCriteriaId" : "85C78415-FE1D-48C2-9C1C-1B12AADFAFAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/indico/indico/releases/tag/v3.3.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/indico/indico/security/advisories/GHSA-rfpp-2hgm-gp5v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28355",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T21:16:19.563",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Canarytokens help track activity and actions on a network. Versions prior to `sha-7ff0e12` have a Self Cross-Site Scripting vulnerability in the \"PWA\" Canarytoken, whereby the Canarytoken's creator can attack themselves or someone they share the link with. The creator of a PWA Canarytoken can insert Javascript into the title field of their PWA token. When the creator later browses the installation page for their own Canarytoken, the Javascript executes. This is a self-XSS. An attacker could create a Canarytoken with this self-XSS, and send the install link to a victim. When they click on it, the Javascript would execute. However, no sensitive information (ex. session information) will be disclosed to the malicious actor. This issue is now patched on Canarytokens.org. Users of self-hosted Canarytokens installations can update by pulling the latest Docker image, or any Docker image after sha-7ff0e12."
      }, {
        "lang" : "es",
        "value" : "Canarytokens ayudan a rastrear la actividad y las acciones en una red. Las versiones anteriores a 'sha-7ff0e12' tienen una vulnerabilidad de Self Cross-Site Scripting en el Canarytoken 'PWA', mediante la cual el creador del Canarytoken puede atacarse a sí mismo o a alguien con quien comparte el enlace. El creador de un Canarytoken PWA puede insertar Javascript en el campo de título de su token PWA. Cuando el creador navega posteriormente a la página de instalación de su propio Canarytoken, el Javascript se ejecuta. Esto es un self-XSS. Un atacante podría crear un Canarytoken con este self-XSS, y enviar el enlace de instalación a una víctima. Cuando hacen clic en él, el Javascript se ejecutaría. Sin embargo, no se divulgará información sensible (ej. información de sesión) al actor malicioso. Este problema ya está parcheado en Canarytokens.org. Los usuarios de instalaciones de Canarytokens autoalojadas pueden actualizar extrayendo la última imagen de Docker, o cualquier imagen de Docker posterior a 'sha-7ff0e12'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thinkst/canarytokens/security/advisories/GHSA-6734-fqcj-x5h3",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27167",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:22.820",
      "lastModified" : "2026-03-05T13:13:11.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version 6.6.0, Gradio applications running outside of Hugging Face Spaces automatically enable \"mocked\" OAuth routes when OAuth components (e.g. `gr.LoginButton`) are used. When a user visits `/login/huggingface`, the server retrieves its own Hugging Face access token via `huggingface_hub.get_token()` and stores it in the visitor's session cookie. If the application is network-accessible, any remote attacker can trigger this flow to steal the server owner's HF token. The session cookie is signed with a hardcoded secret derived from the string `\"-v4\"`, making the payload trivially decodable. Version 6.6.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Gradio es un paquete Python de código abierto diseñado para la creación rápida de prototipos. A partir de la versión 4.16.0 y antes de la versión 6.6.0, las aplicaciones de Gradio que se ejecutan fuera de Hugging Face Spaces habilitan automáticamente rutas OAuth 'simuladas' cuando se utilizan componentes OAuth (por ejemplo, 'gr.LoginButton'). Cuando un usuario visita '/login/huggingface', el servidor recupera su propio token de acceso de Hugging Face a través de 'huggingface_hub.get_token()' y lo almacena en la cookie de sesión del visitante. Si la aplicación es accesible por red, cualquier atacante remoto puede activar este flujo para robar el token HF del propietario del servidor. La cookie de sesión está firmada con un secreto codificado derivado de la cadena '-v4', lo que hace que la carga útil sea trivialmente decodificable. La versión 6.6.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "4.16.0",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "28401826-0343-4F00-8038-0291A834E4E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradio-app/gradio/security/advisories/GHSA-h3h8-3v2v-rg7m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27939",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:22.993",
      "lastModified" : "2026-03-10T15:20:19.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Starting in version 6.0.0 and prior to version 6.4.0, Authenticated Control Panel users may under certain conditions obtain elevated privileges without completing the intended verification step. This can allow access to sensitive operations and, depending on the user’s existing permissions, may lead to privilege escalation. This has been fixed in 6.4.0."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. A partir de la versión 6.0.0 y antes de la versión 6.4.0, los usuarios autenticados del Panel de Control pueden, bajo ciertas condiciones, obtener privilegios elevados sin completar el paso de verificación previsto. Esto puede permitir el acceso a operaciones sensibles y, dependiendo de los permisos existentes del usuario, puede conducir a la escalada de privilegios. Esto ha sido corregido en la versión 6.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "FA6EDD8D-7679-4292-8F49-71B2B3ACEC87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/commit/8639ef96217eaa682bc42e8a62769cb7c6a85d3a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-rw9x-pxqx-q789",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28400",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:23.160",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expose a  POST `/engines/_configure`  endpoint that accepts arbitrary runtime flags without authentication. These flags are passed directly to the underlying inference server (llama.cpp). By injecting the  --log-file  flag, an attacker with network access to the Model Runner API can write or overwrite arbitrary files accessible to the Model Runner process. When bundled with Docker Desktop (where Model Runner is enabled by default since version 4.46.0), it is reachable from any default container at  model-runner.docker.internal  without authentication. In this context, the file overwrite can target the Docker Desktop VM disk (`Docker.raw` ), resulting in the destruction of all containers, images, volumes, and build history. However, in specific configurations and with user interaction, it is possible to convert this vulnerability in a container escape. The issue is fixed in Docker Model Runner 1.0.16. Docker Desktop users should update to 4.61.0 or later, which includes the fixed Model Runner. A workaround is available. For Docker Desktop users, enabling Enhanced Container Isolation (ECI) blocks container access to Model Runner, preventing exploitation. However, if the Docker Model Runner is exposed to localhost over TCP in specific configurations, the vulnerability is still exploitable."
      }, {
        "lang" : "es",
        "value" : "Docker Model Runner (DMR) es un software utilizado para gestionar, ejecutar e implementar modelos de IA usando Docker. Las versiones anteriores a la 1.0.16 exponen un endpoint POST `/engines/_configure` que acepta flags de tiempo de ejecución arbitrarios sin autenticación. Estos flags se pasan directamente al servidor de inferencia subyacente (llama.cpp). Al inyectar el flag --log-file, un atacante con acceso de red a la API de Model Runner puede escribir o sobrescribir archivos arbitrarios accesibles para el proceso de Model Runner. Cuando se incluye con Docker Desktop (donde Model Runner está habilitado por defecto desde la versión 4.46.0), es accesible desde cualquier contenedor predeterminado en model-runner.docker.internal sin autenticación. En este contexto, la sobrescritura de archivos puede apuntar al disco de la VM de Docker Desktop ('Docker.raw'), lo que resulta en la destrucción de todos los contenedores, imágenes, volúmenes e historial de compilación. Sin embargo, en configuraciones específicas y con interacción del usuario, es posible convertir esta vulnerabilidad en un escape de contenedor. El problema está solucionado en Docker Model Runner 1.0.16. Los usuarios de Docker Desktop deben actualizar a la versión 4.61.0 o posterior, que incluye el Model Runner corregido. Una solución alternativa está disponible. Para los usuarios de Docker Desktop, habilitar el Aislamiento Mejorado de Contenedores (ECI) bloquea el acceso de los contenedores a Model Runner, evitando la explotación. Sin embargo, si Docker Model Runner está expuesto a localhost a través de TCP en configuraciones específicas, la vulnerabilidad sigue siendo explotable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/docker/model-runner/security/advisories/GHSA-m456-c56c-hh5c",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-CAN-28379",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28402",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:23.343",
      "lastModified" : "2026-05-04T14:25:55.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.2.2, a malicious or compromised validator that is elected as proposer can publish a macro block proposal where `header.body_root` does not match the actual macro body hash. The proposal can pass proposal verification because the macro proposal verification path validates the header but does not validate the binding `body_root == hash(body)`; later code expects this binding and may panic on mismatch, crashing validators. Note that the impact is only for validator nodes. The patch for this vulnerability is formally released as part of v1.2.2. The patch adds the corresponding body root verification in the proposal checks. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "nimiq/core-rs-albatross es una implementación en Rust del protocolo Nimiq Proof-of-Stake basado en el algoritmo de consenso Albatross. Antes de la versión 1.2.2, un validador malicioso o comprometido que es elegido como proponente puede publicar una propuesta de macrobloque donde `header.body_root` no coincide con el hash real del cuerpo del macrobloque. La propuesta puede pasar la verificación de la propuesta porque la ruta de verificación de la macropropuesta valida el encabezado pero no valida la vinculación `body_root == hash(body)`; el código posterior espera esta vinculación y puede entrar en pánico en caso de falta de coincidencia, provocando la caída de los validadores. Tenga en cuenta que el impacto es solo para los nodos validadores. El parche para esta vulnerabilidad se lanza formalmente como parte de la v1.2.2. El parche añade la verificación correspondiente del body root en las comprobaciones de la propuesta. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nimiq:nimiq_proof-of-stake:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "9BCFC726-4536-43C8-ABF8-42AFF032FB78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nimiq/core-rs-albatross/commit/6454c26d966858c5520f55739a30b94c17656c85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nimiq/core-rs-albatross/pull/3623",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nimiq/core-rs-albatross/releases/tag/v1.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-7wh6-rmxx-ww47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28406",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:23.513",
      "lastModified" : "2026-03-06T19:29:21.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing that the final path stays within `dest`. A tar entry like `../outside.txt` escapes the extraction root and writes files outside the destination directory. In environments with registry authentication, this can be chained with docker credential helpers to achieve code execution within the executor process. Version 1.25.10 uses securejoin for path resolution in tar extraction."
      }, {
        "lang" : "es",
        "value" : "kaniko es una herramienta para construir imágenes de contenedores a partir de un Dockerfile, dentro de un contenedor o un clúster de Kubernetes. A partir de la versión 1.25.4 y antes de la versión 1.25.10, kaniko descomprime archivos de contexto de construcción usando 'filepath.Join(dest, cleanedName)' sin asegurar que la ruta final permanezca dentro de 'dest'. Una entrada tar como '../outside.txt' escapa la raíz de extracción y escribe archivos fuera del directorio de destino. En entornos con autenticación de registro, esto puede encadenarse con los ayudantes de credenciales de docker para lograr la ejecución de código dentro del proceso del ejecutor. La versión 1.25.10 utiliza securejoin para la resolución de rutas en la extracción de tar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:kaniko:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.4",
            "versionEndExcluding" : "1.25.10",
            "matchCriteriaId" : "5D7F83A1-ABE0-40A9-87E9-15913B15DE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-forks/kaniko/commit/a370e4b1f66e6e842b685c8f70ed507964c4b221",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-forks/kaniko/pull/326",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-6rxq-q92g-4rmf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28407",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:23.680",
      "lastModified" : "2026-03-03T18:23:37.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Version 1.21.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "malcontent es un software para descubrir compromisos en la cadena de suministro mediante contexto, análisis diferencial y YARA. Antes de la versión 1.21.0, malcontent eliminaba los archivos anidados que no se pudieron extraer, lo que podría dejar contenido malicioso. Un enfoque mejor es preservar estos archivos para que malcontent pueda intentar un escaneo de mejor esfuerzo de los bytes del archivo. La versión 1.21.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:malcontent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.21.0",
            "matchCriteriaId" : "35E288B6-B34F-4A97-9B77-2E06D9D3F4F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/malcontent/commit/356c56659ccfcad0b249a97de8cf71f151ed3ee9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/malcontent/pull/1383",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/chainguard-dev/malcontent/security/advisories/GHSA-945p-3jhm-6rcp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28408",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:23.847",
      "lastModified" : "2026-03-03T18:22:19.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, the script in adicionar_tipo_docs_atendido.php does not go through the project's central controller and does not have its own authentication and permission checks. A malicious user could make a request through tools like Postman or the file's URL on the web to access features exclusive to employees. The vulnerability allows external parties to inject unauthorized data in massive quantities into the application server's storage. Version 3.6.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la versión 3.6.5, el script en adicionar_tipo_docs_atendido.php no pasa por el controlador central del proyecto y no tiene sus propias comprobaciones de autenticación y permisos. Un usuario malintencionado podría realizar una solicitud a través de herramientas como Postman o la URL del archivo en la web para acceder a funciones exclusivas para empleados. La vulnerabilidad permite a terceros externos inyectar datos no autorizados en grandes cantidades en el almacenamiento del servidor de aplicaciones. La versión 3.6.5 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "17C16038-DA4A-4219-AC79-57CD78C1A5C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xq3w-xwxj-fg2q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28409",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:24.010",
      "lastModified" : "2026-03-03T18:20:07.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution (RCE) vulnerability exists in the WeGIA application's database restoration functionality. An attacker with administrative access (which can be obtained via the previously reported Authentication Bypass) can execute arbitrary OS commands on the server by uploading a backup file with a specifically crafted filename. Version 3.6.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la versión 3.6.5, existe una vulnerabilidad crítica de ejecución remota de código (RCE) en la funcionalidad de restauración de la base de datos de la aplicación WeGIA. Un atacante con acceso de administración (que se puede obtener a través de la omisión de autenticación previamente reportada) puede ejecutar comandos arbitrarios del sistema operativo en el servidor al subir un archivo de copia de seguridad con un nombre de archivo específicamente diseñado. La versión 3.6.5 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "17C16038-DA4A-4219-AC79-57CD78C1A5C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5m5g-q2vv-rv3r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28411",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:24.170",
      "lastModified" : "2026-03-03T17:56:18.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to completely bypass authentication checks, allowing unauthorized access to administrative and protected areas of the WeGIA application. Version 3.6.5 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "WeGIA es un gestor web para instituciones benéficas. Antes de la versión 3.6.5, un uso inseguro de la función 'extract()' en la superglobal '$_REQUEST' permite a un atacante no autenticado sobrescribir variables locales en múltiples scripts PHP. Esta vulnerabilidad puede ser explotada para eludir completamente las comprobaciones de autenticación, permitiendo el acceso no autorizado a áreas protegidas y de administración de la aplicación WeGIA. La versión 3.6.5 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        }, {
          "lang" : "en",
          "value" : "CWE-473"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "17C16038-DA4A-4219-AC79-57CD78C1A5C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g7r9-hxc8-8vh7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28414",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:24.330",
      "lastModified" : "2026-03-05T13:09:59.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. Python 3.13+ changed the definition of `os.path.isabs` so that root-relative paths like `/windows/win.ini` on Windows are no longer considered absolute paths, resulting in a vulnerability in Gradio's logic for joining paths safely. This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. Version 6.7 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Gradio es un paquete Python de código abierto diseñado para la creación rápida de prototipos. Antes de la versión 6.7, las aplicaciones Gradio que se ejecutaban en Windows con Python 3.13+ eran vulnerables a un problema de recorrido de rutas absolutas que permitía a atacantes no autenticados leer archivos arbitrarios del sistema de archivos. Python 3.13+ cambió la definición de `os.path.isabs` para que las rutas relativas a la raíz, como `/windows/win . ini` en Windows, ya no se consideren rutas absolutas, lo que da lugar a una vulnerabilidad en la lógica de Gradio para unir rutas de forma segura. Esto puede ser explotado por atacantes no autenticados para leer archivos arbitrarios del servidor Gradio, incluso cuando Gradio está configurado con autenticación. La versión 6.7 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "DADC4436-1106-471B-879B-D308AFC6D64D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradio-app/gradio/security/advisories/GHSA-39mp-8hj3-5c49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28415",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:24.497",
      "lastModified" : "2026-03-05T13:06:31.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). Starting in version 6.6.0, the _target_url parameter is sanitized to only use the path, query, and fragment, stripping any scheme or host."
      }, {
        "lang" : "es",
        "value" : "Gradio es un paquete Python de código abierto diseñado para la creación rápida de prototipos. Antes de la versión 6.6.0, la función _redirect_to_target() en el flujo OAuth de Gradio acepta un parámetro de consulta _target_url no validado, lo que permite la redirección a URL externas arbitrarias. Esto afecta a los endpoints /logout y /login/callback en aplicaciones Gradio con OAuth habilitado (es decir, aplicaciones que se ejecutan en Hugging Face Spaces con gr.LoginButton). A partir de la versión 6.6.0, el parámetro _target_url se sanea para usar solo la ruta, la consulta y el fragmento, eliminando cualquier esquema o host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-330"
        }, {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "59BB794F-B63D-4D86-B0F0-E60AF9017444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradio-app/gradio/security/advisories/GHSA-pfjf-5gxr-995x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28416",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:24.667",
      "lastModified" : "2026-03-05T13:03:21.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses `gr.load()` to load an attacker-controlled Space, the malicious `proxy_url` from the config is trusted and added to the allowlist, enabling the attacker to access internal services, cloud metadata endpoints, and private networks through the victim's infrastructure. Version 6.6.0 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Gradio es un paquete Python de código abierto diseñado para la creación rápida de prototipos. Antes de la versión 6.6.0, una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Gradio permite a un atacante realizar peticiones HTTP arbitrarias desde el servidor de una víctima al alojar un Gradio Space malicioso. Cuando una aplicación víctima utiliza 'gr.load()' para cargar un Space controlado por el atacante, se confía en la 'proxy_url' maliciosa de la configuración y se añade a la lista de permitidos, lo que permite al atacante acceder a servicios internos, endpoints de metadatos en la nube y redes privadas a través de la infraestructura de la víctima. La versión 6.6.0 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "59BB794F-B63D-4D86-B0F0-E60AF9017444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradio-app/gradio/security/advisories/GHSA-jmh7-g254-2cq9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28417",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:24.833",
      "lastModified" : "2026-03-03T17:50:29.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto de línea de comandos. Antes de la versión 9.2.0073, hay una vulnerabilidad de inyección de comandos del sistema operativo en el plugin estándar 'netrw' incluido con Vim. Al inducir a un usuario a abrir una URL manipulada (por ejemplo, usando el gestor de protocolo 'scp://'), un atacante puede ejecutar comandos de shell arbitrarios con los privilegios del proceso de Vim. La versión 9.2.0073 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-86"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0073",
            "matchCriteriaId" : "DBFE68A3-A610-426A-A470-CDF78D00BBBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/79348dbbc09332130f4c860",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.2.0073",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28418",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:25.003",
      "lastModified" : "2026-03-03T17:49:55.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto y de línea de comandos. Antes de la versión 9.2.0074, hay un desbordamiento de búfer basado en montículo con lectura fuera de límites en la lógica de análisis de archivos de etiquetas estilo Emacs de Vim. Al procesar un archivo de etiquetas malformado, Vim puede ser engañado para leer hasta 7 bytes más allá del límite de memoria asignada. La versión 9.2.0074 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0074",
            "matchCriteriaId" : "969B50CB-4E2C-4F12-839D-39D4116BDBBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/f6a7f469a9c0d09e84cd6cb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.2.0074",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-h4mf-vg97-hj8j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28419",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:25.163",
      "lastModified" : "2026-03-04T21:22:05.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto y de línea de comandos. Antes de la versión 9.2.0075, hay un desbordamiento negativo de búfer basado en el montón en la lógica de análisis de archivos de etiquetas estilo Emacs de Vim. Al procesar un archivo de etiquetas malformado donde un delimitador aparece al inicio de una línea, Vim intenta leer memoria inmediatamente anterior al búfer asignado. La versión 9.2.0075 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-124"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0075",
            "matchCriteriaId" : "9C5E9D69-5807-4FA4-839A-CCEC3E4D1208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.2.0075",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28420",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:25.330",
      "lastModified" : "2026-03-04T20:47:23.017",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto y de línea de comandos. Antes de la versión 9.2.0076, hay una escritura de desbordamiento de búfer basado en montículo y una lectura fuera de límites en el emulador de terminal de Vim al procesar caracteres combinatorios máximos de planos suplementarios de Unicode. La versión 9.2.0076 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0076",
            "matchCriteriaId" : "84ED21C8-279B-4954-AEE5-9E56089D7EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/bb6de2105b160e729c34063",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.2.0076",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28421",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:25.493",
      "lastModified" : "2026-03-04T20:47:36.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto, de línea de comandos. En las versiones anteriores a la 9.2.0077, existen un desbordamiento de búfer de pila y un fallo de segmentación (SEGV) en la lógica de recuperación de archivos de intercambio de Vim. Ambos son causados por campos no validados leídos de bloques de puntero manipulados dentro de un archivo de intercambio. La versión 9.2.0077 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0077",
            "matchCriteriaId" : "8B48DA98-DBD2-45D8-BE4E-B719CC3087C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/65c1a143c331c886dc28",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.2.0077",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28422",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T22:16:25.667",
      "lastModified" : "2026-03-04T20:44:22.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue."
      }, {
        "lang" : "es",
        "value" : "Vim es un editor de texto de código abierto, de línea de comandos. Antes de la versión 9.2.0078, ocurre un desbordamiento de búfer de pila en 'build_stl_str_hl()' al renderizar una línea de estado con un carácter de relleno multibyte en una terminal muy ancha. La versión 9.2.0078 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0078",
            "matchCriteriaId" : "4AC02C67-00AB-4E9E-81A7-545DF0CF5D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/4e5b9e31cb7484ad156f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vim/vim/releases/tag/v9.2.0078",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/02/27/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27759",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T23:16:04.187",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability that allows Author-level users to fetch internal HTTP resources. Attackers can exploit insecure URL fetching and file write operations to retrieve sensitive internal data and store it in web-accessible upload directories."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin de WordPress Featured Image from Content (featured-image-from-content) anteriores a la 1.7 contienen una vulnerabilidad de falsificación de petición del lado del servidor autenticada que permite a usuarios con nivel de Autor recuperar recursos HTTP internos. Los atacantes pueden explotar la obtención insegura de URL y las operaciones de escritura de archivos para recuperar datos internos sensibles y almacenarlos en directorios de carga accesibles desde la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/featured-image-from-content/",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/featured-image-from-content-authenticated-ssrf-via-save-post",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28423",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T23:16:05.283",
      "lastModified" : "2026-03-05T14:47:10.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, when Glide image manipulation is used in insecure mode (which is not the default), the image proxy can be abused by an unauthenticated user to make the server send HTTP requests to arbitrary URLs—either via the URL directly or via the watermark feature. That can allow access to internal services, cloud metadata endpoints, and other hosts reachable from the server. This has been fixed in 5.73.11 and 6.4.0."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. Antes de las versiones 5.73.11 y 6.4.0, cuando la manipulación de imágenes de Glide se utiliza en modo inseguro (lo cual no es el predeterminado), el proxy de imágenes puede ser explotado por un usuario no autenticado para hacer que el servidor envíe solicitudes HTTP a URLs arbitrarias, ya sea directamente a través de la URL o mediante la función de marca de agua. Eso puede permitir el acceso a servicios internos, endpoints de metadatos en la nube y otros hosts accesibles desde el servidor. Esto ha sido corregido en las versiones 5.73.11 y 6.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.11",
            "matchCriteriaId" : "6AA21E74-C3F2-4275-8DEE-DF4DFBF43788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "FA6EDD8D-7679-4292-8F49-71B2B3ACEC87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/releases/tag/v5.73.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-cwpp-325q-2cvp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28424",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T23:16:05.447",
      "lastModified" : "2026-03-05T14:46:10.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, user email addresses were included in responses from the user fieldtype’s data endpoint for control panel users who did not have the \"view users\" permission. This has been fixed in 5.73.11 and 6.4.0."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenidos (CMS) impulsado por Laravel y Git. Antes de las versiones 5.73.11 y 6.4.0, las direcciones de correo electrónico de los usuarios se incluían en las respuestas del endpoint de datos del tipo de campo de usuario para los usuarios del panel de control que no tenían el permiso de 'ver usuarios'. Esto se ha corregido en las versiones 5.73.11 y 6.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.11",
            "matchCriteriaId" : "6AA21E74-C3F2-4275-8DEE-DF4DFBF43788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "FA6EDD8D-7679-4292-8F49-71B2B3ACEC87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/releases/tag/v5.73.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-w878-f8c6-7r63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28425",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T23:16:05.607",
      "lastModified" : "2026-03-25T21:16:39.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and 6.7.2, an authenticated control panel user with access to Antlers-enabled inputs may be able to achieve remote code execution in the application context. That can lead to full compromise of the application, including access to sensitive configuration, modification or exfiltration of data, and potential impact on availability. Exploitation is only possible where Antlers runs on user-controlled content—for example, content fields with Antlers explicitly enabled (requiring permission to configure fields and to edit entries), built-in config that supports Antlers such as Forms email notification settings (requiring configuration permission), or third-party addons that add Antlers-enabled fields to entries (for example, the SEO Pro addon). In each case the attacker must have the relevant control panel permissions. This has been fixed in 5.73.16 and 6.7.2. Users of addons that depend on Statamic should ensure that after updating they are running a patched Statamic version."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. Antes de las versiones 5.73.11 y 6.4.0, un usuario autenticado del panel de control con acceso a entradas habilitadas para Antlers podría lograr ejecución remota de código en el contexto de la aplicación. Eso puede llevar a un compromiso total de la aplicación, incluyendo acceso a configuración sensible, modificación o exfiltración de datos, y potencial impacto en la disponibilidad. La explotación solo es posible donde Antlers se ejecuta en contenido controlado por el usuario—por ejemplo, campos de contenido con Antlers explícitamente habilitado (requiriendo permiso para configurar campos y editar entradas), configuración incorporada que soporta Antlers como la configuración de notificación por correo electrónico de Formularios (requiriendo permiso de configuración), o complementos de terceros que añaden campos habilitados para Antlers a las entradas (por ejemplo, el complemento SEO Pro). En cada caso, el atacante debe tener los permisos relevantes del panel de control. Esto ha sido corregido en 5.73.11 y 6.4.0. Los usuarios de complementos que dependen de Statamic deben asegurarse de que después de actualizar están ejecutando una versión de Statamic parcheada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.11",
            "matchCriteriaId" : "6AA21E74-C3F2-4275-8DEE-DF4DFBF43788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "FA6EDD8D-7679-4292-8F49-71B2B3ACEC87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/releases/tag/v5.73.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-cpv7-q2wx-m8rw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28426",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-02-27T23:16:05.780",
      "lastModified" : "2026-03-05T14:32:00.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, stored XSS vulnerability in svg and icon related components allow authenticated users with appropriate permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This has been fixed in 5.73.11 and 6.4.0."
      }, {
        "lang" : "es",
        "value" : "Statmatic es un sistema de gestión de contenido (CMS) impulsado por Laravel y Git. Antes de las versiones 5.73.11 y 6.4.0, una vulnerabilidad de XSS almacenado en componentes relacionados con SVG e iconos permite a usuarios autenticados con los permisos adecuados inyectar JavaScript malicioso que se ejecuta cuando es visto por usuarios con mayores privilegios. Esto ha sido corregido en 5.73.11 y 6.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.73.11",
            "matchCriteriaId" : "6AA21E74-C3F2-4275-8DEE-DF4DFBF43788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:statamic:statamic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "FA6EDD8D-7679-4292-8F49-71B2B3ACEC87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/statamic/cms/releases/tag/v5.73.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/releases/tag/v6.4.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/statamic/cms/security/advisories/GHSA-5vrj-wf7v-5wr7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28515",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T23:16:05.960",
      "lastModified" : "2026-03-10T15:03:39.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration."
      }, {
        "lang" : "es",
        "value" : "openDCIM versión 23.04, a través del commit 4467e9c4, contiene una vulnerabilidad de autorización faltante en install.php y container-install.php. El instalador y el gestor de actualización exponen la funcionalidad de configuración LDAP sin aplicar comprobaciones de rol de aplicación. Cualquier usuario autenticado puede acceder a esta funcionalidad independientemente de los privilegios asignados. En implementaciones donde REMOTE_USER está configurado sin aplicación de autenticación, el punto final puede ser accesible sin credenciales. Esto permite la modificación no autorizada de la configuración de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendcim:opendcim:23.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F420481A-7455-46AE-A482-AB2FA8468428"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Chocapikk/opendcim-exploit",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/container-install.php#L421-L435",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L293",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L420-L434",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/pull/1664",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/opendcim-missing-authorization-in-install-php",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28516",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T23:16:06.180",
      "lastModified" : "2026-03-10T14:46:09.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitation. An authenticated user can execute arbitrary SQL statements against the underlying database."
      }, {
        "lang" : "es",
        "value" : "openDCIM versión 23.04, a través del commit 4467e9c4, contiene una vulnerabilidad de inyección SQL en Config::UpdateParameter. Los manejadores install.php y container-install.php pasan la entrada proporcionada por el usuario directamente a sentencias SQL usando interpolación de cadenas sin sentencias preparadas o saneamiento de entrada adecuado. Un usuario autenticado puede ejecutar sentencias SQL arbitrarias contra la base de datos subyacente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendcim:opendcim:23.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F420481A-7455-46AE-A482-AB2FA8468428"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/Chocapikk/opendcim-exploit",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/config.inc.php#L75-L90",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L420-L434",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/pull/1664",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/opendcim-sql-injection-in-config-updateparameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28517",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-27T23:16:06.357",
      "lastModified" : "2026-03-10T14:40:33.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or sanitation. If an attacker can modify the fac_Config.dot value, arbitrary commands may be executed in the context of the web server process."
      }, {
        "lang" : "es",
        "value" : "openDCIM versión 23.04, a través del commit 4467e9c4, contiene una vulnerabilidad de inyección de comandos del sistema operativo en report_network_map.php. La aplicación recupera el parámetro de configuración 'dot' de la base de datos y lo pasa directamente a exec() sin validación ni saneamiento. Si un atacante puede modificar el valor fac_Config.dot, se pueden ejecutar comandos arbitrarios en el contexto del proceso del servidor web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendcim:opendcim:23.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F420481A-7455-46AE-A482-AB2FA8468428"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/Chocapikk/opendcim-exploit",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/report_network_map.php#L467",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/blob/4467e9c4/report_network_map.php#L7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/pull/1664",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/opendcim-os-command-injection-via-dot-configuration-parameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2647",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-02-27T23:16:06.543",
      "lastModified" : "2026-02-27T23:16:06.543",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1542",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-02-28T06:16:02.080",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Super Stage WP hasta la versión 1.0.1 deserializa la entrada del usuario a través de REQUEST, lo que podría permitir a usuarios no autenticados realizar una inyección de objetos PHP cuando un gadget adecuado está presente en el blog."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d6e3041f-62e8-49ba-8806-59a1c07ec43d/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2471",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-02-28T07:15:57.677",
      "lastModified" : "2026-04-15T00:35:42.020",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from the email log message field. This is due to the `BaseModel` class constructor calling `maybe_unserialize()` on all properties retrieved from the database without validation. This makes it possible for unauthenticated attackers to inject a PHP Object by submitting a double-serialized payload through any public-facing form that sends email (e.g., Contact Form 7). When the email is logged and subsequently viewed by an administrator, the malicious payload is deserialized into an arbitrary PHP object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Mail Logging para WordPress es vulnerable a la inyección de objetos PHP en todas las versiones hasta la 1.15.0, inclusive, a través de la deserialización de entrada no confiable desde el campo de mensaje del registro de correo electrónico. Esto se debe a que el constructor de la clase 'BaseModel' llama a 'maybe_unserialize()' en todas las propiedades recuperadas de la base de datos sin validación. Esto hace posible que atacantes no autenticados inyecten un objeto PHP al enviar una carga útil doblemente serializada a través de cualquier formulario público que envíe correo electrónico (por ejemplo, Contact Form 7). Cuando el correo electrónico es registrado y posteriormente visto por un administrador, la carga útil maliciosa es deserializada en un objeto PHP arbitrario. No hay una cadena POP conocida presente en el software vulnerable, lo que significa que esta vulnerabilidad no tiene impacto a menos que otro plugin o tema que contenga una cadena POP esté instalado en el sitio. Si una cadena POP está presente a través de un plugin o tema adicional instalado en el sistema objetivo, puede permitir al atacante realizar acciones como eliminar archivos arbitrarios, recuperar datos sensibles o ejecutar código, dependiendo de la cadena POP presente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.15.0/lib/vendor/brandonwamboldt/wp-orm/src/BaseModel.php#L39",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.15.0/src/Renderer/WPML_MailRenderer_AJAX_Handler.php#L100",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.15.0/src/WPML_Plugin.php#L553",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3464813%40wp-mail-logging&old=3358334%40wp-mail-logging&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/10e4c52d-c82f-4393-9a56-5714b3a108d1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2844",
      "sourceIdentifier" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
      "published" : "2026-02-28T12:16:37.713",
      "lastModified" : "2026-03-10T14:34:17.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ausencia de Autenticación para Función Crítica en Microchip TimePictra permite Manipulación de Configuración/Entorno. Este problema afecta a TimePictra: desde 11.0 hasta 11.3 SP2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:timepictra:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.3",
            "matchCriteriaId" : "263ED5AC-661E-429E-BDEA-ED4D5D56B311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:timepictra:11.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C40D373-49C5-4CDE-B64E-4E1F753F70F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:timepictra:11.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3EA8F-E92B-4350-A007-D822AE7757A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-authentication-bypass-vulnerability",
        "source" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3010",
      "sourceIdentifier" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
      "published" : "2026-02-28T12:16:39.317",
      "lastModified" : "2026-03-10T14:29:50.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') en Microchip TimePictra permite la Consulta del Sistema para Información. Este problema afecta a TimePictra: desde 11.0 hasta 11.3 SP2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:timepictra:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.3",
            "matchCriteriaId" : "263ED5AC-661E-429E-BDEA-ED4D5D56B311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:timepictra:11.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C40D373-49C5-4CDE-B64E-4E1F753F70F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:timepictra:11.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA3EA8F-E92B-4350-A007-D822AE7757A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-stored-cross-site-scripting",
        "source" : "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28554",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:00.927",
      "lastModified" : "2026-03-05T15:42:45.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforo_approve_ajax AJAX handler. Attackers exploit the nonce-only check by submitting a valid nonce with an arbitrary post ID to bypass moderation controls entirely."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de autorización faltante que permite a los suscriptores autenticados aprobar o desaprobar cualquier publicación del foro a través del gestor AJAX wpforo_approve_ajax. Los atacantes explotan la verificación solo de nonce al enviar un nonce válido con un ID de publicación arbitrario para eludir por completo los controles de moderación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-missing-authorization-via-post-approval-ajax-handler",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28555",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:02.010",
      "lastModified" : "2026-03-04T03:00:29.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reopen any forum topic via the wpforo_close_ajax handler. Attackers submit a valid nonce with an arbitrary topic ID to bypass the moderator permission requirement and disrupt forum discussions."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de autorización faltante que permite a los suscriptores autenticados cerrar o reabrir cualquier tema del foro a través del gestor wpforo_close_ajax. Los atacantes envían un nonce válido con un ID de tema arbitrario para eludir el requisito de permiso de moderador y perturbar las discusiones del foro."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-missing-authorization-via-topic-close-ajax-handler",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28556",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:02.220",
      "lastModified" : "2026-03-04T02:52:09.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge, or split any forum topic via the topic_move, topic_merge, and topic_split form action handlers. Attackers with a valid form nonce can reorganize arbitrary forum content without moderator permissions, including relocating topics to private forums."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad por falta de autorización que permite a suscriptores autenticados mover, fusionar o dividir cualquier tema del foro a través de los manejadores de acción de formulario topic_move, topic_merge y topic_split. Atacantes con un nonce de formulario válido pueden reorganizar contenido arbitrario del foro sin permisos de moderador, incluyendo reubicar temas a foros privados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-missing-authorization-via-topic-management-form-handlers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28557",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:02.427",
      "lastModified" : "2026-03-04T02:50:41.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_synch_roles AJAX handler. Attackers access the usergroups admin page, accessible to any authenticated user, to obtain a nonce, then remap all wpForo usergroups to arbitrary WordPress roles."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de falta de verificación de capacidad que permite a usuarios autenticados activar la reasignación masiva de grupos de usuarios de wpForo a través del gestor AJAX wpforo_synch_roles. Los atacantes acceden a la página de administración de grupos de usuarios, accesible para cualquier usuario autenticado, para obtener un nonce, luego reasignan todos los grupos de usuarios de wpForo a roles arbitrarios de WordPress."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-privilege-escalation-via-role-synchronization-handler",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28558",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:02.637",
      "lastModified" : "2026-03-04T02:49:29.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the browsers of any user who views the attacker's profile page."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de cross-site scripting almacenado que permite a los suscriptores autenticados subir archivos SVG como avatares de perfil a través de la funcionalidad de carga de avatares. Los atacantes suben un SVG manipulado que contiene inyección CSS o manejadores de eventos JavaScript que se ejecutan en los navegadores de cualquier usuario que vea la página de perfil del atacante."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-stored-xss-via-svg-avatar-file-upload",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28559",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:02.933",
      "lastModified" : "2026-03-04T02:47:44.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global RSS feed endpoint. Attackers request the RSS feed without a forum ID parameter, bypassing the privacy and status WHERE clauses that are only applied when a specific forum ID is present in the query."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de revelación de información que permite a usuarios no autenticados recuperar temas de foro privados y no aprobados a través del endpoint global de feed RSS. Los atacantes solicitan el feed RSS sin un parámetro de ID de foro, eludiendo las cláusulas WHERE de privacidad y estado que solo se aplican cuando un ID de foro específico está presente en la consulta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-information-disclosure-via-global-rss-feed",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28560",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:03.137",
      "lastModified" : "2026-03-04T02:47:02.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode without the JSON_HEX_TAG flag. Attackers set a forum slug containing a closing script tag or unescaped single quote to break out of the JavaScript string context and execute arbitrary script in all visitors' browsers."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de cross-site scripting almacenado que permite la inyección de scripts a través de la salida de datos de la URL del foro en un bloque de script en línea utilizando json_encode sin la bandera JSON_HEX_TAG. Los atacantes configuran un slug de foro que contiene una etiqueta de cierre de script o una comilla simple sin escapar para salir del contexto de cadena de JavaScript y ejecutar scripts arbitrarios en los navegadores de todos los visitantes."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-stored-xss-via-unsafe-json-encoding-in-inline-script",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28561",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:03.347",
      "lastModified" : "2026-03-05T15:42:01.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without output escaping across multiple theme template files. On multisite installations or with a compromised admin account, attackers set a forum description containing HTML event handlers that execute when any user views the forum listing."
      }, {
        "lang" : "es",
        "value" : "wpForo Forum 2.4.14 contiene una vulnerabilidad de cross-site scripting almacenado que permite a los administradores inyectar JavaScript persistente a través de campos de descripción del foro mostrados sin escape de salida en múltiples archivos de plantilla de tema. En instalaciones multisitio o con una cuenta de administrador comprometida, los atacantes establecen una descripción del foro que contiene controladores de eventos HTML que se ejecutan cuando cualquier usuario ve el listado del foro."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.16",
            "matchCriteriaId" : "C566DBB2-78C1-44FF-A504-07BC985A687A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-forum-stored-xss-via-unescaped-forum-description-in-templates",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28562",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-02-28T22:16:03.560",
      "lastModified" : "2026-03-05T15:41:20.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credentials from the WordPress database."
      }, {
        "lang" : "es",
        "value" : "wpForo 2.4.14 contiene una vulnerabilidad de inyección SQL no autenticada en Topics::get_topics() donde la cláusula ORDER BY se basa en una sanitización ineficaz de esc_sql() en identificadores sin comillas. Los atacantes explotan el parámetro wpfob con cargas útiles CASE WHEN para realizar una extracción booleana ciega de credenciales de la base de datos de WordPress."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.15",
            "matchCriteriaId" : "975C0677-CE69-4BF9-84EE-2639169B8480"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/wpforo/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpforo/#developers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/wpforo-sql-injection-via-topics-order-by-parameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3376",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-02-28T23:16:01.177",
      "lastModified" : "2026-03-03T17:35:16.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform/SafeMacFilter. Such manipulation of the argument page leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Tenda F453 1.0.0.3, la cual afecta a la función fromSafeMacFilter del archivo /goform/SafeMacFilter. Manipular el argumento page conduce a un desbordamiento de búfer. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_76/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759623",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3377",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T00:16:17.487",
      "lastModified" : "2026-03-03T17:34:45.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Tenda F453 1.0.0.3, la cual afecta a la función fromSafeUrlFilter del archivo /goform/SafeUrlFilter. Manipular el argumento page resulta en un desbordamiento de búfer. El ataque puede iniciarse de forma remota. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_77/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3378",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T03:16:15.103",
      "lastModified" : "2026-03-03T17:34:16.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda F453 1.0.0.3, la cual afecta a la función fromqossetting del archivo /goform/qossetting. Manipular el argumento qos puede conducir a un desbordamiento de búfer. El ataque puede lanzarse en remoto. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_78/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348263",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348263",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759625",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3379",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T03:16:16.743",
      "lastModified" : "2026-03-03T17:33:26.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda F453 1.0.0.3, la cual afeacta a la función fromSetIpBind del archivo /goform/SetIpBind. Manipular el argumento page conduce a desbordamiento de búfer. El ataque puede ser iniciado en remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_79/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759626",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3380",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T04:16:01.890",
      "lastModified" : "2026-03-03T17:32:47.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tenda F453 1.0.0.3, la cual afecta a la función frmL7ImForm del archivo /goform/L7Im. Manipular el argumento page provoca un desbordamiento de búfer. El ataque puede lanzarse de forma remota. El exploit se ha hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_81/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3382",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T06:15:58.750",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Number::get_as of the file include/chaiscript/dispatchkit/boxed_number.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en ChaiScript hasta la versión 6.1.0, la cual afecta a función chaiscript::Boxed_Number::get_as del archivo include/chaiscript/dispatchkit/boxed_number.hpp. Su manipulación resulta en corrupción de memoria. El ataque requiere un enfoque local. El exploit ha sido liberado al público y puede ser utilizado para ataques. Se informó con antelación del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaiscript:chaiscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "7C9648DA-18A7-412B-AEE5-903C40744AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChaiScript/ChaiScript/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/635#issue-3828258513",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3383",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T07:15:59.947",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en ChaiScript hasta 6.1.0, la cual afecta a la función chaiscript::Boxed_Number::go del archivo include/chaiscript/dispatchkit/boxed_number.hpp. Su manipulación puede llevar a una división entre cero. El ataque requiere acceso local. El exploit se ha hecho público y podría ser utilizado para ataques. Se informó con antelación del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaiscript:chaiscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "7C9648DA-18A7-412B-AEE5-903C40744AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChaiScript/ChaiScript/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/634#issue-3828234470",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761302",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3384",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T08:15:57.430",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_Node_Impl::eval/chaiscript::eval::Function_Push_Pop of the file include/chaiscript/language/chaiscript_eval.hpp. The manipulation leads to uncontrolled recursion. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en ChaiScript hasta 6.1.0, la cual afeacta a la función chaiscript::eval::AST_Node_Impl::eval/chaiscript::eval::Function_Push_Pop del archivo include/chaiscript/language/chaiscript_eval.hpp. Su manipulación conduce a una recursión incontrolada. Es preciso ejecutar el ataque en local. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó con antelación del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chaiscript:chaiscript:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "7C9648DA-18A7-412B-AEE5-903C40744AD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChaiScript/ChaiScript/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ChaiScript/ChaiScript/issues/633#issue-3828176056",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3385",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T09:15:57.040",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en wren-lang wren hasta 0.4.0, la cual afecta a la función resolveLocal del archivo src/vm/wren_compiler.c. Su manipulación resulta en recursión incontrolada. Es necesario realizar el ataque en local. El exploit es ahora público y puede ser usado. Se informó con antelación del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "5B3A76EF-D824-491F-B1BF-07C619DE6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0122/blob/main/i1218/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/issues/1218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348271",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348271",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3386",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T09:15:58.147",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wren_compiler.c. This manipulation causes out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en wren-lang wren hasta 0.4.0, la cual afeacta a la función emitOp del archivo src/vm/wren_compiler.c. Su manipulación causa lectura fuera de límites. Es posible lanzar el ataque en el host local. El exploit ha sido publicado y puede ser usado. Se informó con antelación del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "5B3A76EF-D824-491F-B1BF-07C619DE6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0122/blob/main/i1219/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/issues/1219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3387",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T10:16:00.863",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren_compiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en wren-lang wren hasta 0.4.0, la cual afeacta a la función getByteCountForArguments del archivo src/vm/wren_compiler.c. Su manipulación lleva a una desreferencia de puntero nulo. Se requiere acceso local para abordar este ataque. El exploit ha sido divulgado al público y puede ser usado. Se informó con antelación del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wren:wren:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "5B3A76EF-D824-491F-B1BF-07C619DE6D6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0122/blob/main/i1220/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wren-lang/wren/issues/1220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761312",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3388",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T10:16:01.133",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation results in uncontrolled recursion. The attack needs to be approached locally. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Squirrel hasta la versión 3.2, la cual afeacta a la función SQCompiler::Factor/SQCompiler::UnaryOP del archivo squirrel/sqcompiler.cpp. Su manipulación resulta en recursión incontrolada. El ataque necesita ser abordado localmente. El exploit ha sido hecho público y podría ser usado. Se informó pronto del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrel-lang:squirrel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "DDA9B279-8931-4C68-9500-534EAB17584C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/albertodemichelis/squirrel/issues/312",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i312/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761314",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3389",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T10:16:01.363",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en Squirrel hasta 3.2, la cual afecta a la función sqstd_rex_newnode en la biblioteca sqstdlib/sqstdrex.cpp. Su manipulación puede llevar a una desreferencia de puntero nulo. El ataque solo puede ejecutarse localmente. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó pronto del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirrel-lang:squirrel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "DDA9B279-8931-4C68-9500-534EAB17584C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/albertodemichelis/squirrel/issues/314",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i314/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761315",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3390",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T10:16:01.583",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch_line_end of the file src/lily_build_error.c of the component Error Reporting. The manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en FascinatedBox lily hasta 2.3, la cula afecta a  la función patch_line_end del archivo src/lily_build_error.c del componente Error Reporting. Su manipulación conduce a una lectura fuera de límites. El ataque solo puede realizarse desde un entorno local. El exploit está disponible públicamente y podría ser utilizado. Se informó pronto del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "30C42A17-3D4F-44E0-8262-4E3AF2F59444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FascinatedBox/lily/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FascinatedBox/lily/issues/382",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i382/repro.lily",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3391",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T12:15:59.180",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file src/lily_emitter.c. The manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en FascinatedBox lily hasta la versión 2.3, la cual afeacta a la función clear_storages del archivo src/lily_emitter.c. Su manipulación resulta en lectura fuera de límites. El ataque solo es posible con acceso local. El exploit ha sido publicado y puede ser utilizado para ataques. Se informó pronto del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "30C42A17-3D4F-44E0-8262-4E3AF2F59444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FascinatedBox/lily/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FascinatedBox/lily/issues/383",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i383/repro.lily",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348277",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348277",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761327",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3392",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T12:16:00.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en FascinatedBox lily hasta la versión 2.3, la cual afecta a la función eval_tree del archivo src/lily_emitter.c. Su  manipulación causa desreferencia de puntero nulo. El ataque está restringido a ejecución local. El exploit se ha puesto a disposición del público y podría usarse para ataques. Se informó pronto del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lily-lang:lily:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "30C42A17-3D4F-44E0-8262-4E3AF2F59444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FascinatedBox/lily/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/FascinatedBox/lily/issues/384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0122/blob/main/i384/repro.lily",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348278",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348278",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761328",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3393",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T13:16:14.610",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac of the file src/audiosource/wav/soloud_wav.cpp of the component Audio File Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en jarikomppa soloud hasta 20200207, la cual afeacta a la función SoLoud::Wav::loadflac del archivo src/audiosource/wav/soloud_wav.cpp del componente Gestor de Archivos de Audio. Su manipulación provoca un desbordamiento de búfer basado en montículo. El ataque debe llevarse a cabo localmente. El exploit ha sido divulgado públicamente y puede ser utilizado. Se informó pronto del problema al proyecto, a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solhsa:soloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020-02-07",
            "matchCriteriaId" : "AAD2C956-F3C3-4AF4-A1F1-921FC03BF929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jarikomppa/soloud/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jarikomppa/soloud/issues/401",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0209/blob/main/so1/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348279",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348279",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3394",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T13:16:15.680",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en jarikomppa soloud hasta 20200207, la cual afecta a la función SoLoud::Wav::loadwav del archivo src/audiosource/wav/soloud_wav.cpp del componente Analizador de archivos WAV. Su manipulación resulta en corrupción de memoria. El ataque debe iniciarse desde una posición local. El exploit ahora es público y puede ser utilizado. El proyecto fue informado del problema con antelación a través de un informe de incidencias, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solhsa:soloud:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020-02-07",
            "matchCriteriaId" : "AAD2C956-F3C3-4AF4-A1F1-921FC03BF929"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jarikomppa/soloud/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jarikomppa/soloud/issues/401",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/oneafter/0209/blob/main/so2/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348280",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348280",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.761339",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3395",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T14:16:05.960",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/preview-ajax.php of the component MarkItUp Preview AJAX Endpoint. Executing a manipulation can lead to code injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 109.2 will fix this issue. This patch is called 08937a3c5d672a242d68f53e9fccf8a748820ef3. You should upgrade the affected component. The code maintainer was informed beforehand about the issues. He reacted very fast and highly professional."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en MaxSite CMS hasta la versión 109.1, la cual afecta a la función eval del archivo application/maxsite/admin/plugins/editor_markitup/preview-ajax.php del componente MarkItUp Preview AJAX Endpoint. Si se manipula se puede provocar una inyección de código. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. La actualización a la versión 109.2 solucionará este problema. Este parche se llama 08937a3c5d672a242d68f53e9fccf8a748820ef3. Debería actualizar el componente afectado. Se informó previamente al mantenedor del código sobre los problemas. Reaccionó muy rápido y de manera muy profesional."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:max-3000:maxsite_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.2",
            "matchCriteriaId" : "A57592D5-4449-4F41-9DE8-DF5B64175D55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maxsite/cms/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/maxsite/cms/commit/08937a3c5d672a242d68f53e9fccf8a748820ef3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348281",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348281",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.762169",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3398",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T22:16:17.270",
      "lastModified" : "2026-03-03T17:32:11.063",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the argument wanmode/PPPOEPassword can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Tenda F453 1.0.0.3, la cual afecta a la función fromAdvSetWan del archivo /goform/AdvSetWan del componente httpd. Al manipular el argumento wanmode/PPPOEPassword se puede provocar un desbordamiento de búfer. El ataque puede ser lanzado en remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_82/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348293",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348293",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3399",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-01T23:16:02.060",
      "lastModified" : "2026-03-03T17:31:32.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Tenda F453 1.0.0.3, la cual afecta a la función fromGstDhcpSetSer del archivo /goform/GstDhcpSetSer del componente httpd. Si se manipula el argumento dips se provoca un desbordamiento del búfer. El ataque puede ser iniciado en remoto. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_83/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3400",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T00:16:03.293",
      "lastModified" : "2026-03-03T19:48:04.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapsk_crypto2_4g results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en Tenda AC15 hasta la versión 15.13.07.13. La cual afecta a alguna funcionalidad desconocida del archivo /goform/TextEditingConversion. Si se manipula el argumento wpapsk_crypto2_4g se provoca un desbordamiento de búfer basado en pila. El ataque puede ser lanzado en remoto. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.13.07.13",
            "matchCriteriaId" : "EB73C3DF-9E16-4317-9B47-534A38E1B6F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.348295",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348295",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.760109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.yuque.com/ba1ma0-an29k/nnxoap/tzg68iadbmqx6esm?singleDoc#",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3401",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T01:16:02.563",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en SourceCodester Web-based Pharmacy Product Management System 1.0, la cual afecta a una parte desconocida. Si se manipula se provoca que la sesión expire. Es posible explotar el ataque en remoto. El ataque es de complejidad bastante alta y difícil de explotar. El exploit se ha puesto a disposición del público y podría utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senior-walter:web-based_pharmacy_product_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2DA030-DE10-4DA9-86D7-3E3E9A22DABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hiranerakkot/Web-based-Pharmacy-Product-Management-System/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348296",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.762795",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3402",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T01:16:03.363",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de seguridad en PHPGurukul Student Record Management System hasta la versión 1.0, la cual afecta a código desconocido del archivo /edit-course.php. Manipular el argumento Course Short Name provoca un cross site scripting. El ataque puede ser ejecutado en remoto. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:student_record_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23ED109E-B12D-4445-B00D-55ED2EAF48D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AS-AbdulSamad/CVEs/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763323",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3403",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T02:16:18.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en PHPGurukul Student Record Management System 1.0, la cual afeacta a algún procesamiento desconocido del archivo /edit-subject.php. Manipular el argumento Subject 1 provoca un cross-site scripting. Es posible lanzar el ataque en remoto. El exploit ahora es público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:student_record_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23ED109E-B12D-4445-B00D-55ED2EAF48D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AS-AbdulSamad/CVEs/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://phpgurukul.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763324",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3404",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T02:16:19.800",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in thinkgem JeeSite up to 5.15.1. Impacted is an unknown function of the file /com/jeesite/common/shiro/cas/CasOutHandler.java of the component Endpoint. Executing a manipulation can lead to xml external entity reference. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en thinkgem JeeSite hasta la versión 5.15.1, la cual afecta a una función desconocida del archivo /com/jeesite/common/shiro/cas/CasOutHandler.java del componente Endpoint. Su manipulación puede conducir a una referencia a entidad externa XML. El ataque puede realizarse de forma remota. Los ataques de esta naturaleza son altamente complejos y su explotabilidad difícil. El exploit ha sido publicado y puede ser utilizado. Antes de divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        }, {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeesite:jeesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.15.1",
            "matchCriteriaId" : "36E61A91-31E7-48EE-9DF9-CFC555EC30AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.348299",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348299",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763732",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/pa2fpb/ew8x2qss8dv0bsu0?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3405",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T02:16:20.013",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is described as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en thinkgem JeeSite hasta la versión 5.15.1, la cual afecta a una función desconocida del componente Connection Handler. Su manipulación conduce a un salto de ruta. Es posible iniciar el ataque de forma remota. El ataque es de complejidad alta y difícil de explotar. El exploit ha sido divulgado al público y puede ser utilizado. Antes de divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeesite:jeesite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.15.1",
            "matchCriteriaId" : "36E61A91-31E7-48EE-9DF9-CFC555EC30AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.348300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765097",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.yuque.com/la12138/pa2fpb/sg81mhkrat5h170c?singleDoc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?submit.765097",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3406",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T03:16:01.357",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en projectworlds Online Art Gallery Shop 1.0, la cual afecta a una función desconocida del archivo /admin/registration.php del componente Gestor de Registro. Al manipular el argumento fname se provoca una inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido hecho público y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:online_art_gallery_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7806E4A2-FCD7-4624-83AC-2F2FE63E4752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ubfbuz3/cve/issues/55",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3407",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T03:16:01.600",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Applying a patch is the recommended action to fix this issue. It appears that the issue is not reproducible all the time."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en YosysHQ yosys hasta la versión 0.62, la cual afeacta a la función Yosys::RTLIL::Const::set del archivo kernel/rtlil.h del componente BLIF File Parser. Su manipulación provoca un desbordamiento de búfer basado en montículo. Es posible lanzar el ataque en el host local. El exploit ha sido divulgado públicamente y puede ser utilizado. Se recomienda aplicar un parche para solucionar este problema. Parece que el problema no es reproducible todo el tiempo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/YosysHQ/yosys/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/YosysHQ/yosys/issues/5677",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/YosysHQ/yosys/pull/5680",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/YosysHQ/yosys/pull/5681",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/oneafter/0210/blob/main/yo2/repro",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.348302",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.348302",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.763755",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3408",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T04:16:06.023",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available and might be used. The name of the patch is e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad en Open Babel hasta 3.1.1, la cual afecta a la función OBAtom::GetExplicitValence del archivo isrc/atom.cpp del componente Gestor de Archivos CDXML. Si se manipula se provoca una desreferencia de puntero nulo. El ataque puede ser lanzado en remoto. El exploit está disponible públicamente y podría ser usado. El nombre del parche es e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a. Se recomienda aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbabel:open_babel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.1",
            "matchCriteriaId" : "C1F53B5D-AE11-4406-B954-7BD33D2E4DE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VedantMadane/openbabel/commit/e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/oneafter/0128/blob/main/ob3/repro.cdxml",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/openbabel/openbabel/issues/2848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/openbabel/openbabel/pull/2862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763756",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3409",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T05:16:17.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFileLoader.exec_module of the file /api/v1/serve/awel/flow/import of the component Flow Import Endpoint. Performing a manipulation as part of File results in code injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en eosphoros-ai db-gpt 0.7.5, la cual afecta a la función importlib.machinery.SourceFileLoader.exec_module del archivo /API/v1/serve/awel/flow/import del componente Flow Import Endpoint. Al manipular como parte de Archivo se provoca una inyección de código. El ataque puede ser iniciado en remoto. El exploit ha sido publicado al público y puede ser usado para ataques. Antes de divulgar esta vulnerabilidad se contactó con el proveedor, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/YLChen-007/d2799d8b2077e50658f12a45bcae9b70",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.348304",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.348304",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.763745",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3410",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T05:16:19.717",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/check_studid.php. Executing a manipulation of the argument student_id can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en itsourcecode Society Management System 1.0, la cual afeacta a una funcionalidad desconocida del archivo /admin/check_studid.php. Si se maipula el argumento student_id se puede provocar una inyección SQL. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:society_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B926B0-DB28-4E1F-8F49-489C73C35F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DeelBran-7/hyf/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763757",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3411",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T05:16:19.957",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en itsourcecode University Management System 1.0. La cual afecta a alguna funcionalidad desconocida del archivo /admin_single_student_update.PHP. Manipular el argumento ID provoca una inyección SQL. Es posible explotar el ataque en remoto. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dyh1213-wq/cve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3412",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T06:15:59.723",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en itsourcecode University Management System 1.0. Esto afecta una parte desconocida del archivo /att_single_view.PHP. Al manipular el argumento dt se logra un cross site scripting. El ataque puede ser ejecutado en remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dyh1213-wq/cve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348307",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348307",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2999",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-03-02T07:16:22.743",
      "lastModified" : "2026-03-09T14:22:11.223",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them."
      }, {
        "lang" : "es",
        "value" : "El Agente de Inicio de Sesión de Windows IDExpert desarrollado por Changing tiene una vulnerabilidad de ejecución remota de código, que permite a atacantes remotos no autenticados forzar al sistema a descargar archivos ejecutables arbitrarios desde una fuente remota y ejecutarlos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changingtec:idexpert:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "2.7.3.230719",
            "versionEndIncluding" : "2.8.4.250925",
            "matchCriteriaId" : "4B08FDE8-0E08-48B6-875E-C4FEA41454A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.changingtec.com/news_detail.jsp?item_id=348",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3000",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-03-02T07:16:23.013",
      "lastModified" : "2026-03-09T14:21:34.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute them."
      }, {
        "lang" : "es",
        "value" : "IDExpert Windows Logon Agent desarrollado por Changing tiene una vulnerabilidad de ejecución remota de código, que permite a atacantes remotos no autenticados forzar al sistema a descargar archivos DLL arbitrarios de una fuente remota y ejecutarlos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changingtec:idexpert:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "2.7.3.230719",
            "versionEndIncluding" : "2.8.4.250925",
            "matchCriteriaId" : "4B08FDE8-0E08-48B6-875E-C4FEA41454A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.changingtec.com/news_detail.jsp?item_id=348",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3413",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-02T07:16:23.240",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /admin_single_student.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en itsourcecode University Management System 1.0. Esta vulnerabilidad afecta a código desconocido del archivo /admin_single_student.PHP. Esta manipulación del argumento ID causa inyección SQL. El ataque es posible de llevar a cabo remotamente. El exploit ha sido publicado y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JXBbozaihuang/vuln-research/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348308",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348308",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764004",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3422",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-03-02T07:16:23.477",
      "lastModified" : "2026-03-09T14:16:18.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content."
      }, {
        "lang" : "es",
        "value" : "U-Office Force desarrollado por e-Excellence tiene una vulnerabilidad de deserialización insegura, que permite a atacantes remotos no autenticados ejecutar código arbitrario en el servidor mediante el envío de contenido serializado maliciosamente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edetw:u-office_force:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "29.50",
            "matchCriteriaId" : "FC377CFD-3CA3-4AC3-AED3-6C6636A6DD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edetw:u-office_force:29.50:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AB49A7-A901-4E83-B0F5-85133183A00E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10743-9a952-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10742-45b13-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20416",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:15.150",
      "lastModified" : "2026-03-03T13:14:12.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315038 / ALPS10340155; Issue ID: MSV-5155."
      }, {
        "lang" : "es",
        "value" : "En pcie, existe una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría llevar a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10315038 / ALPS10340155; ID del problema: MSV-5155."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20423",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:15.340",
      "lastModified" : "2026-03-03T17:16:18.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956."
      }, {
        "lang" : "es",
        "value" : "En el controlador STA de WLAN, existe una posible escritura fuera de límites debido a una falta de verificación de límites. Esto podría llevar a una escalada local de privilegios con privilegios de ejecución de usuario necesarios. No se necesita interacción del usuario para la explotación. ID de parche: WCNCR00465314; ID de problema: MSV-4956."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "513F2D0C-0D1C-4C90-AA0F-4F43BF08EB0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140DAC08-96E9-47D3-BC2E-65E999DCFD50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2A6813-7138-441E-A9E4-FF62FCBD797A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CFC9DF-2F4C-469A-8A19-A260B1134CFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05525018-AFE0-415C-A71C-A77922C7D637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20424",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:15.493",
      "lastModified" : "2026-03-03T13:11:04.677",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540."
      }, {
        "lang" : "es",
        "value" : "En la visualización, existe una posible lectura fuera de límites debido a la ausencia de una verificación de límites. Esto podría conducir a una revelación de información local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10320471; ID del problema: MSV-5540."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20425",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:15.633",
      "lastModified" : "2026-03-03T13:10:00.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539."
      }, {
        "lang" : "es",
        "value" : "En el componente de visualización, hay una posible escritura fuera de límites debido a una comprobación de límites ausente. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10320471; ID del problema: MSV-5539."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20426",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:15.777",
      "lastModified" : "2026-03-03T13:09:01.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538."
      }, {
        "lang" : "es",
        "value" : "En la visualización, hay una posible escritura fuera de límites debido a una comprobación de límites ausente. Esto podría conducir a una escalada de privilegios local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se requiere interacción del usuario para la explotación. ID del parche: ALPS10320471; ID del problema: MSV-5538."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20427",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:15.910",
      "lastModified" : "2026-03-03T13:08:04.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537."
      }, {
        "lang" : "es",
        "value" : "En la visualización, existe una posible escalada de privilegios debido a la falta de una comprobación de límites. Esto podría llevar a una escalada de privilegios local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10320471; ID del problema: MSV-5537."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20428",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.050",
      "lastModified" : "2026-03-03T13:07:02.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536."
      }, {
        "lang" : "es",
        "value" : "En la visualización, existe una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID de parche: ALPS10320471; ID de problema: MSV-5536."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20429",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.187",
      "lastModified" : "2026-03-02T22:08:43.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5535."
      }, {
        "lang" : "es",
        "value" : "En la visualización, existe una posible lectura fuera de límites debido a una comprobación de límites faltante. Esto podría conducir a la revelación de información local si un actor malintencionado ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10320471; ID del problema: MSV-5535."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20430",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.323",
      "lastModified" : "2026-03-02T22:05:08.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151."
      }, {
        "lang" : "es",
        "value" : "En el FW del AP WLAN, existe una posible escritura fuera de límites debido a una comprobación de límites incorrecta. Esto podría conducir a una escalada de privilegios remota (próxima/adyacente) sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para la explotación. ID del parche: WCNCR00467553; ID del problema: MSV-5151."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.6.7.3",
            "matchCriteriaId" : "70AFB017-99A8-4A7F-AEA5-AF875101DB23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA469E2-9E63-4C9A-8EBA-10C8C870063A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F0133207-2EED-4625-854F-8DB7770D5BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:23.05.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00113669-2850-4F0C-913A-92CA5290746E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB22996-9C22-4B6C-9E94-E4C055D16335"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5AA441-5381-4179-89EB-1642120F72B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490CD97B-021F-4350-AEE7-A2FA866D5889"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A9E917-4B34-403F-B512-09EEBEA46811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20434",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.460",
      "lastModified" : "2026-03-02T22:04:18.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135."
      }, {
        "lang" : "es",
        "value" : "En el módem, existe una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría llevar a una escalada remota de privilegios, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. Se requiere interacción del usuario para la explotación. ID del parche: MOLY00782946; ID del problema: MSV-4135."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:lr12a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B6AFD8-6CBA-4A1D-B38F-A9ABFEB6EFC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:lr13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12318A0A-16CD-48A5-98A4-373070734642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30A2D2E-6A72-4070-A471-EEE75F7D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160C2DDD-6CA5-4E4F-B885-C8AAA7D1D942"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0002C537-4268-43CA-B349-BC14F1F0313C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE80B083-D5A3-418C-9655-C79C9DECB4C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6767:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3367BA13-9C4D-4CCF-8E71-397F33CFF773"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0EFB31-7B79-4529-A978-FA227D77F9F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DD67454-1786-4BC7-B97E-96898F5FE3AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D63CF-FF77-41D8-BA4B-F8BDF88830BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1BE913-70AE-49FE-99E9-E996165DF79D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6783:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C8F9C2-6471-4498-B089-2F40D2483487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E208C7B7-7BF6-4E56-B61C-0198B08DC8B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DD4149-ACBE-47B8-B52E-7CE8EECA3615"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB690F5A-9367-45D3-A53E-80BF60053630"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FE7DBA-479C-402B-8485-9D14E70F25EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "083F6134-FF26-4F1B-9B77-971D342AF774"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F883C6D3-1724-4553-9EFC-3D204FF3CAA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA54AA1-4E3A-44F8-A222-31C60F8F81DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877tt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4D6885-E18C-477F-8B6D-B9E84D9535E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483B6FB0-D683-4F3C-BA5B-6C9852179854"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895tt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2141B30A-C56F-4831-8FCD-4758DF97AD18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2758122C-4D11-4D34-9B72-3905F3A28448"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D6430E-840D-447F-892E-EA4FD7F69BAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEBB2AE0-F6CD-4CAF-BBF2-09C5C20B9910"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6309AE48-7266-435C-B906-50960F643FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF88096-5CBD-4A4B-8F47-33D38985956F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "738475DC-9FA8-4034-AB1F-F89C77CE7B41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF887A-1862-4336-ABFC-371838E1D029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E0D738-F0B9-468F-8A10-204F498320BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20435",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.600",
      "lastModified" : "2026-03-03T12:52:46.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118."
      }, {
        "lang" : "es",
        "value" : "En el preloader, existe una posible lectura de identificadores únicos del dispositivo debido a un error de lógica. Esto podría llevar a una revelación de información local, si un atacante tiene acceso físico al dispositivo, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10607099; ID del problema: MSV-6118."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437D8F9D-67DF-47A5-9C96-5B51D1562951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rdkcentral:rdk-b:2022q3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1488152-CC93-40DF-8D1F-BF33DC8444FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rdkcentral:rdk-b:2024q1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB397DA1-62B3-48FD-B694-9FDA4DA25EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F0133207-2EED-4625-854F-8DB7770D5BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:23.05.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00113669-2850-4F0C-913A-92CA5290746E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:3.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA9F6FC-E722-428B-BB01-E9082DBF9A32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CF4A7A-3136-4C4C-A795-81323896BE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171D1C08-F055-44C0-913C-AA2B73AF5B72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4932D34-06F4-49D7-81FB-772A82E8A5B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2B6BB9-7544-41A7-BF3A-344AA4CC4B31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774B7D7-B7DD-43A0-833F-7E39DF82CA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20436",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.743",
      "lastModified" : "2026-03-03T12:49:52.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID: MSV-5970."
      }, {
        "lang" : "es",
        "value" : "En el controlador STA de WLAN, existe una posible escalada de privilegios debido a una falta de verificación de límites. Esto podría llevar a una escalada de privilegios local si un actor malintencionado ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: WCNCR00473802; ID del problema: MSV-5970."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "513F2D0C-0D1C-4C90-AA0F-4F43BF08EB0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140DAC08-96E9-47D3-BC2E-65E999DCFD50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA2A6813-7138-441E-A9E4-FF62FCBD797A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27CFC9DF-2F4C-469A-8A19-A260B1134CFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05525018-AFE0-415C-A71C-A77922C7D637"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20437",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:16.880",
      "lastModified" : "2026-03-03T12:48:58.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431940; Issue ID: MSV-5843."
      }, {
        "lang" : "es",
        "value" : "En MAE, hay una posible caída del sistema debido a un use after free. Esto podría llevar a una denegación de servicio local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10431940; ID del problema: MSV-5843."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5506327-7DDF-4E88-9EA8-10B8E32F848B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20438",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.030",
      "lastModified" : "2026-03-03T12:48:14.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835."
      }, {
        "lang" : "es",
        "value" : "En MAE, existe una posible escritura fuera de límites debido a una condición de carrera. Esto podría llevar a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10431920; ID del problema: MSV-5835."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5506327-7DDF-4E88-9EA8-10B8E32F848B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4932D34-06F4-49D7-81FB-772A82E8A5B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20439",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.170",
      "lastModified" : "2026-03-03T12:47:36.477",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826."
      }, {
        "lang" : "es",
        "value" : "En imgsys, existe una posible caída del sistema debido a un uso después de liberación. Esto podría llevar a una denegación de servicio local si un actor malicioso ya ha obtenido el privilegio de Sistema. La interacción del usuario no es necesaria para la explotación. ID del parche: ALPS10431955; ID del problema: MSV-5826."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5506327-7DDF-4E88-9EA8-10B8E32F848B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20440",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.307",
      "lastModified" : "2026-03-03T13:03:52.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824."
      }, {
        "lang" : "es",
        "value" : "En MAE, existe una posible escritura fuera de límites debido a una falta de verificación de límites. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID de parche: ALPS10431968; ID de problema: MSV-5824."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5506327-7DDF-4E88-9EA8-10B8E32F848B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20441",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.447",
      "lastModified" : "2026-03-03T13:02:46.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803."
      }, {
        "lang" : "es",
        "value" : "En MAE, existe una posible escritura fuera de límites debido a una comprobación de límites faltante. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID de parche: ALPS10432500; ID de problema: MSV-5803."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5506327-7DDF-4E88-9EA8-10B8E32F848B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20442",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.583",
      "lastModified" : "2026-03-03T13:02:15.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723."
      }, {
        "lang" : "es",
        "value" : "En la visualización, existe una posible caída del sistema debido a un uso después de liberar. Esto podría conducir a una denegación de servicio local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se requiere interacción del usuario para la explotación. ID del parche: ALPS10436998; ID del problema: MSV-5723."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4932D34-06F4-49D7-81FB-772A82E8A5B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20443",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.720",
      "lastModified" : "2026-03-03T13:00:15.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5722."
      }, {
        "lang" : "es",
        "value" : "En la pantalla, hay una posible corrupción de memoria debido a un uso después de la liberación. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10436998; ID del problema: MSV-5722."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4932D34-06F4-49D7-81FB-772A82E8A5B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20444",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:17.863",
      "lastModified" : "2026-03-03T12:58:43.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721."
      }, {
        "lang" : "es",
        "value" : "En la visualización, hay una posible corrupción de memoria debido a una falta de verificación de límites. Esto podría conducir a una escalada local de privilegios si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID de parche: ALPS10436995; ID de problema: MSV-5721."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4932D34-06F4-49D7-81FB-772A82E8A5B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6DD525F-7050-42BD-829D-1121698B8009"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DD8281-FEB4-4E23-8DDA-680FF895F12E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20445",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2026-03-02T09:16:18.007",
      "lastModified" : "2026-03-03T12:57:06.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184."
      }, {
        "lang" : "es",
        "value" : "En MDDP, existe una posible caída del sistema debido a una condición de carrera. Esto podría llevar a una denegación de servicio local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: ALPS10289875; ID del problema: MSV-5184."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mediatek.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7DE6B2-66D9-4A3E-B15F-D56505559255"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E92BE0-5E65-4770-8E1A-0E5D07A38164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF88096-5CBD-4A4B-8F47-33D38985956F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2026",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2584",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2026-03-02T09:16:18.150",
      "lastModified" : "2026-03-02T20:29:29.330",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L)."
      }, {
        "lang" : "es",
        "value" : "Una crítica vulnerabilidad de inyección SQL (SQLi) ha sido identificada en el módulo de autenticación del sistema. Un atacante remoto no autenticado (AV:N/PR:N) puede explotar esta falla enviando consultas SQL especialmente diseñadas a través de la interfaz de inicio de sesión. Debido a la baja complejidad del ataque (AC:L) y la ausencia de requisitos específicos (AT:N), la vulnerabilidad permite un compromiso total de los datos de configuración del sistema (VC:H/VI:H). Si bien la disponibilidad del servicio permanece inalterada (VA:N), la brecha puede conducir a una exposición limitada de información sensible con respecto a sistemas subsiguientes o interconectados (SC:L)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-ciser-system-sl-firmware",
        "source" : "cve-coordination@incibe.es"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3431",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-03-02T13:16:05.197",
      "lastModified" : "2026-03-06T20:30:24.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions. An attacker can leverage these endpoints to connect to any reachable MongoDB instance and perform unauthorized operations including reading, modifying, and deleting data."
      }, {
        "lang" : "es",
        "value" : "En la versión de SimStudio inferior a 0.5.74, los puntos finales de la herramienta MongoDB aceptan parámetros de conexión arbitrarios del llamador sin autenticación o restricciones de host. Un atacante puede aprovechar estos puntos finales para conectarse a cualquier instancia de MongoDB accesible y realizar operaciones no autorizadas, incluyendo la lectura, modificación y eliminación de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sim:sim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.74",
            "matchCriteriaId" : "290F2E37-EB57-4D7D-99A8-A944174F757E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2026-12",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3432",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2026-03-02T13:16:05.367",
      "lastModified" : "2026-03-06T20:30:11.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all authorization checks when provided with `credentialAccountUserId` and `providerId` parameters. An unauthenticated attacker can retrieve OAuth access tokens for any user by supplying their user ID and a provider name, effectively stealing credentials to third-party services."
      }, {
        "lang" : "es",
        "value" : "En la versión de SimStudio anterior a la 0.5.74, el endpoint `/api/auth/oauth/token` contiene una ruta de código que omite todas las comprobaciones de autorización cuando se le proporcionan los parámetros `credentialAccountUserId` y `providerId`. Un atacante no autenticado puede recuperar tokens de acceso OAuth para cualquier usuario proporcionando su ID de usuario y un nombre de proveedor, robando eficazmente credenciales para servicios de terceros."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnreport@tenable.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnreport@tenable.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sim:sim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.74",
            "matchCriteriaId" : "290F2E37-EB57-4D7D-99A8-A944174F757E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2026-13",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1628",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2026-03-02T14:16:23.223",
      "lastModified" : "2026-03-05T16:07:40.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to expose preload script functionality to untrusted servers via having a user open an external link in their Mattermost server. Mattermost Advisory ID: MMSA-2026-00596"
      }, {
        "lang" : "es",
        "value" : "Las versiones &lt;=5.13.3 de la aplicación de escritorio de Mattermost no adjuntan oyentes que restringen la navegación a sitios externos dentro de la aplicación Mattermost, lo que permite a un servidor malicioso exponer la funcionalidad de script de precarga a servidores no confiables al hacer que un usuario abra un enlace externo en su servidor Mattermost. ID de Aviso de Mattermost: MMSA-2026-00596"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.13.4",
            "matchCriteriaId" : "17854B0E-22CE-4E16-A346-75A6E24BD9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T14:16:27.423",
      "lastModified" : "2026-03-03T19:44:26.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Student Alumni System v1.0 es vulnerable a inyección SQL en /TracerStudy/recordteacher_view.PHP?teacherID=."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_student_alumni_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825EA3E3-01FA-4815-8DD0-E1B62A1E2B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-5.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T14:16:27.560",
      "lastModified" : "2026-03-03T19:44:32.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Student Alumni System v1.0 es vulnerable a inyección SQL en /TracerStudy/modal_edit.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_student_alumni_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825EA3E3-01FA-4815-8DD0-E1B62A1E2B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0995",
      "sourceIdentifier" : "arm-security@arm.com",
      "published" : "2026-03-02T15:16:31.910",
      "lastModified" : "2026-04-20T12:53:59.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado un problema en Arm C1-Pro anterior a r1p2-50eac0, donde, bajo ciertas condiciones, un TLBI+DSB podría fallar en garantizar la finalización de los accesos a memoria relacionados con SME."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.6,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "arm-security@arm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arm:c1-pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r1p2-50eac0",
            "matchCriteriaId" : "B1A1B9E3-D64D-412C-A04C-E17AF995CD87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arm:c1-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B682BB76-044E-416E-930E-19DDBB6DB940"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.arm.com/documentation/111823",
        "source" : "arm-security@arm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23600",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-02T15:16:32.697",
      "lastModified" : "2026-03-02T20:29:29.330",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authentication bypass vulnerability \n\n exists in HPE AutoPass License Server (APLS)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad remota de omisión de autenticación existe en el Servidor de Licencias HPE AutoPass (APLS)."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn05003en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.020",
      "lastModified" : "2026-03-03T15:55:11.547",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is directly used in `doSystemCmd`, may lead to critical command injection vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. La falta de validación del valor de 'usbPartitionName', que se utiliza directamente en 'doSystemCmd', puede llevar a vulnerabilidades críticas de inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.170",
      "lastModified" : "2026-03-03T15:54:49.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefix` function and concatenated using `sprintf` without proper size validation, it could lead to a buffer overflow vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. Los atacantes pueden explotar la vulnerabilidad controlando el valor de `nptr`. Cuando este valor se pasa a la función `getMibPrefix` y se concatena usando `sprintf` sin una validación de tamaño adecuada, podría conducir a una vulnerabilidad de desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24108",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.330",
      "lastModified" : "2026-03-05T16:16:15.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `picName`. When this value is used in `sprintf` without validating variable sizes, it could lead to a buffer overflow vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. Los atacantes pueden explotar la vulnerabilidad controlando el valor de 'picName'. Cuando este valor se utiliza en 'sprintf' sin validar los tamaños de las variables, podría conducir a una vulnerabilidad de desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24109",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24109",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.497",
      "lastModified" : "2026-03-05T16:16:15.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addAuthUser` function and processed by `sscanf` without size validation, it could lead to buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. Los atacantes pueden explotar la vulnerabilidad especificando el valor de 'userInfo'. Cuando 'userInfo' se pasa a la función 'addAuthUser' y es procesado por 'sscanf' sin validación de tamaño, podría provocar un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24111",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24111",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.657",
      "lastModified" : "2026-03-05T16:16:15.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefix` function and concatenated using `sprintf` without proper size validation, it could lead to a buffer overflow vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. Los atacantes pueden explotar la vulnerabilidad al controlar el valor de 'nptr'. Cuando este valor se pasa a la función 'getMibPrefix' y se concatena usando 'sprintf' sin una validación de tamaño adecuada, podría conducir a una vulnerabilidad de desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24113",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24113",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.810",
      "lastModified" : "2026-03-03T20:16:47.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflows when using `strcpy`."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. La falta de validación de 'pPortMapIndex' puede provocar desbordamientos de búfer al usar 'strcpy'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24114",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:33.977",
      "lastModified" : "2026-03-03T21:15:58.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before concatenating them into `gstruleQos` may lead to buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. La falta de validación de los tamaños de 'gstup' y 'gstdwn' antes de concatenarlos en 'gstruleQos' puede llevar a un desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26694",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:36.203",
      "lastModified" : "2026-03-03T19:44:43.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php."
      }, {
        "lang" : "es",
        "value" : "El Sistema Simple de Exalumnos de code-projects v1.0 es vulnerable a inyección SQL en /TracerStudy/modal_view.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_student_alumni_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825EA3E3-01FA-4815-8DD0-E1B62A1E2B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:36.320",
      "lastModified" : "2026-03-05T16:16:16.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Student Alumni System v1.0 es vulnerable a inyección SQL en /TracerStudy/recordstudent_edit.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_student_alumni_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825EA3E3-01FA-4815-8DD0-E1B62A1E2B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-2.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26696",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:36.427",
      "lastModified" : "2026-03-03T18:39:57.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Student Alumni System v1.0 es vulnerable a inyección SQL en /TracerStudy/recordteacher_edit.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_student_alumni_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825EA3E3-01FA-4815-8DD0-E1B62A1E2B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:36.553",
      "lastModified" : "2026-03-03T21:15:59.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php."
      }, {
        "lang" : "es",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 es vulnerable a inyección SQL en /ppes/admin/myitem_reuse.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A99194-81C2-46F1-AE69-BD21CF799749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T15:16:36.657",
      "lastModified" : "2026-03-03T21:15:59.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php."
      }, {
        "lang" : "es",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 es vulnerable a inyección SQL en /ppes/admin/advance_search.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A99194-81C2-46F1-AE69-BD21CF799749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0689",
      "sourceIdentifier" : "1c053176-eef3-4d6a-ae0b-24728c86587b",
      "published" : "2026-03-02T16:16:23.653",
      "lastModified" : "2026-03-02T20:29:29.330",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve masked sensitive parameters from HTTP responses. Although credentials appear redacted in the user interface, the application returns the underlying credential values in the HTTP response, enabling an authorized administrator to recover stored secrets that may exceed their intended access.\n\n\n\n\nWe would like to thank the Lockheed Martin Red Team for responsibly reporting this issue and working with us through coordinated disclosure."
      }, {
        "lang" : "es",
        "value" : "En ExtremeCloud IQ – Site Engine (XIQ?SE) anterior a la versión 26.2.10, una vulnerabilidad en la interfaz de administración de NAC permite a un administrador de NAC autenticado recuperar parámetros sensibles enmascarados de las respuestas HTTP. Aunque las credenciales aparecen redactadas en la interfaz de usuario, la aplicación devuelve los valores de credenciales subyacentes en la respuesta HTTP, lo que permite a un administrador autorizado recuperar secretos almacenados que pueden exceder su acceso previsto.\n\nNos gustaría agradecer al Equipo Rojo de Lockheed Martin por informar responsablemente sobre este problema y trabajar con nosotros a través de una divulgación coordinada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "1c053176-eef3-4d6a-ae0b-24728c86587b",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "1c053176-eef3-4d6a-ae0b-24728c86587b",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000134325",
        "source" : "1c053176-eef3-4d6a-ae0b-24728c86587b"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T16:16:24.407",
      "lastModified" : "2026-03-03T19:44:19.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en goform/formSetIptv en Tenda AC15V1.0 V15.03.05.18_multi. Cuando se cumple la condición, 's1_1' se pasará a sub_B0488, concatenado en 'doSystemCmd'. El valor de s1_1 no se valida, lo que podría conducir a una vulnerabilidad de inyección de comandos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.18_multi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38A6B7F-A567-4C13-BA08-1010B3AC986C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5059CAD-BD1A-4808-BCED-006444E60701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2710",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24101",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T16:16:24.547",
      "lastModified" : "2026-03-03T15:51:55.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long `addDhcpRules` data. When these rules enter the `addDhcpRule` function and are processed by `ret = sscanf(pRule, \" %d\\t%[^\\t]\\t%[^\\n\\r\\t]\", &dhcpsIndex, dhcpsIP, dhcpsMac);`, the lack of size validation for the rules could lead to buffer overflows in `dhcpsIndex`, `dhcpsIP`, and `dhcpsMac`."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. Los atacantes pueden enviar datos 'addDhcpRules' excesivamente largos. Cuando estas reglas entran en la función 'addDhcpRule' y son procesadas por 'ret = sscanf(pRule, \" %d\\t%[^\\t]\\t%[^\\n\\r\\t]\", &amp;dhcpsIndex, dhcpsIP, dhcpsMac);', la falta de validación del tamaño de las reglas podría provocar desbordamientos de búfer en 'dhcpsIndex', 'dhcpsIP' y 'dhcpsMac'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24110",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T16:16:24.680",
      "lastModified" : "2026-03-03T20:16:47.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addWewifiWhiteUser` function and processed by `sscanf` without size validation, it could lead to a buffer overflow vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Tenda W20E V4.0br_V15.11.0.6. Los atacantes pueden explotar la vulnerabilidad al especificar el valor de 'userInfo'. Cuando 'userInfo' se pasa a la función 'addWewifiWhiteUser' y es procesado por 'sscanf' sin validación de tamaño, podría conducir a una vulnerabilidad de desbordamiento de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E3911-CF3F-4C15-8EF9-5AA8EEA0FC21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24112",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2707",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26699",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T16:16:25.250",
      "lastModified" : "2026-03-04T18:16:28.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php."
      }, {
        "lang" : "es",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 es vulnerable a ejecución de código arbitrario en ip/ppes/admin/admin_change_picture.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A99194-81C2-46F1-AE69-BD21CF799749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/RCE-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T16:16:25.383",
      "lastModified" : "2026-03-03T21:15:59.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php."
      }, {
        "lang" : "es",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 es vulnerable a inyección SQL en /ppes/admin/edit_tecnical_user.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A99194-81C2-46F1-AE69-BD21CF799749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T16:16:25.517",
      "lastModified" : "2026-03-04T14:47:23.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module."
      }, {
        "lang" : "es",
        "value" : "Un problema en Twenty CRM v1.15.0 y versiones anteriores permite a un atacante remoto ejecutar código arbitrario a través del módulo local.driver.ts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twenty:twenty:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.0",
            "matchCriteriaId" : "AEC17E06-01B2-46B3-A175-9193D82BE6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dillonkirsch.com/post/locally_hosted_twenty_rce_cve_2026_26720/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dillonkirsch/CVE-2026-26720-Twenty-RCE",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twenty.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28403",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T16:16:25.750",
      "lastModified" : "2026-03-10T18:28:54.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections from any origin without validating the HTTP `Origin` header during the WebSocket handshake. A malicious web page visited in the same browser session can silently connect to the local WebSocket server and send arbitrary `DirectorCommand` payloads, allowing full remote control of the teleprompter content. Version 1.5.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Textream es una aplicación de teleprónter gratuita para macOS. Antes de la versión 1.5.1, el servidor WebSocket 'DirectorServer' (ws://127.0.0.1:) acepta conexiones de cualquier origen sin validar la cabecera HTTP 'Origin' durante el handshake de WebSocket. Una página web maliciosa visitada en la misma sesión del navegador puede conectarse silenciosamente al servidor WebSocket local y enviar cargas útiles 'DirectorCommand' arbitrarias, permitiendo el control remoto total del contenido del teleprónter. La versión 1.5.1 corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fka:textream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "E99045B6-44DC-4400-9E55-4A06DDBCA51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/f/textream/commit/f5ebad82750b9313386c34af8f0ede50c213a8a0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/f/textream/security/advisories/GHSA-wr3v-x247-337w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28412",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T16:16:25.930",
      "lastModified" : "2026-03-10T18:23:12.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by flooding the server with connections, causing the Textream application to freeze and crash during a live session. Version 1.5.1 fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Textream es una aplicación de teleprómpter gratuita para macOS. Antes de la versión 1.5.1, el servidor WebSocket 'DirectorServer' no impone límite en las conexiones concurrentes. Combinado con un temporizador de difusión que envía el estado a todos los clientes conectados cada 100 ms, un atacante puede agotar la CPU y la memoria inundando el servidor con conexiones, causando que la aplicación Textream se congele y falle durante una sesión en vivo. La versión 1.5.1 soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fka:textream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "E99045B6-44DC-4400-9E55-4A06DDBCA51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/f/textream/commit/3524fa96f98ba17025b48ce9e19d49d859fc2ec1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/f/textream/security/advisories/GHSA-qr5p-7x47-qxh9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21385",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2026-03-02T17:16:29.207",
      "lastModified" : "2026-03-04T18:13:00.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption while using alignments for memory allocation."
      }, {
        "lang" : "es",
        "value" : "Corrupción de memoria al utilizar alineaciones para la asignación de memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-03-03",
      "cisaActionDue" : "2026-03-24",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Qualcomm Multiple Chipsets Memory Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B46F132-4049-40D0-8351-C1C6FD2B47A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7675p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1846514C-1F95-4568-98DE-C57214401841"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8475p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DBF6AE8-605B-4E72-BD3B-0B6C390FCE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8475p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AAE148-96B6-4FDE-BABD-48F607464A38"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CDD6A2-5A3C-4572-8CE1-2F102333BB79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699E5D17-6144-4F0A-8D52-1E8C83990E52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65865EE9-59C0-498F-A4C5-EC00D4642603"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE02AB51-6FB6-4727-999B-A7466CEDC534"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F63D90-4BFC-4EFA-8B74-7A5027A7052D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8635p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EB529B-6B9F-464F-A98B-A8ABE0F01ADB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8650q_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CAA8D9D-0238-4223-8F7B-134ECBB6FA05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8650q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A722B8-E1E4-43B4-8882-591CE8C5C166"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8ABDBF-BABC-4219-8A18-BDFC8C826B1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685D81D0-7E95-4DBA-A05B-7C708A5DFDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B0086F-5F2C-4F89-AC53-D8429D6506CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smart_audio_400_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8145C8-D978-4047-9203-602E854E7290"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smart_display_200_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23C4E41-66D1-41A5-8814-0F436902E9E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smart_display_200_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B2A51B-661C-45B3-AC29-BFF7C0636ADE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCBF666-CB4E-44E1-9676-6891EDC73578"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_4_gen_1_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C767AB6A-1A8C-406C-A600-96A816F44E2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AECCCF-0761-46B6-B669-E73096679AFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_4_gen_2_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE87CA2-160A-43BF-AC18-DA788501B5B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487D6D28-F007-4726-AB69-F68B1FF4CA3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8FE3BF-8A02-4928-BA5F-BF2457D2C8CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390D7CAF-6C0B-4438-AA7D-AEEE127F4D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB1FC5E-CF6F-4E54-B78D-C01AFD034903"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_480\\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50906EF2-01F7-4E97-9F49-F892DF41CB29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_480\\+_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23A89FF-9C94-40C6-B9B7-3E8354777916"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3F11F3-C9F4-460D-BD77-1BFBCC1F0592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_480_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25673A10-D99C-4F67-BDA7-9C2E4A70EF9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_6_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB3BC1B-2EBC-457C-AE91-6BD408EB7D5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_6_gen_1_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0870CC30-07F8-4FFF-85B4-FBACE947CC14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_6_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69E4203-EA20-4D6F-BD1C-C8E550588F87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_6_gen_3_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1225010-5A08-4D13-A3E2-4C57C4265605"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_6_gen_4_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20ABA235-1380-4D76-A248-36A6E905AEB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_6_gen_4_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923775B3-1916-4E60-A888-574AB3F3E282"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_625_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6647DA1-A755-43DF-943B-E724F83A2216"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_625_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A0D9023-3BAD-4C7F-89B8-B79808071E26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_626_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC25002-D6FA-49B3-A1B7-DC89CCC1D4FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_626_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A226AA-88BE-488B-816A-A29E52190B4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_660_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873CD3BE-2098-4328-B350-A14453C44F1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_660_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE294B26-BBD0-455F-82B0-4605987B7DDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DF4D73-3ACC-41B3-8CA4-20DAECE6BFB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE08D23A-2D0D-4472-8847-27B955F55165"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0ED00F-1345-43AD-83C6-E979890B84AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_680_4g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C28019-B57D-4487-B551-F7B53395C6E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_685_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C174F07D-0E33-43FD-9BAD-6C6D8B51B6A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_685_4g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47311B68-A07F-448B-99D5-9C92C8127A81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_690_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E317-7F22-4605-A85F-144921EEBA0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_690_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF50FDA-47FA-491B-BEAE-76CC38C18F52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9A2DA11-5E4E-4E36-923C-A2D3CC2F2751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_695_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7DFAD4-1D21-4A3A-9E8C-10F00AD7C403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_7\\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E41CBD-D6AD-41CF-A469-92A7E228BBB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_7\\+_gen_2_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E0BA08-3BF4-4E84-BBA9-B48F84197F9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_7_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D5A3F-2A0D-48F0-A1C5-B067BADFD11A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_7_gen_1_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB79B015-A401-4FAD-8818-1475653C2B12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_778g\\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14EA48BF-BD65-43B2-8DC1-D97F75AD6FE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_778g\\+_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86E317F-12BF-42F6-879B-88A85F7E3F81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_778g_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87ECCB82-B880-412D-A635-CA6F0B035F2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_778g_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424743C4-CE74-4A02-835A-023C9DA0CFAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_782g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194A4BD4-0DDF-49E5-AA89-40A5BFB71933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_782g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FF9732-40D8-4C12-8259-BAA16FAB5A56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_7c\\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A050CA-8514-400A-A6B3-F513CC93CA14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_7c\\+_gen_3_compute:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD850305-1E76-4952-A3FB-F6229CBF7FE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_7s_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD338C6-F731-4B5D-9DE1-32259A23FBC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_7s_gen_3_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AB83DA5-30ED-44E8-8517-1988B2D1EC6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8\\+_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59CB6F2F-7C95-498B-9F9E-728930FD24A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8\\+_gen_1_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E62AF-2E4D-4E82-AC9A-F27DA71735EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8\\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FEDF458-DEA7-42A1-A56D-E11250139545"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8\\+_gen_2_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5693438-0F20-47BB-BA32-7175C3152368"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8_elite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA50192-07B0-4404-93D4-EC4F3B1918B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8_elite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C7FC48-08CB-4E50-B8D3-8AF30549FDF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41070BDB-15E4-4DD7-A132-A14AA24978E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102460A6-9637-4883-9230-2CC888D5D74E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8FA32F-4690-4C5B-8968-474DA32FD0A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59BD8BEA-725A-4158-84BE-4AFD476ED03D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F5899C-BA8D-4B6B-BC61-F77B1EB64739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8_gen_2_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39AD7CE-A017-4D74-A348-9E4B08363799"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FAB6D60-1C03-4F85-B874-FF169402ED09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C89A8D93-46DA-4547-A9F1-076FC0D5119D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:5g_fixed_wireless_access_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D9ABF8-3D6C-415B-B6F9-9A430D08E335"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:5g_fixed_wireless_access_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1134A5-796D-476B-A0E6-4BDD7A96A109"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13A7328A-89FB-4E9C-B4E3-D8097443FB7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678A68E0-81D8-4562-826E-03872184256C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE1ADA9-8042-4CDE-A2B9-E96665CB41BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1DE046-DD70-4ACA-9DF4-59939DAC1889"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88B9C86-2E8E-4DCE-A30C-02977CC00F00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE473A5A-5CFC-4F08-A173-30717F8BD0D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A725088-FC3B-4439-9189-72AA10954721"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:c-v2x_9150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80D6366-4C0C-4C0D-9A38-769C66D62F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA42F2EA-5D00-42B8-B020-C27675B72915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCF207D-B8C8-4860-89C7-673C821F0237"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A35ECF-B12E-42DE-A74B-2C3BE03639A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B283D6-B2D2-49B6-98A8-08EDB54C1F15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE1CBDE-3D28-463C-B215-AA7DF373EF09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BD3B88-7CF9-482D-A2DD-67F6ACF4CC57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B82E87-F3F4-466F-A76B-C8809121FF6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419A132E-E42C-4395-B74B-788A39DF1D13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D89F035A-2388-48FC-AEBB-8429C6880F4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fastconnect_6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA13EF4E-AAE6-45F4-9E41-78310E37CE81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E670F500-9B71-4BBE-B5DA-221D35803C89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638DBC7F-456F-487D-BED2-2214DFF8BEE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD36089F-92DF-49EC-9C6F-4300E4903CB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:flight_rb5_5g_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A754C-6900-4436-916D-F5361E0BC324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:fsm100_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCC7277-ECF0-4AEC-A0AF-85976EAB0F5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:fsm100_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AF97AB0-7691-4D66-801A-00311B259BE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:g1_gen_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0556CCE6-B61B-4DE7-AD4B-333414280DF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:g1_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC734495-D935-40CC-9644-477E921F3EE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:g2_gen_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924DFF0F-E8B2-4B94-9B98-E0C2D6313C87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:g2_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A5E644B-D05F-4241-8E20-4A6DA1A56695"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:iq-615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B2D5D-0213-4979-ACBF-BEF843166047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:iq-615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE575B0C-DDE4-4E5A-9FE8-03305C804558"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:iq-8275_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253BF0D2-D24D-4EE3-A157-9853BBB368F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:iq-8275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6B840-62E9-4DDD-9376-2F7A8FB9D589"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:iq-8300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0341D197-450E-4137-9310-8E583C0227A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:iq-8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0979E15F-8A78-4D61-AD08-A07F1EF15BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:iq-9075_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08431A88-C176-48BB-918C-DF3FEABE78D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:iq-9075:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50A35E-023A-404D-BFBC-FFCD1F30E872"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:iq-9100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB92EFC-106F-4E94-9E97-D82AFF5AAC22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:iq-9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E205AE-8086-4CCA-9BCB-8C671032BB09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:lemans_au_lgit_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5767FE95-737F-4C20-A5AB-EC641A68D906"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:lemans_au_lgit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33323A49-9267-421B-96E1-80C5FA709EBC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:lemansau_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF0ED3F-C98B-458E-ADCC-C922402BB185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:lemansau:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102A4B5E-1739-4C31-A626-ABF6B02FEE29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA44E1D7-C4B5-4A1C-8D89-C080856104EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268F94E5-15A2-4BCA-BE1B-0B6A7179B9C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC6FBEE-D2FA-4660-A078-D6CE2097653D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BD8A1C-D9AB-4BE7-A855-31E58631879C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:milos_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EFC07D-16C3-4CCC-A928-EA5EA69CAB65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:milos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3491C1-A427-4CEC-B8BD-6A1930E6827F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:monaco_iot_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D071BA3E-36AE-40E5-88FB-04012ABECBD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:monaco_iot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB6B54-7F16-497D-B211-327744F35ECB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:netrani_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C52A53B-1182-47F3-9800-D8C58F954277"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:netrani:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC1F084-78C8-4413-940A-47E9554CB6D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19FB8345-BBFC-4E18-A4E6-64A159D7F65B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFDA4056-3F1B-4F3A-BE59-1908BD3DE5E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:palawan25_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18C3535-3074-41DE-B40F-F3055BAFF686"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:palawan25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B590B1E-06D1-4C99-BDDF-4A086BEBB4C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F8EF0C-BB48-47E1-A045-254D79388F75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058950FC-ED72-4E91-AE13-87E738ADC083"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3723C7B1-A7E2-401F-8D6D-189350F6BCA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12B89EF-7B12-481E-BCBC-F12B9D16321A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D9E281-B382-41AC-84CB-5B1063E5AC51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EBEBD5-98C3-493B-A108-FD4DE6FFBE97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8673334-5E11-4E95-B33D-3029499F71DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qamsrv1h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0B32F6-5EF0-4591-99D7-D0E9B09DEC5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE03AB2A-3ED9-4489-8E5B-4FCF8BAA8559"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qamsrv1m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E646738-6A87-4470-9640-6A5A1DF3AF78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca2066_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6366F2ED-C6B7-4579-B304-C5B6DF951EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca2066:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B688AF-E1A4-496C-924C-D6B725CBBE26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886124F6-B397-4EB6-8E01-6012E468ABE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93ED74CE-6BF2-4983-8780-07D5336745B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59672A0-2FA6-46CC-B75A-C599B842AFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3847F4A5-90A5-4C84-B43F-0DDD81BD79CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828CFB37-76A6-4927-9D00-AF9A1C432DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11405993-5903-4716-B452-370281034B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DDA896-576C-44B8-85B6-F71F473F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643EC76D-2836-48E6-81DA-78C4883C33CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B3AB46-81F4-4C45-AF66-C8B36A175685"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_820_automotive_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8198E0-C95A-4433-9EC0-F544CAA90251"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_820am_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9499CC4D-A8FE-4CC9-98FF-9F748B99B08A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_820am:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F17260C-DE40-4B9F-BA07-51A84E294CAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_865\\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22303AD4-779C-45A3-8F33-3864C45E4328"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_865\\+_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EC440D-D420-4477-8F14-427245B80631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9F4285-1F09-40CD-B1AA-84B406FD6A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8623DD44-DFDD-442D-9789-11A527A450A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41446A77-6EF3-4570-BAD2-4C761A2C4E7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_870_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "448C401B-EF07-4385-A7B4-123D7808F64F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_888\\+_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CBD543-635C-4C57-87B7-55DD3BA3C1A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_888\\+_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7272B6-AADB-4CCD-B041-66170C313C76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_888_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A78236-5965-4F65-9001-3FE7FF6D27E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_888_5g_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "414C5C1D-A5DA-47C7-B6C9-3564DD4DD911"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_ar1\\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE30A5E0-10D5-4679-ACA6-4ED991335A6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_ar1\\+_gen_1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA75B74-D20D-4C8B-BFA2-5DE4848410CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53E5BBDA-C07D-42E2-9A34-EC1F6454CAA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BB2408F-C768-4DD2-B834-B62E188D6CC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AF39A5-F44E-4B14-AA6E-4F80D9EEB017"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A25FE8F-555A-4D85-8A94-A808B62EAE86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C455E7D-D256-4240-BE72-2A93273D685A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "423E21A1-8F52-46DA-9AC2-77159FEB6001"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05396B5E-C70F-4D83-84AA-7A7DB1B7B0E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x12_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E180EE7-5254-4C57-B4EE-BF2A9C21CA94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312A5688-2508-4609-835F-F0957C511AE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD6DFCE-2D24-4A68-8B46-FB47ABEC6694"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x53_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F80E77B-B207-4E49-99EF-A1F9ECFAAC99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x53_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A12A6DC-63A2-4B52-971A-C014E40C1E6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFF2095-4257-40C9-8C48-B38C143159ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEA2F1D-7D07-4684-BDC1-24224A53A8BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74BF53E-DFA1-4750-A638-FE7572B79D16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x65_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226D1ABD-E4AD-487E-88EB-4C66D51DB33D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9740EB-F82E-42EA-993E-A393B05CC6BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr2\\+_gen_1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022A5532-03F7-4FB8-BA0D-4221178C9486"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A129620-8241-4A47-AAC8-CC7E10A09C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEDD78E-124C-4216-9B57-3B7B53463659"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD199F5-DA68-4BEB-AA99-11572DA26B4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:srv1h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACA2D4D-FC77-4C1A-8278-1C27B3EA3303"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B29E7F-8BFE-466A-B357-63F8A2160C4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:srv1m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D55CC7D-2E65-4CA9-9892-B6FBCC087E6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8455D6-287D-4934-8E4D-F4127A9C0449"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB599A9F-0305-4FE4-8623-0F86630FEDCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw6100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7561D3AA-6719-4D64-9545-C89B070A3E46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673D9178-9F53-4A79-9BC2-1529A00AF995"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw6100p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A59464-5093-4F7B-9E38-7021BAD35CF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw6100p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1950E8-092C-4622-ABDD-311E7762BDE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6444F6-A477-4B4C-8A09-C22C47CCE45B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E20681-4FC4-46E2-AF77-BCF03BC8E77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A93ED1-F509-439E-AE7B-F0EC87AE759F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5E2A98-EDD0-4298-911D-EC7527D5A424"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568C5B08-AC42-48D3-8029-A65689EEBE75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr2330p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DD2B49-0A36-443C-BECB-4115E271A415"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr2350p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA54D269-A94D-47CB-B3F1-7B163E453A67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr2350p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1D79422-1EA3-459A-8C4A-8A0FBE386036"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DE7B27-56A2-4046-9E03-8215587C8827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0853EA22-4EFD-4037-8B83-CB7C18417D23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3607443-848D-4334-B5E4-0DC27F28509B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:video_collaboration_vc1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8F00DD-C894-4236-8932-7F7FCD15D2A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4946C6-778F-4542-AB77-C9B86AF25C05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:video_collaboration_vc3_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F1D604A-4530-42B3-80A0-58A82D658DDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CF9AD4-6E1B-47E8-B441-022A03858875"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:video_collaboration_vc5_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791C1E60-162D-4881-80D5-895658FEC47E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:vision_intelligence_100_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F94655-7876-42AF-828E-E1B6DC671F46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:vision_intelligence_100_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08AB0C49-042F-4C18-8122-54E0994300F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:vision_intelligence_200_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9804EF5F-92E2-42F8-A714-42A091E16CC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:vision_intelligence_200_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89BEAC30-92AA-4733-B45F-E4E5127DD5A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:vision_intelligence_400_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E685A5C-870C-41E9-91AA-7AA7535C4D85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:vision_intelligence_400_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F52FE7-2C9C-4908-A578-2230ED6A1505"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FAD34-B7C5-400A-8575-A12CDE65ACBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A39A2E5-6D8D-4F6E-98CB-96DB1975A4BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A90019-4E96-40B5-9E4D-CCBDD51ACA34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3D23FE-B3D5-4EC3-8268-98F12181966D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28717583-463A-468A-8073-ECF0F90585F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1A7188-7D5D-4D46-AEAB-08BA84FFF539"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE852339-1CAE-4983-9757-8F00EDEF1141"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9E96B3-F1BB-46F8-B715-7DF90180F1E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D6C6B2-36DC-4D0D-AFF8-2108A090A78D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FEB3B1-F641-436D-AC4F-3304C37167C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D001127D-8160-42F0-B8B9-2FAA2976B530"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9EB615F-FD4C-450B-AB25-E936FD9816C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBD264F-F24A-4CDD-B316-9514A61B91E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6688aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CC5BC4-011D-4D2B-8891-97FBF61FD783"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F7853D-09EE-476F-B48D-BB30AEB4A67D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6698au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACA09C0-84A5-493A-A9BD-EF95A8330D54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6698au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2397BD-431C-4730-92E3-17A5C2445A65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797295C2-535C-46A9-A725-E1A5405F0436"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BFC575E-594E-4711-94B1-2DC8D03B9AC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1C53DC-D2F3-4C92-9725-9A85340AF026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0585FF-E390-46E8-8701-70964A4057BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA8F9DA-1386-4961-B9B2-484E4347852A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117289C8-7484-4EAE-8F35-A25768F00EED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8695au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55A21DB0-4722-4421-8E97-B0E31B93E53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8695au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "797B8944-61F0-4522-97FE-3C172369F477"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD0E09B-92EC-4974-BC5F-66C3AAF586B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FBA48AB-85F4-4D6C-B811-87756B80FFB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB1F0FA-25F3-4304-A3BC-5264E55CC092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214A053F-D80C-4AD9-B4F1-83384095A3F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm4325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D8044B-D4E5-4174-A0FB-478F8434EE8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm4325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163FE96E-DF5B-4B67-8EDE-44A5B9A8492D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA506489-4338-44DF-8F92-12E60AF0048C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm4490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8718C37-A82A-4A08-A887-3F22B37601A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC5F81B-AA24-4E3C-9FC8-53E010AC977E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5C66DAD-0D85-46B8-92D7-6D68B9429E9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB226552-52D9-44F5-A170-35C44761A72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB16DC4-CDC9-4936-9C6A-0ED8E1F6D056"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD6D51E-5787-42A6-8A02-4EBBAFFF9C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AA0291-B822-4CAD-BA17-81B632FC3FEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49DBE04-E2EA-4DA1-B774-A878A71524AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E98386-3BB2-4E8C-AD00-E05123608439"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306C34D-47E4-40CF-89F4-BA5263655D13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BA009F-24E1-4953-BA95-2A5BC1CDBDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F34DD2-9DC0-49E5-BC85-1543EA199477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A06879F-6FE9-448A-8186-8347D76F872B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64CDA49-19BF-413F-A0E0-2B9729E45E25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345CCD64-C09E-407D-AAA2-311C4CCFE24F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CDB7BC-89F2-4482-B8E3-9DDBD918C851"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E03AE9-2485-449B-BCFD-3E452BB01FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06789CB9-E6FA-400D-90B6-C2DB6C8EF153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCB9F22-57F2-4327-95B9-B2342A02E45E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3336CDD7-9E7B-4FFB-A5CE-594B19B63A6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs4490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1197E229-1E27-4CA3-A386-B77FAE5DFE1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF23DDB-98A0-4343-ADD3-5AB9C2383E7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ACB8AFB-5B91-4AA1-BA3A-1AF0B3503080"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1083bd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD70F234-1EE7-4362-97F6-5AEDB7078D03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1083bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C569A848-B70C-42EF-B6D5-4A86547586EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1086bd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F218DF06-C40A-4738-ABB5-A3FA2243EF84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1086bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2A0CD0-66FA-45D6-BBC7-03641203EC73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5298473D-8B34-42E6-BC32-69A3800972B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1CF44E-FFC2-4DCB-8DC2-46422D912448"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0208F7B-A959-485E-B004-A34CB7C7C4C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa1083bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDAC812-4603-4D24-A861-23825E32D44E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6DEF72-A8FF-4B67-AA6C-5CB4AA7B35E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa1086bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00EF6875-B088-40BD-A526-C962789CDC5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CC1C8B-F642-4068-B9E3-ECE027486E45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60F8378-B827-4557-B891-A8A02F8F2A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB1EB7-D194-4FE2-B4F6-A7A52F344DDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C90E7-0F3A-43BB-ABF7-63CEA7A85ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qualcomm_215_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E92DB42-A805-4280-A8F4-F6A7489094F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qualcomm_215_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8778EB-BCE0-4099-BDC8-667903F1446E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qxm1083_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE74B89-5E3F-428E-8000-E3452B8B6953"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qxm1083:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC11B7A6-E621-463D-B861-6B203EADFA57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qxm1086_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E48759CC-B751-4466-87DF-2D0AB220C0FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qxm1086:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F1C9D2-6616-4F74-85C2-1850B5C3F6BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qxm1093_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A46B609-BD06-4BB7-B055-1F71C555E93D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qxm1093:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59598462-1E53-4F6D-BAB5-06ACEDF6CD9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qxm1094_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F30D66E-2802-4394-BC39-5E04711234FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qxm1094:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078EC383-784F-4468-B94C-AE7CC9808419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qxm1095_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7B67C93-0453-4696-8F3D-0AD664922C44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qxm1095:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D61C46AA-9130-46A8-BD04-8B4235118B81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qxm1096_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2D5E44-48F6-41E8-A38B-A2E070E16AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qxm1096:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD0372F-5140-4966-9A27-6B5A606C0665"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1295D869-F4DD-4766-B4AA-3513752F43B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98784DC-3143-4D38-AD28-DBBDCCAB4272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2503805B-B2A6-4AEE-8AB1-2B8A040702BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9371:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AD370C-2ED0-43CF-83D9-50DC92A01CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34143ABA-7D09-429F-A65C-3A33438BF62C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CFDBB5B-0A4F-4032-874F-D2A7EF933FB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28A12D6-CC60-4BE9-ADEE-FAB58B05440F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70292B01-617F-44AD-AF77-1AFC1450523D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B17201-8185-47F1-9720-5AB4ECD11B22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FA2EB9-416F-4D69-8786-386CC73978AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896F1C04-9957-440F-BF01-C3772CC3B3DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90555EB-47A7-4717-92D5-35B561825F06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699056F6-1517-4F25-AE07-4FFCF6923B9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4C023D2-6FF5-4FFC-B9F2-895979166580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9590EF1F-E821-4525-943B-4A315ACAEFFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7D32B3-325E-4B1F-8649-3D0071396BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99CA230-0694-4898-A06E-9C522CCB86CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B00662-139A-4E36-98FA-D4F7D101D4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB37B5DB-2493-4082-B2BF-60385B7E027C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCD2FE2-11F2-4B2A-9BD7-EB26718139DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755F669-6D7E-454A-95DA-D60FA0696FD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE861CE7-B530-4698-A9BC-43A159647BF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0D7B24-D567-479A-B4F1-595FAA053418"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A8FAA1-F824-4561-9CCC-7F0DF12F740F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF2DB6-00F5-4B07-953B-EF58B31267F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120E8F0F-EBEB-4565-9927-2D473F783EF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6E9038-9B18-4958-BE1E-215901C9B4B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36D3274-F8D0-49C5-A6D5-95F5DC6D1950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFB25F-013B-48E3-99FF-3E8687F94423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF676C5B-838B-446C-A689-6A25AB8A87E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2744A053-5BD9-45A9-A2FC-791BCA0CCD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F28E29-520F-469E-B048-62DE2EF07ADD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAFC9FA-E6EF-44C5-BD50-2824C7711541"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F895CDD-F9BB-45AD-AE60-71F4549114A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93398092-AF7C-4F04-874C-7E5B4CF7AB00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D242084-5844-4E43-8D7F-D2F8E3521F0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC386D9-3D2B-40FA-A2D9-199BB138F46A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133FFD9F-FA09-4801-939B-AD1D507BE5FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB8794F-7998-424E-AF68-E4A4F9310F65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "799D69CE-3FCC-4B19-8B00-9AF38111D983"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57608D47-894C-4895-B4B3-4733D55D57DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63735D33-9F09-4841-9FE0-0D9AB604BECF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E826F765-4C2E-4319-BBC4-DEB02AAD783F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D765C392-5F38-4E6A-9E88-59629E7A6911"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE8F4F9-F692-4EC0-A3FE-2CDD681DCBFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15307882-7039-43E9-9BA3-035045988B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA85B322-E593-4499-829A-CC6D70BAE884"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E870D82-DE3B-4199-A730-C8FB545BAA98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B69595-E488-4590-A150-CE5BE08B5E13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACAD26E-B79E-4659-91A5-D301281F7D36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA33DE15-C177-43B3-AD50-FF797753D12E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1A5841-5BCB-4033-ACB9-23F3FCA65309"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B47BF35-3AA0-4667-842E-19B0FE30BF3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A071672-9405-4418-9141-35CEADBB65AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7CF473-8B25-4851-91F2-1BD693CCDC85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E591F2-8F72-4A5A-9264-2742EB2DABDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:robotics_rb2_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F5D880-7BBD-4B33-AC47-9B5C4AA49A36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:robotics_rb2_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0194E5-328D-4E53-A1F2-1CFE333217F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:robotics_rb5_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA73E75-F339-49BA-B1F6-619E4630DE92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:robotics_rb5_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6E940-1059-4EA2-8225-0F754FE9F50F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC99C0C-8AE3-4918-B91D-2C26990FE931"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa4150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A558A868-1B67-48D2-8A94-FDEA7126FAE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa4155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D28764-EF4F-4FB3-B936-B42397450EFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa4155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7964A762-467B-47D7-865F-30D48A0AE47C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AA3929-3F80-4D54-B13A-9B070D5C03BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054F77D6-FC66-4151-9005-DC7ECDB5C722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3F589-16D9-46A7-A539-C9862473EE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C40544E-B040-491C-8DF3-50225E70B50C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2DAC85C-CDC9-4784-A69A-147A2CE8A8B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0514D433-162C-4680-8912-721D19BE6201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B651F0A-34DA-400F-A376-B499BFDF8E86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa7255p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CFF093D-98C8-470F-8330-E5126E06343A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C32CA38-5D48-4108-9858-FD66E20CAF2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa7775p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1997F8B-17B8-4DE3-BCF7-726928720592"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71D74B0-0963-49FD-8E97-148C8993B263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910CBFA4-50F7-4C7A-B9B9-B88C8A919827"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C1B02F-8D2D-42E7-B70D-41F4D9844FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEACAA9-C061-4713-9A54-37D8BFC0B00B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33EB594-B0D3-42F2-B1CA-B0E6C9D82C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EF47E5-2875-412F-815D-44804BB3A739"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8648B38-2597-401A-8F53-D582FA911569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CD59B-8F21-4CD6-8A1A-7B37547A8715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC0A66-493B-43BE-B51F-640BDF2FF32E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6E268D-C4AF-4950-9223-39EA36D538A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073C1A81-D02B-4F2F-9378-CD1B2DCE0E5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A19659B-A0C3-44B7-8D54-BA21729873A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F978041A-CE28-4BDF-A7DB-F0360F1A5F14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACE6D64-A498-482F-8270-718F4884CFFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8620p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6E016D6-1B83-4261-A27E-1F9873F81E14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "781CCC31-C08F-499B-BE73-6C7DB70437AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75AFAA21-0589-4C6A-9418-34EE8A61BBAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A024AB04-B213-4018-A4C1-FA467C7BA775"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A8AB7C-5D34-4794-8C06-2193075B323F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sar1165p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D97CD52-4CB0-4F57-9C24-530B326B8D9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sar1165p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582EE932-DDE5-4BE5-837C-523FE3EFBA5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sar1250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFDDB41-3DCC-4A25-8D28-64D3EF7669C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sar1250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959050A3-E3E0-4CF3-B130-C2C22A2D9F82"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sar2130p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95696696-D2AE-4358-AF5D-3ED14F969964"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sar2130p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6FC469-463F-4EC1-B4EF-010BDB9BAA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sar2230p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD4E4E9-8DDD-46C5-9D1E-7E86931DDDB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sar2230p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71634F26-E93B-49A0-9701-070E347A2976"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14E3FE58-7F1C-4F5C-B62D-0CF124E14AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sc8380xp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCB0BBA-3F81-4FCA-B3DE-190C46DA50DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985A7570-846E-4ED8-8EF0-E529231CE0B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_8_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BB1B4D9-EAE6-4395-8B8A-C97F15A64DFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9043720-6B49-4305-BB4F-C88CCB6D89E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd626:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8F19D3-F322-4CDC-83C5-A9F7F1777DAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BE7001-5539-4C5E-A064-6E62023803AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06661DAC-5D22-433E-B5EC-486931E265B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72433485-B229-46A6-BCA4-394AA4EEA683"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D40EC4-BF31-4BFD-8D0A-8193F541AF02"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2326BD7-28A5-4244-8501-B109913E7AE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532D244B-8B5A-4923-B7F1-9DC0A5FC0E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E52771-4FB7-45DB-A349-4DD911F53752"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6CE39-9299-4FC3-BC48-11F79034F2E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx61_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3125FCBA-94BA-415A-A005-CDC5B2CDBE39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx61:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB09831-632C-4043-B7BE-C02ADA70AACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6225p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2B7D93-4218-4FFF-B1C0-F50EC0B2B934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6225p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D9DCE1-B3CD-4F45-97DD-637AA27572DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6650p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09020F3F-C869-42DF-BD9C-E78056CC8123"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6650p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8272228-2D68-45F2-A670-B5D6E90D9C14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEC725F-19B1-4078-B13D-CE624BE23344"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA43E38-A12D-49C3-B05C-A2AF07ED2710"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7435_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A95A9E-617A-4D3A-9A4E-0C0A29B3C8B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7435:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3559292E-B5A6-4F88-BC20-F6AA85F07C97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA5CE41-0596-4D38-9891-D1DF711EA7E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A901C6-FB73-4361-B391-4A4AF8C70029"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7550p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5D7E2C-0955-4B6E-96E4-CFA06D937492"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7550p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1D0F33-AD5A-4826-9A06-EAD2A8709974"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7635p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A72DAA5-E10F-40A0-A8CC-541594A3279F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7635p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CC657A-7623-4F37-AC52-8AF5C83D5BDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012C20A8-3F48-48DD-9A77-65C9CB1F6C30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE992A86-36BC-40E3-8E96-6542560BE8EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21385",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23865",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2026-03-02T17:16:32.100",
      "lastModified" : "2026-05-01T17:41:13.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de entero en la función tt_var_load_item_variation_store de la librería Freetype en las versiones 2.13.2 y 2.13.3 puede permitir una operación de lectura fuera de límites al analizar tablas HVAR/VVAR/MVAR en fuentes variables OpenType. Este problema está solucionado en la versión 2.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-assign@fb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.13.2",
            "versionEndIncluding" : "2.13.3",
            "matchCriteriaId" : "31E09E2F-28D3-440A-ADA4-D58EEF53733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.14.0",
            "versionEndIncluding" : "2.14.1",
            "matchCriteriaId" : "57620D53-213B-4593-BC11-37A948627473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/freetype/freetype/-/commit/fc85a255849229c024c8e65f536fe1875d84841c",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://sourceforge.net/projects/freetype/files/freetype2/2.14.2/",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2026-23865",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/03/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T17:16:32.793",
      "lastModified" : "2026-03-06T21:05:36.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a command injection vulnerability if injected into doSystemCmd."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en goform/formsetUsbUnload en Tenda AC15V1.0 V15.03.05.18_multi. El valor de 'v1' no se verificó, lo que podría llevar a una vulnerabilidad de inyección de comandos si se inyecta en doSystemCmd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56881C41-A993-45CC-BAE6-E9DE17FA56E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5059CAD-BD1A-4808-BCED-006444E60701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2710",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T17:16:33.210",
      "lastModified" : "2026-03-03T21:15:58.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php."
      }, {
        "lang" : "es",
        "value" : "sourcecodester Personnel Property Equipment System v1.0 es vulnerable a inyección SQL en /ppes/admin/edit_employee.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A99194-81C2-46F1-AE69-BD21CF799749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T17:16:33.313",
      "lastModified" : "2026-03-03T15:38:42.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Punto de Venta de Farmacia sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/manage_user.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-5.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28286",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:33.610",
      "lastModified" : "2026-03-05T15:16:02.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, the application enforces restrictions in the frontend/UI to prevent users from creating files or folders in internal OS paths. However, when interacting directly with the API, the restrictions are bypass-able. By sending a crafted request targeting paths like /etc, /usr, or other sensitive system directories, the API successfully creates files or directories in locations where normal users should have no write access. This indicates that the API does not properly validate the target path, allowing unauthorized operations on critical system directories. No known patch is publicly available."
      }, {
        "lang" : "es",
        "value" : "ZimaOS es una bifurcación de CasaOS, un sistema operativo para dispositivos Zima y sistemas x86-64 con UEFI. En la versión 1.5.2-beta3, la aplicación impone restricciones en el frontend/UI para evitar que los usuarios creen archivos o carpetas en rutas internas del sistema operativo. Sin embargo, al interactuar directamente con la API, las restricciones son eludibles. Al enviar una solicitud manipulada dirigida a rutas como /etc, /usr u otros directorios sensibles del sistema, la API crea con éxito archivos o directorios en ubicaciones donde los usuarios normales no deberían tener acceso de escritura. Esto indica que la API no valida correctamente la ruta de destino, permitiendo operaciones no autorizadas en directorios críticos del sistema. No hay ningún parche conocido disponible públicamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zimaspace:zimaos:1.5.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB5C60C-7888-4BE5-9FB2-AD34BFB45CAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-65mg-9gw5-vr7g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28357",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:33.797",
      "lastModified" : "2026-03-03T18:57:07.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, a stored XSS vulnerability exists in the Formula virtual cell. Formula results containing URI::() patterns are rendered via v-html without sanitization, allowing injected HTML to execute. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, existe una vulnerabilidad XSS almacenada en la celda virtual Formula. Los resultados de Formula que contienen patrones URI::() se renderizan a través de v-html sin sanitización, permitiendo que el HTML inyectado se ejecute. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-vx5p-q85x-xm3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28358",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:33.970",
      "lastModified" : "2026-03-03T18:57:25.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered emails, allowing user enumeration. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, el endpoint de recuperación de contraseña devolvía respuestas diferentes para correos electrónicos registrados y no registrados, lo que permitía la enumeración de usuarios. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-387m-j3p9-3php",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28359",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:34.120",
      "lastModified" : "2026-03-03T18:57:42.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypassing the TipTap editor and sending raw HTML via the API. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, un usuario autenticado con rol de Editor puede inyectar HTML arbitrario en celdas de texto enriquecido evitando el editor TipTap y enviando HTML sin procesar a través de la API. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-qxwq-q265-hc44",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28360",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:34.310",
      "lastModified" : "2026-03-03T18:58:09.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database and compared using direct string equality. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, las contraseñas de vistas compartidas se almacenaban en texto plano en la base de datos y se comparaban usando igualdad directa de cadenas. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-mpp2-x7wv-38hv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28361",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:34.467",
      "lastModified" : "2026-03-03T19:00:44.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the MCP token service did not validate token ownership, allowing a Creator within the same base to read, regenerate, or delete another user's MCP tokens if the token ID was known. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, el servicio de tokens MCP no validaba la propiedad del token, permitiendo a un Creador dentro de la misma base leer, regenerar o eliminar los tokens MCP de otro usuario si se conocía el ID del token. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-p9x3-w98f-7j3q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28396",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:34.627",
      "lastModified" : "2026-03-03T19:01:16.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not revoke existing refresh tokens, allowing an attacker with a previously stolen refresh token to continue minting valid JWTs after the victim resets their password. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, el flujo de restablecimiento de contraseña no revocaba los refresh tokens existentes, permitiendo a un atacante con un refresh token previamente robado continuar generando JWTs válidos después de que la víctima restableciera su contraseña. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-x4vh-j75g-268g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28397",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:34.777",
      "lastModified" : "2026-03-03T19:01:30.623",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored XSS. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, los comentarios renderizados a través de v-html sin sanitización permiten XSS almacenado. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-rcph-x7mj-54mm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28398",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:34.923",
      "lastModified" : "2026-03-03T19:01:49.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitization, enabling stored XSS. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, el contenido controlado por el usuario en comentarios y celdas de texto enriquecido se renderizaba a través de v-html sin sanitización, lo que permitía XSS almacenado. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-8vm4-g489-v3w7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28399",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:35.073",
      "lastModified" : "2026-03-03T19:02:04.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula's unit parameter. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, un usuario autenticado con rol de Creador puede inyectar SQL arbitrario a través del parámetro unit de la fórmula DATEADD. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-45rp-9p97-h852",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28401",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T17:16:35.220",
      "lastModified" : "2026-03-03T19:02:19.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sanitization enables stored XSS. This issue has been patched in version 0.301.3."
      }, {
        "lang" : "es",
        "value" : "NocoDB es un software para construir bases de datos como hojas de cálculo. Antes de la versión 0.301.3, el contenido de celdas de texto enriquecido renderizado a través de v-html sin sanitización permite XSS almacenado. Este problema ha sido parcheado en la versión 0.301.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.301.3",
            "matchCriteriaId" : "4AE4D8D2-EBCC-4E55-8FC1-3353EAB8B008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nocodb/nocodb/releases/tag/0.301.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nocodb/nocodb/security/advisories/GHSA-wwp2-x4rj-j8rm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0654",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-03-02T18:16:25.983",
      "lastModified" : "2026-03-06T19:47:21.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.  An authenticated adjacent attacker may execute arbitrary commands via crafted configuration file, impacting confidentiality, integrity and availability of the device.\nThis issue affects Deco BE25 v1.0: through 1.1.1 Build 20250822."
      }, {
        "lang" : "es",
        "value" : "El manejo inadecuado de entradas en la interfaz web de administración de TP-Link Deco BE25 v1.0 permite que una entrada manipulada sea ejecutada como parte de un comando del sistema operativo. Un atacante adyacente autenticado puede ejecutar comandos arbitrarios a través de un archivo de configuración manipulado, impactando la confidencialidad, integridad y disponibilidad del dispositivo. Este problema afecta a Deco BE25 v1.0: hasta la 1.1.1 Build 20250822."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:deco_be25_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "BC0E4EDF-87AD-4298-80F6-4264F837BB28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:deco_be25:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82E7278-1A07-4F82-A96B-F556D844AB28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/deco-be25/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/deco-be25/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/deco-be25/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4993/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0655",
      "sourceIdentifier" : "f23511db-6c3e-4e32-a477-6aa17d310630",
      "published" : "2026-03-02T18:16:26.170",
      "lastModified" : "2026-03-06T19:46:46.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read arbitrary files or cause denial of service.  This issue affects Deco BE25 v1.0: through 1.1.1 Build 20250822."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Limitación Inadecuada de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta') en TP-Link Deco BE25 v1.0 (módulos web) permite a un atacante adyacente autenticado leer archivos arbitrarios o causar denegación de servicio. Este problema afecta a Deco BE25 v1.0: hasta la versión 1.1.1 Build 20250822."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:deco_be25_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "BC0E4EDF-87AD-4298-80F6-4264F837BB28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:deco_be25:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82E7278-1A07-4F82-A96B-F556D844AB28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tp-link.com/en/support/download/deco-be25/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/sg/support/download/deco-be25/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/download/deco-be25/v1/#Firmware",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tp-link.com/us/support/faq/4993/",
        "source" : "f23511db-6c3e-4e32-a477-6aa17d310630",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T18:16:26.553",
      "lastModified" : "2026-03-03T15:38:37.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php."
      }, {
        "lang" : "es",
        "value" : "Sistema de Punto de Venta de Farmacia sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/view_category.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T18:16:26.673",
      "lastModified" : "2026-03-03T15:38:33.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php."
      }, {
        "lang" : "es",
        "value" : "Sistema de Punto de Venta de Farmacia sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/view_product.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T18:16:26.793",
      "lastModified" : "2026-03-03T21:15:59.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php."
      }, {
        "lang" : "es",
        "value" : "sourcecodester Pharmacy Point of Sale System v1.0 es vulnerable a inyección SQL en /pharmacy/view_receipt.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T18:16:26.903",
      "lastModified" : "2026-03-03T21:15:59.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Punto de Venta de Farmacia sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/view_supplier.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/pharmacy-point-sale-system/SQL-4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3132",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-02T18:16:27.947",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_Admin::render_preview'. This is due to missing capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server."
      }, {
        "lang" : "es",
        "value" : "El plugin Master Addons for Elementor Premium para WordPress es vulnerable a la ejecución remota de código en todas las versiones hasta la 2.1.3, inclusive, a través de 'JLTMA_Widget_Admin::render_preview'. Esto se debe a la falta de una comprobación de capacidad. Esto permite que atacantes autenticados, con acceso de nivel Suscriptor y superior, ejecuten código en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/master-addons/tags/2.1.3/inc/admin/widget-builder/class-jltma-widget-admin.php#L1127",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3471598/master-addons/trunk/inc/admin/widget-builder/class-jltma-widget-admin.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/76c31190-9db9-4d14-83e0-cbfca812e8ea?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3180",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-02T18:16:28.297",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_mail’ parameter in all versions up to, and including, 28.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerability's ’cgLostPasswordEmail’ parameter was patched in version 28.1.4, and the ’cgl_mail’ parameter was patched in version 28.1.5."
      }, {
        "lang" : "es",
        "value" : "El plugin Contest Gallery – Upload &amp; Vote Photos, Media, Sell with PayPal &amp; Stripe para WordPress es vulnerable a inyección SQL ciega a través del parámetro 'cgLostPasswordEmail' y el parámetro 'cgl_mail' en todas las versiones hasta la 28.1.4, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes no autenticados añadan consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer información sensible de la base de datos. El parámetro 'cgLostPasswordEmail' de la vulnerabilidad fue parcheado en la versión 28.1.4, y el parámetro 'cgl_mail' fue parcheado en la versión 28.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.1.3/v10/v10-admin/users/frontend/login/ajax/users-login-check-ajax-lost-password.php#L12",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.1.3/v10/v10-admin/users/frontend/login/ajax/users-login-check-ajax-lost-password.php#L27",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.1.4/functions/general/cg-user-functions.php#L140",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.1.4/v10/v10-admin/users/frontend/login/ajax/users-login-check-ajax-lost-password.php#L28",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.1.5/functions/general/cg-user-functions.php#L140",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/91d52a64-8dc1-4923-be0b-06800382151e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0005",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.033",
      "lastModified" : "2026-03-06T04:16:02.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and impact is app-dependent with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En onServiceDisconnected de KeyguardServiceDelegate.java, existe una posible omisión parcial del anclaje de aplicaciones, permitiendo una interacción limitada con otras aplicaciones sin conocer el LSKF debido a una verificación de permisos faltante. Esto podría llevar a la revelación de información local donde el alcance de la interacción y el impacto es dependiente de la aplicación, sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0006",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.140",
      "lastModified" : "2026-03-06T04:16:02.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples ubicaciones, existe una posible lectura y escritura fuera de límites debido a un desbordamiento de búfer en el heap. Esto podría conducir a la ejecución remota de código sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0007",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.250",
      "lastModified" : "2026-03-06T04:16:02.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En writeToParcel de WindowInfo.cpp, existe una posible forma de engañar a un usuario para que acepte un permiso debido a un ataque de tapjacking/superposición. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0008",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.360",
      "lastModified" : "2026-03-03T13:20:00.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In  multiple locations, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples ubicaciones, existe una posible escalada de privilegios debido a un delegado confundido. Esto podría llevar a una escalada de privilegios local sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2026-03-01",
        "source" : "security@android.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0010",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.470",
      "lastModified" : "2026-03-06T04:16:03.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En onTransact de IDrmManagerService.cpp, hay una posible escritura fuera de límites debido a una comprobación de límites ausente. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0011",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.590",
      "lastModified" : "2026-03-06T04:16:03.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En enableSystemPackageLPw de Settings.java, existe una posible forma de evitar que el acceso a la ubicación funcione debido a un error de lógica en el código. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        }, {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0012",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.703",
      "lastModified" : "2026-03-06T04:16:03.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En setHideSensitive de ExpandableNotificationRow.java, existe una posible fuga de nombres de contacto debido a un error de lógica en el código. Esto podría llevar a la revelación de información local sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0013",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.803",
      "lastModified" : "2026-03-06T04:16:03.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En setupLayout de PickActivity.java, existe una forma posible de iniciar cualquier actividad como una aplicación DocumentsUI debido a un delegado confuso. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0014",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:29.913",
      "lastModified" : "2026-03-06T04:16:03.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En isPackageNullOrSystem de AppOpsService.java, existe una posible denegación de servicio persistente debido a una validación de entrada incorrecta. Esto podría llevar a una denegación de servicio local sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0015",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.020",
      "lastModified" : "2026-03-06T04:16:04.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples ubicaciones de AppOpsService.java, existe una posible denegación de servicio persistente debido a una validación de entrada incorrecta. Esto podría llevar a una denegación de servicio local sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0017",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.133",
      "lastModified" : "2026-03-06T04:16:04.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En el onChange de BiometricService.java, existe una posible forma de habilitar el desbloqueo por huella dactilar debido a un error de lógica en el código. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0020",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.240",
      "lastModified" : "2026-03-06T04:16:04.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En parsePermissionGroup de ParsedPermissionUtils.java, existe una posible forma de eludir un diálogo de consentimiento para obtener permisos debido a una elusión de permisos. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0021",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.347",
      "lastModified" : "2026-03-06T04:16:04.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En hasInteractAcrossUsersFullPermission de AppInfoBase.java, existe una posible elusión de permisos entre usuarios debido a un delegado confuso. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0023",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.460",
      "lastModified" : "2026-03-06T04:16:04.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En createSessionInternal de PackageInstallerService.java, existe una posible forma para que una aplicación actualice su propiedad debido a la falta de una verificación de permisos. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0024",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.567",
      "lastModified" : "2026-03-06T04:16:04.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En isRedactionNeededForOpenViaContentResolver de MediaProvider.java, existe una posible forma de revelar la ubicación de los medios debido a una verificación de permisos faltante. Esto podría llevar a una revelación de información local sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0025",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.673",
      "lastModified" : "2026-03-06T04:16:05.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En hasImage de Notification.java, existe una posible forma de revelar información entre usuarios debido a una omisión de permisos. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0026",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.783",
      "lastModified" : "2026-03-06T04:16:05.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En removePermission de PermissionManagerServiceImpl.java, existe una posible forma de anular cualquier permiso del sistema debido a un error de lógica en el código. Esto podría conducir a una escalada de privilegios local sin necesidad de privilegios de ejecución adicionales. Se requiere interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0027",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:30.897",
      "lastModified" : "2026-03-06T04:16:05.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En smmu_detach_dev de arm-smmu-v3.c, existe una posible escritura fuera de límites debido a un uso después de liberar. Esto podría llevar a una escalada local de privilegios con privilegios de ejecución de sistema necesarios. La interacción del usuario no es necesaria para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/3af14d2057f2f3df97472cef6b293113b020d1e6",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/5161b3e75fb025bb4ebb11fbf1ac037021e56719",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/a47e0e78ad5b4e153b40fc1c9def11991aa6ca0c",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0028",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.007",
      "lastModified" : "2026-03-06T04:16:05.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En __pkvm_host_share_guest de mem_protect.c, hay una posible escritura fuera de límites debido a un desbordamiento de entero. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42d",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0029",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.117",
      "lastModified" : "2026-03-06T04:16:05.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En __pkvm_init_vm de pkvm.c, existe una posible corrupción de memoria debido a un error de lógica en el código. Esto podría conducir a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/42eff3b2fd3a906ac8cdb6284d3265bc0856b56b",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/749cf1743eb22eff1851c68a533147e1af97a9bf",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/ae242b26371808a221578b89c937568781719d2c",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0030",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.217",
      "lastModified" : "2026-03-06T04:16:05.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En __host_check_page_state_range de mem_protect.c, existe una posible escritura fuera de límites debido a una comprobación de límites incorrecta. Esto podría llevar a una escalada local de privilegios sin privilegios de ejecución adicionales necesarios. No se requiere interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42d",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0031",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.330",
      "lastModified" : "2026-03-06T04:16:06.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples funciones de mem_protect.c, existe una posible escritura fuera de límites debido a un desbordamiento de entero. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42d",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0032",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.440",
      "lastModified" : "2026-03-06T04:16:06.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples funciones de mem_protect.c, existe una posible escritura fuera de límites debido a un error lógico en el código. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/048aebb861d2f3ed4d260a4c9f4e72a43cae9b1e",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/33eb6bde43d03bd826214bbb390de62ca19621b9",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0034",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.550",
      "lastModified" : "2026-03-06T04:16:06.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En setPackageOrComponentEnabled de ManagedServices.java, existe una posible desincronización de la política de notificaciones debido a una validación de entrada incorrecta. Esto podría conducir a una escalada de privilegios local sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0035",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.657",
      "lastModified" : "2026-03-06T04:16:06.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En createRequest de MediaProvider.java, existe una posible forma para que una aplicación obtenga acceso de lectura/escritura a archivos inexistentes debido a un error de lógica en el código. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para su explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "02882AB1-7993-47DD-84A0-8DF4272D85ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0037",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.763",
      "lastModified" : "2026-03-06T04:16:06.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples funciones de ffa.c, hay una posible corrupción de memoria debido a un error de lógica en el código. Esto podría llevar a una escalada de privilegios local sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/6c400c2e2e46f3a1117ce5da316ecdc1dbb1a031",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0038",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.863",
      "lastModified" : "2026-03-06T04:16:06.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En múltiples funciones de mem_protect.c, existe una posible forma de ejecutar código arbitrario debido a un error de lógica en el código. Esto podría conducir a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se requiere interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/kernel/common/+/1bf8033b56a45165602f8116e0a0d2e767f1e8ae",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/513ea99ae008b81dd266bf6e361627c058ddde41",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/652b7b6bf9a62cc12c3a071bab4e92314f046739",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/7e1d15d29b7fe0f858926a8bcaf929b75db9e52a",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/b23a5bfa1fb8f9525e21f095a87486a2bd856321",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/d884f499434c224285c30d460681f1ce76a8cf1f",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://android.googlesource.com/kernel/common/+/f090d4b083a9ef4831f99e692c239542dd385cb4",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0047",
      "sourceIdentifier" : "security@android.com",
      "published" : "2026-03-02T19:16:31.973",
      "lastModified" : "2026-03-06T04:16:07.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "En dumpBitmapsProto de ActivityManagerService.java, existe una forma posible para que una aplicación acceda a información privada debido a una falta de comprobación de permisos. Esto podría llevar a una escalada de privilegios local sin privilegios de ejecución adicionales necesarios. No se necesita interacción del usuario para la explotación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*",
            "matchCriteriaId" : "FD695F32-4A73-4846-B1A1-04FF266E9C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE9F018-8704-476B-8D59-F63F8486E231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95A642-4330-4F65-B028-3BA597D30F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/docs/security/bulletin/2026/2026-03-01",
        "source" : "security@android.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21853",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T19:16:32.560",
      "lastModified" : "2026-04-20T14:53:37.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.25.4, there is a one-click remote code execution vulnerability. This vulnerability can be exploited by embedding a specially crafted affine: URL on a website. An attacker can trigger the vulnerability in two common scenarios: 1/ A victim visits a malicious website controlled by the attacker and the website redirect to the URL automatically, or 2/ A victim clicks on a crafted link embedded on a legitimate website (e.g., in user-generated content). In both cases, the browser invokes AFFiNE custom URL handler, which launches the AFFiNE app and processes the crafted URL. This results in arbitrary code execution on the victim’s machine, without further interaction. This issue has been patched in version 0.25.4."
      }, {
        "lang" : "es",
        "value" : "AFFiNE es un espacio de trabajo todo en uno de código abierto y un sistema operativo. Antes de la versión 0.25.4, existe una vulnerabilidad de ejecución remota de código de un solo clic. Esta vulnerabilidad puede ser explotada incrustando una URL affine: especialmente diseñada en un sitio web. Un atacante puede activar la vulnerabilidad en dos escenarios comunes: 1/ Una víctima visita un sitio web malicioso controlado por el atacante y el sitio web redirige automáticamente a la URL, o 2/ Una víctima hace clic en un enlace diseñado incrustado en un sitio web legítimo (p. ej., en contenido generado por el usuario). En ambos casos, el navegador invoca el gestor de URL personalizado de AFFiNE, lo que inicia la aplicación AFFiNE y procesa la URL diseñada. Esto resulta en ejecución de código arbitrario en la máquina de la víctima, sin interacción adicional. Este problema ha sido parcheado en la versión 0.25.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:affine:affine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.25.4",
            "matchCriteriaId" : "CCC113D1-6B87-4514-B83A-CB34A9108CD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/toeverything/AFFiNE/commit/c9a4129a3e9376b688c18e1dcd6c87a775caac80",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/toeverything/AFFiNE/pull/13864",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/toeverything/AFFiNE/security/advisories/GHSA-67vm-2mcj-8965",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T19:16:33.370",
      "lastModified" : "2026-03-06T19:21:09.487",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Gym Management System v1.0 es vulnerable a inyección SQL en /gym/trainer_search.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_gym_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30248BE9-7191-4026-8AF4-0717FD23DB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-gym-management-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-gym-management-system/SQL-1.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T19:16:33.487",
      "lastModified" : "2026-03-03T16:16:21.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Food Order System v1.0 es vulnerable a inyección SQL en /food/routers/edit-orders.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_food_order_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FC05F-317E-46C5-B9C7-A3A53DD97B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T19:16:33.600",
      "lastModified" : "2026-03-03T16:16:21.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php."
      }, {
        "lang" : "es",
        "value" : "Sistema Simple de Pedidos de Comida v1.0 de code-projects es vulnerable a inyección SQL en /food/view-ticket.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_food_order_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FC05F-317E-46C5-B9C7-A3A53DD97B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21882",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T20:16:26.130",
      "lastModified" : "2026-04-15T15:42:24.190",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0."
      }, {
        "lang" : "es",
        "value" : "theshit es una utilidad de línea de comandos que detecta y corrige automáticamente errores comunes en comandos de shell. Antes de la versión 0.2.0, una caída de privilegios inadecuada permite la escalada de privilegios local mediante la reejecución de comandos. Este problema ha sido parcheado en la versión 0.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-273"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AsfhtgkDavid/theshit/commit/5293957b119e55212dce2c6dcbaf1d7eb794602a",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/AsfhtgkDavid/theshit/security/advisories/GHSA-2j3p-gqw5-g59j",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T20:16:26.407",
      "lastModified" : "2026-04-10T14:28:39.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. The flaw exists in the domain validation logic, where an improperly anchored Regular Expression allows an attacker to bypass the whitelist by using malicious domains that end with a trusted string. This issue has been patched in version 0.26.0."
      }, {
        "lang" : "es",
        "value" : "AFFiNE es un espacio de trabajo todo en uno de código abierto y un sistema operativo. Antes de la versión 0.26.0, existe una vulnerabilidad de redirección abierta ubicada en el endpoint /redirect-proxy. El fallo reside en la lógica de validación de dominio, donde una expresión regular anclada incorrectamente permite a un atacante eludir la lista blanca utilizando dominios maliciosos que terminan con una cadena de confianza. Este problema ha sido parcheado en la versión 0.26.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:affine:affine:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "0.26.0",
            "matchCriteriaId" : "6BA71CFE-9304-4226-80A6-87C7B6CB89B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/toeverything/AFFiNE/security/advisories/GHSA-wx9m-v7wq-g289",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25884",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T20:16:26.560",
      "lastModified" : "2026-03-05T12:32:39.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una librería de C++ y una utilidad de línea de comandos para leer, escribir, eliminar y modificar metadatos de imagen Exif, IPTC, XMP e ICC. Antes de la versión 0.28.8, se encontró una lectura fuera de límites. La vulnerabilidad está en el analizador de imágenes CRW. Este problema ha sido parcheado en la versión 0.28.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.28.8",
            "matchCriteriaId" : "7E856F04-2C58-41F7-8F09-6313FD6A0D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/commit/cbba4d206512fe63e12d164fdd1881562f072a9d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/3462",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T20:16:26.990",
      "lastModified" : "2026-03-03T16:16:21.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Food Order System v1.0 es vulnerable a inyección SQL en /food/view-ticket-admin.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_food_order_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FC05F-317E-46C5-B9C7-A3A53DD97B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-02T20:16:27.103",
      "lastModified" : "2026-03-03T16:16:21.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php."
      }, {
        "lang" : "es",
        "value" : "code-projects Simple Food Order System v1.0 es vulnerable a inyección SQL en /food/routers/cancel-order.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_food_order_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241FC05F-317E-46C5-B9C7-A3A53DD97B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27596",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T20:16:27.217",
      "lastModified" : "2026-03-05T22:16:24.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. The out-of-bounds read is at a 4GB offset, which usually causes Exiv2 to crash. This issue has been patched in version 0.28.8."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una librería de C++ y una utilidad de línea de comandos para leer, escribir, eliminar y modificar metadatos de imagen Exif, IPTC, XMP e ICC. Antes de la versión 0.28.8, se encontró una lectura fuera de límites en Exiv2. La vulnerabilidad está en el componente de vista previa, que solo se activa al ejecutar Exiv2 con un argumento adicional de línea de comandos, como -pp. La lectura fuera de límites está en un desplazamiento de 4 GB, lo que generalmente provoca que Exiv2 falle. Este problema ha sido parcheado en la versión 0.28.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.28.8",
            "matchCriteriaId" : "7E856F04-2C58-41F7-8F09-6313FD6A0D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/commit/eaa9e21aabe06b3f91cfe66686f5ebc3ca3c0ed4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/3511",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/3512",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-3wgv-fg4w-75x7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27631",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-02T20:16:27.390",
      "lastModified" : "2026-03-05T12:31:24.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una librería de C++ y una utilidad de línea de comandos para leer, escribir, eliminar y modificar metadatos de imagen Exif, IPTC, XMP e ICC. Antes de la versión 0.28.8, se encontró una excepción no capturada en Exiv2. La vulnerabilidad está en el componente de vista previa, que solo se activa al ejecutar Exiv2 con un argumento adicional de línea de comandos, como -pp. Debido a un desbordamiento de entero, el código intenta crear un std::vector enorme, lo que provoca que Exiv2 falle con una excepción no capturada. Este problema ha sido parcheado en la versión 0.28.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.28.8",
            "matchCriteriaId" : "0FCFF025-C0AB-444E-9B45-351EE6AC735A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/commit/659db316eef745899a778a1e0b760a971d1b69df",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/3513",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/3514",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-p2pw-7935-c73j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2256",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2026-03-02T21:16:27.797",
      "lastModified" : "2026-03-03T21:52:29.877",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos existe en las versiones v1.6.0rc1 y anteriores de ms-agent de ModelScope, permitiendo a un atacante ejecutar comandos arbitrarios del sistema operativo a través de una entrada manipulada derivada de un prompt."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://github.com/modelscope/ms-agent",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use",
        "source" : "cret@cert.org"
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/431821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3336",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-03-02T22:16:31.277",
      "lastModified" : "2026-03-11T17:16:00.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer.\n\nCustomers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0."
      }, {
        "lang" : "es",
        "value" : "Validación incorrecta de certificados en PKCS7_verify() en AWS-LC permite a un usuario no autenticado eludir la verificación de la cadena de certificados al procesar objetos PKCS7 con múltiples firmantes, excepto el firmante final.\n\nLos clientes de los servicios de AWS no necesitan tomar ninguna medida. Las aplicaciones que utilizan AWS-LC deberían actualizarse a la versión 1.69.0 de AWS-LC."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-lc-sys:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.24.0",
            "versionEndExcluding" : "0.38.0",
            "matchCriteriaId" : "1657BD7A-BA4B-430A-809F-DE772460B0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws_libcrypto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.41.0",
            "versionEndExcluding" : "1.69.0",
            "matchCriteriaId" : "4B6E82AB-2DB6-4350-B218-772CE7852DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-005-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aws/aws-lc/releases/tag/v1.69.0",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/aws/aws-lc/security/advisories/GHSA-cfwj-9wp5-wqvp",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3337",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-03-02T22:16:32.093",
      "lastModified" : "2026-03-11T17:14:55.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis.\n\n\n\n\nThe impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm.\n\n\n\n\nCustomers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0."
      }, {
        "lang" : "es",
        "value" : "Una discrepancia de temporización observable en el descifrado AES-CCM en AWS-LC permite a un usuario no autenticado determinar potencialmente la validez de la etiqueta de autenticación mediante análisis de temporización.\n\nLas implementaciones afectadas son a través de la API EVP CIPHER: EVP_aes_128_ccm, EVP_aes_192_ccm y EVP_aes_256_ccm.\n\nLos clientes de los servicios de AWS no necesitan tomar ninguna medida. Las aplicaciones que utilizan AWS-LC deberían actualizar a la versión 1.69.0 de AWS-LC."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-lc-fips-sys:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.13.0",
            "versionEndExcluding" : "0.13.12",
            "matchCriteriaId" : "71BBCE97-9AF7-49FD-87CB-7E8A79C23157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-lc-sys:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.14.0",
            "versionEndExcluding" : "0.38.0",
            "matchCriteriaId" : "43114A7E-C07A-43A3-B8C8-A34D3E970371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws_libcrypto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.21.0",
            "versionEndExcluding" : "1.69.0",
            "matchCriteriaId" : "1ECDEEC4-7875-4EBE-B197-00D4F831897E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws_libcrypto:*:*:*:*:fips:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.2.0",
            "matchCriteriaId" : "0AA70D44-F3B1-41E0-9916-40B9D8C7AD9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-005-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aws/aws-lc/releases/tag/v1.69.0",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/aws/aws-lc/security/advisories/GHSA-frmv-5gcm-jwxh",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3338",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-03-02T22:16:32.350",
      "lastModified" : "2026-03-11T16:54:59.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes.\n\n\n\nCustomers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0."
      }, {
        "lang" : "es",
        "value" : "La validación de firma incorrecta en PKCS7_verify() en AWS-LC permite a un usuario no autenticado eludir la verificación de firma al procesar objetos PKCS7 con atributos autenticados.\n\nLos clientes de los servicios de AWS no necesitan tomar ninguna medida. Las aplicaciones que utilizan AWS-LC deberían actualizarse a la versión 1.69.0 de AWS-LC."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-lc-sys:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.24.0",
            "versionEndExcluding" : "0.38.0",
            "matchCriteriaId" : "1657BD7A-BA4B-430A-809F-DE772460B0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws_libcrypto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.41.0",
            "versionEndExcluding" : "1.69.0",
            "matchCriteriaId" : "4B6E82AB-2DB6-4350-B218-772CE7852DCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-005-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aws/aws-lc/releases/tag/v1.69.0",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/aws/aws-lc/security/advisories/GHSA-jchq-39cv-q4wj",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2583",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-02T23:16:31.160",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `blocksy_meta` metadata fields in all versions up to, and including, 2.1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El tema Blocksy para WordPress es vulnerable a cross-site scripting almacenado a través de los campos de metadatos 'blocksy_meta' en todas las versiones hasta la 2.1.30, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://themes.trac.wordpress.org/changeset/315531/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ce7ee2c7-0c7b-4ce3-89d2-5503dff6e59c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1336",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T00:15:54.923",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the store_data() and get_chatgpt_api_key() functions in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to view, modify or delete the plugin's ChatGPT API key.\r\nThe vulnerability was partially fixed in version 2.7.5 and fully fixed in version 2.7.6"
      }, {
        "lang" : "es",
        "value" : "El plugin AI ChatBot con ChatGPT and Content Generator by AYS para WordPress es vulnerable a acceso no autorizado y modificación de datos debido a la falta de comprobaciones de capacidad en las funciones store_data() y get_chatgpt_api_key() en todas las versiones hasta la 2.7.5, inclusive. Esto hace posible que atacantes no autenticados vean, modifiquen o eliminen la clave API de ChatGPT del plugin.\nLa vulnerabilidad fue corregida parcialmente en la versión 2.7.5 y corregida completamente en la versión 2.7.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/admin/class-chatgpt-assistant-admin.php#L4060",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/includes/chatgpt-assistant-db-actions/class-chatgpt-assistant-db-actions.php#L23",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/53b3d441-4938-435f-85c3-707477f0293d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1566",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T00:15:55.133",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 5.2.7. This is due to the plugin allowing users with a LatePoint Agent role, who are creating new customers to set the 'wordpress_user_id' field. This makes it possible for authenticated attackers, with Agent-level access and above, to gain elevated privileges by linking a customer to the arbitrary user ID, including administrators, and then resetting the password."
      }, {
        "lang" : "es",
        "value" : "El plugin LatePoint – Calendar Booking Plugin para Appointments and Events para WordPress es vulnerable a escalada de privilegios mediante restablecimiento de contraseña en todas las versiones hasta la 5.2.7, inclusive. Esto se debe a que el plugin permite a los usuarios con un rol de Agente de LatePoint, que están creando nuevos clientes, establecer el campo 'wordpress_user_id'. Esto hace posible que atacantes autenticados, con acceso de nivel de Agente o superior, obtengan privilegios elevados al vincular un cliente a un ID de usuario arbitrario, incluidos los administradores, y luego restablecer la contraseña."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463945/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c958880e-6068-4e7d-a780-1251f3ab9bf7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0754",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2026-03-03T02:16:07.320",
      "lastModified" : "2026-03-03T21:52:29.877",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate."
      }, {
        "lang" : "es",
        "value" : "Una clave de prueba y un certificado incrustados podrían extraerse de un dispositivo Poly Voice utilizando herramientas especializadas de ingeniería inversa. Este certificado extraído podría ser aceptado por un proveedor de servicios SIP si el proveedor de servicios no realiza una validación adecuada del certificado del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "hp-security-alert@hp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "hp-security-alert@hp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_14269649-14269682-16/hpsbpy04081",
        "source" : "hp-security-alert@hp.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1487",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T02:16:07.633",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and including, 5.2.7 due to insufficient validation on the user-supplied JSON data.  This makes it possible for authenticated attackers, with Administrator-level access and above, to execute arbitrary SQL queries on the database that can be used to extract information via time-based techniques, drop tables, or modify data."
      }, {
        "lang" : "es",
        "value" : "El plugin LatePoint – Calendar Booking Plugin para Appointments and Events para WordPress es vulnerable a inyección SQL a través de la importación JSON en todas las versiones hasta la 5.2.7, inclusive, debido a una validación insuficiente de los datos JSON proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, ejecuten consultas SQL arbitrarias en la base de datos que pueden usarse para extraer información a través de técnicas basadas en tiempo, eliminar tablas o modificar datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463945/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e1bbd339-5eb7-4a62-9c68-bcd76507425c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2269",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T02:16:10.510",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.0.3 via the download_url() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additionally, the plugin stores the contents of the remote files on the server, which can be leveraged to upload arbitrary files on the affected site's server which may make remote code execution possible."
      }, {
        "lang" : "es",
        "value" : "El plugin Uncanny Automator – Easy Automation, Integration, Webhooks &amp; Workflow Builder Plugin para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 7.0.0.3, inclusive, a través de la función download_url(). Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, realicen peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede utilizarse para consultar y modificar información de servicios internos. Además, el plugin almacena el contenido de los archivos remotos en el servidor, lo que puede aprovecharse para subir archivos arbitrarios en el servidor del sitio afectado, lo que podría hacer posible la ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3471238/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/80848de3-a772-4078-aa04-29e1d6e3ff73?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2448",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T02:16:10.687",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included."
      }, {
        "lang" : "es",
        "value" : "El plugin Page Builder by SiteOrigin para WordPress es vulnerable a inclusión local de ficheros en todas las versiones hasta, e incluyendo, la 2.33.5 a través de la función locate_template(). Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, incluyan y ejecuten ficheros arbitrarios en el servidor, permitiendo la ejecución de cualquier código PHP en esos ficheros. Esto puede usarse para eludir controles de acceso, obtener datos sensibles o lograr la ejecución de código en casos donde imágenes y otros tipos de ficheros 'seguros' pueden ser subidos e incluidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/siteorigin-panels/tags/2.33.5/inc/widgets/post-loop.php#L576",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/deeeb78d-1757-44ec-968b-968d919b84f1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2628",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T02:16:10.873",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators."
      }, {
        "lang" : "es",
        "value" : "El plugin All-in-One Microsoft 365 &amp; Entra ID / Azure AD SSO Login para WordPress es vulnerable a la omisión de autenticación en todas las versiones hasta la 2.2.5, inclusive. Esto permite que atacantes no autenticados omitan la autenticación e inicien sesión como otros usuarios, incluidos los administradores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/login-with-azure?rev=3465063",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5e15e36e-55f9-4095-a0ba-48ef9434606a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20757",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2026-03-03T03:15:54.377",
      "lastModified" : "2026-03-03T21:52:29.877",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server.\n\n\n\nThis issue affects Command Centre Server: \n\n9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de bloqueo indebido (CWE-667) en la integración de Gallagher Morpho permite a un operador privilegiado causar una denegación de servicio limitada en el servidor de Command Centre.\n\nEste problema afecta al servidor de Command Centre:\n9.40 anterior a vEL9.40.1976(MR1), 9.30 anterior a vEL9.30.3382 (MR4), 9.20 anterior a vEL9.20.3783 (MR6), 9.10 anterior a vEL9.10.4647 (MR9), todas las versiones de 9.00 y anteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "disclosures@gallagher.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosures@gallagher.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20757",
        "source" : "disclosures@gallagher.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20801",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2026-03-03T03:15:54.540",
      "lastModified" : "2026-03-03T21:52:29.877",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. \n\n \n\nThis issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025."
      }, {
        "lang" : "es",
        "value" : "Transmisión en texto claro de información sensible (CWE-319) en un componente utilizado en las integraciones de Gallagher Hanwha VMS y Gallagher NxWitness VMS permite a usuarios sin privilegios con acceso a la red local visualizar transmisiones de video en vivo.\n\nEste problema afecta a todas las versiones de la integración de Gallagher NxWitness VMS anterior a la 9.10.017 y a la integración de Gallagher Hanwha VMS anterior a la 9.10.025."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "disclosures@gallagher.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosures@gallagher.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801",
        "source" : "disclosures@gallagher.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1492",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T05:17:19.197",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration."
      }, {
        "lang" : "es",
        "value" : "El plugin User Registration &amp; Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction &amp; Membership Plugin para WordPress es vulnerable a la gestión inadecuada de privilegios en todas las versiones hasta la 5.1.2, inclusive. Esto se debe a que el plugin acepta un rol proporcionado por el usuario durante el registro de membresía sin aplicar correctamente una lista de permitidos del lado del servidor. Esto hace posible que atacantes no autenticados creen cuentas de administrador al proporcionar un valor de rol durante el registro de membresía."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3469042/user-registration",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7e9fec92-f471-4ce9-9138-1c58ad658da2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3449",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-03-03T05:17:25.017",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or .then() usage to hang indefinitely. This can cause a control-flow leak that can lead to stalled requests, blocked workers, or degraded application availability."
      }, {
        "lang" : "es",
        "value" : "Versiones del paquete @tootallnate/once anteriores a la 3.0.1 son vulnerables a un Alcance Incorrecto del Flujo de Control en la resolución de promesas cuando se utiliza la opción AbortSignal. La Promesa permanece en un estado permanentemente pendiente después de que la señal es abortada, causando que cualquier uso de await o .then() se quede colgado indefinidamente. Esto puede causar una fuga en el flujo de control que puede llevar a solicitudes estancadas, workers bloqueados o disponibilidad degradada de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-705"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TooTallNate/once/commit/b9f43cc5259bee2952d91ad3cdbd201a82df448a",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://github.com/TooTallNate/once/issues/8",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-TOOTALLNATEONCE-15250612",
        "source" : "report@snyk.io"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3455",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2026-03-03T05:17:25.240",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote  \" to the URL with embedded malicious JavaScript code."
      }, {
        "lang" : "es",
        "value" : "Las versiones del paquete mailparser anteriores a la 3.9.3 son vulnerables a cross-site scripting (XSS) a través de la función textToHtml() debido a la sanitización incorrecta de las URL en el contenido del correo electrónico. Un atacante puede ejecutar scripts arbitrarios en los navegadores de las víctimas al añadir una comilla extra ' a la URL con código JavaScript malicioso incrustado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodemailer:mailparser:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.9.3",
            "matchCriteriaId" : "E9F4D3A2-A90E-4385-86F6-FBB3262FFB5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/hayageek/7fcb225e3b1ea9a341d560403fbb585a",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nodemailer/mailparser/commit/921a67df4cfb38f0b411037d7b26fbd4d5411b08",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nodemailer/mailparser/issues/412",
        "source" : "report@snyk.io",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-MAILPARSER-15204032",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1874",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2026-03-03T07:16:10.067",
      "lastModified" : "2026-05-04T14:27:25.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de implementación de flujo de control siempre incorrecto en Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versiones 1.106 y anteriores y Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP todas las versiones permite a un atacante remoto causar una condición de denegación de servicio (DoS) en los productos al enviar continuamente paquetes UDP a los productos. Se requiere un reinicio del sistema del producto para la recuperación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-eip_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.000",
            "matchCriteriaId" : "CA5DF40B-18EF-4115-9AE8-A64F3607CA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D941E7FD-DC6C-413B-B08C-A4CE18C2D7F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-enet\\/ip_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.106",
            "matchCriteriaId" : "9D2B0F6C-6AD2-4A95-9492-FE7D048A665F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-enet\\/ip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52725C6-F540-4F35-BEA0-1F72B42C0729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU93286687/",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-62-01",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1875",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2026-03-03T07:16:10.277",
      "lastModified" : "2026-04-30T19:26:37.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cierre o liberación inadecuados de recursos en Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP todas las versiones permite a un atacante remoto causar una condición de denegación de servicio (DoS) en los productos mediante el envío continuo de paquetes UDP a los productos. Se requiere un reinicio del sistema del producto para la recuperación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-eip_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.000",
            "matchCriteriaId" : "CA5DF40B-18EF-4115-9AE8-A64F3607CA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-eip:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF79A00-1207-45FE-8633-1793E384D9F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU93286687/",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-62-01",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1876",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2026-03-03T08:16:08.970",
      "lastModified" : "2026-04-30T20:40:14.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cierre o liberación inadecuados de recursos en Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP todas las versiones permite a un atacante remoto causar una condición de denegación de servicio (DoS) en los productos al enviar continuamente paquetes UDP a los productos. Se requiere un reinicio del sistema del producto para la recuperación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:melsec_iq-f_fx5-enet\\/ip_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598E3395-E969-4D8A-9EF6-C5AA43610056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:melsec_iq-f_fx5-enet\\/ip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52725C6-F540-4F35-BEA0-1F72B42C0729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU93286687/",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-62-01",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-021_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22886",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-03-03T10:16:06.267",
      "lastModified" : "2026-04-09T19:47:40.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires\nauthentication. However, the product ships with a default administrative account (admin/\nadmin) and does not enforce a mandatory password change on first use. After the first\nsuccessful login, the server continues to accept the default password indefinitely without\nwarning or enforcement.\n\n\nIn real-world deployments, this service is often left enabled without changing the default\ncredentials. As a result, a remote attacker with access to the service port could authenticate\nas an administrator and gain full control of the protocol’s administrative features."
      }, {
        "lang" : "es",
        "value" : "OpenMQ expone un servicio de gestión basado en TCP (imqbrokerd) que por defecto requiere autenticación. Sin embargo, el producto se envía con una cuenta administrativa por defecto (admin/admin) y no impone un cambio de contraseña obligatorio en el primer uso. Después del primer inicio de sesión exitoso, el servidor continúa aceptando la contraseña por defecto indefinidamente sin advertencia ni imposición.\n\nEn implementaciones del mundo real, este servicio a menudo se deja habilitado sin cambiar las credenciales por defecto. Como resultado, un atacante remoto con acceso al puerto del servicio podría autenticarse como administrador y obtener control total de las características administrativas del protocolo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1391"
        }, {
          "lang" : "en",
          "value" : "CWE-1392"
        }, {
          "lang" : "en",
          "value" : "CWE-1393"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:openmq:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24992257-6690-46E1-962A-2D9CE0815B85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.eclipse.org/security/cve-assignment/-/issues/85",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2568",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T10:16:06.473",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission data in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Zendesk para Contact Form 7, WPForms, Elementor, Formidable y Ninja Forms para WordPress es vulnerable a cross-site scripting almacenado a través de datos de envío de formularios en todas las versiones hasta la 1.1.5, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida deficiente. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3467904/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/27d26d1c-d027-4a22-af49-4d7684d36d40?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3463",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-03T12:16:06.880",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Patch name: 147. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en xlnt-community xlnt hasta 1.6.1. La función xlnt::detail::binary_writer::append del archivo source/detail/binary.hpp del componente Analizador de Documentos Compuestos se ve afectada. Esta manipulación causa desbordamiento de búfer basado en montículo. El ataque solo puede ejecutarse localmente. El exploit se ha puesto a disposición del público y podría usarse para ataques. Nombre del parche: 147. Se sugiere instalar un parche para abordar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlnt-community:xlnt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "9B381094-639E-4E21-8CB0-60C480F02400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0128/blob/main/xl2/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/issues/138",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/issues/138#issuecomment-3868381672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/pull/147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348530",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348530",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3351",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2026-03-03T13:16:21.350",
      "lastModified" : "2026-03-11T18:41:28.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server."
      }, {
        "lang" : "es",
        "value" : "Autorización incorrecta en el endpoint de la API GET /1.0/certificates en Canonical LXD 6.6 en Linux permite a un usuario autenticado y restringido enumerar todas las huellas digitales de certificados confiadas por el servidor lxd."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:lxd:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DA1600-A935-4669-8D43-EF34B9238376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/canonical/lxd/commit/d936c90d47cf0be1e9757df897f769e9887ebde1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/canonical/lxd/pull/17738",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/canonical/lxd/security/advisories/GHSA-crmg-9m86-636r",
        "source" : "security@ubuntu.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3342",
      "sourceIdentifier" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "published" : "2026-03-03T14:15:56.643",
      "lastModified" : "2026-03-04T19:42:25.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface.\n\nThis vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de límites en WatchGuard Fireware OS podría permitir a un administrador privilegiado autenticado ejecutar código arbitrario con permisos de root a través de una interfaz de gestión expuesta.\n\nEsta vulnerabilidad afecta a Fireware OS 11.9 hasta e incluyendo 11.12.4_Update1, 12.0 hasta e incluyendo 12.11.7 y 2025.1 hasta e incluyendo 2026.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5.17",
            "matchCriteriaId" : "C85F0872-60E1-4E8B-B27E-35EFCA127ECA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626220F8-7F0C-4DD8-8001-12EA0A777A0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E561A57F-91A5-4B3C-9F7D-62E9AB5163A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.1",
            "versionEndExcluding" : "2026.1.2",
            "matchCriteriaId" : "4D0AAD6D-2794-444D-9866-3E81B1EE2E26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FF2CF-69DA-4890-9236-52D8D6FA0E71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3439409-2FD6-447B-91CF-17D1C09E2A79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C0412F-AB02-4D13-B159-D0FCD2ECA3ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575CC5EE-0278-489B-AA95-5EC5058D6FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5597F672-3C72-4BCF-AD3F-F16B6913EC2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAE66B-DD19-4C90-8DFC-F77BA1541642"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC18430-C6B4-4395-BFF1-83BB005875BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE309D6-BD5E-4D18-91C3-A492C3576115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75959D39-0960-4836-96C7-DB8048DDE4B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0087049-27C6-4B18-A645-72A8F63D7C6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.9",
            "versionEndExcluding" : "12.11.8",
            "matchCriteriaId" : "0CBAF641-9DCB-4C7F-AA57-05B444453556"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E472917E-D6E1-4C2D-B37D-E76FCC7307CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8C7779-4466-4A9E-B191-929E7746DFF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE9A123-B769-4E56-845E-DC3DA6166C78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180FAE8C-2E73-4C09-AA11-0C82A7715FA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309DBEF2-1D92-4641-827F-D99758B5FFA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFBA966-E052-4350-9544-3B5D484DBB6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1E586D-0E88-447A-95E8-5203EF869ADB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC087C4-CB10-46D4-A746-0C462354410C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59389EA2-3067-4AF8-AEC5-FE79E269C170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445FA7CD-D0AE-4176-9AE5-293B918DE654"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4A7366-0304-431E-B3E4-719BA575CEAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8512B4A-5269-4067-B9C6-475A4E8AD313"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179C6166-87E1-44F8-B727-CDDE40C673D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584107CC-6136-4AA1-AE68-73B93BDDB5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9295217E-C1A0-4A69-A0F0-C44814BB376C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC49246-2166-4681-8D67-4C0940884872"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC853916-8BDC-4F7C-BA53-D6AB490A9444"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3562304-0317-4A3C-B622-D5CE01CC97F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327BA50A-366A-4367-93B8-328EC0136FA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3552F3BB-8021-4E87-987D-870699A7E619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158560A0-D694-41AF-A5F8-0F6FB3EFB8FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECAE1D7-9868-4730-B645-44CB1B6FDE96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00003",
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3343",
      "sourceIdentifier" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "published" : "2026-03-03T14:15:57.687",
      "lastModified" : "2026-03-04T19:34:56.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.\n\nThis vulnerability affects Fireware OS 12.7 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) reflejada en la interfaz de usuario web de Fireware OS permitió la ejecución de JavaScript malicioso en el contexto del navegador de un usuario de gestión autenticado cuando hacen clic en un enlace especialmente diseñado.\n\nEsta vulnerabilidad afecta a Fireware OS 12.7 hasta e incluyendo 12.11.7 y 2025.1 hasta e incluyendo 2026.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7",
            "versionEndExcluding" : "12.11.8",
            "matchCriteriaId" : "5A96DE7F-D807-4BC7-BECE-D0281939D36C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E472917E-D6E1-4C2D-B37D-E76FCC7307CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8C7779-4466-4A9E-B191-929E7746DFF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE9A123-B769-4E56-845E-DC3DA6166C78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180FAE8C-2E73-4C09-AA11-0C82A7715FA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309DBEF2-1D92-4641-827F-D99758B5FFA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFBA966-E052-4350-9544-3B5D484DBB6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1E586D-0E88-447A-95E8-5203EF869ADB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC087C4-CB10-46D4-A746-0C462354410C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59389EA2-3067-4AF8-AEC5-FE79E269C170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445FA7CD-D0AE-4176-9AE5-293B918DE654"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4A7366-0304-431E-B3E4-719BA575CEAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8512B4A-5269-4067-B9C6-475A4E8AD313"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179C6166-87E1-44F8-B727-CDDE40C673D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584107CC-6136-4AA1-AE68-73B93BDDB5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9295217E-C1A0-4A69-A0F0-C44814BB376C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC49246-2166-4681-8D67-4C0940884872"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC853916-8BDC-4F7C-BA53-D6AB490A9444"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3562304-0317-4A3C-B622-D5CE01CC97F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327BA50A-366A-4367-93B8-328EC0136FA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3552F3BB-8021-4E87-987D-870699A7E619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158560A0-D694-41AF-A5F8-0F6FB3EFB8FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECAE1D7-9868-4730-B645-44CB1B6FDE96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.1",
            "versionEndExcluding" : "2026.1.2",
            "matchCriteriaId" : "4D0AAD6D-2794-444D-9866-3E81B1EE2E26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FF2CF-69DA-4890-9236-52D8D6FA0E71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3439409-2FD6-447B-91CF-17D1C09E2A79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C0412F-AB02-4D13-B159-D0FCD2ECA3ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575CC5EE-0278-489B-AA95-5EC5058D6FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5597F672-3C72-4BCF-AD3F-F16B6913EC2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAE66B-DD19-4C90-8DFC-F77BA1541642"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC18430-C6B4-4395-BFF1-83BB005875BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE309D6-BD5E-4D18-91C3-A492C3576115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75959D39-0960-4836-96C7-DB8048DDE4B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0087049-27C6-4B18-A645-72A8F63D7C6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00004",
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3344",
      "sourceIdentifier" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "published" : "2026-03-03T14:15:57.853",
      "lastModified" : "2026-03-04T19:19:41.717",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en WatchGuard Fireware OS puede permitir a un atacante eludir la comprobación de integridad del sistema de archivos de Fireware OS y mantener una persistencia limitada a través de un paquete de actualización de firmware creado con fines maliciosos. Este problema afecta a Fireware OS 12.0 hasta la versión 12.11.7 inclusive, 12.5.9 hasta la versión 12.5.16 inclusive, y 2025.1 hasta la versión 2026.1.1 inclusive."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-440"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.11.8",
            "matchCriteriaId" : "3652A07B-DD52-4ACE-B299-755124304B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E472917E-D6E1-4C2D-B37D-E76FCC7307CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8C7779-4466-4A9E-B191-929E7746DFF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE9A123-B769-4E56-845E-DC3DA6166C78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180FAE8C-2E73-4C09-AA11-0C82A7715FA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309DBEF2-1D92-4641-827F-D99758B5FFA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFBA966-E052-4350-9544-3B5D484DBB6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1E586D-0E88-447A-95E8-5203EF869ADB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC087C4-CB10-46D4-A746-0C462354410C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59389EA2-3067-4AF8-AEC5-FE79E269C170"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445FA7CD-D0AE-4176-9AE5-293B918DE654"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4A7366-0304-431E-B3E4-719BA575CEAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8512B4A-5269-4067-B9C6-475A4E8AD313"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179C6166-87E1-44F8-B727-CDDE40C673D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584107CC-6136-4AA1-AE68-73B93BDDB5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9295217E-C1A0-4A69-A0F0-C44814BB376C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC49246-2166-4681-8D67-4C0940884872"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC853916-8BDC-4F7C-BA53-D6AB490A9444"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3562304-0317-4A3C-B622-D5CE01CC97F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "327BA50A-366A-4367-93B8-328EC0136FA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3552F3BB-8021-4E87-987D-870699A7E619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158560A0-D694-41AF-A5F8-0F6FB3EFB8FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECAE1D7-9868-4730-B645-44CB1B6FDE96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5.9",
            "versionEndExcluding" : "12.5.17",
            "matchCriteriaId" : "8F4CFCD9-AEA9-468E-9F0F-A901CA30B35D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626220F8-7F0C-4DD8-8001-12EA0A777A0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E561A57F-91A5-4B3C-9F7D-62E9AB5163A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.1",
            "versionEndExcluding" : "2026.1.2",
            "matchCriteriaId" : "4D0AAD6D-2794-444D-9866-3E81B1EE2E26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615FF2CF-69DA-4890-9236-52D8D6FA0E71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3439409-2FD6-447B-91CF-17D1C09E2A79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C0412F-AB02-4D13-B159-D0FCD2ECA3ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575CC5EE-0278-489B-AA95-5EC5058D6FB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5597F672-3C72-4BCF-AD3F-F16B6913EC2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AAE66B-DD19-4C90-8DFC-F77BA1541642"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FC18430-C6B4-4395-BFF1-83BB005875BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE309D6-BD5E-4D18-91C3-A492C3576115"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75959D39-0960-4836-96C7-DB8048DDE4B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0087049-27C6-4B18-A645-72A8F63D7C6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00005",
        "source" : "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20777",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2026-03-03T15:16:18.187",
      "lastModified" : "2026-03-05T18:16:07.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted .wft file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer basado en montículo en la funcionalidad de análisis de Nicolet WFT de The Biosig Project libbiosig 3.9.2 y la rama Master (db9a9a63). Un archivo .wft especialmente diseñado puede conducir a la ejecución de código arbitrario. Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbiosig_project:libbiosig:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163D4E31-DDCD-4F25-BFBE-C990D7D3B574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2362",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22891",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2026-03-03T15:16:18.620",
      "lastModified" : "2026-03-05T18:15:20.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted Intan CLP file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de desbordamiento de búfer basado en montículo en la funcionalidad de análisis de Intan CLP de The Biosig Project libbiosig 3.9.2 y la rama Master (db9a9a63). Un archivo Intan CLP especialmente diseñado puede conducir a la ejecución de código arbitrario. Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libbiosig_project:libbiosig:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163D4E31-DDCD-4F25-BFBE-C990D7D3B574"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2361",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T15:16:18.787",
      "lastModified" : "2026-03-05T21:43:07.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer fue descubierta en goform/formSetMacFilterCfg en Tenda AC15V1.0 V15.03.05.18_multi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.18_multi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38A6B7F-A567-4C13-BA08-1010B3AC986C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5059CAD-BD1A-4808-BCED-006444E60701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24103",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenda.com.cn/material/show/2710",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24103",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25673",
      "sourceIdentifier" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
      "published" : "2026-03-03T15:16:19.103",
      "lastModified" : "2026-03-05T14:12:38.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.\n`URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial of service via large URL inputs containing these characters.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Seokchan Yoon for reporting this issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en 6.0 anterior a 6.0.3, 5.2 anterior a 5.2.12, y 4.2 anterior a 4.2.29.\n`URLField.to_python()` en Django llama a `urllib.parse.urlsplit()`, que realiza la normalización NFKC en Windows, la cual es desproporcionadamente lenta para ciertos caracteres Unicode, permitiendo a un atacante remoto causar denegación de servicio a través de grandes entradas de URL que contienen estos caracteres.\nSeries de Django anteriores y no compatibles (como 5.0.x, 4.1.x y 3.2.x) no fueron evaluadas y también podrían estar afectadas.\nDjango desea agradecer a Seokchan Yoon por informar sobre este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.29",
            "matchCriteriaId" : "DE181B32-2EF8-4AF0-8500-AFF78A7787B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2.12",
            "matchCriteriaId" : "91187FB5-19CD-4A7D-B61B-9BE8374164EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "6AAF6F95-4E20-4A81-832F-D0E29F7E158E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/dev/releases/security/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2026/mar/03/security-releases/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25674",
      "sourceIdentifier" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
      "published" : "2026-03-03T15:16:19.280",
      "lastModified" : "2026-03-05T14:07:03.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.\nRace condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Tarek Nakkouch for reporting this issue."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en 6.0 anterior a 6.0.3, 5.2 anterior a 5.2.12 y 4.2 anterior a 4.2.29.\nUna condición de carrera en el almacenamiento del sistema de archivos y los backends de caché basados en archivos en Django permite a un atacante provocar que los objetos del sistema de archivos se creen con permisos incorrectos a través de solicitudes concurrentes, donde el cambio temporal de 'umask' de un hilo afecta a otros hilos en entornos multihilo.\nSeries de Django anteriores y no compatibles (como 5.0.x, 4.1.x y 3.2.x) no fueron evaluadas y también pueden verse afectadas.\nDjango desea agradecer a Tarek Nakkouch por informar sobre este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.29",
            "matchCriteriaId" : "DE181B32-2EF8-4AF0-8500-AFF78A7787B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndExcluding" : "5.2.12",
            "matchCriteriaId" : "91187FB5-19CD-4A7D-B61B-9BE8374164EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "6AAF6F95-4E20-4A81-832F-D0E29F7E158E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/dev/releases/security/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2026/mar/03/security-releases/",
        "source" : "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28518",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-03T15:16:20.593",
      "lastModified" : "2026-04-17T21:19:50.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with traversal sequences, absolute paths, or drive prefixes in member names to overwrite or create arbitrary files with the importing process privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones 0.2.1 y anteriores de OpenViking, corregidas en el commit 46b3e76, contienen una vulnerabilidad de salto de ruta en el manejo de importación de archivos .ovpack que permite a los atacantes escribir archivos fuera del directorio de importación previsto. Los atacantes pueden crear archivos ZIP maliciosos con secuencias de salto de ruta, rutas absolutas o prefijos de unidad en los nombres de los miembros para sobrescribir o crear archivos arbitrarios con los privilegios del proceso de importación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:volcengine:openviking:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.1",
            "matchCriteriaId" : "E66C393D-9F4B-4DC0-BA3B-517F825A09FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/volcengine/OpenViking/commit/46b3e76e28b9b3eee73693720c9ec48820228b72",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/volcengine/OpenViking/issues/342",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openviking-ovpack-import-zip-slip-path-traversal",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/volcengine/OpenViking/issues/342",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2637",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2026-03-03T15:16:20.950",
      "lastModified" : "2026-04-27T13:12:44.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd. The daemon exposes an NSConnection service that runs as root without implementing any authentication or authorization checks.\n\nThis issue affects iBoysoft NTFS: 8.0.0."
      }, {
        "lang" : "es",
        "value" : "iBoysoft NTFS para Mac contiene una vulnerabilidad de escalada de privilegios local en su demonio auxiliar privilegiado ntfshelperd. El demonio expone un servicio NSConnection que se ejecuta como root sin implementar ninguna comprobación de autenticación o autorización.\n\nEste problema afecta a iBoysoft NTFS: 8.0.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "help@fluidattacks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iboysoft:ntfs_for_mac:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C6FBA4-0B4F-4E1B-80B0-D15E5A521C79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/cuarteto",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://iboysoft.com/ntfs-for-mac/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3465",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-03T15:16:21.733",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tuya App and SDK 24.07.11 on Android. Affected by this vulnerability is an unknown functionality of the component JSON Data Point Handler. This manipulation of the argument cruise_time causes denial of service. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. There is ongoing doubt regarding the real existence of this vulnerability. The vendor disagrees with the conclusion of the finding: \"The described vulnerability fails to prove its feasibility or exploitability by attackers. The issue essentially does not constitute a security vulnerability, aligning more closely with abnormal product functionality.\" These considerations are properly reflected within the CVSS vector."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Tuya App y SDK 24.07.11 en Android. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente JSON Data Point Gestor. Esta manipulación del argumento cruise_time causa denegación de servicio. La explotación remota del ataque es posible. La complejidad de un ataque es bastante alta. La explotación parece ser difícil. El exploit ha sido divulgado públicamente y puede ser utilizado. Existe una duda continua con respecto a la existencia real de esta vulnerabilidad. El proveedor no está de acuerdo con la conclusión del hallazgo: 'La vulnerabilidad descrita no logra probar su viabilidad o explotabilidad por parte de los atacantes. El problema esencialmente no constituye una vulnerabilidad de seguridad, alineándose más estrechamente con una funcionalidad de producto anormal.' Estas consideraciones se reflejan adecuadamente dentro del vector CVSS."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/deopllj/Device_CVE_Archive/blob/main/Yonganda%20YAD-LOJ%20CVE%20Doc.pdf",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.348536",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.348536",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.744108",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/deopllj/Device_CVE_Archive/blob/main/Yonganda%20YAD-LOJ%20CVE%20Doc.pdf",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T17:16:18.337",
      "lastModified" : "2026-03-04T14:04:29.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment."
      }, {
        "lang" : "es",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 es vulnerable a inyección SQL en /msms/classes/Master.PHP?f=delete_appointment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_online_men\\'s_salon_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89214BE6-29BE-4978-8551-7439D8350AEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T17:16:18.457",
      "lastModified" : "2026-03-04T14:04:40.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php."
      }, {
        "lang" : "es",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 es vulnerable a inyección SQL en /msms/admin/appointments/view_appointment.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_online_men\\'s_salon_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89214BE6-29BE-4978-8551-7439D8350AEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T17:16:18.573",
      "lastModified" : "2026-03-04T14:04:47.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service."
      }, {
        "lang" : "es",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 es vulnerable a inyección SQL en /classes/Master.PHP?f=delete_service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_online_men\\'s_salon_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89214BE6-29BE-4978-8551-7439D8350AEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T17:16:18.690",
      "lastModified" : "2026-03-04T17:39:06.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php."
      }, {
        "lang" : "es",
        "value" : "Sourcecodester Online Men's Salon Management System v1.0 es vulnerable a inyección SQL en /admin/services/manage_service.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_online_men\\'s_salon_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89214BE6-29BE-4978-8551-7439D8350AEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3136",
      "sourceIdentifier" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
      "published" : "2026-03-03T17:16:19.160",
      "lastModified" : "2026-03-05T21:44:42.407",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment.\n\nThis vulnerability was patched on 26 January 2026, and no customer action is needed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autorización impropia en GitHub Trigger Comment Control en Google Cloud Build anterior al 26-1-2026 permite a un atacante remoto ejecutar código arbitrario en el entorno de compilación.\n\nEsta vulnerabilidad fue parcheada el 26 de enero de 2026, y no se requiere ninguna acción por parte del cliente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "CLEAR"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:cloud_build:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-1-26",
            "matchCriteriaId" : "79BCC7BB-7D52-40A1-A604-969908D01860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloud.google.com/build/docs/release-notes#March_03_2026",
        "source" : "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0540",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2026-03-03T18:16:24.457",
      "lastModified" : "2026-03-25T16:16:10.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements (noscript, xmp, noembed, noframes, iframe) in the SAFE_FOR_XML regex. Attackers can include payloads like </noscript><img src=x onerror=alert(1)> in attribute values to execute JavaScript when sanitized output is placed inside these unprotected rawtext contexts."
      }, {
        "lang" : "es",
        "value" : "DOMPurify 3.1.3 a 3.3.1 y 2.5.3 a 2.5.8, corregido en la confirmación 729097f, contienen una vulnerabilidad de secuencias de comandos entre sitios que permite a los atacantes eludir la desinfección de atributos aprovechando cinco elementos de texto sin formato que faltan (noscript, xmp, noembed, noframes, iframe) en la expresión regular SAFE_FOR_XML. Los atacantes pueden incluir cargas útiles como  en los valores de los atributos para ejecutar JavaScript cuando la salida saneada se coloca dentro de estos contextos de texto sin formato desprotegidos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "help@fluidattacks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.3",
            "versionEndIncluding" : "2.5.8",
            "matchCriteriaId" : "C22E0FEE-2372-417A-844F-551C74F3E0AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.3",
            "versionEndIncluding" : "3.3.1",
            "matchCriteriaId" : "A8A0F3E6-D011-485E-941C-D0C68AB314D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/daft",
        "source" : "help@fluidattacks.com"
      }, {
        "url" : "https://github.com/cure53/DOMPurify",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cure53/DOMPurify/commit/302b51de22535cc90235472c52e3401bedd46f80",
        "source" : "help@fluidattacks.com"
      }, {
        "url" : "https://github.com/cure53/DOMPurify/releases/tag/3.3.2",
        "source" : "help@fluidattacks.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/dompurify-xss-via-missing-rawtext-elements-in-safe-for-xml",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T18:16:25.610",
      "lastModified" : "2026-03-04T14:04:59.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Punto de Venta de Farmacia Sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/manage_product.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/pharmacy-point-sale-system/SQL-4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3437",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-03T18:16:25.953",
      "lastModified" : "2026-03-05T21:38:07.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this vulnerability could result in escalation of privileges or cause a denial-of-service condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Restricción Inadecuada de Operaciones dentro de los Límites de un Búfer de Memoria en Portwell Engineering Toolkits versión 4.8.2 podría permitir a un atacante local autenticado leer y escribir en memoria arbitraria a través del controlador de Portwell Engineering Toolkits. La explotación exitosa de esta vulnerabilidad podría resultar en escalada de privilegios o causar una condición de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portwell:engineering_toolkits:4.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B2CD9E-A22D-4482-9961-FA4A536689C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0869",
      "sourceIdentifier" : "sirt@brocade.com",
      "published" : "2026-03-03T20:16:45.797",
      "lastModified" : "2026-03-09T18:15:12.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric."
      }, {
        "lang" : "es",
        "value" : "Omisión de autenticación en Brocade ASCG 3.4.0 Podría permitir a un usuario no autorizado realizar operaciones de ASCG relacionadas con Brocade Support Link (BSL) y la configuración de streaming, e incluso podría deshabilitar la aplicación ASCG o deshabilitar el uso de la recopilación de datos de BSL en los switches Brocade dentro de la estructura."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "sirt@brocade.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@brocade.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8F778F-4911-4B4B-B156-8890E46939E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/37121",
        "source" : "sirt@brocade.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1265",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2026-03-03T20:16:45.960",
      "lastModified" : "2026-03-04T17:36:29.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Servidor 11.7.0.0 hasta 11.7.1.6 es vulnerable a la escritura de información sensible en un archivo de registro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.7",
            "versionEndIncluding" : "11.7.1.6",
            "matchCriteriaId" : "989DFCAD-B96B-4FA5-AB43-D24352304233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ibm.com/support/pages/node/7259627",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T20:16:48.770",
      "lastModified" : "2026-03-04T04:00:11.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php."
      }, {
        "lang" : "es",
        "value" : "Sistema de Punto de Venta de Farmacia Sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/manage_supplier.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/pharmacy-point-sale-system/SQL-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T20:16:48.880",
      "lastModified" : "2026-03-04T03:58:31.857",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php."
      }, {
        "lang" : "es",
        "value" : "Sistema de Punto de Venta de Farmacia Sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/manage_stock.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/pharmacy-point-sale-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T20:16:48.993",
      "lastModified" : "2026-03-04T03:58:04.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php."
      }, {
        "lang" : "es",
        "value" : "Sistema de Punto de Venta de Farmacia Sourcecodester v1.0 es vulnerable a inyección SQL en /pharmacy/manage_category.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:pharmacy_point_of_sale_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA845844-0125-4351-BB2C-72589B773463"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/pharmacy-point-sale-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T20:16:49.107",
      "lastModified" : "2026-03-04T03:53:24.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php."
      }, {
        "lang" : "es",
        "value" : "Sistema de Gestión de Paquetes del Hub Logístico de Sourcecodester v1.0 es vulnerable a inyección SQL en /manage_parcel_type.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_logistic_hub_parcel\\'s_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB4B74CA-C989-4BD5-A5ED-031199D89B69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-logistic-hub-parcels-management-system/SQL-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-03T20:16:49.220",
      "lastModified" : "2026-03-11T16:16:39.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Gestión de Paquetes Logistic Hub de Sourcecodester v1.0 es vulnerable a inyección SQL en /manage_carrier.PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_logistic_hub_parcel\\'s_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB4B74CA-C989-4BD5-A5ED-031199D89B69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-logistic-hub-parcels-management-system/SQL-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29022",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-03T20:16:49.433",
      "lastModified" : "2026-03-20T18:16:12.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input."
      }, {
        "lang" : "es",
        "value" : "dr_libs versión 0.14.4 y anteriores (corregido en el commit 8a7258c) contienen una vulnerabilidad de desbordamiento de búfer de pila en la función drwav__read_smpl_to_metadata_obj() de dr_wav.h que permite la corrupción de memoria a través de archivos WAV manipulados. Los atacantes pueden explotar una discrepancia entre la validación de sampleLoopCount en el paso 1 y el procesamiento incondicional en el paso 2 para desbordar las asignaciones de pila con 36 bytes de datos controlados por el atacante a través de cualquier llamada a drwav_init_*_with_metadata() en entrada no confiable."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mackron:dr_libs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.14.4",
            "matchCriteriaId" : "69CB7A4E-AEB5-4132-A385-E73F6C7E3FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mackron/dr_libs/commit/8a7258cc66b49387ad58cc5b81568982a3560d49",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mackron/dr_libs/issues/296",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2026-001-dr-libs-heap-overflow.md",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/mackron-dr-libs-heap-buffer-overflow-via-wav-file",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2606",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2026-03-03T20:16:49.783",
      "lastModified" : "2026-03-05T20:55:35.433",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to properly validate user-supplied input passed to the url parameter on the /createapi endpoint. An attacker can modify this parameter to use a file:// URI schema instead of the expected https:// schema, enabling unauthorized arbitrary file read access on the underlying server file system."
      }, {
        "lang" : "es",
        "value" : "IBM webMethods API Gateway (en las instalaciones) 10.11 hasta 10.11_Fix3210.15 a 10.15_Fix2711.1 a 11.1_Fix7 IBM webMethods API Management (en las instalaciones) no valida correctamente la entrada proporcionada por el usuario pasada al parámetro url en el endpoint /createapi. Un atacante puede modificar este parámetro para usar un esquema URI file:// en lugar del esquema HTTPS:// esperado, lo que permite el acceso de lectura de archivos arbitrario no autorizado en el sistema de archivos del servidor subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:webmethods_api_gateway:10.11:-:*:*:on-prem:*:*:*",
            "matchCriteriaId" : "7F534C50-6ADC-4BBC-83E5-973C72964118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:webmethods_api_gateway:10.11:fix32:*:*:on-prem:*:*:*",
            "matchCriteriaId" : "2A86D588-0072-4EBE-9FA8-008A36A321D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:webmethods_api_gateway:10.15:-:*:*:on-prem:*:*:*",
            "matchCriteriaId" : "40E92E62-E820-47B9-BF03-5AF3E32B48D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:webmethods_api_gateway:10.15:fix27:*:*:on-prem:*:*:*",
            "matchCriteriaId" : "71FCF82E-9B8D-4636-8130-076316E4D35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:webmethods_api_gateway:11.1:-:*:*:on-prem:*:*:*",
            "matchCriteriaId" : "978540F2-00C6-4F15-ADB8-32AFF3503460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:webmethods_api_gateway:11.1:fix7:*:*:on-prem:*:*:*",
            "matchCriteriaId" : "02A837D5-879F-487E-A28F-55DB0C097F00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ibm.com/support/pages/node/7261122",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2915",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2026-03-03T20:16:49.980",
      "lastModified" : "2026-03-09T18:11:19.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was\n               remediated with HP System Event Utility version 3.2.16."
      }, {
        "lang" : "es",
        "value" : "HP System Event Utility podría permitir la denegación de servicio con escrituras de archivos arbitrarias elevadas. Esta posible vulnerabilidad fue remediada con la versión 3.2.16 de HP System Event Utility."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "hp-security-alert@hp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:system_event_utility:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16",
            "matchCriteriaId" : "7ECE5E27-5BBD-4DB5-8D70-4A16D467C6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_14271963-14271996-16/hpsbgn04097",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3484",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-03T20:16:50.430",
      "lastModified" : "2026-03-05T21:32:06.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function child_process.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may be performed from remote. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The patch is identified as 30a6b9e1c7fa6146f51e28d6ab83a2568d9a3488. It is best practice to apply a patch to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en PhialsBasement nmap-mcp-server hasta bee6d23547d57ae02460022f7c78ac0893092e38. Este problema afecta a la función child_process.exec del archivo src/index.ts del componente Nmap CLI Gestor de Comandos. La manipulación da como resultado una inyección de comandos. El ataque puede realizarse de forma remota. Este producto utiliza un sistema de lanzamiento continuo para la entrega continua y, como tal, la información de la versión para las versiones afectadas o actualizadas no se divulga. El parche se identifica como 30a6b9e1c7fa6146f51e28d6ab83a2568d9a3488. Es una buena práctica aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phialsbasement:mcp_nmap_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "E8664A6A-7D38-4ED1-9C75-5C7BE89A4D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PhialsBasement/nmap-mcp-server/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/PhialsBasement/nmap-mcp-server/commit/30a6b9e1c7fa6146f51e28d6ab83a2568d9a3488",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PhialsBasement/nmap-mcp-server/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/PhialsBasement/nmap-mcp-server/issues/7#issuecomment-3814382570",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348559",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348559",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.763777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3494",
      "sourceIdentifier" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
      "published" : "2026-03-03T20:16:50.667",
      "lastModified" : "2026-03-16T18:16:09.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged."
      }, {
        "lang" : "es",
        "value" : "En la versión del servidor MariaDB hasta la 11.8.5, cuando el plugin de auditoría del servidor está habilitado con la variable server_audit_events configurada con el filtrado QUERY_DCL, QUERY_DDL o QUERY_DML, si un usuario de base de datos autenticado invoca una instrucción SQL prefijada con comentarios estilo doble guion (—) o almohadilla (#), la instrucción no se registra."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-778"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.6.24",
            "matchCriteriaId" : "8A30EA78-32F5-4C1B-A67A-23DC6C7B72EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.7.0",
            "versionEndIncluding" : "10.11.15",
            "matchCriteriaId" : "332B395C-4839-4615-B00B-E4D441F2CD0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.4.9",
            "matchCriteriaId" : "A26387F9-8443-4057-A5E1-441377F32CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndIncluding" : "11.8.5",
            "matchCriteriaId" : "A2088E08-6CAF-4EA5-BF0D-1E5F7D895EAE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aurora_mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.12.5",
            "matchCriteriaId" : "47D5C055-479D-48B1-9A1B-96A03A991BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aurora_mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.01.0",
            "versionEndIncluding" : "3.04.5",
            "matchCriteriaId" : "AE644D3A-3533-42D9-9CF6-9ED557973FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aurora_mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.05.1",
            "versionEndIncluding" : "3.10.2",
            "matchCriteriaId" : "71F2AFB8-E9B5-41BB-9FA6-5FD6DF742609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aurora_mysql:3.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6548276-890D-4BAA-B63C-2589276CB05B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mysql:*:*",
            "versionEndIncluding" : "5.7.44-rds.20251212",
            "matchCriteriaId" : "19020403-62DD-4582-94FC-C942145BE41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mariadb:*:*",
            "versionEndIncluding" : "10.6.24",
            "matchCriteriaId" : "D726E50A-7EF5-416D-A87A-2BF960AD2FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mysql:*:*",
            "versionStartIncluding" : "8.0.11",
            "versionEndIncluding" : "8.0.44",
            "matchCriteriaId" : "D0E5AB60-5EAB-4425-A5ED-D7A4C885412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mysql:*:*",
            "versionStartIncluding" : "8.4.3",
            "versionEndIncluding" : "8.4.7",
            "matchCriteriaId" : "245D28E5-72B2-425D-B45A-A8FF86253512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mariadb:*:*",
            "versionStartIncluding" : "10.11.4",
            "versionEndIncluding" : "10.11.15",
            "matchCriteriaId" : "231A1730-3772-4CBD-9987-88261193DE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mariadb:*:*",
            "versionStartIncluding" : "11.4.3",
            "versionEndIncluding" : "11.4.9",
            "matchCriteriaId" : "BAFD31F7-359F-4CC7-8DDF-4543EB8478D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:relational_database_service:*:*:*:*:*:mariadb:*:*",
            "versionStartIncluding" : "11.8.3",
            "versionEndIncluding" : "11.8.5",
            "matchCriteriaId" : "06BB3DE6-41A1-4D83-B3ED-E3200E8A414B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aws.amazon.com/security/security-bulletins/2026-006-AWS/",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MariaDB/server/commit/635559a2ad68a5a6d1a354e8209c58323dba0261",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      }, {
        "url" : "https://github.com/aws/audit-plugin-for-mysql/commit/01e25a5cb1073f131eea774c06c8a056b1e4b2ff",
        "source" : "ff89ba41-3aa1-4d27-914a-91399e9639e5"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1567",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2026-03-03T21:15:57.617",
      "lastModified" : "2026-03-05T21:29:11.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server."
      }, {
        "lang" : "es",
        "value" : "IBM InfoSphere Information Server 11.7.0.0 hasta 11.7.1.6 Una vulnerabilidad de Entidad Externa XML (XXE) en IBM InfoSphere Information Server podría permitir a los atacantes recuperar información sensible del servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.7",
            "versionEndIncluding" : "11.7.1.6",
            "matchCriteriaId" : "989DFCAD-B96B-4FA5-AB43-D24352304233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ibm.com/support/pages/node/7259630",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1713",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2026-03-03T21:15:57.817",
      "lastModified" : "2026-03-05T21:09:36.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD"
      }, {
        "lang" : "es",
        "value" : "IBM MQ 9.1.0.0 hasta 9.1.0.33 LTS, 9.2.0.0 hasta 9.2.0.40 LTS, 9.3.0.0 hasta 9.3.0.36 LTS, 9.30.0 hasta 9.3.5.1 CD, 9.4.0.0 hasta 9.4.0.17 LTS, y 9.4.0.0 hasta 9.4.4.1 CD"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndExcluding" : "9.1.0.34",
            "matchCriteriaId" : "E474B2F3-5FFC-439A-9943-C21A49995DC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "9.2.0.0",
            "versionEndExcluding" : "9.2.0.41",
            "matchCriteriaId" : "7A1D96C8-F1D4-4735-9528-92F8E321D59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "9.3.0.0",
            "versionEndExcluding" : "9.3.0.37",
            "matchCriteriaId" : "9BCAFED5-F936-47B7-88B4-BBB64F1E6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*",
            "versionStartIncluding" : "9.3.0.0",
            "versionEndExcluding" : "9.4.5.0",
            "matchCriteriaId" : "45131CE4-D4DA-49B9-9788-9F632D9D0042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.20",
            "matchCriteriaId" : "F0552BFD-BD87-4EAC-88F7-FB83E899BECE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ibm.com/support/pages/node/7261944",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24502",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-03T21:15:58.240",
      "lastModified" : "2026-03-05T21:25:08.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell Command | Intel vPro Out of Band, versiones anteriores a la 4.7.0, contienen una vulnerabilidad de elemento de ruta de búsqueda no controlada. Un atacante de bajo privilegio con acceso local podría potencialmente explotar esta vulnerabilidad, lo que lleva a una Elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_\\|_intel_vpro_out_of_band:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "E5865161-3DF4-4A49-93BE-8829428BB868"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429179/dsa-2026-106",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25906",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-03T21:15:58.520",
      "lastModified" : "2026-03-05T21:24:41.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges."
      }, {
        "lang" : "es",
        "value" : "Dell Optimizer, versiones anteriores a la 6.3.1, contienen una vulnerabilidad de Resolución de Enlaces Incorrecta Antes del Acceso a Archivos ('Seguimiento de Enlaces'). Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de Privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:optimizer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0.0",
            "versionEndExcluding" : "6.3.1.0",
            "matchCriteriaId" : "FA233877-A123-4090-BC96-E912F585CA71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000427608/dsa-2026-094",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3485",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-03T21:16:02.667",
      "lastModified" : "2026-03-04T14:07:42.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en D-Link DIR-868L 110b03. Esto afecta a la función sub_1BF84 del componente Servicio SSDP. Esta manipulación del argumento ST causa inyección de comandos del sistema operativo. Es posible iniciar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado. Esta vulnerabilidad solo afecta a productos que ya no tienen soporte por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-868l_firmware:110b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7603F6F-3CCA-4A74-8C57-4D0A45A4480F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B501D4-BDDD-485E-A5A3-8AA8D5E46061"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kn0sinna.notion.site/dlink-dir-868l-ssdp-command-injection-30eb1876cd6e80caa691de6fe5cab59c",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348560",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348560",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764759",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dlink.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3486",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-03T21:16:02.903",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en itsourcecode College Management System 1.0. Esta vulnerabilidad afecta código desconocido del archivo /admin/student-fee.PHP. Tal manipulación del argumento roll_no conduce a inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348561",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348561",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765094",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1775",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-03T22:16:27.770",
      "lastModified" : "2026-03-04T18:08:05.730",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device."
      }, {
        "lang" : "es",
        "value" : "El Labkotec LID-3300IP tiene una vulnerabilidad existente en el software del detector de hielo que permite a un atacante no autenticado alterar los parámetros del dispositivo y ejecutar comandos operativos cuando se envían paquetes especialmente diseñados al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-05",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21866",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T22:16:27.973",
      "lastModified" : "2026-03-05T21:24:07.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dify is an open-source LLM app development platform. Prior to 1.11.2, Dify is vulnerable to a stored XSS issue when rendering Mermaid diagrams within chats. This occurs because Dify’s default Mermaid configuration uses securityLevel: loose, which allows potentially unsafe content to execute. This vulnerability is fixed in 1.11.2."
      }, {
        "lang" : "es",
        "value" : "Dify es una plataforma de desarrollo de aplicaciones LLM de código abierto. Antes de la 1.11.2, Dify es vulnerable a un problema de XSS almacenado al renderizar diagramas Mermaid dentro de los chats. Esto ocurre porque la configuración predeterminada de Mermaid de Dify utiliza securityLevel: loose, lo que permite la ejecución de contenido potencialmente inseguro. Esta vulnerabilidad está corregida en la 1.11.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dify:dify:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "E1A7A83E-6F78-4578-9907-E31F0BF9ED2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langgenius/dify/commit/ae17537470bba417a8971fff705dd82ecb043564",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langgenius/dify/pull/29811",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/langgenius/dify/security/advisories/GHSA-qpv6-75c2-75h4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24415",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T22:16:28.137",
      "lastModified" : "2026-03-05T18:26:09.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contains Reflected XSS vulnerabilities in invoice/order/contract modification modals. The application fails to properly sanitize user-supplied input from the righe GET parameter before reflecting it in HTML output.The $_GET['righe'] parameter is directly echoed into the HTML value attribute without any sanitization using htmlspecialchars() or equivalent functions. This allows an attacker to break out of the attribute context and inject arbitrary HTML/JavaScript."
      }, {
        "lang" : "es",
        "value" : "OpenSTAManager es un software de gestión de código abierto para asistencia técnica y facturación. OpenSTAManager v2.9.8 y versiones anteriores contienen vulnerabilidades de XSS Reflejado en los modales de modificación de facturas/pedidos/contratos. La aplicación no logra sanear adecuadamente la entrada proporcionada por el usuario desde el parámetro GET righe antes de reflejarla en la salida HTML. El parámetro $_GET['righe'] se imprime directamente en el atributo HTML value sin ninguna sanitización utilizando htmlspecialchars() o funciones equivalentes. Esto permite a un atacante salir del contexto del atributo e inyectar HTML/JavaScript arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "42CFDCCE-817A-4017-8C56-ECC90B1CF7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-jfgp-g7x7-j25j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24848",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T22:16:28.293",
      "lastModified" : "2026-03-04T21:58:33.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDocument() method in EtherFaxActions.php allows authenticated users to write arbitrary content to arbitrary locations on the server filesystem. This vulnerability can be exploited to achieve Remote Code Execution (RCE) by uploading malicious PHP web shells."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de código abierto y gratuita para registros de salud electrónicos y gestión de prácticas médicas. En la versión 7.0.4 y anteriores, el método disposeDocument() en EtherFaxActions.php permite a los usuarios autenticados escribir contenido arbitrario en ubicaciones arbitrarias del sistema de archivos del servidor. Esta vulnerabilidad puede ser explotada para lograr Ejecución Remota de Código (RCE) mediante la carga de web shells PHP maliciosas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.4",
            "matchCriteriaId" : "197634CE-D050-4392-BF3C-EA0198DEEFA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-5vp5-4rm6-h4c9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24898",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T22:16:28.443",
      "lastModified" : "2026-03-04T21:57:13.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0, an unauthenticated token disclosure vulnerability in the MedEx callback endpoint allows any unauthenticated visitor to obtain the practice's MedEx API tokens, leading to complete third-party service compromise, PHI exfiltration, unauthorized actions on the MedEx platform, and HIPAA violations. The vulnerability exists because the endpoint bypasses authentication ($ignoreAuth = true) and performs a MedEx login whenever $_POST['callback_key'] is provided, returning the full JSON response including sensitive API tokens. This vulnerability is fixed in 8.0.0."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de registros de salud electrónicos y práctica médica de código abierto y gratuita. Antes de la versión 8.0.0, una vulnerabilidad de divulgación de tokens no autenticada en el endpoint de callback de MedEx permite a cualquier visitante no autenticado obtener los tokens de la API de MedEx de la consulta, lo que lleva a un compromiso completo del servicio de terceros, exfiltración de PHI, acciones no autorizadas en la plataforma MedEx y violaciones de HIPAA. La vulnerabilidad existe porque el endpoint omite la autenticación ($ignoreAuth = true) y realiza un inicio de sesión de MedEx cada vez que se proporciona $_POST['callback_key'], devolviendo la respuesta JSON completa, incluyendo tokens de la API sensibles. Esta vulnerabilidad se ha corregido en la versión 8.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "FEAA9896-A42E-437C-BEE8-8DA955E34385"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/8e4de59ab58222f13abc4e4040128737d857db9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-qwff-3mw7-7rc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25146",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T22:16:28.603",
      "lastModified" : "2026-03-04T21:56:00.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEMR is a free and open source electronic health records and medical practice management application. From 5.0.2 to before 8.0.0, there are (at least) two paths where the gateway_api_key secret value is rendered to the client in plaintext. These secret keys being leaked could result in arbitrary money movement or broad account takeover of payment gateway APIs. This vulnerability is fixed in 8.0.0."
      }, {
        "lang" : "es",
        "value" : "OpenEMR es una aplicación de gestión de prácticas médicas y registros de salud electrónicos de código abierto y gratuita. Desde la 5.0.2 hasta antes de la 8.0.0, existen (al menos) dos rutas donde el valor secreto gateway_api_key se muestra al cliente en texto plano. La filtración de estas claves secretas podría resultar en movimientos de dinero arbitrarios o una toma de control generalizada de cuentas de las API de pasarelas de pago. Esta vulnerabilidad está corregida en la 8.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.2",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "B6E2AAD5-565E-4CC3-B50A-8E767CC6B5D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/blob/6a4e18c5ec73e0c755f6f65b28a9652aded1a58b/interface/patient_file/front_payment.php#L765",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/openemr/openemr/blob/6a4e18c5ec73e0c755f6f65b28a9652aded1a58b/portal/portal_payment.php#L537",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/fe6341496dc82d5b4f5a3f35891bb2e2481f3b25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openemr/openemr/security/advisories/GHSA-2hq8-wc73-jvvq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27012",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T22:16:28.833",
      "lastModified" : "2026-03-05T18:19:03.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group (idgruppo) by directly calling modules/utenti/actions.php. This can promote an existing account (e.g. agent) into the Amministratori group as well as demote any user including existing administrators."
      }, {
        "lang" : "es",
        "value" : "OpenSTAManager es un software de gestión de código abierto para asistencia técnica y facturación. En la versión 2.9.8 y anteriores, una vulnerabilidad de escalada de privilegios y omisión de autenticación en OpenSTAManager permite a cualquier atacante cambiar arbitrariamente el grupo de un usuario (idgruppo) llamando directamente a modules/utenti/actions.php. Esto puede promover una cuenta existente (por ejemplo, agente) al grupo Amministratori, así como degradar a cualquier usuario, incluidos los administradores existentes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devcode:openstamanager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.8",
            "matchCriteriaId" : "42CFDCCE-817A-4017-8C56-ECC90B1CF7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-247v-7cw6-q57v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2590",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-03-03T22:16:29.157",
      "lastModified" : "2026-03-05T15:01:54.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper\n enforcement of the Disable password saving in vaults setting in the \nconnection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, \npotentially exposing sensitive information to other users, by creating \nor editing certain connection types while password saving is disabled."
      }, {
        "lang" : "es",
        "value" : "Aplicación incorrecta de la configuración Deshabilitar el guardado de contraseñas en bóvedas en el componente de entrada de conexión en Devolutions Remote Desktop Manager 2025.3.30 y versiones anteriores permite a un usuario autenticado persistir credenciales en entradas de bóveda, exponiendo potencialmente información sensible a otros usuarios, al crear o editar ciertos tipos de conexión mientras el guardado de contraseñas está deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "2025.3.30.0",
            "matchCriteriaId" : "7DE843BF-31DA-44EB-9ED5-4468B5DCC6C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0005",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3130",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-03-03T22:16:29.280",
      "lastModified" : "2026-03-04T20:36:33.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion."
      }, {
        "lang" : "es",
        "value" : "Aplicación incorrecta de controles de comportamiento en Devolutions Server 2025.3.15 y versiones anteriores permite a un atacante autenticado con el permiso de eliminación eliminar una cuenta PAM que está actualmente extraída seleccionándola junto con al menos una cuenta no extraída y realizando una eliminación masiva."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-841"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.16.0",
            "matchCriteriaId" : "1A29A5DF-C6FB-4E5C-A0B2-7C04472C9DF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0005",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3204",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-03-03T22:16:29.397",
      "lastModified" : "2026-03-05T15:04:34.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper\n input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en la página de mensajes de error en Devolutions Server 2025.3.15 y versiones anteriores permite a atacantes remotos suplantar el mensaje de error mostrado a través de una URL especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025.3.16.0",
            "matchCriteriaId" : "5D67D29F-A563-4D85-ACBD-031E6319AD93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0005",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3224",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-03-03T22:16:29.523",
      "lastModified" : "2026-03-05T15:05:49.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an arbitrary Entra ID user via a forged JSON Web Token (JWT)."
      }, {
        "lang" : "es",
        "value" : "Omisión de autenticación en el modo de autenticación de Microsoft Entra ID (Azure AD) en Devolutions Server 2025.3.15.0 y versiones anteriores permite a un usuario no autenticado autenticarse como un usuario arbitrario de Entra ID mediante un JSON Web Token (JWT) falsificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.16.0",
            "matchCriteriaId" : "1A29A5DF-C6FB-4E5C-A0B2-7C04472C9DF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0005/",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3487",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-03T22:16:29.850",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument course_code results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en itsourcecode College Management System 1.0. Este problema afecta a un procesamiento desconocido del archivo /admin/class-result.php. Realizar una manipulación del argumento course_code resulta en inyección SQL. El ataque puede ser iniciado de forma remota. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.348562",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.348562",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765095",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25590",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:53.800",
      "lastModified" : "2026-03-05T21:23:06.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in task jobs. This vulnerability is fixed in 1.6.6."
      }, {
        "lang" : "es",
        "value" : "El plugin GLPI Inventory gestiona el descubrimiento de red, el inventario, el despliegue de software y la recopilación de datos para los agentes GLPI. Antes de 1.6.6, existe una vulnerabilidad XSS reflejada en los trabajos de tareas. Esta vulnerabilidad está corregida en 1.6.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi_inventory:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.6",
            "matchCriteriaId" : "98C6C195-DCBB-4921-BDFF-CAD1971700EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-54x7-6fhx-3wmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26266",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:54.877",
      "lastModified" : "2026-03-05T21:22:01.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AliasVault is a privacy-first password manager with built-in email aliasing. A stored cross-site scripting (XSS) vulnerability was identified in the email rendering feature of AliasVault Web Client versions 0.25.3 and lower. When viewing received emails on an alias, the HTML content is rendered in an iframe using srcdoc, which does not provide origin isolation. An attacker can send a crafted email containing malicious JavaScript to any AliasVault email alias. When the victim views the email in the web client, the script executes in the same origin as the application. No sanitization or sandboxing was applied to email HTML content before rendering. This vulnerability is fixed in 0.26.0.["
      }, {
        "lang" : "es",
        "value" : "AliasVault es un gestor de contraseñas centrado en la privacidad con alias de correo electrónico incorporados. Se identificó una vulnerabilidad de cross-site scripting (XSS) almacenado en la función de renderizado de correo electrónico de las versiones 0.25.3 y anteriores del cliente web de AliasVault. Al ver correos electrónicos recibidos en un alias, el contenido HTML se renderiza en un iframe usando srcdoc, lo que no proporciona aislamiento de origen. Un atacante puede enviar un correo electrónico manipulado que contiene JavaScript malicioso a cualquier alias de correo electrónico de AliasVault. Cuando la víctima ve el correo electrónico en el cliente web, el script se ejecuta en el mismo origen que la aplicación. No se aplicó sanitización ni sandboxing al contenido HTML del correo electrónico antes de la renderización. Esta vulnerabilidad se corrigió en la versión 0.26.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aliasvault:aliasvault:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.26.0",
            "matchCriteriaId" : "172C7352-14EF-4D15-B467-429505682C3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aliasvault/aliasvault/commit/382e2e96fa502891638a48404f6d82dc972ab481",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/releases/tag/0.26.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/aliasvault/aliasvault/security/advisories/GHSA-f65p-p65r-g53q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26272",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:55.050",
      "lastModified" : "2026-03-05T21:20:08.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting (XSS) vulnerability exists in the item attachment upload functionality. The application does not properly validate or restrict uploaded file types, allowing an authenticated user to upload malicious HTML or SVG files containing executable JavaScript (also, potentially other formats that render scripts). Uploaded attachments are accessible via direct links. When a user accesses such a file in their browser, the embedded JavaScript executes in the context of the application's origin. This vulnerability is fixed in 0.24.0-rc.1."
      }, {
        "lang" : "es",
        "value" : "HomeBox es un sistema de inventario y organización del hogar. Antes de la versión 0.24.0-rc.1, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en la funcionalidad de carga de archivos adjuntos de elementos. La aplicación no valida ni restringe adecuadamente los tipos de archivos cargados, permitiendo a un usuario autenticado cargar archivos HTML o SVG maliciosos que contienen JavaScript ejecutable (también, potencialmente otros formatos que renderizan scripts). Los archivos adjuntos cargados son accesibles a través de enlaces directos. Cuando un usuario accede a dicho archivo en su navegador, el JavaScript incrustado se ejecuta en el contexto del origen de la aplicación. Esta vulnerabilidad está corregida en la versión 0.24.0-rc.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sysadminsmedia:homebox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.23.1",
            "matchCriteriaId" : "16FA5C78-4497-4434-802B-AAA83C1BF0A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sysadminsmedia/homebox/commit/51bd04e5f4656b306a296745ddd854d45aa3b892",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-55fv-9q6q-vpcr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26279",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:55.223",
      "lastModified" : "2026-03-05T21:19:02.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disables email format checking for all settings fields declared as email type. This allows an authenticated admin to store arbitrary strings in the panel.adminmail setting. This value is later concatenated into a shell command executed as root by a cron job, where the pipe character | is explicitly whitelisted. The result is full root-level Remote Code Execution. This vulnerability is fixed in 2.3.4."
      }, {
        "lang" : "es",
        "value" : "Froxlor es software de administración de servidor de código abierto. Antes de la versión 2.3.4, un error tipográfico en el código de validación de entrada de Froxlor (== en lugar de =) deshabilita completamente la verificación del formato de correo electrónico para todos los campos de configuración declarados como tipo de correo electrónico. Esto permite a un administrador autenticado almacenar cadenas arbitrarias en la configuración panel.adminmail. Este valor se concatena posteriormente en un comando de shell ejecutado como root por una tarea cron, donde el carácter de tubería | está explícitamente en la lista blanca. El resultado es una ejecución remota de código completa a nivel de root. Esta vulnerabilidad se corrige en la versión 2.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-482"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.4",
            "matchCriteriaId" : "49CEB95F-CF4B-45DB-A6A7-B6CE5E1F9961"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/Froxlor/security/advisories/GHSA-33mp-8p67-xj7c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/22249677107f8f39f8d4a238605641e87dab4343",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/releases/tag/2.3.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27600",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:55.400",
      "lastModified" : "2026-03-05T21:15:49.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, the notifier functionality allows authenticated users to specify arbitrary URLs to which the application sends HTTP POST requests. No validation or restriction is applied to the supplied host, IP address, or port. Although the application does not return the response body from the target service, its UI behavior differs depending on the network state of the destination. This creates a behavioral side-channel that enables internal service enumeration. This vulnerability is fixed in 0.24.0-rc.1."
      }, {
        "lang" : "es",
        "value" : "HomeBox es un sistema de inventario y organización del hogar. Previo a la 0.24.0-rc.1, la funcionalidad del notificador permite a los usuarios autenticados especificar URLs arbitrarias a las que la aplicación envía solicitudes HTTP POST. No se aplica ninguna validación o restricción al host, dirección IP o puerto suministrados. Aunque la aplicación no devuelve el cuerpo de la respuesta del servicio de destino, su comportamiento de la UI difiere dependiendo del estado de la red del destino. Esto crea un canal lateral de comportamiento que permite la enumeración de servicios internos. Esta vulnerabilidad se corrige en la 0.24.0-rc.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sysadminsmedia:homebox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.23.1",
            "matchCriteriaId" : "16FA5C78-4497-4434-802B-AAA83C1BF0A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-cm7p-5mg5-82pm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27601",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:55.560",
      "lastModified" : "2026-04-28T15:06:03.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the _.flatten and _.isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service (DoS) attack by triggering a stack overflow. Untrusted input must be used to create a recursive datastructure, for example using JSON.parse, with no enforced depth limit. The datastructure thus created must be passed to _.flatten or _.isEqual. In the case of _.flatten, the vulnerability can only be exploited if it is possible for a remote client to prepare a datastructure that consists of arrays at all levels AND if no finite depth limit is passed as the second argument to _.flatten. In the case of _.isEqual, the vulnerability can only be exploited if there exists a code path in which two distinct datastructures that were submitted by the same remote client are compared using _.isEqual. For example, if a client submits data that are stored in a database, and the same client can later submit another datastructure that is then compared to the data that were saved in the database previously, OR if a client submits a single request, but its data are parsed twice, creating two non-identical but equivalent datastructures that are then compared. Exceptions originating from the call to _.flatten or _.isEqual, as a result of a stack overflow, are not being caught. This vulnerability is fixed in 1.13.8."
      }, {
        "lang" : "es",
        "value" : "Underscore.js es una librería de utilidades para JavaScript. Antes de la versión 1.13.8, las funciones _.flatten y _.isEqual usan recursión sin un límite de profundidad. Bajo condiciones muy específicas, detalladas a continuación, un atacante podría explotar esto en un ataque de denegación de servicio (DoS) al desencadenar un desbordamiento de pila. Se debe usar entrada no confiable para crear una estructura de datos recursiva, por ejemplo, usando JSON.parse, sin un límite de profundidad impuesto. La estructura de datos así creada debe pasarse a _.flatten o _.isEqual. En el caso de _.flatten, la vulnerabilidad solo puede ser explotada si es posible para un cliente remoto preparar una estructura de datos que consista en arrays en todos los niveles Y si no se pasa un límite de profundidad finito como segundo argumento a _.flatten. En el caso de _.isEqual, la vulnerabilidad solo puede ser explotada si existe una ruta de código en la que dos estructuras de datos distintas que fueron enviadas por el mismo cliente remoto se comparan usando _.isEqual. Por ejemplo, si un cliente envía datos que se almacenan en una base de datos, y el mismo cliente puede luego enviar otra estructura de datos que luego se compara con los datos que se guardaron en la base de datos previamente, O si un cliente envía una única solicitud, pero sus datos se analizan dos veces, creando dos estructuras de datos no idénticas pero equivalentes que luego se comparan. Las excepciones que se originan de la llamada a _.flatten o _.isEqual, como resultado de un desbordamiento de pila, no están siendo capturadas. Esta vulnerabilidad está corregida en la versión 1.13.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underscorejs:underscore:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.13.8",
            "matchCriteriaId" : "413BC96A-931D-45FE-A85A-EC967B6D43D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jashkenas/underscore/commit/411e222eb0ca5d570cc4f6315c02c05b830ed2b4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jashkenas/underscore/commit/a6e23ae9647461ec33ad9f92a2ecfc220eea0a84",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jashkenas/underscore/security/advisories/GHSA-qpx9-hpmf-5gmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27622",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:55.737",
      "lastModified" : "2026-03-05T21:07:05.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector<unsigned int> total_sizes for attacker-controlled large counts across many parts, total_sizes[ptr] wraps modulo 2^32.  overall_sample_count is then derived from wrapped totals and used in samples[channel].resize(overall_sample_count). Decode pointer setup/consumption proceeds with true sample counts, and write operations in core unpack (generic_unpack_deep_pointers) overrun the undersized composite sample buffer. This vulnerability is fixed in v3.2.6, v3.3.8, and v3.4.6."
      }, {
        "lang" : "es",
        "value" : "OpenEXR proporciona la especificación y la implementación de referencia del formato de archivo EXR, un formato de almacenamiento de imágenes para la industria cinematográfica. En CompositeDeepScanLine::readPixels, los totales por píxel se acumulan en vector total_sizes para grandes recuentos controlados por el atacante en muchas partes, total_sizes[ptr] se ajusta módulo 2^32. overall_sample_count se deriva entonces de los totales ajustados y se utiliza en samples[channel].resize(overall_sample_count). La configuración/consumo del puntero de decodificación procede con recuentos de muestras verdaderos, y las operaciones de escritura en el desempaquetado central (generic_unpack_deep_pointers) desbordan el búfer de muestras compuesto de tamaño insuficiente. Esta vulnerabilidad se corrige en las versiones v3.2.6, v3.3.8 y v3.4.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.6",
            "matchCriteriaId" : "637078D8-68DE-478F-B304-A08E80A7609C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "529003A0-284B-4A1F-B4FF-CABB9A7534B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.6",
            "matchCriteriaId" : "44066539-F7B6-415A-AE11-0F80BB8741D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-cr4v-6jm6-4963",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27905",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:55.897",
      "lastModified" : "2026-03-05T21:04:51.123",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, not the symlink's target. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem. This vulnerability is fixed in 1.4.36."
      }, {
        "lang" : "es",
        "value" : "BentoML es una librería de Python para construir sistemas de servicio en línea optimizados para aplicaciones de IA e inferencia de modelos. Antes de la versión 1.4.36, la función safe_extract_tarfile() valida que la ruta de cada miembro del archivo tar esté dentro del directorio de destino, pero para los miembros de enlace simbólico solo valida la ruta del propio enlace simbólico, no el objetivo del enlace simbólico. Un atacante puede crear un archivo tar malicioso bento/model que contenga un enlace simbólico que apunte fuera del directorio de extracción, seguido de un archivo regular que escriba a través del enlace simbólico, logrando una escritura de archivo arbitraria en el sistema de archivos del host. Esta vulnerabilidad se corrigió en la versión 1.4.36."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bentoml:bentoml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.36",
            "matchCriteriaId" : "BDC86E82-4716-43D1-AC14-3934F86B38E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bentoml/BentoML/commit/4e0eb007765ac04c7924220d643f264715cc9670",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bentoml/BentoML/security/advisories/GHSA-m6w7-qv66-g3mf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27932",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:56.050",
      "lastModified" : "2026-03-05T18:00:44.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service (DoS) via CPU exhaustion. When the library decrypts a JSON Web Encryption (JWE) token using Password-Based Encryption (PBES2) algorithms, it reads the p2c (PBES2 Count) parameter directly from the token's protected header. This parameter defines the number of iterations for the PBKDF2 key derivation function. Because joserfc does not validate or bound this value, an attacker can specify an extremely large iteration count (e.g., 2^31 - 1), forcing the server to expend massive CPU resources processing a single token. This vulnerability exists at the JWA layer and impacts all high-level JWE and JWT decryption interfaces if PBES2 algorithms are allowed by the application's policy."
      }, {
        "lang" : "es",
        "value" : "joserfc es una librería de Python que proporciona una implementación de varios estándares JSON Object Signing and Encryption (JOSE). En 1.6.2 y versiones anteriores, una vulnerabilidad de agotamiento de recursos en joserfc permite a un atacante no autenticado causar una denegación de servicio (DoS) mediante el agotamiento de la CPU. Cuando la librería descifra un token JSON Web Encryption (JWE) utilizando algoritmos de cifrado basado en contraseña (PBES2), lee el parámetro p2c (PBES2 Count) directamente del encabezado protegido del token. Este parámetro define el número de iteraciones para la función de derivación de clave PBKDF2. Debido a que joserfc no valida ni limita este valor, un atacante puede especificar un número de iteraciones extremadamente grande (por ejemplo, 2^31 - 1), forzando al servidor a gastar recursos masivos de CPU al procesar un solo token. Esta vulnerabilidad existe en la capa JWA y afecta a todas las interfaces de descifrado JWE y JWT de alto nivel si los algoritmos PBES2 están permitidos por la política de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hsiaoming:joserfc:*:*:*:*:*:python:*:*",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "EC9EF694-A75A-4079-AAF2-1FBC961B94C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/authlib/joserfc/commit/696a9611ab982c45ee2190ed79ca8e1d8e09398f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/authlib/joserfc/security/advisories/GHSA-w5r5-m38g-f9f9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27971",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:56.227",
      "lastModified" : "2026-03-05T17:57:37.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qwik is a performance focused javascript framework. qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any unauthenticated user to execute arbitrary code on the server with a single HTTP request. Affects any deployment where require() is available at runtime. This vulnerability is fixed in 1.19.1."
      }, {
        "lang" : "es",
        "value" : "Qwik es un framework de javascript centrado en el rendimiento. qwik &lt;=1.19.0 es vulnerable a RCE debido a una vulnerabilidad de deserialización insegura en el mecanismo RPC de server$ que permite a cualquier usuario no autenticado ejecutar código arbitrario en el servidor con una única solicitud HTTP. Afecta a cualquier despliegue donde require() esté disponible en tiempo de ejecución. Esta vulnerabilidad está corregida en 1.19.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.1",
            "matchCriteriaId" : "3960AB2F-A3BA-4979-9A1E-F22258805CF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/QwikDev/qwik/security/advisories/GHSA-p9x5-jp3h-96mm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27981",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:56.387",
      "lastModified" : "2026-03-05T17:56:43.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HomeBox is a home inventory and organization system. Prior to 0.24.0, the authentication rate limiter (authRateLimiter) tracks failed attempts per client IP. It determines the client IP by reading, 1. X-Real-IP header, 2. First entry of X-Forwarded-For header, and 3. r.RemoteAddr (TCP connection address). These headers were read unconditionally. An attacker connecting directly to Homebox could forge any value in X-Real-IP, effectively getting a fresh rate limit identity per request. There is a TrustProxy option in the configuration (Options.TrustProxy, default false), but this option was never read by any middleware or rate limiter code. Additionally, chi's middleware.RealIP was applied unconditionally in main.go, overwriting r.RemoteAddr with the forged header value before it reaches any handler. This vulnerability is fixed in 0.24.0."
      }, {
        "lang" : "es",
        "value" : "HomeBox es un sistema de inventario y organización del hogar. Antes de 0.24.0, el limitador de tasa de autenticación (authRateLimiter) rastrea los intentos fallidos por IP de cliente. Determina la IP del cliente leyendo: 1. el encabezado X-Real-IP, 2. la primera entrada del encabezado X-Forwarded-For, y 3. r.RemoteAddr (dirección de conexión TCP). Estos encabezados se leían incondicionalmente. Un atacante conectándose directamente a Homebox podría falsificar cualquier valor en X-Real-IP, obteniendo efectivamente una nueva identidad de límite de tasa por solicitud. Existe una opción TrustProxy en la configuración (Options.TrustProxy, por defecto falso), pero esta opción nunca fue leída por ningún middleware o código del limitador de tasa. Además, el middleware.RealIP de chi se aplicaba incondicionalmente en main.go, sobrescribiendo r.RemoteAddr con el valor del encabezado falsificado antes de que llegara a cualquier gestor. Esta vulnerabilidad está corregida en 0.24.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sysadminsmedia:homebox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.24.0",
            "matchCriteriaId" : "879C18E6-91D3-4BF1-AEDC-49E1A0D6354D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-j86g-v96v-jpp3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28289",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-03T23:15:56.550",
      "lastModified" : "2026-03-11T19:29:44.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.206 and earlier allows any authenticated user with file upload permissions to achieve Remote Code Execution (RCE) on the server by uploading a malicious .htaccess file using a zero-width space character prefix to bypass the security check. The vulnerability exists in the sanitizeUploadedFileName() function in app/Http/Helper.php. The function contains a Time-of-Check to Time-of-Use (TOCTOU) flaw where the dot-prefix check occurs before sanitization removes invisible characters. This vulnerability is fixed in 1.8.207."
      }, {
        "lang" : "es",
        "value" : "FreeScout es una mesa de ayuda gratuita y una bandeja de entrada compartida construida con el framework Laravel de PHP. Una vulnerabilidad de omisión de parche para CVE-2026-27636 en FreeScout 1.8.206 y anteriores permite a cualquier usuario autenticado con permisos de carga de archivos lograr Ejecución Remota de Código (RCE) en el servidor mediante la carga de un archivo .htaccess malicioso utilizando un prefijo de carácter de espacio de ancho cero para omitir la verificación de seguridad. La vulnerabilidad existe en la función sanitizeUploadedFileName() en app/Http/Helper.php. La función contiene una falla de Tiempo de Verificación a Tiempo de Uso (TOCTOU) donde la verificación del prefijo de punto ocurre antes de que la sanitización elimine los caracteres invisibles. Esta vulnerabilidad está corregida en 1.8.207."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freescout:freescout:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.207",
            "matchCriteriaId" : "F5903DB5-FCA5-4162-869D-15FFF4B2A450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/freescout-help-desk/freescout/commit/f7bc16c56a6b13c06da52ad51fd666546b40818f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-5gpc-65p8-ffwp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ox.security/blog/freescout-rce-cve-2026-28289/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3076",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-03T23:15:56.713",
      "lastModified" : "2026-03-03T23:15:56.713",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2363. Reason: This candidate is a reservation duplicate of CVE-2026-2363. Notes: All CVE users should reference CVE-2026-2363 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3266",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2026-03-03T23:15:56.813",
      "lastModified" : "2026-03-05T16:03:34.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs.\n\nThis issue affects Filr: through 25.1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en OpenText™ Filr permite la omisión de autenticación. La vulnerabilidad podría permitir a usuarios no autenticados obtener un token XSRF y realizar RPC con programas cuidadosamente elaborados. Este problema afecta a Filr: hasta la versión 25.1.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:I/V:D/RE:M/U:Red",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "IRRECOVERABLE",
            "valueDensity" : "DIFFUSE",
            "vulnerabilityResponseEffort" : "MODERATE",
            "providerUrgency" : "RED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:filr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.1.3",
            "matchCriteriaId" : "F191604C-60A6-4D30-B5F8-EC9BF40550B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.microfocus.com/s/article/KM000045579?language=en_US",
        "source" : "security@opentext.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1273",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T02:15:53.573",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.8 via the `/ultp/v3/starter_dummy_post/` and `/ultp/v3/starter_import_content/` REST API endpoints. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."
      }, {
        "lang" : "es",
        "value" : "El plugin Post Grid Gutenberg Blocks para News, Magazines, Blog Websites – PostX para WordPress es vulnerable a falsificación de petición del lado del servidor en todas las versiones hasta la 5.0.8, inclusive, a través de los endpoints de la API REST '/ultp/v3/starter_dummy_post/' y '/ultp/v3/starter_import_content/'. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, realicen peticiones web a ubicaciones arbitrarias originadas desde la aplicación web y puede ser utilizado para consultar y modificar información de servicios internos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-post/tags/5.0.5/classes/Importer.php#L196",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-post/tags/5.0.5/classes/Importer.php#L261",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-post/trunk/classes/Importer.php#L196",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ultimate-post/trunk/classes/Importer.php#L261",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3469409%40ultimate-post&new=3469409%40ultimate-post&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/afe6d4ac-1712-415e-9995-cb7c8fe4e1a0?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1651",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T02:15:53.770",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Email Subscribers by Icegram Express para WordPress es vulnerable a inyección SQL a través del parámetro 'workflow_ids' en todas las versiones hasta la 5.9.16, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de administrador y superior, añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.wordpress.org/plugin/email-subscribers.5.9.15.zip",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://gist.github.com/stevenyu113228/6c5c3f660e6dc739768842c051028f40",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/email-subscribers/tags/5.9.15/lite/includes/workflows/db/class-es-db-workflows.php#L379",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/workflows/db/class-es-db-workflows.php#L379",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3464881/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d8dc995d-912e-4d83-84cc-c99242022b82?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://gist.github.com/stevenyu113228/6c5c3f660e6dc739768842c051028f40",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1945",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T02:15:53.970",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpb_user_name' and 'wpb_user_email' parameters in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin WPBookit para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de los parámetros 'wpb_user_name' y 'wpb_user_email' en todas las versiones hasta la 1.0.8, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpbookit/tags/1.0.8/core/admin/classes/controllers/class.wpb-booking-shortcode-controller.php#L534",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpbookit/trunk/core/admin/classes/controllers/class.wpb-booking-shortcode-controller.php#L534",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3467556%40wpbookit&new=3467556%40wpbookit&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5954c682-c772-420a-a764-342418c1e71c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1980",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T02:15:54.150",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'get_customer_list' route in all versions up to, and including, 1.0.8. This makes it possible for unauthenticated attackers to retrieve sensitive customer information including names, emails, phone numbers, dates of birth, and gender."
      }, {
        "lang" : "es",
        "value" : "El plugin WPBookit para WordPress es vulnerable a la divulgación no autorizada de datos debido a una comprobación de autorización faltante en la ruta 'get_customer_list' en todas las versiones hasta la 1.0.8, inclusive. Esto permite a atacantes no autenticados recuperar información sensible de clientes, incluyendo nombres, correos electrónicos, números de teléfono, fechas de nacimiento y género."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wpbookit/tags/1.0.8/core/admin/classes/class.wpb-admin-routes.php#L146",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wpbookit/trunk/core/admin/classes/class.wpb-admin-routes.php#L146",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3467556%40wpbookit&new=3467556%40wpbookit&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a1867c79-29d7-46a4-bfaf-c65e8a44c2ed?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2289",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T02:15:54.317",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Taskbuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Taskbuilder para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 5.0.3, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde unfiltered_html ha sido deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.1/includes/admin/email_notifications/wppm_get_en_general_setting.php#L30",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/tags/5.0.1/includes/class-wppm-functions.php#L19",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/trunk/includes/admin/email_notifications/wppm_get_en_general_setting.php#L30",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/taskbuilder/trunk/includes/class-wppm-functions.php#L19",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3468819%40taskbuilder&new=3468819%40taskbuilder&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/81e26924-c9eb-4ddf-89e3-a8bf95d23b78?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2292",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T02:15:54.490",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Morkva UA Shipping para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 1.7.9, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a las instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/morkva-ua-shipping/tags/1.7.6/classes/settings/global/mrkv-ua-shipping-option-fields.php#L66",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/morkva-ua-shipping/trunk/classes/settings/global/mrkv-ua-shipping-option-fields.php#L66",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3468486%40morkva-ua-shipping&new=3468486%40morkva-ua-shipping&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d1f51f00-9991-49b3-950a-4a12667991e4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3244",
      "sourceIdentifier" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
      "published" : "2026-03-04T02:15:54.663",
      "lastModified" : "2026-03-04T21:37:24.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without proper HTML encoding in search results. This allows authenticated, rogue administrators to inject malicious JavaScript through page names that executes when users search for and view those pages in search results. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N.  Thanks zolpak for reporting"
      }, {
        "lang" : "es",
        "value" : "En Concrete CMS anterior a la versión 9.4.8, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el bloque de búsqueda donde los nombres de página y el contenido se renderizan sin la codificación HTML adecuada en los resultados de búsqueda. Esto permite a administradores autenticados y maliciosos inyectar JavaScript malicioso a través de nombres de página que se ejecuta cuando los usuarios buscan y ven esas páginas en los resultados de búsqueda. El equipo de seguridad de Concrete CMS otorgó a esta vulnerabilidad una puntuación CVSS v.4.0 de 4.8 con el vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Gracias a zolpak por reportar."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "BCBFD93E-6A10-4E9F-A31E-4A2C1FCD367C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Release Notes", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/pull/12826",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3452",
      "sourceIdentifier" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
      "published" : "2026-03-04T02:15:54.840",
      "lastModified" : "2026-03-04T21:36:39.803",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter. An authenticated administrator can store attacker-controlled serialized data in block configuration fields that are later passed to unserialize() without class restrictions or integrity checks. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 8.9 with vector CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H. Thanks YJK ( @YJK0805 https://hackerone.com/yjk0805 ) of  ZUSO ART https://zuso.ai/  for reporting."
      }, {
        "lang" : "es",
        "value" : "Concrete CMS en versiones anteriores a la 9.4.8 es vulnerable a ejecución remota de código mediante inyección de objetos PHP almacenados en el bloque Express Entry List a través del parámetro columns. Un administrador autenticado puede almacenar datos serializados controlados por el atacante en campos de configuración de bloques que posteriormente se pasan a unserialize() sin restricciones de clase ni comprobaciones de integridad. El equipo de seguridad de Concrete CMS asignó a esta vulnerabilidad una puntuación CVSS v.4.0 de 8.9 con el vector CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H. Gracias a YJK ( @YJK0805 https://hackerone.com/yjk0805 ) de ZUSO ART https://zuso.ai/ por informar."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "BCBFD93E-6A10-4E9F-A31E-4A2C1FCD367C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Release Notes", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/pull/12826/changes/167f16e4805d8ab546d2997c753ac21bf4854920://",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2994",
      "sourceIdentifier" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
      "published" : "2026-03-04T03:16:04.380",
      "lastModified" : "2026-03-04T21:35:06.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS below version 9.4.8 is subject to CSRF by a Rogue Administrator using the Anti-Spam Allowlist Group Configuration via group_id parameter which can leads to a security bypass since changes are saved prior to checking the CSRF token. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks z3rco for reporting"
      }, {
        "lang" : "es",
        "value" : "Concrete CMS en versiones anteriores a la 9.4.8 está sujeto a CSRF por un Administrador Malicioso utilizando la Configuración del Grupo de Lista Blanca Anti-Correo no Deseado a través del parámetro group_id, lo que puede llevar a una omisión de seguridad ya que los cambios se guardan antes de verificar el token CSRF. El equipo de seguridad de Concrete CMS asignó a esta vulnerabilidad una puntuación CVSS v.4.0 de 2.3 con el vector CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Gracias a z3rco por el informe."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "BCBFD93E-6A10-4E9F-A31E-4A2C1FCD367C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Release Notes", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/pull/12826",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3240",
      "sourceIdentifier" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
      "published" : "2026-03-04T03:16:04.940",
      "lastModified" : "2026-03-04T21:32:44.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via the Question field. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Thanks minhnn42, namdi and quanlna2 from VCSLab-Viettel Cyber Security for reporting."
      }, {
        "lang" : "es",
        "value" : "En Concrete CMS, en versiones anteriores a la 9.4.8, un usuario con permiso para editar una página con el elemento 'Legacy form' puede realizar un ataque de XSS almacenado dirigido a cuentas de alto privilegio a través del campo Pregunta. El equipo de seguridad de Concrete CMS asignó a esta vulnerabilidad una puntuación CVSS v.4.0 de 4.8 con el vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Gracias a minhnn42, namdi y quanlna2 de VCSLab-Viettel Cyber Security por informar."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "BCBFD93E-6A10-4E9F-A31E-4A2C1FCD367C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Release Notes", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/pull/12826",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3241",
      "sourceIdentifier" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
      "published" : "2026-03-04T03:16:05.107",
      "lastModified" : "2026-03-04T21:32:10.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the \"Legacy Form\" block. An authenticated user with permissions to create or edit forms (e.g., a rogue administrator) can inject a persistent JavaScript payload into the options of a multiple-choice question (Checkbox List, Radio Buttons, or Select Box). This payload is then executed in the browser of any user who views the page containing the form. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks M3dium for reporting."
      }, {
        "lang" : "es",
        "value" : "En Concrete CMS por debajo de la versión 9.4.8, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el bloque 'Legacy Form'. Un usuario autenticado con permisos para crear o editar formularios (por ejemplo, un administrador malintencionado) puede inyectar una carga útil de JavaScript persistente en las opciones de una pregunta de opción múltiple (Lista de Casillas de Verificación, Botones de Radio o Cuadro de Selección). Esta carga útil se ejecuta entonces en el navegador de cualquier usuario que ve la página que contiene el formulario. El equipo de seguridad de Concrete CMS otorgó a esta vulnerabilidad una puntuación CVSS v.4.0 de 4.8 con el vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Gracias M3dium por el informe."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "BCBFD93E-6A10-4E9F-A31E-4A2C1FCD367C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Release Notes", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/pull/12826",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3242",
      "sourceIdentifier" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
      "published" : "2026-03-04T03:16:05.270",
      "lastModified" : "2026-03-04T21:31:29.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block.  The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N.  Thanks M3dium for reporting."
      }, {
        "lang" : "es",
        "value" : "En Concrete CMS anterior a la versión 9.4.8, un administrador malicioso puede añadir XSS almacenado a través del bloque Switch Language. El equipo de seguridad de Concrete CMS asignó a esta vulnerabilidad una puntuación CVSS v.4.0 de 4.8 con el vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Gracias M3dium por informar."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.8",
            "matchCriteriaId" : "BCBFD93E-6A10-4E9F-A31E-4A2C1FCD367C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concretecms.org/9-x/developers/introduction/version-history/948-release-notes",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Release Notes", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/pull/12826",
        "source" : "ff5b8ace-8b95-4078-9743-eac1ca5451de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2025",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-03-04T06:16:11.297",
      "lastModified" : "2026-04-15T14:42:29.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mail Mint  WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Mail Mint anterior a 1.19.5 no tiene autorización en uno de sus endpoints de la API REST, lo que permite a usuarios no autenticados llamarlo y recuperar las direcciones de correo electrónico de los usuarios del blog."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1b815cde-cd9d-46fa-a6ab-3d2851705e7b/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28769",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T07:16:13.713",
      "lastModified" : "2026-03-09T18:20:19.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management portal version 101. An authenticated attacker can manipulate the `file` parameter to traverse directories and enumerate arbitrary files on the underlying filesystem. Due to the insecure perl file path handling function in use, a authenticated actor is able to preform directory traversal, with the backup endpoint confirming a file exists by indicating that a backup operation was successful or when using the path of a non existent file, the returned status is failed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta existe en el script /IDC_Logging/checkifdone.cgi en el portal de gestión web del receptor de satélite SuperFlex de la serie SFX de International Datacasting Corporation (IDC) versión 101. Un atacante autenticado puede manipular el parámetro 'file' para recorrer directorios y enumerar archivos arbitrarios en el sistema de archivos subyacente. Debido a la función insegura de manejo de rutas de archivos Perl en uso, un actor autenticado puede realizar un salto de directorio, con el endpoint de copia de seguridad confirmando que un archivo existe al indicar que una operación de copia de seguridad fue exitosa o cuando se utiliza la ruta de un archivo no existente, el estado devuelto es fallido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28770",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T07:16:14.093",
      "lastModified" : "2026-03-09T18:23:14.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management Interface version 101 allows for XML Injection. The application reflects un-sanitized user input from the `file` parameter directly into a CDATA block, allowing an authenticated attacker to break out of the tags and inject arbitrary XML elements. An actor is confirmed to be able to turn this into an reflected XSS but further abuse such as XXE may be possible"
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales en el script /IDC_Logging/checkifdone.cgi en la interfaz de gestión web del receptor de satélite SFX Series SuperFlex de International Datacasting Corporation (IDC) versión 101 permite la inyección XML. La aplicación refleja la entrada de usuario no saneada del parámetro 'file' directamente en un bloque CDATA, permitiendo a un atacante autenticado salir de las etiquetas e inyectar elementos XML arbitrarios. Se confirma que un actor puede convertir esto en un XSS reflejado, pero podría ser posible un abuso adicional como XXE."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2363",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T07:16:14.277",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'order_by' attribute of the [wpmem_user_membership_posts] shortcode in all versions up to, and including, 3.5.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin WP-Members Membership Plugin para WordPress es vulnerable a inyección SQL a través del atributo 'order_by' del shortcode [wpmem_user_membership_posts] en todas las versiones hasta la 3.5.5.1, inclusive. Esto se debe a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, añadan consultas SQL adicionales a consultas ya existentes que pueden ser utilizadas para extraer información sensible de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-members/tags/3.5.5.1/includes/class-wp-members-products.php#L490",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-members/tags/3.5.5.1/includes/class-wp-members-products.php#L496",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3468716/wp-members/trunk/includes/class-wp-members-products.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2a47e3cc-9435-4e9c-8d9a-9eb5014d229f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2732",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T07:16:14.577",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Enable Media Replace plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'RemoveBackGroundViewController::load' function in all versions up to, and including, 4.1.7. This makes it possible for authenticated attackers, with Author-level access and above, to replace any attachment with a removed background attachment."
      }, {
        "lang" : "es",
        "value" : "El plugin Enable Media Replace para WordPress es vulnerable a la modificación no autorizada de datos debido a una verificación de capacidad inadecuada en la función 'RemoveBackGroundViewController::load' en todas las versiones hasta la 4.1.7, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Autor o superior, reemplacen cualquier archivo adjunto con un archivo adjunto con el fondo eliminado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/short-pixel-optimizer/enable-media-replace/commit/8ca282e68e5fcf8a8e4cecc1f0ab192c42b1dc66",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.1.7/classes/ViewController/RemoveBackgroundViewController.php#L35",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/enable-media-replace/tags/4.1.7/classes/ViewController/RemoveBackgroundViewController.php#L68",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3473504/enable-media-replace#file26",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2c5f2dc8-67f7-4dbf-8631-f434522f1b53?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28771",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:13.173",
      "lastModified" : "2026-03-09T18:23:27.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interface version 101. The application fails to adequately sanitize user-supplied input provided via the `cat` parameter before reflecting it in the HTTP response, allowing a remote attacker to execute arbitrary HTML or JavaScript in the victim's browser context."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) reflejado existe en el endpoint /index.cgi de la interfaz de gestión web del receptor de satélite SuperFlex serie SFX de International Datacasting Corporation (IDC) versión 101. La aplicación no logra sanear adecuadamente la entrada proporcionada por el usuario a través del parámetro 'cat' antes de reflejarla en la respuesta HTTP, permitiendo a un atacante remoto ejecutar HTML o JavaScript arbitrario en el contexto del navegador de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28772",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:13.333",
      "lastModified" : "2026-03-09T18:23:37.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 allows a remote attacker to execute arbitrary web scripts or HTML. The vulnerability is triggered by sending a crafted payload through the `submitType` parameter, which is reflected directly into the DOM without proper escaping."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site scripting (XSS) reflejada en el endpoint /IDC_Logging/index.cgi de la interfaz de gestión web del receptor de satélite SuperFlex de la serie SFX de International Datacasting Corporation (IDC) versión 101 permite a un atacante remoto ejecutar scripts web o HTML arbitrarios. La vulnerabilidad se activa enviando una carga útil manipulada a través del parámetro 'submitType', que se refleja directamente en el DOM sin el escape adecuado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28773",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:13.497",
      "lastModified" : "2026-03-09T18:23:56.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite  Receiver Web Management Interface version 101 is vulnerable to OS Command Injection. The application insecurely parses the `IPaddr` parameter. An authenticated attacker can bypass server-side semicolon exclusion checks by using alternate shell metacharacters (such as the pipe `|` operator) to append and execute arbitrary shell commands with root privileges."
      }, {
        "lang" : "es",
        "value" : "La utilidad de diagnóstico Ping basada en web (/IDC_Ping/main.cgi) en la interfaz de gestión web del receptor de satélite SuperFlex de la serie SFX de International Datacasting Corporation (IDC) versión 101 es vulnerable a la inyección de comandos del sistema operativo. La aplicación analiza de forma insegura el parámetro 'IPaddr'. Un atacante autenticado puede eludir las comprobaciones de exclusión de punto y coma del lado del servidor mediante el uso de metacaracteres de shell alternativos (como el operador de tubería '|') para añadir y ejecutar comandos de shell arbitrarios con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28774",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:13.650",
      "lastModified" : "2026-03-09T18:24:06.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101. An authenticated attacker can inject arbitrary shell metacharacters (such as the pipe `|` operator) into the flags parameter, leading to the execution of arbitrary operating system commands with root privileges."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos del sistema operativo en la utilidad de diagnóstico Traceroute basada en web de la interfaz de gestión web del receptor de satélite SuperFlex de la serie SFX de International Datacasting Corporation (IDC) versión 101. Un atacante autenticado puede inyectar metacaracteres de shell arbitrarios (como el operador de tubería '|') en el parámetro flags, lo que lleva a la ejecución de comandos arbitrarios del sistema operativo con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28775",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:13.803",
      "lastModified" : "2026-03-09T18:24:21.757",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de ejecución remota de código (RCE) no autenticada en el servicio SNMP de International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. La implementación aprovisiona de forma insegura la cadena de comunidad SNMP 'private' con acceso de lectura/escritura por defecto. Debido a que el agente SNMP se ejecuta como root, un atacante remoto no autenticado puede utilizar directivas 'NET-SNMP-EXTEND-MIB', abusando del hecho de que el sistema ejecuta una versión vulnerable de net-snmp anterior a la 5.8, para ejecutar comandos arbitrarios del sistema operativo con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28776",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:13.960",
      "lastModified" : "2026-03-17T16:51:46.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the `monitor` account. A remote unauthenticated attacker can use these trivial, undocumented credentials to access the system via SSH. While initially dropped into a restricted shell, the attacker can trivially break out to achieve standard shell functionality."
      }, {
        "lang" : "es",
        "value" : "El receptor de satélite SuperFlex de la serie SFX de International Datacasting Corporation (IDC) contiene credenciales codificadas de forma rígida para la cuenta 'monitor'. Un atacante remoto no autenticado puede usar estas credenciales triviales y no documentadas para acceder al sistema a través de SSH. Aunque inicialmente se le coloca en un shell restringido, el atacante puede evadirse trivialmente para lograr la funcionalidad de shell estándar."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28777",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:14.113",
      "lastModified" : "2026-03-17T17:05:35.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Datacasting Corporation (IDC) \n\nSFX2100 Satellite Receiver, trivial password for the `user` (usr) account. A remote unauthenticated attacker can exploit this to gain unauthorized SSH access to the system, while intially dropped into a restricted shell, an attacker can trivially spawn a complete pty to gain an appropriately interactive shell."
      }, {
        "lang" : "es",
        "value" : "International Datacasting Corporation (IDC)\n\nReceptor de satélite SFX2100, contraseña trivial para la cuenta 'user' (usr). Un atacante remoto no autenticado puede explotar esto para obtener acceso SSH no autorizado al sistema; aunque inicialmente se le coloque en un shell restringido, un atacante puede generar trivialmente un pty completo para obtener un shell interactivo adecuado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28778",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:14.253",
      "lastModified" : "2026-03-17T17:02:28.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A remote unauthenticated attacker can log in via FTP using these credentials. Because the `xd` user has write permissions to their home directory where root-executed binaries and symlinks (such as those invoked by `xdstartstop`) are stored, the attacker can overwrite these files or manipulate symlinks to achieve arbitrary code execution as the root user."
      }, {
        "lang" : "es",
        "value" : "El receptor de satélite SuperFlex de la serie SFX de International Datacasting Corporation (IDC) contiene credenciales no documentadas, codificadas/inseguras para la cuenta de usuario 'xd'. Un atacante remoto no autenticado puede iniciar sesión a través de FTP utilizando estas credenciales. Debido a que el usuario 'xd' tiene permisos de escritura en su directorio de inicio, donde se almacenan binarios ejecutados por root y enlaces simbólicos (como los invocados por 'xdstartstop'), el atacante puede sobrescribir estos archivos o manipular enlaces simbólicos para lograr la ejecución de código arbitrario como usuario root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29119",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:14.440",
      "lastModified" : "2026-03-17T16:55:21.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, leading to potential system compromise."
      }, {
        "lang" : "es",
        "value" : "El receptor satelital International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) contiene credenciales codificadas de forma rígida e inseguras para la cuenta 'admin'. Un atacante remoto no autenticado puede usar estas credenciales no documentadas para acceder directamente al sistema satelital a través del servicio Telnet, lo que lleva a un posible compromiso del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29120",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-04T08:16:14.587",
      "lastModified" : "2026-03-17T17:08:34.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) SuperFlex Satellite Receiver insecurely stores the hardcoded root password hash. The password itself is highly insecure and susceptible to offline dictionary attacks using the rockyou.txt wordlist. Because direct root SSH login is disabled, an attacker must first obtain low-privileged access to the system (e.g., via other vulnerabilities) to be able to log in as the root user. The password is hardcoded and so allows for an actor with local access on effected versions to escalate to root"
      }, {
        "lang" : "es",
        "value" : "El archivo de configuración de instalación /root/anaconda-ks.cfg en el Receptor de Satélite SuperFlex Serie SFX (SFX2100) de International Datacasting Corporation (IDC) almacena de forma insegura el hash de la contraseña de root codificada de forma rígida. La contraseña en sí es altamente insegura y susceptible a ataques de diccionario fuera de línea utilizando la lista de palabras rockyou.txt. Debido a que el inicio de sesión SSH directo como root está deshabilitado, un atacante debe primero obtener acceso de bajo privilegio al sistema (por ejemplo, a través de otras vulnerabilidades) para poder iniciar sesión como usuario root. La contraseña está codificada de forma rígida y por lo tanto permite a un actor con acceso local en las versiones afectadas escalar a root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1236",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T09:15:55.293",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Envira Gallery for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'justified_gallery_theme' parameter in all versions up to, and including, 1.12.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Envira Gallery para WordPress para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'justified_gallery_theme' en todas las versiones hasta, e incluyendo, 1.12.3 debido a una sanitización de entrada y escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de Autor y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/envira-gallery-lite/tags/1.12.3/includes/global/shortcode.php#L302",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/envira-gallery-lite/trunk/includes/global/shortcode.php#L302",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3465371%40envira-gallery-lite&old=3444965%40envira-gallery-lite&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bc552d46-79ca-4540-8620-5a031238cd62?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27441",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:55.943",
      "lastModified" : "2026-03-05T15:46:02.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution."
      }, {
        "lang" : "es",
        "value" : "SEPPmail Secure Email Gateway antes de la versión 15.0.1 neutraliza insuficientemente la contraseña de cifrado de PDF, permitiendo la ejecución de comandos del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27442",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:56.120",
      "lastModified" : "2026-03-05T15:44:04.200",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, allowing an attacker to access files on the gateway."
      }, {
        "lang" : "es",
        "value" : "La interfaz web GINA en SEPPmail Secure Email Gateway anterior a la versión 15.0.1 no verifica correctamente los nombres de archivo adjuntos en correos electrónicos cifrados con GINA, lo que permite a un atacante acceder a archivos en el gateway."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27443",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:56.307",
      "lastModified" : "2026-03-05T15:41:21.363",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers."
      }, {
        "lang" : "es",
        "value" : "SEPPmail Secure Email Gateway antes de la versión 15.0.1 no sanea correctamente los encabezados de las entidades MIME protegidas con S/MIME, permitiendo a un atacante controlar encabezados de confianza."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27444",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:56.483",
      "lastModified" : "2026-03-05T15:34:43.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it."
      }, {
        "lang" : "es",
        "value" : "SEPPmail Secure Email Gateway antes de la versión 15.0.1 interpreta incorrectamente las direcciones de correo electrónico en los encabezados del correo electrónico, causando un conflicto de interpretación con otra infraestructura de correo que permite a un atacante falsificar el origen del correo electrónico o descifrarlo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27445",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:56.660",
      "lastModified" : "2026-03-05T15:28:21.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing."
      }, {
        "lang" : "es",
        "value" : "SEPPmail Secure Email Gateway anterior a la versión 15.0.1 no verifica correctamente que una firma PGP fue generada por la clave esperada, permitiendo la suplantación de firma."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27446",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-04T09:15:56.837",
      "lastModified" : "2026-03-17T16:16:20.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This could potentially result in message injection into any queue and/or message exfiltration from any queue via the rogue broker. This impacts environments that allow both:\n\n- incoming Core protocol connections from untrusted sources to the broker\n\n- outgoing Core protocol connections from the broker to untrusted targets\n\nThis issue affects:\n\n- Apache Artemis from 2.50.0 through 2.51.0\n\n- Apache ActiveMQ Artemis from 2.11.0 through 2.44.0.\n\nUsers are recommended to upgrade to Apache Artemis version 2.52.0, which fixes the issue.\n\nThe issue can be mitigated by one of the following:\n\n- Remove Core protocol support from any acceptor receiving connections from untrusted sources. Incoming Core protocol connections are supported by default via the \"artemis\" acceptor listening on port 61616. See the \"protocols\" URL parameter configured for the acceptor. An acceptor URL without this parameter supports all protocols by default, including Core.\n\n- Use two-way SSL (i.e. certificate-based authentication) in order to force every client to present the proper SSL certificate when establishing a connection before any message protocol handshake is attempted. This will prevent unauthenticated exploitation of this vulnerability.\n\n- Implement and deploy a Core interceptor to deny all Core downstream federation connect packets. Such packets have a type of (int) -16 or (byte) 0xfffffff0. Documentation for interceptors is available at  https://artemis.apache.org/components/artemis/documentation/latest/intercepting-operations.html ."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autenticación Faltante para Función Crítica (CWE-306) en Apache Artemis, Apache ActiveMQ Artemis. Un atacante remoto no autenticado puede usar el protocolo Core para forzar a un broker objetivo a establecer una conexión de federación Core saliente con un broker malicioso controlado por el atacante. Esto podría resultar potencialmente en la inyección de mensajes en cualquier cola y/o la exfiltración de mensajes de cualquier cola a través del broker malicioso. Esto afecta a entornos que permiten ambos:\n\n- conexiones de protocolo Core entrantes desde fuentes no confiables al broker\n\n- conexiones de protocolo Core salientes desde el broker a objetivos no confiables\n\nEste problema afecta a:\n\n- Apache Artemis desde 2.50.0 hasta 2.51.0\n\n- Apache ActiveMQ Artemis desde 2.11.0 hasta 2.44.0.\n\nSe recomienda a los usuarios actualizar a la versión 2.52.0 de Apache Artemis, que corrige el problema.\n\nEl problema puede mitigarse mediante cualquiera de las siguientes opciones:\n\n- Eliminar el soporte del protocolo Core de cualquier aceptor que reciba conexiones de fuentes no confiables. Las conexiones de protocolo Core entrantes son compatibles por defecto a través del aceptor 'artemis' que escucha en el puerto 61616. Consulte el parámetro URL 'protocols' configurado para el aceptor. Una URL de aceptor sin este parámetro soporta todos los protocolos por defecto, incluyendo Core.\n\n- Usar SSL bidireccional (es decir, autenticación basada en certificados) para forzar a cada cliente a presentar el certificado SSL adecuado al establecer una conexión antes de que se intente cualquier handshake de protocolo de mensajes. Esto evitará la explotación no autenticada de esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.11.0",
            "versionEndIncluding" : "2.44.0",
            "matchCriteriaId" : "6BC62090-71FA-45A2-A519-B2C3B47D4262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:artemis:2.50.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF62B6D-CD60-43D0-9740-AC011CC1FBFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/03/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2746",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:57.960",
      "lastModified" : "2026-03-05T15:25:57.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails."
      }, {
        "lang" : "es",
        "value" : "SEPPmail Secure Email Gateway antes de la versión 15.0.1 no comunica correctamente los resultados de la verificación de firma PGP, dejando a los usuarios incapaces de detectar correos electrónicos falsificados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2747",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:58.120",
      "lastModified" : "2026-03-05T15:15:59.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor."
      }, {
        "lang" : "es",
        "value" : "La Pasarela de Correo Electrónico Seguro SEPPmail antes de la versión 15.0.1 descifra mensajes PGP en línea sin aislarlos del contenido no cifrado circundante, permitiendo la exposición de información sensible a un actor no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2748",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-04T09:15:58.290",
      "lastModified" : "2026-03-05T15:14:26.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing."
      }, {
        "lang" : "es",
        "value" : "SEPPmail Secure Email Gateway antes de la versión 15.0.1 valida incorrectamente los certificados S/MIME emitidos para direcciones de correo electrónico que contienen espacios en blanco, lo que permite la suplantación de firma."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1",
            "matchCriteriaId" : "4B07D7CB-23E6-479C-8727-06287E92D62F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3094",
      "sourceIdentifier" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
      "published" : "2026-03-04T09:15:58.457",
      "lastModified" : "2026-03-06T20:12:48.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Delta Electronics CNCSoft-G2 carece de validación adecuada del archivo proporcionado por el usuario. Si un usuario abre un archivo malicioso, un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:cncsoft-g2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0.39",
            "matchCriteriaId" : "12BCFE31-54C7-4A39-872D-6D44AA8BF082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00004_CNCSoft-G2_File%20Parsing%20Out-Of-Bounds%20Write.pdf",
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1706",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T10:16:07.963",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin All-in-One Video Gallery para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'vi' en todas las versiones hasta la 4.7.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-video-gallery/tags/4.7.1/includes/helpers/render.php#L304",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-video-gallery/tags/4.7.1/public/videos.php#L776",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3469442/all-in-one-video-gallery/trunk/public/videos.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bcaff8ab-2db9-4d91-9b7a-f7f49f5952b9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3439",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2026-03-04T10:16:08.150",
      "lastModified" : "2026-03-05T18:03:11.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer basado en pila post-autenticación en el manejo de certificados de SonicOS permite a un atacante remoto colapsar un cortafuegos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.2-7010",
            "matchCriteriaId" : "C263643A-0274-47CF-881F-59CEF6B8A20A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACDCE12-74C2-4F3C-8421-9191700514C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF1ECB1-6257-41E3-A050-6467063F4807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0883D805-1BA9-49CE-AEC7-51C9D9A69C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.0-8009",
            "matchCriteriaId" : "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED8014A-C7A4-4624-8D50-A9844871C1B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28BF416-D019-438B-954E-FB94697DC011"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56EC904E-4FCA-4B35-B188-639AE688DD14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9556B-0A33-4A27-B9E2-00F47969A566"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFE3403-6A5B-4735-9248-99297A2E4461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6BC579-21A1-4C2F-B655-73B14C3409A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CC10F-E822-4BF7-9EB5-0D702020CB0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1674",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T12:16:02.733",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization within the save_gutena_forms_schema() function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to update option values to a structured array value on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values, that would, for example enable site user registration when it is explicitly disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, y Custom Form Builder para WordPress es vulnerable a la modificación no autorizada de datos debido a la falta de autorización dentro de la función save_gutena_forms_schema() en todas las versiones hasta la 1.6.0, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, actualicen los valores de las opciones a un valor de array estructurado en el sitio de WordPress. Esto puede ser aprovechado para actualizar una opción que crearía un error en el sitio y denegar el servicio a usuarios legítimos o ser usado para establecer algunos valores que, por ejemplo, habilitarían el registro de usuarios del sitio cuando está explícitamente deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3463148/gutena-forms",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc10693-6d7c-4293-8848-02181ceb0d25?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2355",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T12:16:03.023",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template` attribute of the `[my_calendar_upcoming]` shortcode in all versions up to, and including, 3.7.3. This is due to the use of `stripcslashes()` on user-supplied shortcode attribute values in the `mc_draw_template()` function, which decodes C-style hex escape sequences (e.g., `\\x3c` to `<`) at render time, bypassing WordPress's `wp_kses_post()` content sanitization that runs at save time. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin My Calendar – Accessible Event Manager para WordPress es vulnerable a ataques de tipo Stored Cross-Site Scripting a través del atributo «template» del shortcode «[my_calendar_upcoming]» en todas las versiones hasta la 3.7.3, incluida esta. Esto se debe al uso de «stripcslashes()» en los valores de los atributos de los códigos cortos proporcionados por el usuario en la función «mc_draw_template()», que decodifica las secuencias de escape hexadecimales de estilo C (por ejemplo, «\\x3c» a «&lt;») en el momento de la representación, eludiendo la sanitización de contenido «wp_kses_post()» de WordPress que se ejecuta en el momento del guardado. Esto permite a los atacantes autenticados, con acceso de nivel colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.2/my-calendar-shortcodes.php#L112",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.2/my-calendar-templates.php#L83",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/my-calendar/trunk/my-calendar-shortcodes.php#L112",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/my-calendar/trunk/my-calendar-templates.php#L83",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3464603%40my-calendar%2Ftrunk&old=3454989%40my-calendar%2Ftrunk&sfp_email=&sfph_mail=#file6",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/03d5c82e-f82f-4156-bb3e-e6eb365a6c36?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3056",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T12:16:03.210",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `seraph_accel_api` AJAX action with `fn=LogClear` in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the plugin's debug/operational logs."
      }, {
        "lang" : "es",
        "value" : "El plugin Seraphinite Accelerator para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidad en la acción AJAX 'seraph_accel_api' con 'fn=LogClear' en todas las versiones hasta la 2.28.14, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, borrar los registros de depuración/operacionales del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/seraphinite-accelerator/trunk/Cmn/Plugin.php#L598",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/seraphinite-accelerator/trunk/main.php#L2459",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3468084/seraphinite-accelerator/trunk/main.php?contextall=1",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/96850eb6-77d8-4012-b360-a417918cab0e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3058",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-04T12:16:03.373",
      "lastModified" : "2026-03-31T18:37:28.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the `seraph_accel_api` AJAX action with `fn=GetData`. This is due to the `OnAdminApi_GetData()` function not performing any capability checks. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive operational data including cache status, scheduled task information, and external database state."
      }, {
        "lang" : "es",
        "value" : "El plugin Seraphinite Accelerator para WordPress es vulnerable a la exposición de información sensible en todas las versiones hasta la 2.28.14, inclusive, a través de la acción AJAX 'seraph_accel_api' con 'fn=GetData'. Esto se debe a que la función 'OnAdminApi_GetData()' no realiza ninguna comprobación de capacidad. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, recuperar datos operativos sensibles, incluyendo el estado de la caché, información de tareas programadas y el estado de la base de datos externa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s-sols:seraphinite_accelerator:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.28.15",
            "matchCriteriaId" : "E8A72897-8765-41A4-BC20-37AB45E48A55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/seraphinite-accelerator/trunk/Cmn/Plugin.php#L598",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/seraphinite-accelerator/trunk/main.php#L2288",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3468084/seraphinite-accelerator/trunk/main.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bf539c01-596a-44dd-9587-6be6978ab0fa?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21421",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:56.960",
      "lastModified" : "2026-03-04T20:55:46.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a la 9.10.1.6 y versiones de la 9.11.0.0 a la 9.12.0.1, contiene una vulnerabilidad de ejecución con privilegios innecesarios. Un atacante con altos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "C542DE7A-D4BD-4127-A14F-6A1D151A40F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21422",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:57.147",
      "lastModified" : "2026-04-30T09:16:02.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones 9.10.0.0 a 9.10.1.5 y versiones 9.11.0.0 a 9.12.0.1, contiene una vulnerabilidad de control externo de la configuración o del sistema. Un atacante con altos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que podría llevar a la elusión del mecanismo de protección."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-15"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10.0.0",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "0A810642-CEB5-493F-918D-1158F32A6273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21423",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:57.310",
      "lastModified" : "2026-03-04T20:49:00.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of privileges, and information disclosure."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a la 9.10.1.6 y versiones de la 9.11.0.0 a la 9.12.0.1, contiene una vulnerabilidad de permisos predeterminados incorrectos. Un atacante con altos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la ejecución de código, denegación de servicio, elevación de privilegios y revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "C542DE7A-D4BD-4127-A14F-6A1D151A40F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21424",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:57.470",
      "lastModified" : "2026-03-04T20:48:30.273",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a la 9.10.1.6 y versiones de la 9.11.0.0 a la 9.12.0.1, contiene una vulnerabilidad de ejecución con privilegios innecesarios. Un atacante con altos privilegios con acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "C542DE7A-D4BD-4127-A14F-6A1D151A40F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21425",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:57.643",
      "lastModified" : "2026-03-04T20:48:04.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a la 9.10.1.6 y versiones de la 9.11.0.0 a la 9.12.0.1, contiene una vulnerabilidad de asignación de privilegios incorrecta. Un atacante con privilegios bajos y acceso local podría explotar potencialmente esta vulnerabilidad, lo que llevaría a una Elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "C542DE7A-D4BD-4127-A14F-6A1D151A40F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21426",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:57.800",
      "lastModified" : "2026-03-04T20:46:57.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a la 9.10.1.6 y versiones de la 9.11.0.0 a la 9.12.0.1, contiene una vulnerabilidad de ejecución con privilegios innecesarios. Un atacante con altos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que podría llevar a una denegación de servicio, elevación de privilegios y revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "C542DE7A-D4BD-4127-A14F-6A1D151A40F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22270",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:57.967",
      "lastModified" : "2026-03-04T20:46:14.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versiones anteriores a 9.10.1.6 y versiones desde 9.11.0.0 hasta 9.12.0.1, contiene una vulnerabilidad de elemento de ruta de búsqueda no controlada. Un atacante con altos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que podría llevar a una denegación de servicio, elevación de privilegios y revelación de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10.1.6",
            "matchCriteriaId" : "C542DE7A-D4BD-4127-A14F-6A1D151A40F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.11.0.0",
            "versionEndExcluding" : "9.13.0.0",
            "matchCriteriaId" : "23042111-E6E9-4C6B-8A89-2E7E3F44103F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23231",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T13:15:58.137",
      "lastModified" : "2026-04-02T15:16:24.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fix use-after-free in nf_tables_addchain()\n\nnf_tables_addchain() publishes the chain to table->chains via\nlist_add_tail_rcu() (in nft_chain_add()) before registering hooks.\nIf nf_tables_register_hook() then fails, the error path calls\nnft_chain_del() (list_del_rcu()) followed by nf_tables_chain_destroy()\nwith no RCU grace period in between.\n\nThis creates two use-after-free conditions:\n\n 1) Control-plane: nf_tables_dump_chains() traverses table->chains\n    under rcu_read_lock(). A concurrent dump can still be walking\n    the chain when the error path frees it.\n\n 2) Packet path: for NFPROTO_INET, nf_register_net_hook() briefly\n    installs the IPv4 hook before IPv6 registration fails.  Packets\n    entering nft_do_chain() via the transient IPv4 hook can still be\n    dereferencing chain->blob_gen_X when the error path frees the\n    chain.\n\nAdd synchronize_rcu() between nft_chain_del() and the chain destroy\nso that all RCU readers -- both dump threads and in-flight packet\nevaluation -- have finished before the chain is freed."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetfilter: nf_tables: corrige uso después de liberación en nf_tables_addchain()\n\nnf_tables_addchain() publica la cadena en table-&gt;chains a través de list_add_tail_rcu() (en nft_chain_add()) antes de registrar los ganchos. Si nf_tables_register_hook() falla entonces, la ruta de error llama a nft_chain_del() (list_del_rcu()) seguido de nf_tables_chain_destroy() sin un período de gracia RCU intermedio.\n\nEsto crea dos condiciones de uso después de liberación:\n\n1) Plano de control: nf_tables_dump_chains() recorre table-&gt;chains bajo rcu_read_lock(). Un volcado concurrente aún puede estar recorriendo la cadena cuando la ruta de error la libera.\n\n2) Ruta de paquetes: para NFPROTO_INET, nf_register_net_hook() instala brevemente el gancho IPv4 antes de que falle el registro de IPv6. Los paquetes que entran en nft_do_chain() a través del gancho IPv4 transitorio aún pueden estar desreferenciando chain-&gt;blob_gen_X cuando la ruta de error libera la cadena.\n\nAñadir synchronize_rcu() entre nft_chain_del() y la destrucción de la cadena para que todos los lectores RCU -- tanto los hilos de volcado como la evaluación de paquetes en curso -- hayan terminado antes de que la cadena sea liberada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.16",
            "versionEndExcluding" : "6.1.165",
            "matchCriteriaId" : "E51277CF-00C8-4E26-BC0E-6A90823CCC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.128",
            "matchCriteriaId" : "851E9353-6C09-4CC9-877E-E09DB164A3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.75",
            "matchCriteriaId" : "BCE16369-98ED-41CF-8995-DFDC10B288D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.14",
            "matchCriteriaId" : "BF463CB7-1F58-4607-B847-77ED23E4B9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.4",
            "matchCriteriaId" : "672A3E79-EC03-479D-8503-361DFBDC8092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2a6586ecfa4ce1413daaafee250d2590e05f1a33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2f9a4ffeb763aec822f8ff3d1e82202d27d46d4b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/7017745068a9068904e1e7a1b170a5785647cc81",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/71e99ee20fc3f662555118cf1159443250647533",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/dbd0af8083dd201f07c49110b2ee93710abdff28",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f3fe58ce37926a10115ede527d59b91bcc05400a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24732",
      "sourceIdentifier" : "security@bluespice.com",
      "published" : "2026-03-04T13:15:58.287",
      "lastModified" : "2026-04-28T21:06:10.647",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modules) allows Accessing Functionality Not Properly Constrained by ACLs, Bypassing Electronic Locks and Access Controls.This issue affects BlueSpice: from 5.1 through 5.1.3, from 5.2 through 5.2.0.\n\nHINT: Versions provided apply to BlueSpice MediaWiki releases. For Extension:NSFileRepo the affected versions are 3.0 < 3.0.5"
      }, {
        "lang" : "es",
        "value" : "Archivos o directorios accesibles a terceros externos, vulnerabilidad de asignación incorrecta de permisos para recursos críticos en Hallo Welt! GmbH BlueSpice (módulos de la extensión:NSFileRepo) permite acceder a funcionalidades no restringidas adecuadamente por ACLs, eludiendo bloqueos electrónicos y controles de acceso. Este problema afecta a BlueSpice: desde 5.1 hasta 5.1.3, desde 5.2 hasta 5.2.0.\n\nPISTA: Las versiones proporcionadas se aplican a las versiones de BlueSpice MediaWiki. Para la extensión:NSFileRepo, las versiones afectadas son 3.0 &lt; 3.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@bluespice.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:L/U:X",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "PRESENT",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@bluespice.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "references" : [ {
        "url" : "https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-02",
        "source" : "security@bluespice.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25907",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T13:15:58.470",
      "lastModified" : "2026-03-04T20:45:09.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS, versión 9.13.0.0, contiene una vulnerabilidad en el mecanismo de bloqueo de cuentas excesivamente restrictivo. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-645"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:9.13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387E2E26-BEB0-469E-A9EA-BF72473A0B2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-sg/000434591/dsa-2026-095-security-update-for-dell-powerscale-onefs-overly-restrictive-account-lockout-mechanism-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3103",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2026-03-04T14:16:14.857",
      "lastModified" : "2026-03-05T18:39:15.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss."
      }, {
        "lang" : "es",
        "value" : "Un error de lógica en la función remove_password() en las versiones de Checkmk de Checkmk GmbH &lt;2.4.0p23, &lt;2.3.0p43 y 2.2.0 (EOL) permite a un usuario de bajo privilegio causar pérdida de datos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8447E2D1-A540-4D4D-A89B-71581EB5C47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "83202950-840A-4CB7-AD96-CE62E84FABD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1A020A77-7D84-4557-9B0B-D74A89BC1538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "D9770554-978B-4552-9E0E-CD6B6675243C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "1883D2F4-CB96-4DDE-87E8-D1990A3FA092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "99AD6F39-AF67-4CB9-BED2-00CA75B9F5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "F08FE580-67D4-419C-AE4A-3B9EBC6A2838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD5C67F-CD3E-400E-802D-8B52408A259F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "310A2FA2-633A-48FB-A5C2-9A9A922E72E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0F1DC8-D9DF-4A7A-80DC-618FAB091375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0A1E3E-1B5A-4346-95BC-DE6FF6EE14CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "EB52B2A7-BDC1-4A4F-ABAF-69C1BA8E83C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "9F89225F-6969-4D89-B889-9CB09972825B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1B23EA-4571-4E4E-80BC-FD76FFD83FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "625A6998-5DAE-4538-9760-20523CCE501F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFD4461-2C37-418F-90AD-3A956B2D91C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "88523633-844C-41FE-ADF1-74D6AA2BCE6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA03E01-06D1-4E18-9C7B-CB6E49E5954B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "91F171B6-7F9A-4B9B-B53D-277FE74124F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1993E3-C4F9-4D78-BD02-A0B22D93BF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "34FF7D09-2129-4266-BF71-5424DC9E18B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "246F0BA5-F927-4204-97F3-51870072599F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "86ED47B6-58FB-4BAC-9C87-F7BC08AB3870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFF173A-373B-4948-BD22-86C031B58E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "90648825-55F7-472A-944E-7E5C787FAFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE2BA6D-737A-4EEB-B8A2-91E9C61B70C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:*",
            "matchCriteriaId" : "94FA8F05-267D-4B24-9AA3-A77FAD259310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:*",
            "matchCriteriaId" : "085B463B-633A-447A-B61C-99DD78B49A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DB112B-EE65-4BAB-AED8-716E618FD89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9EDBC8-A6A7-4348-8446-1D1DDDACDC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "B28A0C9D-072A-413C-8587-CD57CB918190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0E10D1-2497-4CAE-ABA5-9F861C6A65DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:*",
            "matchCriteriaId" : "9E64A46A-A1E2-4272-A7B8-36140AF2B889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:*",
            "matchCriteriaId" : "28568D2A-CA5B-42C2-8A32-FF783CB7A06F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:*",
            "matchCriteriaId" : "F82F8827-B7B2-4C10-A42A-77781BC7B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:*",
            "matchCriteriaId" : "F641BB83-8A0D-42D0-AB3E-7314918FDC9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:*",
            "matchCriteriaId" : "FCCE61D4-00B1-4D83-8FAE-8F2FA8F48E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB9628A-5A72-4DD5-9D4A-CBE13B0CFDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:*",
            "matchCriteriaId" : "E34FEBB1-0935-4363-B4FE-45901BFC9A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p38:*:*:*:*:*:*",
            "matchCriteriaId" : "5C43DE3C-0098-4613-B2A4-39607A63CE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p39:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5F5665-C2A9-4877-B3F6-59059A1EEFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "DF22D0A7-82B1-4598-B8C5-BDFE523D07F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p40:*:*:*:*:*:*",
            "matchCriteriaId" : "7352D105-D045-427C-BA79-0B16D41139D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p41:*:*:*:*:*:*",
            "matchCriteriaId" : "589909F7-D6E5-4B33-9735-2B97E0B37B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p42:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB8717F-F458-4E4C-8D8D-C4F68D4D4B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "20035AFB-75B4-4164-9833-A2FCAE24B577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCBACEB-7130-455D-B4BE-243053C116DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "156384E2-E04B-4153-A91F-3F307C9FEAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC0ED95-F43B-46D7-9AA0-A0FB1C32EF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "91C194C1-5292-4E2A-BB71-9C5CD3CE6194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "022C075A-4B04-4141-A7D7-F93C9A7CE0FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "60C00469-0CD1-4E9C-8370-CE113842056C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "179905FC-821F-4214-A872-E4E3702419D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "04956994-D5A8-45EE-9DC2-8A1D3058CE8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "8868449B-7259-4C3B-8344-0EFE0BA3A97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDF3A13-582F-43D2-B42F-0DC42D4FBFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF500B3-AA6A-4618-BC7E-0F214B795E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFE68AB-1F57-497C-9229-29ED3A73D87F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "577F9F72-2FDA-4F87-A840-05158F2368B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3AD894-660B-41FC-B910-899A764A00B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "21853BB4-1BB5-40E3-82E2-253899D898ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "E7963D66-A89A-4167-A2BA-DFF89B439EAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "42099281-2026-4507-A20B-C669C206ADB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "29A44B1E-83CD-4A3D-AFFD-82AAC7760293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B87192-D81E-4269-ABF3-8D700BB531B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "3D35CD46-F8CF-49C3-8CD9-53E1ED038023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B5649C-C0BA-4905-98DD-CA606DD2B886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "29148EA6-675F-4B35-81BF-B8254C1EB675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "B11306B4-1092-470C-BA87-DBD02A18A74B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "9E85F65E-A103-425E-8AD5-7EE9F093B463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "65DF329A-4E2D-4138-99C5-6765789051CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9B340D-84F6-4CE9-A627-E26F340B3705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "74F78C48-030A-48A1-B69E-04C4EA5CCC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8701A914-774B-4E3B-A651-4A9FD19A187A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "19E40054-C44D-4C4C-B077-0333D8201E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2D2F49-32B2-42AA-B99E-7C39403CF104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE440F8-EBF5-4DBB-A215-57D770C66219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "1A94395D-DDCE-4977-89CA-46F71C3CA2B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9513876C-8DF0-4A59-864F-8401BAA43376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/19041",
        "source" : "security@checkmk.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23232",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:13.477",
      "lastModified" : "2026-03-17T21:21:42.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"f2fs: block cache/dio write during f2fs_enable_checkpoint()\"\n\nThis reverts commit 196c81fdd438f7ac429d5639090a9816abb9760a.\n\nOriginal patch may cause below deadlock, revert it.\n\nwrite\t\t\t\tremount\n- write_begin\n - lock_page  --- lock A\n - prepare_write_begin\n  - f2fs_map_lock\n\t\t\t\t- f2fs_enable_checkpoint\n\t\t\t\t - down_write(cp_enable_rwsem)  --- lock B\n\t\t\t\t - sync_inode_sb\n\t\t\t\t  - writepages\n\t\t\t\t   - lock_page\t\t\t--- lock A\n   - down_read(cp_enable_rwsem)  --- lock A"
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Revertir «f2fs: bloqueo de caché/escritura dio durante f2fs_enable_checkpoint()». Esto revierte la confirmación 196c81fdd438f7ac429d5639090a9816abb9760a. El parche original puede causar el siguiente bloqueo, reviertelo. write remount - write_begin - lock_page --- lock A - prepare_write_begin - f2fs_map_lock - f2fs_enable_checkpoint - down_write (cp_enable_rwsem) --- bloqueo B - sync_inode_sb - writepages - lock_page --- bloqueo A - down_read(cp_enable_rwsem) --- bloqueo A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.3",
            "matchCriteriaId" : "7853A337-FB2A-4E19-AB47-4E38343532AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3996b70209f145bfcf2afc7d05dd92c27b233b48",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/b6382273801bc7c778545dd8004c9a9d750b4f62",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23233",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:13.603",
      "lastModified" : "2026-03-17T21:21:30.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid mapping wrong physical block for swapfile\n\nXiaolong Guo reported a f2fs bug in bugzilla [1]\n\n[1] https://bugzilla.kernel.org/show_bug.cgi?id=220951\n\nQuoted:\n\n\"When using stress-ng's swap stress test on F2FS filesystem with kernel 6.6+,\nthe system experiences data corruption leading to either:\n1 dm-verity corruption errors and device reboot\n2 F2FS node corruption errors and boot hangs\n\nThe issue occurs specifically when:\n1 Using F2FS filesystem (ext4 is unaffected)\n2 Swapfile size is less than F2FS section size (2MB)\n3 Swapfile has fragmented physical layout (multiple non-contiguous extents)\n4 Kernel version is 6.6+ (6.1 is unaffected)\n\nThe root cause is in check_swap_activate() function in fs/f2fs/data.c. When the\nfirst extent of a small swapfile (< 2MB) is not aligned to section boundaries,\nthe function incorrectly treats it as the last extent, failing to map\nsubsequent extents. This results in incorrect swap_extent creation where only\nthe first extent is mapped, causing subsequent swap writes to overwrite wrong\nphysical locations (other files' data).\n\nSteps to Reproduce\n1 Setup a device with F2FS-formatted userdata partition\n2 Compile stress-ng from https://github.com/ColinIanKing/stress-ng\n3 Run swap stress test: (Android devices)\nadb shell \"cd /data/stressng; ./stress-ng-64 --metrics-brief --timeout 60\n--swap 0\"\n\nLog:\n1 Ftrace shows in kernel 6.6, only first extent is mapped during second\nf2fs_map_blocks call in check_swap_activate():\nstress-ng-swap-8990: f2fs_map_blocks: ino=11002, file offset=0, start\nblkaddr=0x43143, len=0x1\n(Only 4KB mapped, not the full swapfile)\n2 in kernel 6.1, both extents are correctly mapped:\nstress-ng-swap-5966: f2fs_map_blocks: ino=28011, file offset=0, start\nblkaddr=0x13cd4, len=0x1\nstress-ng-swap-5966: f2fs_map_blocks: ino=28011, file offset=1, start\nblkaddr=0x60c84b, len=0xff\n\nThe problematic code is in check_swap_activate():\nif ((pblock - SM_I(sbi)->main_blkaddr) % blks_per_sec ||\n    nr_pblocks % blks_per_sec ||\n    !f2fs_valid_pinned_area(sbi, pblock)) {\n    bool last_extent = false;\n\n    not_aligned++;\n\n    nr_pblocks = roundup(nr_pblocks, blks_per_sec);\n    if (cur_lblock + nr_pblocks > sis->max)\n        nr_pblocks -= blks_per_sec;\n\n    /* this extent is last one */\n    if (!nr_pblocks) {\n        nr_pblocks = last_lblock - cur_lblock;\n        last_extent = true;\n    }\n\n    ret = f2fs_migrate_blocks(inode, cur_lblock, nr_pblocks);\n    if (ret) {\n        if (ret == -ENOENT)\n            ret = -EINVAL;\n        goto out;\n    }\n\n    if (!last_extent)\n        goto retry;\n}\n\nWhen the first extent is unaligned and roundup(nr_pblocks, blks_per_sec)\nexceeds sis->max, we subtract blks_per_sec resulting in nr_pblocks = 0. The\ncode then incorrectly assumes this is the last extent, sets nr_pblocks =\nlast_lblock - cur_lblock (entire swapfile), and performs migration. After\nmigration, it doesn't retry mapping, so subsequent extents are never processed.\n\"\n\nIn order to fix this issue, we need to lookup block mapping info after\nwe migrate all blocks in the tail of swapfile."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nf2fs: corrección para evitar mapear un bloque físico incorrecto para el archivo de intercambio\n\nXiaolong Guo informó de un error de f2fs en bugzilla [1]\n\n[1] HTTPS://bugzilla.kernel.org/show_bug.cgi?id=220951\n\nCitado:\n\nCuando se utiliza la prueba de estrés de intercambio de stress-ng en el sistema de archivos F2FS con kernel 6.6+, el sistema experimenta corrupción de datos que lleva a una de las siguientes situaciones:\n1 errores de corrupción de dm-verity y reinicio del dispositivo\n2 errores de corrupción de nodo F2FS y cuelgues de arranque\n\nEl problema ocurre específicamente cuando:\n1 Se utiliza el sistema de archivos F2FS (ext4 no se ve afectado)\n2 El tamaño del archivo de intercambio es menor que el tamaño de sección de F2FS (2MB)\n3 El archivo de intercambio tiene un diseño físico fragmentado (múltiples extensiones no contiguas)\n4 La versión del kernel es 6.6+ (6.1 no se ve afectada)\n\nLa causa raíz está en la función check_swap_activate() en fs/f2fs/data.c. Cuando la primera extensión de un archivo de intercambio pequeño (&lt; 2MB) no está alineada con los límites de sección, la función lo trata incorrectamente como la última extensión, fallando en mapear extensiones subsiguientes. Esto resulta en una creación incorrecta de swap_extent donde solo la primera extensión es mapeada, causando que las escrituras de intercambio subsiguientes sobrescriban ubicaciones físicas incorrectas (datos de otros archivos).\n\nPasos para Reproducir\n1 Configurar un dispositivo con una partición de datos de usuario formateada en F2FS\n2 Compilar stress-ng desde HTTPS://github.com/ColinIanKing/stress-ng\n3 Ejecutar la prueba de estrés de intercambio: (dispositivos Android)\nadb shell 'cd /data/stressng; ./stress-ng-64 --metrics-brief --timeout 60 --swap 0'\n\nRegistro:\n1 Ftrace muestra que en el kernel 6.6, solo la primera extensión se mapea durante la segunda llamada a f2fs_map_blocks en check_swap_activate():\nstress-ng-swap-8990: f2fs_map_blocks: ino=11002, file offset=0, start blkaddr=0x43143, len=0x1\n(Solo 4KB mapeados, no el archivo de intercambio completo)\n2 en el kernel 6.1, ambas extensiones se mapean correctamente:\nstress-ng-swap-5966: f2fs_map_blocks: ino=28011, file offset=0, start blkaddr=0x13cd4, len=0x1\nstress-ng-swap-5966: f2fs_map_blocks: ino=28011, file offset=1, start blkaddr=0x60c84b, len=0xff\n\nEl código problemático está en check_swap_activate():\nif ((pblock - SM_I(sbi)-&gt;main_blkaddr) % blks_per_sec ||\n    nr_pblocks % blks_per_sec ||\n    !f2fs_valid_pinned_area(sbi, pblock)) {\n    bool last_extent = false;\n\n    not_aligned++;\n\n    nr_pblocks = roundup(nr_pblocks, blks_per_sec);\n    if (cur_lblock + nr_pblocks &gt; sis-&gt;max)\n        nr_pblocks -= blks_per_sec;\n\n    /* esta extensión es la última */\n    if (!nr_pblocks) {\n        nr_pblocks = last_lblock - cur_lblock;\n        last_extent = true;\n    }\n\n    ret = f2fs_migrate_blocks(inode, cur_lblock, nr_pblocks);\n    if (ret) {\n        if (ret == -ENOENT)\n            ret = -EINVAL;\n        goto out;\n    }\n\n    if (!last_extent)\n        goto retry;\n}\n\nCuando la primera extensión no está alineada y roundup(nr_pblocks, blks_per_sec) excede sis-&gt;max, restamos blks_per_sec resultando en nr_pblocks = 0. El código asume incorrectamente que esta es la última extensión, establece nr_pblocks = last_lblock - cur_lblock (archivo de intercambio completo), y realiza la migración. Después de la migración, no reintenta el mapeo, por lo que las extensiones subsiguientes nunca se procesan.\n\nPara solucionar este problema, necesitamos buscar la información de mapeo de bloques después de migrar todos los bloques en la cola del archivo de intercambio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.33",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "9F91BA22-77B9-4D50-8EDF-CF73844D56F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "78063C1B-6788-4C2F-AB8B-2EE10C43515A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.13",
            "matchCriteriaId" : "6BDEF9FB-423E-49F6-991B-9277CC3AF400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.3",
            "matchCriteriaId" : "7853A337-FB2A-4E19-AB47-4E38343532AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/1ff415eef513bf12deb058fc50d57788c46c48e6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/5c145c03188bc9ba1c29e0bc4d527a5978fc47f9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/607cb9d83838d2cd9f0406c2403ed61aadf0edff",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d4534a7f6c92baaf7e12a45fc6e37332cafafc33",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fee27b69dde1a05908b350eea42937af2387c4fe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23234",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:13.790",
      "lastModified" : "2026-03-17T21:21:25.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid UAF in f2fs_write_end_io()\n\nAs syzbot reported an use-after-free issue in f2fs_write_end_io().\n\nIt is caused by below race condition:\n\nloop device\t\t\t\tumount\n- worker_thread\n - loop_process_work\n  - do_req_filebacked\n   - lo_rw_aio\n    - lo_rw_aio_complete\n     - blk_mq_end_request\n      - blk_update_request\n       - f2fs_write_end_io\n        - dec_page_count\n        - folio_end_writeback\n\t\t\t\t\t- kill_f2fs_super\n\t\t\t\t\t - kill_block_super\n\t\t\t\t\t  - f2fs_put_super\n\t\t\t\t\t : free(sbi)\n       : get_pages(, F2FS_WB_CP_DATA)\n         accessed sbi which is freed\n\nIn kill_f2fs_super(), we will drop all page caches of f2fs inodes before\ncall free(sbi), it guarantee that all folios should end its writeback, so\nit should be safe to access sbi before last folio_end_writeback().\n\nLet's relocate ckpt thread wakeup flow before folio_end_writeback() to\nresolve this issue."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nf2fs: corrección para evitar UAF en f2fs_write_end_io()\n\nComo syzbot informó un problema de uso después de liberación en f2fs_write_end_io().\n\nEs causado por la siguiente condición de carrera:\n\nloop device\t\t\t\tumount\n- worker_thread\n - loop_process_work\n  - do_req_filebacked\n   - lo_rw_aio\n    - lo_rw_aio_complete\n     - blk_mq_end_request\n      - blk_update_request\n       - f2fs_write_end_io\n        - dec_page_count\n        - folio_end_writeback\n\t\t\t\t\t- kill_f2fs_super\n\t\t\t\t\t - kill_block_super\n\t\t\t\t\t  - f2fs_put_super\n\t\t\t\t\t : free(sbi)\n       : get_pages(, F2FS_WB_CP_DATA)\n         accedió a sbi que está liberado\n\nEn kill_f2fs_super(), descartaremos todas las cachés de página de los inodos f2fs antes de llamar a free(sbi), esto garantiza que todos los folios deberían finalizar su writeback, por lo tanto, debería ser seguro acceder a sbi antes del último folio_end_writeback().\n\nReubicaremos el flujo de activación del hilo ckpt antes de folio_end_writeback() para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.13",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "23DCC9E1-82A5-4582-8791-DD10957DDA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "4A9F36A3-A685-48A0-84B4-6217052BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "C2968F55-D03F-42BE-A694-F0A37BC8CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.13",
            "matchCriteriaId" : "6BDEF9FB-423E-49F6-991B-9277CC3AF400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.3",
            "matchCriteriaId" : "7853A337-FB2A-4E19-AB47-4E38343532AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/0fb58aff0dafd6837cc91f4154f3ed6e020358fa",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/2f67ff1e15a8a4d0e4ffc6564ab20d03d7398fe9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/505e1c0530db6152cab3feef8e3e4da3d3e358c9",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/995030be4ce6338c6ff814583c14166446a64008",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a42f99be8a16b32a0bb91bb6dda212a6ad61be5d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/acc2c97fc0005846e5cf11b5ba3189fef130c9b3",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ce2739e482bce8d2c014d76c4531c877f382aa54",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cf4a9e1bc8129eb63fda5f8bdcd8d87f0bd76f42",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23235",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:13.977",
      "lastModified" : "2026-03-17T21:20:33.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix out-of-bounds access in sysfs attribute read/write\n\nSome f2fs sysfs attributes suffer from out-of-bounds memory access and\nincorrect handling of integer values whose size is not 4 bytes.\n\nFor example:\nvm:~# echo 65537 > /sys/fs/f2fs/vde/carve_out\nvm:~# cat /sys/fs/f2fs/vde/carve_out\n65537\nvm:~# echo 4294967297 > /sys/fs/f2fs/vde/atgc_age_threshold\nvm:~# cat /sys/fs/f2fs/vde/atgc_age_threshold\n1\n\ncarve_out maps to {struct f2fs_sb_info}->carve_out, which is a 8-bit\ninteger. However, the sysfs interface allows setting it to a value\nlarger than 255, resulting in an out-of-range update.\n\natgc_age_threshold maps to {struct atgc_management}->age_threshold,\nwhich is a 64-bit integer, but its sysfs interface cannot correctly set\nvalues larger than UINT_MAX.\n\nThe root causes are:\n1. __sbi_store() treats all default values as unsigned int, which\nprevents updating integers larger than 4 bytes and causes out-of-bounds\nwrites for integers smaller than 4 bytes.\n\n2. f2fs_sbi_show() also assumes all default values are unsigned int,\nleading to out-of-bounds reads and incorrect access to integers larger\nthan 4 bytes.\n\nThis patch introduces {struct f2fs_attr}->size to record the actual size\nof the integer associated with each sysfs attribute. With this\ninformation, sysfs read and write operations can correctly access and\nupdate values according to their real data size, avoiding memory\ncorruption and truncation."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nf2fs: corrige el acceso fuera de límites en la lectura/escritura de atributos sysfs\n\nAlgunos atributos sysfs de f2fs sufren de acceso a memoria fuera de límites y manejo incorrecto de valores enteros cuyo tamaño no es de 4 bytes.\n\nPor ejemplo:\nvm:~# echo 65537 &gt; /sys/fs/f2fs/vde/carve_out\nvm:~# cat /sys/fs/f2fs/vde/carve_out\n65537\nvm:~# echo 4294967297 &gt; /sys/fs/f2fs/vde/atgc_age_threshold\nvm:~# cat /sys/fs/f2fs/vde/atgc_age_threshold\n1\n\ncarve_out se mapea a {struct f2fs_sb_info}-&gt;carve_out, que es un entero de 8 bits. Sin embargo, la interfaz sysfs permite establecerlo a un valor mayor que 255, lo que resulta en una actualización fuera de rango.\n\natgc_age_threshold se mapea a {struct atgc_management}-&gt;age_threshold, que es un entero de 64 bits, pero su interfaz sysfs no puede establecer correctamente valores mayores que UINT_MAX.\n\nLas causas raíz son:\n1. __sbi_store() trata todos los valores predeterminados como unsigned int, lo que impide actualizar enteros mayores de 4 bytes y causa escrituras fuera de límites para enteros menores de 4 bytes.\n\n2. f2fs_sbi_show() también asume que todos los valores predeterminados son unsigned int, lo que lleva a lecturas fuera de límites y acceso incorrecto a enteros mayores de 4 bytes.\n\nEste parche introduce {struct f2fs_attr}-&gt;size para registrar el tamaño real del entero asociado con cada atributo sysfs. Con esta información, las operaciones de lectura y escritura de sysfs pueden acceder y actualizar valores correctamente según su tamaño de datos real, evitando la corrupción de memoria y la truncación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.12",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "EAFD18CF-3C26-4954-995A-3FEABE1DD30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "4A9F36A3-A685-48A0-84B4-6217052BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "C2968F55-D03F-42BE-A694-F0A37BC8CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.13",
            "matchCriteriaId" : "6BDEF9FB-423E-49F6-991B-9277CC3AF400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.3",
            "matchCriteriaId" : "7853A337-FB2A-4E19-AB47-4E38343532AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/3a905e183c047577b154f08a78ac3039e9454703",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/438a405fbad6882df0e34b3e1a16839a71f04240",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4ef30b9f1641c9e877792df6b049f1cf507d002d",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6a6c07a9b49e43f0df42d7118fc76aa555c73d98",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/98ea0039dbfdd00e5cc1b9a8afa40434476c0955",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/d4a594dd952df123cbdcdee9b9640d9d55e4a954",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/e85a99db9ab85dfc30d93b0ca0e9156f3127f55a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eebd72cff518ac87e660aefb8a41224bd88c32ce",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23236",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:14.173",
      "lastModified" : "2026-04-02T15:16:24.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: smscufx: properly copy ioctl memory to kernelspace\n\nThe UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from\nuserspace to kernelspace, and instead directly references the memory,\nwhich can cause problems if invalid data is passed from userspace.  Fix\nthis all up by correctly copying the memory before accessing it within\nthe kernel."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfbdev: smscufx: copiar correctamente la memoria ioctl al espacio del kernel\n\nEl ioctl UFX_IOCTL_REPORT_DAMAGE no copia correctamente los datos desde el espacio de usuario al espacio del kernel, y en su lugar referencia directamente la memoria, lo que puede causar problemas si se pasan datos inválidos desde el espacio de usuario. Soluciona todo esto copiando correctamente la memoria antes de acceder a ella dentro del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "C8DBBBFC-9692-4C23-A5E0-8F01CB6789D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "4A9F36A3-A685-48A0-84B4-6217052BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "C2968F55-D03F-42BE-A694-F0A37BC8CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.13",
            "matchCriteriaId" : "6BDEF9FB-423E-49F6-991B-9277CC3AF400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.19",
            "versionEndExcluding" : "6.19.3",
            "matchCriteriaId" : "7853A337-FB2A-4E19-AB47-4E38343532AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/061cfeb560aa3ddc174153dbe5be9d0b55eb7248",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/0634e8d650993602fc5b389ff7ac525f6542e141",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/120adae7b42faa641179270c067864544a50ab69",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/1c008ad0f0d1c1523902b9cdb08e404129677bfc",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/52917e265aa5f848212f60fc50fc504d8ef12866",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/6167af934f956d3ae1e06d61f45cd0d1004bbe1a",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a0321e6e58facb39fe191caa0e52ed9aab6a48fe",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23237",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:14.350",
      "lastModified" : "2026-03-17T21:16:04.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: classmate-laptop: Add missing NULL pointer checks\n\nIn a few places in the Classmate laptop driver, code using the accel\nobject may run before that object's address is stored in the driver\ndata of the input device using it.\n\nFor example, cmpc_accel_sensitivity_store_v4() is the \"show\" method\nof cmpc_accel_sensitivity_attr_v4 which is added in cmpc_accel_add_v4(),\nbefore calling dev_set_drvdata() for inputdev->dev.  If the sysfs\nattribute is accessed prematurely, the dev_get_drvdata(&inputdev->dev)\ncall in in cmpc_accel_sensitivity_store_v4() returns NULL which\nleads to a NULL pointer dereference going forward.\n\nMoreover, sysfs attributes using the input device are added before\ninitializing that device by cmpc_add_acpi_notify_device() and if one\nof them is accessed before running that function, a NULL pointer\ndereference will occur.\n\nFor example, cmpc_accel_sensitivity_attr_v4 is added before calling\ncmpc_add_acpi_notify_device() and if it is read prematurely, the\ndev_get_drvdata(&acpi->dev) call in cmpc_accel_sensitivity_show_v4()\nreturns NULL which leads to a NULL pointer dereference going forward.\n\nFix this by adding NULL pointer checks in all of the relevant places."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nplatform/x86: classmate-laptop: Añadir comprobaciones de puntero NULL faltantes\n\nEn algunos lugares del controlador del portátil Classmate, el código que utiliza el objeto accel puede ejecutarse antes de que la dirección de ese objeto se almacene en los datos del controlador del dispositivo de entrada que lo utiliza.\n\nPor ejemplo, cmpc_accel_sensitivity_store_v4() es el método 'show' de cmpc_accel_sensitivity_attr_v4 que se añade en cmpc_accel_add_v4(), antes de llamar a dev_set_drvdata() para inputdev-&gt;dev. Si el atributo sysfs se accede prematuramente, la llamada a dev_get_drvdata(&amp;inputdev-&gt;dev) en cmpc_accel_sensitivity_store_v4() devuelve NULL, lo que lleva a una desreferencia de puntero NULL en adelante.\n\nAdemás, los atributos sysfs que utilizan el dispositivo de entrada se añaden antes de inicializar ese dispositivo por cmpc_add_acpi_notify_device() y si se accede a uno de ellos antes de ejecutar esa función, ocurrirá una desreferencia de puntero NULL.\n\nPor ejemplo, cmpc_accel_sensitivity_attr_v4 se añade antes de llamar a cmpc_add_acpi_notify_device() y si se lee prematuramente, la llamada a dev_get_drvdata(&amp;acpi-&gt;dev) en cmpc_accel_sensitivity_show_v4() devuelve NULL, lo que lleva a una desreferencia de puntero NULL en adelante.\n\nSolucionar esto añadiendo comprobaciones de puntero NULL en todos los lugares relevantes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.33.1",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "BFD48955-39F7-4B96-818A-4935630C4521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "4A9F36A3-A685-48A0-84B4-6217052BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "C2968F55-D03F-42BE-A694-F0A37BC8CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.13",
            "matchCriteriaId" : "6BDEF9FB-423E-49F6-991B-9277CC3AF400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EF818826-D9F2-42F9-9638-9609513561A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "207306A0-19F5-4E49-945C-A5E4DD442459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE43C00-5967-44A1-ACEB-B7AF66EEBB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "B33B5E4B-FCB3-4343-B992-F0ADB853754B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D7295BBE-A9E3-44F6-9DD6-0FD6C2591E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "B220EA3F-55B3-4B6E-8285-B28ADEF50138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "C61AB348-ACF4-4F88-AC9D-BEC63B76399C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AFD58E-A261-4398-BA11-B62A091261F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5B7DFC-C36B-45D8-922C-877569FDDF43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/97528b1622b8f129574d29a571c32a3c85eafa3c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/993708fc18d0d0919db438361b4e8c1f980a8d1b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9cf4b9b8ad09d6e05307abc4e951cabdff4be652",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/af673209d43b46257540997aba042b90ef3258c0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/da6e06a5fdbabea3870d18c227734b5dea5b3be6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/eb214804f03c829decf10998e9b7dd26f4c8ab9e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/fe747d7112283f47169e9c16e751179a9b38611e",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23238",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-04T15:16:14.530",
      "lastModified" : "2026-03-17T21:15:39.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nromfs: check sb_set_blocksize() return value\n\nromfs_fill_super() ignores the return value of sb_set_blocksize(), which\ncan fail if the requested block size is incompatible with the block\ndevice's configuration.\n\nThis can be triggered by setting a loop device's block size larger than\nPAGE_SIZE using ioctl(LOOP_SET_BLOCK_SIZE, 32768), then mounting a romfs\nfilesystem on that device.\n\nWhen sb_set_blocksize(sb, ROMBSIZE) is called with ROMBSIZE=4096 but the\ndevice has logical_block_size=32768, bdev_validate_blocksize() fails\nbecause the requested size is smaller than the device's logical block\nsize. sb_set_blocksize() returns 0 (failure), but romfs ignores this and\ncontinues mounting.\n\nThe superblock's block size remains at the device's logical block size\n(32768). Later, when sb_bread() attempts I/O with this oversized block\nsize, it triggers a kernel BUG in folio_set_bh():\n\n    kernel BUG at fs/buffer.c:1582!\n    BUG_ON(size > PAGE_SIZE);\n\nFix by checking the return value of sb_set_blocksize() and failing the\nmount with -EINVAL if it returns 0."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nromfs: verificar el valor de retorno de sb_set_blocksize()\n\nromfs_fill_super() ignora el valor de retorno de sb_set_blocksize(), lo cual puede fallar si el tamaño de bloque solicitado es incompatible con la configuración del dispositivo de bloques.\n\nEsto puede ser activado al establecer el tamaño de bloque de un dispositivo de bucle mayor que PAGE_SIZE usando ioctl(LOOP_SET_BLOCK_SIZE, 32768), y luego montando un sistema de archivos romfs en ese dispositivo.\n\nCuando se llama a sb_set_blocksize(sb, ROMBSIZE) con ROMBSIZE=4096 pero el dispositivo tiene logical_block_size=32768, bdev_validate_blocksize() falla porque el tamaño solicitado es menor que el tamaño de bloque lógico del dispositivo. sb_set_blocksize() devuelve 0 (falla), pero romfs ignora esto y continúa el montaje.\n\nEl tamaño de bloque del superbloque permanece en el tamaño de bloque lógico del dispositivo (32768). Más tarde, cuando sb_bread() intenta E/S con este tamaño de bloque sobredimensionado, activa un BUG del kernel en folio_set_bh():\n\n    BUG del kernel en fs/buffer.c:1582!\n    BUG_ON(size &gt; PAGE_SIZE);\n\nSolución al verificar el valor de retorno de sb_set_blocksize() y fallar el montaje con -EINVAL si devuelve 0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12.1",
            "versionEndExcluding" : "5.10.251",
            "matchCriteriaId" : "CABFF5E9-C52A-4642-9228-1D6E483DA497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.201",
            "matchCriteriaId" : "600A89ED-86F2-48D8-BB7C-5EE7A8832FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.164",
            "matchCriteriaId" : "6892F74B-3F14-4500-9652-24A2ECB04144"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.6.127",
            "matchCriteriaId" : "4A9F36A3-A685-48A0-84B4-6217052BD058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndExcluding" : "6.12.74",
            "matchCriteriaId" : "C2968F55-D03F-42BE-A694-F0A37BC8CBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.13",
            "versionEndExcluding" : "6.18.13",
            "matchCriteriaId" : "6BDEF9FB-423E-49F6-991B-9277CC3AF400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6F62EECE-8FB1-4D57-85D8-CB9E23CF313C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F71D92C0-C023-48BD-B3B6-70B638EEE298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "13580667-0A98-40CC-B29F-D12790B91BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/2c5829cd8fbbc91568c520b666898f57cdcb8cf6",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/4b71ad7676564a94ec5f7d18298f51e8ae53db73",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/9b203b8ddd7359270e8a694d0584743555128e2c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/a381f0f61b35c8894b0bd0d6acef2d8f9b08b244",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/ab7ad7abb3660c58ffffdf07ff3bb976e7e0afa0",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/cbd9931e6456822067725354d83446c5bb813030",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/stable/c/f2521ab1f63a8c244f06a080319e5ff9a2e1bd95",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22285",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T16:16:27.443",
      "lastModified" : "2026-03-05T18:15:03.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access."
      }, {
        "lang" : "es",
        "value" : "Dell Device Management Agent (DDMA), versiones anteriores a la 26.02, contienen una vulnerabilidad de almacenamiento de contraseña en texto plano. Un atacante con altos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:device_management_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.02",
            "matchCriteriaId" : "1DB3A889-D235-4E49-A38F-A724CE03FF52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429177/dsa-2026-105",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-04T16:16:27.610",
      "lastModified" : "2026-03-05T18:13:33.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram and execute arbitrary shell code as the root account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos de shell en el altavoz inteligente Mobvoi Tichome Mini 012-18853 y 027-58389 permite a atacantes remotos enviar un datagrama UDP especialmente diseñado y ejecutar código de shell arbitrario como la cuenta root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mobvoi:tichome_mini_firmware:012-18853:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39280A9B-977F-481F-A288-B616614CA35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mobvoi:tichome_mini_firmware:027-58389:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD58E327-26FB-43D6-81AF-E881031BAAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mobvoi:tichome_mini:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E13E7A22-4418-4CF2-8021-2756C46998FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pastcompute/tichome-poc-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://web.archive.org/web/20171202094530/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-04T16:16:27.713",
      "lastModified" : "2026-03-05T18:07:05.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags (e.g., -w, -q) via the q parameter. This can be exploited to cause a Denial of Service (DoS) by exhausting system resources."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de argumentos existe en bird-lg-go antes del commit 6187a4e. El módulo traceroute utiliza shlex.Split para analizar la entrada del usuario sin validación, permitiendo a atacantes remotos inyectar banderas arbitrarias (p. ej., -w, -q) a través del parámetro q. Esto puede ser explotado para causar una denegación de servicio (DoS) agotando los recursos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xddxdd:bird-lg-go:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "1F935CE4-EC4C-4F3F-B8A8-AD423C5AB755"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xddxdd/bird-lg-go/commit/6187a4e3afce6d8c29568f8c72ca497d1f5a2b56",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xddxdd/bird-lg-go/issues/136",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-04T16:16:27.883",
      "lastModified" : "2026-03-05T18:05:02.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi transmission subsystem"
      }, {
        "lang" : "es",
        "value" : "Un problema en DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 y versiones anteriores permite a un atacante remoto causar una denegación de servicio a través del subsistema de transmisión DJI Enhanced-WiFi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dji:mavic_mini_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.0600",
            "matchCriteriaId" : "3890F836-3A05-4B4E-8F19-D0AE6550ACE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dji:mavic_mini:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B39DB8-A012-40C7-91FD-2D68670F15FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dji:spark_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.00.1000",
            "matchCriteriaId" : "31348F31-A351-4E0C-B53A-CB677588CB59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dji:spark:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994999FF-08F9-4491-A0FA-0A2AF083ADBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dji:mini_se_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.02.0000",
            "matchCriteriaId" : "926449F3-FAF5-4500-B185-7ECCBB9C575C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dji:mini_se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDA2491-54F4-4C4A-9142-DAB08E35F734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ByteMe1001/DJI-CatNect",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20005",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T17:16:18.110",
      "lastModified" : "2026-03-04T18:16:13.133",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r This vulnerability is due to incomplete parsing of the SSL handshake ingress packets. An attacker could exploit this vulnerability by sending crafted SSL handshake packets. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine restarts unexpectedly."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco están afectados por una vulnerabilidad en el motor de detección Snort 3 que podría permitir a un atacante remoto no autenticado provocar el reinicio del motor de detección Snort 3, lo que resultaría en una interrupción de la inspección de paquetes. Esta vulnerabilidad se debe a un análisis incompleto de los paquetes de entrada de handshake SSL. Un atacante podría explotar esta vulnerabilidad enviando paquetes de handshake SSL manipulados. Un exploit exitoso podría permitir al atacante provocar una condición de denegación de servicio (DoS) cuando el motor de detección Snort 3 se reinicia inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-392"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22760",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T17:16:18.450",
      "lastModified" : "2026-03-09T17:20:04.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service."
      }, {
        "lang" : "es",
        "value" : "Dell Device Management Agent (DDMA), versiones anteriores a la 26.02, contienen una vulnerabilidad de comprobación incorrecta de condiciones inusuales o excepcionales. Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:device_management_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.02",
            "matchCriteriaId" : "1DB3A889-D235-4E49-A38F-A724CE03FF52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429177/dsa-2026-105",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23601",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-04T17:16:18.610",
      "lastModified" : "2026-03-09T19:25:46.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido identificada en el manejo del cifrado inalámbrico de las transmisiones Wi-Fi. Un actor malicioso puede generar transmisiones autenticadas por clave compartida que contienen cargas útiles dirigidas mientras suplanta la identidad de un BSSID primario. La explotación exitosa permite la entrega de datos manipulados a puntos finales específicos, eludiendo la separación criptográfica estándar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndIncluding" : "8.10.0.21",
            "matchCriteriaId" : "2B8A04E5-890D-4CBC-B504-2F50294C49A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.11.0.0",
            "versionEndIncluding" : "8.12.0.6",
            "matchCriteriaId" : "33943569-C024-4615-BA2C-874DD71EC077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.13.0.0",
            "versionEndIncluding" : "8.13.1.1",
            "matchCriteriaId" : "9F95C3EA-87DF-448B-B63D-E469A38650AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.4.1.10",
            "matchCriteriaId" : "0ECE682E-B356-4960-AC0F-4C066B8CB7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0.0",
            "versionEndIncluding" : "10.7.2.2",
            "matchCriteriaId" : "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291A71D4-415C-4478-9BC1-1873ED23B6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E2884-82B9-4909-973A-2AF9796EE6A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6758409-B957-486D-96C0-BCDD91BE4E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BF9E0D-630F-40B4-9109-560CA13C981B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69298E74-9FC7-4E96-9581-2B7F5CDD8956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219C4A-855C-4CCC-9C56-499697A91B94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B96D6-2695-43E4-9956-872E0661B9ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C831D-4D5C-4A50-8101-2CFB3D1B5210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23808",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-04T17:16:18.760",
      "lastModified" : "2026-03-09T19:24:57.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en un protocolo de itinerancia inalámbrica estandarizado que podría permitir a un actor malicioso instalar una Clave Temporal de Grupo (GTK) controlada por el atacante en un dispositivo cliente. La explotación exitosa de esta vulnerabilidad podría permitir a un actor malicioso remoto realizar inyección de tramas no autorizada, eludir el aislamiento del cliente, interferir con el tráfico entre clientes y comprometer la segmentación, integridad y confidencialidad de la red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndIncluding" : "8.10.0.21",
            "matchCriteriaId" : "2B8A04E5-890D-4CBC-B504-2F50294C49A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.11.0.0",
            "versionEndIncluding" : "8.12.0.6",
            "matchCriteriaId" : "33943569-C024-4615-BA2C-874DD71EC077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.13.0.0",
            "versionEndIncluding" : "8.13.1.1",
            "matchCriteriaId" : "9F95C3EA-87DF-448B-B63D-E469A38650AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.4.1.10",
            "matchCriteriaId" : "0ECE682E-B356-4960-AC0F-4C066B8CB7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0.0",
            "versionEndIncluding" : "10.7.2.2",
            "matchCriteriaId" : "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291A71D4-415C-4478-9BC1-1873ED23B6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E2884-82B9-4909-973A-2AF9796EE6A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6758409-B957-486D-96C0-BCDD91BE4E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BF9E0D-630F-40B4-9109-560CA13C981B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69298E74-9FC7-4E96-9581-2B7F5CDD8956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219C4A-855C-4CCC-9C56-499697A91B94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B96D6-2695-43E4-9956-872E0661B9ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C831D-4D5C-4A50-8101-2CFB3D1B5210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23809",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-04T17:16:18.907",
      "lastModified" : "2026-03-09T19:22:51.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una técnica que adapta un método conocido de robo de puertos a entornos Wi-Fi que utilizan múltiples BSSID. Al aprovechar la relación entre los BSSID y sus puertos virtuales asociados, un atacante podría potencialmente eludir los controles de aislamiento entre BSSID. La explotación exitosa podría permitir a un atacante redirigir e interceptar el tráfico de red de la víctima, lo que podría resultar en escucha no autorizada, secuestro de sesión o denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndIncluding" : "8.10.0.21",
            "matchCriteriaId" : "2B8A04E5-890D-4CBC-B504-2F50294C49A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.11.0.0",
            "versionEndIncluding" : "8.12.0.6",
            "matchCriteriaId" : "33943569-C024-4615-BA2C-874DD71EC077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.13.0.0",
            "versionEndIncluding" : "8.13.1.1",
            "matchCriteriaId" : "9F95C3EA-87DF-448B-B63D-E469A38650AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.4.1.10",
            "matchCriteriaId" : "0ECE682E-B356-4960-AC0F-4C066B8CB7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0.0",
            "versionEndIncluding" : "10.7.2.2",
            "matchCriteriaId" : "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291A71D4-415C-4478-9BC1-1873ED23B6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E2884-82B9-4909-973A-2AF9796EE6A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6758409-B957-486D-96C0-BCDD91BE4E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BF9E0D-630F-40B4-9109-560CA13C981B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69298E74-9FC7-4E96-9581-2B7F5CDD8956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219C4A-855C-4CCC-9C56-499697A91B94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B96D6-2695-43E4-9956-872E0661B9ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C831D-4D5C-4A50-8101-2CFB3D1B5210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23810",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-04T17:16:19.060",
      "lastModified" : "2026-03-09T19:20:48.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-Fi frame that causes an Access Point (AP) to classify the frame as group-addressed traffic and re-encrypt it using the Group Temporal Key (GTK) associated with the victim's BSSID. Successful exploitation may enable GTK-independent traffic injection and, when combined with a port-stealing technique, allows an attacker to redirect intercepted traffic to facilitate machine-in-the-middle (MitM) attacks across BSSID boundaries."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la lógica de procesamiento de paquetes podría permitir a un atacante autenticado crear y transmitir una trama Wi-Fi maliciosa que haga que un Punto de Acceso (AP) clasifique la trama como tráfico dirigido a grupo y la vuelva a cifrar utilizando la Clave Temporal de Grupo (GTK) asociada con el BSSID de la víctima. La explotación exitosa podría permitir la inyección de tráfico independiente de GTK y, cuando se combina con una técnica de robo de puerto, permite a un atacante redirigir el tráfico interceptado para facilitar ataques de máquina en el medio (MitM) a través de los límites de BSSID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndIncluding" : "8.10.0.21",
            "matchCriteriaId" : "2B8A04E5-890D-4CBC-B504-2F50294C49A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.11.0.0",
            "versionEndIncluding" : "8.12.0.6",
            "matchCriteriaId" : "33943569-C024-4615-BA2C-874DD71EC077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.13.0.0",
            "versionEndIncluding" : "8.13.1.1",
            "matchCriteriaId" : "9F95C3EA-87DF-448B-B63D-E469A38650AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.4.1.10",
            "matchCriteriaId" : "0ECE682E-B356-4960-AC0F-4C066B8CB7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0.0",
            "versionEndIncluding" : "10.7.2.2",
            "matchCriteriaId" : "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291A71D4-415C-4478-9BC1-1873ED23B6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E2884-82B9-4909-973A-2AF9796EE6A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6758409-B957-486D-96C0-BCDD91BE4E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BF9E0D-630F-40B4-9109-560CA13C981B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69298E74-9FC7-4E96-9581-2B7F5CDD8956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219C4A-855C-4CCC-9C56-499697A91B94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B96D6-2695-43E4-9956-872E0661B9ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C831D-4D5C-4A50-8101-2CFB3D1B5210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23811",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-04T17:16:19.213",
      "lastModified" : "2026-03-09T19:19:27.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el mecanismo de aislamiento de clientes puede permitir a un atacante eludir las restricciones de comunicación de Capa 2 (L2) entre clientes y redirigir el tráfico en Capa 3 (L3). Además de eludir la aplicación de políticas, la explotación exitosa - cuando se combina con un ataque de robo de puerto - puede habilitar un ataque de Máquina en el Medio (MitM) bidireccional."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndIncluding" : "8.10.0.21",
            "matchCriteriaId" : "2B8A04E5-890D-4CBC-B504-2F50294C49A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.11.0.0",
            "versionEndIncluding" : "8.12.0.6",
            "matchCriteriaId" : "33943569-C024-4615-BA2C-874DD71EC077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.13.0.0",
            "versionEndIncluding" : "8.13.1.1",
            "matchCriteriaId" : "9F95C3EA-87DF-448B-B63D-E469A38650AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.4.1.10",
            "matchCriteriaId" : "0ECE682E-B356-4960-AC0F-4C066B8CB7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0.0",
            "versionEndIncluding" : "10.7.2.2",
            "matchCriteriaId" : "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291A71D4-415C-4478-9BC1-1873ED23B6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E2884-82B9-4909-973A-2AF9796EE6A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6758409-B957-486D-96C0-BCDD91BE4E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BF9E0D-630F-40B4-9109-560CA13C981B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69298E74-9FC7-4E96-9581-2B7F5CDD8956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219C4A-855C-4CCC-9C56-499697A91B94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B96D6-2695-43E4-9956-872E0661B9ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C831D-4D5C-4A50-8101-2CFB3D1B5210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23812",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2026-03-04T17:16:19.357",
      "lastModified" : "2026-03-09T19:14:53.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad donde un atacante que se conecta a un punto de acceso como un cliente cableado o inalámbrico estándar puede suplantar una puerta de enlace aprovechando una técnica de suplantación basada en direcciones. La explotación exitosa permite la redirección de flujos de datos, permitiendo la interceptación o modificación del tráfico destinado a la puerta de enlace de red legítima a través de una posición de Hombre en el Medio (MitM)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.4.0",
            "versionEndIncluding" : "8.10.0.21",
            "matchCriteriaId" : "2B8A04E5-890D-4CBC-B504-2F50294C49A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.11.0.0",
            "versionEndIncluding" : "8.12.0.6",
            "matchCriteriaId" : "33943569-C024-4615-BA2C-874DD71EC077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.13.0.0",
            "versionEndIncluding" : "8.13.1.1",
            "matchCriteriaId" : "9F95C3EA-87DF-448B-B63D-E469A38650AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.4.1.10",
            "matchCriteriaId" : "0ECE682E-B356-4960-AC0F-4C066B8CB7EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0.0",
            "versionEndIncluding" : "10.7.2.2",
            "matchCriteriaId" : "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291A71D4-415C-4478-9BC1-1873ED23B6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E2884-82B9-4909-973A-2AF9796EE6A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6758409-B957-486D-96C0-BCDD91BE4E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BF9E0D-630F-40B4-9109-560CA13C981B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69298E74-9FC7-4E96-9581-2B7F5CDD8956"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0219C4A-855C-4CCC-9C56-499697A91B94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4B96D6-2695-43E4-9956-872E0661B9ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18C831D-4D5C-4A50-8101-2CFB3D1B5210"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28695",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:20.887",
      "lastModified" : "2026-03-05T19:54:27.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). There is an authenticated admin RCE in Craft CMS 5.8.21 via Server-Side Template Injection using the create() Twig function combined with a Symfony Process gadget chain. The create() Twig function exposes Craft::createObject(), which allows instantiation of arbitrary PHP classes with constructor arguments. Combined with the bundled symfony/process dependency, this enables RCE. This bypasses the fix implemented for CVE-2025-57811 (patched in 5.8.7). This vulnerability is fixed in 5.9.0-beta.1 and 4.17.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Hay una RCE de administrador autenticado en Craft CMS 5.8.21 a través de Inyección de Plantilla del Lado del Servidor usando la función Twig create() combinada con una cadena de gadgets de Symfony Process. La función Twig create() expone Craft::createObject(), lo que permite la instanciación de clases PHP arbitrarias con argumentos de constructor. Combinado con la dependencia symfony/process incluida, esto habilita RCE. Esto elude la corrección implementada para CVE-2025-57811 (parcheado en 5.8.7). Esta vulnerabilidad está corregida en 5.9.0-beta.1 y 4.17.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/e31e50849ad71638e11ea55fbd1ed90ae8f8f6e0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-94rc-cqvm-m4pw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28696",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:21.050",
      "lastModified" : "2026-03-05T19:54:51.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, the GraphQL directive @parseRefs, intended to parse internal reference tags (e.g., {user:1:email}), can be abused by both authenticated users and unauthenticated guests (if a Public Schema is enabled) to access sensitive attributes of any element in the CMS. The implementation in Elements::parseRefs fails to perform authorization checks, allowing attackers to read data they are not authorized to view. This vulnerability is fixed in 4.17.0-beta.1 and 5.9.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Antes de 4.17.0-beta.1 y 5.9.0-beta.1, la directiva GraphQL @parseRefs, destinada a analizar etiquetas de referencia internas (p. ej., {user:1:email}), puede ser explotada tanto por usuarios autenticados como por invitados no autenticados (si un Esquema Público está habilitado) para acceder a atributos sensibles de cualquier elemento en el CMS. La implementación en Elements::parseRefs no realiza comprobaciones de autorización, permitiendo a los atacantes leer datos que no están autorizados a ver. Esta vulnerabilidad se corrige en 4.17.0-beta.1 y 5.9.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/4d98a07e47580f1712095825d3e3c4d67bc9f8b9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-7x43-mpfg-r9wj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28697",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:21.210",
      "lastModified" : "2026-03-05T10:37:46.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, an authenticated administrator can achieve Remote Code Execution (RCE) by injecting a Server-Side Template Injection (SSTI) payload into Twig template fields (e.g., Email Templates). By calling the craft.app.fs.write() method, an attacker can write a malicious PHP script to a web-accessible directory and subsequently access it via the browser to execute arbitrary system commands. This vulnerability is fixed in 4.17.0-beta.1 and 5.9.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Antes de 4.17.0-beta.1 y 5.9.0-beta.1, un administrador autenticado puede lograr ejecución remota de código (RCE) inyectando una carga útil de inyección de plantillas del lado del servidor (SSTI) en campos de plantilla Twig (p. ej., Plantillas de correo electrónico). Al llamar al método craft.app.fs.write(), un atacante puede escribir un script PHP malicioso en un directorio accesible por la web y posteriormente acceder a él a través del navegador para ejecutar comandos de sistema arbitrarios. Esta vulnerabilidad está corregida en 4.17.0-beta.1 y 5.9.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/9dc2a4a3ec8e9cd5e8c0d1129f36371437519197",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/pull/18216",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/pull/18219",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-v47q-jxvr-p68x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28781",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:21.370",
      "lastModified" : "2026-03-05T19:55:03.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, the entry creation process allows for Mass Assignment of the authorId attribute. A user with \"Create Entries\" permission can inject the authorIds[] (or authorId) parameter into the POST request, which the backend processes without verifying if the current user is authorized to assign authorship to others. Normally, this field is not present in the request for users without the necessary permissions. By manually adding this parameter, an attacker can attribute the new entry to any user, including Admins. This effectively \"spoofs\" the authorship. This vulnerability is fixed in 4.17.0-beta.1 and 5.9.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Antes de 4.17.0-beta.1 y 5.9.0-beta.1, el proceso de creación de entradas permite la Asignación Masiva del atributo authorId. Un usuario con permiso para 'Crear Entradas' puede inyectar el parámetro authorIds[] (o authorId) en la solicitud POST, que el backend procesa sin verificar si el usuario actual está autorizado para asignar la autoría a otros. Normalmente, este campo no está presente en la solicitud para usuarios sin los permisos necesarios. Al añadir manualmente este parámetro, un atacante puede atribuir la nueva entrada a cualquier usuario, incluidos los administradores. Esto efectivamente 'suplanta' la autoría. Esta vulnerabilidad está corregida en 4.17.0-beta.1 y 5.9.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/830b403870cd784b47ae42a3f5a16e7ac2d7f5a8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/commit/c6dcbdffaf6ab3ffe77d317336684d83699f4542",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-2xfc-g69j-x2mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28782",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:21.533",
      "lastModified" : "2026-03-05T19:55:33.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 5.9.0-beta.1 and 4.17.0-beta.1, the \"Duplicate\" entry action does not properly verify if the user has permission to perform this action on the specific target elements. Even with only \"View Entries\" permission (where the \"Duplicate\" action is restricted in the UI), a user can bypass this restriction by sending a direct request. Furthermore, this vulnerability allows duplicating other users' entries by specifying their Entry IDs. Since Entry IDs are incremental, an attacker can trivially brute-force these IDs to duplicate and access restricted content across the system. This vulnerability is fixed in 5.9.0-beta.1 and 4.17.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Antes de 5.9.0-beta.1 y 4.17.0-beta.1, la acción de entrada 'Duplicar' no verifica correctamente si el usuario tiene permiso para realizar esta acción en los elementos objetivo específicos. Incluso con solo el permiso de 'Ver Entradas' (donde la acción 'Duplicar' está restringida en la interfaz de usuario), un usuario puede eludir esta restricción enviando una solicitud directa. Además, esta vulnerabilidad permite duplicar entradas de otros usuarios especificando sus IDs de Entrada. Dado que los IDs de Entrada son incrementales, un atacante puede forzar por fuerza bruta trivialmente estos IDs para duplicar y acceder a contenido restringido en todo el sistema. Esta vulnerabilidad está corregida en 5.9.0-beta.1 y 4.17.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/fb61a91357f5761c852400185ba931f51d82783d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-jxm3-pmm2-9gf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28783",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:21.690",
      "lastModified" : "2026-03-05T20:24:42.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 5.9.0-beta.1 and 4.17.0-beta.1, Craft CMS implements a blocklist to prevent potentially dangerous PHP functions from being called via Twig non-Closure arrow functions. In order to be able to successfully execute this attack, you need to either have allowAdminChanges enabled on production, or a compromised admin account, or an account with access to the System Messages utility. Several PHP functions are not included in the blocklist, which could allow malicious actors with the required permissions to execute various types of payloads, including RCEs, arbitrary file reads, SSRFs, and SSTIs. This vulnerability is fixed in 5.9.0-beta.1 and 4.17.0-beta.1."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Antes de 5.9.0-beta.1 y 4.17.0-beta.1, Craft CMS implementa una lista de bloqueo para evitar que funciones PHP potencialmente peligrosas sean llamadas a través de funciones de flecha Twig no-Closure. Para poder ejecutar este ataque con éxito, se necesita tener allowAdminChanges habilitado en producción, o una cuenta de administrador comprometida, o una cuenta con acceso a la utilidad de Mensajes del Sistema. Varias funciones PHP no están incluidas en la lista de bloqueo, lo que podría permitir a actores maliciosos con los permisos requeridos ejecutar varios tipos de cargas útiles, incluyendo RCEs, lecturas de archivos arbitrarias, SSRFs y SSTIs. Esta vulnerabilidad está corregida en 5.9.0-beta.1 y 4.17.0-beta.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/pull/18208",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-5fvc-7894-ghp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28784",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:21.853",
      "lastModified" : "2026-03-05T10:37:57.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 5.8.22 and 4.16.18, it is possible to craft a malicious payload using the Twig map filter in text fields that accept Twig input under Settings in the Craft control panel or using the System Messages utility, which could lead to a RCE. For this to work, you must have administrator access to the Craft Control Panel, and allowAdminChanges must be enabled for this to work, which is against our recommendations for any non-dev environment. Alternatively, you can have a non-administrator account with allowAdminChanges disabled, but you have access to the System Messages utility. Users should update to the patched versions (5.8.22 and 4.16.18) to mitigate the issue."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenidos (CMS). Antes de las versiones 5.8.22 y 4.16.18, es posible crear una carga útil maliciosa utilizando el filtro map de Twig en campos de texto que aceptan entrada Twig en Ajustes en el panel de control de Craft o utilizando la utilidad Mensajes del Sistema, lo que podría conducir a una RCE. Para que esto funcione, debe tener acceso de administrador al Panel de Control de Craft, y allowAdminChanges debe estar habilitado para que esto funcione, lo cual va en contra de nuestras recomendaciones para cualquier entorno que no sea de desarrollo. Alternativamente, puede tener una cuenta no administradora con allowAdminChanges deshabilitado, pero tener acceso a la utilidad Mensajes del Sistema. Los usuarios deben actualizar a las versiones parcheadas (5.8.22 y 4.16.18) para mitigar el problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/craftcms/cms/pull/18208",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-qc86-q28f-ggww",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29069",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T17:16:22.020",
      "lastModified" : "2026-03-05T10:40:07.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a content management system (CMS). Prior to 5.9.0-beta.2 and 4.17.0-beta.2, the actionSendActivationEmail() endpoint is accessible to unauthenticated users and does not require a permission check for pending users. An attacker with no prior access can trigger activation emails for any pending user account by knowing or guessing the user ID. If the attacker controls the target user’s email address, they can activate the account and gain access to the system. This vulnerability is fixed in 5.9.0-beta.2 and 4.17.0-beta.2."
      }, {
        "lang" : "es",
        "value" : "Craft es un sistema de gestión de contenido (CMS). Antes de 5.9.0-beta.2 y 4.17.0-beta.2, el endpoint actionSendActivationEmail() es accesible para usuarios no autenticados y no requiere una verificación de permisos para usuarios pendientes. Un atacante sin acceso previo puede activar correos electrónicos de activación para cualquier cuenta de usuario pendiente al conocer o adivinar el ID de usuario. Si el atacante controla la dirección de correo electrónico del usuario objetivo, puede activar la cuenta y obtener acceso al sistema. Esta vulnerabilidad está corregida en 5.9.0-beta.2 y 4.17.0-beta.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "FD3AD543-D77F-4B2E-AF8D-1C7C724BD26D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.0.0",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "81B9164E-4845-4D81-A841-378CE4E32485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAA8227-04F8-404C-907B-B0162B325F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:4.17.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "775C3A5C-61B4-447D-86E7-BC4B7A5F1326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:5.9.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F54615-DB68-4762-8913-BB404BABF023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/c3d02d4a7246f516933f42106c0a67ce062f68d8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-234q-vvw3-mrfq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3520",
      "sourceIdentifier" : "ce714d77-add3-4f53-aff5-83d477b104bb",
      "published" : "2026-03-04T17:16:22.610",
      "lastModified" : "2026-03-09T18:03:23.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.1 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing stack overflow. Users should upgrade to version 2.1.1 to receive a patch. No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Multer es un middleware de node.js para manejar 'multipart/form-data'. Una vulnerabilidad en Multer anterior a la versión 2.1.1 permite a un atacante activar una denegación de servicio (DoS) enviando solicitudes malformadas, lo que podría causar un desbordamiento de pila. Los usuarios deben actualizar a la versión 2.1.1 para recibir un parche. No se conocen soluciones alternativas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressjs:multer:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "51E55C80-BCCC-4313-85BF-8AD0B4E36182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.openjsf.org/security-advisories.html",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/expressjs/multer/commit/7e66481f8b2e6c54b982b34c152479e096ce2752",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/expressjs/multer/security/advisories/GHSA-5528-5vmv-3xc2",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3520",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20001",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:12.243",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r\nThis vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\r\n\r\nAdministrator\r\nSecurity approver\r\nAccess admin\r\nNetwork admin"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API REST de Cisco Secure FMC Software podría permitir a un atacante remoto autenticado realizar ataques de inyección SQL en un sistema afectado.\n\nEsta vulnerabilidad se debe a una validación inadecuada de la entrada proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad enviando solicitudes manipuladas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante obtener acceso de lectura a la base de datos y leer ciertos archivos en el sistema operativo subyacente. Para explotar esta vulnerabilidad, el atacante necesitaría credenciales de usuario válidas con cualquiera de los siguientes roles:\n\nAdministrador\nAprobador de seguridad\nAdministrador de acceso\nAdministrador de red"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20002",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:12.557",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web del software Cisco Secure FMC podría permitir a un atacante remoto autenticado realizar ataques de inyección SQL en un sistema afectado. Esta vulnerabilidad se debe a una validación inadecuada de la entrada proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad enviando solicitudes manipuladas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante obtener acceso completo a la base de datos y leer ciertos archivos en el sistema operativo subyacente. Para explotar esta vulnerabilidad, el atacante necesitaría credenciales de usuario válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20003",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:12.840",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\r\n\r \r Administrator\r Security approver\r Intrusion admin\r Access admin\r Network admin"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API REST de Cisco Secure FMC Software podría permitir a un atacante remoto autenticado realizar ataques de inyección SQL en un sistema afectado. Esta vulnerabilidad se debe a una validación inadecuada de la entrada proporcionada por el usuario. Un atacante podría explotar esta vulnerabilidad enviando solicitudes manipuladas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante obtener acceso de lectura a la base de datos y leer ciertos archivos en el sistema operativo subyacente. Para explotar esta vulnerabilidad, el atacante necesitaría credenciales de usuario válidas con cualquiera de los siguientes roles:\nAdministrador\nAprobador de seguridad\nAdministrador de intrusiones\nAdministrador de acceso\nAdministrador de red"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20006",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:13.803",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper implementation of the TLS protocol. An attacker could exploit this vulnerability by sending a crafted TLS packet to an affected system. A successful exploit could allow the attacker to cause a device that is running Cisco Secure FTD Software to drop network traffic, resulting in a DoS condition.&nbsp;\r\nNote: TLS 1.3 is not affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de criptografía TLS del motor de detección Snort 3 del software Cisco Secure Firewall Threat Defense (FTD) podría permitir a un atacante remoto no autenticado provocar que el motor de detección Snort 3 se reinicie inesperadamente, lo que resultaría en una condición de denegación de servicio (DoS).\n\nEsta vulnerabilidad se debe a una implementación incorrecta del protocolo TLS. Un atacante podría explotar esta vulnerabilidad enviando un paquete TLS manipulado a un sistema afectado. Un exploit exitoso podría permitir al atacante provocar que un dispositivo que ejecuta el software Cisco Secure FTD descarte el tráfico de red, lo que resultaría en una condición de DoS.\nNota: TLS 1.3 no se ve afectado por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-388"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20007",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:14.063",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped.\r\n\r\nThis vulnerability is due to a logic error in the integration of the Snort Engine rules with Cisco Secure FTD Software that could allow different Snort rules to be hit when deep inspection of the packet is performed for the inner and outer connections. An attacker could exploit this vulnerability by sending crafted traffic to a targeted device that would hit configured Snort rules. A successful exploit could allow the attacker to send traffic to a network where it should have been denied."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la inspección profunda de paquetes de Snort 2 y Snort 3 del software Cisco Secure Cortafuegos Defensa contra Amenazas (FTD) podría permitir a un atacante remoto no autenticado eludir las reglas de Snort configuradas y permitir tráfico en la red que debería haber sido descartado.\n\nEsta vulnerabilidad se debe a un error de lógica en la integración de las reglas del motor Snort con el software Cisco Secure FTD que podría permitir que se activen diferentes reglas de Snort cuando se realiza la inspección profunda del paquete para las conexiones internas y externas. Un atacante podría explotar esta vulnerabilidad enviando tráfico manipulado a un dispositivo objetivo que activaría las reglas de Snort configuradas. Un exploit exitoso podría permitir al atacante enviar tráfico a una red donde debería haber sido denegado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20008",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:14.383",
      "lastModified" : "2026-04-16T20:13:21.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to craft Lua code that could be used on the underlying operating system as&nbsp;root.\r\n\r\nThis vulnerability exists because user-provided input is not properly sanitized. An attacker could exploit this vulnerability by crafting valid Lua code and submitting it as a malicious parameter for a CLI command. A successful exploit could allow the attacker to inject Lua code, which could lead to arbitrary code execution as the root user. To exploit this vulnerability, an attacker must have valid&nbsp;Administrator&nbsp;credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un pequeño subconjunto de comandos CLI que se utilizan en el Software Cisco Secure Firewall Adaptive Security Appliance (ASA) y el Software Cisco Secure Firewall Threat Defense (FTD) podría permitir a un atacante autenticado y local crear código Lua que podría utilizarse en el sistema operativo subyacente como root.\n\nEsta vulnerabilidad existe porque la entrada proporcionada por el usuario no se sanea correctamente. Un atacante podría explotar esta vulnerabilidad creando código Lua válido y enviándolo como un parámetro malicioso para un comando CLI. Un exploit exitoso podría permitir al atacante inyectar código Lua, lo que podría conducir a la ejecución de código arbitrario como usuario root. Para explotar esta vulnerabilidad, un atacante debe tener credenciales de Administrador válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.85",
            "matchCriteriaId" : "74292810-417D-42CC-9123-55166145E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "7EFC1809-7619-43ED-80FD-0FC28C876879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4",
            "matchCriteriaId" : "4988A136-196A-448B-A416-992803647AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.7",
            "matchCriteriaId" : "61AA6D92-28AC-41E2-8CD3-F7094A079D65"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20009",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:14.833",
      "lastModified" : "2026-04-16T20:13:12.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to log in to a Cisco Secure Firewall ASA device and execute commands as a specific user.\r\n\r\nThis vulnerability is due to insufficient validation of user input during the SSH authentication phase. An attacker could exploit this vulnerability by submitting crafted input during SSH authentication to an affected device. A successful exploit could allow the attacker to log in to the device as a specific user without the private SSH key of that user. To exploit this vulnerability, the attacker must possess a valid username and the associated public key. The private key is not required.\r\nNotes:\r\n\r\nExploitation of this vulnerability does not provide the attacker with root access.\r\nThe authentication, authorization, and accounting (AAA) configuration command auto-enable is not affected by this vulnerability.&nbsp;&nbsp;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de la pila SSH propietaria con autenticación basada en clave SSH en el software Cisco Secure Firewall Adaptive Security Appliance (ASA) podría permitir a un atacante remoto no autenticado iniciar sesión en un dispositivo Cisco Secure Firewall ASA y ejecutar comandos como un usuario específico.\n\nEsta vulnerabilidad se debe a una validación insuficiente de la entrada del usuario durante la fase de autenticación SSH. Un atacante podría explotar esta vulnerabilidad al enviar una entrada manipulada durante la autenticación SSH a un dispositivo afectado. Un exploit exitoso podría permitir al atacante iniciar sesión en el dispositivo como un usuario específico sin la clave SSH privada de ese usuario. Para explotar esta vulnerabilidad, el atacante debe poseer un nombre de usuario válido y la clave pública asociada. La clave privada no es necesaria.\nNotas:\n\nLa explotación de esta vulnerabilidad no proporciona al atacante acceso de root.\nEl comando de configuración de autenticación, autorización y contabilidad (AAA) auto-enable no se ve afectado por esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-138"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.71",
            "matchCriteriaId" : "A8F5D95D-6E80-42D2-BF57-8B3B600D6B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4.10",
            "matchCriteriaId" : "CE667ABD-2044-4C1E-9B75-4AD23BFF82FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.14",
            "matchCriteriaId" : "789BE745-9E19-49C8-9118-DAB4B43B3C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.19",
            "matchCriteriaId" : "FD31C3DC-9DE7-4845-BDC9-9AA38F6D3B64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20013",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:15.113",
      "lastModified" : "2026-04-16T20:11:44.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network.\r\n\r This vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS condition that will eventually require the device to manually reload."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica IKEv2 de Cisco Secure Cortafuegos ASA Software y Cisco Secure FTD Software podría permitir a un atacante remoto no autenticado causar una condición DoS en un dispositivo afectado que también podría impactar la disponibilidad de los servicios a dispositivos en otras partes de la red. Esta vulnerabilidad se debe al agotamiento de la memoria causado por no liberar memoria durante el procesamiento de paquetes IKEv2. Un atacante podría explotar esta vulnerabilidad enviando paquetes IKEv2 manipulados a un dispositivo afectado. Un exploit exitoso podría permitir al atacante agotar los recursos, causando una condición DoS que eventualmente requerirá que el dispositivo se reinicie manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.18.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "5EEB3313-6F7D-4FBA-A0ED-583BDD4971A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.3.20",
            "matchCriteriaId" : "5403450D-9A71-42B7-A595-B62789944D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.3",
            "matchCriteriaId" : "44DD9349-BE3E-40BD-A6F0-2775F76DCF3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "E9751FAD-D226-4FE9-BB2E-4ECEDAD95853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.10",
            "matchCriteriaId" : "5432354F-ECF5-4796-9E28-C7AE51405D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20014",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:15.557",
      "lastModified" : "2026-04-16T20:11:34.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network.\r\n\r This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust memory, causing the device to reload."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica IKEv2 de Cisco Secure Firewall ASA Software y Cisco Secure FTD Software podría permitir a un atacante remoto autenticado con credenciales de usuario VPN válidas causar una condición de DoS en un dispositivo afectado que también podría impactar la disponibilidad de los servicios a dispositivos en otras partes de la red. Esta vulnerabilidad se debe al procesamiento incorrecto de paquetes IKEv2. Un atacante podría explotar esta vulnerabilidad enviando paquetes IKEv2 manipulados y autenticados a un dispositivo afectado. Un exploit exitoso podría permitir al atacante agotar la memoria, provocando que el dispositivo se recargue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.85",
            "matchCriteriaId" : "74292810-417D-42CC-9123-55166145E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "7EFC1809-7619-43ED-80FD-0FC28C876879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4",
            "matchCriteriaId" : "4988A136-196A-448B-A416-992803647AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.9",
            "matchCriteriaId" : "FED09C17-AE2F-41DB-AB9F-537E7D22CC22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.13",
            "matchCriteriaId" : "852A0BF4-FF9A-47EE-8E3A-E31C545783F6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20015",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:15.853",
      "lastModified" : "2026-04-16T20:02:10.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may impact the availability of services to devices elsewhere in the network.\r\n\r This vulnerability is due to a memory leak when parsing IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS condition that will eventually require the device to be manually reloaded."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función IKEv2 de Cisco Secure Firewall ASA Software y Cisco Secure FTD Software podría permitir a un atacante remoto no autenticado causar una condición DoS en un dispositivo afectado que podría impactar la disponibilidad de los servicios a dispositivos en otras partes de la red. Esta vulnerabilidad se debe a una fuga de memoria al analizar paquetes IKEv2. Un atacante podría explotar esta vulnerabilidad enviando paquetes IKEv2 manipulados a un dispositivo afectado. Un exploit exitoso podría permitir al atacante agotar los recursos, causando una condición DoS que eventualmente requerirá que el dispositivo sea recargado manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.18.1",
            "versionEndExcluding" : "9.18.4.71",
            "matchCriteriaId" : "3341FE77-F3C2-4CCE-9CAE-4628BBEFA0D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4.10",
            "matchCriteriaId" : "CE667ABD-2044-4C1E-9B75-4AD23BFF82FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.13",
            "matchCriteriaId" : "6023A38F-7A2D-4DFA-A44A-EBE014EB265F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.19",
            "matchCriteriaId" : "FD31C3DC-9DE7-4845-BDC9-9AA38F6D3B64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "E9751FAD-D226-4FE9-BB2E-4ECEDAD95853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20017",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:16.140",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device.\r\n\r\nThis vulnerability is due to insufficient input validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input for a specific CLI command. A successful exploit could allow the attacker to execute commands on the underlying operating system as&nbsp;root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI de Cisco Secure FTD Software podría permitir a un atacante autenticado y local ejecutar comandos arbitrarios en el sistema operativo subyacente como root. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de los argumentos de comando proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad al enviar una entrada manipulada para un comando CLI específico. Un exploit exitoso podría permitir al atacante ejecutar comandos en el sistema operativo subyacente como root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20018",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:16.407",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating system.\r\n\r\nThis vulnerability is due to insufficient validation of the directory path during file synchronization. An attacker could exploit this vulnerability by crafting a directory path outside of the expected file location. A successful exploit could allow the attacker to create or replace any file on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad sftunnel de Cisco Secure Cortafuegos Management Center (FMC) Software y Cisco Secure Cortafuegos Amenaza Defense (FTD) Software podría permitir a un atacante remoto autenticado con privilegios administrativos escribir archivos arbitrarios como root en el sistema operativo subyacente.\n\nEsta vulnerabilidad se debe a una validación insuficiente de la ruta del directorio durante la sincronización de archivos. Un atacante podría explotar esta vulnerabilidad al crear una ruta de directorio fuera de la ubicación de archivo esperada. Un exploit exitoso podría permitir al atacante crear o reemplazar cualquier archivo en el sistema operativo subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20031",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:16.773",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo HTML Cascading Style Sheets (CSS) de ClamAV podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un manejo de errores inadecuado al dividir cadenas UTF-8. Un atacante podría explotar esta vulnerabilidad al enviar un archivo HTML manipulado para ser escaneado por ClamAV en un dispositivo afectado. Un exploit exitoso podría permitir al atacante terminar el proceso de escaneo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20039",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:17.140",
      "lastModified" : "2026-04-16T20:01:23.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to ineffective memory management of the VPN web server. An attacker could exploit this vulnerability by sending a large number of&nbsp;crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servidor web VPN de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Cisco Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una gestión de memoria ineficaz del servidor web VPN. Un atacante podría explotar esta vulnerabilidad enviando un gran número de solicitudes HTTP manipuladas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante provocar que el dispositivo se reinicie, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-244"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.84",
            "matchCriteriaId" : "4C2D2830-36F0-40F4-83C0-226BFE31AB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.57",
            "matchCriteriaId" : "36EF7E1F-54E6-4CED-B01C-B40B625528E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.3.16",
            "matchCriteriaId" : "4CDAAEF6-234F-48D4-84B6-B6D08DEE12E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.3",
            "matchCriteriaId" : "44DD9349-BE3E-40BD-A6F0-2775F76DCF3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.10",
            "matchCriteriaId" : "EA932D4F-672D-4294-B84C-0762E645AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "3B06365E-2521-4F42-9FD9-35F954833384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.10",
            "matchCriteriaId" : "5432354F-ECF5-4796-9E28-C7AE51405D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20044",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:17.580",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.\r\n\r\nThis vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this vulnerability by sending crafted input to the system CLI of the affected device. A successful exploit could allow the attacker to run arbitrary commands or code as root, even when the system is in lockdown mode. To exploit this vulnerability, the attacker must have valid administrative credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el mecanismo de bloqueo de Cisco Secure Firewall Management Center (FMC) Software podría permitir a un atacante local autenticado ejecutar comandos arbitrarios como root.\n\nEsta vulnerabilidad se debe a restricciones insuficientes en los módulos de remediación mientras está en modo de bloqueo. Un atacante podría explotar esta vulnerabilidad enviando una entrada manipulada a la CLI del sistema del dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar comandos o código arbitrarios como root, incluso cuando el sistema está en modo de bloqueo. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20049",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:17.863",
      "lastModified" : "2026-04-16T20:01:02.797",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to the allocation of an insufficiently sized block of memory. An attacker could exploit this vulnerability by sending crafted GCM-encrypted IPsec traffic to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. To exploit this vulnerability, the attacker must have valid credentials to establish a VPN connection with the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de tráfico IPsec de Intercambio de Claves de Internet versión 2 (IKEv2) cifrado con el modo Galois/Counter (GCM) del software Cisco Secure Firewall Adaptive Security Appliance (ASA) y del software Cisco Secure Firewall Threat Defense (FTD) podría permitir a un atacante remoto y autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a la asignación de un bloque de memoria de tamaño insuficiente. Un atacante podría explotar esta vulnerabilidad enviando tráfico IPsec cifrado con GCM manipulado a un dispositivo afectado. Un exploit exitoso podría permitir al atacante causar una recarga inesperada del dispositivo, lo que resultaría en una condición de DoS. Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas para establecer una conexión VPN con el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.18.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "5EEB3313-6F7D-4FBA-A0ED-583BDD4971A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.3.20",
            "matchCriteriaId" : "5403450D-9A71-42B7-A595-B62789944D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.3",
            "matchCriteriaId" : "44DD9349-BE3E-40BD-A6F0-2775F76DCF3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "E9751FAD-D226-4FE9-BB2E-4ECEDAD95853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.10",
            "matchCriteriaId" : "5432354F-ECF5-4796-9E28-C7AE51405D09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20050",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:19.173",
      "lastModified" : "2026-04-16T19:49:51.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper memory management during the inspection of TLS 1.2 encrypted traffic. An attacker could exploit this vulnerability by sending crafted TLS 1.2 encrypted traffic through an affected device. A successful exploit could allow the attacker to cause a reload of an affected device.\r\nNote: This vulnerability only affects traffic that is encrypted by TLS 1.2. Other versions of TLS are not affected."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de exclusión Do Not Decrypt de la función de descifrado SSL de Cisco Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una gestión de memoria inadecuada durante la inspección del tráfico cifrado TLS 1.2. Un atacante podría explotar esta vulnerabilidad enviando tráfico cifrado TLS 1.2 manipulado a través de un dispositivo afectado. Un exploit exitoso podría permitir al atacante causar una recarga de un dispositivo afectado.\nNota: Esta vulnerabilidad solo afecta al tráfico que está cifrado por TLS 1.2. Otras versiones de TLS no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.4",
            "matchCriteriaId" : "871E2221-582A-423C-B867-4F2F9F35D944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20052",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:19.420",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart.\r\n\r\nThis vulnerability is due to a logic error in memory management when a device is performing Snort 3 SSL packet inspection. An attacker could exploit this vulnerability by sending crafted SSL packets&nbsp;through an established connection to be parsed by the Snort 3 Detection Engine. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo de la gestión de memoria para el Motor de Detección Snort 3 del software Cisco Secure Cortafuegos Defensa contra Amenazas (FTD) podría permitir a un atacante remoto no autenticado causar que el Motor de Detección Snort 3 se reinicie.\n\nEsta vulnerabilidad se debe a un error de lógica en la gestión de memoria cuando un dispositivo está realizando inspección de paquetes SSL de Snort 3. Un atacante podría explotar esta vulnerabilidad enviando paquetes SSL manipulados a través de una conexión establecida para ser analizados por el Motor de Detección Snort 3. Un exploit exitoso podría permitir al atacante causar una condición de denegación de servicio (DoS) cuando el Motor de Detección Snort 3 se reinicia inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20053",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:19.607",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\r\n\r\nThis vulnerability is due to improper range checking when decompressing VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause an overflow of heap data, which could cause a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco están afectados por una vulnerabilidad en la característica VBA de Snort 3 que podría permitir a un atacante remoto no autenticado provocar la caída del motor de detección de Snort 3.\n\nEsta vulnerabilidad se debe a una comprobación de rango incorrecta al descomprimir datos VBA, que son controlados por el usuario. Un atacante podría explotar esta vulnerabilidad enviando datos VBA manipulados al motor de detección de Snort 3 en el dispositivo objetivo. Un exploit exitoso podría permitir al atacante provocar un desbordamiento de datos en el heap, lo que podría causar una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20054",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:19.920",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.&nbsp;\r\n\r\nThis vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to enter an infinite loop, causing a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos de Cisco se ven afectados por una vulnerabilidad en la característica VBA de Snort 3 que podría permitir a un atacante remoto no autenticado provocar la caída del motor de detección de Snort 3.\n\nEsta vulnerabilidad se debe a una comprobación de errores incorrecta al descomprimir datos VBA. Un atacante podría explotar esta vulnerabilidad enviando datos VBA manipulados al motor de detección de Snort 3 en el dispositivo objetivo. Un exploit exitoso podría permitir al atacante provocar que el motor de detección de Snort 3 entre en un bucle infinito, causando una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20057",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:20.320",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.&nbsp;\r\n&nbsp;\r\nThis vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se ven afectados por una vulnerabilidad en la característica de Visual Basic para Aplicaciones (VBA) de Snort 3 que podría permitir a un atacante remoto no autenticado causar la caída del motor de detección de Snort 3.\n\nEsta vulnerabilidad se debe a la falta de una comprobación de errores adecuada al descomprimir datos VBA. Un atacante podría explotar esta vulnerabilidad enviando datos VBA manipulados al motor de detección de Snort 3 en el dispositivo objetivo. Un exploit exitoso podría permitir al atacante causar que el motor de detección de Snort 3 se reinicie inesperadamente, provocando una condición de denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20058",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:20.643",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\r\n\r\nThese vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se ven afectados por vulnerabilidades en la característica VBA de Snort 3 que podrían permitir a un atacante remoto no autenticado provocar la caída del motor de detección de Snort 3.\n\nEstas vulnerabilidades se deben a una comprobación de errores incorrecta al descomprimir datos VBA. Un atacante podría explotar estas vulnerabilidades enviando datos VBA manipulados al motor de detección de Snort 3 en el dispositivo objetivo. Un exploit exitoso podría permitir al atacante provocar que el motor de detección de Snort 3 se reinicie inesperadamente, causando una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-786"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20062",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:20.910",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with administrative privileges in one context to copy files to or from another context, including configuration files.\r  \r This vulnerability is due to improper access controls for Secure Copy Protocol (SCP) operations when the CiscoSSH stack is enabled. An attacker could exploit this vulnerability by authenticating to a non-admin context of the device and issuing crafted SCP copy commands in that non-admin context. A successful exploit could allow the attacker to read, create, or overwrite sensitive files that belong to another context, including the admin and system contexts. The attacker cannot directly impact the availability of services pertaining to other contexts. To exploit this vulnerability, the attacker must have valid administrative credentials for a non-admin context.\r  \r Note: An attacker cannot list or enumerate files from another context and would need to know the exact file path, which increases the complexity of a successful attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del software Cisco Secure Cortafuegos Adaptive Security Appliance (ASA) en modo de contexto múltiple podría permitir a un atacante local autenticado con privilegios administrativos en un contexto copiar archivos hacia o desde otro contexto, incluyendo archivos de configuración. Esta vulnerabilidad se debe a controles de acceso inadecuados para operaciones del Protocolo de Copia Segura (SCP) cuando la pila CiscoSSH está habilitada. Un atacante podría explotar esta vulnerabilidad autenticándose en un contexto no administrativo del dispositivo y emitiendo comandos SCP de copia manipulados en ese contexto no administrativo. Un exploit exitoso podría permitir al atacante leer, crear o sobrescribir archivos sensibles que pertenecen a otro contexto, incluyendo los contextos de administrador y de sistema. El atacante no puede impactar directamente la disponibilidad de los servicios pertenecientes a otros contextos. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas para un contexto no administrativo. Nota: Un atacante no puede listar o enumerar archivos de otro contexto y necesitaría conocer la ruta exacta del archivo, lo que aumenta la complejidad de un ataque exitoso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-279"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20063",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:21.170",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device.\r\n\r\nThis vulnerability is due to insufficient input validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input for a specific CLI command. A successful exploit could allow the attacker to execute commands on the underlying operating system as root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI de Cisco Secure FTD Software podría permitir a un atacante autenticado y local ejecutar comandos arbitrarios en el sistema operativo subyacente como root. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de los argumentos de comando proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad al enviar entrada manipulada para un comando CLI específico. Un exploit exitoso podría permitir al atacante ejecutar comandos en el sistema operativo subyacente como root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20065",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:21.350",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in the binder module initialization logic of the Snort Detection Engine. An attacker could exploit this vulnerability by sending certain packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se ven afectados por una vulnerabilidad en el motor de detección Snort 3 que podría permitir a un atacante remoto no autenticado provocar que el motor de detección Snort 3 se reinicie, lo que resultaría en una interrupción de la inspección de paquetes.\n\nEsta vulnerabilidad se debe a un error en la lógica de inicialización del módulo 'binder' del motor de detección Snort. Un atacante podría explotar esta vulnerabilidad al enviar ciertos paquetes a través de una conexión establecida que es analizada por Snort 3. Un exploit exitoso podría permitir al atacante provocar una condición de DoS cuando el motor de detección Snort 3 se reinicia inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20066",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:21.670",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in the JSTokenizer normalization logic when the HTTP inspection normalizes JavaScript. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly. JSTokenizer is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se ven afectados por una vulnerabilidad en el motor de detección Snort 3 que podría permitir a un atacante remoto no autenticado provocar el reinicio del motor de detección Snort 3, lo que resultaría en una interrupción de la inspección de paquetes.\n\nEsta vulnerabilidad se debe a un error en la lógica de normalización de JSTokenizer cuando la inspección HTTP normaliza JavaScript. Un atacante podría explotar esta vulnerabilidad enviando paquetes HTTP manipulados a través de una conexión establecida que es analizada por Snort 3. Un exploit exitoso podría permitir al atacante provocar una condición de DoS cuando el motor de detección Snort 3 se reinicia inesperadamente. JSTokenizer no está habilitado por defecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20067",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:21.950",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.&nbsp;\r\n\r\nThis vulnerability is due to incomplete error checking when parsing the Multicast DNS fields of the HTTP header. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se ven afectados por una vulnerabilidad en el motor de detección de Snort 3 que podría permitir a un atacante remoto no autenticado provocar el reinicio del motor de detección de Snort 3, lo que resultaría en una interrupción de la inspección de paquetes.\n\nEsta vulnerabilidad se debe a una comprobación de errores incompleta al analizar los campos de Multicast DNS del encabezado HTTP. Un atacante podría explotar esta vulnerabilidad enviando paquetes HTTP manipulados a través de una conexión establecida para ser analizados por Snort 3. Un exploit exitoso podría permitir al atacante causar una condición de DoS cuando el motor de detección de Snort 3 se reinicia inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20068",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:22.330",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to incomplete error checking when parsing remote procedure call (RPC) data. An attacker could exploit this vulnerability by sending crafted RPC packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos Cisco se ven afectados por una vulnerabilidad en el motor de detección de Snort 3 que podría permitir a un atacante remoto no autenticado provocar el reinicio del motor de detección de Snort 3, lo que resultaría en una interrupción de la inspección de paquetes.\n\nEsta vulnerabilidad se debe a una comprobación de errores incompleta al analizar datos de llamadas a procedimiento remoto (RPC). Un atacante podría explotar esta vulnerabilidad enviando paquetes RPC manipulados a través de una conexión establecida para ser analizados por Snort 3. Un exploit exitoso podría permitir al atacante causar una condición de DoS cuando el motor de detección de Snort 3 se reinicia inesperadamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20069",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:22.717",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device.\r\n\r\nThis vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by persuading a user to visit a website that is designed to pass malicious HTTP requests to a device that is running Cisco Secure Firewall ASA Software or Cisco Secure FTD Software and has web services endpoints supporting VPN features enabled. A successful exploit could allow the attacker to reflect malicious input from the affected device to the browser that is in use and conduct browser-based attacks, including cross-site scripting (XSS) attacks. The attacker is not able to directly impact the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de servicios web VPN de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Cisco Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado realizar ataques basados en el navegador contra los usuarios de un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación incorrecta de las solicitudes HTTP. Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario para que visite un sitio web diseñado para pasar solicitudes HTTP maliciosas a un dispositivo que ejecuta Cisco Secure Firewall ASA Software o Cisco Secure FTD Software y tiene habilitados los puntos finales de servicios web que admiten funciones VPN. Un exploit exitoso podría permitir al atacante reflejar entradas maliciosas desde el dispositivo afectado al navegador en uso y realizar ataques basados en el navegador, incluyendo ataques de cross-site scripting (XSS). El atacante no puede impactar directamente el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20070",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:23.170",
      "lastModified" : "2026-05-04T17:24:04.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a browser that is accessing an affected device.&nbsp;\r\n\r\nThis vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by persuading a user to follow a link to a malicious website that is designed to submit malicious input to the affected application. A successful exploit could allow the attacker to execute arbitrary HTML or script code in the browser in the context of the VPN web server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de servicios web VPN de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Cisco Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado realizar un ataque de cross-site scripting (XSS) contra un navegador que está accediendo a un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación incorrecta de la entrada proporcionada por el usuario en las solicitudes HTTP. Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario para que siga un enlace a un sitio web malicioso que está diseñado para enviar entrada maliciosa a la aplicación afectada. Un exploit exitoso podría permitir al atacante ejecutar código HTML o de script arbitrario en el navegador en el contexto del servidor web VPN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28945AE6-CB65-4A0D-AE38-5C1A1227D73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F141B289-C7AF-4070-BD5A-9B8D9CE92BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1A151-7956-4220-A441-A581308A1AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D7ED38-EACB-4CE1-A314-E3A5A66A5E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B13EF7-E390-4182-AC11-2E0084F1D856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965B17A8-C299-4471-BD2F-09482141F78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A9223-8F53-4DB3-AAE9-932CE7D3A242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E46EACC-A478-462D-814C-D8CA1B38B1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD60FF-AE36-403D-9F1C-16013699CEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B822E8-C6AF-47F6-818A-CB35D257E27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E5BEF-F913-486B-B72C-734572690132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36793D3-8B6B-4997-9DD3-8F9C05C1E9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8F5EC7-7170-4923-BA00-54833890DF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2847D07-B302-4C60-816B-F9151E8233B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5E2546-D4DE-485B-924A-A47CF8C7B999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD37172-2574-4D68-BEF2-837217BCF235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4EC4B-B944-41FE-B4D3-8F0117F17592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C34FC-3194-4420-8642-FB7B055A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678E4AE4-D9FB-434D-8A69-8541140BA034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D949A9-AF15-403F-9A1B-1E517553A03D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DF0B07-8C2A-4341-8AFF-DE7E5E5B3A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6BD0EE-649E-4ED6-A09C-8364335DEF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE11554-FE3C-4C8B-8986-5D88E4967342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C11983-22A8-4859-A240-571A7815FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD0B0A-2B91-45DD-9522-8D1D3850CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7026F0E-72A7-4CDF-BADC-E34FE6FADC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B85369-FBAE-456C-BC99-5418B043688A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86434346-D5F0-49BA-803E-244C3266E361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FA7B3C-002D-4755-B323-CA24B770A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CB7EBC-F3D5-4855-A8D8-BA5AB21FD719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5530C-DF29-421B-9712-3454C1769446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41170977-FEEA-4B51-BF98-8493096CD691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05791F9-0B31-4C4C-A9BA-9268CAA45FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D975CBA-7F01-4A4C-991B-9571410C4F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D7AF29-4E08-4BFD-AFE0-994309E66F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EFA476-5021-4A00-859E-1643009D6156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3A5DC-A237-46E4-A4E5-F135482F984A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B166867E-E51B-46E3-A6E2-B10E67364058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE51492-8C9B-459E-9F80-64F426009905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCA75A6-0A3E-4393-8884-9F3CE190641E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3C12D3-7662-46C5-9E88-D1BE6CF605E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046B53A0-6BC1-461A-9C28-C534CE12C4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA889E1-4E8F-4ECE-88AC-7A240D5CBF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1C767F-3E06-43B7-A0CC-D51D97A053EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A950B0-A7CA-4CE7-A393-A18C8C41B08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E221CB-BD0F-4AEE-8646-998B75647714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225382DE-2919-48F4-9CC0-DE685EAAFDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA2DFE7-F478-46EC-9832-4B2C738FC879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FE5927-2421-4CBE-97EA-6AED892DA1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF2227-3C50-4FD1-98DB-21196E75D1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5460064F-FF50-4F54-A8DF-180C76AF9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1A4F4-899E-4487-AB1C-0A8AE66306D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6B883A-A3A8-4CF0-890C-DA0DC90F769E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA57063-99EE-4BF7-BA79-1B1B40B18423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF954A-E747-4892-8345-E306B81925B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D619BF54-1BA9-45D0-A876-92D7010088A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EA365-DED5-4436-AAC2-5553529DE700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94F400-5A35-41F5-B37F-E9DA6F87ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5364CB94-BEA3-4E9A-A2F9-EE96A2D7F8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FD5D12-CF1A-4990-99B3-1840EFBA5611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2D11D-FF08-44E4-BF67-D8DD1E701FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788D156-1F1F-4A08-848B-257BC4CCE000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795ED164-7800-4D50-8E37-665BE30190D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0664B8-1670-4F47-A01E-089D05A9618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6826018-5620-4924-BE92-6A245378F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49A07CF-12BA-481C-B5FF-754520080A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203C7D1-AA92-4367-B7A5-EBAE6B76EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0064C97F-1140-43AC-8229-C8CCC367DC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9296D33-D59A-463D-9722-9D4C3F720E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F66CCA-0982-4107-BC5B-79D727479343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B80698-1E76-4B13-AB83-A03FF8C785FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7106C567-726C-4399-ABE0-4A26B9572D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5EEF62-DFD3-4E08-8959-2BCD4B1308CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F3B551-06B1-4FF9-8FBB-0A87C34F3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA208DF-8B13-4422-96C5-97F2926D7ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC59D76-6A4E-4B3D-84F5-A5F4FE3D92AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC0C3DC-4761-488A-90A9-6EA45EE61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EE065B-F8B6-4125-8486-B2EE0566B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245DEF8-64BE-47C9-AA3C-DF3F7F92A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A52991-802D-46FB-A508-5616BA1CEB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E08AAC-9C5E-4D18-817C-C466D1D6C4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A3B6F-DDAB-4A2F-8430-9E1F352D755F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBF14DD-0654-47F3-A698-020397A1EAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8920FFA0-1F84-44FE-A776-4FFA654D8419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7586BFE-973B-4481-A004-20EB1FEB2D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8888B7CE-79FE-4321-98A3-AA5501C754DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB881137-81E4-4644-82D1-BD42E1499A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3C5D5-69BD-4EEF-83DD-E7469D9BB1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B73F03-93B6-48C3-BF97-FEAF26895A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274ABBDA-21D4-4077-ACEA-740C3D52B6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99044B-1DAE-4250-A3EB-98F25A5F46CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77C9A39-1494-4897-8A2D-6A9D197EEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EDF4D3-6D9E-4D1F-A6F8-BFA799A6CC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF6BC52-543B-4DA9-A447-9A28DFEDAF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB42A9-9DCD-4987-8E59-916E1A377510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20073",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:23.640",
      "lastModified" : "2026-05-04T17:08:21.170",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device.\r\n\r\nThis vulnerability is due to improper error handling when an affected device that is joining a cluster runs out of memory while replicating access control rules. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el software Cisco Secure Firewall Adaptive Security Appliance (ASA) y el software Cisco Secure Firewall Threat Defense (FTD) podría permitir a un atacante remoto no autenticado enviar tráfico que debería ser denegado a través de un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un manejo de errores inadecuado cuando un dispositivo afectado que se está uniendo a un clúster se queda sin memoria mientras replica reglas de control de acceso. Un atacante podría explotar esta vulnerabilidad enviando tráfico que debería ser bloqueado a través del dispositivo. Un exploit exitoso podría permitir al atacante eludir los controles de acceso y alcanzar dispositivos en redes protegidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28945AE6-CB65-4A0D-AE38-5C1A1227D73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1A151-7956-4220-A441-A581308A1AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D7ED38-EACB-4CE1-A314-E3A5A66A5E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B13EF7-E390-4182-AC11-2E0084F1D856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A9223-8F53-4DB3-AAE9-932CE7D3A242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E46EACC-A478-462D-814C-D8CA1B38B1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD60FF-AE36-403D-9F1C-16013699CEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B822E8-C6AF-47F6-818A-CB35D257E27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E5BEF-F913-486B-B72C-734572690132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36793D3-8B6B-4997-9DD3-8F9C05C1E9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8F5EC7-7170-4923-BA00-54833890DF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2847D07-B302-4C60-816B-F9151E8233B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5E2546-D4DE-485B-924A-A47CF8C7B999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4EC4B-B944-41FE-B4D3-8F0117F17592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C34FC-3194-4420-8642-FB7B055A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678E4AE4-D9FB-434D-8A69-8541140BA034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D949A9-AF15-403F-9A1B-1E517553A03D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DF0B07-8C2A-4341-8AFF-DE7E5E5B3A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6BD0EE-649E-4ED6-A09C-8364335DEF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE11554-FE3C-4C8B-8986-5D88E4967342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C11983-22A8-4859-A240-571A7815FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD0B0A-2B91-45DD-9522-8D1D3850CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7026F0E-72A7-4CDF-BADC-E34FE6FADC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B85369-FBAE-456C-BC99-5418B043688A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86434346-D5F0-49BA-803E-244C3266E361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FA7B3C-002D-4755-B323-CA24B770A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CB7EBC-F3D5-4855-A8D8-BA5AB21FD719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5530C-DF29-421B-9712-3454C1769446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41170977-FEEA-4B51-BF98-8493096CD691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05791F9-0B31-4C4C-A9BA-9268CAA45FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D975CBA-7F01-4A4C-991B-9571410C4F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D7AF29-4E08-4BFD-AFE0-994309E66F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EFA476-5021-4A00-859E-1643009D6156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3A5DC-A237-46E4-A4E5-F135482F984A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B166867E-E51B-46E3-A6E2-B10E67364058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE51492-8C9B-459E-9F80-64F426009905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCA75A6-0A3E-4393-8884-9F3CE190641E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3C12D3-7662-46C5-9E88-D1BE6CF605E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046B53A0-6BC1-461A-9C28-C534CE12C4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA889E1-4E8F-4ECE-88AC-7A240D5CBF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1C767F-3E06-43B7-A0CC-D51D97A053EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A950B0-A7CA-4CE7-A393-A18C8C41B08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E221CB-BD0F-4AEE-8646-998B75647714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225382DE-2919-48F4-9CC0-DE685EAAFDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA2DFE7-F478-46EC-9832-4B2C738FC879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FE5927-2421-4CBE-97EA-6AED892DA1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF2227-3C50-4FD1-98DB-21196E75D1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5460064F-FF50-4F54-A8DF-180C76AF9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1A4F4-899E-4487-AB1C-0A8AE66306D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6B883A-A3A8-4CF0-890C-DA0DC90F769E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA57063-99EE-4BF7-BA79-1B1B40B18423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF954A-E747-4892-8345-E306B81925B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D619BF54-1BA9-45D0-A876-92D7010088A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EA365-DED5-4436-AAC2-5553529DE700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94F400-5A35-41F5-B37F-E9DA6F87ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5364CB94-BEA3-4E9A-A2F9-EE96A2D7F8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FD5D12-CF1A-4990-99B3-1840EFBA5611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2D11D-FF08-44E4-BF67-D8DD1E701FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788D156-1F1F-4A08-848B-257BC4CCE000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795ED164-7800-4D50-8E37-665BE30190D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0664B8-1670-4F47-A01E-089D05A9618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6826018-5620-4924-BE92-6A245378F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49A07CF-12BA-481C-B5FF-754520080A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203C7D1-AA92-4367-B7A5-EBAE6B76EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0064C97F-1140-43AC-8229-C8CCC367DC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9296D33-D59A-463D-9722-9D4C3F720E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F66CCA-0982-4107-BC5B-79D727479343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B80698-1E76-4B13-AB83-A03FF8C785FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7106C567-726C-4399-ABE0-4A26B9572D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5EEF62-DFD3-4E08-8959-2BCD4B1308CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F3B551-06B1-4FF9-8FBB-0A87C34F3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA208DF-8B13-4422-96C5-97F2926D7ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC0C3DC-4761-488A-90A9-6EA45EE61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EE065B-F8B6-4125-8486-B2EE0566B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245DEF8-64BE-47C9-AA3C-DF3F7F92A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A52991-802D-46FB-A508-5616BA1CEB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E08AAC-9C5E-4D18-817C-C466D1D6C4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A3B6F-DDAB-4A2F-8430-9E1F352D755F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBF14DD-0654-47F3-A698-020397A1EAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8920FFA0-1F84-44FE-A776-4FFA654D8419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7586BFE-973B-4481-A004-20EB1FEB2D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8888B7CE-79FE-4321-98A3-AA5501C754DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB881137-81E4-4644-82D1-BD42E1499A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3C5D5-69BD-4EEF-83DD-E7469D9BB1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B73F03-93B6-48C3-BF97-FEAF26895A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274ABBDA-21D4-4077-ACEA-740C3D52B6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99044B-1DAE-4250-A3EB-98F25A5F46CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77C9A39-1494-4897-8A2D-6A9D197EEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EDF4D3-6D9E-4D1F-A6F8-BFA799A6CC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF6BC52-543B-4DA9-A447-9A28DFEDAF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB42A9-9DCD-4987-8E59-916E1A377510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20079",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:24.230",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\r\n\r This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz web de Cisco Secure Firewall Management Center (FMC) Software podría permitir a un atacante remoto no autenticado eludir la autenticación y ejecutar archivos de script en un dispositivo afectado para obtener acceso de root al sistema operativo subyacente. Esta vulnerabilidad se debe a un proceso de sistema inadecuado que se crea al iniciar. Un atacante podría explotar esta vulnerabilidad enviando solicitudes HTTP manipuladas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar una variedad de scripts y comandos que permiten acceso de root al dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20082",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:24.483",
      "lastModified" : "2026-05-04T17:03:36.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly.\r\n\r This vulnerability is due to improper handling of new, incoming TCP connections that are destined to management or data interfaces when the device is under a TCP SYN flood attack. An attacker could exploit this vulnerability by sending a crafted stream of traffic to an affected device. A successful exploit could allow the attacker to prevent all incoming TCP connections to the device from being established, including remote management access, Remote Access VPN (RAVPN) connections, and all network protocols that are TCP-based. This results in a denial of service (DoS) condition for affected features."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo de los límites de conexión embrionaria en el software Cisco Secure Firewall Adaptive Security Appliance (ASA) podría permitir a un atacante remoto no autenticado causar que los paquetes TCP SYN entrantes sean descartados incorrectamente. Esta vulnerabilidad se debe a un manejo inadecuado de las nuevas conexiones TCP entrantes que están destinadas a interfaces de gestión o de datos cuando el dispositivo está bajo un ataque de inundación TCP SYN. Un atacante podría explotar esta vulnerabilidad enviando un flujo de tráfico manipulado a un dispositivo afectado. Un exploit exitoso podría permitir al atacante evitar que se establezcan todas las conexiones TCP entrantes al dispositivo, incluyendo el acceso de gestión remota, las conexiones de VPN de Acceso Remoto (RAVPN) y todos los protocolos de red basados en TCP. Esto resulta en una condición de denegación de servicio (DoS) para las características afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.20.4.14",
            "versionEndExcluding" : "9.20.4.19",
            "matchCriteriaId" : "3C406217-1C8A-49CD-8A46-2AD883D21035"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20100",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:24.653",
      "lastModified" : "2026-05-04T17:01:10.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This does not affect the management or MUS interfaces.\r\n\r This vulnerability is due to trusting user input without validation in the LUA interprerter. An attacker could exploit this vulnerability by sending crafted HTTP packets to the Remote Access SSL VPN server. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el intérprete LUA de la función VPN SSL de Acceso Remoto de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto autenticado con una conexión VPN válida provocar que el dispositivo se reinicie inesperadamente, lo que resultaría en una condición de denegación de servicio (DoS). Esto no afecta a las interfaces de gestión o MUS. Esta vulnerabilidad se debe a la confianza en la entrada del usuario sin validación en el intérprete LUA. Un atacante podría explotar esta vulnerabilidad enviando paquetes HTTP manipulados al servidor VPN SSL de Acceso Remoto. Un exploit exitoso podría permitir al atacante provocar que el dispositivo se reinicie, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28945AE6-CB65-4A0D-AE38-5C1A1227D73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1A151-7956-4220-A441-A581308A1AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A9223-8F53-4DB3-AAE9-932CE7D3A242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E46EACC-A478-462D-814C-D8CA1B38B1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36793D3-8B6B-4997-9DD3-8F9C05C1E9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4EC4B-B944-41FE-B4D3-8F0117F17592"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DF0B07-8C2A-4341-8AFF-DE7E5E5B3A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6BD0EE-649E-4ED6-A09C-8364335DEF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE11554-FE3C-4C8B-8986-5D88E4967342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C11983-22A8-4859-A240-571A7815FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD0B0A-2B91-45DD-9522-8D1D3850CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7026F0E-72A7-4CDF-BADC-E34FE6FADC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B85369-FBAE-456C-BC99-5418B043688A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86434346-D5F0-49BA-803E-244C3266E361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FA7B3C-002D-4755-B323-CA24B770A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CB7EBC-F3D5-4855-A8D8-BA5AB21FD719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5530C-DF29-421B-9712-3454C1769446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41170977-FEEA-4B51-BF98-8493096CD691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05791F9-0B31-4C4C-A9BA-9268CAA45FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D975CBA-7F01-4A4C-991B-9571410C4F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D7AF29-4E08-4BFD-AFE0-994309E66F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EFA476-5021-4A00-859E-1643009D6156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3A5DC-A237-46E4-A4E5-F135482F984A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B166867E-E51B-46E3-A6E2-B10E67364058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE51492-8C9B-459E-9F80-64F426009905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCA75A6-0A3E-4393-8884-9F3CE190641E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3C12D3-7662-46C5-9E88-D1BE6CF605E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046B53A0-6BC1-461A-9C28-C534CE12C4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA889E1-4E8F-4ECE-88AC-7A240D5CBF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1C767F-3E06-43B7-A0CC-D51D97A053EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A950B0-A7CA-4CE7-A393-A18C8C41B08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E221CB-BD0F-4AEE-8646-998B75647714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225382DE-2919-48F4-9CC0-DE685EAAFDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA2DFE7-F478-46EC-9832-4B2C738FC879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FE5927-2421-4CBE-97EA-6AED892DA1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF2227-3C50-4FD1-98DB-21196E75D1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5460064F-FF50-4F54-A8DF-180C76AF9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1A4F4-899E-4487-AB1C-0A8AE66306D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6B883A-A3A8-4CF0-890C-DA0DC90F769E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA57063-99EE-4BF7-BA79-1B1B40B18423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF954A-E747-4892-8345-E306B81925B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D619BF54-1BA9-45D0-A876-92D7010088A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EA365-DED5-4436-AAC2-5553529DE700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94F400-5A35-41F5-B37F-E9DA6F87ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5364CB94-BEA3-4E9A-A2F9-EE96A2D7F8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FD5D12-CF1A-4990-99B3-1840EFBA5611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2D11D-FF08-44E4-BF67-D8DD1E701FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788D156-1F1F-4A08-848B-257BC4CCE000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795ED164-7800-4D50-8E37-665BE30190D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0664B8-1670-4F47-A01E-089D05A9618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6826018-5620-4924-BE92-6A245378F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49A07CF-12BA-481C-B5FF-754520080A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203C7D1-AA92-4367-B7A5-EBAE6B76EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0064C97F-1140-43AC-8229-C8CCC367DC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9296D33-D59A-463D-9722-9D4C3F720E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F66CCA-0982-4107-BC5B-79D727479343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B80698-1E76-4B13-AB83-A03FF8C785FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7106C567-726C-4399-ABE0-4A26B9572D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5EEF62-DFD3-4E08-8959-2BCD4B1308CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F3B551-06B1-4FF9-8FBB-0A87C34F3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA208DF-8B13-4422-96C5-97F2926D7ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC59D76-6A4E-4B3D-84F5-A5F4FE3D92AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC0C3DC-4761-488A-90A9-6EA45EE61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EE065B-F8B6-4125-8486-B2EE0566B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245DEF8-64BE-47C9-AA3C-DF3F7F92A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A52991-802D-46FB-A508-5616BA1CEB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E08AAC-9C5E-4D18-817C-C466D1D6C4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A3B6F-DDAB-4A2F-8430-9E1F352D755F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBF14DD-0654-47F3-A698-020397A1EAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8920FFA0-1F84-44FE-A776-4FFA654D8419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7586BFE-973B-4481-A004-20EB1FEB2D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8888B7CE-79FE-4321-98A3-AA5501C754DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB881137-81E4-4644-82D1-BD42E1499A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3C5D5-69BD-4EEF-83DD-E7469D9BB1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B73F03-93B6-48C3-BF97-FEAF26895A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274ABBDA-21D4-4077-ACEA-740C3D52B6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99044B-1DAE-4250-A3EB-98F25A5F46CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77C9A39-1494-4897-8A2D-6A9D197EEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EDF4D3-6D9E-4D1F-A6F8-BFA799A6CC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF6BC52-543B-4DA9-A447-9A28DFEDAF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBB42A9-9DCD-4987-8E59-916E1A377510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20101",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:25.137",
      "lastModified" : "2026-04-16T20:28:29.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition.\r\n\r This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de inicio de sesión único (SSO) SAML 2.0 de Cisco Secure Firewall ASA Software y Secure FTD Software podría permitir a un atacante remoto no autenticado provocar que el dispositivo se recargue inesperadamente, lo que resultaría en una condición de DoS. Esta vulnerabilidad se debe a una comprobación de errores insuficiente al procesar mensajes SAML. Un atacante podría explotar esta vulnerabilidad enviando mensajes SAML manipulados al servicio SAML. Un exploit exitoso podría permitir al atacante provocar que el dispositivo se recargue, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.85",
            "matchCriteriaId" : "74292810-417D-42CC-9123-55166145E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "7EFC1809-7619-43ED-80FD-0FC28C876879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4",
            "matchCriteriaId" : "4988A136-196A-448B-A416-992803647AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.7",
            "matchCriteriaId" : "61AA6D92-28AC-41E2-8CD3-F7094A079D65"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20102",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:25.620",
      "lastModified" : "2026-04-16T20:28:09.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the SAML feature and access sensitive, browser-based information.\r\n\r\nThis vulnerability is due to insufficient input validation of multiple HTTP parameters. An attacker could exploit this vulnerability by persuading a user to access a malicious link. A successful exploit could allow the attacker&nbsp;to conduct a reflected XSS attack through an affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función de inicio de sesión único (SSO) SAML 2.0 de Cisco Secure Firewall ASA Software y Cisco Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado realizar un ataque de cross-site scripting (XSS) contra la función SAML y acceder a información sensible basada en el navegador.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de múltiples parámetros HTTP. Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario para que acceda a un enlace malicioso. Un exploit exitoso podría permitir al atacante realizar un ataque XSS reflejado a través de un dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.16.1",
            "versionEndExcluding" : "9.16.4.89",
            "matchCriteriaId" : "607EC994-8748-4BD6-9FBA-9C629EEFE20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.71",
            "matchCriteriaId" : "A8F5D95D-6E80-42D2-BF57-8B3B600D6B40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.20.1",
            "versionEndExcluding" : "9.20.4.19",
            "matchCriteriaId" : "EBAD7362-E8E2-4618-89CA-50E9B0102651"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.32",
            "matchCriteriaId" : "279FE4E6-C208-48E2-9B07-DCB121C59A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.26",
            "matchCriteriaId" : "67082150-477F-4B2E-B880-069D05875DC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "14522326-0EF6-455A-8C84-C84E8C6B3F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "0943CCEB-1EA4-489B-9E62-631046B1A4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "10.0.0",
            "matchCriteriaId" : "B728650B-131B-43FD-A7F2-DAE8DAF781C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20103",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:25.840",
      "lastModified" : "2026-04-16T20:28:00.410",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust device memory resulting in a denial of service (DoS) condition to new Remote Access SSL VPN connections. This does not affect the management interface, though it may become temporarily unresponsive. \r\n\r This vulnerability is due to trusting user input without validation. An attacker could exploit this vulnerability by sending crafted packets to the Remote Access SSL VPN server. A successful exploit could allow the attacker to cause the device web interface to stop responding, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de VPN SSL de Acceso Remoto de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado agotar la memoria del dispositivo, lo que resultaría en una condición de denegación de servicio (DoS) para nuevas conexiones VPN SSL de Acceso Remoto. Esto no afecta la interfaz de gestión, aunque podría dejar de responder temporalmente. Esta vulnerabilidad se debe a confiar en la entrada del usuario sin validación. Un atacante podría explotar esta vulnerabilidad enviando paquetes manipulados al servidor VPN SSL de Acceso Remoto. Un exploit exitoso podría permitir al atacante hacer que la interfaz web del dispositivo deje de responder, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.85",
            "matchCriteriaId" : "74292810-417D-42CC-9123-55166145E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "7EFC1809-7619-43ED-80FD-0FC28C876879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4",
            "matchCriteriaId" : "4988A136-196A-448B-A416-992803647AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.7",
            "matchCriteriaId" : "61AA6D92-28AC-41E2-8CD3-F7094A079D65"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20105",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:26.200",
      "lastModified" : "2026-04-16T20:27:52.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with a valid VPN connection to exhaust device memory resulting in a denial of service (DoS) condition.This does not affect the management or MUS interfaces.\r\n\r This vulnerability is due to trusting user input without validation. An attacker could exploit this vulnerability by sending crafted packets to the Remote Access SSL VPN server. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de VPN SSL de Acceso Remoto de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto autenticado con una conexión VPN válida agotar la memoria del dispositivo, lo que resultaría en una condición de denegación de servicio (DoS). Esto no afecta las interfaces de gestión o MUS. Esta vulnerabilidad se debe a confiar en la entrada del usuario sin validación. Un atacante podría explotar esta vulnerabilidad enviando paquetes manipulados al servidor VPN SSL de Acceso Remoto. Un exploit exitoso podría permitir al atacante provocar que el dispositivo se reinicie, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.85",
            "matchCriteriaId" : "74292810-417D-42CC-9123-55166145E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "7EFC1809-7619-43ED-80FD-0FC28C876879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4",
            "matchCriteriaId" : "4988A136-196A-448B-A416-992803647AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.7",
            "matchCriteriaId" : "61AA6D92-28AC-41E2-8CD3-F7094A079D65"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20106",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:26.670",
      "lastModified" : "2026-04-16T20:27:39.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust device memory resulting in a denial of service (DoS) condition requiring a manual reboot.\r\n\r This vulnerability is due to trusting user input without validation. An attacker could exploit this vulnerability by sending crafted packets to the Remote Access SSL VPN server. A successful exploit could allow the attacker to cause the device to stop responding, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de VPN SSL de acceso remoto, gestión HTTP y MUS, de Cisco Secure Firewall Adaptive Security Appliance (ASA) Software y Secure Firewall Threat Defense (FTD) Software podría permitir a un atacante remoto no autenticado agotar la memoria del dispositivo, lo que resultaría en una condición de denegación de servicio (DoS) que requiere un reinicio manual. Esta vulnerabilidad se debe a la confianza en la entrada del usuario sin validación. Un atacante podría explotar esta vulnerabilidad enviando paquetes manipulados al servidor VPN SSL de acceso remoto. Un exploit exitoso podría permitir al atacante hacer que el dispositivo deje de responder, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndExcluding" : "9.16.4.85",
            "matchCriteriaId" : "74292810-417D-42CC-9123-55166145E91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndExcluding" : "9.18.4.66",
            "matchCriteriaId" : "7EFC1809-7619-43ED-80FD-0FC28C876879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndExcluding" : "9.20.4",
            "matchCriteriaId" : "4988A136-196A-448B-A416-992803647AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndExcluding" : "9.22.2.4",
            "matchCriteriaId" : "55B05CD4-4849-471F-ACC5-0E0478568A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndExcluding" : "9.23.1.7",
            "matchCriteriaId" : "61AA6D92-28AC-41E2-8CD3-F7094A079D65"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "A02019B1-284B-4118-A544-9AA56216E741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.11",
            "matchCriteriaId" : "3DA98A98-A084-4DB0-B08F-33EB6C8607C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "737DB8CE-EC0B-4221-A8BF-3E64702DE092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "26A29A1A-8013-4CE1-8DE5-4C82778A1D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.11",
            "matchCriteriaId" : "A267F3D1-7449-4622-91AB-F9CA2DDDB61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20131",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:27.153",
      "lastModified" : "2026-03-25T17:39:46.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root&nbsp;on an affected device.\r\n\r\nThis vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root.\r\nNote: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de gestión basada en web del software Cisco Secure Firewall Management Center (FMC) podría permitir a un atacante remoto no autenticado ejecutar código Java arbitrario como root en un dispositivo afectado.\nEsta vulnerabilidad se debe a la deserialización insegura de un flujo de bytes Java proporcionado por el usuario. Un atacante podría explotar esta vulnerabilidad enviando un objeto Java serializado diseñado a la interfaz de gestión basada en web de un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar código arbitrario en el dispositivo y elevar privilegios a root.\nNota: Si la interfaz de gestión de FMC no tiene acceso público a internet, la superficie de ataque asociada con esta vulnerabilidad se reduce."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2026-03-19",
      "cisaActionDue" : "2026-03-22",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0780AD6-4F38-4400-AA63-E41879F74B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BA5BA6-1F79-4C89-A3F4-A56E2B664AED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C7994F-AA17-467B-919E-A49F0CC9DB47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F007F6B-1EAA-468C-8159-78B020DF1E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9053FDE-A6BE-4535-AE36-A323F8B7ACA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E255975-F952-43AB-A577-B8D331DDB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFA94312-376E-4785-888F-3C07612E1DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29E73FBF-2579-4660-AFFA-7F9607004226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FAAFFB-0589-441B-8289-8B8A6E18F705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B92119-793D-4A43-A056-24DB6826E759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "093A0BC2-037C-463F-AFC5-EF11C2954EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B881B8DF-A96D-4B64-B98A-71F0D3388641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A97625-D39C-42D5-89E4-415A868A0972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E4D83B4-9697-4071-AC9F-7ADC86A6B529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F81F708-ACED-4E42-8CA9-116B5C4F5141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C86116B-8475-40A0-A507-D4A7947F5F2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98BFDB6-0884-4A5B-B2F6-102AE22665C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D21149-BF7B-4188-A336-49AA5683BDC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708A721E-11D2-4E9B-9F11-5B82F3FA742C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "943BDA7B-0E37-4914-B7B2-EDFD58FAF653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58A2DA5-3EE7-408D-AAFA-82330F0325B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA98EEC-2059-4CA9-92F1-72C1E0BB7EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C51EE7-866B-410C-B75E-EF260D5062B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1FFD07-B874-4D3C-8E2C-9A204F1E994E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5ACB9E-86AF-4EC1-9F36-A202429CD0F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1E4527-AAE2-4DA9-AFDA-6375839F7843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0AF047-EAE9-4C77-BCEF-5CB26F84C742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED03874-4071-4382-8A46-8B3A59E601FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF84E043-DF3C-4A95-8FDA-B0FDCD795377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9498087-9642-4A86-B3EE-1513C55A86E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C229AB-2851-48D4-815A-63AAB4462A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4BCFC-8237-4F5C-9863-523EE7D8619B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07693A92-7D84-45A1-ACD6-D83AE41D504B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C78050A-A5FB-427B-BF0D-0353B240A4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E76AE7-12AC-4419-AE66-43730B173B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D803EC9-26EE-4799-A435-C782C92739CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEF87CD-2335-4886-A65C-4E33775AEC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953EB81A-1B53-4A57-9F59-D4A7D37E657E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB534BC-3E4D-4484-AFD0-69524B1F07F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6514BF0-5A21-4C3A-9D9D-49677D7A2409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B291AF23-55FF-4F9A-87AC-76AA3BB3562F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4170B357-C086-483A-BC6C-CB1391FA5831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B72005B-FBF0-4B0D-975B-178B511598B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D401072-6709-4921-8918-720F28D61E24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0EA3467-4205-4C41-AF24-689330F7396B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE94E38-5F29-4AE1-8129-7F7582C2CC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEF603AD-D69B-4DD8-A7F4-6BEFD355EF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6BD1665-7824-4D98-A930-432CBDA4EAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8056E69-22FA-4935-A576-916805D90C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A80BBBE-DB5E-460A-8621-6E28D2BD6E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B33F953-FEF3-4C46-A12A-2A42D8339D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C8DF03-2280-48B8-AC1E-4AAA31A36BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CCC30D-FC39-4F59-B338-6753F6094387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE484EB-FFFF-4DBA-8C45-77635BEBCE32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C663EDB2-E632-4915-BF37-EEE22FF26ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F378A2-E599-44E7-B81F-845D84E0FDE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366D966F-B60E-46B9-AD0C-D0C0692C984F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3E6840-7B1E-45F8-9527-3DB66A9267EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBDBC61-B4B4-462F-B039-8F5C1B189AE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CB0C9D-263A-439C-BAF9-87D1EFE50184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE58474E-D8D8-468D-9866-8C67607181E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F91F5E-7049-400A-9C39-B20A639DD61D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71C054A-63FF-4858-A044-03FA72DA2C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388E9714-FCB6-41DD-A5C4-19E73AF2FBCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBDBCE8-CD5E-48BD-B61B-A36376C5A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098596D-8156-4130-9180-A48D2ECB0910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34649064-8BCE-4A61-BA3A-17CBC4690C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:7.7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CE3E9B1-4817-4734-9EE9-E16698D3F709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AE4609-A851-4B64-8506-117B0F92F7A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://aws.amazon.com/blogs/security/amazon-threat-intelligence-teams-identify-interlock-ransomware-campaign-targeting-enterprise-firewalls/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20131",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20149",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T18:16:27.427",
      "lastModified" : "2026-03-09T17:52:37.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability, and no customer action is needed.\r\n\r This vulnerability was due to improper filtering of user-supplied input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to conduct an XSS attack against the targeted user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Webex podría haber permitido a un atacante remoto no autenticado realizar un ataque de cross-site scripting (XSS). Cisco ha abordado esta vulnerabilidad y no se requiere ninguna acción por parte del cliente.\nEsta vulnerabilidad se debía a un filtrado inadecuado de la entrada proporcionada por el usuario. Antes de que esta vulnerabilidad fuera abordada, un atacante podría haber explotado esta vulnerabilidad persuadiendo a un usuario para que siguiera un enlace malicioso. Un exploit exitoso podría haber permitido al atacante realizar un ataque XSS contra el usuario objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FBBF37-C988-48FC-934B-0F615DEED6EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-TZFTbbwN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26949",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2026-03-04T18:16:29.190",
      "lastModified" : "2026-03-05T22:13:16.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges."
      }, {
        "lang" : "es",
        "value" : "Dell Device Management Agent (DDMA), versiones anteriores a la 26.02, contienen una vulnerabilidad de autorización incorrecta. Un atacante con pocos privilegios con acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de Privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:device_management_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "26.02",
            "matchCriteriaId" : "1DB3A889-D235-4E49-A38F-A724CE03FF52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000429177/dsa-2026-105",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0847",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2026-03-04T19:16:10.683",
      "lastModified" : "2026-04-28T00:34:25.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling attackers to traverse directories and access sensitive files on the server. This issue is particularly critical in scenarios where user-controlled file inputs are processed, such as in machine learning APIs, chatbots, or NLP pipelines. Exploitation of this vulnerability can lead to unauthorized access to sensitive files, including system files, SSH private keys, and API tokens, and may potentially escalate to remote code execution when combined with other vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en versiones de NLTK hasta la 3.9.2 inclusive permite la lectura arbitraria de archivos a través de salto de ruta en múltiples clases CorpusReader, incluyendo WordListCorpusReader, TaggedCorpusReader y BracketParseCorpusReader. Estas clases no logran sanear o validar correctamente las rutas de archivo, permitiendo a los atacantes recorrer directorios y acceder a archivos sensibles en el servidor. Este problema es particularmente crítico en escenarios donde se procesan entradas de archivo controladas por el usuario, como en APIs de aprendizaje automático, chatbots o pipelines de PNL. La explotación de esta vulnerabilidad puede conducir al acceso no autorizado a archivos sensibles, incluyendo archivos del sistema, claves privadas SSH y tokens de API, y puede escalar potencialmente a ejecución remota de código cuando se combina con otras vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.2",
            "matchCriteriaId" : "D07FBCBF-3A88-4B1B-AF47-76DF3B7B13B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://huntr.com/bounties/fc69914f-36a9-4c18-8503-10013b39f966",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20016",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:11.443",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device.\r\n\r This vulnerability is due to insufficient input validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input for specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la característica CLI del software Cisco FXOS para el software Cisco Secure Firewall ASA y el software Secure FTD podría permitir a un atacante local autenticado ejecutar comandos arbitrarios en el sistema operativo subyacente con privilegios de nivel de root. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas válidas en un dispositivo afectado.\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de los argumentos de comando proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad al enviar entrada manipulada para comandos CLI específicos. Un exploit exitoso podría permitir al atacante ejecutar comandos en el sistema operativo subyacente con privilegios de nivel de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20020",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:11.687",
      "lastModified" : "2026-05-04T15:07:05.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know the secret key to exploit this vulnerability.\r\n\r This vulnerability is due to insufficient input validation when processing OSPF update packets. An attacker could exploit this vulnerability by sending crafted OSPF update packets. A successful exploit could allow the attacker to create a buffer overflow, causing the affected device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo OSPF de Cisco Secure Firewall ASA Software y Cisco Secure FTD Software podría permitir a un atacante adyacente no autenticado causar que un dispositivo afectado se recargue inesperadamente, lo que resultaría en una condición de DoS. Si la autenticación OSPF está habilitada, el atacante debe conocer la clave secreta para explotar esta vulnerabilidad. Esta vulnerabilidad se debe a una validación de entrada insuficiente al procesar paquetes de actualización OSPF. Un atacante podría explotar esta vulnerabilidad enviando paquetes de actualización OSPF manipulados. Un exploit exitoso podría permitir al atacante crear un desbordamiento de búfer, causando que el dispositivo afectado se recargue, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28945AE6-CB65-4A0D-AE38-5C1A1227D73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F141B289-C7AF-4070-BD5A-9B8D9CE92BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1A151-7956-4220-A441-A581308A1AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A9223-8F53-4DB3-AAE9-932CE7D3A242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E46EACC-A478-462D-814C-D8CA1B38B1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36793D3-8B6B-4997-9DD3-8F9C05C1E9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2DF0B07-8C2A-4341-8AFF-DE7E5E5B3A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6BD0EE-649E-4ED6-A09C-8364335DEF52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE11554-FE3C-4C8B-8986-5D88E4967342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C11983-22A8-4859-A240-571A7815FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24CD0B0A-2B91-45DD-9522-8D1D3850CC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7026F0E-72A7-4CDF-BADC-E34FE6FADC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B85369-FBAE-456C-BC99-5418B043688A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86434346-D5F0-49BA-803E-244C3266E361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FA7B3C-002D-4755-B323-CA24B770A5B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CB7EBC-F3D5-4855-A8D8-BA5AB21FD719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5530C-DF29-421B-9712-3454C1769446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41170977-FEEA-4B51-BF98-8493096CD691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05791F9-0B31-4C4C-A9BA-9268CAA45FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D975CBA-7F01-4A4C-991B-9571410C4F07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D7AF29-4E08-4BFD-AFE0-994309E66F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EFA476-5021-4A00-859E-1643009D6156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E3A5DC-A237-46E4-A4E5-F135482F984A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B166867E-E51B-46E3-A6E2-B10E67364058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE51492-8C9B-459E-9F80-64F426009905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCA75A6-0A3E-4393-8884-9F3CE190641E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3C12D3-7662-46C5-9E88-D1BE6CF605E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046B53A0-6BC1-461A-9C28-C534CE12C4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA889E1-4E8F-4ECE-88AC-7A240D5CBF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1C767F-3E06-43B7-A0CC-D51D97A053EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A950B0-A7CA-4CE7-A393-A18C8C41B08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E221CB-BD0F-4AEE-8646-998B75647714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225382DE-2919-48F4-9CC0-DE685EAAFDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA2DFE7-F478-46EC-9832-4B2C738FC879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FE5927-2421-4CBE-97EA-6AED892DA1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF2227-3C50-4FD1-98DB-21196E75D1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5460064F-FF50-4F54-A8DF-180C76AF9B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B1A4F4-899E-4487-AB1C-0A8AE66306D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6B883A-A3A8-4CF0-890C-DA0DC90F769E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA57063-99EE-4BF7-BA79-1B1B40B18423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF954A-E747-4892-8345-E306B81925B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D619BF54-1BA9-45D0-A876-92D7010088A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469EA365-DED5-4436-AAC2-5553529DE700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D94F400-5A35-41F5-B37F-E9DA6F87ED8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5364CB94-BEA3-4E9A-A2F9-EE96A2D7F8AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FD5D12-CF1A-4990-99B3-1840EFBA5611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCD2D11D-FF08-44E4-BF67-D8DD1E701FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788D156-1F1F-4A08-848B-257BC4CCE000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "795ED164-7800-4D50-8E37-665BE30190D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0664B8-1670-4F47-A01E-089D05A9618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6826018-5620-4924-BE92-6A245378F610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49A07CF-12BA-481C-B5FF-754520080A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F203C7D1-AA92-4367-B7A5-EBAE6B76EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0064C97F-1140-43AC-8229-C8CCC367DC4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9296D33-D59A-463D-9722-9D4C3F720E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F66CCA-0982-4107-BC5B-79D727479343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B80698-1E76-4B13-AB83-A03FF8C785FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7106C567-726C-4399-ABE0-4A26B9572D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5EEF62-DFD3-4E08-8959-2BCD4B1308CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F3B551-06B1-4FF9-8FBB-0A87C34F3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA208DF-8B13-4422-96C5-97F2926D7ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC59D76-6A4E-4B3D-84F5-A5F4FE3D92AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC0C3DC-4761-488A-90A9-6EA45EE61526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EE065B-F8B6-4125-8486-B2EE0566B27A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5245DEF8-64BE-47C9-AA3C-DF3F7F92A89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A52991-802D-46FB-A508-5616BA1CEB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E08AAC-9C5E-4D18-817C-C466D1D6C4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A3B6F-DDAB-4A2F-8430-9E1F352D755F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBF14DD-0654-47F3-A698-020397A1EAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8920FFA0-1F84-44FE-A776-4FFA654D8419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7586BFE-973B-4481-A004-20EB1FEB2D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8888B7CE-79FE-4321-98A3-AA5501C754DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB881137-81E4-4644-82D1-BD42E1499A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3C5D5-69BD-4EEF-83DD-E7469D9BB1E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B73F03-93B6-48C3-BF97-FEAF26895A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274ABBDA-21D4-4077-ACEA-740C3D52B6F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99044B-1DAE-4250-A3EB-98F25A5F46CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77C9A39-1494-4897-8A2D-6A9D197EEC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EDF4D3-6D9E-4D1F-A6F8-BFA799A6CC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF6BC52-543B-4DA9-A447-9A28DFEDAF22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20021",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:12.150",
      "lastModified" : "2026-04-16T20:36:40.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to improperly validating input by the OSPF protocol when parsing packets. An attacker could exploit this vulnerability by by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo OSPF del software Cisco Secure Firewall Adaptive Security Appliance (ASA) y del software Cisco Secure Firewall Threat Defense (FTD) podría permitir a un atacante autenticado y adyacente agotar la memoria en un dispositivo afectado, lo que resultaría en una condición de denegación de servicio (DoS).\nEsta vulnerabilidad se debe a la validación incorrecta de la entrada por parte del protocolo OSPF al analizar paquetes. Un atacante podría explotar esta vulnerabilidad enviando paquetes OSPF manipulados a un dispositivo afectado. Un exploit exitoso podría permitir al atacante agotar la memoria en el dispositivo afectado, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "versionEndIncluding" : "9.12.4.67",
            "matchCriteriaId" : "E19306D0-10B5-43DE-8AA4-7F245F9F2797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.16.1",
            "versionEndIncluding" : "9.16.4.85",
            "matchCriteriaId" : "C1EE3F40-E21C-4604-8E5F-56C2126F4384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.17.1",
            "versionEndIncluding" : "9.17.1.46",
            "matchCriteriaId" : "1DE10C66-EC3C-482C-A8E7-2F19DC30E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.18.1",
            "versionEndIncluding" : "9.18.4.68",
            "matchCriteriaId" : "8A97D374-5334-469D-AB27-D8F7B85DE69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.1",
            "versionEndIncluding" : "9.19.1.42",
            "matchCriteriaId" : "8F2DBD2A-57A4-4DB1-8DF9-DA777382865B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.20.1",
            "versionEndIncluding" : "9.20.4.14",
            "matchCriteriaId" : "7B0958D9-D3ED-428A-A6D3-7CEB589A743E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.22.1.1",
            "versionEndIncluding" : "9.22.2.14",
            "matchCriteriaId" : "C057D2D3-0535-4E82-81AD-939B9DC2F07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.23.1",
            "versionEndIncluding" : "9.23.1.22",
            "matchCriteriaId" : "CBE65F68-D239-413F-BDDF-A976387338B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDAB447-1F2C-4983-89B2-E723A82BCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0AB352-A4ED-4DF0-B749-84078DA48FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B749B-2EFB-4734-B775-180A6E8627FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54006F46-95F3-4785-9660-C1DF21789783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B2F7C-195B-4DBF-8C3C-0F269E56CEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A81B4-FC1D-4E28-8235-7DAD7F1B1C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62E1E33-480B-44C7-8155-EF725ACE7A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01831166-3C2C-48CC-A8DE-EEE631349C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5107E77-57C9-4C7B-A974-BAF6F01BCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED851EA-1BDF-4D88-83E8-53B14F7C1FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C2F98-E719-413A-A284-5AE1B28171CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2A3A4-12A9-4280-980E-B6D932185AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5665319D-5532-4F03-8F12-4F98C5548023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5994E2A7-118C-4E08-AF03-4F2409E55AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7844A0-5EF6-4AD6-ACB8-E01D8579AC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD8A9AC-3FD8-4B30-8785-B541ADC4EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298441F6-BAB5-4116-BEAF-DEFB75A52CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E08CFF-68F5-45E6-B6F3-D111D33C5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58348A7-25EC-4023-B4CA-CAB35A3798C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE321FE-9034-4E0F-9A32-D41443A9D86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E779C6-2740-47A1-A6D5-E22C6DC7D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E794B83A-4A14-431C-B882-578CD70E412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292E681D-D4C0-4D85-B84C-4C9328FCD12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A59C5-6EC0-4BAD-B547-EFA785707050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1551BB-37A4-4383-8AA8-DA25642B7353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B6632C-4A35-4D10-B323-8C3266319114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638D2739-FAA7-4880-BC2F-BC632140E9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40098313-CC8A-49E6-8095-093881DA7107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00C3A8F-34AE-443E-9B77-0532C9F11F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F32FDA-54ED-4117-8FA7-D749140F628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BA96B9-A0DD-4065-A295-FA85A33F7E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BF5898-73CB-480B-9D6E-B6A7696A6140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7991D4E-57F8-48A6-A098-C70107C87F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D2BF71-1104-477A-B15F-3A959D46ABFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A7BB35-0AA6-403A-8D96-80FA61F13A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07AA16A-6DE0-4226-8A44-CDA8E26830D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7AC5D5-B171-4163-BFB3-02163DD8817B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AD8591-C99A-4780-A742-13CFD921F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173C2DA6-625C-465C-A080-E578539E30F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8288F62-8BEC-4318-8096-9D36817D1D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A617690D-92D7-4793-AEAC-15F31162D5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9608894-B4A7-49A1-863A-D44E53D6CE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDB77ED-AB5E-475F-A5F8-515B807E99A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE0323-AC5A-4570-9681-14CD9FB8FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6773BC9-C84C-4249-B6C3-FD39BAAA0555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFC6F7-2BA1-4F32-AD55-8BF0888FDB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291705AE-7BAE-4305-BECA-204821BF467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC683581-4B46-46A8-BBD8-CB01283641DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A816A-63D6-498B-B167-BE71F0019DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294D71C7-FFC3-4431-88AA-E03EFAE78CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8287D0-B817-4143-BE34-B3C7FEC7BDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9621C619-C4F8-4906-8A24-E560C08F6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F9C8B-35E4-459C-B31E-FCF2DAD0120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB73C40D-5A5A-4851-BEFA-71CA2865EE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AD9D74-FDDF-443D-8193-E4B5B28CC815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACA483F-52CE-4F10-8D95-F93C8C8D16F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF82E95-C8D3-402B-BC97-29EA1771D5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0350CCE9-512A-4A77-8FAB-7A8F9B061170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC55E28-36AC-4D40-BB6D-A1B53503F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F0A624-DDE8-490C-9DA4-762CD39764B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C034C-DDA4-49E1-B8B4-62F3B5C00173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094896F-425A-4E69-8941-41147222C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30825677-8EF7-46A0-BB47-887707E007C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DF5D18-28B3-45C8-A10A-56BB1202C5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC61767-2E32-409B-9A5E-DFE2895D2DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A4394-4E2B-4166-BA37-8FB03D1E2ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB8A3CA-D333-44D4-BA5A-5F966B8EFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E5582-8D7C-4250-BFCA-B87973521E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED3291-517C-452F-995C-56A6899ACE24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F33ECC-CAFC-4F7C-9A64-5A536D76F67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A995725-A2C1-4461-AB71-1ECD26AFBB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7DB8C1-6C50-43E8-AC70-ED3C4EB62D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C4FC5F-B68F-4ADA-AD3B-06A530619C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5831F9A4-E89F-4927-B332-CB9D23CD5907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899C69AD-93AC-4707-BF1D-55EDB6EEF7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E44D44-8D4D-4B1F-9D00-CCD68B5D3415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20022",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:12.640",
      "lastModified" : "2026-05-04T15:11:09.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon.\r\n\r This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo OSPF de Cisco Secure Cortafuegos ASA Software y Cisco Secure FTD Software podría permitir a un atacante no autenticado y adyacente causar que un dispositivo afectado se recargue inesperadamente, resultando en una condición de DoS cuando la depuración de canonicalización OSPF está habilitada usando el comando debug ip ospf canon. Esta vulnerabilidad se debe a una validación de entrada insuficiente al procesar paquetes OSPF LSU. Un atacante podría explotar esta vulnerabilidad enviando paquetes OSPF no autenticados y manipulados. Un exploit exitoso podría permitir al atacante escribir en la memoria fuera de los datos del paquete, causando que el dispositivo se recargue, resultando en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28945AE6-CB65-4A0D-AE38-5C1A1227D73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F141B289-C7AF-4070-BD5A-9B8D9CE92BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1A151-7956-4220-A441-A581308A1AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D7ED38-EACB-4CE1-A314-E3A5A66A5E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B13EF7-E390-4182-AC11-2E0084F1D856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965B17A8-C299-4471-BD2F-09482141F78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A9223-8F53-4DB3-AAE9-932CE7D3A242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E46EACC-A478-462D-814C-D8CA1B38B1A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD60FF-AE36-403D-9F1C-16013699CEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B822E8-C6AF-47F6-818A-CB35D257E27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E5BEF-F913-486B-B72C-734572690132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4B329D-B49F-49B7-A0B3-E7E503EA9A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C36793D3-8B6B-4997-9DD3-8F9C05C1E9E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8F5EC7-7170-4923-BA00-54833890DF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2847D07-B302-4C60-816B-F9151E8233B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5E2546-D4DE-485B-924A-A47CF8C7B999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD37172-2574-4D68-BEF2-837217BCF235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA4EC4B-B944-41FE-B4D3-8F0117F17592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C34FC-3194-4420-8642-FB7B055A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678E4AE4-D9FB-434D-8A69-8541140BA034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D949A9-AF15-403F-9A1B-1E517553A03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51898CC3-3B06-4123-8D03-43C4D719B3B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDAB447-1F2C-4983-89B2-E723A82BCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0AB352-A4ED-4DF0-B749-84078DA48FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B749B-2EFB-4734-B775-180A6E8627FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54006F46-95F3-4785-9660-C1DF21789783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B2F7C-195B-4DBF-8C3C-0F269E56CEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A81B4-FC1D-4E28-8235-7DAD7F1B1C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62E1E33-480B-44C7-8155-EF725ACE7A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01831166-3C2C-48CC-A8DE-EEE631349C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5107E77-57C9-4C7B-A974-BAF6F01BCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED851EA-1BDF-4D88-83E8-53B14F7C1FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C2F98-E719-413A-A284-5AE1B28171CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2A3A4-12A9-4280-980E-B6D932185AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5665319D-5532-4F03-8F12-4F98C5548023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5994E2A7-118C-4E08-AF03-4F2409E55AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7844A0-5EF6-4AD6-ACB8-E01D8579AC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD8A9AC-3FD8-4B30-8785-B541ADC4EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298441F6-BAB5-4116-BEAF-DEFB75A52CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E08CFF-68F5-45E6-B6F3-D111D33C5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58348A7-25EC-4023-B4CA-CAB35A3798C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE321FE-9034-4E0F-9A32-D41443A9D86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E779C6-2740-47A1-A6D5-E22C6DC7D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E794B83A-4A14-431C-B882-578CD70E412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292E681D-D4C0-4D85-B84C-4C9328FCD12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A59C5-6EC0-4BAD-B547-EFA785707050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1551BB-37A4-4383-8AA8-DA25642B7353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B6632C-4A35-4D10-B323-8C3266319114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638D2739-FAA7-4880-BC2F-BC632140E9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40098313-CC8A-49E6-8095-093881DA7107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00C3A8F-34AE-443E-9B77-0532C9F11F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F32FDA-54ED-4117-8FA7-D749140F628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BA96B9-A0DD-4065-A295-FA85A33F7E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BF5898-73CB-480B-9D6E-B6A7696A6140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7991D4E-57F8-48A6-A098-C70107C87F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D2BF71-1104-477A-B15F-3A959D46ABFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A7BB35-0AA6-403A-8D96-80FA61F13A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07AA16A-6DE0-4226-8A44-CDA8E26830D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7AC5D5-B171-4163-BFB3-02163DD8817B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AD8591-C99A-4780-A742-13CFD921F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173C2DA6-625C-465C-A080-E578539E30F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8288F62-8BEC-4318-8096-9D36817D1D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A617690D-92D7-4793-AEAC-15F31162D5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9608894-B4A7-49A1-863A-D44E53D6CE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDB77ED-AB5E-475F-A5F8-515B807E99A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE0323-AC5A-4570-9681-14CD9FB8FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6773BC9-C84C-4249-B6C3-FD39BAAA0555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFC6F7-2BA1-4F32-AD55-8BF0888FDB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291705AE-7BAE-4305-BECA-204821BF467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC683581-4B46-46A8-BBD8-CB01283641DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A816A-63D6-498B-B167-BE71F0019DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294D71C7-FFC3-4431-88AA-E03EFAE78CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8287D0-B817-4143-BE34-B3C7FEC7BDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9621C619-C4F8-4906-8A24-E560C08F6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F9C8B-35E4-459C-B31E-FCF2DAD0120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB73C40D-5A5A-4851-BEFA-71CA2865EE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AD9D74-FDDF-443D-8193-E4B5B28CC815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACA483F-52CE-4F10-8D95-F93C8C8D16F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF82E95-C8D3-402B-BC97-29EA1771D5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0350CCE9-512A-4A77-8FAB-7A8F9B061170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC55E28-36AC-4D40-BB6D-A1B53503F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F0A624-DDE8-490C-9DA4-762CD39764B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C034C-DDA4-49E1-B8B4-62F3B5C00173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094896F-425A-4E69-8941-41147222C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30825677-8EF7-46A0-BB47-887707E007C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DF5D18-28B3-45C8-A10A-56BB1202C5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC61767-2E32-409B-9A5E-DFE2895D2DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A4394-4E2B-4166-BA37-8FB03D1E2ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB8A3CA-D333-44D4-BA5A-5F966B8EFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E5582-8D7C-4250-BFCA-B87973521E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED3291-517C-452F-995C-56A6899ACE24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F33ECC-CAFC-4F7C-9A64-5A536D76F67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A995725-A2C1-4461-AB71-1ECD26AFBB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7DB8C1-6C50-43E8-AC70-ED3C4EB62D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C4FC5F-B68F-4ADA-AD3B-06A530619C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5831F9A4-E89F-4927-B332-CB9D23CD5907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899C69AD-93AC-4707-BF1D-55EDB6EEF7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E44D44-8D4D-4B1F-9D00-CCD68B5D3415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20023",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:14.627",
      "lastModified" : "2026-05-04T15:13:16.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to corrupt memory on an affected device, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to memory corruption when parsing OSPF protocol packets. An attacker could exploit this vulnerability by sending crafted OSPF packets to an affected device. A successful exploit could allow the attacker to cause memory corruption causing the affected device to reboot, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo OSPF del software Cisco Secure Firewall Adaptive Security Appliance (ASA) y del software Cisco Secure Firewall Threat Defense (FTD) podría permitir a un atacante adyacente no autenticado corromper la memoria en un dispositivo afectado, lo que resultaría en una condición de denegación de servicio (DoS). Esta vulnerabilidad se debe a la corrupción de memoria al analizar paquetes del protocolo OSPF. Un atacante podría explotar esta vulnerabilidad enviando paquetes OSPF manipulados a un dispositivo afectado. Un exploit exitoso podría permitir al atacante causar corrupción de memoria provocando que el dispositivo afectado se reinicie, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDAB447-1F2C-4983-89B2-E723A82BCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0AB352-A4ED-4DF0-B749-84078DA48FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B749B-2EFB-4734-B775-180A6E8627FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54006F46-95F3-4785-9660-C1DF21789783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B2F7C-195B-4DBF-8C3C-0F269E56CEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A81B4-FC1D-4E28-8235-7DAD7F1B1C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62E1E33-480B-44C7-8155-EF725ACE7A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01831166-3C2C-48CC-A8DE-EEE631349C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5107E77-57C9-4C7B-A974-BAF6F01BCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED851EA-1BDF-4D88-83E8-53B14F7C1FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C2F98-E719-413A-A284-5AE1B28171CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2A3A4-12A9-4280-980E-B6D932185AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5665319D-5532-4F03-8F12-4F98C5548023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5994E2A7-118C-4E08-AF03-4F2409E55AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7844A0-5EF6-4AD6-ACB8-E01D8579AC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD8A9AC-3FD8-4B30-8785-B541ADC4EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298441F6-BAB5-4116-BEAF-DEFB75A52CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E08CFF-68F5-45E6-B6F3-D111D33C5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58348A7-25EC-4023-B4CA-CAB35A3798C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE321FE-9034-4E0F-9A32-D41443A9D86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E779C6-2740-47A1-A6D5-E22C6DC7D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E794B83A-4A14-431C-B882-578CD70E412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292E681D-D4C0-4D85-B84C-4C9328FCD12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A59C5-6EC0-4BAD-B547-EFA785707050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1551BB-37A4-4383-8AA8-DA25642B7353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B6632C-4A35-4D10-B323-8C3266319114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638D2739-FAA7-4880-BC2F-BC632140E9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40098313-CC8A-49E6-8095-093881DA7107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00C3A8F-34AE-443E-9B77-0532C9F11F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F32FDA-54ED-4117-8FA7-D749140F628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BA96B9-A0DD-4065-A295-FA85A33F7E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BF5898-73CB-480B-9D6E-B6A7696A6140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7991D4E-57F8-48A6-A098-C70107C87F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D2BF71-1104-477A-B15F-3A959D46ABFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A7BB35-0AA6-403A-8D96-80FA61F13A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07AA16A-6DE0-4226-8A44-CDA8E26830D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7AC5D5-B171-4163-BFB3-02163DD8817B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AD8591-C99A-4780-A742-13CFD921F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173C2DA6-625C-465C-A080-E578539E30F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8288F62-8BEC-4318-8096-9D36817D1D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A617690D-92D7-4793-AEAC-15F31162D5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9608894-B4A7-49A1-863A-D44E53D6CE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDB77ED-AB5E-475F-A5F8-515B807E99A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE0323-AC5A-4570-9681-14CD9FB8FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6773BC9-C84C-4249-B6C3-FD39BAAA0555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFC6F7-2BA1-4F32-AD55-8BF0888FDB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291705AE-7BAE-4305-BECA-204821BF467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC683581-4B46-46A8-BBD8-CB01283641DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A816A-63D6-498B-B167-BE71F0019DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294D71C7-FFC3-4431-88AA-E03EFAE78CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8287D0-B817-4143-BE34-B3C7FEC7BDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9621C619-C4F8-4906-8A24-E560C08F6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F9C8B-35E4-459C-B31E-FCF2DAD0120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB73C40D-5A5A-4851-BEFA-71CA2865EE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AD9D74-FDDF-443D-8193-E4B5B28CC815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACA483F-52CE-4F10-8D95-F93C8C8D16F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF82E95-C8D3-402B-BC97-29EA1771D5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0350CCE9-512A-4A77-8FAB-7A8F9B061170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC55E28-36AC-4D40-BB6D-A1B53503F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F0A624-DDE8-490C-9DA4-762CD39764B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C034C-DDA4-49E1-B8B4-62F3B5C00173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094896F-425A-4E69-8941-41147222C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30825677-8EF7-46A0-BB47-887707E007C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DF5D18-28B3-45C8-A10A-56BB1202C5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC61767-2E32-409B-9A5E-DFE2895D2DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A4394-4E2B-4166-BA37-8FB03D1E2ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB8A3CA-D333-44D4-BA5A-5F966B8EFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E5582-8D7C-4250-BFCA-B87973521E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70ED3291-517C-452F-995C-56A6899ACE24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F33ECC-CAFC-4F7C-9A64-5A536D76F67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A995725-A2C1-4461-AB71-1ECD26AFBB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7DB8C1-6C50-43E8-AC70-ED3C4EB62D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C4FC5F-B68F-4ADA-AD3B-06A530619C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5831F9A4-E89F-4927-B332-CB9D23CD5907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E44D44-8D4D-4B1F-9D00-CCD68B5D3415"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.84:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28945AE6-CB65-4A0D-AE38-5C1A1227D73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F141B289-C7AF-4070-BD5A-9B8D9CE92BB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1A151-7956-4220-A441-A581308A1AE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28D7ED38-EACB-4CE1-A314-E3A5A66A5E73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B13EF7-E390-4182-AC11-2E0084F1D856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965B17A8-C299-4471-BD2F-09482141F78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4A9223-8F53-4DB3-AAE9-932CE7D3A242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFD60FF-AE36-403D-9F1C-16013699CEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B822E8-C6AF-47F6-818A-CB35D257E27C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E46E5BEF-F913-486B-B72C-734572690132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4B329D-B49F-49B7-A0B3-E7E503EA9A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2847D07-B302-4C60-816B-F9151E8233B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5E2546-D4DE-485B-924A-A47CF8C7B999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD37172-2574-4D68-BEF2-837217BCF235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C34FC-3194-4420-8642-FB7B055A868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678E4AE4-D9FB-434D-8A69-8541140BA034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D949A9-AF15-403F-9A1B-1E517553A03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51898CC3-3B06-4123-8D03-43C4D719B3B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20024",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:15.113",
      "lastModified" : "2026-05-04T15:13:59.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key.\r\n\r This vulnerability is due to heap corruption in OSPF when parsing packets. An attacker could exploit this vulnerability by sending crafted packets to the OSPF service. A successful exploit could allow the attacker to corrupt the heap, causing the affected device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo OSPF de Cisco Secure Firewall ASA Software y Cisco Secure FTD Software podría permitir a un atacante autenticado y adyacente provocar que un dispositivo afectado se recargue inesperadamente, lo que resultaría en una condición de DoS. Para explotar esta vulnerabilidad, el atacante debe tener la clave secreta de OSPF. Esta vulnerabilidad se debe a una corrupción de pila en OSPF al analizar paquetes. Un atacante podría explotar esta vulnerabilidad enviando paquetes manipulados al servicio OSPF. Un exploit exitoso podría permitir al atacante corromper la pila, provocando que el dispositivo afectado se recargue, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:-9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C370B62-EFEC-4466-9F17-2CD2BAD54020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E555F3-3580-4D71-8D8D-92FE72763D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93013503-8B9A-4160-AF7E-277958FA6E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B009FD-0F2B-4511-8EDF-C3E670623F89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52579D8D-E855-42B3-B406-32DD1C39F721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E44FC6-12A2-4F76-A095-28F3804B619F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42917E5E-E362-4B40-B2B2-3C77BA35641C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF317FA3-EBF3-49BB-A9E6-0D4295FA3F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98B1683-914F-43D3-AE1C-311D3A90BE8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D24656-CAB1-4A98-A440-482927FEDD16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E504557C-DA5D-4D0F-A813-4CE7D5109F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D2A067-C717-4921-BBF5-3EFBE02736EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DDEC5B-4BEA-499C-9F34-BB3D39B7A963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E44C37-0F6F-440B-BA26-FB6D0B179E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEE0050-34DC-49CB-B859-8ED500FD79A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A47E5C5-E058-4B4C-A258-6DF7CE0EA92B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4875811-F209-49ED-B310-8377B2F87FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99C52C7B-B626-4A3C-A2EC-28A20E7FA95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBF5E-257A-4A1F-8930-3643A9588838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782BC9ED-1395-472B-9F34-DED812AA5BFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "153449C0-B93F-49A2-8A6A-BE84305E8D2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853A002C-839A-4372-8485-750A86E9F6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BB5D6-CE75-4C83-82DC-4148EF8CB1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32F1365-EAF8-4570-B2FF-45E47E8586F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD07F9B-6BB3-4423-8DBE-4E89A6478E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34FE4F28-B704-4325-AE8A-C790163FEE71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E832BC0C-8439-4779-9064-C2D93F231031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC149D03-5609-46E6-A1B3-F4D91F282B49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D7FC6F-1370-4272-97E5-226C2ED1D335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164D5774-D51B-47C6-AD32-ED6B84E78BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A810C8-1BB5-4589-84AB-C357C1937201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22D8D65-2E88-4557-BF85-1E3ABD4CCAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62C9AF-70F5-4A12-9B0A-F32551FB2C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04EB4FB-0C9F-441E-B02A-6B22F195348F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDD7BD6-1C1D-49FE-8478-D0F37EB59BC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7D8466-0050-495A-9442-8C5FF3912F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB96258-8343-4E98-B3DD-C92E94A9F9F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D87807D-4915-4785-A87C-CE3C1F825378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259825FC-469E-47AA-AD5C-E6C6F863A399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.71:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C569B22-315F-4E90-BF42-F19C0093776E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.76:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE71ED6-A506-4D8B-A027-1F9AF91103B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.82:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA1D966-E373-480D-9F8C-9E4E7AC191CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73E0B2E-BABF-4998-A1D7-4E803F9D78AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59306ADF-FAA6-4970-ADFB-C5D9A5AEF1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959107AC-E9EC-467C-901B-A3164E3762E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F944F8F-0255-42BE-BD44-D21EC9F0FFC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F39C535-5A41-47CE-A9CF-B360998D4BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CEAEFC-7B82-41F9-A09D-C86A3A60A4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40FAC31D-19C0-4BA0-A019-C7E7A0BA0B5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAAFE0F-416F-4BCA-BA37-30EAEADA8AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1E8552-58F0-491E-B7D7-E89527872FC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D71D-1F50-4F85-9F6D-E11D79BD26E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C41D73-AF4F-41E8-92D0-E5B7B6D3E782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D1CCE1-0FB6-4038-BC60-3C3AE89228ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA16A6D-2747-4DAC-A30A-166F1FD906FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289F9874-FC01-4809-9BDA-1AF583FB60B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EDFC67-E4EE-4D2C-BF9F-5881C987C662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "826869BE-4874-4BBA-9392-14851560BA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52D477-3045-45D1-9FD3-12F396266463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E310BF-F1F6-4124-A875-81967B9B531E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B330F8F-F0DA-472C-A932-AD1D232C7DB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF59DAA-268C-4FCF-A0AA-7967128AEBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140ED95D-173C-4ADB-A2E6-97F0D595D1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9B00E1-3E50-4356-B6D9-F84BCD552402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "552319A9-01F7-47BA-83B3-B2DD648AA07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4914603C-4B1B-48F1-826C-DB803BD21F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE21762-3085-4AFC-B1DE-A4562CDAC509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852C3478-7529-4002-8540-ABA4D556DEFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B8A815-5D58-4952-936E-D47B83637BEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C98D085-E321-4BAE-AF03-ABDEDC4D24BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05599C9-C0DB-47C1-B145-C410076C1049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC91A59-0BFA-4DE8-B414-7558D27FBC54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12FDDE70-692B-458A-8475-E5B6A260410F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95E7E362-4181-4D05-A391-634829CF3DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B2CB47-C4FA-41E8-B314-4D2E27935A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90551E-EC04-4486-AED1-5B4279785EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3213F1EE-0D64-45F0-84EB-043059E5B4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B20A730-0816-4636-8521-2B0DD1FA1E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE52F59-AABA-4069-A909-64AD5DFD2B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20D7966E-B02B-48C8-BF96-723DD6C25314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA618249-E76F-4104-9326-C9F2DC8DE3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C925E1F-6BD9-4CD1-8AC4-4263A9094786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EE76D9-6D18-4823-B6B0-E1394A4D140C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F635946-586D-4DE2-927B-300CE569C596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "459C11B9-ABA1-472A-8CDA-9C7B4E48E943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA060112-E2D8-4EC5-8400-D8D189A119B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3888BB0-B529-486C-8563-392BD1C5DFD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE3FA7-8281-4BD9-A08B-8C79D369480E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB54F71-ECFB-4A05-9198-F5C1061E97C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA797509-82C4-444C-A4C2-C4919EEC169A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25468E3-03F9-4C2A-B82A-F87F4FCD57E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC6F412-4A30-4E9A-B8DF-C4BF80E5C4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA47E8EA-29F2-40F3-826E-E7295FFAD8C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D303F8-E6AA-4F1C-9988-055EECD0A902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBBA66-6D00-4D8B-86FE-81EF431A7806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB768AFD-64C1-4AD4-8194-2A1D428BAC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6648F1-B019-4A67-A1D6-9B8FD522E393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53667E6B-7B95-4051-94C6-707789CB15A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6796587-5205-46ED-95D4-0B9DE1499FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1BC784-0EEB-4546-9289-D0476A9A619A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A4AF4A-5915-4456-9EF6-BDEBB22A43AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82105953-F1CD-4AC8-916E-39381C2ADBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FB2185-6F0E-43D7-A007-2FE5BAAC0A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6367AC-F605-472B-9B11-B2FE9AD918A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D32F40-C94F-4C5C-801C-42DED4361718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA1267A-B2B1-4E0C-BE49-4AC506E97D7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.22.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BD52194-7B6C-4F52-8F01-672CED838D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C1A6F-8307-43E3-B8AB-35FD43141329"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDAB447-1F2C-4983-89B2-E723A82BCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0AB352-A4ED-4DF0-B749-84078DA48FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B749B-2EFB-4734-B775-180A6E8627FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54006F46-95F3-4785-9660-C1DF21789783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B2F7C-195B-4DBF-8C3C-0F269E56CEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A81B4-FC1D-4E28-8235-7DAD7F1B1C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62E1E33-480B-44C7-8155-EF725ACE7A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01831166-3C2C-48CC-A8DE-EEE631349C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5107E77-57C9-4C7B-A974-BAF6F01BCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED851EA-1BDF-4D88-83E8-53B14F7C1FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C2F98-E719-413A-A284-5AE1B28171CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2A3A4-12A9-4280-980E-B6D932185AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5665319D-5532-4F03-8F12-4F98C5548023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5994E2A7-118C-4E08-AF03-4F2409E55AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7844A0-5EF6-4AD6-ACB8-E01D8579AC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD8A9AC-3FD8-4B30-8785-B541ADC4EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298441F6-BAB5-4116-BEAF-DEFB75A52CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E08CFF-68F5-45E6-B6F3-D111D33C5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58348A7-25EC-4023-B4CA-CAB35A3798C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE321FE-9034-4E0F-9A32-D41443A9D86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E779C6-2740-47A1-A6D5-E22C6DC7D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E794B83A-4A14-431C-B882-578CD70E412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292E681D-D4C0-4D85-B84C-4C9328FCD12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A59C5-6EC0-4BAD-B547-EFA785707050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1551BB-37A4-4383-8AA8-DA25642B7353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B6632C-4A35-4D10-B323-8C3266319114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638D2739-FAA7-4880-BC2F-BC632140E9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40098313-CC8A-49E6-8095-093881DA7107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00C3A8F-34AE-443E-9B77-0532C9F11F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F32FDA-54ED-4117-8FA7-D749140F628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BA96B9-A0DD-4065-A295-FA85A33F7E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BF5898-73CB-480B-9D6E-B6A7696A6140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7991D4E-57F8-48A6-A098-C70107C87F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D2BF71-1104-477A-B15F-3A959D46ABFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A7BB35-0AA6-403A-8D96-80FA61F13A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07AA16A-6DE0-4226-8A44-CDA8E26830D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7AC5D5-B171-4163-BFB3-02163DD8817B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AD8591-C99A-4780-A742-13CFD921F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173C2DA6-625C-465C-A080-E578539E30F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8288F62-8BEC-4318-8096-9D36817D1D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A617690D-92D7-4793-AEAC-15F31162D5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9608894-B4A7-49A1-863A-D44E53D6CE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDB77ED-AB5E-475F-A5F8-515B807E99A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE0323-AC5A-4570-9681-14CD9FB8FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6773BC9-C84C-4249-B6C3-FD39BAAA0555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFC6F7-2BA1-4F32-AD55-8BF0888FDB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291705AE-7BAE-4305-BECA-204821BF467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC683581-4B46-46A8-BBD8-CB01283641DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A816A-63D6-498B-B167-BE71F0019DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294D71C7-FFC3-4431-88AA-E03EFAE78CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8287D0-B817-4143-BE34-B3C7FEC7BDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9621C619-C4F8-4906-8A24-E560C08F6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F9C8B-35E4-459C-B31E-FCF2DAD0120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB73C40D-5A5A-4851-BEFA-71CA2865EE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF82E95-C8D3-402B-BC97-29EA1771D5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0350CCE9-512A-4A77-8FAB-7A8F9B061170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC55E28-36AC-4D40-BB6D-A1B53503F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F0A624-DDE8-490C-9DA4-762CD39764B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C034C-DDA4-49E1-B8B4-62F3B5C00173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094896F-425A-4E69-8941-41147222C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30825677-8EF7-46A0-BB47-887707E007C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DF5D18-28B3-45C8-A10A-56BB1202C5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC61767-2E32-409B-9A5E-DFE2895D2DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A4394-4E2B-4166-BA37-8FB03D1E2ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB8A3CA-D333-44D4-BA5A-5F966B8EFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E5582-8D7C-4250-BFCA-B87973521E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F33ECC-CAFC-4F7C-9A64-5A536D76F67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5831F9A4-E89F-4927-B332-CB9D23CD5907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20025",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:15.547",
      "lastModified" : "2026-03-05T19:39:11.967",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key.\r\n\r This vulnerability is due to insufficient input validation when processing OSPF link-state update (LSU) packets. An attacker could exploit this vulnerability by sending crafted OSPF LSU packets. A successful exploit could allow the attacker to corrupt the heap, causing the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo OSPF de Cisco Secure Cortafuegos ASA Software y Cisco Secure FTD Software podría permitir a un atacante autenticado y adyacente causar que un dispositivo afectado se reinicie inesperadamente, lo que resultaría en una condición de DoS. Para explotar esta vulnerabilidad, el atacante debe tener la clave secreta de OSPF. Esta vulnerabilidad se debe a una validación de entrada insuficiente al procesar paquetes de actualización de estado de enlace (LSU) de OSPF. Un atacante podría explotar esta vulnerabilidad enviando paquetes LSU de OSPF manipulados. Un exploit exitoso podría permitir al atacante corromper el heap, causando que el dispositivo se reinicie, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW",
        "source" : "psirt@cisco.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20064",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2026-03-04T19:16:16.003",
      "lastModified" : "2026-04-28T21:17:43.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition.\r\n\r This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el software Cisco Secure Cortafuegos Defensa contra Amenazas (FTD) podría permitir a un atacante local autenticado que el dispositivo se reinicie inesperadamente, causando una condición de denegación de servicio (DoS). Esta vulnerabilidad se debe a una validación incorrecta de la entrada proporcionada por el usuario. Un atacante con una cuenta de bajo privilegio podría explotar esta vulnerabilidad utilizando comandos manipulados en la línea de comandos (CLI). Un exploit exitoso podría permitir al atacante que el dispositivo se reinicie, lo que resultaría en una condición de DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DB8AC0-A41E-41E8-BCBC-459C83347116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDAB447-1F2C-4983-89B2-E723A82BCD71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0AB352-A4ED-4DF0-B749-84078DA48FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF3B749B-2EFB-4734-B775-180A6E8627FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54006F46-95F3-4785-9660-C1DF21789783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61B2F7C-195B-4DBF-8C3C-0F269E56CEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35A81B4-FC1D-4E28-8235-7DAD7F1B1C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62E1E33-480B-44C7-8155-EF725ACE7A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01831166-3C2C-48CC-A8DE-EEE631349C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5107E77-57C9-4C7B-A974-BAF6F01BCA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED851EA-1BDF-4D88-83E8-53B14F7C1FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "279C2F98-E719-413A-A284-5AE1B28171CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA2A3A4-12A9-4280-980E-B6D932185AEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5665319D-5532-4F03-8F12-4F98C5548023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5994E2A7-118C-4E08-AF03-4F2409E55AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7844A0-5EF6-4AD6-ACB8-E01D8579AC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD8A9AC-3FD8-4B30-8785-B541ADC4EDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298441F6-BAB5-4116-BEAF-DEFB75A52CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E08CFF-68F5-45E6-B6F3-D111D33C5E2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F58348A7-25EC-4023-B4CA-CAB35A3798C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE321FE-9034-4E0F-9A32-D41443A9D86A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E779C6-2740-47A1-A6D5-E22C6DC7D1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E794B83A-4A14-431C-B882-578CD70E412B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "292E681D-D4C0-4D85-B84C-4C9328FCD12F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963A59C5-6EC0-4BAD-B547-EFA785707050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1551BB-37A4-4383-8AA8-DA25642B7353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B6632C-4A35-4D10-B323-8C3266319114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638D2739-FAA7-4880-BC2F-BC632140E9DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40098313-CC8A-49E6-8095-093881DA7107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00C3A8F-34AE-443E-9B77-0532C9F11F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F32FDA-54ED-4117-8FA7-D749140F628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8BA96B9-A0DD-4065-A295-FA85A33F7E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BF5898-73CB-480B-9D6E-B6A7696A6140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7991D4E-57F8-48A6-A098-C70107C87F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D2BF71-1104-477A-B15F-3A959D46ABFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A7BB35-0AA6-403A-8D96-80FA61F13A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07AA16A-6DE0-4226-8A44-CDA8E26830D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7AC5D5-B171-4163-BFB3-02163DD8817B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31AD8591-C99A-4780-A742-13CFD921F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173C2DA6-625C-465C-A080-E578539E30F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8288F62-8BEC-4318-8096-9D36817D1D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A617690D-92D7-4793-AEAC-15F31162D5F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9608894-B4A7-49A1-863A-D44E53D6CE69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDB77ED-AB5E-475F-A5F8-515B807E99A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE0323-AC5A-4570-9681-14CD9FB8FD46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6773BC9-C84C-4249-B6C3-FD39BAAA0555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DFC6F7-2BA1-4F32-AD55-8BF0888FDB92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "291705AE-7BAE-4305-BECA-204821BF467A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC683581-4B46-46A8-BBD8-CB01283641DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC2A816A-63D6-498B-B167-BE71F0019DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294D71C7-FFC3-4431-88AA-E03EFAE78CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8287D0-B817-4143-BE34-B3C7FEC7BDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9621C619-C4F8-4906-8A24-E560C08F6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7F9C8B-35E4-459C-B31E-FCF2DAD0120E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB73C40D-5A5A-4851-BEFA-71CA2865EE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9AD9D74-FDDF-443D-8193-E4B5B28CC815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACA483F-52CE-4F10-8D95-F93C8C8D16F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF82E95-C8D3-402B-BC97-29EA1771D5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0350CCE9-512A-4A77-8FAB-7A8F9B061170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC55E28-36AC-4D40-BB6D-A1B53503F5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F0A624-DDE8-490C-9DA4-762CD39764B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901C034C-DDA4-49E1-B8B4-62F3B5C00173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D094896F-425A-4E69-8941-41147222C42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30825677-8EF7-46A0-BB47-887707E007C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DF5D18-28B3-45C8-A10A-56BB1202C5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC61767-2E32-409B-9A5E-DFE2895D2DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80A4394-4E2B-4166-BA37-8FB03D1E2ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB8A3CA-D333-44D4-BA5A-5F966B8EFFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E5582-8D7C-4250-BFCA-B87973521E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F33ECC-CAFC-4F7C-9A64-5A536D76F67F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A995725-A2C1-4461-AB71-1ECD26AFBB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7DB8C1-6C50-43E8-AC70-ED3C4EB62D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C4FC5F-B68F-4ADA-AD3B-06A530619C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5831F9A4-E89F-4927-B332-CB9D23CD5907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899C69AD-93AC-4707-BF1D-55EDB6EEF7C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_software:7.7.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E44D44-8D4D-4B1F-9D00-CCD68B5D3415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3125",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-03-04T19:16:19.730",
      "lastModified" : "2026-03-09T17:51:18.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.The @opennextjs/cloudflare worker template includes a /cdn-cgi/image/ handler intended for development use only. In production, Cloudflare's edge intercepts /cdn-cgi/image/ requests before they reach the Worker. However, by substituting a backslash for a forward slash (/cdn-cgi\\image/ instead of /cdn-cgi/image/), an attacker can bypass edge interception and have the request reach the Worker directly. The JavaScript URL class then normalizes the backslash to a forward slash, causing the request to match the handler and trigger an unvalidated fetch of arbitrary remote URLs.\n\nFor example: \n\n https://victim-site.com/cdn-cgi\\image/aaaa/https://attacker.com \n\nIn this example, attacker-controlled content from attacker.com is served through the victim site's domain (victim-site.com), violating the same-origin policy and potentially misleading users or other services.\n\nNote: This bypass only works via HTTP clients that preserve backslashes in paths (e.g., curl --path-as-is). Browsers normalize backslashes to forward slashes before sending requests.\n\nAdditionally, Cloudflare Workers with Assets and Cloudflare Pages suffer from a similar vulnerability. Assets stored under /cdn-cgi/ paths are not publicly accessible under normal conditions. However, using the same backslash bypass (/cdn-cgi\\... instead of /cdn-cgi/...), these assets become publicly accessible. This could be used to retrieve private data. For example, Open Next projects store incremental cache data under /cdn-cgi/_next_cache, which could be exposed via this bypass."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) fue identificada en el paquete @opennextjs/cloudflare, resultante de un bypass de normalización de ruta en el gestor /cdn-cgi/image/. La plantilla de worker @opennextjs/cloudflare incluye un gestor /cdn-cgi/image/ destinado solo para uso en desarrollo. En producción, el edge de Cloudflare intercepta las peticiones /cdn-cgi/image/ antes de que lleguen al Worker. Sin embargo, al sustituir una barra invertida por una barra inclinada (/cdn-cgi\\image/ en lugar de /cdn-cgi/image/), un atacante puede eludir la intercepción del edge y hacer que la petición llegue directamente al Worker. La clase URL de JavaScript luego normaliza la barra invertida a una barra inclinada, haciendo que la petición coincida con el gestor y desencadene una obtención no validada de URLs remotas arbitrarias.\n\nPor ejemplo:\n\nhttps://victim-site.com/cdn-cgi\\image/aaaa/https://attacker.com\n\nEn este ejemplo, contenido controlado por el atacante de attacker.com se sirve a través del dominio del sitio víctima (victim-site.com), violando la política de mismo origen y potencialmente engañando a usuarios u otros servicios.\n\nNota: Este bypass solo funciona a través de clientes HTTP que preservan las barras invertidas en las rutas (p. ej., curl --path-as-is). Los navegadores normalizan las barras invertidas a barras inclinadas antes de enviar las peticiones.\n\nAdemás, Cloudflare Workers con Assets y Cloudflare Pages sufren de una vulnerabilidad similar. Los Assets almacenados bajo rutas /cdn-cgi/ no son accesibles públicamente bajo condiciones normales. Sin embargo, utilizando el mismo bypass de barra invertida (/cdn-cgi\\... en lugar de /cdn-cgi/...), estos assets se vuelven accesibles públicamente. Esto podría usarse para recuperar datos privados. Por ejemplo, los proyectos Open Next almacenan datos de caché incremental bajo /cdn-cgi/_next_cache, que podrían ser expuestos a través de este bypass."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennextjs:opennext_for_cloudflare:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.17.1",
            "matchCriteriaId" : "FFD587A5-A6DA-4D83-9903-7AD395DE5744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-rvpw-p7vw-wj3m",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opennextjs/opennextjs-cloudflare/pull/1147",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.cve.org/cverecord?id=CVE-2025-6087",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/@opennextjs/cloudflare/v/1.17.1",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28427",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T20:16:19.640",
      "lastModified" : "2026-04-21T15:17:56.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended directory and read any file OpenDeck can access. This vulnerability is fixed in 2.8.1."
      }, {
        "lang" : "es",
        "value" : "OpenDeck es un software de Linux para tu Elgato Stream Deck. Antes de la 2.8.1, el servicio que escucha en el puerto 57118 sirve archivos estáticos para los plugins instalados, pero no sanea correctamente los componentes de la ruta. Al incluir secuencias ../ en la ruta de la solicitud, un atacante puede atravesar fuera del directorio previsto y leer cualquier archivo al que OpenDeck pueda acceder. Esta vulnerabilidad se corrige en la versión 2.8.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nekename:opendeck:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "53910A23-CD21-49BA-8829-B691C5C1719C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nekename/OpenDeck/commit/488a52050017e95a72ba448226ac5e19a20dd9ed",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nekename/OpenDeck/security/advisories/GHSA-4974-g27q-h5m8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28434",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T20:16:19.823",
      "lastModified" : "2026-03-05T22:11:16.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0."
      }, {
        "lang" : "es",
        "value" : "cpp-httplib es una librería HTTP/HTTPS multiplataforma de un solo archivo de solo encabezado C++11. Antes de la versión 0.35.0, cuando un gestor de solicitudes lanza una excepción de C++ y la aplicación no ha registrado un gestor de excepciones personalizado a través de set_exception_handler(), la librería captura la excepción y escribe su mensaje directamente en la respuesta HTTP como un encabezado llamado EXCEPTION_WHAT. Este encabezado se envía a quienquiera que haya realizado la solicitud, sin verificación de autenticación y sin necesidad de configuración especial para activarlo. El comportamiento está activado por defecto. Un desarrollador que no sabe cómo optar por set_exception_handler() distribuirá un servidor que filtra mensajes de excepción internos a cualquier cliente. Esta vulnerabilidad se corrige en la versión 0.35.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yhirose:cpp-httplib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.35.0",
            "matchCriteriaId" : "27E6A328-789B-48B3-B888-23C091A0766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yhirose/cpp-httplib/commit/defd907c7469c5c8281247b73bbd07be24c31164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-8mpw-r4gc-xm7q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28435",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T20:16:19.983",
      "lastModified" : "2026-03-05T22:09:45.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does not enforce Server::set_payload_max_length() on the decompressed request body when using HandlerWithContentReader (streaming ContentReader) with Content-Encoding: gzip (or other supported encodings). A small compressed payload can expand beyond the configured payload limit and be processed by the application, enabling a payload size limit bypass and potential denial of service (CPU/memory exhaustion). This vulnerability is fixed in 0.35.0."
      }, {
        "lang" : "es",
        "value" : "cpp-httplib es una librería HTTP/HTTPS multiplataforma de un solo archivo de cabecera C++11. Antes de la versión 0.35.0, cpp-httplib (httplib.h) no aplica Server::set_payload_max_length() en el cuerpo de la solicitud descomprimido al usar HandlerWithContentReader (ContentReader de transmisión) con Content-Encoding: gzip (u otras codificaciones compatibles). Una pequeña carga útil comprimida puede expandirse más allá del límite de carga útil configurado y ser procesada por la aplicación, lo que permite una omisión del límite de tamaño de la carga útil y una potencial denegación de servicio (agotamiento de CPU/memoria). Esta vulnerabilidad está corregida en la versión 0.35.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yhirose:cpp-httplib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.35.0",
            "matchCriteriaId" : "27E6A328-789B-48B3-B888-23C091A0766D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yhirose/cpp-httplib/commit/c99d7472b5cf4869d3897b9afc9792063a3d15a8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-xvfx-w463-6fpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3536",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:20.557",
      "lastModified" : "2026-03-11T16:16:45.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en ANGLE en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto potencialmente realizar acceso a memoria fuera de límites mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Crítica)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/485622239",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3537",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:20.707",
      "lastModified" : "2026-03-11T16:16:45.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)"
      }, {
        "lang" : "es",
        "value" : "Problema del ciclo de vida del objeto en PowerVR en Google Chrome en Android anterior a 145.0.7632.159 permitió a un atacante remoto potencialmente explotar la corrupción de pila mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Crítica)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1091"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7F3BC1AA-B71C-45CE-8CAE-0457525ADC82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/474266014",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3538",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:20.817",
      "lastModified" : "2026-03-11T16:16:45.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de entero en Skia en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto potencialmente realizar acceso a memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Crítica)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/484983991",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3539",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:20.957",
      "lastModified" : "2026-03-05T22:04:35.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Object lifecycle issue in DevTools in Google Chrome prior to 145.0.7632.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Problema del ciclo de vida de objetos en DevTools en Google Chrome anterior a 145.0.7632.159 permitió a un atacante que convenció a un usuario de instalar una extensión maliciosa explotar potencialmente la corrupción de la pila mediante una extensión de Chrome manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1091"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/483853098",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3540",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:21.123",
      "lastModified" : "2026-03-05T21:56:46.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en WebAudio en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto realizar acceso a memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/484088917",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3541",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:21.230",
      "lastModified" : "2026-03-05T21:55:52.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en CSS en Google Chrome anterior a 145.0.7632.159 permitía a un atacante remoto realizar una lectura de memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/484811719",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3542",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:21.340",
      "lastModified" : "2026-03-05T21:55:00.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en WebAssembly en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto realizar acceso a memoria fuera de límites a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/485152421",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3543",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:21.443",
      "lastModified" : "2026-03-05T21:54:36.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Implementación inapropiada en V8 en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto potencialmente realizar acceso a memoria fuera de límites mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/485267831",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3544",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:21.550",
      "lastModified" : "2026-03-05T21:54:10.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en el heap en WebCodecs en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto realizar una escritura de memoria fuera de límites mediante una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "chrome-cve-admin@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/485683110",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3545",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2026-03-04T20:16:21.690",
      "lastModified" : "2026-03-05T21:57:27.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Validación de datos insuficiente en la Navegación en Google Chrome anterior a 145.0.7632.159 permitió a un atacante remoto realizar potencialmente un escape de sandbox a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.159",
            "matchCriteriaId" : "7AD3739D-3659-4D93-976A-B6444DAC160F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "145.0.7632.160",
            "matchCriteriaId" : "05AB209F-109C-44C0-8CE2-81F4AA11A079"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://issues.chromium.org/issues/487383169",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22040",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T22:16:17.300",
      "lastModified" : "2026-03-18T16:09:07.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In version 0.24.6, by generating a combined traffic pattern of high-frequency publishes and rapid reconnect/kick-out using the same ClientID and massive subscribe/unsubscribe jitter, it is possible to reliably trigger heap memory corruption in the Broker process, causing it to exit immediately with SIGABRT due to free(): invalid pointer. As of time of publication, no known patched versions are available."
      }, {
        "lang" : "es",
        "value" : "NanoMQ MQTT Broker (NanoMQ) es una Plataforma de Mensajería de Borde integral. En la versión 0.24.6, al generar un patrón de tráfico combinado de publicaciones de alta frecuencia y reconexiones/expulsiones rápidas utilizando el mismo ClientID y una fluctuación masiva de suscripciones/desuscripciones, es posible activar de forma fiable la corrupción de memoria del heap en el proceso del Broker, haciendo que termine inmediatamente con SIGABRT debido a free(): puntero inválido. En el momento de la publicación, no hay versiones parcheadas conocidas disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emqx:nanomq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.24.6",
            "matchCriteriaId" : "F998E900-76B1-4D92-B8AB-CD4EE23C2E3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nanomq/nanomq/security/advisories/GHSA-v57q-w88m-424r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25750",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T22:16:17.667",
      "lastModified" : "2026-03-18T15:06:59.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The vulnerability affected both LangSmith Cloud and self-hosted deployments. Authenticated LangSmith users who clicked on a specially crafted malicious link would have their bearer token, user ID, and workspace ID transmitted to an attacker-controlled server. With this stolen token, an attacker could impersonate the victim and access any LangSmith resources or perform any actions the user was authorized to perform within their workspace. The attack required social engineering (phishing, malicious links in emails or chat applications) to convince users to click the crafted URL. The stolen tokens expired after 5 minutes, though repeated attacks against the same user were possible if they could be convinced to click malicious links multiple times. The fix in version 0.12.71 implements validation requiring user-defined allowed origins for the baseUrl parameter, preventing tokens from being sent to unauthorized servers. No known workarounds are available. Self-hosted customers must upgrade to the patched version."
      }, {
        "lang" : "es",
        "value" : "Langchain Helm Charts son gráficos Helm para desplegar aplicaciones Langchain en Kubernetes. Antes de la versión 0.12.71 de langchain-ai/helm, existía una vulnerabilidad de inyección de parámetros URL en LangSmith Studio que podría permitir el acceso no autorizado a cuentas de usuario a través de tokens de autenticación robados. La vulnerabilidad afectó tanto a LangSmith Cloud como a las implementaciones autoalojadas. Usuarios de LangSmith autenticados que hicieron clic en un enlace malicioso especialmente diseñado verían su token de portador, ID de usuario e ID de espacio de trabajo transmitidos a un servidor controlado por el atacante. Con este token robado, un atacante podría suplantar a la víctima y acceder a cualquier recurso de LangSmith o realizar cualquier acción que el usuario estuviera autorizado a realizar dentro de su espacio de trabajo. El ataque requirió ingeniería social (phishing, enlaces maliciosos en correos electrónicos o aplicaciones de chat) para convencer a los usuarios de hacer clic en la URL diseñada. Los tokens robados expiraban después de 5 minutos, aunque eran posibles ataques repetidos contra el mismo usuario si se les podía convencer de hacer clic en enlaces maliciosos varias veces. La corrección en la versión 0.12.71 implementa una validación que requiere orígenes permitidos definidos por el usuario para el parámetro baseUrl, evitando que los tokens sean enviados a servidores no autorizados. No hay soluciones alternativas conocidas disponibles. Los clientes autoalojados deben actualizar a la versión parcheada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langchain:langsmith:*:*:*:*:*:kubernetes:*:*",
            "versionEndExcluding" : "0.12.71",
            "matchCriteriaId" : "5439C5E6-0075-46D6-A73C-E68084862FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/helm/security/advisories/GHSA-r8wq-jwgw-p74g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27801",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T22:16:17.897",
      "lastModified" : "2026-03-06T19:45:34.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Vaultwarden versions 1.34.3 and prior are susceptible to a 2FA bypass when performing protected actions. An attacker who gains authenticated access to a user’s account can exploit this bypass to perform protected actions such as accessing the user’s API key or deleting the user’s vault and organisations the user is an admin/owner of . This issue has been patched in version 1.35.0."
      }, {
        "lang" : "es",
        "value" : "Vaultwarden es un servidor compatible con Bitwarden no oficial escrito en Rust, anteriormente conocido como bitwarden_rs. Las versiones 1.34.3 y anteriores de Vaultwarden son susceptibles a un bypass de 2FA al realizar acciones protegidas. Un atacante que obtiene acceso autenticado a la cuenta de un usuario puede explotar este bypass para realizar acciones protegidas, como acceder a la clave API del usuario o eliminar la bóveda del usuario y las organizaciones de las que el usuario es administrador/propietario. Este problema ha sido parcheado en la versión 1.35.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dani-garcia:vaultwarden:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.0",
            "matchCriteriaId" : "7E2621A9-90DC-46B4-950C-FAC2EE6A6A50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-v6pg-v89r-w8wr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-v6pg-v89r-w8wr",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27802",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T22:16:18.057",
      "lastModified" : "2026-03-06T19:45:31.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, there is a privilege escalation vulnerability via bulk permission update to unauthorized collections by Manager. This issue has been patched in version 1.35.4."
      }, {
        "lang" : "es",
        "value" : "Vaultwarden es un servidor compatible con Bitwarden no oficial escrito en Rust, anteriormente conocido como bitwarden_rs. Anterior a la versión 1.35.4, existe una vulnerabilidad de escalada de privilegios a través de la actualización masiva de permisos a colecciones no autorizadas por parte del Manager. Este problema ha sido parcheado en la versión 1.35.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dani-garcia:vaultwarden:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.4",
            "matchCriteriaId" : "3EE3AB66-F61B-479C-A6C3-C2EEEB6FD55A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-r32r-j5jq-3w4m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27803",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T22:16:18.210",
      "lastModified" : "2026-03-06T19:45:27.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, when a Manager has manage=false for a given collection, they can still perform several management operations as long as they have access to the collection. This issue has been patched in version 1.35.4."
      }, {
        "lang" : "es",
        "value" : "Vaultwarden es un servidor compatible con Bitwarden no oficial escrito en Rust, anteriormente conocido como bitwarden_rs. Antes de la versión 1.35.4, cuando un Gestor tiene manage=false para una colección determinada, aún puede realizar varias operaciones de gestión siempre que tenga acceso a la colección. Este problema ha sido parcheado en la versión 1.35.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dani-garcia:vaultwarden:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.4",
            "matchCriteriaId" : "3EE3AB66-F61B-479C-A6C3-C2EEEB6FD55A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h4hq-rgvh-wh27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27898",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T22:16:18.373",
      "lastModified" : "2026-03-06T19:45:12.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, an authenticated regular user can specify another user’s cipher_id and call \"PUT /api/ciphers/{id}/partial\" Even though the standard retrieval API correctly denies access to that cipher, the partial update endpoint returns 200 OK and exposes cipherDetails (including name, notes, data, secureNote, etc.). This issue has been patched in version 1.35.4."
      }, {
        "lang" : "es",
        "value" : "Vaultwarden es un servidor compatible con Bitwarden no oficial escrito en Rust, anteriormente conocido como bitwarden_rs. Antes de la versión 1.35.4, un usuario regular autenticado puede especificar el cipher_id de otro usuario y llamar a 'PUT /api/ciphers/{id}/partial'. Aunque la API de recuperación estándar deniega correctamente el acceso a ese cifrado, el endpoint de actualización parcial devuelve 200 OK y expone cipherDetails (incluyendo nombre, notas, datos, secureNote, etc.). Este problema ha sido parcheado en la versión 1.35.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dani-garcia:vaultwarden:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.4",
            "matchCriteriaId" : "3EE3AB66-F61B-479C-A6C3-C2EEEB6FD55A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w9f8-m526-h7fh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29000",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-04T22:16:18.783",
      "lastModified" : "2026-04-16T16:18:36.200",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators."
      }, {
        "lang" : "es",
        "value" : "Las versiones de pac4j-jwt anteriores a la 4.5.9, 5.7.9 y 6.3.3 contienen una vulnerabilidad de omisión de autenticación en JwtAuthenticator al procesar JWT cifrados que permite a atacantes remotos falsificar tokens de autenticación. Los atacantes que poseen la clave pública RSA del servidor pueden crear un PlainJWT envuelto en JWE con reclamaciones de sujeto y rol arbitrarias, omitiendo la verificación de firma para autenticarse como cualquier usuario, incluidos los administradores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.pac4j.org/blog/security-advisory-pac4j-jwt-jwtauthenticator.html",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/pac4j-jwt-jwtauthenticator-authentication-bypass",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26002",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T23:16:09.980",
      "lastModified" : "2026-03-18T16:09:26.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3.  Versions below this remain susceptible."
      }, {
        "lang" : "es",
        "value" : "Open OnDemand es un portal de computación de alto rendimiento de código abierto. La aplicación Archivos en las versiones de OnDemand anteriores a la 4.0.9 y 4.1.3 es susceptible a entrada maliciosa al navegar a un directorio. Esto ha sido parcheado en las versiones 4.0.9 y 4.1.3. Las versiones anteriores a esta permanecen susceptibles."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osc:open_ondemand:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.16",
            "matchCriteriaId" : "00311901-D04A-4489-AFBC-15086935D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osc:open_ondemand:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.9",
            "matchCriteriaId" : "53C4FAFA-8ECA-46BB-A237-FA667B0EF8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osc:open_ondemand:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "7E9C6CE0-DE0A-4A34-988A-194B7818617F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OSC/ondemand/commit/23cb167222886fdd8415277ca5c1215f4c32629c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OSC/ondemand/commit/37f0ae4efb222e9c0af250feae860a720427df16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OSC/ondemand/security/advisories/GHSA-f83q-mhrr-3cr2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29045",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T23:16:10.247",
      "lastModified" : "2026-03-06T18:06:45.650",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using serveStatic together with route-based middleware protections (e.g. app.use('/admin/*', ...)), inconsistent URL decoding allowed protected static resources to be accessed without authorization. The router used decodeURI, while serveStatic used decodeURIComponent. This mismatch allowed paths containing encoded slashes (%2F) to bypass middleware protections while still resolving to the intended filesystem path. This issue has been patched in version 4.12.4."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier tiempo de ejecución de JavaScript. Antes de la versión 4.12.4, cuando se usaba serveStatic junto con protecciones de middleware basadas en rutas (p. ej., app.use('/admin/*', ...)), una decodificación inconsistente de URL permitía que se accediera a recursos estáticos protegidos sin autorización. El router usaba decodeURI, mientras que serveStatic usaba decodeURIComponent. Esta discrepancia permitía que las rutas que contenían barras codificadas (%2F) eludieran las protecciones de middleware mientras seguían resolviéndose a la ruta de sistema de archivos prevista. Este problema ha sido parcheado en la versión 4.12.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-177"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.12.4",
            "matchCriteriaId" : "8ADA9966-4575-41CC-8905-E1F4E4CB5CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/6a0607a929d888893f0c91d92dce2fcfdb3662a3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-q5qw-h33p-qvwr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29085",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T23:16:10.423",
      "lastModified" : "2026-03-06T18:03:12.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE() in Streaming Helper, the event, id, and retry fields were not validated for carriage return (\\r) or newline (\\n) characters. Because the SSE protocol uses line breaks as field delimiters, this could allow injection of additional SSE fields within the same event frame if untrusted input was passed into these fields. This issue has been patched in version 4.12.4."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.12.4, al usar streamSSE() en Streaming Helper, los campos event, id y retry no se validaban en busca de caracteres de retorno de carro (\\r) o nueva línea (\\n). Debido a que el protocolo SSE utiliza saltos de línea como delimitadores de campo, esto podría permitir la inyección de campos SSE adicionales dentro del mismo marco de evento si se pasaba entrada no confiable a estos campos. Este problema ha sido parcheado en la versión 4.12.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.12.4",
            "matchCriteriaId" : "8ADA9966-4575-41CC-8905-E1F4E4CB5CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/f4123ed9ea3c7c52380cc99a079a4d773838846e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-p6xx-57qc-3wxr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29086",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-04T23:16:10.593",
      "lastModified" : "2026-03-06T18:00:25.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, the setCookie() utility did not validate semicolons (;), carriage returns (\\r), or newline characters (\\n) in the domain and path options when constructing the Set-Cookie header. Because cookie attributes are delimited by semicolons, this could allow injection of additional cookie attributes if untrusted input was passed into these fields. This issue has been patched in version 4.12.4."
      }, {
        "lang" : "es",
        "value" : "Hono es un framework de aplicación web que proporciona soporte para cualquier entorno de ejecución de JavaScript. Antes de la versión 4.12.4, la utilidad setCookie() no validaba los puntos y coma (;), los retornos de carro (\\r) o los caracteres de nueva línea (\\n) en las opciones de dominio y ruta al construir la cabecera Set-Cookie. Dado que los atributos de las cookies están delimitados por puntos y coma, esto podría permitir la inyección de atributos de cookie adicionales si se pasaba una entrada no confiable a estos campos. Este problema ha sido parcheado en la versión 4.12.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1113"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:hono:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.12.4",
            "matchCriteriaId" : "8ADA9966-4575-41CC-8905-E1F4E4CB5CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/hono/commit/44ae0c8cc4d5ab2bed529127a4ac72e1483ad073",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/hono/security/advisories/GHSA-5pq2-9x2x-5p6w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2297",
      "sourceIdentifier" : "cna@python.org",
      "published" : "2026-03-04T23:16:10.757",
      "lastModified" : "2026-05-01T16:16:30.110",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire."
      }, {
        "lang" : "es",
        "value" : "El gancho de importación en CPython que maneja los archivos *.pyc heredados (SourcelessFileLoader) es manejado incorrectamente en FileLoader (una clase base) y por lo tanto no usa io.open_code() para leer los archivos .pyc. Los manejadores de sys.audit para este evento de auditoría, por lo tanto, no se disparan."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@python.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/69ddd9bb2cc4bd69b1565647c18659c6a789ccd9",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/876858c9f65d9ab656c7fa639f268ce7856d89dd",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/issues/145506",
        "source" : "cna@python.org"
      }, {
        "url" : "https://github.com/python/cpython/pull/145507",
        "source" : "cna@python.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/05/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22052",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2026-03-05T00:15:56.550",
      "lastModified" : "2026-03-13T01:37:59.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission."
      }, {
        "lang" : "es",
        "value" : "Las versiones de ONTAP 9.12.1 y superiores con buckets S3 NAS son susceptibles a una vulnerabilidad de revelación de información. Un exploit exitoso podría permitir a un atacante autenticado ver un listado de los contenidos en un directorio para el cual carecen de permiso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-alert@netapp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.12.1",
            "matchCriteriaId" : "25699D18-1968-44C4-904A-0DA243BD47C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20333EE-4C13-426E-8B54-D78679D5DDB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20260304-0001",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2833",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-03-05T00:15:57.650",
      "lastModified" : "2026-03-12T15:08:03.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing an Upgrade header, causing the proxy to pass through the rest of the bytes on the connection to a backend before the backend has accepted the upgrade. An attacker can thus directly forward a malicious payload after a request with an Upgrade header to that backend in a way that may be interpreted as a subsequent request header, bypassing proxy-level security controls and enabling cross-user session hijacking.\n\nImpact\n\nThis vulnerability primarily affects standalone Pingora deployments where a Pingora proxy is exposed to external traffic. An attacker could exploit this to:\n\n  *  Bypass proxy-level ACL controls and WAF logic\n\n\n\n\n  *  Poison caches and upstream connections, causing subsequent requests from legitimate users to receive responses intended for smuggled requests\n\n\n\n\n  *  Perform cross-user attacks by hijacking sessions or smuggling requests that appear to originate from the trusted proxy IP\n\n\n\n\nCloudflare's CDN infrastructure was not affected by this vulnerability, as ingress proxies in the CDN stack maintain proper HTTP parsing boundaries and do not prematurely switch to upgraded connection forwarding mode.\n\n\nMitigation:\n\nPingora users should upgrade to Pingora v0.8.0 or higher\n\n\nAs a workaround, users may return an error on requests with the Upgrade header present in their request filter logic in order to stop processing bytes beyond the request header and disable downstream connection reuse."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de contrabando de solicitudes HTTP (CWE-444) en el manejo de Pingora de las actualizaciones de conexión HTTP/1.1. El problema ocurre cuando un proxy de Pingora lee una solicitud que contiene un encabezado Upgrade, haciendo que el proxy pase el resto de los bytes de la conexión a un backend antes de que el backend haya aceptado la actualización. Un atacante puede así reenviar directamente una carga útil maliciosa después de una solicitud con un encabezado Upgrade a ese backend de una manera que puede ser interpretada como un encabezado de solicitud subsiguiente, eludiendo los controles de seguridad a nivel de proxy y permitiendo el secuestro de sesión entre usuarios.\n\nImpacto\n\nEsta vulnerabilidad afecta principalmente a implementaciones de Pingora independientes donde un proxy de Pingora está expuesto al tráfico externo. Un atacante podría explotar esto para:\n\n  *  Eludir los controles ACL a nivel de proxy y la lógica WAF\n\n  *  Envenenar cachés y conexiones ascendentes, haciendo que las solicitudes subsiguientes de usuarios legítimos reciban respuestas destinadas a solicitudes de contrabando\n\n  *  Realizar ataques entre usuarios secuestrando sesiones o contrabandeando solicitudes que parecen originarse de la IP del proxy de confianza\n\nLa infraestructura CDN de Cloudflare no se vio afectada por esta vulnerabilidad, ya que los proxies de entrada en la pila CDN mantienen límites de análisis HTTP adecuados y no cambian prematuramente al modo de reenvío de conexión actualizada.\n\nMitigación:\n\nLos usuarios de Pingora deberían actualizar a Pingora v0.8.0 o superior\n\nComo solución alternativa, los usuarios pueden devolver un error en solicitudes con el encabezado Upgrade presente en su lógica de filtro de solicitudes para detener el procesamiento de bytes más allá del encabezado de la solicitud y deshabilitar la reutilización de la conexión descendente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:pingora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "7FD8B659-5061-46DA-8A73-2E17D6298546"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/pingora",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2835",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-03-05T00:15:57.860",
      "lastModified" : "2026-03-12T15:06:16.957",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Transfer-Encoding values, allowing attackers to send HTTP/1.0 requests in a way that would desync Pingora’s request framing from backend servers’.\n\nImpact\n\nThis vulnerability primarily affects standalone Pingora deployments in front of certain backends that accept HTTP/1.0 requests. An attacker could craft a malicious payload following this request that Pingora forwards to the backend in order to:\n\n  *  Bypass proxy-level ACL controls and WAF logic\n\n\n\n\n  *  Poison caches and upstream connections, causing subsequent requests from legitimate users to receive responses intended for smuggled requests\n\n\n\n\n  *  Perform cross-user attacks by hijacking sessions or smuggling requests that appear to originate from the trusted proxy IP\n\n\n\n\nCloudflare's CDN infrastructure was not affected by this vulnerability, as its ingress proxy layers forwarded HTTP/1.1 requests only, rejected ambiguous framing such as invalid Content-Length values, and forwarded a single Transfer-Encoding: chunked header for chunked requests.\n\n\nMitigation:\n\nPingora users should upgrade to Pingora v0.8.0 or higher that fixes this issue by correctly parsing message length headers per RFC 9112 and strictly adhering to more RFC guidelines, including that HTTP request bodies are never close-delimited.\n\nAs a workaround, users can reject certain requests with an error in the request filter logic in order to stop processing bytes on the connection and disable downstream connection reuse. The user should reject any non-HTTP/1.1 request, or a request that has invalid Content-Length, multiple Transfer-Encoding headers, or Transfer-Encoding header that is not an exact “chunked” string match."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contrabando de solicitudes HTTP (CWE-444) ha sido encontrada en el análisis de Pingora de solicitudes HTTP/1.0 y Transfer-Encoding. El problema ocurre debido a permitir incorrectamente que los cuerpos de solicitudes HTTP/1.0 sean delimitados por cierre y al manejo incorrecto de múltiples valores de Transfer-Encoding, permitiendo a los atacantes enviar solicitudes HTTP/1.0 de una manera que desincronizaría el encuadre de solicitudes de Pingora con el de los servidores backend.\n\nImpacto\n\nEsta vulnerabilidad afecta principalmente a implementaciones de Pingora independientes frente a ciertos backends que aceptan solicitudes HTTP/1.0. Un atacante podría crear una carga útil maliciosa siguiendo esta solicitud que Pingora reenvía al backend con el fin de:\n\n  *  Omitir los controles ACL a nivel de proxy y la lógica WAF\n\n  *  Envenenar cachés y conexiones ascendentes, causando que solicitudes posteriores de usuarios legítimos reciban respuestas destinadas a solicitudes de contrabando\n\n  *  Realizar ataques entre usuarios secuestrando sesiones o contrabandeando solicitudes que parecen originarse de la IP del proxy de confianza\n\nLa infraestructura CDN de Cloudflare no se vio afectada por esta vulnerabilidad, ya que sus capas de proxy de entrada solo reenviaban solicitudes HTTP/1.1, rechazaban el encuadre ambiguo, como valores Content-Length inválidos, y reenviaban un único encabezado Transfer-Encoding: chunked para solicitudes chunked.\n\nMitigación:\n\nLos usuarios de Pingora deberían actualizar a Pingora v0.8.0 o superior que corrige este problema analizando correctamente los encabezados de longitud de mensaje según RFC 9112 y adhiriéndose estrictamente a más directrices de RFC, incluyendo que los cuerpos de solicitudes HTTP nunca son delimitados por cierre.\n\nComo solución alternativa, los usuarios pueden rechazar ciertas solicitudes con un error en la lógica del filtro de solicitudes con el fin de detener el procesamiento de bytes en la conexión y deshabilitar la reutilización de la conexión descendente. El usuario debería rechazar cualquier solicitud que no sea HTTP/1.1, o una solicitud que tenga Content-Length inválido, múltiples encabezados Transfer-Encoding, o un encabezado Transfer-Encoding que no sea una coincidencia exacta de la cadena 'chunked'."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:pingora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "7FD8B659-5061-46DA-8A73-2E17D6298546"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/pingora",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2836",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2026-03-05T00:15:58.053",
      "lastModified" : "2026-03-12T14:33:32.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementation generates cache keys using only the URI path, excluding critical factors such as the host header (authority). Operators relying on the default are vulnerable to cache poisoning, and cross-origin responses may be improperly served to users.\n\n\nImpact\n\nThis vulnerability affects users of Pingora's alpha proxy caching feature who relied on the default CacheKey implementation. An attacker could exploit this for:\n\n  *  Cross-tenant data leakage: In multi-tenant deployments, poison the cache so that users from one tenant receive cached responses from another tenant\n\n\n  *  Cache poisoning attacks: Serve malicious content to legitimate users by poisoning shared cache entries\n\n\n\n\nCloudflare's CDN infrastructure was not affected by this vulnerability, as Cloudflare's default cache key implementation uses multiple factors to prevent cache key poisoning and never made use of the previously provided default.\n\n\nMitigation:\n\nWe strongly recommend Pingora users to upgrade to Pingora v0.8.0 or higher, which removes the insecure default cache key implementation. Users must now explicitly implement their own callback that includes appropriate factors such as Host header, origin server HTTP scheme, and other attributes their cache should vary on.\n\n\nPingora users on previous versions may also remove any of their default CacheKey usage and implement their own that should at minimum include the host header / authority and upstream peer’s HTTP scheme."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de envenenamiento de caché en la construcción predeterminada de clave de caché del framework de proxy HTTP Pingora. El problema ocurre porque la implementación predeterminada de clave de caché HTTP genera claves de caché usando solo la ruta URI, excluyendo factores críticos como el encabezado de host (autoridad). Los operadores que dependen del valor predeterminado son vulnerables al envenenamiento de caché, y las respuestas de origen cruzado pueden ser servidas incorrectamente a los usuarios.\n\nImpacto\n\nEsta vulnerabilidad afecta a los usuarios de la característica de almacenamiento en caché de proxy alfa de Pingora que dependían de la implementación predeterminada de CacheKey. Un atacante podría explotar esto para:\n\n  *  Fuga de datos entre inquilinos: En implementaciones multi-inquilino, envenenar la caché para que los usuarios de un inquilino reciban respuestas en caché de otro inquilino\n\n  *  Ataques de envenenamiento de caché: Servir contenido malicioso a usuarios legítimos envenenando entradas de caché compartidas\n\nLa infraestructura CDN de Cloudflare no se vio afectada por esta vulnerabilidad, ya que la implementación predeterminada de clave de caché de Cloudflare utiliza múltiples factores para prevenir el envenenamiento de clave de caché y nunca hizo uso del valor predeterminado proporcionado anteriormente.\n\nMitigación:\n\nRecomendamos encarecidamente a los usuarios de Pingora que actualicen a Pingora v0.8.0 o superior, lo que elimina la implementación predeterminada insegura de clave de caché. Los usuarios ahora deben implementar explícitamente su propia función de devolución de llamada que incluya factores apropiados como el encabezado Host, el esquema HTTP del servidor de origen y otros atributos en los que su caché debería variar.\n\nLos usuarios de Pingora en versiones anteriores también pueden eliminar cualquier uso de su CacheKey predeterminada e implementar la suya propia que debería incluir como mínimo el encabezado de host / autoridad y el esquema HTTP del par ascendente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:pingora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "7FD8B659-5061-46DA-8A73-2E17D6298546"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/pingora",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29121",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T01:15:51.057",
      "lastModified" : "2026-03-11T18:35:55.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system and may potentially lead to other avenues for preforming privileged actions."
      }, {
        "lang" : "es",
        "value" : "El receptor de satélite International Data Casting (IDC) SFX2100 viene con la utilidad `/sbin/ip` instalada con el bit setuid establecido. Esta configuración otorga privilegios elevados a cualquier usuario local que pueda ejecutar el binario. Un actor local puede usar el recurso GTFObins para realizar lecturas de archivos privilegiadas como el usuario root en el sistema de archivos local y puede potencialmente conducir a otras vías para realizar acciones privilegiadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Amber",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "LOW",
            "providerUrgency" : "AMBER"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gtfobins.org/gtfobins/ip/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29122",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T02:16:51.373",
      "lastModified" : "2026-03-11T18:35:46.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "International Data Casting (IDC) SFX2100 satellite receiver comes with the `/bin/date` utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system. This allows an actor to be able to read any root read-only files, such as the /etc/shadow file or other configuration/secrets carrier files."
      }, {
        "lang" : "es",
        "value" : "El receptor de satélite International Data Casting (IDC) SFX2100 viene con la utilidad `/bin/date` instalada con el bit setuid establecido. Esta configuración otorga privilegios elevados a cualquier usuario local que pueda ejecutar el binario. Un actor local puede usar el recurso GTFObins para realizar lecturas de archivos privilegiadas como el usuario root en el sistema de archivos local. Esto permite a un actor poder leer cualquier archivo de solo lectura de root, como el archivo /etc /shadow u otros archivos que contienen configuración o secretos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gtfobins.org/gtfobins/date/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29123",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T02:16:51.530",
      "lastModified" : "2026-03-11T18:35:37.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symlink abuse or shared object hijacking."
      }, {
        "lang" : "es",
        "value" : "Un binario SUID propiedad de root en /home/xd/terminal/XDTerminal en International Data Casting (IDC) SFX2100 en Linux permite a un actor local realizar potencialmente una escalada de privilegios local dependiendo de las condiciones del sistema mediante la ejecución del binario SUID afectado. Esto puede ser mediante secuestro de PATH, abuso de enlaces simbólicos o secuestro de objetos compartidos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29124",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T02:16:51.687",
      "lastModified" : "2026-03-11T18:35:30.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting (IDC) SFX2100 Satellite Receiver, which may lead to local privlidge escalation from the `monitor` user to root"
      }, {
        "lang" : "es",
        "value" : "Múltiples binarios SUID propiedad de root se encuentran en /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, y /home/monitor/IDE-DPack/terminal-dpack2 en el Receptor de satélite SFX2100 de International Data Casting (IDC), lo que puede llevar a una escalada de privilegios local del usuario 'monitor' a root."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29125",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T02:16:51.833",
      "lastModified" : "2026-03-11T18:35:19.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service."
      }, {
        "lang" : "es",
        "value" : "Los receptores de satélite IDC SFX2100 configuran el archivo '/etc/resolv.conf' para que sea escribible por cualquier usuario local, permitiendo la manipulación del resolvedor DNS que puede redirigir las comunicaciones de red, facilitar ataques man-in-the-middle y causar denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29126",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T02:16:51.993",
      "lastModified" : "2026-03-11T18:34:00.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver allows a local unprivileged attacker to potentially execute arbitrary commands with root privileges (local privilege escalation and persistence) via modification of a root-owned, world-writable BusyBox udhcpc DHCP event script, which is executed when a DHCP lease is obtained, renewed, or lost."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de permisos (archivo escribible por todos) en /etc/udhcpc/default.script en el receptor de satélite SFX2100 de International Data Casting (IDC) permite a un atacante local sin privilegios ejecutar potencialmente comandos arbitrarios con privilegios de root (escalada de privilegios local y persistencia) mediante la modificación de un script de evento DHCP de BusyBox udhcpc propiedad de root y escribible por todos, que se ejecuta cuando se obtiene, renueva o pierde una concesión DHCP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NO",
            "Recovery" : "USER",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3257",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-03-05T02:16:52.150",
      "lastModified" : "2026-03-09T14:53:08.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library.\n\nUnQLite for Perl embeds the UnQLite library.  Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow."
      }, {
        "lang" : "es",
        "value" : "Las versiones de UnQLite hasta la 0.06 para Perl utilizan una versión potencialmente insegura de la biblioteca UnQLite.\n\nUnQLite para Perl incrusta la biblioteca UnQLite. La versión 0.06 y anteriores del módulo Perl utilizan una versión de la biblioteca de 2014 que puede ser vulnerable a un desbordamiento basado en el montón."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tokuhirom:unqlite:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "0.07",
            "matchCriteriaId" : "E9DB99D4-E76E-44B5-B1C6-69D1EE50F8B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://metacpan.org/release/TOKUHIROM/UnQLite-0.07/source/Changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://unqlite.symisc.net/",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2025-3791",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3381",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-03-05T02:16:52.267",
      "lastModified" : "2026-03-18T19:26:39.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.\n\nCompress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Compress::Raw::Zlib hasta la 2.219 para Perl utilizan versiones de zlib potencialmente inseguras.\nCompress::Raw::Zlib incluye una copia de la biblioteca zlib. La versión 2.220 de Compress::Raw::Zlib incluye zlib 1.3.2, que aborda los hallazgos de la auditoría de zlib realizada por 7ASecurity. Incluye correcciones para CVE-2026-27171."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pmqs:compress\\:\\:raw\\:\\:zlib:*:*:*:*:*:perl:*:*",
            "versionEndIncluding" : "2.219",
            "matchCriteriaId" : "CF12AE53-1C97-4000-9D26-291171523E44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/madler/zlib",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/madler/zlib/releases/tag/v1.3.2",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pmqs/Compress-Raw-Zlib/issues/41",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-27171",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zlib.net/",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26033",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-05T03:15:54.333",
      "lastModified" : "2026-03-09T18:43:50.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a directory on the system drive to execute arbitrary code with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "UPS Multi-UPS Management Console (MUMC) versión 01.06.0001 (A03) contiene una vulnerabilidad de ruta de búsqueda o elemento sin comillas (CWE-428), que permite a un usuario con acceso de escritura a un directorio en la unidad del sistema ejecutar código arbitrario con privilegios de SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:ups_multi-ups_management_console:01.06.0001_\\(a03\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D712110-5CBE-465C-B83B-30ACA1CFF098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN56544509/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26034",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-05T03:15:54.540",
      "lastModified" : "2026-03-09T18:43:31.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL."
      }, {
        "lang" : "es",
        "value" : "UPS Multi-UPS Management Console (MUMC) versión 01.06.0001 (A03) contiene una vulnerabilidad de Permisos Predeterminados Incorrectos (CWE-276) que permite a un atacante ejecutar código arbitrario con privilegios de SYSTEM al hacer que la aplicación cargue una DLL especialmente diseñada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:ups_multi-ups_management_console:01.06.0001_\\(a03\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D712110-5CBE-465C-B83B-30ACA1CFF098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN56544509/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29127",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T03:15:54.713",
      "lastModified" : "2026-03-09T18:42:33.630",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The directory is configured with permissions 0777, granting read, write, and execute access to all local users on the system, which may cause local privilege escalation depending on conditions of the system due to the presence of highly privileged processes and binaries residing within the affected directory."
      }, {
        "lang" : "es",
        "value" : "El receptor de satélite IDC SFX2100 establece permisos de sistema de archivos excesivamente permisivos en el directorio de inicio del usuario monitor. El directorio está configurado con permisos 0777, otorgando acceso de lectura, escritura y ejecución a todos los usuarios locales en el sistema, lo que puede causar escalada de privilegios local dependiendo de las condiciones del sistema debido a la presencia de procesos y binarios altamente privilegiados que residen dentro del directorio afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2365",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T04:15:56.783",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fluent Forms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `fluentform_step_form_save_data` AJAX action in all versions up to, and including, 6.1.17. This is due to the draft form submission endpoint being publicly accessible without authentication or nonce verification, combined with insufficient input sanitization and output escaping of form field data. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrator views a partial form entry."
      }, {
        "lang" : "es",
        "value" : "El plugin Fluent Forms Pro para WordPress es vulnerable a Cross-Site Scripting Almacenado a través de la acción AJAX 'fluentform_step_form_save_data' en todas las versiones hasta la 6.1.17, inclusive. Esto se debe a que el endpoint de envío de formularios en borrador es públicamente accesible sin autenticación o verificación de nonce, combinado con una sanitización de entrada y un escape de salida insuficientes de los datos de los campos del formulario. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un administrador vea una entrada de formulario parcial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluentforms.com/docs/changelog/#3-toc-title",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Modules/Form/FormDataParser.php#L57",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5e911b0a-a236-4df3-b997-3631412a1b55?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2899",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T04:15:57.233",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.1.17. This is due to the `deleteFile()` method in the `Uploader` class lacking nonce verification and capability checks. The AJAX action is registered via `addPublicAjaxAction()` which creates both `wp_ajax_` and `wp_ajax_nopriv_` hooks. This makes it possible for unauthenticated attackers to delete arbitrary WordPress media attachments via the `attachment_id` parameter.\r\n\r\nNote: The researcher described file deletion via the `path` parameter using `sanitize_file_name()`, but the actual code uses `Protector::decrypt()` for path-based deletion which prevents exploitation. The vulnerability is exploitable via the `attachment_id` parameter instead."
      }, {
        "lang" : "es",
        "value" : "El plugin Fluent Forms Pro Add On Pack para WordPress es vulnerable a Autorización Faltante en todas las versiones hasta la 6.1.17, inclusive. Esto se debe a que el método 'deleteFile()' en la clase 'Uploader' carece de verificación de nonce y comprobaciones de capacidad. La acción AJAX se registra a través de 'addPublicAjaxAction()', lo que crea los hooks 'wp_ajax_' y 'wp_ajax_nopriv_'. Esto hace posible que atacantes no autenticados eliminen archivos adjuntos de medios de WordPress arbitrarios a través del parámetro 'attachment_id'.\n\nNota: El investigador describió la eliminación de archivos a través del parámetro 'path' usando 'sanitize_file_name()', pero el código real usa 'Protector::decrypt()' para la eliminación basada en la ruta, lo que evita la explotación. La vulnerabilidad es explotable a través del parámetro 'attachment_id' en su lugar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluentforms.com/docs/changelog/#3-toc-title",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb036338-abd7-4061-835d-038b765c68a6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3034",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T04:15:57.407",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _ob_spacerat_link, _ob_bbad_link, and _ob_teleporter_link URL parameters in all versions up to, and including, 2.1.24. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected element."
      }, {
        "lang" : "es",
        "value" : "El plugin OoohBoi Steroids para Elementor para WordPress es vulnerable a cross-site scripting almacenado a través de los parámetros URL _ob_spacerat_link, _ob_bbad_link y _ob_teleporter_link en todas las versiones hasta la 2.1.24, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario haga clic en el elemento inyectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ooohboi-steroids-for-elementor/tags/2.1.24/assets/js/ooohboi-steroids.js#L135",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ooohboi-steroids-for-elementor/tags/2.1.24/assets/js/ooohboi-steroids.js#L300",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ooohboi-steroids-for-elementor/tags/2.1.24/assets/js/spacerat.js#L52",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/ooohboi-steroids-for-elementor/#developers",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9c2de78e-8530-416b-adef-e2e8ff322802?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3523",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T05:16:37.717",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0. This is due to a flawed logical operator in the type validation check on line 261 of ajax.php — the condition uses `&&` (AND) instead of `||` (OR), causing the `in_array()` validation to be short-circuited and never evaluated for any non-empty type value. Combined with `stripslashes_deep()` being called on line 101 which removes `wp_magic_quotes()` protection, attacker-controlled single quotes pass through unescaped into the SQL query on line 298. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El plugin Apocalypse Meow para WordPress es vulnerable a inyecciones SQL a través del parámetro \"type\" en todas las versiones hasta la 22.1.0, incluida esta. Esto se debe a un operador lógico defectuoso en la comprobación de validación de tipo en la línea 261 de ajax.php: la condición utiliza \"&amp;&amp;\" (AND) en lugar de «||» (OR), lo que provoca que la validación «in_array()» se acorte y nunca se evalúe para ningún valor de tipo no vacío. En combinación con la llamada a `stripslashes_deep()` en la línea 101, que elimina la protección `wp_magic_quotes()`, las comillas simples controladas por el atacante pasan sin escapar a la consulta SQL de la línea 298. Esto permite a los atacantes autenticados, con acceso de nivel administrador o superior, añadir consultas SQL adicionales a las consultas ya existentes, que pueden utilizarse para extraer información confidencial de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/tags/22.1.0/lib/blobfolio/wp/meow/ajax.php#L101",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/tags/22.1.0/lib/blobfolio/wp/meow/ajax.php#L167",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/tags/22.1.0/lib/blobfolio/wp/meow/ajax.php#L261",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/tags/22.1.0/lib/blobfolio/wp/meow/ajax.php#L298",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/trunk/lib/blobfolio/wp/meow/ajax.php#L101",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/trunk/lib/blobfolio/wp/meow/ajax.php#L167",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/trunk/lib/blobfolio/wp/meow/ajax.php#L261",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/apocalypse-meow/trunk/lib/blobfolio/wp/meow/ajax.php#L298",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3448958%40apocalypse-meow&new=3448958%40apocalypse-meow&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a1af9757-23e9-41d2-bbcd-15b0610b6538?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22385",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.103",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Wolmart wolmart allows PHP Local File Inclusion.This issue affects Wolmart: from n/a through <= 1.9.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP, vulnerabilidad de 'inclusión remota de ficheros PHP' en don-themes Wolmart wolmart permite la inclusión local de ficheros PHP. Este problema afecta a Wolmart: desde n/a hasta &lt;= 1.9.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/wolmart/vulnerability/wordpress-wolmart-theme-1-9-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22387",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.243",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Aviana aviana allows PHP Local File Inclusion.This issue affects Aviana: from n/a through <= 2.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en Mikado-Themes Aviana aviana permite la inclusión local de ficheros PHP. Este problema afecta a Aviana: desde n/a hasta &lt;= 2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/aviana/vulnerability/wordpress-aviana-theme-2-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22389",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.380",
      "lastModified" : "2026-04-23T15:36:28.337",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cocco cocco allows PHP Local File Inclusion.This issue affects Cocco: from n/a through <= 2.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Mikado-Themes Cocco cocco permite la inclusión local de ficheros PHP. Este problema afecta a Cocco: desde n/d hasta &lt;= 1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/cocco/vulnerability/wordpress-cocco-theme-1-5-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22390",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.520",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through <= 3.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado de la generación de código ('Inyección de código') en Builderall Builderall Builder para WordPress builderall-cheetah-for-wp permite la inyección de código. Este problema afecta a Builderall Builder para WordPress: desde n/a hasta &lt;= 3.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/builderall-cheetah-for-wp/vulnerability/wordpress-builderall-builder-for-wordpress-plugin-3-0-1-remote-code-execution-rce-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22392",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.663",
      "lastModified" : "2026-04-23T15:36:28.650",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cortex cortex allows PHP Local File Inclusion.This issue affects Cortex: from n/a through <= 1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad 'Inclusión Remota de Ficheros PHP') en Mikado-Themes Cortex cortex permite Inclusión Local de Ficheros PHP. Este problema afecta a Cortex: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/cortex/vulnerability/wordpress-cortex-theme-1-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22394",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.800",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en Mikado-Themes Evently evently permite la inclusión local de ficheros PHP. Este problema afecta a Evently: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/evently/vulnerability/wordpress-evently-theme-1-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22395",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:13.940",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclusion.This issue affects Fiorello: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en Mikado-Themes Fiorello fiorello permite la inclusión local de ficheros PHP. Este problema afecta a Fiorello: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fiorello/vulnerability/wordpress-fiorello-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22397",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.077",
      "lastModified" : "2026-04-23T15:36:29.133",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.This issue affects Fleur: from n/a through <= 2.2.1."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control Inadecuado del Nombre de Fichero para la Declaración Include/Require en un Programa PHP ('Inclusión Remota de Ficheros PHP') en Mikado-Themes Fleur fleur permite la Inclusión Local de Ficheros PHP. Este problema afecta a Fleur: desde n/a hasta &lt;= 2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fleur/vulnerability/wordpress-fleur-theme-2-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22399",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.213",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion.This issue affects Holmes: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en Mikado-Themes Holmes holmes permite la inclusión local de ficheros PHP. Este problema afecta a Holmes: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/holmes/vulnerability/wordpress-holmes-theme-1-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22403",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.350",
      "lastModified" : "2026-04-23T15:36:29.760",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through <= 1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Mikado-Themes Innovio innovio permite la inclusión local de ficheros PHP. Este problema afecta a Innovio: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/innovio/vulnerability/wordpress-innovio-theme-1-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22405",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.480",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusion.This issue affects Overton: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Mikado-Themes Overton overton permite la inclusión local de ficheros PHP. Este problema afecta a Overton: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/overton/vulnerability/wordpress-overton-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22408",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.620",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Justicia justicia allows PHP Local File Inclusion.This issue affects Justicia: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP, la vulnerabilidad 'inclusión remota de ficheros PHP' en Mikado-Themes Justicia justicia permite la inclusión local de ficheros PHP. Este problema afecta a Justicia: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/justicia/vulnerability/wordpress-justicia-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22410",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.757",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dolcino dolcino allows PHP Local File Inclusion.This issue affects Dolcino: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP ('Inclusión Remota de Ficheros PHP') en Mikado-Themes Dolcino dolcino permite Inclusión Local de Ficheros PHP. Este problema afecta a Dolcino: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dolcino/vulnerability/wordpress-dolcino-theme-1-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22412",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:14.897",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión remota de ficheros PHP') en Mikado-Themes Eona eona permite la inclusión local de ficheros PHP. Este problema afecta a Eona: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/eona/vulnerability/wordpress-eona-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22413",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.033",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Malgré malgre allows PHP Local File Inclusion.This issue affects Malgré: from n/a through <= 1.0.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Mikado-Themes Malgré malgre permite la inclusión local de ficheros PHP. Este problema afecta a Malgré: desde n/a hasta &lt;= 1.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/malgre/vulnerability/wordpress-malgre-theme-1-0-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22414",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.173",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP Local File Inclusion.This issue affects Marra: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('Inclusión Remota de Ficheros PHP') en Mikado-Themes Marra marra permite la Inclusión Local de Ficheros PHP. Este problema afecta a Marra: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/marra/vulnerability/wordpress-marra-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22415",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.310",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through <= 1.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('vulnerabilidad de inclusión remota de ficheros PHP') en AncoraThemes The Mounty the-mounty permite la inclusión local de ficheros PHP. Este problema afecta a The Mounty: desde n/a hasta &lt;= 1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/the-mounty/vulnerability/wordpress-the-mounty-theme-1-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22416",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.450",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes FixTeam fixteam allows PHP Local File Inclusion.This issue affects FixTeam: from n/a through <= 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'PHP Remote File Inclusion') en AncoraThemes FixTeam fixteam permite la inclusión local de ficheros PHP. Este problema afecta a FixTeam: desde n/a hasta &lt;= 1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/fixteam/vulnerability/wordpress-fixteam-theme-1-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22417",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.590",
      "lastModified" : "2026-04-28T19:36:35.933",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeGoods Grand Wedding grandwedding permite la inyección de objetos. Este problema afecta a Grand Wedding: desde n/a hasta &lt;= 3.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/grandwedding/vulnerability/wordpress-grand-wedding-theme-3-1-0-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22418",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.730",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through <= 1.3.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la sentencia include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en AncoraThemes Great Lotus great-lotus permite la inclusión local de ficheros PHP. Este problema afecta a Great Lotus: desde n/a hasta &lt;= 1.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/great-lotus/vulnerability/wordpress-great-lotus-theme-1-3-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22419",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:15.870",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Honor honor allows PHP Local File Inclusion.This issue affects Honor: from n/a through <= 2.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en AncoraThemes Honor honor permite la Inclusión local de ficheros PHP. Este problema afecta a Honor: desde n/a hasta &lt;= 2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/honor/vulnerability/wordpress-honor-theme-2-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22420",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.010",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Horizon horizon allows PHP Local File Inclusion.This issue affects Horizon: from n/a through <= 1.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en AncoraThemes Horizon horizon permite la Inclusión Local de Ficheros PHP. Este problema afecta a Horizon: desde n/a hasta &lt;= 1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/horizon/vulnerability/wordpress-horizon-theme-1-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22421",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.150",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Quantum quantum allows PHP Local File Inclusion.This issue affects Quantum: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP, vulnerabilidad de 'inclusión remota de ficheros PHP' en AncoraThemes Quantum quantum, permite la inclusión local de ficheros PHP. Este problema afecta a Quantum: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/quantum/vulnerability/wordpress-quantum-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22423",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.290",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a through <= 1.8."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'Inclusión remota de ficheros PHP') en Select-Themes SetSail setsail permite la Inclusión local de ficheros PHP. Este problema afecta a SetSail: desde n/a hasta &lt;= 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/setsail/vulnerability/wordpress-setsail-theme-1-8-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22424",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.427",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Shaha shaha allows PHP Local File Inclusion.This issue affects Shaha: from n/a through <= 1.1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Shaha shaha permite la inclusión local de ficheros PHP. Este problema afecta a Shaha: desde n/a hasta &lt;= 1.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/shaha/vulnerability/wordpress-shaha-theme-1-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22425",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.563",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Sweet Jane sweetjane allows PHP Local File Inclusion.This issue affects Sweet Jane: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en Elated-Themes Sweet Jane sweetjane permite la Inclusión Local de Ficheros PHP. Este problema afecta a Sweet Jane: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/sweetjane/vulnerability/wordpress-sweet-jane-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22427",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.710",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes GoTravel gotravel allows PHP Local File Inclusion.This issue affects GoTravel: from n/a through <= 2.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Mikado-Themes GoTravel gotravel permite la inclusión local de ficheros PHP. Este problema afecta a GoTravel: desde n/a hasta &lt;= 2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/gotravel/vulnerability/wordpress-gotravel-theme-2-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22428",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.850",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tooth Fairy tooth-fairy allows PHP Local File Inclusion.This issue affects Tooth Fairy: from n/a through <= 1.16."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en AncoraThemes Tooth Fairy tooth-fairy permite la inclusión local de ficheros PHP. Este problema afecta a Tooth Fairy: desde n/a hasta &lt;= 1.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/tooth-fairy/vulnerability/wordpress-tooth-fairy-theme-1-16-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22429",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:16.983",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Verdure verdure allows PHP Local File Inclusion.This issue affects Verdure: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la sentencia include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en Mikado-Themes Verdure verdure permite la inclusión local de ficheros PHP. Este problema afecta a Verdure: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/verdure/vulnerability/wordpress-verdure-theme-1-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22431",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:17.117",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wabi-Sabi wabi-sabi allows PHP Local File Inclusion.This issue affects Wabi-Sabi: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('vulnerabilidad de inclusión remota de ficheros PHP') en AncoraThemes Wabi-Sabi wabi-sabi permite la inclusión local de ficheros PHP. Este problema afecta a Wabi-Sabi: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/wabi-sabi/vulnerability/wordpress-wabi-sabi-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22432",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:17.253",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Woopy woopy allows PHP Local File Inclusion.This issue affects Woopy: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión remota de ficheros PHP') en AncoraThemes Woopy woopy permite la inclusión local de ficheros PHP. Este problema afecta a Woopy: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/woopy/vulnerability/wordpress-woopy-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22433",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:17.390",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CloudMe cloudme allows PHP Local File Inclusion.This issue affects CloudMe: from n/a through <= 1.2.2."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en AncoraThemes CloudMe cloudme permite la inclusión local de ficheros PHP. Este problema afecta a CloudMe: desde n/a hasta &lt;= 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/cloudme/vulnerability/wordpress-cloudme-theme-1-2-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22434",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:17.523",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Crown Art crown-art allows PHP Local File Inclusion.This issue affects Crown Art: from n/a through <= 1.2.11."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Crown Art crown-art permite la inclusión local de ficheros PHP. Este problema afecta a Crown Art: desde n/a hasta &lt;= 1.2.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/crown-art/vulnerability/wordpress-crown-art-theme-1-2-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22435",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:17.663",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File Inclusion.This issue affects ElectroServ: from n/a through <= 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en AncoraThemes ElectroServ electroserv permite la inclusión local de ficheros PHP. Este problema afecta a ElectroServ: desde n/a hasta &lt;= 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/electroserv/vulnerability/wordpress-electroserv-theme-1-3-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22436",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:17.803",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affects Helvig: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Elated-Themes Helvig helvig permite la inclusión local de ficheros PHP. Este problema afecta a Helvig: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/helvig/vulnerability/wordpress-helvig-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22437",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.103",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Playa playa allows PHP Local File Inclusion.This issue affects Playa: from n/a through <= 1.3.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en AncoraThemes Playa playa permite la inclusión local de ficheros PHP. Este problema afecta a Playa: desde n/a hasta &lt;= 1.3.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/playa/vulnerability/wordpress-playa-theme-1-3-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22438",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.270",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree TheBi thebi allows Reflected XSS.This issue affects TheBi: from n/a through <= 1.0.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en foreverpinetree TheBi thebi permite XSS Reflejado. Este problema afecta a TheBi: desde n/a hasta &lt;= 1.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/thebi/vulnerability/wordpress-thebi-theme-1-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22439",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.397",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Green Planet green-planet allows PHP Local File Inclusion.This issue affects Green Planet: from n/a through <= 1.1.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Green Planet green-planet permite la inclusión local de ficheros PHP. Este problema afecta a Green Planet: desde n/a hasta &lt;= 1.1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/green-planet/vulnerability/wordpress-green-planet-theme-1-1-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22440",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.533",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Thecs thecs allows Reflected XSS.This issue affects Thecs: from n/a through <= 1.4.7."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en foreverpinetree Thecs thecs permite XSS Reflejado. Este problema afecta a Thecs: desde n/a hasta &lt;= 1.4.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/thecs/vulnerability/wordpress-thecs-theme-1-4-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22441",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.663",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Zentrum zentrum allows PHP Local File Inclusion.This issue affects Zentrum: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en el programa PHP ('Inclusión Remota de Ficheros PHP') en Elated-Themes Zentrum zentrum permite la inclusión local de ficheros PHP. Este problema afecta a Zentrum: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/zentrum/vulnerability/wordpress-zentrum-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22442",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.793",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LaunchandSell Tribe tribe allows PHP Local File Inclusion.This issue affects Tribe: from n/a through <= 1.7.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP, una vulnerabilidad de 'Inclusión Remota de Ficheros PHP' en LaunchandSell Tribe tribe permite la Inclusión Local de Ficheros PHP. Este problema afecta a Tribe: desde n/a hasta &lt;= 1.7.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/tribe/vulnerability/wordpress-tribe-theme-1-7-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22443",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:18.927",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Alliance alliance allows PHP Local File Inclusion.This issue affects Alliance: from n/a through <= 3.1.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad de 'Inclusión remota de ficheros PHP' en ThemeREX Alliance alliance permite la inclusión local de ficheros PHP. Este problema afecta a Alliance: desde n/a hasta &lt;= 3.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/alliance/vulnerability/wordpress-alliance-theme-3-1-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22446",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.060",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through <= 1.8.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('PHP inclusión remota de ficheros') vulnerabilidad en Select-Themes Prowess prowess permite PHP inclusión local de ficheros. Este problema afecta a Prowess: desde n/a hasta &lt;= 1.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/prowess/vulnerability/wordpress-prowess-theme-1-8-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22449",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.190",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Don Peppe donpeppe allows PHP Local File Inclusion.This issue affects Don Peppe: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('inclusión remota de ficheros PHP') en Select-Themes Don Peppe donpeppe permite la inclusión local de ficheros PHP. Este problema afecta a Don Peppe: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/donpeppe/vulnerability/wordpress-don-peppe-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22451",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.323",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en AncoraThemes Handyman handyman-services permite la inyección de objetos. Este problema afecta a Handyman: desde n/d hasta &lt;= 1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/handyman-services/vulnerability/wordpress-handyman-theme-1-4-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22452",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.447",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Hoverex hoverex allows PHP Local File Inclusion.This issue affects Hoverex: from n/a through <= 1.5.10."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Hoverex hoverex permite Inclusión Local de Ficheros PHP. Este problema afecta a Hoverex: desde n/a hasta &lt;= 1.5.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/hoverex/vulnerability/wordpress-hoverex-theme-1-5-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22453",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.580",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Pets Club petclub permite la inyección de objetos. Este problema afecta a Pets Club: desde n/a hasta &lt;= 2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/petclub/vulnerability/wordpress-pets-club-theme-2-3-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22454",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.707",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Solaris solaris permite la inyección de objetos. Este problema afecta a Solaris: desde n/a hasta &lt;= 2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/solaris/vulnerability/wordpress-solaris-theme-2-5-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22455",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.840",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Thebe thebe allows Reflected XSS.This issue affects Thebe: from n/a through <= 1.3.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en foreverpinetree Thebe thebe permite XSS Reflejado. Este problema afecta a Thebe: desde n/a hasta &lt;= 1.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/thebe/vulnerability/wordpress-thebe-theme-1-3-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22456",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:19.973",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP Local File Inclusion.This issue affects Askka: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en Elated-Themes Askka askka permite la inclusión local de ficheros PHP. Este problema afecta a Askka: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/askka/vulnerability/wordpress-askka-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22457",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.110",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') en Mikado-Themes Wanderland wanderland permite la Inclusión Local de Ficheros PHP. Este problema afecta a Wanderland: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-theme-1-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22459",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.233",
      "lastModified" : "2026-04-28T19:36:38.913",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through <= 2.1.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Blend Media WordPress CTA easy-sticky-sidebar permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WordPress CTA: desde n/a hasta &lt;= 1.7.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/easy-sticky-sidebar/vulnerability/wordpress-wordpress-cta-plugin-1-7-4-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22460",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.370",
      "lastModified" : "2026-04-23T15:36:32.147",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpWax FormGent formgent allows Path Traversal.This issue affects FormGent: from n/a through <= 1.7.0."
      }, {
        "lang" : "es",
        "value" : "Limitación Incorrecta de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta') vulnerabilidad en wpWax FormGent formgent permite Salto de Ruta. Este problema afecta a FormGent: desde n/a hasta &lt;= 1.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/formgent/vulnerability/wordpress-formgent-plugin-1-2-1-arbitrary-file-deletion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22465",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.503",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen BuddyApp buddyapp allows Reflected XSS.This issue affects BuddyApp: from n/a through <= 1.9.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en SeventhQueen BuddyApp buddyapp permite XSS Reflejado. Este problema afecta a BuddyApp: desde n/a hasta &lt;= 1.9.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/buddyapp/vulnerability/wordpress-buddyapp-theme-1-9-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22467",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.640",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mwtemplates DeepDigital deepdigital allows Reflected XSS.This issue affects DeepDigital: from n/a through <= 1.0.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en mwtemplates DeepDigital deepdigital permite XSS Reflejado. Este problema afecta a DeepDigital: desde n/a hasta &lt;= 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/deepdigital/vulnerability/wordpress-deepdigital-theme-1-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22471",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.777",
      "lastModified" : "2026-04-28T19:36:39.830",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in maximsecudeal Secudeal Payments for Ecommerce secudeal-payments-for-ecommerce allows Object Injection.This issue affects Secudeal Payments for Ecommerce: from n/a through <= 1.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en maximsecudeal Secudeal Payments para Ecommerce secudeal-payments-for-ecommerce permite la inyección de objetos. Este problema afecta a Secudeal Payments para Ecommerce: desde n/a hasta &lt;= 1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/secudeal-payments-for-ecommerce/vulnerability/wordpress-secudeal-payments-for-ecommerce-plugin-1-1-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22473",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:20.907",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in designthemes Dental Clinic dental allows Object Injection.This issue affects Dental Clinic: from n/a through <= 3.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en designthemes Dental Clinic dental permite la inyección de objetos. Este problema afecta a Dental Clinic: desde n/a hasta &lt;= 3.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dental/vulnerability/wordpress-dental-clinic-theme-3-7-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22474",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.040",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Equestrian Centre equestrian-centre permite la inyección de objetos. Este problema afecta a Equestrian Centre: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/equestrian-centre/vulnerability/wordpress-equestrian-centre-theme-1-5-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22475",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.163",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en axiomthemes Estate estate permite la inyección de objetos. Este problema afecta a Estate: desde n/d hasta &lt;= 1.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/estate/vulnerability/wordpress-estate-theme-1-3-4-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22476",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.297",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP Local File Inclusion.This issue affects Etchy: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en Elated-Themes Etchy etchy permite la inclusión local de ficheros PHP. Este problema afecta a Etchy: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/etchy/vulnerability/wordpress-etchy-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22477",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.430",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Felizia felizia allows PHP Local File Inclusion.This issue affects Felizia: from n/a through <= 1.3.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en AncoraThemes Felizia felizia permite Inclusión Local de Ficheros PHP. Este problema afecta a Felizia: desde n/a hasta &lt;= 1.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/felizia/vulnerability/wordpress-felizia-theme-1-3-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22478",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.563",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes FindAll findall allows PHP Local File Inclusion.This issue affects FindAll: from n/a through <= 1.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión remota de ficheros PHP') en Elated-Themes FindAll findall permite la inclusión local de ficheros PHP. Este problema afecta a FindAll: desde n/a hasta &lt;= 1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/findall/vulnerability/wordpress-findall-theme-1-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22479",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.690",
      "lastModified" : "2026-04-28T19:36:40.393",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Post Submission: from n/a through <= 2.4.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en ThemeRuby Easy Post Submission easy-post-submission permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Easy Post Submission: desde n/a hasta &lt;= 2.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/easy-post-submission/vulnerability/wordpress-easy-post-submission-plugin-2-2-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22497",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.820",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en AncoraThemes Jardi jardi permite la inyección de objetos. Este problema afecta a Jardi: desde n/a hasta &lt;= 1.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/jardi/vulnerability/wordpress-jardi-theme-1-7-2-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22501",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:21.957",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en axiomthemes Mounthood mounthood permite la inyección de objetos. Este problema afecta a Mounthood: desde n/a hasta &lt;= 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/mounthood/vulnerability/wordpress-mounthood-theme-1-3-2-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23546",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:22.093",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing allows Retrieve Embedded Sensitive Data.This issue affects Classified Listing: from n/a through <= 5.3.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inserción de Información Sensible en Datos Enviados en RadiusTheme Classified Listing classified-listing permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Classified Listing: desde n/a hasta &lt;= 5.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-5-3-4-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23767",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-05T06:16:22.227",
      "lastModified" : "2026-03-09T18:42:01.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection."
      }, {
        "lang" : "es",
        "value" : "ESC/POS, un lenguaje de control de impresora diseñado por Seiko Epson Corporation, carece de mecanismos para la autenticación de usuarios y la autorización de comandos, no proporciona controles para restringir las fuentes o destinos de la comunicación de red, y transmite comandos sin cifrado o protección de integridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sb-h50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F0B53B-3A3F-46A7-8951-C61F2D09F342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sb-h50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBFA8123-CD32-4A46-BC55-7EE44872EEC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-h6000v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D53274A-446F-45BE-B580-1597BF46ABEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-h6000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA19657-F5D5-4635-8CEB-2A3C09DF8EE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-l100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A88AEA71-C821-4C50-B7CD-47F47453B36A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-l100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D71D846-6A55-4CDC-9FFA-C5129BB1A385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m10_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62646F66-DD76-4FA2-893A-74F9079083DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CEE9CC-F67D-48B2-8E91-08EA747FE47B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37ECA6F4-E93C-42E6-8941-A2F07B614F22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C289A-A2DC-4DC4-AC3F-6165C5D94D45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370C10EF-DE91-454D-9D8C-D589C6105C87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320088E4-B208-4E9B-9ABA-47528F6A44CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30ii-h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1121F6D-D3D8-4FC9-8995-EDFE1991BB64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30ii-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F46E30-A440-4265-97DC-15D1732B6FC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30ii-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7228870-2AC6-4FC0-A408-FDBEF16096C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30ii-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE5A17D-6ABA-4FCC-8334-D581C3C09FD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30ii-sl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368C3E42-9D95-44D8-BF8D-A5478492BDE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30ii-sl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4E2CF96-A539-44A1-93BA-A89A862BE006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30iii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E48520-A2B7-43E5-8F32-072A8F048A94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30iii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BB0499-CE37-4D6F-A583-6AB3029C47EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m30iii-h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E697846E-9913-41ED-BEEE-D7D073CE07F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m30iii-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348E837C-68C0-4D41-BF6B-B104ED03C2FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-m55_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1808278B-BA08-4347-98F3-AB7555BF1112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-m55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08BFC04A-B8B5-49B6-97EB-03BCD723B8A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-p20ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1140CA18-39F2-41FB-B7C1-933E54D8E7F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-p20ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7C48A0-D762-4732-AE44-AA0F86BA1FE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-p80ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7418A243-69DB-47D1-9162-3E1139A5C21B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-p80ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7449DE-00FD-43F5-BB35-B940585DE35A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-p20_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B30904D-0F77-43A1-86F2-928B4F3ECBF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-p20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B44CA7A4-0A2D-406C-BD41-A24C79A87761"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-p60ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48967203-6F16-4B19-87EB-B5E2915947E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-p60ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D889AB9-BDA2-405A-BB60-58031FF9DFC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-p80_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A95677C8-867A-419A-ABCB-BBE6FEB3881A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-p80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376111B4-A9F3-4099-9BB4-627B9BFBD295"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-t20ii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE22522A-F08D-4254-B5B2-DDBBE696AFEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-t20ii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E59284A-62CB-49D5-A763-4133FD5D1C97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-t20iii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983E9338-9C6B-4314-8113-A6551E0E9408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-t20iii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A977B494-6192-4FD3-B871-C2371D4C2310"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-t88vi_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA6E6AD-F390-41F2-9D66-98D1BF99BBB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-t88vi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056C570E-B0A3-4A22-9939-906CBE841025"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-t88vi-ihub_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79FD491-7D10-42A2-98FC-63764BD815D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-t88vi-ihub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A90AC6B-B574-4DC6-B746-96F88C3F26B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-t88vii_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "397881F3-431C-495B-9D46-08DDBE5C4248"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-t88vii:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FFDE00-753F-4DD9-8590-FED4F8A911AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:ub-r04_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E19517F-0ACF-4BD6-B907-A625E4A0ED78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:ub-r04:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0521E96D-043E-4AB8-A5CA-973CF6D17D8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:ub-e04_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00876971-8F74-4681-8BB6-E33DE5C3C688"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:ub-e04:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9628B2AC-C871-4B59-8572-F6142DD24A42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download4.epson.biz/sec_pubs/bs/pdf/IP_Filtering_Guide_en_revA.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/ta/JVNTA97995322/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.epson.jp/support/misc_t/260305_oshirase.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23798",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:22.363",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through <= 11.15.10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Deserialización de Datos No Confiables en blubrry PowerPress Podcasting powerpress permite la Inyección de Objetos. Este problema afecta a PowerPress Podcasting: desde n/a hasta &lt;= 11.15.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-15-10-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23799",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:22.497",
      "lastModified" : "2026-04-28T16:16:07.040",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Themeum Tutor LMS tutor permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Tutor LMS: desde n/a hasta &lt;= 3.9.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/tutor/vulnerability/wordpress-tutor-lms-plugin-3-9-5-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23801",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:22.630",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes The Issue theissue allows PHP Local File Inclusion.This issue affects The Issue: from n/a through <= 1.6.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de 'PHP Remote File Inclusion' por control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP en fuelthemes The Issue theissue permite inclusión local de ficheros PHP. Este problema afecta a The Issue: desde n/a hasta &lt;= 1.6.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/theissue/vulnerability/wordpress-the-issue-theme-1-6-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23802",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:22.763",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga sin restricciones de archivo con tipo peligroso en Jordy Meow AI Engine ai-engine permite el uso de archivos maliciosos. Este problema afecta a AI Engine: desde n/a hasta &lt;= 3.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ai-engine/vulnerability/wordpress-ai-engine-plugin-3-3-2-arbitrary-file-upload-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24385",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:22.900",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Object Injection.This issue affects Podlove Web Player: from n/a through <= 5.9.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en gerritvanaaken Podlove Web Player podlove-web-player permite la inyección de objetos. Este problema afecta a Podlove Web Player: desde n/a hasta &lt;= 5.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/podlove-web-player/vulnerability/wordpress-podlove-web-player-plugin-5-9-1-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24960",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.040",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga sin restricciones de archivo con tipo peligroso en zozothemes Charety charety permite el uso de archivos maliciosos. Este problema afecta a Charety: desde n/a hasta &lt; 2.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/charety/vulnerability/wordpress-charety-theme-2-0-2-arbitrary-file-upload-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24963",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.173",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Privilege Assignment vulnerability in ameliabooking Amelia ameliabooking allows Privilege Escalation.This issue affects Amelia: from n/a through <= 1.2.38."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Asignación Incorrecta de Privilegios en ameliabooking Amelia ameliabooking permite la escalada de privilegios. Este problema afecta a Amelia: desde n/a hasta &lt;= 1.2.38."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-1-2-38-privilege-escalation-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27097",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.303",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Property Rental Real Estate WordPress Theme: from n/a through <= 1.1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP (vulnerabilidad de 'inclusión remota de ficheros' de PHP) en el tema de WordPress AncoraThemes CasaMia | Property Rental Real Estate casamia permite la inclusión local de ficheros de PHP. Este problema afecta al tema de WordPress CasaMia | Property Rental Real Estate: desde n/a hasta &lt;= 1.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/casamia/vulnerability/wordpress-casamia-property-rental-real-estate-wordpress-theme-theme-1-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27098",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.437",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au Pair Agency - Babysitting & Nanny Theme: from n/a through <= 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en axiomthemes Au Pair Agency - Babysitting &amp; Nanny Theme au-pair-agency permite la inyección de objetos. Este problema afecta a Au Pair Agency - Babysitting &amp; Nanny Theme: desde n/a hasta &lt;= 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/au-pair-agency/vulnerability/wordpress-au-pair-agency-babysitting-nanny-theme-theme-1-2-2-deserialization-of-untrusted-data-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27326",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.563",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme window-ac-services allows PHP Local File Inclusion.This issue affects AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme: from n/a through <= 1.2.5."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en el tema de WordPress axiomthemes AC Services | HVAC, Air Conditioning &amp; Heating Company window-ac-services permite la inclusión local de ficheros PHP. Este problema afecta al tema de WordPress AC Services | HVAC, Air Conditioning &amp; Heating Company: desde n/a hasta &lt;= 1.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/window-ac-services/vulnerability/wordpress-ac-services-hvac-air-conditioning-heating-company-wordpress-theme-theme-1-2-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27332",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.713",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through < 1.4.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en skygroup Agrofood agrofood permite XSS Reflejado. Este problema afecta a Agrofood: desde n/a hasta &lt;= 1.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/agrofood/vulnerability/wordpress-agrofood-theme-1-3-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27334",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.847",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dan_fisher Alchemists alchemists allows PHP Local File Inclusion.This issue affects Alchemists: from n/a through <= 4.6.0."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en dan_fisher Alchemists alchemists permite la inclusión local de ficheros PHP. Este problema afecta a Alchemists: desde n/a hasta &lt;= 4.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/alchemists/vulnerability/wordpress-alchemists-theme-4-6-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27335",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:23.977",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme ekoterra allows PHP Local File Inclusion.This issue affects Ekoterra - NonProfit, Green Energy & Ecology Theme: from n/a through <= 1.0.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en AncoraThemes Ekoterra - NonProfit, Green Energy &amp; Ecology Theme ekoterra permite la inclusión local de ficheros PHP. Este problema afecta a Ekoterra - NonProfit, Green Energy &amp; Ecology Theme: desde n/a hasta &lt;= 1.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/ekoterra/vulnerability/wordpress-ekoterra-nonprofit-green-energy-ecology-theme-theme-1-0-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27336",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.110",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme consultor allows PHP Local File Inclusion.This issue affects Consultor | Consulting, Accounting & Legal Counsel WordPress Theme: from n/a through <= 1.2.4."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('PHP Remote File Inclusion') en el tema de WordPress AncoraThemes Consultor | Consulting, Accounting &amp; Legal Counsel consultor permite la inclusión local de ficheros en PHP. Este problema afecta al tema de WordPress Consultor | Consulting, Accounting &amp; Legal Counsel: desde n/a hasta &lt;= 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/consultor/vulnerability/wordpress-consultor-consulting-accounting-legal-counsel-wordpress-theme-theme-1-2-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27337",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.237",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle - Lifestyle Magazine & Blog WordPress Theme: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en AncoraThemes Chronicle - Lifestyle Magazine &amp; Blog tema de WordPress chronicle permite la inclusión local de ficheros PHP. Este problema afecta a Chronicle - Lifestyle Magazine &amp; Blog tema de WordPress: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/chronicle/vulnerability/wordpress-chronicle-lifestyle-magazine-blog-wordpress-theme-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27338",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.367",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en AivahThemes Car Zone carzone permite la inyección de objetos. Este problema afecta a Car Zone: desde n/a hasta &lt;= 3.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/carzone/vulnerability/wordpress-car-zone-theme-3-7-deserialization-of-untrusted-data-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27339",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.500",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme buzzstone allows PHP Local File Inclusion.This issue affects Buzz Stone | Magazine & Viral Blog WordPress Theme: from n/a through <= 1.0.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en el tema de WordPress AncoraThemes Buzz Stone | Magazine &amp; Viral Blog buzzstone permite la inclusión local de ficheros PHP. Este problema afecta al tema de WordPress Buzz Stone | Magazine &amp; Viral Blog: desde n/a hasta &lt;= 1.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/buzzstone/vulnerability/wordpress-buzz-stone-magazine-viral-blog-wordpress-theme-theme-1-0-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27340",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.627",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Apollo | Night Club, DJ Event WordPress Theme apollo allows PHP Local File Inclusion.This issue affects Apollo | Night Club, DJ Event WordPress Theme: from n/a through <= 1.3.1."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('inclusión remota de ficheros PHP') en AncoraThemes Apollo | Night Club, DJ Event tema de WordPress apollo permite la inclusión local de ficheros PHP. Este problema afecta a Apollo | Night Club, DJ Event tema de WordPress: desde n/a hasta &lt;= 1.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/apollo/vulnerability/wordpress-apollo-night-club-dj-event-wordpress-theme-theme-1-3-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27341",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.760",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopScorer - Sports WordPress Theme topscorer allows PHP Local File Inclusion.This issue affects TopScorer - Sports WordPress Theme: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Control Inadecuado del Nombre de Fichero para la Sentencia Include/Require en Programa PHP (vulnerabilidad de 'inclusión remota de ficheros de PHP') en el tema de WordPress Mikado-Themes TopScorer - Sports topscorer permite la inclusión local de ficheros de PHP. Este problema afecta al tema de WordPress TopScorer - Sports: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/topscorer/vulnerability/wordpress-topscorer-sports-wordpress-theme-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27342",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:24.887",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopFit - Fitness and Gym WordPress Theme topfit allows PHP Local File Inclusion.This issue affects TopFit - Fitness and Gym WordPress Theme: from n/a through <= 1.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('PHP Remote File Inclusion') en Mikado-Themes TopFit - Fitness and Gym tema de WordPress topfit permite la inclusión local de ficheros PHP. Este problema afecta a TopFit - Fitness and Gym tema de WordPress: desde n/a hasta &lt;= 1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/topfit/vulnerability/wordpress-topfit-fitness-and-gym-wordpress-theme-theme-1-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27344",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.020",
      "lastModified" : "2026-04-28T19:37:15.110",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through <= 1.0.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en inseriswiss inseri core inseri-core permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a inseri core: desde n/a hasta &lt;= 1.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/inseri-core/vulnerability/wordpress-inseri-core-plugin-1-0-3-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27348",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.143",
      "lastModified" : "2026-04-23T15:37:20.543",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows DOM-Based XSS.This issue affects Photography: from n/a through < 7.7.6."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en ThemeGoods Photography photography permite XSS basado en DOM. Este problema afecta a Photography: desde n/a hasta &lt;= 7.6.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27352",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.277",
      "lastModified" : "2026-04-23T15:37:20.900",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Starto starto allows Reflected XSS.This issue affects Starto: from n/a through < 2.2.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización inadecuada de la entrada durante la generación de páginas web ('cross-site scripting') vulnerabilidad en ThemeGoods Starto starto permite XSS Reflejado. Este problema afecta a Starto: desde n/a hasta &lt;= 2.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/starto/vulnerability/wordpress-starto-theme-2-1-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27353",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.410",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand News grandnews allows Reflected XSS.This issue affects Grand News: from n/a through <= 3.4.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') vulnerabilidad en ThemeGoods Grand News grandnews permite XSS Reflejado. Este problema afecta a Grand News: desde n/a hasta &lt;= 3.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/grandnews/vulnerability/wordpress-grand-news-magazine-newspaper-wordpress-theme-3-4-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27354",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.537",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon-product allows Stored XSS.This issue affects WooCommerce Coming Soon Product with Countdown: from n/a through <= 5.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon-product permite XSS Almacenado. Este problema afecta a WooCommerce Coming Soon Product with Countdown: desde n/a hasta &lt;= 5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woo-coming-soon-product/vulnerability/wordpress-woocommerce-coming-soon-product-with-countdown-plugin-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27358",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.677",
      "lastModified" : "2026-04-23T15:37:21.037",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Architecturer architecturer allows Reflected XSS.This issue affects Architecturer: from n/a through < 3.9.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en ThemeGoods Architecturer architecturer permite XSS Reflejado. Este problema afecta a Architecturer: desde n/a hasta &lt;= 3.8.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/architecturer/vulnerability/wordpress-architecturer-theme-3-8-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27359",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.813",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through <= 1.4.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en fox-themes Awa Plugins awa-plugins permite XSS Reflejado. Este problema afecta a Awa Plugins: desde n/a hasta &lt;= 1.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/awa-plugins/vulnerability/wordpress-awa-plugins-plugin-1-4-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27361",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:25.947",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through <= 15.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Responsive Posts Carousel Pro: desde n/a hasta &lt;= 15.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/responsive-posts-carousel-pro/vulnerability/wordpress-responsive-posts-carousel-pro-plugin-15-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27362",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.083",
      "lastModified" : "2026-04-28T19:37:15.677",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bakery Autoresponder Addon: from n/a through <= 1.0.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WP Bakery Autoresponder Addon: desde n/a hasta &lt;= 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/vc-autoresponder-addon/vulnerability/wordpress-wp-bakery-autoresponder-addon-plugin-1-0-6-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27363",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.220",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Stored XSS.This issue affects WP Bakery Autoresponder Addon: from n/a through <= 1.0.6."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon permite XSS Almacenado. Este problema afecta a WP Bakery Autoresponder Addon: desde n/a hasta &lt;= 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/vc-autoresponder-addon/vulnerability/wordpress-wp-bakery-autoresponder-addon-plugin-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27367",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.357",
      "lastModified" : "2026-04-23T15:37:21.350",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Musico musico allows Reflected XSS.This issue affects Musico: from n/a through < 3.4.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en ThemeGoods Musico musico permite XSS Reflejado. Este problema afecta a Musico: desde n/a hasta &lt;= 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/musico/vulnerability/wordpress-musico-theme-3-2-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27369",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.490",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in BoldThemes Celeste celeste allows Object Injection.This issue affects Celeste: from n/a through <= 1.3.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en BoldThemes Celeste celeste permite la inyección de objetos. Este problema afecta a Celeste: desde n/a hasta &lt;= 1.3.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/celeste/vulnerability/wordpress-celeste-theme-1-3-6-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27370",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.620",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in Premio Chaty chaty allows Retrieve Embedded Sensitive Data.This issue affects Chaty: from n/a through <= 3.5.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inserción de Información Sensible en Datos Enviados en Premio Chaty chaty permite Recuperar Datos Sensibles Incrustados. Este problema afecta a Chaty: desde n/a hasta &lt;= 3.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/chaty/vulnerability/wordpress-chaty-plugin-3-5-1-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27373",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.753",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tablesome: from n/a through <= 1.2.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL ('inyección SQL') en Essekia Tablesome tablesome permite inyección SQL ciega. Este problema afecta a Tablesome: desde n/d hasta &lt;= 1.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/tablesome/vulnerability/wordpress-tablesome-plugin-1-2-3-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27374",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:26.893",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in vanquish WooCommerce Order Details woocommerce-order-details allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Order Details: from n/a through <= 3.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por Ausencia de Autorización en vanquish WooCommerce Order Details woocommerce-order-details permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WooCommerce Order Details: desde n/a hasta &lt;= 3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woocommerce-order-details/vulnerability/wordpress-woocommerce-order-details-plugin-3-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27375",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.033",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JanStudio Gecko gecko allows Reflected XSS.This issue affects Gecko: from n/a through <= 1.9.8."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en JanStudio Gecko gecko permite XSS Reflejado. Este problema afecta a Gecko: desde n/a hasta &lt;= 1.9.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/gecko/vulnerability/wordpress-gecko-theme-1-9-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27376",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.167",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JanStudio Claue - Clean, Minimal Elementor WooCommerce Theme claue allows Reflected XSS.This issue affects Claue - Clean, Minimal Elementor WooCommerce Theme: from n/a through <= 2.2.7."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en JanStudio Claue - Clean, Minimal Elementor WooCommerce Theme claue permite XSS Reflejado. Este problema afecta a Claue - Clean, Minimal Elementor WooCommerce Theme: desde n/a hasta &lt;= 2.2.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/claue/vulnerability/wordpress-claue-clean-minimal-elementor-woocommerce-theme-theme-2-2-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27379",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.303",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g allows Object Injection.This issue affects NextScripts: from n/a through <= 4.4.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g permite la inyección de objetos. Este problema afecta a NextScripts: desde n/d hasta &lt;= 4.4.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/social-networks-auto-poster-facebook-twitter-g/vulnerability/wordpress-nextscripts-plugin-4-4-6-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27381",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.437",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP (vulnerabilidad de 'Inclusión Remota de Ficheros PHP') en thembay Aora aora permite la inclusión local de ficheros PHP. Este problema afecta a Aora: desde n/a hasta &lt;= 1.3.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/aora/vulnerability/wordpress-aora-theme-1-3-15-local-file-inclusion-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27382",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.567",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Metro metro allows DOM-Based XSS.This issue affects Metro: from n/a through <= 2.13."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en RadiusTheme Metro metro permite XSS basado en DOM. Este problema afecta a Metro: desde n/a hasta &lt;= 2.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/metro/vulnerability/wordpress-metro-theme-2-13-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27383",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.703",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Metro metro allows PHP Local File Inclusion.This issue affects Metro: from n/a through <= 2.13."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en RadiusTheme Metro metro permite la Inclusión Local de Ficheros PHP. Este problema afecta a Metro: desde n/a hasta &lt;= 2.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/metro/vulnerability/wordpress-metro-theme-2-13-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27384",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.840",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Validación Incorrecta de Cantidad Especificada en la Entrada en BoldGrid W3 Total Cache w3-total-cache permite Acceder a Funcionalidad No Restringida Adecuadamente por ACLs. Este problema afecta a W3 Total Cache: desde n/a hasta &lt;= 2.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/w3-total-cache/vulnerability/wordpress-w3-total-cache-plugin-2-9-1-arbitrary-code-execution-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27385",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:27.977",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en designthemes DesignThemes Portfolio designthemes-portfolio permite XSS Reflejado. Este problema afecta a DesignThemes Portfolio: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/designthemes-portfolio/vulnerability/wordpress-designthemes-portfolio-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27386",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:28.107",
      "lastModified" : "2026-04-28T19:37:16.683",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Directory Addon: from n/a through <= 1.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en designthemes DesignThemes Directory Addon designthemes-directory-addon permite Explotar Niveles de Seguridad de Control de Acceso Configurados Incorrectamente. Este problema afecta a DesignThemes Directory Addon: desde n/a hasta &lt;= 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/designthemes-directory-addon/vulnerability/wordpress-designthemes-directory-addon-plugin-1-8-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27388",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:28.287",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in designthemes DesignThemes Booking Manager designthemes-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Booking Manager: from n/a through <= 2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en designthemes DesignThemes Booking Manager designthemes-booking-manager permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a DesignThemes Booking Manager: desde n/a hasta &lt;= 2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/designthemes-booking-manager/vulnerability/wordpress-designthemes-booking-manager-plugin-2-0-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27389",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:28.520",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through <= 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación usando una ruta o canal alternativo en designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon permite el abuso de autenticación. Este problema afecta a WeDesignTech Ultimate Booking Addon: desde n/a hasta &lt;= 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wedesigntech-ultimate-booking-addon/vulnerability/wordpress-wedesigntech-ultimate-booking-addon-plugin-1-0-1-account-takeover-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27390",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:28.657",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through <= 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación usando una ruta o canal alternativo en designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon permite el abuso de autenticación. Este problema afecta a WeDesignTech Ultimate Booking Addon: desde n/d hasta &lt;= 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wedesigntech-ultimate-booking-addon/vulnerability/wordpress-wedesigntech-ultimate-booking-addon-plugin-1-0-1-account-takeover-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27396",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:28.807",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through <= 2.5.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización faltante en e-plugins Directory Pro directory-pro permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Directory Pro: desde n/a hasta &lt;= 2.5.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/directory-pro/vulnerability/wordpress-directory-pro-plugin-2-5-6-broken-access-control-vulnerability-2?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27406",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:28.950",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a through <= 2.1.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inserción de información sensible en datos enviados en Joe Dolson My Tickets my-tickets permite recuperar datos sensibles incrustados. Este problema afecta a My Tickets: desde n/a hasta &lt;= 2.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/my-tickets/vulnerability/wordpress-my-tickets-plugin-2-1-0-sensitive-data-exposure-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27411",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.093",
      "lastModified" : "2026-04-29T10:16:55.607",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Guessable CAPTCHA vulnerability in jp-secure SiteGuard WP Plugin siteguard allows Functionality Bypass.This issue affects SiteGuard WP Plugin: from n/a through <= 1.7.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de CAPTCHA adivinable en jp-secure SiteGuard WP Plugin siteguard permite la elusión de funcionalidad. Este problema afecta a SiteGuard WP Plugin: desde n/a hasta &lt;= 1.7.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-804"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/siteguard/vulnerability/wordpress-siteguard-wp-plugin-plugin-1-7-9-captcha-bypass-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27417",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.223",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en SeventhQueen Sweet Date sweetdate permite la inyección de objetos. Este problema afecta a Sweet Date: desde n/a hasta &lt; 4.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/sweetdate/vulnerability/wordpress-sweet-date-theme-4-0-1-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27428",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.360",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eagle-Themes Eagle Booking eagle-booking allows SQL Injection.This issue affects Eagle Booking: from n/a through <= 1.3.4.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('inyección SQL') vulnerabilidad en Eagle-Themes Eagle Booking eagle-booking permite la inyección SQL. Este problema afecta a Eagle Booking: desde n/a hasta &lt;= 1.3.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/eagle-booking/vulnerability/wordpress-eagle-booking-plugin-1-3-4-3-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27437",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.497",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Tennis Club tennis-sportclub permite la inyección de objetos. Este problema afecta a Tennis Club: desde n/a hasta &lt;= 1.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/tennis-sportclub/vulnerability/wordpress-tennis-club-theme-1-2-3-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27438",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.657",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through <= 1.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Kingler kingler permite la inyección de objetos. Este problema afecta a Kingler: desde n/a hasta &lt;= 1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/kingler/vulnerability/wordpress-kingler-theme-1-7-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27439",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.810",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Dentario dentario allows Object Injection.This issue affects Dentario: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Dentario dentario permite la inyección de objetos. Este problema afecta a Dentario: desde n/d hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dentario/vulnerability/wordpress-dentario-theme-1-5-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27541",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:29.953",
      "lastModified" : "2026-04-29T10:16:55.920",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Asignación Incorrecta de Privilegios en Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices permite la escalada de privilegios. Este problema afecta a Wholesale Suite: desde n/a hasta &lt;= 2.2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-1-privilege-escalation-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27982",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-05T06:16:30.100",
      "lastModified" : "2026-03-09T18:41:21.237",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by default), which may allow an attacker to redirect users to an arbitrary external website via a crafted URL."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de redirección abierta en las versiones de django-allauth anteriores a la 65.14.1 cuando el SSO iniciado por el IdP de SAML está habilitado (está deshabilitado por defecto), lo que puede permitir a un atacante redirigir a los usuarios a un sitio web externo arbitrario a través de una URL manipulada."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allauth:allauth:*:*:*:*:*:django:*:*",
            "versionEndExcluding" : "65.14.1",
            "matchCriteriaId" : "1826656C-B476-4273-98AD-EE413464FAC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://allauth.org/news/2026/02/django-allauth-65.14.1-released/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN23669411/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27983",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:30.370",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through <= 1.0.4."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Asignación Incorrecta de Privilegios en designthemes LMS Elementor Pro lms-elementor-pro permite la escalada de privilegios. Este problema afecta a LMS Elementor Pro: desde n/d hasta &lt;= 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/lms-elementor-pro/vulnerability/wordpress-lms-elementor-pro-plugin-1-0-4-privilege-escalation-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27984",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:30.510",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= 4.1.3."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado de la generación de código ('Inyección de Código') en Marketing Fire Widget Options widget-options permite la inyección de código. Este problema afecta a Widget Options: desde n/a hasta &lt;= 4.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/widget-options/vulnerability/wordpress-widget-options-plugin-4-1-3-remote-code-execution-rce-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27985",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:30.650",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Humanum humanum allows PHP Local File Inclusion.This issue affects Humanum: from n/a through <= 1.1.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('PHP Inclusión Remota de Ficheros') vulnerabilidad en ThemeREX Humanum humanum permite PHP Inclusión Local de Ficheros. Este problema afecta a Humanum: desde n/a hasta &lt;= 1.1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/humanum/vulnerability/wordpress-humanum-theme-1-1-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27986",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:30.783",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX OsTende ostende allows PHP Local File Inclusion.This issue affects OsTende: from n/a through <= 1.4.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX OsTende ostende permite Inclusión Local de Ficheros PHP. Este problema afecta a OsTende: desde n/a hasta &lt;= 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/ostende/vulnerability/wordpress-ostende-theme-1-4-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27987",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:30.913",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX The Qlean the-qlean allows PHP Local File Inclusion.This issue affects The Qlean: from n/a through <= 2.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX The Qlean the-qlean permite Inclusión Local de Ficheros PHP. Este problema afecta a The Qlean: desde n/a hasta &lt;= 2.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/the-qlean/vulnerability/wordpress-the-qlean-theme-2-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27988",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.050",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Equadio equadio allows PHP Local File Inclusion.This issue affects Equadio: from n/a through <= 1.1.3."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en ThemeREX Equadio equadio permite la inclusión local de ficheros PHP. Este problema afecta a Equadio: desde n/a hasta &lt;= 1.1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/equadio/vulnerability/wordpress-equadio-theme-1-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27989",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.190",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Quanzo quanzo allows PHP Local File Inclusion.This issue affects Quanzo: from n/a through <= 1.0.10."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'Inclusión remota de ficheros PHP') en ThemeREX Quanzo quanzo permite la inclusión local de ficheros PHP. Este problema afecta a Quanzo: desde n/a hasta &lt;= 1.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/quanzo/vulnerability/wordpress-quanzo-theme-1-0-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27990",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.327",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ConFix confix allows PHP Local File Inclusion.This issue affects ConFix: from n/a through <= 1.013."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX ConFix confix permite la inclusión local de ficheros PHP. Este problema afecta a ConFix: desde n/a hasta &lt;= 1.013."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/confix/vulnerability/wordpress-confix-theme-1-013-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27991",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.460",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Avventure avventure allows PHP Local File Inclusion.This issue affects Avventure: from n/a through <= 1.1.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP (vulnerabilidad 'Inclusión Remota de Ficheros PHP') en ThemeREX Avventure avventure permite Inclusión Local de Ficheros PHP. Este problema afecta a Avventure: desde n/a hasta &lt;= 1.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/avventure/vulnerability/wordpress-avventure-theme-1-1-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27992",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.600",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Meals & Wheels meals-wheels allows PHP Local File Inclusion.This issue affects Meals & Wheels: from n/a through <= 1.1.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX Meals &amp; Wheels meals-wheels permite inclusión local de ficheros PHP. Este problema afecta a Meals &amp; Wheels: desde n/a hasta &lt;= 1.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/meals-wheels/vulnerability/wordpress-meals-wheels-theme-1-1-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27993",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.733",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aldo aldo allows PHP Local File Inclusion.This issue affects Aldo: from n/a through <= 1.0.10."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Aldo aldo permite Inclusión Local de Ficheros PHP. Este problema afecta a Aldo: desde n/a hasta &lt;= 1.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/aldo/vulnerability/wordpress-aldo-theme-1-0-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27994",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:31.873",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tediss tediss allows PHP Local File Inclusion.This issue affects Tediss: from n/a through <= 1.2.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP ('PHP Inclusión remota de ficheros') vulnerabilidad en ThemeREX Tediss tediss permite PHP Inclusión local de ficheros. Este problema afecta a Tediss: desde n/a hasta &lt;= 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/tediss/vulnerability/wordpress-tediss-theme-1-2-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27995",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.010",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Justitia justitia allows PHP Local File Inclusion.This issue affects Justitia: from n/a through <= 1.1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('PHP Inclusión remota de ficheros') vulnerabilidad en ThemeREX Justitia justitia permite PHP Inclusión local de ficheros. Este problema afecta a Justitia: desde n/a hasta &lt;= 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/justitia/vulnerability/wordpress-justitia-theme-1-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27996",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.153",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Lingvico lingvico allows PHP Local File Inclusion.This issue affects Lingvico: from n/a through <= 1.0.14."
      }, {
        "lang" : "es",
        "value" : "Control Inadecuado del Nombre de Fichero para la Sentencia Include/Require en Programa PHP (vulnerabilidad de 'Inclusión Remota de Ficheros PHP') en ThemeREX Lingvico lingvico permite la Inclusión Local de Ficheros PHP. Este problema afecta a Lingvico: desde n/a hasta &lt;= 1.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/lingvico/vulnerability/wordpress-lingvico-theme-1-0-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27997",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.280",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Maxify maxify allows PHP Local File Inclusion.This issue affects Maxify: from n/a through <= 1.0.16."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'Inclusión remota de ficheros PHP') en ThemeREX Maxify maxify permite la inclusión local de ficheros PHP. Este problema afecta a Maxify: desde n/a hasta &lt;= 1.0.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/maxify/vulnerability/wordpress-maxify-theme-1-0-16-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27998",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.420",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Vixus vixus allows PHP Local File Inclusion.This issue affects Vixus: from n/a through <= 1.0.16."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Vixus vixus permite la Inclusión Local de Ficheros PHP. Este problema afecta a Vixus: desde n/a hasta &lt;= 1.0.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/vixus/vulnerability/wordpress-vixus-theme-1-0-16-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28006",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.550",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yungen yungen allows PHP Local File Inclusion.This issue affects Yungen: from n/a through <= 1.0.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Yungen yungen permite la Inclusión Local de Ficheros PHP. Este problema afecta a Yungen: desde n/a hasta &lt;= 1.0.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/yungen/vulnerability/wordpress-yungen-theme-1-0-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28007",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.687",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coinpress coinpress allows PHP Local File Inclusion.This issue affects Coinpress: from n/a through <= 1.0.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP, la vulnerabilidad 'PHP Remote File Inclusion' en ThemeREX Coinpress coinpress permite inclusión local de ficheros PHP. Este problema afecta a Coinpress: desde n/a hasta &lt;= 1.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/coinpress/vulnerability/wordpress-coinpress-theme-1-0-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28009",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.817",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX DroneX dronex allows PHP Local File Inclusion.This issue affects DroneX: from n/a through <= 1.1.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX DroneX dronex permite la inclusión local de ficheros PHP. Este problema afecta a DroneX: desde n/a hasta &lt;= 1.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dronex/vulnerability/wordpress-dronex-theme-1-1-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28010",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:32.953",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Scientia scientia allows PHP Local File Inclusion.This issue affects Scientia: from n/a through <= 1.2.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('inclusión remota de ficheros PHP') en ThemeREX Scientia scientia permite la inclusión local de ficheros PHP. Este problema afecta a Scientia: desde n/a hasta &lt;= 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/scientia/vulnerability/wordpress-scientia-theme-1-2-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28011",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.080",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yottis yottis allows PHP Local File Inclusion.This issue affects Yottis: from n/a through <= 1.0.10."
      }, {
        "lang" : "es",
        "value" : "Control impropio del nombre de fichero para la declaración Include/Require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX Yottis yottis permite la inclusión local de ficheros PHP. Este problema afecta a Yottis: desde n/a hasta &lt;= 1.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/yottis/vulnerability/wordpress-yottis-theme-1-0-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28012",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.210",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gridiron gridiron allows PHP Local File Inclusion.This issue affects Gridiron: from n/a through <= 1.0.14."
      }, {
        "lang" : "es",
        "value" : "Control Inadecuado del Nombre de Fichero para la Declaración Include/Require en un Programa PHP (vulnerabilidad de 'Inclusión Remota de Ficheros PHP') en ThemeREX Gridiron gridiron permite la Inclusión Local de Ficheros PHP. Este problema afecta a Gridiron: desde n/a hasta &lt;= 1.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/gridiron/vulnerability/wordpress-gridiron-theme-1-0-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28013",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.347",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Kratz kratz allows PHP Local File Inclusion.This issue affects Kratz: from n/a through <= 1.0.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('Inclusión remota de ficheros PHP'), en ThemeREX Kratz kratz permite la inclusión local de ficheros PHP. Este problema afecta a Kratz: desde n/a hasta &lt;= 1.0.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/kratz/vulnerability/wordpress-kratz-theme-1-0-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28014",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.473",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Translogic translogic allows PHP Local File Inclusion.This issue affects Translogic: from n/a through <= 1.2.11."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP, la vulnerabilidad de 'Inclusión remota de ficheros PHP' en ThemeREX Translogic translogic permite la inclusión local de ficheros PHP. Este problema afecta a Translogic: desde n/a hasta &lt;= 1.2.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/translogic/vulnerability/wordpress-translogic-theme-1-2-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28015",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.603",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ShiftCV shift-cv allows PHP Local File Inclusion.This issue affects ShiftCV: from n/a through <= 3.0.14."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de 'inclusión remota de ficheros PHP' por control inadecuado del nombre de fichero para la declaración include/require en un programa PHP en ThemeREX ShiftCV shift-cv permite la inclusión local de ficheros PHP. Este problema afecta a ShiftCV: desde n/a hasta &lt;= 3.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/shift-cv/vulnerability/wordpress-shiftcv-theme-3-0-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28016",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.740",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Luxury Wine luxury-wine allows PHP Local File Inclusion.This issue affects Luxury Wine: from n/a through <= 1.1.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX Luxury Wine luxury-wine permite la inclusión local de ficheros PHP. Este problema afecta a Luxury Wine: desde n/a hasta &lt;= 1.1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/luxury-wine/vulnerability/wordpress-luxury-wine-theme-1-1-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28017",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:33.883",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through <= 1.1.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP vulnerabilidad ('Inclusión remota de ficheros PHP') en ThemeREX Green Thumb greenthumb permite inclusión local de ficheros PHP. Este problema afecta a Green Thumb: desde n/a hasta &lt;= 1.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/greenthumb/vulnerability/wordpress-green-thumb-theme-1-1-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28018",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.020",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Global Logistics globallogistics allows PHP Local File Inclusion.This issue affects Global Logistics: from n/a through <= 3.20."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en ThemeREX Global Logistics globallogistics permite la Inclusión local de ficheros PHP. Este problema afecta a Global Logistics: desde n/a hasta &lt;= 3.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/globallogistics/vulnerability/wordpress-global-logistics-theme-3-20-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28019",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.150",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Manoir manoir allows PHP Local File Inclusion.This issue affects Manoir: from n/a through <= 1.11."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP (vulnerabilidad de 'Inclusión Remota de Ficheros PHP') en ThemeREX Manoir manoir permite la inclusión local de ficheros PHP. Este problema afecta a Manoir: desde n/a hasta &lt;= 1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/manoir/vulnerability/wordpress-manoir-theme-1-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28020",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.290",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through <= 1.11."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Chroma chroma permite la inclusión local de ficheros PHP. Este problema afecta a Chroma: desde n/a hasta &lt;= 1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/chroma/vulnerability/wordpress-chroma-theme-1-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28021",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.423",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Craftis craftis allows PHP Local File Inclusion.This issue affects Craftis: from n/a through <= 1.2.8."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Craftis craftis permite la Inclusión Local de Ficheros PHP. Este problema afecta a Craftis: desde n/a hasta &lt;= 1.2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/craftis/vulnerability/wordpress-craftis-theme-1-2-8-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28022",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.563",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Foodie foodie allows PHP Local File Inclusion.This issue affects Foodie: from n/a through <= 1.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Foodie foodie permite Inclusión Local de Ficheros PHP. Este problema afecta a Foodie: desde n/a hasta &lt;= 1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/foodie/vulnerability/wordpress-foodie-theme-1-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28023",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.697",
      "lastModified" : "2026-04-22T21:26:58.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This issue affects Nuts: from n/a through <= 1.10."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Nuts nuts permite la Inclusión Local de Ficheros PHP. Este problema afecta a Nuts: desde n/a hasta &lt;= 1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/nuts/vulnerability/wordpress-nuts-theme-1-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28024",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.837",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through <= 1.1.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') en axiomthemes Helion helion permite Inclusión local de ficheros PHP. Este problema afecta a Helion: desde n/a hasta &lt;= 1.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/helion/vulnerability/wordpress-helion-theme-1-1-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28025",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:34.970",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Stargaze stargaze allows PHP Local File Inclusion.This issue affects Stargaze: from n/a through <= 1.5."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('inclusión remota de ficheros PHP') en ThemeREX Stargaze stargaze permite la inclusión local de ficheros PHP. Este problema afecta a Stargaze: desde n/a hasta &lt;= 1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/stargaze/vulnerability/wordpress-stargaze-theme-1-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28026",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.107",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Motorix motorix allows PHP Local File Inclusion.This issue affects Motorix: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX Motorix motorix permite la inclusión local de ficheros PHP. Este problema afecta a Motorix: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/motorix/vulnerability/wordpress-motorix-theme-1-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28027",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.237",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Kayon kayon allows PHP Local File Inclusion.This issue affects Kayon: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX Kayon kayon permite la inclusión local de ficheros PHP. Este problema afecta a Kayon: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/kayon/vulnerability/wordpress-kayon-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28028",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.373",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX MoneyFlow moneyflow allows PHP Local File Inclusion.This issue affects MoneyFlow: from n/a through <= 1.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la sentencia include/require en un programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX MoneyFlow moneyflow permite la inclusión local de ficheros PHP. Este problema afecta a MoneyFlow: desde n/a hasta &lt;= 1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/moneyflow/vulnerability/wordpress-moneyflow-theme-1-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28029",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.500",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX EmojiNation emojination allows PHP Local File Inclusion.This issue affects EmojiNation: from n/a through <= 1.0.12."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad 'Inclusión remota de ficheros PHP' en ThemeREX EmojiNation emojination permite la inclusión local de ficheros PHP. Este problema afecta a EmojiNation: desde n/a hasta &lt;= 1.0.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/emojination/vulnerability/wordpress-emojination-theme-1-0-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28030",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.637",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bonbon bonbon allows PHP Local File Inclusion.This issue affects Bonbon: from n/a through <= 1.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('vulnerabilidad de inclusión remota de ficheros PHP') en ThemeREX Bonbon bonbon permite la inclusión local de ficheros PHP. Este problema afecta a Bonbon: desde n/a hasta &lt;= 1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/bonbon/vulnerability/wordpress-bonbon-theme-1-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28031",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.777",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Invetex invetex allows PHP Local File Inclusion.This issue affects Invetex: from n/a through <= 2.18."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Invetex invetex permite la Inclusión Local de Ficheros PHP. Este problema afecta a Invetex: desde n/a hasta &lt;= 2.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/invetex/vulnerability/wordpress-invetex-theme-2-18-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28032",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:35.917",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tuning tuning allows PHP Local File Inclusion.This issue affects Tuning: from n/a through <= 1.3."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Tuning tuning permite la Inclusión Local de Ficheros PHP. Este problema afecta a Tuning: desde n/a hasta &lt;= 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/tuning/vulnerability/wordpress-tuning-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28033",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.060",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Edifice edifice allows PHP Local File Inclusion.This issue affects Edifice: from n/a through <= 1.8."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX Edifice edifice permite la inclusión local de ficheros PHP. Este problema afecta a Edifice: desde n/a hasta &lt;= 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/edifice/vulnerability/wordpress-edifice-theme-1-8-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28034",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.200",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through <= 1.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP vulnerabilidad ('Inclusión Remota de Ficheros PHP') en ThemeREX Progress progress permite la Inclusión Local de Ficheros PHP. Este problema afecta a Progress: desde n/a hasta &lt;= 1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/progress/vulnerability/wordpress-progress-theme-1-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28035",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.337",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Printy printy allows PHP Local File Inclusion.This issue affects Printy: from n/a through <= 1.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('inclusión remota de ficheros PHP') en ThemeREX Printy printy permite la inclusión local de ficheros PHP. Este problema afecta a Printy: desde n/a hasta &lt;= 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/printy/vulnerability/wordpress-printy-theme-1-8-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28036",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.473",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in SkatDesign Ratatouille ratatouille allows Server Side Request Forgery.This issue affects Ratatouille: from n/a through <= 1.2.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en SkatDesign Ratatouille ratatouille permite la falsificación de petición del lado del servidor. Este problema afecta a Ratatouille: desde n/a hasta &lt;= 1.2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/ratatouille/vulnerability/wordpress-ratatouille-theme-1-2-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28037",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.613",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue affects EventON: from n/a through <= 4.9.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') en ashanjay EventON eventon permite XSS Reflejado. Este problema afecta a EventON: desde n/a hasta &lt;= 4.9.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/eventon/vulnerability/wordpress-eventon-plugin-4-9-12-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28038",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.753",
      "lastModified" : "2026-04-23T15:37:22.193",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through <= 3.21.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons permite Explotar Niveles de Seguridad de Control de Acceso Configurados Incorrectamente. Este problema afecta a Ultimate Addons for WPBakery Page Builder: desde n/a hasta &lt;= 3.21.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28039",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:36.897",
      "lastModified" : "2026-04-28T19:37:24.433",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpDataTables wpDataTables wpdatatables allows PHP Local File Inclusion.This issue affects wpDataTables: from n/a through <= 6.5.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión remota de ficheros PHP') en wpDataTables wpDataTables wpdatatables permite la inclusión local de ficheros PHP. Este problema afecta a wpDataTables: desde n/d hasta &lt;= 6.5.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/wpdatatables/vulnerability/wordpress-wpdatatables-plugin-6-4-0-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28041",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.037",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This issue affects Grit: from n/a through <= 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Grit grit permite la inclusión local de ficheros PHP. Este problema afecta a Grit: desde n/a hasta &lt;= 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/grit/vulnerability/wordpress-grit-theme-1-0-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28042",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.177",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Astoundify Listify listify allows Reflected XSS.This issue affects Listify: from n/a through <= 3.2.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Astoundify Listify listify permite XSS Reflejado. Este problema afecta a Listify: desde n/a hasta &lt;= 3.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/listify/vulnerability/wordpress-listify-plugin-3-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28043",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.310",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme healer allows PHP Local File Inclusion.This issue affects Healer - Doctor, Clinic & Medical WordPress Theme: from n/a through <= 1.0.0."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en el tema de WordPress ThemeREX Healer - Doctor, Clinic &amp; Medical healer permite la inclusión local de ficheros PHP. Este problema afecta al tema de WordPress Healer - Doctor, Clinic &amp; Medical: desde n/a hasta &lt;= 1.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/healer/vulnerability/wordpress-healer-doctor-clinic-medical-wordpress-theme-theme-1-0-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28045",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.450",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX N7 | Golf Club Sports & Events n7-golf-club allows PHP Local File Inclusion.This issue affects N7 | Golf Club Sports & Events: from n/a through <= 2.16.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX N7 | Golf Club Sports &amp; Events n7-golf-club permite la inclusión local de ficheros PHP. Este problema afecta a N7 | Golf Club Sports &amp; Events: desde n/a hasta &lt;= 2.16.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/n7-golf-club/vulnerability/wordpress-n7-golf-club-sports-events-theme-2-16-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28046",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.590",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Law Office law-office allows PHP Local File Inclusion.This issue affects Law Office: from n/a through <= 3.3.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad 'inclusión remota de ficheros PHP') en ThemeREX Law Office law-office permite la inclusión local de ficheros PHP. Este problema afecta a Law Office: desde n/a hasta &lt;= 3.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/law-office/vulnerability/wordpress-law-office-theme-3-3-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28047",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.730",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Victo victo allows PHP Local File Inclusion.This issue affects Victo: from n/a through <= 1.4.16."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en magentech Victo victo permite Inclusión Local de Ficheros PHP. Este problema afecta a Victo: desde n/a hasta &lt;= 1.4.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/victo/vulnerability/wordpress-victo-theme-1-4-16-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28048",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:37.867",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech FlashMart flashmart allows PHP Local File Inclusion.This issue affects FlashMart: from n/a through <= 2.0.15."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('inclusión remota de ficheros PHP') en magentech FlashMart flashmart permite la inclusión local de ficheros PHP. Este problema afecta a FlashMart: desde n/a hasta &lt;= 2.0.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/flashmart/vulnerability/wordpress-flashmart-theme-2-0-15-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28049",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.013",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Police Department police-department allows PHP Local File Inclusion.This issue affects Police Department: from n/a through <= 2.17."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Police Department police-department permite la Inclusión Local de Ficheros PHP. Este problema afecta a Police Department: desde n/a hasta &lt;= 2.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/police-department/vulnerability/wordpress-police-department-theme-2-17-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28050",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.150",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Beacon beacon allows PHP Local File Inclusion.This issue affects Beacon: from n/a through <= 2.24."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('inclusión remota de ficheros PHP') en ThemeREX Beacon beacon permite la inclusión local de ficheros PHP. Este problema afecta a Beacon: desde n/a hasta &lt;= 2.24."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/beacon/vulnerability/wordpress-beacon-theme-2-24-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28051",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.290",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yacht Rental yacht-rental allows PHP Local File Inclusion.This issue affects Yacht Rental: from n/a through <= 2.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Yacht Rental yacht-rental permite la Inclusión Local de Ficheros PHP. Este problema afecta a Yacht Rental: desde n/a hasta &lt;= 2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/yacht-rental/vulnerability/wordpress-yacht-rental-theme-2-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28052",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.423",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Peter Mason petermason allows PHP Local File Inclusion.This issue affects Peter Mason: from n/a through <= 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Peter Mason petermason permite la Inclusión Local de Ficheros PHP. Este problema afecta a Peter Mason: desde n/a hasta &lt;= 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/petermason/vulnerability/wordpress-peter-mason-theme-1-4-5-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28053",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.610",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Miller christine-miller allows PHP Local File Inclusion.This issue affects Miller: from n/a through <= 1.3.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP, vulnerabilidad de 'Inclusión Remota de Ficheros PHP' en ThemeREX Miller christine-miller permite la inclusión local de ficheros PHP. Este problema afecta a Miller: desde n/a hasta &lt;= 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/christine-miller/vulnerability/wordpress-miller-theme-1-3-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28054",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.837",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legal Stone legal-stone allows PHP Local File Inclusion.This issue affects Legal Stone: from n/a through <= 1.2.11."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Legal Stone legal-stone permite la inclusión local de ficheros PHP. Este problema afecta a Legal Stone: desde n/a hasta &lt;= 1.2.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/legal-stone/vulnerability/wordpress-legal-stone-theme-1-2-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28055",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:38.983",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX M.Williamson williamson allows PHP Local File Inclusion.This issue affects M.Williamson: from n/a through <= 1.2.11."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('Inclusión Remota de Ficheros PHP') en ThemeREX M.Williamson williamson permite la inclusión local de ficheros PHP. Este problema afecta a M.Williamson: desde n/a hasta &lt;= 1.2.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/williamson/vulnerability/wordpress-m-williamson-theme-1-2-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28056",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.113",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX MCKinney's Politics mckinney-politics allows PHP Local File Inclusion.This issue affects MCKinney's Politics: from n/a through <= 1.2.8."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX MCKinney's Politics mckinney-politics permite Inclusión Local de Ficheros PHP. Este problema afecta a MCKinney's Politics: desde n/a hasta &lt;= 1.2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/mckinney-politics/vulnerability/wordpress-mckinney-s-politics-theme-1-2-8-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28057",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.257",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mandala mandala allows PHP Local File Inclusion.This issue affects Mandala: from n/a through <= 2.8."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX Mandala mandala permite la inclusión local de ficheros PHP. Este problema afecta a Mandala: desde n/a hasta &lt;= 2.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/mandala/vulnerability/wordpress-mandala-theme-2-8-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28058",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.397",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dixon dixon allows PHP Local File Inclusion.This issue affects Dixon: from n/a through <= 1.4.2.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP, la vulnerabilidad 'PHP Remote File Inclusion' en ThemeREX Dixon dixon permite la inclusión local de ficheros PHP. Este problema afecta a Dixon: desde n/a hasta &lt;= 1.4.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dixon/vulnerability/wordpress-dixon-theme-1-4-2-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28059",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.537",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dermatology Clinic dermatology-clinic allows PHP Local File Inclusion.This issue affects Dermatology Clinic: from n/a through <= 1.4.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('vulnerabilidad de inclusión remota de ficheros PHP') en ThemeREX Dermatology Clinic dermatology-clinic permite la inclusión local de ficheros PHP. Este problema afecta a Dermatology Clinic: desde n/a hasta &lt;= 1.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dermatology-clinic/vulnerability/wordpress-dermatology-clinic-theme-1-4-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28060",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.667",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX S.King stephanie-king allows PHP Local File Inclusion.This issue affects S.King: from n/a through <= 1.5.3."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP, vulnerabilidad de 'inclusión remota de ficheros PHP' en ThemeREX S.King stephanie-king, permite la inclusión local de ficheros PHP. Este problema afecta a S.King: desde n/a hasta &lt;= 1.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/stephanie-king/vulnerability/wordpress-s-king-theme-1-5-3-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28061",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.803",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tiger Claw tiger-claw allows PHP Local File Inclusion.This issue affects Tiger Claw: from n/a through <= 1.1.14."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la sentencia include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Tiger Claw tiger-claw permite la inclusión local de ficheros PHP. Este problema afecta a Tiger Claw: desde n/a hasta &lt;= 1.1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/tiger-claw/vulnerability/wordpress-tiger-claw-theme-1-1-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28062",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:39.943",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Happy Baby happy-baby allows PHP Local File Inclusion.This issue affects Happy Baby: from n/a through <= 1.2.12."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la sentencia Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Happy Baby happy-baby permite la inclusión local de ficheros PHP. Este problema afecta a Happy Baby: desde n/a hasta &lt;= 1.2.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/happy-baby/vulnerability/wordpress-happy-baby-theme-1-2-12-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28063",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.077",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Asia Garden asia-garden allows PHP Local File Inclusion.This issue affects Asia Garden: from n/a through <= 1.3.1."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'Inclusión remota de ficheros de PHP') en ThemeREX Asia Garden asia-garden permite la inclusión local de ficheros de PHP. Este problema afecta a Asia Garden: desde n/a hasta &lt;= 1.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/asia-garden/vulnerability/wordpress-asia-garden-theme-1-3-1-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28064",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.210",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Edge Decor edge-decor allows PHP Local File Inclusion.This issue affects Edge Decor: from n/a through <= 2.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control Inadecuado del Nombre de Fichero para la Declaración Include/Require en el Programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Edge Decor edge-decor permite la Inclusión Local de Ficheros PHP. Este problema afecta a Edge Decor: desde n/a hasta &lt;= 2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/edge-decor/vulnerability/wordpress-edge-decor-theme-2-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28065",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.350",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Eject eject allows PHP Local File Inclusion.This issue affects Eject: from n/a through <= 2.17."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX Eject eject permite la inclusión local de ficheros PHP. Este problema afecta a Eject: desde n/a hasta &lt;= 2.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/eject/vulnerability/wordpress-eject-theme-2-17-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28066",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.480",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legrand legrand allows PHP Local File Inclusion.This issue affects Legrand: from n/a through <= 2.17."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Legrand legrand permite la Inclusión Local de Ficheros PHP. Este problema afecta a Legrand: desde n/a hasta &lt;= 2.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/legrand/vulnerability/wordpress-legrand-theme-2-17-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28067",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.620",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bassein bassein allows PHP Local File Inclusion.This issue affects Bassein: from n/a through <= 1.0.15."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP (vulnerabilidad de 'Inclusión remota de ficheros PHP') en ThemeREX Bassein bassein permite la inclusión local de ficheros PHP. Este problema afecta a Bassein: desde n/a hasta &lt;= 1.0.15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/bassein/vulnerability/wordpress-bassein-theme-1-0-15-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28068",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.750",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Rhythmo rhythmo allows PHP Local File Inclusion.This issue affects Rhythmo: from n/a through <= 1.3.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Rhythmo rhythmo permite la Inclusión Local de Ficheros PHP. Este problema afecta a Rhythmo: desde n/a hasta &lt;= 1.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/rhythmo/vulnerability/wordpress-rhythmo-theme-1-3-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28069",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:40.890",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Le Truffe letruffe allows PHP Local File Inclusion.This issue affects Le Truffe: from n/a through <= 1.1.7."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la sentencia Include/Require en programa PHP, vulnerabilidad ('inclusión remota de ficheros PHP') en ThemeREX Le Truffe letruffe permite la inclusión local de ficheros PHP. Este problema afecta a Le Truffe: desde n/a hasta &lt;= 1.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/letruffe/vulnerability/wordpress-le-truffe-theme-1-1-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28071",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.027",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in PixFort pixfort Core pixfort-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects pixfort Core: from n/a through <= 3.2.22."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en PixFort pixfort Core pixfort-core permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a pixfort Core: desde n/a hasta &lt;= 3.2.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/pixfort-core/vulnerability/wordpress-pixfort-core-plugin-3-2-22-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28072",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.170",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixFort pixfort Core pixfort-core allows Reflected XSS.This issue affects pixfort Core: from n/a through <= 3.2.22."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en PixFort pixfort Core pixfort-core permite XSS Reflejado. Este problema afecta a pixfort Core: desde n/a hasta &lt;= 3.2.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/pixfort-core/vulnerability/wordpress-pixfort-core-plugin-3-2-22-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28074",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.307",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Pizza House pizzahouse allows Object Injection.This issue affects Pizza House: from n/a through <= 1.4.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Pizza House pizzahouse permite la inyección de objetos. Este problema afecta a Pizza House: desde n/a hasta &lt;= 1.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/pizzahouse/vulnerability/wordpress-pizza-house-theme-1-4-0-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28075",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.440",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in p-themes Porto porto allows Reflected XSS.This issue affects Porto: from n/a through <= 7.6.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en p-themes Porto porto permite XSS Reflejado. Este problema afecta a Porto: desde n/a hasta &lt;= 7.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/porto/vulnerability/wordpress-porto-theme-7-6-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28076",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.580",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Frenify Guff guff allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Guff: from n/a through <= 1.0.1."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por falta de autorización en Frenify Guff guff permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Guff: desde n/d hasta &lt;= 1.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/guff/vulnerability/wordpress-guff-theme-1-0-1-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28077",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.710",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Vapester vapester allows PHP Local File Inclusion.This issue affects Vapester: from n/a through <= 1.1.10."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en ThemeREX Vapester vapester permite la inclusión local de ficheros PHP. Este problema afecta a Vapester: desde n/a hasta &lt;= 1.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/vapester/vulnerability/wordpress-vapester-theme-1-1-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28078",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.843",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue affects uListing: from n/a through <= 2.2.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de limitación incorrecta de un nombre de ruta a un directorio restringido ('Salto de ruta') en Stylemix uListing ulisting permite el salto de ruta. Este problema afecta a uListing: desde n/a hasta &lt;= 2.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-2-0-arbitrary-file-download-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28079",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:41.973",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inclusion.This issue affects Conquerors: from n/a through <= 1.2.13."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP, vulnerabilidad de 'inclusión remota de ficheros PHP' en axiomthemes Conquerors conquerors permite inclusión local de ficheros PHP. Este problema afecta a Conquerors: desde n/a hasta &lt;= 1.2.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/conquerors/vulnerability/wordpress-conquerors-theme-1-2-13-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28081",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.110",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Windsor windsor allows PHP Local File Inclusion.This issue affects Windsor: from n/a through <= 2.5.0."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Windsor windsor permite la Inclusión Local de Ficheros PHP. Este problema afecta a Windsor: desde n/a hasta &lt;= 2.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/windsor/vulnerability/wordpress-windsor-theme-2-5-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28084",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.243",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bazinga bazinga allows PHP Local File Inclusion.This issue affects Bazinga: from n/a through <= 1.1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX Bazinga bazinga permite la inclusión local de ficheros PHP. Este problema afecta a Bazinga: desde n/a hasta &lt;= 1.1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/bazinga/vulnerability/wordpress-bazinga-theme-1-1-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28085",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.380",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mahogany mahogany allows PHP Local File Inclusion.This issue affects Mahogany: from n/a through <= 2.9."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Mahogany mahogany permite la inclusión local de ficheros PHP. Este problema afecta a Mahogany: desde n/a hasta &lt;= 2.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/mahogany/vulnerability/wordpress-mahogany-theme-2-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28086",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.510",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Run Gran run-gran allows PHP Local File Inclusion.This issue affects Run Gran: from n/a through <= 2.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad 'inclusión remota de ficheros PHP') en ThemeREX Run Gran run-gran permite la inclusión local de ficheros PHP. Este problema afecta a Run Gran: desde n/a hasta &lt;= 2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/run-gran/vulnerability/wordpress-run-gran-theme-2-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28087",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.650",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Filmax filmax allows PHP Local File Inclusion.This issue affects Filmax: from n/a through <= 1.1.11."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP, la vulnerabilidad de 'Inclusión remota de ficheros PHP' en ThemeREX Filmax filmax, permite la inclusión local de ficheros PHP. Este problema afecta a Filmax: desde n/a hasta &lt;= 1.1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/filmax/vulnerability/wordpress-filmax-theme-1-1-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28088",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.780",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aqualots aqualots allows PHP Local File Inclusion.This issue affects Aqualots: from n/a through <= 1.1.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en programa PHP, vulnerabilidad de 'inclusión remota de ficheros PHP' en ThemeREX Aqualots aqualots permite la inclusión local de ficheros PHP. Este problema afecta a Aqualots: desde n/a hasta &lt;= 1.1.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/aqualots/vulnerability/wordpress-aqualots-theme-1-1-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28089",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:42.920",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Daiquiri daiquiri allows PHP Local File Inclusion.This issue affects Daiquiri: from n/a through <= 1.2.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Daiquiri daiquiri permite Inclusión Local de Ficheros PHP. Este problema afecta a Daiquiri: desde n/a hasta &lt;= 1.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/daiquiri/vulnerability/wordpress-daiquiri-theme-1-2-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28090",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.047",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gamezone gamezone allows PHP Local File Inclusion.This issue affects Gamezone: from n/a through <= 1.1.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Gamezone gamezone permite la Inclusión Local de Ficheros PHP. Este problema afecta a Gamezone: desde n/a hasta &lt;= 1.1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/gamezone/vulnerability/wordpress-gamezone-theme-1-1-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28091",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.183",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coleo coleo allows PHP Local File Inclusion.This issue affects Coleo: from n/a through <= 1.1.7."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en ThemeREX Coleo coleo permite la inclusión local de ficheros PHP. Este problema afecta a Coleo: desde n/a hasta &lt;= 1.1.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/coleo/vulnerability/wordpress-coleo-theme-1-1-7-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28092",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.313",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Sounder sounder allows PHP Local File Inclusion.This issue affects Sounder: from n/a through <= 1.3.11."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Sounder sounder permite la Inclusión Local de Ficheros PHP. Este problema afecta a Sounder: desde n/a hasta &lt;= 1.3.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/sounder/vulnerability/wordpress-sounder-theme-1-3-11-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28093",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.447",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Ozisti ozisti allows PHP Local File Inclusion.This issue affects Ozisti: from n/a through <= 1.1.10."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control inadecuado del nombre de fichero para la declaración include/require en un programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Ozisti ozisti permite la Inclusión Local de Ficheros PHP. Este problema afecta a Ozisti: desde n/a hasta &lt;= 1.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/ozisti/vulnerability/wordpress-ozisti-theme-1-1-10-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28094",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.577",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX RexCoin rexcoin allows PHP Local File Inclusion.This issue affects RexCoin: from n/a through <= 1.2.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX RexCoin rexcoin permite la Inclusión Local de Ficheros PHP. Este problema afecta a RexCoin: desde n/a hasta &lt;= 1.2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/rexcoin/vulnerability/wordpress-rexcoin-theme-1-2-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28095",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.710",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Marcell marcell allows PHP Local File Inclusion.This issue affects Marcell: from n/a through <= 1.2.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Marcell marcell permite la Inclusión Local de Ficheros PHP. Este problema afecta a Marcell: desde n/a hasta &lt;= 1.2.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/marcell/vulnerability/wordpress-marcell-theme-1-2-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28096",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.837",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX WealthCo wealthco allows PHP Local File Inclusion.This issue affects WealthCo: from n/a through <= 2.18."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en un programa PHP, una vulnerabilidad ('Inclusión remota de ficheros PHP'), en ThemeREX WealthCo wealthco permite la inclusión local de ficheros PHP. Este problema afecta a WealthCo: desde n/a hasta &lt;= 2.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/wealthco/vulnerability/wordpress-wealthco-theme-2-18-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28097",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:43.970",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Artrium artrium allows PHP Local File Inclusion.This issue affects Artrium: from n/a through <= 1.0.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad 'Inclusión Remota de Ficheros PHP') en ThemeREX Artrium artrium permite la inclusión local de ficheros PHP. Este problema afecta a Artrium: desde n/a hasta &lt;= 1.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/artrium/vulnerability/wordpress-artrium-theme-1-0-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28098",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.100",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through <= 1.2.13."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en ThemeREX Save Life save-life permite la Inclusión Local de Ficheros PHP. Este problema afecta a Save Life: desde n/a hasta &lt;= 1.2.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/save-life/vulnerability/wordpress-save-life-theme-1-2-13-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28099",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.230",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Ultra uberSlider_ultra allows Reflected XSS.This issue affects UberSlider Ultra: from n/a through <= 2.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup UberSlider Ultra uberSlider_ultra permite XSS Reflejado. Este problema afecta a UberSlider Ultra: desde n/a hasta &lt;= 2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/uberSlider_ultra/vulnerability/wordpress-uberslider-ultra-plugin-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28100",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.383",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through <= 2.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile permite XSS Reflejado. Este problema afecta a UberSlider PerpetuumMobile: desde n/a hasta &lt;= 2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/uberSlider_perpetuummobile/vulnerability/wordpress-uberslider-perpetuummobile-plugin-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28101",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.523",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider MouseInteraction uberSlider_mouseinteraction allows Reflected XSS.This issue affects UberSlider MouseInteraction: from n/a through <= 2.3."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup UberSlider MouseInteraction uberSlider_mouseinteraction permite XSS Reflejado. Este problema afecta a UberSlider MouseInteraction: desde n/d hasta &lt;= 2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/uberSlider_mouseinteraction/vulnerability/wordpress-uberslider-mouseinteraction-plugin-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28102",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.657",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Classic uberSlider_classic allows Reflected XSS.This issue affects UberSlider Classic: from n/a through <= 2.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup UberSlider Classic uberSlider_classic permite XSS Reflejado. Este problema afecta a UberSlider Classic: desde n/a hasta &lt;= 2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/uberSlider_classic/vulnerability/wordpress-uberslider-classic-plugin-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28103",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.787",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.5."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup LBG Zoominoutslider lbg_zoominoutslider permite XSS Reflejado. Este problema afecta a LBG Zoominoutslider: desde n/a hasta &lt;= 5.4.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/lbg_zoominoutslider/vulnerability/wordpress-lbg-zoominoutslider-plugin-5-4-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28104",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:44.913",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Site Suggest: from n/a through <= 1.3.9."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Aryan Shirani Bid Abadi Site Suggest site-suggest permite Acceder a Funcionalidad No Restringida Adecuadamente por ACLs. Este problema afecta a Site Suggest: desde n/a hasta &lt;= 1.3.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/site-suggest/vulnerability/wordpress-site-suggest-plugin-1-3-9-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28105",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.047",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <= 1.7.7."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización de datos no confiables en ThemeREX Good Energy goodenergy permite la inyección de objetos. Este problema afecta a Good Energy: desde n/a hasta &lt;= 1.7.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/goodenergy/vulnerability/wordpress-good-energy-theme-1-7-7-php-object-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28107",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.170",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Muzicon muzicon allows PHP Local File Inclusion.This issue affects Muzicon: from n/a through <= 1.9.0."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('PHP inclusión remota de ficheros') vulnerabilidad en ThemeREX Muzicon muzicon permite PHP inclusión local de ficheros. Este problema afecta a Muzicon: desde n/a hasta &lt;= 1.9.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/muzicon/vulnerability/wordpress-muzicon-theme-1-9-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28108",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.307",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through <= 3.8."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') en LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner permite XSS Reflejado. Este problema afecta a LambertGroup - AllInOne - Banner with Thumbnails: desde n/a hasta &lt;= 3.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/all-in-one-thumbnailsBanner/vulnerability/wordpress-lambertgroup-allinone-banner-with-thumbnails-plugin-3-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28109",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.433",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through <= 3.8."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider permite XSS Reflejado. Este problema afecta a LambertGroup - AllInOne - Content Slider: desde n/a hasta &lt;= 3.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/all-in-one-contentSlider/vulnerability/wordpress-lambertgroup-allinone-content-slider-plugin-3-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28110",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.567",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through <= 3.8."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist permite XSS Reflejado. Este problema afecta a LambertGroup - AllInOne - Banner with Playlist: desde n/a hasta &lt;= 3.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/all-in-one-bannerWithPlaylist/vulnerability/wordpress-lambertgroup-allinone-banner-with-playlist-plugin-3-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28112",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.693",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows Reflected XSS.This issue affects AllInOne - Banner Rotator: from n/a through <= 3.8."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator permite XSS Reflejado. Este problema afecta a AllInOne - Banner Rotator: desde n/a hasta &lt;= 3.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/all-in-one-bannerRotator/vulnerability/wordpress-allinone-banner-rotator-plugin-3-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28113",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.827",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Reflected XSS.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.1."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en azzaroco Ultimate Learning Pro indeed-learning-pro permite XSS Reflejado. Este problema afecta a Ultimate Learning Pro: desde n/a hasta &lt;= 3.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/indeed-learning-pro/vulnerability/wordpress-ultimate-learning-pro-plugin-3-9-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28114",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:45.950",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects WooCommerce License Manager: from n/a through <= 7.0.6."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga sin restricciones de archivo con tipo peligroso en firassaidi WooCommerce License Manager fs-license-manager permite cargar un shell web a un servidor web. Este problema afecta a WooCommerce License Manager: desde n/a hasta &lt;= 7.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/fs-license-manager/vulnerability/wordpress-woocommerce-license-manager-plugin-6-0-5-arbitrary-file-upload-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28115",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.087",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: from n/a through <= 1.25."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Elementos Especiales utilizados en un Comando SQL ('Inyección SQL') vulnerabilidad en loopus WP Attractive Donations System - Easy Stripe &amp; Paypal donations WP_AttractiveDonationsSystem permite Inyección SQL Ciega. Este problema afecta a WP Attractive Donations System - Easy Stripe &amp; Paypal donations: desde n/a hasta &lt;= 1.25."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/WP_AttractiveDonationsSystem/vulnerability/wordpress-wp-attractive-donations-system-easy-stripe-paypal-donations-plugin-1-25-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28117",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.220",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP (vulnerabilidad de 'Inclusión Remota de Ficheros de PHP') en axiomthemes smart SEO smartSEO permite la inclusión local de ficheros de PHP. Este problema afecta a smart SEO: desde n/a hasta &lt;= 2.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/smartSEO/vulnerability/wordpress-smart-seo-theme-2-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28118",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.350",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through <= 2.4."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la sentencia Include/Require en programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en axiomthemes Welldone welldone permite la inclusión local de ficheros PHP. Este problema afecta a Welldone: desde n/a hasta &lt;= 2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/welldone/vulnerability/wordpress-welldone-theme-2-4-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28119",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.483",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en programa PHP, vulnerabilidad 'Inclusión Remota de Ficheros PHP', en axiomthemes Nirvana nirvana permite la Inclusión Local de Ficheros PHP. Este problema afecta a Nirvana: desde n/a hasta &lt;= 2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/nir-vana/vulnerability/wordpress-nirvana-theme-2-6-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28120",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.613",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dr.Patterson dr-patterson allows PHP Local File Inclusion.This issue affects Dr.Patterson: from n/a through <= 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Control Inadecuado del Nombre de Fichero para la Sentencia Include/Require en Programa PHP ('Inclusión Remota de Ficheros PHP') en ThemeREX Dr.Patterson dr-patterson permite Inclusión Local de Ficheros PHP. Este problema afecta a Dr.Patterson: desde n/a hasta &lt;= 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/dr-patterson/vulnerability/wordpress-dr-patterson-theme-1-3-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28121",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.747",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File Inclusion.This issue affects Anderson: from n/a through <= 1.4.2."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en el programa PHP, la vulnerabilidad de 'inclusión remota de ficheros de PHP' en AncoraThemes Anderson andersonclinic permite la inclusión local de ficheros de PHP. Este problema afecta a Anderson: desde n/a hasta &lt;= 1.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/andersonclinic/vulnerability/wordpress-anderson-theme-1-4-2-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28122",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:46.880",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through <= 2.9.8."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en CridioStudio ListingPro listingpro-plugin permite XSS Reflejado. Este problema afecta a ListingPro: desde n/d hasta &lt;= 2.9.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/listingpro-plugin/vulnerability/wordpress-listingpro-plugin-2-9-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28123",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.013",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Veil veil allows PHP Local File Inclusion.This issue affects Veil: from n/a through <= 1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión Remota de Ficheros PHP') vulnerabilidad en AncoraThemes Veil veil permite la Inclusión Local de Ficheros PHP. Este problema afecta a Veil: desde n/a hasta &lt;= 1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/veil/vulnerability/wordpress-veil-theme-1-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28124",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.140",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/a through <= 1.9."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en AncoraThemes Notarius notarius permite inclusión local de ficheros PHP. Este problema afecta a Notarius: desde n/a hasta &lt;= 1.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/notarius/vulnerability/wordpress-notarius-theme-1-9-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28125",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.273",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through <= 1.14."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración include/require en programa PHP, la vulnerabilidad ('PHP Remote File Inclusion') en AncoraThemes Midi midi permite la inclusión local de ficheros PHP. Este problema afecta a Midi: desde n/a hasta &lt;= 1.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/midi/vulnerability/wordpress-midi-theme-1-14-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28126",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.403",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam RH Frontend Publishing Pro rh-frontend allows Reflected XSS.This issue affects RH Frontend Publishing Pro: from n/a through < 4.3.4."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en sizam RH Frontend Publishing Pro rh-frontend permite XSS Reflejado. Este problema afecta a RH Frontend Publishing Pro: desde n/a hasta &lt;= 4.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/rh-frontend/vulnerability/wordpress-rh-frontend-publishing-pro-plugin-4-3-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28127",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.537",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through <= 1.3.2."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en e-plugins Lawyer Directory lawyer-directory permite XSS Reflejado. Este problema afecta a Lawyer Directory: desde n/a hasta &lt;= 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/lawyer-directory/vulnerability/wordpress-lawyer-directory-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28128",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.670",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through <= 1.7.0."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control inadecuado del nombre de fichero para la sentencia include/require en un programa PHP ('inclusión remota de ficheros PHP') en ThemeREX Verse verse permite la inclusión local de ficheros PHP. Este problema afecta a Verse: desde n/a hasta &lt;= 1.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/verse/vulnerability/wordpress-verse-theme-1-7-0-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28129",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.797",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16."
      }, {
        "lang" : "es",
        "value" : "Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en axiomthemes Little Birdies little-birdies permite la inclusión local de ficheros PHP. Este problema afecta a Little Birdies: desde n/a hasta &lt;= 1.3.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/little-birdies/vulnerability/wordpress-little-birdies-theme-1-3-16-local-file-inclusion-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28130",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:47.933",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through <= 4.14.0."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en AndonDesign UDesign u-design permite XSS Reflejado. Este problema afecta a UDesign: desde n/a hasta &lt;= 4.14.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/u-design/vulnerability/wordpress-udesign-theme-4-14-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28133",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:48.060",
      "lastModified" : "2026-04-28T15:16:27.277",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through <= 1.2.14."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de carga sin restricciones de archivo con tipo peligroso en WP Chill Filr filr-protection permite cargar un shell web a un servidor web. Este problema afecta a Filr: desde n/a hasta &lt;= 1.2.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/filr-protection/vulnerability/wordpress-filr-plugin-1-2-12-arbitrary-file-upload-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28134",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:48.197",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through <= 3.7.2."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de 'Control inadecuado de la generación de código' ('Inyección de código') en Crocoblock JetEngine jet-engine permite la inclusión remota de código. Este problema afecta a JetEngine: desde n/a hasta &lt;= 3.7.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-7-2-remote-code-execution-rce-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28135",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:48.330",
      "lastModified" : "2026-04-29T10:16:56.210",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Royal Elementor Addons: from n/a through <= 1.7.1052."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inclusión de funcionalidad de una esfera de control no confiable en WP Royal Royal Elementor Addons royal-elementor-addons permite acceder a funcionalidad no restringida adecuadamente por ACLs. Este problema afecta a Royal Elementor Addons: desde n/a hasta &lt;= 1.7.1049."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-plugin-1-7-1049-other-vulnerability-type-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28137",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-05T06:16:48.460",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 14.9."
      }, {
        "lang" : "es",
        "value" : "Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en QuanticaLabs MediCenter - Health Medical Clinic medicenter permite XSS Reflejado. Este problema afecta a MediCenter - Health Medical Clinic: desde n/a hasta &lt;= 14.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/Wordpress/Theme/medicenter/vulnerability/wordpress-medicenter-health-medical-clinic-wordpress-theme-theme-14-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29052",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T06:16:50.260",
      "lastModified" : "2026-03-09T18:40:51.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting (XSS) vulnerability in the Event Types of the HumHub Calendar module impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11."
      }, {
        "lang" : "es",
        "value" : "El módulo de Calendario para HumHub permite a los usuarios crear eventos únicos o recurrentes, gestionar invitaciones de asistentes y rastrear eficientemente todas las actividades programadas. Antes de la versión 1.8.11, una vulnerabilidad de cross-site scripting (XSS) almacenado en los Tipos de Evento del módulo de Calendario de HumHub impacta a los usuarios que ven eventos creados por una cuenta administrativa. Este problema ha sido parcheado en la versión 1.8.11."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humhub:calendar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.11",
            "matchCriteriaId" : "1B7B6BC6-26AE-416B-B48F-9FD65F2897BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/humhub/calendar/releases/tag/v1.8.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/humhub/calendar/security/advisories/GHSA-gqj3-pmp2-mrx8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29053",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T06:16:50.410",
      "lastModified" : "2026-03-09T18:40:22.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. Desde la versión 0.7.2 hasta la 6.19.0, temas maliciosos específicamente diseñados pueden ejecutar código arbitrario en el servidor que ejecuta Ghost. Este problema ha sido parcheado en la versión 6.19.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.7.2",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "624FEA3A-AF23-44E2-B6BF-26785A03B807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-cgc2-rcrh-qr5x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29128",
      "sourceIdentifier" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
      "published" : "2026-03-05T06:16:51.743",
      "lastModified" : "2026-03-09T18:36:42.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by root but world-readable. The configuration files (e.g., zebra.conf, bgpd.conf, ospfd.conf, ripd.conf) contain hardcoded or otherwise insecure plaintext passwords (including “enable”/privileged-mode credentials). A remote actor is able to abuse the reuse/hardcoded nature of these credentials to further access other systems in the network, gain a foothold on the satellite receiver or potentially locally privilege escalate."
      }, {
        "lang" : "es",
        "value" : "El firmware del receptor de satélite IDC SFX2100 se envía con múltiples archivos de configuración de demonios para componentes de enrutamiento (por ejemplo, zebra, bgpd, ospfd y ripd) que son propiedad de root pero legibles por todos. Los archivos de configuración (por ejemplo, zebra.conf, bgpd.conf, ospfd.conf, ripd.conf) contienen contraseñas de texto sin formato codificadas de forma rígida o de otro modo inseguras (incluidas las credenciales de modo privilegiado/'enable'). Un actor remoto es capaz de abusar de la naturaleza de reutilización/codificada de forma rígida de estas credenciales para acceder aún más a otros sistemas en la red, obtener un punto de apoyo en el receptor de satélite o potencialmente escalar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C57B6A9-CAF9-4C8A-85FC-562E16F291FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3BC5C9-39D5-4908-B470-A46E9ECFD6AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.abdulmhsblog.com/posts/sfx2100-vulns/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2418",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-03-05T06:16:51.883",
      "lastModified" : "2026-04-15T14:42:29.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Login with Salesforce hasta la versión 1.0.2 no valida que los usuarios tengan permiso para iniciar sesión a través de Salesforce, permitiendo que usuarios no autenticados sean autenticados como cualquier usuario (como un administrador) simplemente conociendo el correo electrónico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b25c6cbc-39e7-4fa0-af0b-ee7759d2c497/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30777",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-05T06:16:51.997",
      "lastModified" : "2026-03-09T18:34:56.787",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page."
      }, {
        "lang" : "es",
        "value" : "EC-CUBE proporcionado por EC-CUBE CO.,LTD. contiene una vulnerabilidad de omisión de autenticación multifactor (MFA). Un atacante que ha obtenido un ID y contraseña de administrador válidos podría ser capaz de omitir la autenticación de dos factores y obtener acceso no autorizado a la página administrativa."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:-:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "36FC4D31-98F5-4B83-A403-68A08A18C288"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:-:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.3",
            "matchCriteriaId" : "6601BE42-8CFC-49D1-ACB5-CD5711C72DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:-:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.1",
            "matchCriteriaId" : "91B2FF2A-AD86-4B83-BCC6-64CEB5FED16B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "390C4F1F-9574-423C-A6FC-41945EE72A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "77DCDC1E-072D-4859-AD9D-1F1547A5C7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "833340A1-0C34-4FE6-9820-CBCA7F3DC96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3445AF5-EB3D-4E12-A443-7938B8D6283A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8379929D-BC61-46EF-AA01-5154FBEFF658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.2.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2FE8135-3653-4460-AC7F-ED95C184F89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.2.3:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "67D9B2DD-2498-465A-B85A-56EB5A8A13AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "61BF3F86-DD59-4F48-B4CC-E637699F0638"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN63765888/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20260209/index.php",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3072",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T06:16:52.160",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Media Library Assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mla_update_compat_fields_action() function in all versions up to, and including, 3.33. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify taxonomy terms on arbitrary attachments."
      }, {
        "lang" : "es",
        "value" : "El plugin Media Library Assistant para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función mla_update_compat_fields_action() en todas las versiones hasta la 3.33, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, modifiquen términos de taxonomía en archivos adjuntos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/media-library-assistant/tags/3.32/includes/class-mla-media-modal-ajax.php#L594",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/media-library-assistant/tags/3.32/includes/class-mla-media-modal-ajax.php#L628",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3469795%40media-library-assistant%2Ftrunk&old=3465434%40media-library-assistant%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2655f936-8177-4836-a0b0-1c637290a3bc?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1678",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2026-03-05T07:16:11.437",
      "lastModified" : "2026-03-09T18:33:42.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a malicious DNS response can trigger an out-of-bounds write when CONFIG_DNS_RESOLVER is enabled."
      }, {
        "lang" : "es",
        "value" : "dns_unpack_name() almacena en caché el espacio restante del búfer una vez y lo reutiliza al adjuntar etiquetas DNS. A medida que el búfer crece, el tamaño almacenado en caché se vuelve incorrecto, y el terminador nulo final puede escribirse más allá del búfer. Con las aserciones deshabilitadas (por defecto), una respuesta DNS maliciosa puede desencadenar una escritura fuera de los límites cuando CONFIG_DNS_RESOLVER está habilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnerabilities@zephyrproject.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerabilities@zephyrproject.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "7D912614-A39E-4C9B-AA54-187BC26337B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-536f-h63g-hj42",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-536f-h63g-hj42",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25702",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2026-03-05T07:16:13.153",
      "lastModified" : "2026-03-09T18:31:36.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inadecuado en el kernel de SUSE SUSE Linux Enterprise Server 12 SP5 rompe nftables, haciendo que las reglas del cortafuegos aplicadas a través de nftables no sean efectivas. Este problema afecta a SUSE Linux Enterprise Server: desde 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 antes de 9c294edb7085fb91650bc12233495a8974c5ff2d."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "29AE5751-3EA5-4056-8E79-16D8DCD248EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25702",
        "source" : "meissner@suse.de",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28536",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T07:16:13.660",
      "lastModified" : "2026-03-06T19:44:58.363",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de autenticación en el módulo de autenticación del dispositivo. Impacto: La explotación exitosa de esta vulnerabilidad afectará la integridad y la confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinvision/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2743",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2026-03-05T07:16:14.670",
      "lastModified" : "2026-03-09T18:31:01.173",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before"
      }, {
        "lang" : "es",
        "value" : "Escritura arbitraria de archivos mediante carga por salto de ruta que lleva a ejecución remota de código en la interfaz web de usuario de SeppMail. La característica afectada es la transferencia de archivos grandes (LFT). Este problema afecta a SeppMail: 15.0.2.1 y versiones anteriores."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "ATTACKED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0.2.1",
            "matchCriteriaId" : "ADABBDE5-D0B9-4A42-B997-81C811C7FADA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://labs.infoguard.ch/advisories/seppmail",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1321",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T08:15:57.957",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20. This is due to the `rcp_setup_registration_init()` function accepting any membership level ID via the `rcp_level` POST parameter without validating that the level is active or that payment is required. Combined with the `add_user_role()` method which assigns the WordPress role configured on the membership level without status checks, this makes it possible for unauthenticated attackers to register with any membership level, including inactive levels that grant privileged WordPress roles such as Administrator, or paid levels that charge a sign-up fee. The vulnerability was partially patched in version 3.2.18."
      }, {
        "lang" : "es",
        "value" : "El plugin Membership Plugin – Restrict Content para WordPress es vulnerable a escalada de privilegios en todas las versiones hasta, e incluyendo, la 3.2.20. Esto se debe a que la función `rcp_setup_registration_init()` acepta cualquier ID de nivel de membresía a través del parámetro POST `rcp_level` sin validar que el nivel esté activo o que se requiera pago. Combinado con el método `add_user_role()` que asigna el rol de WordPress configurado en el nivel de membresía sin comprobaciones de estado, esto hace posible que atacantes no autenticados se registren con cualquier nivel de membresía, incluyendo niveles inactivos que otorgan roles de WordPress privilegiados como Administrador, o niveles de pago que cobran una tarifa de registro. La vulnerabilidad fue parcialmente parcheada en la versión 3.2.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.15/core/includes/class-rcp-registration.php#L107",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.15/core/includes/memberships/class-rcp-membership.php#L1939",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.15/core/includes/registration-functions.php#L1191",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/restrict-content/tags/3.2.15/core/includes/registration-functions.php#L1203",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3447187/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3460177/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/abfaa4a6-92b0-4233-b08d-e668090d3fc2?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21786",
      "sourceIdentifier" : "psirt@hcl.com",
      "published" : "2026-03-05T08:15:58.163",
      "lastModified" : "2026-03-09T18:41:33.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HCL Sametime for iOS is impacted by a sensitive information disclosure.  Hostnames information is written in application logs and certain URLs."
      }, {
        "lang" : "es",
        "value" : "HCL Sametime para iOS se ve afectado por una revelación de información sensible. La información de los nombres de host se escribe en los registros de la aplicación y en ciertas URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@hcl.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@hcl.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:sametime:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "12.0.26",
            "matchCriteriaId" : "BA814F7C-3C88-4F73-B68E-50C166743DC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128949",
        "source" : "psirt@hcl.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28537",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:58.347",
      "lastModified" : "2026-03-05T21:57:45.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de doble liberación en el módulo de ventana. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28538",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:58.510",
      "lastModified" : "2026-03-05T21:38:16.290",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de salto de ruta en el módulo de gestión de certificados. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28539",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:58.670",
      "lastModified" : "2026-03-05T21:38:35.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de procesamiento de datos en el módulo de gestión de certificados. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-19"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28540",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:58.833",
      "lastModified" : "2026-03-05T21:39:02.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de lectura de carácter fuera de límites en Bluetooth. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-158"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinvision/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28541",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:58.993",
      "lastModified" : "2026-03-05T21:39:23.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de control de permisos en el módulo cellular_data. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinvision/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28543",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:59.150",
      "lastModified" : "2026-03-05T21:39:35.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de condición de carrera en el módulo de mantenimiento y diagnóstico. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28544",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:59.313",
      "lastModified" : "2026-03-05T21:40:48.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de condición de carrera en el módulo de impresión. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28545",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:59.470",
      "lastModified" : "2026-03-05T21:40:58.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de condición de carrera en el módulo de impresión. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28550",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:59.630",
      "lastModified" : "2026-03-05T21:41:04.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de condición de carrera en el módulo de control de seguridad. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28552",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T08:15:59.793",
      "lastModified" : "2026-03-05T21:41:19.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escritura fuera de límites en el módulo IMS. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-19"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FBF39A-164F-4F98-AB49-28C50A430C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888C5BD7-421B-4A85-8719-BFEE3C215527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198CDB2-4BC5-411A-8736-615A531FC545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EA69843-EC8D-42E2-900E-017D2B502E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2893",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T08:15:59.963",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_clone() function in all versions up to, and including, 6.3. This is due to insufficient escaping on the user-supplied meta_key value and insufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The injection is second-order: the malicious payload is stored as a post meta key and executed when the post is cloned."
      }, {
        "lang" : "es",
        "value" : "El plugin Page and Post Clone para WordPress es vulnerable a inyección SQL a través del parámetro 'meta_key' en la función content_clone() en todas las versiones hasta la 6.3, inclusive. Esto se debe a un escape insuficiente del valor 'meta_key' proporcionado por el usuario y a una preparación insuficiente en la consulta SQL existente. Esto permite a atacantes autenticados, con acceso de nivel Colaborador o superior, añadir consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer información sensible de la base de datos. La inyección es de segundo orden: la carga útil maliciosa se almacena como una clave meta de publicación y se ejecuta cuando se clona la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/page-or-post-clone/tags/6.3/page-or-post-clone.php#L95",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/page-or-post-clone/trunk/page-or-post-clone.php#L95",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3474651%40page-or-post-clone%2Ftrunk&old=3202933%40page-or-post-clone%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/85674d8a-96b3-4fae-8bff-900ca78073a4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28542",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T09:16:11.070",
      "lastModified" : "2026-03-05T21:41:37.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de permisos en el framework de servicio del sistema. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AEAF2-AF46-4835-93E1-4F942D5E2810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FBF39A-164F-4F98-AB49-28C50A430C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198CDB2-4BC5-411A-8736-615A531FC545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinwearables/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28546",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T09:16:11.240",
      "lastModified" : "2026-03-05T21:45:03.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer en el módulo de escaneo. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28547",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T09:16:11.400",
      "lastModified" : "2026-03-05T21:44:41.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de acceso a puntero no inicializado en el módulo de escaneo. Impacto: Explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28548",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T09:16:11.563",
      "lastModified" : "2026-03-05T21:44:10.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de verificación impropia en la aplicación de correo electrónico. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AEAF2-AF46-4835-93E1-4F942D5E2810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32FBF39A-164F-4F98-AB49-28C50A430C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76C33-8D23-490B-B620-C24EDCC86A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20112231-B840-44D3-A061-B9B9F80EE378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8198CDB2-4BC5-411A-8736-615A531FC545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2401DE15-9DBF-4645-A261-8C24D57C6342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28549",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T09:16:11.740",
      "lastModified" : "2026-03-05T21:43:23.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de condición de carrera en el servicio de gestión de permisos. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28551",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2026-03-05T09:16:11.897",
      "lastModified" : "2026-03-05T21:43:03.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de condición de carrera en el módulo de gestión de seguridad del dispositivo. Impacto: La explotación exitosa de esta vulnerabilidad puede afectar la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@huawei.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@huawei.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1605",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-03-05T10:15:56.890",
      "lastModified" : "2026-03-06T20:16:49.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed.\n\n\nThis happens because the JDK Inflater is allocated for decompressing the request, but it is not released because the release mechanism is tied to the compressed response.\nIn this case, since the response is not compressed, the release mechanism does not trigger, causing the leak."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty, versiones 12.0.0-12.0.31 y 12.1.0-12.0.5, la clase GzipHandler expone una vulnerabilidad cuando una solicitud HTTP comprimida, con Content-Encoding: gzip, es procesada y la respuesta correspondiente no está comprimida.\n\nEsto ocurre porque el Inflater del JDK es asignado para descomprimir la solicitud, pero no es liberado porque el mecanismo de liberación está ligado a la respuesta comprimida.\nEn este caso, dado que la respuesta no está comprimida, el mecanismo de liberación no se activa, causando la fuga."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.32",
            "matchCriteriaId" : "5773AE1D-15DA-44B0-BB9D-A8D9F3C29D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.6",
            "matchCriteriaId" : "74198EA2-3D92-4676-A49F-59DCCB4DEB04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jetty/jetty.project/security/advisories/GHSA-xxh7-fcf3-rj7f",
        "source" : "emo@eclipse.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21628",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2026-03-05T10:15:57.930",
      "lastModified" : "2026-03-13T01:33:31.743",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una característica de gestión de archivos incorrectamente protegida permite cargas de tipos de datos peligrosos para usuarios no autenticados, lo que lleva a ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@joomla.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "ATTACKED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "YES",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@joomla.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:templaza:astroid_framework:*:*:*:*:*:joomla\\!:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "3.3.10",
            "matchCriteriaId" : "13FED99F-9FEE-4488-92AF-EE31F2B1DA3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://astroidframe.work",
        "source" : "security@joomla.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3236",
      "sourceIdentifier" : "security@octopus.com",
      "published" : "2026-03-05T11:15:54.400",
      "lastModified" : "2026-03-13T01:30:06.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original API key used to mint the access token."
      }, {
        "lang" : "es",
        "value" : "En las versiones afectadas de Octopus Server era posible crear una nueva clave de API a partir de un token de acceso existente, lo que resultaba en que la nueva clave de API tuviera una vida útil que excedía la clave de API original utilizada para generar el token de acceso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@octopus.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@octopus.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023.1.4189",
            "versionEndExcluding" : "2025.3.14761",
            "matchCriteriaId" : "8B609A0F-1C05-47BB-BA71-2A549AF037F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025.4.51",
            "versionEndExcluding" : "2025.4.10409",
            "matchCriteriaId" : "6C328575-4BD6-4E45-B5D8-FBC4BCDD7E66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.octopus.com/post/2026/sa2026-02",
        "source" : "security@octopus.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2599",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T13:16:30.167",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'download_csv' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present."
      }, {
        "lang" : "es",
        "value" : "El plugin Database for Contact Form 7, WPforms, Elementor forms para WordPress es vulnerable a la inyección de objetos PHP en todas las versiones hasta la 1.4.7, inclusive, a través de la deserialización de entrada no confiable en la función 'download_csv'. Esto hace posible que atacantes no autenticados inyecten un objeto PHP. No hay una cadena POP conocida presente en el software vulnerable, lo que significa que esta vulnerabilidad no tiene impacto a menos que otro plugin o tema que contenga una cadena POP esté instalado en el sitio. Si una cadena POP está presente a través de un plugin o tema adicional instalado en el sistema objetivo, puede permitir al atacante realizar acciones como eliminar archivos arbitrarios, recuperar datos sensibles o ejecutar código dependiendo de la cadena POP presente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/contact-form-entries/trunk/contact-form-entries.php#L2972",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contact-form-entries/trunk/contact-form-entries.php#L3016",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3474882/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7a116f28-a560-4b54-9cd1-f1dd9ac3238d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1720",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T14:16:13.673",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the 'install_and_active_plugin' function in all versions up to, and including, 1.4.24. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins."
      }, {
        "lang" : "es",
        "value" : "El plugin WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation para WordPress es vulnerable a la instalación arbitraria de plugins no autorizados debido a la ausencia de una comprobación de capacidad en la función 'install_and_active_plugin' en todas las versiones hasta la 1.4.24, inclusive. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor y superior, instalar y activar plugins arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/optin/trunk/includes/utils/class-notice.php#L848",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3456826/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ee0c0e29-b117-4480-b5b7-995878af8c57?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27748",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2026-03-05T15:16:11.747",
      "lastModified" : "2026-04-01T15:22:35.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\\\\ProgramData without validating whether the path resolves through a symbolic link or reparse point. A local attacker can create a malicious link to redirect the delete operation to an arbitrary file, resulting in deletion of attacker-chosen files with SYSTEM privileges. This may lead to local privilege escalation, denial of service, or system integrity compromise depending on the targeted file and operating system configuration."
      }, {
        "lang" : "es",
        "value" : "Avira Internet Security contiene una vulnerabilidad de resolución de enlaces incorrecta en el componente Software Updater. Durante el proceso de actualización, un servicio privilegiado ejecutándose como SYSTEM elimina un archivo bajo C:\\\\ProgramData sin validar si la ruta se resuelve a través de un enlace simbólico o un punto de reanálisis. Un atacante local puede crear un enlace malicioso para redirigir la operación de eliminación a un archivo arbitrario, resultando en la eliminación de archivos elegidos por el atacante con privilegios de SYSTEM. Esto puede llevar a una escalada de privilegios local, denegación de servicio o compromiso de la integridad del sistema dependiendo del archivo objetivo y la configuración del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:internet_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "1.1.114.3113",
            "matchCriteriaId" : "DFB6EFB7-8777-4A9B-9A00-2FBEE12A7090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.avira.com/hc/en-us/articles/360010656158-Current-Avira-versions",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.avira.com/en/internet-security",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.gendigital.com/us/en/contact-us/security-advisories/",
        "source" : "security@nortonlifelock.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27749",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2026-03-05T15:16:11.963",
      "lastModified" : "2026-04-01T15:22:35.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\\\\ProgramData using .NET BinaryFormatter without implementing input validation or deserialization safeguards. Because the file can be created or modified by a local user in default configurations, an attacker can supply a crafted serialized payload that is deserialized by the privileged process, resulting in arbitrary code execution as SYSTEM."
      }, {
        "lang" : "es",
        "value" : "Avira Internet Security contiene una vulnerabilidad de deserialización de datos no confiables en el componente System Speedup. El proceso Avira.SystemSpeedup.RealTimeOptimizer.exe, que se ejecuta con privilegios del SISTEMA, deserializa datos de un archivo ubicado en C:\\\\ProgramData utilizando .NET BinaryFormatter sin implementar validaciones de entrada ni medidas de seguridad para la deserialización. Dado que el archivo puede ser creado o modificado por un usuario local en las configuraciones predeterminadas, un atacante puede proporcionar una carga útil serializada diseñada que sea deserializada por el proceso con privilegios, lo que da lugar a la ejecución de código arbitrario como SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:internet_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "1.1.114.3113",
            "matchCriteriaId" : "DFB6EFB7-8777-4A9B-9A00-2FBEE12A7090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.avira.com/hc/en-us/articles/360010656158-Current-Avira-versions",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.avira.com/en/internet-security",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.gendigital.com/us/en/contact-us/security-advisories/",
        "source" : "security@nortonlifelock.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27750",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2026-03-05T15:16:12.153",
      "lastModified" : "2026-04-01T15:22:36.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target path. A local attacker can replace a previously scanned directory with a junction or reparse point before deletion occurs, causing the privileged process to delete an unintended system location. This may result in deletion of protected files or directories and can lead to local privilege escalation, denial of service, or system integrity compromise depending on the affected target."
      }, {
        "lang" : "es",
        "value" : "Avira Internet Security contiene una vulnerabilidad de tiempo de comprobación y tiempo de uso (TOCTOU) en el componente Optimizer. Un servicio con privilegios que se ejecuta como SYSTEM identifica los directorios que deben limpiarse durante una fase de análisis y, posteriormente, los elimina durante una fase de limpieza independiente sin volver a validar la ruta de destino. Un atacante local puede sustituir un directorio escaneado previamente por un punto de unión o de reanálisis antes de que se produzca la eliminación, lo que provoca que el proceso con privilegios elimine una ubicación del sistema no deseada. Esto puede dar lugar a la eliminación de archivos o directorios protegidos y puede provocar una escalada de privilegios locales, una denegación de servicio o un compromiso de la integridad del sistema, dependiendo del objetivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:internet_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "1.1.114.3113",
            "matchCriteriaId" : "DFB6EFB7-8777-4A9B-9A00-2FBEE12A7090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.avira.com/hc/en-us/articles/360010656158-Current-Avira-versions",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.avira.com/en/internet-security",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.gendigital.com/us/en/contact-us/security-advisories/",
        "source" : "security@nortonlifelock.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30791",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T15:16:14.717",
      "lastModified" : "2026-03-18T19:25:01.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Config import, URI scheme handler, CLI --config modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files flutter/lib/common.Dart, hbb_common/src/config.Rs and program routines parseRustdeskUri(), importConfig().\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por uso de un algoritmo criptográfico defectuoso o arriesgado en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android y WebClient (importación de configuración, controlador de esquema URI, módulos CLI --config) permite recuperar datos confidenciales incrustados. Esta vulnerabilidad está asociada con los archivos de programa flutter/lib/common.Dart, hbb_common/src/config.Rs y las rutinas de programa parseRustdeskUri(), importConfig(). Este problema afecta a RustDesk Client: hasta la versión 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        }, {
          "lang" : "en",
          "value" : "CWE-684"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "70EE9711-C12B-402D-B28E-4CF19EC7BC88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/client/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3598",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T15:16:15.167",
      "lastModified" : "2026-03-25T16:35:12.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config string generation, web console export modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routines Config export/generation routines.\n\nThis issue affects RustDesk Server Pro: through 1.7.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad por uso de un algoritmo criptográfico defectuoso o inseguro en rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro en Windows, MacOS y Linux (generación de cadenas de configuración, módulos de exportación de la consola web) permite recuperar datos confidenciales incrustados. Esta vulnerabilidad está asociada con las rutinas del programa de exportación/generación de configuración. Este problema afecta a RustDesk Server Pro: hasta la versión 1.7.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        }, {
          "lang" : "en",
          "value" : "CWE-684"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk_server:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "4F6E21F9-385D-4DB4-9CD4-EDB43561D9E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/client/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25048",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T16:16:15.853",
      "lastModified" : "2026-03-13T18:09:38.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault (core dumped). This issue has been patched in version 0.1.32."
      }, {
        "lang" : "es",
        "value" : "xgrammar es una biblioteca de código abierto para una generación estructurada eficiente, flexible y portátil. Antes de la versión 0.1.32, la sintaxis anidada multinivel causaba un fallo de segmentación (volcado de memoria principal). Este problema ha sido parcheado en la versión 0.1.32."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlc-ai:xgrammar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.32",
            "matchCriteriaId" : "7C5ACE99-2EBF-423C-9621-86291AFEC68A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mlc-ai/xgrammar/releases/tag/v0.1.32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-7rgv-gqhr-fxg3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-05T16:16:16.350",
      "lastModified" : "2026-03-10T18:18:43.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross Site Scripting en Koha 25.11 y versiones anteriores permite a un atacante remoto ejecutar código arbitrario a través de la función de Noticias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:koha:koha:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.11.00",
            "matchCriteriaId" : "25FAB290-1183-4E6F-8512-9ED7BBEA694C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://g03m0n.github.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://g03m0n.github.io/posts/cve-2026-26377/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Koha-Community/Koha",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30783",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:18.910",
      "lastModified" : "2026-03-25T16:30:01.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_mediator.Rs, src/hbbs_http/sync.Rs and program routines API sync loop, api-server config handling.\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android, WebClient (señalización del cliente, bucle de sincronización de la API, módulos de gestión de configuración) permite el abuso de privilegios. Esta vulnerabilidad está asociada con los archivos de programa src/rendezvous_mediator.Rs, src/hbbs_http/sync.Rs y las rutinas del programa bucle de sincronización de la API, manejo de la configuración del servidor API.\n\nEste problema afecta a RustDesk Client: hasta la versión 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        }, {
          "lang" : "en",
          "value" : "CWE-841"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/client/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30784",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:19.110",
      "lastModified" : "2026-03-25T16:19:56.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization, Missing Authentication for Critical Function vulnerability in rustdesk-server RustDesk Server rustdesk-server, rustdesk-server-pro on hbbs/hbbr on all server platforms (Rendezvous server (hbbs), relay server (hbbr) modules) allows Privilege Abuse. This vulnerability is associated with program files src/rendezvous_server.Rs, src/relay_server.Rs and program routines handle_punch_hole_request(), RegisterPeer handler, relay forwarding.\n\nThis issue affects RustDesk Server: through 1.7.5, through 1.1.15."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Autorización Faltante, Autenticación Faltante para Función Crítica en rustdesk-server RustDesk Server rustdesk-server, rustdesk-server-pro en hbbs/hbbr en todas las plataformas de servidor (módulos de servidor Rendezvous (hbbs), servidor de retransmisión (hbbr)) permite el Abuso de Privilegios. Esta vulnerabilidad está asociada con los archivos de programa src/rendezvous_server.Rs, src/relay_server.Rs y las rutinas de programa handle_punch_hole_request(), el gestor RegisterPeer, el reenvío de retransmisión.\n\nEste problema afecta a RustDesk Server: hasta 1.7.5, hasta 1.1.15."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk_server:*:*:*:*:oss:*:*:*",
            "versionEndIncluding" : "1.1.15",
            "matchCriteriaId" : "4EEF792E-C412-4ECD-A2A2-5506601F4404"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk_server:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "4F6E21F9-385D-4DB4-9CD4-EDB43561D9E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/self-host/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30785",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:19.270",
      "lastModified" : "2026-03-25T15:47:08.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Password security module, config encryption, machine UID modules) allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program files hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs and program routines symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Modificación Inadecuadamente Controlada de Atributos de Prototipo de Objeto ('Contaminación de Prototipos'), vulnerabilidad de Uso de Hash de Contraseña Con Esfuerzo Computacional Insuficiente en rustdesk-client RustDesk Cliente rustdesk, hbb_common en Windows, MacOS, Linux (Módulo de seguridad de contraseña, cifrado de configuración, módulos de UID de máquina) permite Recuperar Datos Sensibles Incrustados. Esta vulnerabilidad está asociada con los archivos de programa hbb_common/src/password_security.Rs, hbb_common/src/config.Rs, hbb_common/src/lib.Rs (get_uuid), machine-uid/src/lib.Rs y las rutinas de programa symmetric_crypt(), encrypt_str_or_original(), decrypt_str_or_original(), get_uuid(), get_machine_id().\n\nEste problema afecta a RustDesk Cliente: hasta la 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        }, {
          "lang" : "en",
          "value" : "CWE-323"
        }, {
          "lang" : "en",
          "value" : "CWE-916"
        }, {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "70EE9711-C12B-402D-B28E-4CF19EC7BC88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rustdesk/rustdesk/discussions/4979",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rustdesk/rustdesk/discussions/9229",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30789",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:19.560",
      "lastModified" : "2026-03-25T15:43:45.563",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Client login, peer authentication modules) allows Reusing Session IDs (aka Session Replay). This vulnerability is associated with program files src/client.Rs and program routines hash_password(), login proof construction.\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Omisión de autenticación por captura-repetición, vulnerabilidad de uso de hash de contraseña con esfuerzo computacional insuficiente en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android (módulos de inicio de sesión del cliente, autenticación de pares) permite la reutilización de IDs de sesión (también conocido como repetición de sesión). Esta vulnerabilidad está asociada con los archivos de programa src/client.Rs y las rutinas de programa hash_password(), construcción de prueba de inicio de sesión. Este problema afecta a RustDesk Client: hasta la versión 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        }, {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/client/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30790",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:19.703",
      "lastModified" : "2026-03-25T15:43:09.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Peer authentication, API login modules), rustdesk-server RustDesk Server (OSS) rustdesk-server on Windows, MacOS, Linux (Peer authentication, API login modules) allows Password Brute Forcing. This vulnerability is associated with program files src/server/connection.Rs and program routines Salt/challenge generation, SHA256(SHA256(pwd+salt)+challenge) verification.\n\nThis issue affects RustDesk Server Pro: through 1.7.5; RustDesk Server (OSS): through 1.1.15."
      }, {
        "lang" : "es",
        "value" : "Restricción Inadecuada de Intentos Excesivos de Autenticación, vulnerabilidad de Uso de Hash de Contraseña Con Esfuerzo Computacional Insuficiente en rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro en Windows, MacOS, Linux (autenticación de pares, módulos de inicio de sesión de API), rustdesk-server RustDesk Server (OSS) rustdesk-server en Windows, MacOS, Linux (autenticación de pares, módulos de inicio de sesión de API) permite la Fuerza Bruta de Contraseñas. Esta vulnerabilidad está asociada con los archivos de programa src/server/connection.Rs y las rutinas de programa generación de Salt/challenge, verificación de SHA256(SHA256(pwd+salt)+challenge).\n\nEste problema afecta a RustDesk Server Pro: hasta 1.7.5; RustDesk Server (OSS): hasta 1.1.15."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk_server:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "4F6E21F9-385D-4DB4-9CD4-EDB43561D9E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk_server:*:*:*:*:oss:*:*:*",
            "versionEndIncluding" : "1.1.15",
            "matchCriteriaId" : "4EEF792E-C412-4ECD-A2A2-5506601F4404"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rustdesk",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30792",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:19.840",
      "lastModified" : "2026-03-25T15:35:30.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files src/hbbs_http/sync.Rs, hbb_common/src/config.Rs and program routines Strategy merge loop in sync.Rs, Config::set_options().\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android, WebClient (sincronización de estrategia, cliente API HTTP, módulos del motor de opciones de configuración) permite la manipulación de mensajes de la API de la aplicación a través de Man-in-the-Middle. Esta vulnerabilidad está asociada con los archivos de programa src/hbbs_http/sync.Rs, hbb_common/src/config.Rs y las rutinas de programa bucle de fusión de estrategia en sync.Rs, Config::set_options().\n\nEste problema afecta a RustDesk Client: a través de 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-657"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/self-host/client-configuration/advanced-settings/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30793",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:20.037",
      "lastModified" : "2026-03-25T15:34:35.820",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules) allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart, src/flutter_ffi.Rs and program routines URI handler for rustdesk://password/, bind.MainSetPermanentPassword().\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android (gestor de esquema URI de Flutter, módulos de puente FFI) permite la escalada de privilegios. Esta vulnerabilidad está asociada con los archivos de programa flutter/lib/common.Dart, src/flutter_ffi.Rs y las rutinas de programa gestor URI para rustdesk://password/, bind.MainSetPermanentPassword(). Este problema afecta a RustDesk Client: hasta la versión 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://github.com/rustdesk/hbb_common",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rustdesk/rustdesk",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30794",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:20.177",
      "lastModified" : "2026-03-25T15:29:08.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Certificate Validation vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (HTTP API client, TLS transport modules) allows Adversary in the Middle (AiTM). This vulnerability is associated with program files src/hbbs_http/http_client.Rs and program routines TLS retry with danger_accept_invalid_certs(true).\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Validación de Certificado Incorrecta en rustdesk-client Cliente RustDesk rustdesk-client en Windows, MacOS, Linux, iOS, Android (cliente API HTTP, módulos de transporte TLS) permite Adversario en el Medio (AiTM). Esta vulnerabilidad está asociada con los archivos de programa src/hbbs_http/http_client.Rs y las rutinas de programa TLS retry with danger_accept_invalid_certs(true). Este problema afecta a Cliente RustDesk: hasta la 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rustdesk/rustdesk",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30795",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:20.410",
      "lastModified" : "2026-03-25T15:25:40.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules) allows Sniffing Attacks. This vulnerability is associated with program files src/hbbs_http/sync.Rs and program routines Heartbeat JSON payload construction (preset-address-book-password).\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de transmisión en texto claro de información sensible en el cliente RustDesk (rustdesk-client) en Windows, MacOS, Linux, iOS, Android (módulos de bucle de sincronización de latidos) permite ataques de sniffing. Esta vulnerabilidad está asociada con los archivos de programa src/hbbs_http/sync.Rs y las rutinas de programa de construcción de carga útil JSON de latidos (preset-address-book-password).\n\nEste problema afecta al cliente RustDesk: hasta la versión 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rustdesk/rustdesk",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30796",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:21.007",
      "lastModified" : "2026-03-25T17:50:45.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission of Sensitive Information vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Address book sync API modules) allows Sniffing Attacks. This vulnerability is associated with program files Closed source — API endpoint handling heartbeat sync and program routines Heartbeat API handler (accepts preset-address-book-password in plaintext).\n\nThis issue affects RustDesk Server Pro: through 1.7.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de transmisión en texto claro de información sensible en rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro en Windows, MacOS, Linux (Módulos de API de sincronización de libreta de direcciones) permite ataques de sniffing. Esta vulnerabilidad está asociada con archivos de programa de código cerrado — punto final de API que gestiona la sincronización de latidos y rutinas de programa gestor de API de latidos (acepta preset-address-book-password en texto claro).\n\nEste problema afecta a RustDesk Server Pro: hasta la 1.7.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk_server:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "1.7.5",
            "matchCriteriaId" : "4F6E21F9-385D-4DB4-9CD4-EDB43561D9E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30797",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:21.140",
      "lastModified" : "2026-03-25T16:16:29.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files flutter/lib/common.Dart and program routines importConfig() via URI handler.\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android (gestor de esquema URI de Flutter, módulos de importación de configuración) permite la Manipulación de Mensajes de API de Aplicación mediante Man-in-the-Middle. Esta vulnerabilidad está asociada con los archivos de programa flutter/lib/common.Dart y las rutinas de programa importConfig() mediante el gestor URI.\n\nEste problema afecta a RustDesk Client: hasta 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:webclient:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "14986BCF-B589-41F2-913D-2800283B452B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/client/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30798",
      "sourceIdentifier" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
      "published" : "2026-03-05T16:16:21.333",
      "lastModified" : "2026-03-10T20:25:39.497",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop, strategy processing modules) allows Protocol Manipulation. This vulnerability is associated with program files src/hbbs_http/sync.Rs and program routines stop-service handler in heartbeat loop.\n\nThis issue affects RustDesk Client: through 1.4.5."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Verificación Insuficiente de la Autenticidad de los Datos y Manejo Inadecuado de Condiciones Excepcionales en rustdesk-client RustDesk Client rustdesk-client en Windows, MacOS, Linux, iOS, Android (bucle de sincronización de latidos, módulos de procesamiento de estrategias) permite la Manipulación de Protocolo. Esta vulnerabilidad está asociada con los archivos de programa src/hbbs_http/sync.Rs y las rutinas de programa del gestor de detención de servicio en el bucle de latidos.\n\nEste problema afecta a RustDesk Client: hasta la versión 1.4.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rustdesk:rustdesk:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "1.4.5",
            "matchCriteriaId" : "70EE9711-C12B-402D-B28E-4CF19EC7BC88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/e/2PACX-1vSds6jjpd38oO_yIAyd1HYtKNUuea-I-ozAPpGhYI7QgAU-QGJ7D8a4rOZVj1vmiUXV1EcdRHf9aZAW/pub",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Third Party Advisory", "Exploit" ]
      }, {
        "url" : "https://rustdesk.com/docs/en/client/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.vulsec.org/",
        "source" : "2fdefc65-d750-4b8d-96ee-6e2c0c42dbfe",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24457",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2026-03-05T19:16:02.780",
      "lastModified" : "2026-04-15T13:30:43.413",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unsafe parsing of OpenMQ's configuration, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved."
      }, {
        "lang" : "es",
        "value" : "Un análisis inseguro de la configuración de OpenMQ permite a un atacante remoto leer archivos arbitrarios de un servidor de MQ Broker. Una explotación completa podría leer archivos no autorizados del sistema operativo anfitrión de OpenMQ. En algunos escenarios se podría lograr RCE."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:openmq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.1",
            "matchCriteriaId" : "D0C54C08-8788-4481-97CC-EAFFC7702412"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.eclipse.org/security/cve-assignment/-/issues/84",
        "source" : "emo@eclipse.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25921",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:03.183",
      "lastModified" : "2026-03-06T14:02:02.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos leads to supply-chain attack, all LFS objects are vulnerable to be maliciously overwritten by malicious attackers. This issue has been patched in version 0.14.2."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Antes de la versión 0.14.2, un objeto LFS sobrescribible entre diferentes repositorios conduce a un ataque a la cadena de suministro, todos los objetos LFS son vulnerables a ser sobrescritos maliciosamente por atacantes maliciosos. Este problema ha sido parcheado en la versión 0.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.2",
            "matchCriteriaId" : "0EDBB1E3-57E4-4560-A44F-7C54FD21C8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/81ee8836445ac888d99da8b652be7d5cbc5c4d5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8166",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-cj4v-437j-jq4c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26022",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:03.497",
      "lastModified" : "2026-03-06T13:55:54.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Prior to version 0.14.2, a stored cross-site scripting (XSS) vulnerability exists in the comment and issue description functionality. The application's HTML sanitizer explicitly allows data: URI schemes, enabling authenticated users to inject arbitrary JavaScript execution via malicious links. This issue has been patched in version 0.14.2."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Antes de la versión 0.14.2, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en la funcionalidad de comentarios y descripción de incidencias. El saneador HTML de la aplicación permite explícitamente esquemas URI data:, permitiendo a usuarios autenticados inyectar ejecución arbitraria de JavaScript a través de enlaces maliciosos. Este problema ha sido parcheado en la versión 0.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.2",
            "matchCriteriaId" : "0EDBB1E3-57E4-4560-A44F-7C54FD21C8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/441c64d7bd8893b2f4e48660a8be3a7472e14291",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8174",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-xrcr-gmf5-2r8j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26194",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:03.720",
      "lastModified" : "2026-03-06T13:55:02.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Prior to version 0.14.2, there's a security issue in gogs where deleting a release can fail if a user controlled tag name is passed to git without the right separator, this lets git options get injected and mess with the process. This issue has been patched in version 0.14.2."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Antes de la versión 0.14.2, existe un problema de seguridad en Gogs donde la eliminación de una versión puede fallar si un nombre de etiqueta controlado por el usuario se pasa a Git sin el separador correcto, lo que permite que se inyecten opciones de Git y alteren el proceso. Este problema ha sido parcheado en la versión 0.14.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.2",
            "matchCriteriaId" : "0EDBB1E3-57E4-4560-A44F-7C54FD21C8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/a000f0c7a632ada40e6829abdeea525db4c0fc2d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8175",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-v9vm-r24h-6rqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26195",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:03.900",
      "lastModified" : "2026-03-06T13:40:19.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Prior to version 0.14.2, stored xss is still possible through unsafe template rendering that mixes user input with safe plus permissive sanitizer handling of data urls. This issue has been patched in version 0.14.2."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Antes de la versión 0.14.2, el XSS almacenado sigue siendo posible a través de la renderización insegura de plantillas que mezcla la entrada del usuario con un manejo seguro y permisivo del saneador de las URL de datos. Este problema ha sido parcheado en la versión 0.14.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.2",
            "matchCriteriaId" : "0EDBB1E3-57E4-4560-A44F-7C54FD21C8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/ac21150a53bef3a3061f4da787ab193a8d68ecfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8176",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-vgvf-m4fw-938j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26196",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:04.080",
      "lastModified" : "2026-03-05T22:04:11.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Prior to version 0.14.2, gogs api still accepts tokens in url params like token and access_token, which can leak through logs, browser history, and referrers. This issue has been patched in version 0.14.2."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Antes de la versión 0.14.2, la API de Gogs aún aceptaba tokens en parámetros de URL como 'token' y 'access_token', los cuales pueden filtrarse a través de registros, el historial del navegador y referentes. Este problema ha sido parcheado en la versión 0.14.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.2",
            "matchCriteriaId" : "0EDBB1E3-57E4-4560-A44F-7C54FD21C8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/commit/295bfba72993c372e7b338438947d8e1a6bed8fd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gogs/gogs/pull/8177",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-x9p5-w45c-7ffc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26276",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:04.373",
      "lastModified" : "2026-03-05T22:00:00.810",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payload in a repository’s Milestone name, and when another user selects that Milestone on the New Issue page (/issues/new), a DOM-Based XSS is triggered. This issue has been patched in version 0.14.2."
      }, {
        "lang" : "es",
        "value" : "Gogs es un servicio Git autoalojado de código abierto. Antes de la versión 0.14.2, un atacante puede almacenar una carga útil HTML/JavaScript en el nombre de un Hito de repositorio, y cuando otro usuario selecciona ese Hito en la página de Nueva Incidencia (/issues/new), se activa un XSS basado en DOM. Este problema ha sido parcheado en la versión 0.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.2",
            "matchCriteriaId" : "0EDBB1E3-57E4-4560-A44F-7C54FD21C8B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gogs/gogs/pull/8178",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gogs/gogs/releases/tag/v0.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gogs/gogs/security/advisories/GHSA-vgjm-2cpf-4g7c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-05T19:16:04.560",
      "lastModified" : "2026-03-10T19:00:58.777",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autorización en Tata Consultancy Services Cognix Recon Client v3.0 permite a usuarios autenticados escalar privilegios a través de los límites de roles mediante solicitudes manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcs:cognix_platform:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E24A7D-397D-4E75-A986-D497380E092C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aksalsalimi/CVE-2026-26416",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aksalsalimi/cognix-recon-client-security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-05T19:16:04.680",
      "lastModified" : "2026-03-10T18:49:41.163",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso roto en la funcionalidad de restablecimiento de contraseña de Tata Consultancy Services Cognix Recon Cliente v3.0 permite a usuarios autenticados restablecer contraseñas de cuentas de usuario arbitrarias a través de solicitudes manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcs:cognix_platform:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E24A7D-397D-4E75-A986-D497380E092C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aksalsalimi/CVE-2026-26417",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aksalsalimi/cognix-recon-client-security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-05T19:16:04.800",
      "lastModified" : "2026-03-10T18:33:53.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network."
      }, {
        "lang" : "es",
        "value" : "Falta de autenticación y autorización en la API web de Tata Consultancy Services Cognix Recon Client v3.0 permite a atacantes remotos acceder a la funcionalidad de la aplicación sin restricciones a través de la red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcs:cognix_platform:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E24A7D-397D-4E75-A986-D497380E092C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aksalsalimi/CVE-2026-26418",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aksalsalimi/cognix-recon-client-security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tcs.com/what-we-do/services/cognitive-business-operations/solution/cognix-platform-business-agility-enhanced-cx",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26998",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:05.140",
      "lastModified" : "2026-03-06T15:27:01.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing the ForwardAuth middleware responses. When Traefik is configured to use the ForwardAuth middleware, the response body from the authentication server is read entirely into memory without any size limit. There is no maxResponseBodySize configuration to restrict the amount of data read from the authentication server response. If the authentication server returns an unexpectedly large or unbounded response body, Traefik will allocate unlimited memory, potentially causing an out-of-memory (OOM) condition that crashes the process. This results in a denial of service for all routes served by the affected Traefik instance. This issue has been patched in versions 2.11.38 and 3.6.9."
      }, {
        "lang" : "es",
        "value" : "Traefik es un proxy inverso HTTP y un balanceador de carga. Antes de las versiones 2.11.38 y 3.6.9, existe una posible vulnerabilidad en Traefik al gestionar las respuestas del middleware ForwardAuth. Cuando Traefik está configurado para usar el middleware ForwardAuth, el cuerpo de la respuesta del servidor de autenticación se lee completamente en la memoria sin ningún límite de tamaño. No existe una configuración maxResponseBodySize para restringir la cantidad de datos leídos de la respuesta del servidor de autenticación. Si el servidor de autenticación devuelve un cuerpo de respuesta inesperadamente grande o ilimitado, Traefik asignará memoria ilimitada, lo que podría causar una condición de falta de memoria (OOM) que bloquee el proceso. Esto resulta en una denegación de servicio para todas las rutas servidas por la instancia de Traefik afectada. Este problema ha sido parcheado en las versiones 2.11.38 y 3.6.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.38",
            "matchCriteriaId" : "2F729E45-F8B4-4A50-A2BE-C52CFFEB888D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.6.9",
            "matchCriteriaId" : "AFEBE8EC-89F8-415A-8BB4-209F070117B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.11.38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v3.6.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-fw45-f5q2-2p4x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26999",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:05.323",
      "lastModified" : "2026-03-06T15:27:05.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared before the TLS handshake is completed. When a TLS handshake read error occurs, the code attempts a second handshake with different connection parameters, silently ignoring the initial error. A remote unauthenticated client can exploit this by sending an incomplete TLS record and stopping further data transmission, causing the TLS handshake to stall indefinitely and holding connections open. By opening many such stalled connections in parallel, an attacker can exhaust file descriptors and goroutines, degrading availability of all services on the affected entrypoint. This issue has been patched in versions 2.11.38 and 3.6.9."
      }, {
        "lang" : "es",
        "value" : "Traefik es un proxy inverso HTTP y balanceador de carga. Antes de las versiones 2.11.38 y 3.6.9, existe una potencial vulnerabilidad en Traefik al gestionar el handshake TLS en routers TCP. Cuando Traefik procesa una conexión TLS en un router TCP, el plazo de lectura utilizado para limitar el sniffing del protocolo se borra antes de que se complete el handshake TLS. Cuando ocurre un error de lectura en el handshake TLS, el código intenta un segundo handshake con diferentes parámetros de conexión, ignorando silenciosamente el error inicial. Un cliente remoto no autenticado puede explotar esto enviando un registro TLS incompleto y deteniendo la transmisión de datos posterior, lo que hace que el handshake TLS se detenga indefinidamente y mantenga las conexiones abiertas. Al abrir muchas de estas conexiones estancadas en paralelo, un atacante puede agotar los descriptores de archivo y las goroutines, degradando la disponibilidad de todos los servicios en el punto de entrada afectado. Este problema ha sido parcheado en las versiones 2.11.38 y 3.6.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.38",
            "matchCriteriaId" : "2F729E45-F8B4-4A50-A2BE-C52CFFEB888D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.6.9",
            "matchCriteriaId" : "AFEBE8EC-89F8-415A-8BB4-209F070117B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.11.38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v3.6.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-xw98-5q62-jx94",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27023",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:05.493",
      "lastModified" : "2026-03-10T18:25:40.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but did not validate redirect targets. An authenticated user who could control outbound request URLs (e.g., webhook endpoints, image URLs) could bypass private IP blocking by redirecting through an attacker-controlled server. This issue has been patched in version 1.18."
      }, {
        "lang" : "es",
        "value" : "Twenty es un CRM de código abierto. Antes de la versión 1.18, la protección SSRF en SecureHttpClientService validaba las URL de solicitud a nivel de solicitud, pero no validaba los objetivos de redirección. Un usuario autenticado que podía controlar las URL de solicitud salientes (por ejemplo, puntos finales de webhook, URL de imagen) podía eludir el bloqueo de IP privadas redirigiendo a través de un servidor controlado por un atacante. Este problema ha sido parcheado en la versión 1.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twenty:twenty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.0",
            "matchCriteriaId" : "C6AA9729-A93E-415A-90FF-A7947F843544"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/twentyhq/twenty/releases/tag/v1.18.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/twentyhq/twenty/security/advisories/GHSA-wm7q-rvq3-x8q9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27723",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:05.660",
      "lastModified" : "2026-03-10T18:21:31.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2."
      }, {
        "lang" : "es",
        "value" : "OpenProject es un software de gestión de proyectos de código abierto basado en la web. Antes de las versiones 17.0.5 y 17.1.2, un atacante puede crear páginas wiki pertenecientes a proyectos no autorizados a través de una solicitud con autenticación incorrecta. Este problema ha sido parcheado en las versiones 17.0.5 y 17.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.5",
            "matchCriteriaId" : "9F0A8442-0E13-46ED-8123-1E19A94A47D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1.0",
            "versionEndExcluding" : "17.1.2",
            "matchCriteriaId" : "02E31D6F-C404-4FAC-B21F-E477E2314A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.0.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/releases/tag/v17.1.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/opf/openproject/security/advisories/GHSA-9gc6-3xjq-pwc9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27944",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:05.840",
      "lastModified" : "2026-03-10T18:11:27.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and discloses the encryption keys required to decrypt the backup in the X-Backup-Security response header. This allows an unauthenticated attacker to download a full system backup containing sensitive data (user credentials, session tokens, SSL private keys, Nginx configurations) and decrypt it immediately. This issue has been patched in version 2.3.3."
      }, {
        "lang" : "es",
        "value" : "Nginx UI es una interfaz de usuario web para el servidor web Nginx. Antes de la versión 2.3.3, el endpoint /api/backup es accesible sin autenticación y revela las claves de cifrado necesarias para descifrar la copia de seguridad en el encabezado de respuesta X-Backup-Security. Esto permite a un atacante no autenticado descargar una copia de seguridad completa del sistema que contiene datos sensibles (credenciales de usuario, tokens de sesión, claves privadas SSL, configuraciones de Nginx) y descifrarla inmediatamente. Este problema ha sido parcheado en la versión 2.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nginxui:nginx_ui:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "AA731011-DD7D-446C-99D7-120A6EBDD668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28209",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:14.560",
      "lastModified" : "2026-03-06T18:45:06.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5."
      }, {
        "lang" : "es",
        "value" : "FreePBX es una PBX IP de código abierto. Desde las versiones 16.0.17.2 hasta antes de la 16.0.20 y desde la versión 17.0.2.4 hasta antes de la 17.0.5, existe una vulnerabilidad de inyección de comandos en FreePBX al usar el motor de texto a voz (TTS) de ElevenLabs en el módulo de grabaciones. Este problema ha sido parcheado en las versiones 16.0.20 y 17.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.17.2",
            "versionEndExcluding" : "16.0.20",
            "matchCriteriaId" : "591ED4D2-563D-473C-9ABE-4B186BB1BDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.2.4",
            "versionEndExcluding" : "17.0.5",
            "matchCriteriaId" : "D6ADC9A7-6CF7-4522-9730-4A1AFDA10984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28210",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:14.713",
      "lastModified" : "2026-03-06T18:41:03.417",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreePBX is an open source IP PBX. Prior to versions 16.0.49 and 17.0.7, FreePBX module cdr (Call Data Record) is vulnerable to SQL query injection. This issue has been patched in versions 16.0.49 and 17.0.7."
      }, {
        "lang" : "es",
        "value" : "FreePBX es una IP PBX de código abierto. Antes de las versiones 16.0.49 y 17.0.7, el módulo cdr (Registro de Datos de Llamada) de FreePBX es vulnerable a la inyección de consultas SQL. Este problema ha sido parcheado en las versiones 16.0.49 y 17.0.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.0.49",
            "matchCriteriaId" : "CF8E0AA5-491B-46F4-93E1-662865647A66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.7",
            "matchCriteriaId" : "683B9ECF-40AF-4DA2-9938-DEC0597DFA3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-59gp-632h-c54v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28284",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:14.867",
      "lastModified" : "2026-03-06T18:32:58.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has been patched in versions 16.0.10 and 17.0.5."
      }, {
        "lang" : "es",
        "value" : "FreePBX es una PBX IP de código abierto. Antes de las versiones 16.0.10 y 17.0.5, el módulo de archivos de registro de FreePBX contiene varias vulnerabilidades de inyección SQL autenticadas. Este problema ha sido parcheado en las versiones 16.0.10 y 17.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.0.10",
            "matchCriteriaId" : "78DC3E65-C6BC-4F6B-AC45-AA6F4B1C13D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.5",
            "matchCriteriaId" : "ADED51B0-38B0-44A5-9116-A07EA67CA59A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28287",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:15.013",
      "lastModified" : "2026-03-06T17:55:42.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, multiple command injection vulnerabilities exist in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5."
      }, {
        "lang" : "es",
        "value" : "FreePBX es una PBX IP de código abierto. Desde las versiones 16.0.17.2 hasta antes de la 16.0.20 y desde la versión 17.0.2.4 hasta antes de la 17.0.5, existen múltiples vulnerabilidades de inyección de comandos en el módulo de grabaciones. Este problema ha sido parcheado en las versiones 16.0.20 y 17.0.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.17.2",
            "versionEndExcluding" : "16.0.20",
            "matchCriteriaId" : "591ED4D2-563D-473C-9ABE-4B186BB1BDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.2.4",
            "versionEndExcluding" : "17.0.5",
            "matchCriteriaId" : "D6ADC9A7-6CF7-4522-9730-4A1AFDA10984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-9vv6-h8v6-rp4q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29054",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T19:16:15.277",
      "lastModified" : "2026-03-06T15:26:20.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik is an HTTP reverse proxy and load balancer. From version 2.11.9 to 2.11.37 and from version 3.1.3 to 3.6.8, there is a potential vulnerability in Traefik managing the Connection header with X-Forwarded headers. When Traefik processes HTTP/1.1 requests, the protection put in place to prevent the removal of Traefik-managed X-Forwarded headers (such as X-Real-Ip, X-Forwarded-Host, X-Forwarded-Port, etc.) via the Connection header does not handle case sensitivity correctly. The Connection tokens are compared case-sensitively against the protected header names, but the actual header deletion operates case-insensitively. As a result, a remote unauthenticated client can use lowercase Connection tokens (e.g. Connection: x-real-ip) to bypass the protection and trigger the removal of Traefik-managed forwarded identity headers. This issue has been patched in versions 2.11.38 and 3.6.9."
      }, {
        "lang" : "es",
        "value" : "Traefik es un proxy inverso HTTP y un equilibrador de carga. Desde la versión 2.11.9 hasta la 2.11.37 y desde la versión 3.1.3 hasta la 3.6.8, existe una potencial vulnerabilidad en Traefik al gestionar el encabezado Connection con los encabezados X-Forwarded. Cuando Traefik procesa solicitudes HTTP/1.1, la protección implementada para evitar la eliminación de los encabezados X-Forwarded gestionados por Traefik (como X-Real-Ip, X-Forwarded-Host, X-Forwarded-Port, etc.) a través del encabezado Connection no maneja correctamente la distinción entre mayúsculas y minúsculas. Los tokens de Connection se comparan con distinción entre mayúsculas y minúsculas con los nombres de los encabezados protegidos, pero la eliminación real del encabezado opera sin distinción entre mayúsculas y minúsculas. Como resultado, un cliente remoto no autenticado puede usar tokens de Connection en minúsculas (p. ej., Connection: x-real-ip) para eludir la protección y activar la eliminación de los encabezados de identidad reenviados gestionados por Traefik. Este problema ha sido parcheado en las versiones 2.11.38 y 3.6.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.11.9",
            "versionEndExcluding" : "2.11.38",
            "matchCriteriaId" : "BBEECE25-1AC0-4A93-8CA9-3C1AEBF85E86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.3",
            "versionEndExcluding" : "3.6.9",
            "matchCriteriaId" : "07558342-0979-427E-A153-610F1B378CD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.11.38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v3.6.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-92mv-8f8w-wq52",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3009",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-03-05T19:16:18.193",
      "lastModified" : "2026-03-24T12:16:12.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by an administrator. An attacker who knows the IdP alias can reuse a previously generated login request to bypass the administrative restriction. This undermines access control enforcement and may allow unauthorized authentication through a disabled external provider."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad en el endpoint IdentityBrokerService.performLogin de Keycloak permite que la autenticación proceda usando un Proveedor de Identidad (IdP) incluso después de haber sido deshabilitado por un administrador. Un atacante que conoce el alias del IdP puede reutilizar una solicitud de inicio de sesión generada previamente para eludir la restricción administrativa. Esto socava la aplicación del control de acceso y puede permitir la autenticación no autorizada a través de un proveedor externo deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:-:*:*:*:text-only:*:*:*",
            "matchCriteriaId" : "1830E455-7E11-4264-862D-05971A42D4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8F3485-92CB-4F23-A35A-AAA444FDF39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:26.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A55A00-BD52-4198-B43A-62919C272AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01FBC63E-BB92-49FF-AA00-BF0FCC17732A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A24CBFB-4900-47A5-88D2-A44C929603DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-3009",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2441867",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3047",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2026-03-05T19:16:18.383",
      "lastModified" : "2026-03-26T14:20:02.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing target, it can still complete the login process and establish a Single Sign-On (SSO) session. This allows a remote attacker to gain unauthorized access to other enabled clients without re-authentication, effectively bypassing security restrictions."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en org.keycloak.broker.saml. Cuando un cliente de Security Assertion Markup Language (SAML) deshabilitado se configura como un objetivo de aterrizaje de intermediario iniciado por un Proveedor de Identidad (IdP), aún puede completar el proceso de inicio de sesión y establecer una sesión de Single Sign-On (SSO). Esto permite a un atacante remoto obtener acceso no autorizado a otros clientes habilitados sin re-autenticación, eludiendo eficazmente las restricciones de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert@redhat.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:-:*:*:*:text-only:*:*:*",
            "matchCriteriaId" : "1830E455-7E11-4264-862D-05971A42D4A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:26.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB531B3-5BD6-41B4-882C-A42F611819B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:26.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56732D81-7096-40F3-A990-1C84E2D984F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:26.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8F3485-92CB-4F23-A35A-AAA444FDF39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_keycloak:26.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A55A00-BD52-4198-B43A-62919C272AA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0DE4E1-5D8D-40F3-8AC8-C7F736966158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3925",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3947",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/errata/RHSA-2026:3948",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2026-3047",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2441966",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3459",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T19:16:19.087",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Drag and Drop Multiple File Upload - Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'dnd_upload_cf7_upload' function in versions up to, and including, 1.3.7.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This can be exploited if the form includes a multiple file upload field with ‘*’ as the accepted file type."
      }, {
        "lang" : "es",
        "value" : "El plugin Drag and Drop Multiple File Upload - Contact Form 7 para WordPress es vulnerable a la carga arbitraria de archivos debido a una validación insuficiente del tipo de archivo en la función dnd_upload_cf7_upload en versiones hasta la 1.3.7.3, inclusive. Esto hace posible que atacantes no autenticados carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede posibilitar la ejecución remota de código. Esto puede ser explotado si el formulario incluye un campo de carga de múltiples archivos con '*' como tipo de archivo aceptado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/tags/1.3.9.5/inc/dnd-upload-cf7.php#L1146",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/tags/1.3.9.5/inc/dnd-upload-cf7.php#L886",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3475121/drag-and-drop-multiple-file-upload-contact-form-7",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3205670c-5c3c-48c3-a34a-6f9c25668258?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21621",
      "sourceIdentifier" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "published" : "2026-03-05T20:16:12.617",
      "lastModified" : "2026-04-06T17:17:07.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows Privilege Escalation.\n\nAn API key created with read-only permissions (domain: \"api\", resource: \"read\") can be escalated to full write access under specific conditions.\n\nWhen exchanging a read-only API key via the OAuth client_credentials grant, the resource qualifier is ignored. The resulting JWT receives the broad \"api\" scope instead of the expected \"api:read\" scope. This token is therefore treated as having full API access.\n\nIf an attacker is able to obtain a victim's read-only API key and a valid 2FA (TOTP) code for the victim account, they can use the incorrectly scoped JWT to create a new full-access API key with unrestricted API permissions that does not expire by default and can perform write operations such as publishing, retiring, or modifying packages.\n\nThis vulnerability is associated with program files lib/hexpm_web/controllers/api/oauth_controller.ex and program routines 'Elixir.HexpmWeb.API.OAuthController':validate_scopes_against_key/2.\n\nThis issue affects hexpm: from 71829cb6f6559bcceb1ef4e43a2fb8cdd3af654b before 71c127afebb7ed7cc637eb231b98feb802d62999."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización incorrecta en hexpm hexpm/hexpm (módulo 'Elixir.HexpmWeb.API.OAuthController') permite la escalada de privilegios.\n\nUna clave API creada con permisos de solo lectura (dominio: \"api\", recurso: \"read\") puede ser escalada a acceso completo de escritura bajo condiciones específicas.\n\nAl intercambiar una clave API de solo lectura a través de la concesión OAuth client_credentials, el calificador de recurso es ignorado. El JWT resultante recibe el ámbito amplio \"api\" en lugar del ámbito esperado \"api:read\". Este token es, por lo tanto, tratado como si tuviera acceso completo a la API.\n\nSi un atacante es capaz de obtener una clave API de solo lectura de una víctima y un código 2FA (TOTP) válido para la cuenta de la víctima, pueden usar el JWT con ámbito incorrecto para crear una nueva clave API de acceso completo con permisos de API ilimitados que no expira por defecto y puede realizar operaciones de escritura como publicar, retirar o modificar paquetes.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/hexpm_web/controllers/api/oauth_controller.ex y las rutinas de programa 'Elixir.HexpmWeb.API.OAuthController':validate_scopes_against_key/2.\n\nEste problema afecta a hexpm: desde 71829cb6f6559bcceb1ef4e43a2fb8cdd3af654b antes de 71c127afebb7ed7cc637eb231b98feb802d62999."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hex:hexpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025-10-17",
            "versionEndExcluding" : "2026-03-05",
            "matchCriteriaId" : "C693BC16-457B-49B1-B9C7-99C1BB65EBC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.erlef.org/cves/CVE-2026-21621.html",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/hexpm/hexpm/commit/71c127afebb7ed7cc637eb231b98feb802d62999",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hexpm/security/advisories/GHSA-739m-8727-j6w3",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://osv.dev/vulnerability/EEF-CVE-2026-21621",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28222",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:15.277",
      "lastModified" : "2026-03-09T20:54:53.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wagtail is an open source content management system built on Django. Prior to versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1, a stored cross-site scripting (XSS) vulnerability exists on rendering TableBlock blocks within a StreamField. A user with access to create or edit pages containing TableBlock StreamField blocks is able to set specially-crafted class attributes on the block which run arbitrary JavaScript code when the page is viewed. When viewed by a user with higher privileges, this could lead to performing actions with that user's credentials. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin, and only affects sites using TableBlock. This issue has been patched in versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1."
      }, {
        "lang" : "es",
        "value" : "Wagtail es un sistema de gestión de contenido de código abierto construido sobre Django. Antes de las versiones 6.3.8, 7.0.6, 7.2.3 y 7.3.1, existe una vulnerabilidad de cross-site scripting (XSS) almacenado al renderizar bloques TableBlock dentro de un StreamField. Un usuario con acceso para crear o editar páginas que contengan bloques TableBlock de StreamField puede establecer atributos de clase especialmente diseñados en el bloque que ejecutan código JavaScript arbitrario cuando se visualiza la página. Cuando es visualizado por un usuario con privilegios más altos, esto podría llevar a realizar acciones con las credenciales de ese usuario. La vulnerabilidad no es explotable por un visitante de sitio ordinario sin acceso al administrador de Wagtail, y solo afecta a los sitios que utilizan TableBlock. Este problema ha sido parcheado en las versiones 6.3.8, 7.0.6, 7.2.3 y 7.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.8",
            "matchCriteriaId" : "F649E022-3713-4AF4-864F-D19BC4DE9480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "BC322B0E-ECBA-42DB-B913-1E284B94E77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.2.3",
            "matchCriteriaId" : "5AFA62D9-1805-4F6F-B903-A819AB6A8D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:7.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "30656B21-90B6-4B64-90F7-F4D1768E99DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:7.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "85851799-940D-4D01-98DA-15ECF3E8B151"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wagtail/wagtail/commit/0375094bb57ce6e527005c2bb2e871dd20bca04d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/4620423cb22c5253391a0f04178089c1162f6e2e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/575c0d7c18c7716ed73f7a3c2720ad75956f0a85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/605a5569686565e035313222e1bc2f9802fbc55b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v6.3.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v7.0.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v7.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v7.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-p5cm-246w-84jm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28223",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:15.493",
      "lastModified" : "2026-03-09T20:54:40.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wagtail is an open source content management system built on Django. Prior to versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1, a stored cross-site scripting (XSS) vulnerability exists on confirmation messages within the wagtail.contrib.simple_translation module. A user with access to the Wagtail admin area may create a page with a specially-crafted title which, when another user performs the \"Translate\" action, causes arbitrary JavaScript code to run. This could lead to performing actions with that user's credentials. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This issue has been patched in versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1."
      }, {
        "lang" : "es",
        "value" : "Wagtail es un sistema de gestión de contenido de código abierto construido sobre Django. Antes de las versiones 6.3.8, 7.0.6, 7.2.3 y 7.3.1, existe una vulnerabilidad de cross-site scripting (XSS) almacenado en los mensajes de confirmación dentro del módulo wagtail.contrib.simple_translation. Un usuario con acceso al área de administración de Wagtail puede crear una página con un título especialmente diseñado que, cuando otro usuario realiza la acción 'Translate', hace que se ejecute código JavaScript arbitrario. Esto podría llevar a realizar acciones con las credenciales de ese usuario. La vulnerabilidad no es explotable por un visitante de sitio ordinario sin acceso al administrador de Wagtail. Este problema ha sido parcheado en las versiones 6.3.8, 7.0.6, 7.2.3 y 7.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.8",
            "matchCriteriaId" : "F649E022-3713-4AF4-864F-D19BC4DE9480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "BC322B0E-ECBA-42DB-B913-1E284B94E77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1",
            "versionEndExcluding" : "7.2.3",
            "matchCriteriaId" : "5AFA62D9-1805-4F6F-B903-A819AB6A8D45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:7.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "30656B21-90B6-4B64-90F7-F4D1768E99DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:7.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "85851799-940D-4D01-98DA-15ECF3E8B151"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wagtail/wagtail/commit/1c6f2effed68f4ccad6fbd07987e03641505f863",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/ba70244d376a7b1bd180ded03e827917ff410c19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/d8c5900982df8ed5938ad993aa9ff69cda50f80c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/ee39d39deeb7f250fe886417b24802d7e05b1143",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v6.3.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v7.0.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v7.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v7.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-p4v8-rw59-93cq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28277",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:15.677",
      "lastModified" : "2026-04-21T15:14:55.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public."
      }, {
        "lang" : "es",
        "value" : "LangGraph SQLite Checkpoint es una implementación de LangGraph CheckpointSaver que utiliza una base de datos SQLite (tanto síncrona como asíncrona, a través de aiosqlite). En la versión 1.0.9 y anteriores, los checkpointers de LangGraph pueden cargar checkpoints codificados en msgpack que reconstruyen objetos Python durante la deserialización. Si un atacante puede modificar los datos del checkpoint en el almacén de respaldo (por ejemplo, después de un compromiso de la base de datos u otro acceso de escritura privilegiado a la capa de persistencia), pueden suministrar potencialmente una carga útil manipulada que desencadene una reconstrucción insegura de objetos cuando se carga el checkpoint. No se conoce ningún parche público."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langchain:langgraph:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "03EAA519-9C97-43CB-814B-DDDA61441C87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langchain-ai/langgraph/security/advisories/GHSA-g48c-2wqr-h844",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28342",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:15.837",
      "lastModified" : "2026-03-10T15:43:24.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.2, the PasswordHash API endpoint allows unauthenticated users to trigger excessive memory allocation by sending concurrent password hashing requests. By issuing multiple parallel requests, an attacker can exhaust available container memory, leading to service degradation or complete denial of service (DoS). The issue occurs because the endpoint performs computationally and memory-intensive hashing operations without request throttling, authentication requirements, or resource limits. This issue has been patched in version 3000.10.2."
      }, {
        "lang" : "es",
        "value" : "OliveTin da acceso a comandos shell predefinidos desde una interfaz web. Antes de la versión 3000.10.2, el endpoint de la API PasswordHash permite a usuarios no autenticados activar una asignación excesiva de memoria enviando solicitudes concurrentes de hash de contraseñas. Al emitir múltiples solicitudes paralelas, un atacante puede agotar la memoria disponible del contenedor, lo que lleva a la degradación del servicio o a una denegación de servicio (DoS) completa. El problema ocurre porque el endpoint realiza operaciones de hashing computacionalmente y de memoria intensivas sin limitación de solicitudes, requisitos de autenticación o límites de recursos. Este problema ha sido parcheado en la versión 3000.10.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3000.10.2",
            "matchCriteriaId" : "899D9A60-A4C1-48DE-968A-1E146C461C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/2eb5f0ba79d4bbef3c802bf8b4666a7e18dcfd90",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/releases/tag/3000.10.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-pc8g-78pf-4xrp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-pc8g-78pf-4xrp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28343",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:16.017",
      "lastModified" : "2026-03-19T19:16:20.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a cross-site scripting (XSS) vulnerability has been discovered in the General HTML Support feature. This vulnerability could be triggered by inserting specially crafted markup, leading to unauthorized JavaScript code execution, if the editor instance used an unsafe General HTML Support configuration. This issue has been patched in version 47.6.0."
      }, {
        "lang" : "es",
        "value" : "CKEditor 5 es un editor de texto enriquecido moderno de JavaScript con una arquitectura MVC. Antes de la versión 47.6.0, se ha descubierto una vulnerabilidad de cross-site scripting (XSS) en la función de Soporte HTML General. Esta vulnerabilidad podría activarse mediante la inserción de marcado especialmente diseñado, lo que llevaría a la ejecución no autorizada de código JavaScript, si la instancia del editor utilizaba una configuración insegura de Soporte HTML General. Este problema se ha corregido en la versión 47.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "47.6.0",
            "matchCriteriaId" : "A6ADE9D9-13BD-491C-8B46-0A3D45582F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ckeditor/ckeditor5/releases/tag/v29.0.0",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/ckeditor/ckeditor5/releases/tag/v47.6.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-jrqm-vmqc-gm93",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28348",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:16.180",
      "lastModified" : "2026-03-09T20:55:16.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the _has_sneaky_javascript() method strips backslashes before checking for dangerous CSS keywords. This causes CSS Unicode escape sequences to bypass the @import and expression() filters, allowing external CSS loading or XSS in older browsers. This issue has been patched in version 0.4.4."
      }, {
        "lang" : "es",
        "value" : "lxml_html_clean es un proyecto para funcionalidades de limpieza de HTML copiado de 'lxml.html.clean'. Antes de la versión 0.4.4, el método _has_sneaky_javascript() elimina las barras invertidas antes de verificar palabras clave CSS peligrosas. Esto provoca que las secuencias de escape Unicode de CSS omitan los filtros @import y expression(), permitiendo la carga externa de CSS o XSS en navegadores antiguos. Este problema ha sido parcheado en la versión 0.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoralovespython:lxml_html_clean:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.4.4",
            "matchCriteriaId" : "A0BBE70C-C635-4143-83FD-87D7D95B37DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fedora-python/lxml_html_clean/commit/2ef732667ddbc74ea59847bcf24b75809aaeed3b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-hw26-mmpg-fqfg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-hw26-mmpg-fqfg",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28350",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:16.333",
      "lastModified" : "2026-03-09T20:55:26.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the <base> tag passes through the default Cleaner configuration. While page_structure=True removes html, head, and title tags, there is no specific handling for <base>, allowing an attacker to inject it and hijack relative links on the page. This issue has been patched in version 0.4.4."
      }, {
        "lang" : "es",
        "value" : "lxml_html_clean es un proyecto para funcionalidades de limpieza de HTML copiadas de 'lxml.html.clean'. Antes de la versión 0.4.4, la etiqueta  pasa a través de la configuración predeterminada de Cleaner. Aunque page_structure=True elimina las etiquetas html, head y title, no hay un manejo específico para , permitiendo a un atacante inyectarla y secuestrar enlaces relativos en la página. Este problema ha sido parcheado en la versión 0.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoralovespython:lxml_html_clean:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.4.4",
            "matchCriteriaId" : "A0BBE70C-C635-4143-83FD-87D7D95B37DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fedora-python/lxml_html_clean/commit/9c5612ca33b941eec4178abf8a5294b103403f34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-xvp8-3mhv-424c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-xvp8-3mhv-424c",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28353",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:16.493",
      "lastModified" : "2026-04-28T21:11:07.100",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trivy Vulnerability Scanner is a VS Code extension that helps find vulnerabilities. In Trivy VSCode Extension version 1.8.12, which was distributed via OpenVSX marketplace was compromised and contained malicious code designed to leverage local AI coding agent to collect and exfiltrate sensitive information. Users using the affected artifact are advised to immediately remove it and rotate environment secrets. The malicious artifact has been removed from the marketplace. No other affected artifacts have been identified."
      }, {
        "lang" : "es",
        "value" : "Trivy Vulnerability Scanner es una extensión de VS Code que ayuda a encontrar vulnerabilidades. En la versión 1.8.12 de la extensión Trivy VSCode, que fue distribuida a través del marketplace OpenVSX, fue comprometida y contenía código malicioso diseñado para aprovechar un agente de codificación de IA local para recopilar y exfiltrar información sensible. Se aconseja a los usuarios que utilizan el artefacto afectado que lo eliminen inmediatamente y roten los secretos del entorno. El artefacto malicioso ha sido eliminado del marketplace. No se han identificado otros artefactos afectados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aquasecurity/trivy-vscode-extension/security/advisories/GHSA-8mr6-gf9x-j8qg",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28789",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:16.653",
      "lastModified" : "2026-03-10T15:42:11.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerability exists in OliveTin’s OAuth2 login flow. Concurrent requests to /oauth/login can trigger unsynchronized access to a shared registeredStates map, causing a Go runtime panic (fatal error: concurrent map writes) and process termination. This allows remote attackers to crash the service when OAuth2 is enabled. This issue has been patched in version 3000.10.3."
      }, {
        "lang" : "es",
        "value" : "OliveTin proporciona acceso a comandos de shell predefinidos desde una interfaz web. Antes de la versión 3000.10.3, existe una vulnerabilidad de denegación de servicio no autenticada en el flujo de inicio de sesión OAuth2 de OliveTin. Las solicitudes concurrentes a /oauth/login pueden desencadenar un acceso no sincronizado a un mapa registeredStates compartido, causando un pánico en tiempo de ejecución de Go (error fatal: escrituras concurrentes en el mapa) y la terminación del proceso. Esto permite a los atacantes remotos bloquear el servicio cuando OAuth2 está habilitado. Este problema ha sido parcheado en la versión 3000.10.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3000.10.2",
            "matchCriteriaId" : "9B4582D9-169E-40D5-8E85-A2C591F413A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/f044d90d5525c4c8e3f421b32ed7eff771c22d36",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-45m3-398w-m2m9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-45m3-398w-m2m9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28790",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T20:16:16.820",
      "lastModified" : "2026-03-10T15:29:58.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0."
      }, {
        "lang" : "es",
        "value" : "OliveTin da acceso a comandos de shell predefinidos desde una interfaz web. Antes de la versión 3000.11.0, OliveTin permite a un invitado no autenticado terminar acciones en ejecución a través de KillAction incluso cuando authRequireGuestsToLogin: true está habilitado. Los invitados son bloqueados correctamente del acceso al panel de control, pero aún pueden llamar al RPC de KillAction directamente y detener con éxito una acción en ejecución. Esto es un problema de control de acceso roto que causa denegación de servicio no autorizada contra ejecuciones de acciones legítimas. Este problema ha sido parcheado en la versión 3000.11.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3000.11.0",
            "matchCriteriaId" : "AA9FC7F5-7327-4784-A1FF-10E968680C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/d9804182eae43cf49f735e6533ddbe1541c2b9a9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/releases/tag/3000.11.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-4fqm-6fmh-82mq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-4fqm-6fmh-82mq",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0848",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2026-03-05T21:16:14.263",
      "lastModified" : "2026-04-21T14:56:46.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of arbitrary Java bytecode at import time. This vulnerability can be exploited through methods such as model poisoning, MITM attacks, or dependency poisoning, leading to remote code execution. The issue arises from the direct execution of the JAR file via subprocess with unvalidated classpath input, allowing malicious classes to execute when loaded by the JVM."
      }, {
        "lang" : "es",
        "value" : "Las versiones de NLTK &lt;=3.9.2 son vulnerables a ejecución de código arbitrario debido a una validación de entrada inadecuada en el módulo StanfordSegmenter. El módulo carga dinámicamente archivos .jar de Java externos sin verificación ni sandboxing. Un atacante puede suministrar o reemplazar el archivo JAR, permitiendo la ejecución de bytecode Java arbitrario en el momento de la importación. Esta vulnerabilidad puede ser explotada a través de métodos como el envenenamiento de modelos, ataques MitM o el envenenamiento de dependencias, lo que lleva a ejecución remota de código. El problema surge de la ejecución directa del archivo JAR a través de un subproceso con entrada de classpath no validada, permitiendo que clases maliciosas se ejecuten cuando son cargadas por la JVM."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nltk:nltk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.2",
            "matchCriteriaId" : "D07FBCBF-3A88-4B1B-AF47-76DF3B7B13B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://huntr.com/bounties/08b109bb-ac24-403f-9422-1c246ce60202",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.com/bounties/08b109bb-ac24-403f-9422-1c246ce60202",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22723",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2026-03-05T21:16:14.610",
      "lastModified" : "2026-03-17T18:35:29.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0."
      }, {
        "lang" : "es",
        "value" : "Revocación inapropiada de tokens de usuario debido a un error de lógica en la implementación del endpoint de revocación de tokens en Cloudfoundry UAA v77.30.0 a v78.7.0 y en Cloudfoundry Deployment v48.7.0 a v54.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vmware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "48.7.0",
            "versionEndIncluding" : "54.11.0",
            "matchCriteriaId" : "C829FC80-C988-46CB-BD70-D6EBAA93705A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:uaa-release:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "77.30.0",
            "versionEndExcluding" : "78.8.0",
            "matchCriteriaId" : "E19811F2-0608-4471-A951-2A51A8B8974D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/blog/cve-2026-22723-uaa-user-token-revocation/",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28405",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:21.707",
      "lastModified" : "2026-03-10T19:53:01.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content route reads the contents of a student-submitted file and renders them without sanitization. This issue has been patched in version 2.9.1."
      }, {
        "lang" : "es",
        "value" : "MarkUs es una aplicación web para la entrega y calificación de tareas de estudiantes. Antes de la versión 2.9.1, la ruta courses/&lt;:course_id&gt;/assignments/&lt;:assignment_id&gt;/submissions/html_content lee el contenido de un archivo enviado por un estudiante y los renderiza sin sanitización. Este problema ha sido parcheado en la versión 2.9.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markusproject:markus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.1",
            "matchCriteriaId" : "2D6B2B7B-F46C-4CEE-86D4-B25D3746747A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MarkUsProject/Markus/commit/55d74f2ddb72d2ec2f29aa2b4cb6b2da10755036",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/releases/tag/v2.9.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/security/advisories/GHSA-p5pc-pxrj-3893",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28410",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:21.873",
      "lastModified" : "2026-03-10T16:54:26.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Graph is an indexing protocol for querying networks like Ethereum, IPFS, Polygon, and other blockchains. Prior to version 3.0.0, a flaw in the token vesting contracts allows users to access tokens that should still be locked according to their vesting schedule. This issue has been patched in version 3.0.0."
      }, {
        "lang" : "es",
        "value" : "The Graph es un protocolo de indexación para consultar redes como Ethereum, IPFS, Polygon y otras blockchains. Antes de la versión 3.0.0, una falla en los contratos de adquisición de tokens permite a los usuarios acceder a tokens que deberían seguir bloqueados según su cronograma de adquisición de derechos. Este problema ha sido parcheado en la versión 3.0.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thegraph:graph_protocol_contracts:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "E29EDF2F-7E8C-4363-A937-3A040088B08B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/graphprotocol/contracts/commit/91224ed83eeff3fc3afea01f5ed269373d9bf773",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/graphprotocol/contracts/security/advisories/GHSA-qx35-rc5x-x39r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28413",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.023",
      "lastModified" : "2026-03-17T18:32:49.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?came_from=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0."
      }, {
        "lang" : "es",
        "value" : "Products.isurlinportal es un reemplazo para el método isURLInPortal en Plone. Antes de las versiones 2.1.0, 3.1.0 y 4.0.0, una URL /login?came_from=////evil.example podría redirigir a un sitio web externo después de iniciar sesión. Este problema ha sido parcheado en las versiones 2.1.0, 3.1.0 y 4.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:isurlinportal:*:*:*:*:*:plone:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "CB86276A-A2CA-4A1D-A561-337BA47C174E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:isurlinportal:*:*:*:*:*:plone:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "E6E0342A-84FD-4EC8-A53B-300EF35929D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:isurlinportal:4.0.0:alpha1:*:*:*:plone:*:*",
            "matchCriteriaId" : "BE50DFD7-6F25-43CC-BC56-1EE047E39FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/plone/Products.isurlinportal/security/advisories/GHSA-43gx-6gv6-3jcp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28436",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.180",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe is a full-stack web application framework. Prior to versions 16.11.0 and 15.102.0, an attacker can set a crafted image URL that results in XSS when the avatar is displayed, and it can be triggered for other users via website page comments. This issue has been patched in versions 16.11.0 and 15.102.0."
      }, {
        "lang" : "es",
        "value" : "Frappe es un framework de aplicación web full-stack. Antes de las versiones 16.11.0 y 15.102.0, un atacante puede establecer una URL de imagen manipulada que resulta en XSS cuando se muestra el avatar, y puede ser activado para otros usuarios a través de comentarios de páginas web. Este problema ha sido parcheado en las versiones 16.11.0 y 15.102.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.102.0",
            "matchCriteriaId" : "B23BC56A-5135-4189-88C0-6BB88EA07E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.11.0",
            "matchCriteriaId" : "6800A8AA-7AE0-40E5-9F5E-0AB88285C0CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/frappe/security/advisories/GHSA-vm63-r48g-7wqh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28442",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.327",
      "lastModified" : "2026-03-12T13:07:49.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, users are restricted from deleting internal system files or folders through the application interface. However, when interacting directly with the API, these restrictions can be bypassed. By altering the path parameter in the delete request, internal OS files and directories can be removed successfully. The backend processes these manipulated requests without validating whether the targeted path belongs to restricted system locations. This demonstrates improper input validation and broken access control on sensitive filesystem operations. No known public patch is available."
      }, {
        "lang" : "es",
        "value" : "ZimaOS es un fork de CasaOS, un sistema operativo para dispositivos Zima y sistemas x86-64 con UEFI. En la versión 1.5.2-beta3, los usuarios tienen restringido eliminar archivos o carpetas internos del sistema a través de la interfaz de la aplicación. Sin embargo, al interactuar directamente con la API, estas restricciones pueden ser eludidas. Al alterar el parámetro de ruta en la solicitud de eliminación, los archivos y directorios internos del sistema operativo pueden ser eliminados con éxito. El backend procesa estas solicitudes manipuladas sin validar si la ruta objetivo pertenece a ubicaciones restringidas del sistema. Esto demuestra una validación de entrada incorrecta y un control de acceso roto en operaciones sensibles del sistema de archivos. No hay ningún parche público conocido disponible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zimaspace:zimaos:1.5.2:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "2DB5C60C-7888-4BE5-9FB2-AD34BFB45CAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-q5hp-59wm-9xq3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-q5hp-59wm-9xq3",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28443",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.483",
      "lastModified" : "2026-03-17T15:45:31.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /{projectId}/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0."
      }, {
        "lang" : "es",
        "value" : "OpenReplay es una suite de reproducción de sesiones autoalojada. Antes de la versión 1.20.0, el endpoint POST /{projectId}/cards/search tiene una inyección SQL en el parámetro sort.field. Este problema ha sido parcheado en la versión 1.20.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openreplay:openreplay:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20.0",
            "matchCriteriaId" : "CF5C05FB-D193-4C72-92D9-B0C023DF843F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openreplay/openreplay/security/advisories/GHSA-q6gf-3qg3-pww5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.630",
      "lastModified" : "2026-03-10T19:34:55.903",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.0, when a user creates a public share link for a directory, the withHashFile middleware in http/public.go uses filepath.Dir(link.Path) to compute the BasePathFs root. This sets the filesystem root to the parent directory instead of the shared directory itself, allowing anyone with the share link to browse and download files from all sibling directories. This issue has been patched in version 2.61.0."
      }, {
        "lang" : "es",
        "value" : "Navegador de Archivos proporciona una interfaz de gestión de archivos dentro de un directorio especificado y se puede usar para subir, eliminar, previsualizar, renombrar y editar archivos. Antes de la versión 2.61.0, cuando un usuario crea un enlace de compartición público para un directorio, el middleware withHashFile en http/public.go usa filepath.Dir(link.Path) para calcular la raíz BasePathFs. Esto establece la raíz del sistema de archivos en el directorio padre en lugar del propio directorio compartido, permitiendo a cualquiera con el enlace de compartición navegar y descargar archivos de todos los directorios hermanos. Este problema ha sido parcheado en la versión 2.61.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.61.0",
            "matchCriteriaId" : "386E3F0B-FC20-4B4E-9C64-F2B9870D9CD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/filebrowser/filebrowser/commit/31194fb57a5b92e7155219d7ec7273028fcb2e83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/releases/tag/v2.61.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-mr74-928f-rw69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29077",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.790",
      "lastModified" : "2026-03-09T19:04:25.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe is a full-stack web application framework. Prior to versions 15.98.0 and 14.100.0, due to a lack of validation when sharing documents, a user could share a document with a permission that they themselves didn't have. This issue has been patched in versions 15.98.0 and 14.100.0."
      }, {
        "lang" : "es",
        "value" : "Frappe es un framework de aplicación web full-stack. Antes de las versiones 15.98.0 y 14.100.0, debido a una falta de validación al compartir documentos, un usuario podía compartir un documento con un permiso que ellos mismos no tenían. Este problema ha sido parcheado en las versiones 15.98.0 y 14.100.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.100.0",
            "matchCriteriaId" : "99159798-410A-48C5-BFEE-C0B9D005CAF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.98.0",
            "matchCriteriaId" : "EFC828B1-AD37-44DB-80F6-EA1513BDC917"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/frappe/security/advisories/GHSA-5h4c-9p23-4c3m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29081",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:22.947",
      "lastModified" : "2026-03-09T18:44:27.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frappe is a full-stack web application framework. Prior to versions 14.100.1 and 15.100.0, an endpoint was vulnerable to SQL injection through specially crafted requests, which would allow a malicious actor to extract sensitive information. This issue has been patched in versions 14.100.1 and 15.100.0."
      }, {
        "lang" : "es",
        "value" : "Frappe es un framework de aplicación web full-stack. Antes de las versiones 14.100.1 y 15.100.0, un endpoint era vulnerable a inyección SQL a través de solicitudes especialmente diseñadas, lo que permitiría a un actor malicioso extraer información sensible. Este problema ha sido parcheado en las versiones 14.100.1 y 15.100.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.100.1",
            "matchCriteriaId" : "D29871FA-D57A-4071-B42F-3851E949A7EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndIncluding" : "15.100.0",
            "matchCriteriaId" : "61BD0398-8BC6-42D8-A28E-460D741A5285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/frappe/frappe/security/advisories/GHSA-w3g7-m7xr-2w38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29188",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-05T21:16:23.097",
      "lastModified" : "2026-03-10T19:42:36.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.1, a broken access control vulnerability in the TUS protocol DELETE endpoint allows authenticated users with only Create permission to delete arbitrary files and directories within their scope, bypassing the intended Delete permission restriction. Any multi-user deployment where administrators explicitly restrict file deletion for certain users is affected. This issue has been patched in version 2.61.1."
      }, {
        "lang" : "es",
        "value" : "File Browser proporciona una interfaz de gestión de archivos dentro de un directorio especificado y puede utilizarse para subir, eliminar, previsualizar, renombrar y editar archivos. Antes de la versión 2.61.1, una vulnerabilidad de control de acceso roto en el endpoint DELETE del protocolo TUS permite a usuarios autenticados con solo permiso de Creación eliminar archivos y directorios arbitrarios dentro de su alcance, eludiendo la restricción de permiso de Eliminación prevista. Cualquier despliegue multiusuario donde los administradores restringen explícitamente la eliminación de archivos para ciertos usuarios se ve afectado. Este problema ha sido parcheado en la versión 2.61.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.61.1",
            "matchCriteriaId" : "C933E37A-6BEC-42C8-88CC-D8FD69116058"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/filebrowser/filebrowser/commit/7ed1425115be602c2b23236c410098ea2d74b42f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/releases/tag/v2.61.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-79pf-vx4x-7jmm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21622",
      "sourceIdentifier" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "published" : "2026-03-05T22:16:12.963",
      "lastModified" : "2026-04-06T17:17:07.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover.\n\nPassword reset tokens generated via the \"Reset your password\" flow do not expire. When a user requests a password reset, Hex sends an email containing a reset link with a token. This token remains valid indefinitely until used. There is no time-based expiration enforced.\n\nIf a user's historical emails are exposed through a data breach (e.g., a leaked mailbox archive), any unused password reset email contained in that dataset could be used by an attacker to reset the victim's password. The attacker does not need current access to the victim's email account, only access to a previously leaked copy of the reset email.\n\nThis vulnerability is associated with program files lib/hexpm/accounts/password_reset.ex and program routines 'Elixir.Hexpm.Accounts.PasswordReset':can_reset?/3.\n\nThis issue affects hexpm: from 617e44c71f1dd9043870205f371d375c5c4d886d before bb0e42091995945deef10556f58d046a52eb7884."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de expiración de sesión insuficiente en hexpm hexpm/hexpm (módulo 'Elixir.Hexpm.Accounts.PasswordReset') permite la toma de control de cuentas.\n\nLos tokens de restablecimiento de contraseña generados a través del flujo 'Restablecer su contraseña' no expiran. Cuando un usuario solicita un restablecimiento de contraseña, Hex envía un correo electrónico que contiene un enlace de restablecimiento con un token. Este token permanece válido indefinidamente hasta que se usa. No se aplica ninguna expiración basada en el tiempo.\n\nSi los correos electrónicos históricos de un usuario se exponen a través de una violación de datos (por ejemplo, un archivo de buzón de correo filtrado), cualquier correo electrónico de restablecimiento de contraseña no utilizado contenido en ese conjunto de datos podría ser utilizado por un atacante para restablecer la contraseña de la víctima. El atacante no necesita acceso actual a la cuenta de correo electrónico de la víctima, solo acceso a una copia previamente filtrada del correo electrónico de restablecimiento.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/hexpm/accounts/password_reset.ex y las rutinas de programa 'Elixir.Hexpm.Accounts.PasswordReset':can_reset?/3.\n\nEste problema afecta a hexpm: desde 617e44c71f1dd9043870205f371d375c5c4d886d antes de bb0e42091995945deef10556f58d046a52eb7884."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.5,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hex:hexpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2025-10-01",
            "versionEndExcluding" : "2026-03-05",
            "matchCriteriaId" : "E5DC5702-17C0-4603-9900-660221EBDD23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.erlef.org/cves/CVE-2026-21622.html",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      }, {
        "url" : "https://github.com/hexpm/hexpm/commit/bb0e42091995945deef10556f58d046a52eb7884",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hexpm/hexpm/security/advisories/GHSA-6r94-pvwf-mxqm",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://osv.dev/vulnerability/EEF-CVE-2026-21622",
        "source" : "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28391",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:15.360",
      "lastModified" : "2026-03-10T18:18:45.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to bypass command approval restrictions. Remote attackers can craft command strings with shell metacharacters like & or %...% to execute unapproved commands beyond the allowlisted operations."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.2 no validan correctamente los metacaracteres de cmd.exe de Windows en solicitudes de ejecución controladas por una lista de permitidos, lo que permite a los atacantes eludir las restricciones de aprobación de comandos. Los atacantes remotos pueden diseñar cadenas de comandos con metacaracteres de shell como &amp; o %...% para ejecutar comandos no aprobados más allá de las operaciones permitidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/a7f4a53ce80c98ba1452eb90802d447fca9bf3d6",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-qj77-c3c8-9c3q",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-command-injection-via-cmdexe-parsing-bypass-in-allowlist-enforcement",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28392",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:15.567",
      "lastModified" : "2026-03-10T20:10:19.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a privilege escalation vulnerability in the Slack slash-command handler that incorrectly authorizes any direct message sender when dmPolicy is set to open (must be configured). Attackers can execute privileged slash commands via direct message to bypass allowlist and access-group restrictions."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.14 contienen una vulnerabilidad de escalada de privilegios en el gestor de comandos slash de Slack que autoriza incorrectamente a cualquier remitente de mensaje directo cuando dmPolicy está configurado como 'open' (debe configurarse). Los atacantes pueden ejecutar comandos slash privilegiados a través de mensaje directo para eludir las restricciones de lista de permitidos y de grupo de acceso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/f19eabee54c49e9a2e264b4965edf28a2f92e657",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-v773-r54f-q32w",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-in-slack-slash-command-handler-via-direct-messages",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28393",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:15.767",
      "lastModified" : "2026-03-11T05:17:59.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2.0.0-beta3 prior to 2026.2.14 contain a path traversal vulnerability in hook transform module loading that allows arbitrary JavaScript execution. The hooks.mappings[].transform.module parameter accepts absolute paths and traversal sequences, enabling attackers with configuration write access to load and execute malicious modules with gateway process privileges."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw 2.0.0-beta3 anteriores a 2026.2.14 contienen una vulnerabilidad de salto de ruta en la carga del módulo de transformación de hooks que permite la ejecución arbitraria de JavaScript. El parámetro hooks.mappings[].transform.module acepta rutas absolutas y secuencias de salto, lo que permite a los atacantes con acceso de escritura a la configuración cargar y ejecutar módulos maliciosos con privilegios del proceso de la pasarela."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.4",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "123913EF-162E-4F66-87B8-D9F754A875E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:2.0.0:beta3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C93E10F0-42BC-4331-99E2-E7E9E771C39D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:2.0.0:beta4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3F83DA63-346B-436D-AA91-1F8FB11D8733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:2.0.0:beta5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "14BDDBA6-D34E-4244-ABF3-F905BCF2FCA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/18e8bd68c5015a894f999c6d5e6e32468965bfb5",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/a0361b8ba959e8506dc79d638b6e6a00d12887e4",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-7xhj-55q9-pc3m",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-beta-arbitrary-javascript-module-loading-via-hook-transform-path-traversal",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28394",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:15.973",
      "lastModified" : "2026-03-09T20:28:46.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.15 contain a denial of service vulnerability in the web_fetch tool that allows attackers to crash the Gateway process through memory exhaustion by parsing oversized or deeply nested HTML responses. Remote attackers can social-engineer users into fetching malicious URLs with pathological HTML structures to exhaust server memory and cause service unavailability."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.15 contienen una vulnerabilidad de denegación de servicio en la herramienta web_fetch que permite a los atacantes bloquear el proceso Gateway mediante el agotamiento de la memoria al analizar respuestas HTML sobredimensionadas o profundamente anidadas. Los atacantes remotos pueden aplicar ingeniería social a los usuarios para que recuperen URLs maliciosas con estructuras HTML patológicas para agotar la memoria del servidor y causar indisponibilidad del servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "3CD9AC99-DDDF-4177-9253-04A63CA027DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/166cf6a3e04c7df42bea70a7ad5ce2b9df46d147",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-p536-vvpp-9mc8",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-unbounded-response-parsing-in-web-fetch-tool",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28395",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:16.173",
      "lastModified" : "2026-03-09T20:29:20.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw version 2026.1.14-1 prior to 2026.2.12 contain an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server that treats wildcard hosts as loopback addresses, allowing the relay HTTP/WS server to bind to all interfaces when a wildcard cdpUrl is configured. Remote attackers can access relay HTTP endpoints off-host to leak service presence and port information, or conduct denial-of-service and brute-force attacks against the relay token header."
      }, {
        "lang" : "es",
        "value" : "La versión de OpenClaw 2026.1.14-1 anterior a la 2026.2.12 contiene una vulnerabilidad de enlace de red inadecuado en el servidor de retransmisión de la extensión de Chrome (debe estar instalada y habilitada) que trata los hosts comodín como direcciones de bucle invertido, permitiendo que el servidor HTTP/WS de retransmisión se enlace a todas las interfaces cuando se configura una cdpUrl comodín. Los atacantes remotos pueden acceder a los puntos finales HTTP de retransmisión fuera del host para filtrar la presencia del servicio e información del puerto, o realizar ataques de denegación de servicio y de fuerza bruta contra el encabezado del token de retransmisión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.14-1",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "17B47E15-4EE3-4810-A072-1C0C78D32B80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/8d75a496bf5aaab1755c56cf48502d967c75a1d0",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/a1e89afcc19efd641c02b24d66d689f181ae2b5c",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw99-grcx-4pvm",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-unintended-public-binding-of-chrome-extension-relay-via-wildcard-cdpurl",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28446",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:16.390",
      "lastModified" : "2026-03-11T14:16:26.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that accepts empty caller IDs and uses suffix-based matching instead of strict equality. Remote attackers can bypass inbound access controls by placing calls with missing caller IDs or numbers ending with allowlisted digits to reach the voice-call agent and execute tools."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.1 con la extensión de llamada de voz instalada y habilitada contienen una vulnerabilidad de omisión de autenticación en la validación de la política de lista de permitidos de entrada que acepta identificadores de llamadas vacíos y utiliza la coincidencia basada en sufijos en lugar de la igualdad estricta. Los atacantes remotos pueden omitir los controles de acceso de entrada realizando llamadas con identificadores de llamadas faltantes o números que terminan con dígitos en la lista de permitidos para alcanzar al agente de llamada de voz y ejecutar herramientas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-303"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/f8dfd034f5d9235c5485f492a9e4ccc114e97fdb",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-4rj2-gpmh-qq5x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-inbound-allowlist-policy-bypass-in-voice-call-extension-via-empty-caller-id",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28447",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:16.600",
      "lastModified" : "2026-03-10T19:43:11.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.1 contain a path traversal vulnerability in plugin installation that allows malicious plugin package names to escape the extensions directory. Attackers can craft scoped package names containing path traversal sequences like .. to write files outside the intended installation directory when victims run the plugins install command."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw 2026.1.29-beta.1 anteriores a la 2026.2.1 contienen una vulnerabilidad de salto de ruta en la instalación de plugins que permite que nombres de paquetes de plugins maliciosos escapen del directorio de extensiones. Los atacantes pueden crear nombres de paquetes con ámbito que contengan secuencias de salto de ruta como .. para escribir archivos fuera del directorio de instalación previsto cuando las víctimas ejecutan el comando de instalación de plugins."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.29",
            "versionEndExcluding" : "2026.2.1",
            "matchCriteriaId" : "D5891E7A-3FFA-4944-ABBC-816BFD160AED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/d03eca8450dc493b198a88b105fd180895238e57",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-qrq5-wjgg-rvqw",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-beta-path-traversal-in-plugin-installation-via-package-name",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28448",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:16.803",
      "lastModified" : "2026-03-11T16:02:04.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vulnerability in the Twitch plugin (must be installed and enabled) in which it fails to enforce the allowFrom allowlist when allowedRoles is unset or empty, allowing unauthorized Twitch users to trigger agent dispatch. Remote attackers can mention the bot in Twitch chat to bypass access control and invoke the agent pipeline, potentially causing unintended actions or resource exhaustion."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw 2026.1.29 anteriores a la 2026.2.1 contienen una vulnerabilidad en el plugin de Twitch (debe estar instalado y habilitado) en la que no aplica la lista de permitidos 'allowFrom' cuando 'allowedRoles' no está configurado o está vacío, lo que permite a usuarios de Twitch no autorizados activar el envío de agentes. Atacantes remotos pueden mencionar al bot en el chat de Twitch para eludir el control de acceso e invocar el pipeline de agentes, lo que podría causar acciones no deseadas o agotamiento de recursos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.29",
            "versionEndExcluding" : "2026.2.1",
            "matchCriteriaId" : "D5891E7A-3FFA-4944-ABBC-816BFD160AED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/8c7901c984866a776eb59662dc9d8b028de4f0d0",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-33rq-m5x2-fvgf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-twitch-plugin-allowfrom-access-control",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28450",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:17.003",
      "lastModified" : "2026-03-11T16:04:57.503",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.12 with the optional Nostr plugin enabled expose unauthenticated HTTP endpoints at /api/channels/nostr/:accountId/profile and /api/channels/nostr/:accountId/profile/import that allow reading and modifying Nostr profiles without gateway authentication. Remote attackers can exploit these endpoints to read sensitive profile data, modify Nostr profiles, persist malicious changes to gateway configuration, and publish signed Nostr events using the bot's private key when the gateway HTTP port is accessible beyond localhost."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.12 con el plugin opcional de Nostr habilitado exponen puntos finales HTTP sin autenticación en /api/channels/nostr/:accountId/profile y /api/channels/nostr/:accountId/profile/import que permiten leer y modificar perfiles de Nostr sin autenticación de la pasarela. Atacantes remotos pueden explotar estos puntos finales para leer datos de perfil sensibles, modificar perfiles de Nostr, persistir cambios maliciosos en la configuración de la pasarela y publicar eventos Nostr firmados utilizando la clave privada del bot cuando el puerto HTTP de la pasarela es accesible más allá de localhost."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "BD324C4D-9264-40D1-A630-2D093C66621F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/647d929c9d0fd114249230d939a5cb3b36dc70e7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-mv9j-6xhh-g383",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-unauthenticated-profile-tampering-via-nostr-plugin-http-endpoints",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28451",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:17.210",
      "lastModified" : "2026-03-11T16:15:12.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu extension that allow attackers to fetch attacker-controlled remote URLs without SSRF protections via sendMediaFeishu function and markdown image processing. Attackers can influence tool calls through direct manipulation or prompt injection to trigger requests to internal services and re-upload responses as Feishu media."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.14 contienen vulnerabilidades de falsificación de petición del lado del servidor en la extensión de Feishu que permiten a los atacantes obtener URLs remotas controladas por el atacante sin protecciones SSRF a través de la función sendMediaFeishu y el procesamiento de imágenes markdown. Los atacantes pueden influir en las llamadas a herramientas mediante manipulación directa o inyección de prompts para activar peticiones a servicios internos y volver a subir las respuestas como medios de Feishu."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/5b4121d6011a48c71e747e3c18197f180b872c5d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-x22m-j5qq-j49m",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-ssrf-via-feishu-extension-media-fetching",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28452",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:17.410",
      "lastModified" : "2026-03-09T18:30:09.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the extractArchive function within src/infra/archive.ts that allows attackers to consume excessive CPU, memory, and disk resources through high-expansion ZIP and TAR archives. Remote attackers can trigger resource exhaustion by providing maliciously crafted archive files during install or update operations, causing service degradation or system unavailability."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.14 contienen una vulnerabilidad de denegación de servicio en la función extractArchive dentro de src/infra/archive.ts que permite a los atacantes consumir recursos excesivos de CPU, memoria y disco a través de archivos ZIP y TAR de alta expansión. Los atacantes remotos pueden desencadenar el agotamiento de recursos al proporcionar archivos comprimidos maliciosos durante las operaciones de instalación o actualización, causando degradación del servicio o indisponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/5f4b29145c236d124524c2c9af0f8acd048fbdea",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/d3ee5deb87ee2ad0ab83c92c365611165423cb71",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-h89v-j3x9-8wqj",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-unguarded-archive-extraction-in-extractarchive",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28453",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:17.617",
      "lastModified" : "2026-03-09T18:04:19.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 fail to validate TAR archive entry paths during extraction, allowing path traversal sequences to write files outside the intended directory. Attackers can craft malicious archives with traversal sequences like ../../ to write files outside extraction boundaries, potentially enabling configuration tampering and code execution."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.14 no validan las rutas de entrada de archivos TAR durante la extracción, permitiendo que secuencias de salto de ruta escriban archivos fuera del directorio previsto. Los atacantes pueden crear archivos maliciosos con secuencias de salto de ruta como ../../ para escribir archivos fuera de los límites de extracción, lo que podría permitir la manipulación de la configuración y la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3aa94afcfd12104c683c9cad81faf434d0dadf87",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-p25h-9q54-ffvw",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-zip-slip-path-traversal-in-tar-archive-extraction",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28454",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:17.817",
      "lastModified" : "2026-03-09T18:03:30.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.2 fail to validate webhook secrets in Telegram webhook mode (must be enabled), allowing unauthenticated HTTP POST requests to the webhook endpoint that trust attacker-controlled JSON payloads. Remote attackers can forge Telegram updates by spoofing message.from.id and chat.id fields to bypass sender allowlists and execute privileged bot commands."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.2 no validan los secretos de webhook en el modo de webhook de Telegram (debe estar habilitado), permitiendo solicitudes HTTP POST no autenticadas al endpoint del webhook que confían en cargas útiles JSON controladas por el atacante. Los atacantes remotos pueden falsificar actualizaciones de Telegram suplantando los campos message.from.id y chat.id para eludir las listas blancas de remitentes y ejecutar comandos de bot privilegiados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3cbcba10cf30c2ffb898f0d8c7dfb929f15f8930",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/5643a934799dc523ec2ef18c007e1aa2c386b670",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/633fe8b9c17f02fcc68ecdb5ec212a5ace932f09",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/ca92597e1f9593236ad86810b66633144b69314d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-fhvm-j76f-qmjv",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-unauthenticated-telegram-webhook",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28456",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:18.020",
      "lastModified" : "2026-03-09T18:01:46.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.5 prior to 2026.2.14 contain a vulnerability in the Gateway in which it does not sufficiently constrain configured hook module paths before passing them to dynamic import(), allowing code execution. An attacker with gateway configuration modification access can load and execute unintended local modules in the Node.js process."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw 2026.1.5 anteriores a la 2026.2.14 contienen una vulnerabilidad en el Gateway en la que no restringe suficientemente las rutas de módulos de 'hook' configuradas antes de pasarlas a 'import()' dinámico, lo que permite la ejecución de código. Un atacante con acceso de modificación a la configuración del 'gateway' puede cargar y ejecutar módulos locales no deseados en el proceso de Node.js."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.5",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "B17E2337-C0D5-46AC-A22A-20337888F8B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/35c0e66ed057f1a9f7ad2515fdcef516bd6584ce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/a0361b8ba959e8506dc79d638b6e6a00d12887e4",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6c6-vqqg-w888",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unsafe-hook-module-path-handling",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28457",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:18.227",
      "lastModified" : "2026-03-09T17:43:38.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in sandbox skill mirroring (must be enabled) that uses the skill frontmatter name parameter unsanitized when copying skills into the sandbox workspace. Attackers who provide a crafted skill package with traversal sequences like ../ or absolute paths in the name field can write files outside the sandbox workspace root directory."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.14 contienen una vulnerabilidad de salto de ruta en la duplicación de habilidades de sandbox (debe estar habilitada) que utiliza el parámetro 'name' del 'frontmatter' de la habilidad sin sanitizar al copiar habilidades en el espacio de trabajo de la sandbox. Los atacantes que proporcionan un paquete de habilidad manipulado con secuencias de salto como ../ o rutas absolutas en el campo 'name' pueden escribir archivos fuera del directorio raíz del espacio de trabajo de la sandbox."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3eb6a31b6fcf8268456988bfa8e3637d373438c2",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw4p-pw82-hqr7",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-path-traversal-in-sandbox-skill-mirroring-via-name-parameter",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28458",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:18.457",
      "lastModified" : "2026-03-09T17:28:40.040",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not require authentication tokens, allowing websites to connect via loopback and access sensitive data. Attackers can exploit this by connecting to ws://127.0.0.1:18792/cdp to steal session cookies and execute JavaScript in other browser tabs."
      }, {
        "lang" : "es",
        "value" : "La versión 2026.1.20 de OpenClaw anterior a la 2026.2.1 contiene una vulnerabilidad en el endpoint WebSocket /cdp del Browser Relay (la extensión debe estar instalada y habilitada) en el que no requiere tokens de autenticación, permitiendo que los sitios web se conecten a través de loopback y accedan a datos sensibles. Los atacantes pueden explotar esto conectándose a ws://127.0.0.1:18792/cdp para robar cookies de sesión y ejecutar JavaScript en otras pestañas del navegador."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.20",
            "versionEndExcluding" : "2026.2.1",
            "matchCriteriaId" : "FE93E473-756E-4149-9B99-AC15AD878F7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/a1e89afcc19efd641c02b24d66d689f181ae2b5c",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-mr32-vwc2-5j6h",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-missing-authentication-in-browser-relay-cdp-websocket-endpoint",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28459",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:18.670",
      "lastModified" : "2026-03-09T17:39:46.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.12 fail to validate the sessionFile path parameter, allowing authenticated gateway clients to write transcript data to arbitrary locations on the host filesystem. Attackers can supply a sessionFile path outside the sessions directory to create files and append data repeatedly, potentially causing configuration corruption or denial of service."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.12 no validan el parámetro de ruta sessionFile, lo que permite a los clientes de pasarela autenticados escribir datos de transcripción en ubicaciones arbitrarias del sistema de archivos del host. Los atacantes pueden proporcionar una ruta de sessionFile fuera del directorio de sesiones para crear archivos y añadir datos repetidamente, lo que podría causar corrupción de la configuración o denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "BD324C4D-9264-40D1-A630-2D093C66621F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/25950bcbb8ba4d8cde002557f6e27c219ae4deda",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/4199f9889f0c307b77096a229b9e085b8d856c26",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-64qx-vpxx-mvqf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-write-via-untrusted-sessionfile-path",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28462",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:18.873",
      "lastModified" : "2026-03-09T17:32:54.197",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.13 contain a vulnerability in the browser control API in which it accepts user-supplied output paths for trace and download files without consistently constraining writes to temporary directories. Attackers with API access can exploit path traversal in POST /trace/stop, POST /wait/download, and POST /download endpoints to write files outside intended temp roots."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.13 contienen una vulnerabilidad en la API de control del navegador en la que acepta rutas de salida proporcionadas por el usuario para archivos de rastreo y descarga sin restringir consistentemente las escrituras a directorios temporales. Atacantes con acceso a la API pueden explotar el salto de ruta en los endpoints POST /trace/stop, POST /wait/download y POST /download para escribir archivos fuera de las raíces temporales previstas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.13",
            "matchCriteriaId" : "E4A04671-72CA-4A53-A994-F382557349BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/7f0489e4731c8d965d78d6eac4a60312e46a9426",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-gq9c-wg68-gwj2",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-path-traversal-in-trace-and-download-output-paths",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28463",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:19.127",
      "lastModified" : "2026-04-08T14:16:27.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain an arbitrary file read vulnerability in the exec-approvals allowlist validation that checks pre-expansion argv tokens but executes using real shell expansion. Attackers with authorization or through prompt-injection attacks can exploit safe binaries like head, tail, or grep with glob patterns or environment variables to disclose files readable by the gateway or node process when host execution is enabled in allowlist mode."
      }, {
        "lang" : "es",
        "value" : "La validación de la lista de permitidos de aprobaciones de ejecución de OpenClaw comprueba los tokens argv pre-expansión, pero la ejecución utiliza la expansión real del shell, permitiendo que binarios seguros como head, tail o grep lean archivos locales arbitrarios a través de patrones glob o variables de entorno. Los llamadores autorizados o los ataques de inyección de prompt pueden exploit esto para divulgar archivos legibles por el proceso de gateway o de nodo cuando la ejecución del host está habilitada en modo de lista de permitidos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/77b89719d5b7e271f48b6f49e334a8b991468c3b",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvhf-x56f-2hpp",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-safe-bins-allowlist",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28464",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:19.393",
      "lastModified" : "2026-03-09T17:14:04.110",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.12 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attackers with network access to the hooks endpoint can exploit timing side-channels across multiple requests to gradually determine the authentication token."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a la 2026.2.12 utilizan una comparación de cadenas de tiempo no constante para la validación de tokens de hook, lo que permite a los atacantes inferir tokens a través de mediciones de tiempo. Atacantes remotos con acceso de red al endpoint de hooks pueden explotar canales laterales de tiempo a través de múltiples solicitudes para determinar gradualmente el token de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "BD324C4D-9264-40D1-A630-2D093C66621F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/113ebfd6a23c4beb8a575d48f7482593254506ec",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-jmm5-fvh5-gf4p",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-timing-attack-in-hooks-token-authentication",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28465",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:19.593",
      "lastModified" : "2026-03-10T18:18:46.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw's voice-call plugin versions before 2026.2.3 contain an improper authentication vulnerability in webhook verification that allows remote attackers to bypass verification by supplying untrusted forwarded headers. Attackers can spoof webhook events by manipulating Forwarded or X-Forwarded-* headers in reverse-proxy configurations that implicitly trust these headers."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin de llamadas de voz de OpenClaw anteriores a la 2026.2.3 contienen una vulnerabilidad de autenticación impropia en la verificación de webhooks que permite a atacantes remotos eludir la verificación al suministrar encabezados reenviados no confiables. Los atacantes pueden falsificar eventos de webhook manipulando los encabezados Forwarded o X-Forwarded-* en configuraciones de proxy inverso que confían implícitamente en estos encabezados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.3",
            "matchCriteriaId" : "AB694F3B-E1D5-4980-8413-808F7AABF7F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/a749db9820eb6d6224032a5a34223d286d2dcc2f",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-3m3q-x3gj-f79x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-voice-call-webhook-verification-bypass-via-forwarded-headers",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28466",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:19.790",
      "lastModified" : "2026-03-09T15:30:16.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject approval control fields to execute arbitrary commands on connected node hosts, potentially compromising developer workstations and CI runners."
      }, {
        "lang" : "es",
        "value" : "OpenClaw versiones anteriores a 2026.2.14 contienen una vulnerabilidad en el gateway en la que no logra sanear campos de aprobación internos en los parámetros de node.invoke, permitiendo a clientes autenticados eludir el control de aprobación de ejecución para comandos system.run. Atacantes con credenciales de gateway válidas pueden inyectar campos de control de aprobación para ejecutar comandos arbitrarios en hosts de nodo conectados, comprometiendo potencialmente estaciones de trabajo de desarrolladores y CI runners."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/0af76f5f0e93540efbdf054895216c398692afcd",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/318379cdb8d045da0009b0051bd0e712e5c65e2d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/a7af646fdab124a7536998db6bd6ad567d2b06b0",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/c1594627421f95b6bc4ad7c606657dc75b5ad0ce",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-gv46-4xfq-jv58",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-node-invoke-approval-bypass",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28467",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:19.997",
      "lastModified" : "2026-03-09T15:28:05.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.2 contain a server-side request forgery vulnerability in attachment and media URL hydration that allows remote attackers to fetch arbitrary HTTP(S) URLs. Attackers who can influence media URLs through model-controlled sendAttachment or auto-reply mechanisms can trigger SSRF to internal resources and exfiltrate fetched response bytes as outbound attachments."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.2 contienen una vulnerabilidad de falsificación de petición del lado del servidor en la hidratación de URL de adjuntos y medios que permite a atacantes remotos obtener URL HTTP(S) arbitrarias. Los atacantes que pueden influir en las URL de medios a través de mecanismos de sendAttachment o de respuesta automática controlados por el modelo pueden desencadenar SSRF a recursos internos y exfiltrar los bytes de respuesta obtenidos como adjuntos salientes."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/81c68f582d4a9a20d9cca9f367d2da9edc5a65ae",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/9bd64c8a1f91dda602afc1d5246a2ff2be164647",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-wfp2-v9c7-fh79",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-ssrf-via-attachment-media-url-hydration",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28468",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:20.197",
      "lastModified" : "2026-03-11T16:00:31.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve WebSocket URLs, execute JavaScript, and exfiltrate cookies and session data from authenticated browser contexts."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw 2026.1.29-beta.1 anteriores a 2026.2.14 contienen una vulnerabilidad en el servidor puente del navegador sandbox en el que acepta solicitudes sin requerir autenticación de la pasarela, permitiendo a atacantes locales acceder a puntos finales de control del navegador. Un atacante local puede enumerar pestañas, recuperar URLs de WebSocket, ejecutar JavaScript y exfiltrar cookies y datos de sesión de contextos de navegador autenticados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.29",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "8E57D6F1-6730-40CA-9D2C-01C63A1EAF66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/4711a943e30bc58016247152ba06472dab09d0b0",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/6dd6bce997c48752134f2d6ed89b27de01ced7e3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/cd84885a4ac78eadb7bf321aae98db9519426d67",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9g4-589h-68xv",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-beta-authentication-bypass-in-sandbox-browser-bridge-server",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28469",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:20.407",
      "lastModified" : "2026-03-09T20:29:33.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting when multiple webhook targets share the same HTTP path. Attackers can exploit first-match request verification semantics to process inbound webhook events under incorrect account contexts, bypassing intended allowlists and session policies."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.14 contienen una vulnerabilidad de enrutamiento de webhook en el componente de monitor de Google Chat que permite el enrutamiento incorrecto del contexto de políticas entre cuentas cuando múltiples destinos de webhook comparten la misma ruta HTTP. Los atacantes pueden exploit la semántica de verificación de solicitudes de primera coincidencia para procesar eventos de webhook entrantes bajo contextos de cuenta incorrectos, eludiendo las listas de permitidos previstas y las políticas de sesión."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/61d59a802869177d9cef52204767cd83357ab79e",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-rq6g-px6m-c248",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-cross-account-policy-context-misrouting-via-shared-webhook-path-ambiguity",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28470",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:20.607",
      "lastModified" : "2026-03-25T15:16:40.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist bypass vulnerability that allows attackers to execute arbitrary commands by injecting command substitution syntax. Attackers can bypass the allowlist protection by embedding unescaped $() or backticks inside double-quoted strings to execute unauthorized commands."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.2 contienen una vulnerabilidad de omisión de la lista de permitidos (allowlist) de las aprobaciones de ejecución (que deben estar habilitadas) que permite a los atacantes ejecutar comandos arbitrarios inyectando sintaxis de sustitución de comandos. Los atacantes pueden omitir la protección de la lista de permitidos (allowlist) incrustando $() o comillas invertidas sin escapar dentro de cadenas entre comillas dobles para ejecutar comandos no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/d1ecb46076145deb188abcba8f0699709ea17198",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-3hcm-ggvf-rch5",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-command-substitution-in-double-quotes",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28471",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:20.817",
      "lastModified" : "2026-03-11T16:18:31.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Matrix plugin installed and enabled, contain a vulnerability in which DM allowlist matching could be bypassed by exact-matching against sender display names and localparts without homeserver validation. Remote Matrix users can impersonate allowed identities by using attacker-controlled display names or matching localparts from different homeservers to reach the routing and agent pipeline."
      }, {
        "lang" : "es",
        "value" : "La versión de OpenClaw 2026.1.14-1 anterior a 2026.2.2, con el plugin de Matrix instalado y habilitado, contiene una vulnerabilidad en la que la coincidencia de la lista de permitidos de DM podría ser eludida mediante la coincidencia exacta con los nombres de visualización del remitente y las partes locales sin validación del homeserver. Los usuarios remotos de Matrix pueden suplantar identidades permitidas utilizando nombres de visualización controlados por el atacante o partes locales coincidentes de diferentes homeservers para alcanzar la tubería de enrutamiento y agente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.14-1",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "D00F2909-4A9B-4E3D-A2F7-829962959F56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/8f3bfbd1c4fb967a2ddb5b4b9a05784920814bcf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-rmxw-jxxx-4cpc",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-displayname-and-cross-homeserver-localpart-matching-in-matrix",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28472",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:21.017",
      "lastModified" : "2026-03-09T20:40:40.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.2 contain a vulnerability in the gateway WebSocket connect handshake in which it allows skipping device identity checks when auth.token is present but not validated. Attackers can connect to the gateway without providing device identity or pairing by exploiting the presence check instead of validation, potentially gaining operator access in vulnerable deployments."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.2 contienen una vulnerabilidad en el handshake de conexión WebSocket del gateway en la que permite omitir las comprobaciones de identidad del dispositivo cuando auth.token está presente pero no validado. Los atacantes pueden conectarse al gateway sin proporcionar identidad del dispositivo o emparejamiento explotando la comprobación de presencia en lugar de la validación, obteniendo potencialmente acceso de operador en implementaciones vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/fe81b1d7125a014b8280da461f34efbf5f761575",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-rv39-79c4-7459",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-device-identity-check-bypass-in-gateway-websocket-connect-handshake",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28473",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:21.220",
      "lastModified" : "2026-03-11T16:18:20.220",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by sending the /approve chat command. The /approve command path invokes exec.approval.resolve through an internal privileged gateway client, bypassing the operator.approvals permission check that protects direct RPC calls."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a la 2026.2.2 contienen una vulnerabilidad de omisión de autorización donde los clientes con alcance operator.write pueden aprobar o denegar solicitudes de aprobación de ejecución enviando el comando de chat /approve. La ruta del comando /approve invoca exec.approval.resolve a través de un cliente de pasarela privilegiado interno, omitiendo la verificación de permisos operator.approvals que protege las llamadas RPC directas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.2",
            "matchCriteriaId" : "CC7879A3-C51B-446A-AA4B-F1BAF8C2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/efe2a464afcff55bb5a95b959e6bd9ec0fef086e",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-mqpw-46fh-299h",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-approve-chat-command",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28474",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:21.423",
      "lastModified" : "2026-05-06T14:49:59.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing attackers to bypass DM and room allowlists. An attacker can change their Nextcloud display name to match an allowlisted user ID and gain unauthorized access to restricted conversations."
      }, {
        "lang" : "es",
        "value" : "Las versiones del plugin Nextcloud Talk de OpenClaw anteriores a la 2026.2.6 aceptan la coincidencia de igualdad en el campo mutable del nombre de visualización actor.name para la validación de listas de permitidos, lo que permite a los atacantes eludir las listas de permitidos de MD y salas. Un atacante puede cambiar su nombre de visualización de Nextcloud para que coincida con un ID de usuario en la lista de permitidos y obtener acceso no autorizado a conversaciones restringidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.6",
            "matchCriteriaId" : "71D19426-2A6D-4B2B-8F12-C201CBAFF5C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/6b4b6049b47c3329a7014509594647826669892d",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-r5h9-vjqc-hq3r",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-nextcloud-talk-allowlist-bypass-via-actorname-display-name-spoofing",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory", "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28475",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:21.617",
      "lastModified" : "2026-03-11T16:17:15.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.13 use non-constant-time string comparison for hook token validation, allowing attackers to infer tokens through timing measurements. Remote attackers with network access to the hooks endpoint can exploit timing side-channels across multiple requests to gradually recover the authentication token."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.13 utilizan comparación de cadenas de tiempo no constante para la validación de tokens de gancho, permitiendo a los atacantes inferir tokens a través de mediciones de tiempo. Atacantes remotos con acceso de red al punto final de hooks pueden explotar canales laterales de tiempo a través de múltiples solicitudes para recuperar gradualmente el token de autenticación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.13",
            "matchCriteriaId" : "E4A04671-72CA-4A53-A994-F382557349BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/113ebfd6a23c4beb8a575d48f7482593254506ec",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-47q7-97xp-m272",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-timing-attack-via-hook-token-comparison",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28476",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:21.807",
      "lastModified" : "2026-04-21T14:52:03.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a server-side request forgery vulnerability in the optional Tlon Urbit extension that accepts user-provided base URLs for authentication without proper validation. Attackers who can influence the configured Urbit URL can induce the gateway to make HTTP requests to arbitrary hosts including internal addresses."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.14 contienen una vulnerabilidad de falsificación de petición del lado del servidor en la extensión opcional Tlon Urbit que acepta URL base proporcionadas por el usuario para autenticación sin la validación adecuada. Los atacantes que pueden influir en la URL de Urbit configurada pueden inducir a la pasarela a realizar peticiones HTTP a hosts arbitrarios, incluyendo direcciones internas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/bfa7d21e997baa8e3437657d59b1e296815cc1b1",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-pg2v-8xwh-qhcc",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-server-side-request-forgery-in-tlon-extension-authentication",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28477",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:22.007",
      "lastModified" : "2026-03-17T18:04:14.913",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An attacker can convince a user to paste attacker-controlled OAuth callback data, enabling credential substitution and token persistence for unauthorized accounts."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.14 contienen una vulnerabilidad de omisión de validación de estado de OAuth en el flujo de inicio de sesión manual de Chutes que permite a los atacantes omitir la protección CSRF. Un atacante puede convencer a un usuario de pegar datos de devolución de llamada de OAuth controlados por el atacante, lo que permite la sustitución de credenciales y la persistencia de tokens para cuentas no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/a99ad11a4107ba8eac58f54a3c1a8a0cf5686f47",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-7rcp-mxpq-72pj",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-oauth-state-validation-bypass-in-manual-chutes-login-flow",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28478",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:22.210",
      "lastModified" : "2026-03-17T18:03:34.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook handlers that buffer request bodies without strict byte or time limits. Remote unauthenticated attackers can send oversized JSON payloads or slow uploads to webhook endpoints causing memory pressure and availability degradation."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.13 contienen una vulnerabilidad de denegación de servicio en los manejadores de webhooks que almacenan en búfer los cuerpos de las solicitudes sin límites estrictos de bytes o de tiempo. Atacantes remotos no autenticados pueden enviar cargas útiles JSON de tamaño excesivo o cargas lentas a los puntos finales de webhook, causando presión en la memoria y degradación de la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.13",
            "matchCriteriaId" : "E4A04671-72CA-4A53-A994-F382557349BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3cbcba10cf30c2ffb898f0d8c7dfb929f15f8930",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-q447-rj3r-2cgh",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-unbounded-webhook-request-body-buffering",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28479",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:22.410",
      "lastModified" : "2026-03-17T17:58:44.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable to collision attacks. An attacker can exploit SHA-1 collisions to cause cache poisoning, allowing one sandbox configuration to be misinterpreted as another and enabling unsafe sandbox state reuse."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.15 utilizan SHA-1 para aplicar hash a las claves de caché de identificadores de sandbox para configuraciones de sandbox de Docker y de navegador, lo cual está obsoleto y es vulnerable a ataques de colisión. Un atacante puede explotar las colisiones de SHA-1 para causar envenenamiento de caché, permitiendo que una configuración de sandbox sea malinterpretada como otra y habilitando la reutilización insegura del estado del sandbox."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:-:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.15",
            "matchCriteriaId" : "E6866088-F142-4B9C-AAAA-0B10537FA0A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/559c8d9930eebb5356506ff1a8cd3dbaec92be77",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh3f-q9qw-93j9",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-cache-poisoning-via-deprecated-sha-hash-in-sandbox-configuration",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28480",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:22.610",
      "lastModified" : "2026-03-17T17:49:51.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain an authorization bypass vulnerability where Telegram allowlist matching accepts mutable usernames instead of immutable numeric sender IDs. Attackers can spoof identity by obtaining recycled usernames to bypass allowlist restrictions and interact with bots as unauthorized senders."
      }, {
        "lang" : "es",
        "value" : "OpenClaw versiones anteriores a 2026.2.14 contienen una vulnerabilidad de omisión de autorización donde la coincidencia de la lista de permitidos de Telegram acepta nombres de usuario mutables en lugar de identificadores de remitente numéricos inmutables. Los atacantes pueden suplantar la identidad obteniendo nombres de usuario reciclados para omitir las restricciones de la lista de permitidos e interactuar con bots como remitentes no autorizados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/9e147f00b48e63e7be6964e0e2a97f2980854128",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/e3b432e481a96b8fd41b91273818e514074e05c3",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-mj5r-hh7j-4gxf",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-identity-spoofing-via-mutable-username-in-telegram-allowlist-authorization",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28481",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:22.810",
      "lastModified" : "2026-03-17T17:43:49.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.30 and earlier, contain an information disclosure vulnerability, patched in 2026.2.1, in the MS Teams attachment downloader (optional extension must be enabled) that leaks bearer tokens to allowlisted suffix domains. When retrying downloads after receiving 401 or 403 responses, the application sends Authorization bearer tokens to untrusted hosts matching the permissive suffix-based allowlist, enabling token theft."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2026.1.30 y anteriores de OpenClaw contienen una vulnerabilidad de revelación de información, parcheada en 2026.2.1, en el descargador de archivos adjuntos de MS Teams (la extensión opcional debe estar habilitada) que filtra tokens portador a dominios de sufijo en la lista de permitidos. Al reintentar descargas después de recibir respuestas 401 o 403, la aplicación envía tokens portador de autorización a hosts no confiables que coinciden con la lista de permitidos permisiva basada en sufijos, lo que permite el robo de tokens."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2026.1.30",
            "matchCriteriaId" : "4C1D9C18-62A6-4332-B234-054C7380033E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/41cc5bcd4f1d434ad1bbdfa55b56f25025ecbf6b",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vwx-582j-j332",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-bearer-token-leakage-via-ms-teams-attachment-downloader-suffix-matching",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28482",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:23.013",
      "lastModified" : "2026-03-23T14:17:48.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.12 construct transcript file paths using unsanitized sessionId parameters and sessionFile paths without enforcing directory containment. Authenticated attackers can exploit path traversal sequences like ../../etc/passwd in sessionId or sessionFile parameters to read or write arbitrary files outside the agent sessions directory."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.12 construyen rutas de archivos de transcripción utilizando parámetros sessionId no saneados y rutas sessionFile sin aplicar la contención de directorios. Atacantes autenticados pueden explotar secuencias de salto de ruta como .. /.. /etc /passwd en los parámetros sessionId o sessionFile para leer o escribir archivos arbitrarios fuera del directorio de sesiones del agente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "BD324C4D-9264-40D1-A630-2D093C66621F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/4199f9889f0c307b77096a229b9e085b8d856c26",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/cab0abf52ac91e12ea7a0cf04fff315cf0c94d64",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-5xfq-5mr7-426q",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-path-traversal-via-unsanitized-sessionid-and-sessionfile-parameters",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28484",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:23.213",
      "lastModified" : "2026-03-06T17:16:32.923",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28485",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:23.440",
      "lastModified" : "2026-03-11T01:28:49.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.5 prior to 2026.2.12 fail to enforce mandatory authentication on the /agent/act browser-control HTTP route, allowing unauthorized local callers to invoke privileged operations. Remote attackers on the local network or local processes can execute arbitrary browser-context actions and access sensitive in-session data by sending requests to unauthenticated endpoints."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw 2026.1.5 anteriores a la 2026.2.12 no aplican la autenticación obligatoria en la ruta HTTP /agent/act de control del navegador, lo que permite a los llamadores locales no autorizados invocar operaciones privilegiadas. Atacantes remotos en la red local o procesos locales pueden ejecutar acciones arbitrarias en el contexto del navegador y acceder a datos sensibles en la sesión enviando solicitudes a puntos finales no autenticados."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2026.1.5",
            "matchCriteriaId" : "CEF97677-F621-4625-B3EE-1E45DA967799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.2.9",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "03736EA5-7435-4279-97A1-726C4004DE97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/9230a2ae14307740a13ada7afd6dcfab34e0287f",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-qpjj-47vm-64pj",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-missing-authentication-in-browser-control-http-endpoints",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28486",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:23.640",
      "lastModified" : "2026-03-11T01:15:08.877",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions 2026.1.16-2 prior to 2026.2.14 contain a path traversal vulnerability in archive extraction during installation commands that allows arbitrary file writes outside the intended directory. Attackers can craft malicious archives that, when extracted via skills install, hooks install, plugins install, or signal install commands, write files to arbitrary locations enabling persistence or code execution."
      }, {
        "lang" : "es",
        "value" : "OpenClaw versiones 2026.1.16-2 anteriores a 2026.2.14 contienen una vulnerabilidad de salto de ruta en la extracción de archivos durante los comandos de instalación que permite escrituras de archivos arbitrarias fuera del directorio previsto. Los atacantes pueden crear archivos maliciosos que, al ser extraídos mediante los comandos skills install, hooks install, plugins install o signal install, escriben archivos en ubicaciones arbitrarias, lo que permite la persistencia o la ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2026.1.20",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "43760949-E27F-4397-824E-B1A510B7BEA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:2026.1.16-2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2603FDB9-2192-4413-83A2-2C45FAF8C7E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/3aa94afcfd12104c683c9cad81faf434d0dadf87",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-v892-hwpg-jwqp",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-path-traversal-zip-slip-in-archive-extraction-via-installation-commands",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29606",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:23.850",
      "lastModified" : "2026-03-11T01:10:47.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.allowNgrokFreeTierLoopbackBypass option is explicitly enabled. An external attacker can send forged requests to the publicly reachable webhook endpoint without a valid X-Twilio-Signature header, resulting in unauthorized webhook event handling and potential request flooding attacks."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.14 contienen un bypass de verificación de firma de webhook en la extensión de llamadas de voz que permite solicitudes no autenticadas cuando la opción tunnel.allowNgrokFreeTierLoopbackBypass está explícitamente habilitada. Un atacante externo puede enviar solicitudes falsificadas al endpoint de webhook accesible públicamente sin un encabezado X-Twilio-Signature válido, lo que resulta en un manejo no autorizado de eventos de webhook y posibles ataques de inundación de solicitudes."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/ff11d8793b90c52f8d84dae3fbb99307da51b5c9",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-c37p-4qqg-3p76",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-webhook-signature-verification-bypass-via-ngrok-loopback-compatibility",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29609",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:24.043",
      "lastModified" : "2026-03-11T01:03:36.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before enforcing maxBytes limits. Remote attackers can trigger memory exhaustion by serving oversized responses without content-length headers to cause availability loss."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.14 contienen una vulnerabilidad de denegación de servicio en la función fetchWithGuard que asigna cargas útiles de respuesta completas en la memoria antes de aplicar los límites de maxBytes. Los atacantes remotos pueden desencadenar el agotamiento de la memoria al servir respuestas de tamaño excesivo sin encabezados content-length para causar la pérdida de disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/00a08908892d1743d1fc52e5cbd9499dd5da2fe0",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-j27p-hq53-9wgc",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-unbounded-url-backed-media-fetch",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-j27p-hq53-9wgc",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29610",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:24.253",
      "lastModified" : "2026-03-11T01:02:58.387",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution surfaces or those running OpenClaw in attacker-controlled directories can place malicious executables in PATH to override allowlisted safe-bin commands and achieve arbitrary command execution."
      }, {
        "lang" : "es",
        "value" : "Versiones de OpenClaw anteriores a 2026.2.14 contienen una vulnerabilidad de secuestro de comandos que permite a los atacantes ejecutar binarios no deseados manipulando las variables de entorno PATH a través de la ejecución de node-host o el arranque local del proyecto. Los atacantes con acceso autenticado a las superficies de ejecución de node-host o aquellos que ejecutan OpenClaw en directorios controlados por el atacante pueden colocar ejecutables maliciosos en PATH para anular comandos safe-bin en lista blanca y lograr la ejecución arbitraria de comandos."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/013e8f6b3be3333a229a066eef26a45fec47ffcc",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-jqpq-mgvm-f9r6",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-command-hijacking-via-unsafe-path-handling",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29611",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:24.460",
      "lastModified" : "2026-03-11T00:58:54.873",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 contain a local file inclusion vulnerability in BlueBubbles extension (must be installed and enabled) media path handling that allows attackers to read arbitrary files from the local filesystem. The sendBlueBubblesMedia function fails to validate mediaPath parameters against an allowlist, enabling attackers to request sensitive files like /etc/passwd and exfiltrate them as media attachments."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a la 2026.2.14 contienen una vulnerabilidad de inclusión local de ficheros en el manejo de rutas de medios de la extensión BlueBubbles (debe estar instalada y habilitada) que permite a los atacantes leer ficheros arbitrarios del sistema de ficheros local. La función sendBlueBubblesMedia no valida los parámetros mediaPath contra una lista de permitidos, permitiendo a los atacantes solicitar ficheros sensibles como /etc /passwd y exfiltrarlos como adjuntos de medios."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/71f357d9498cebb0efe016b0496d5fbe807539fc",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwj8-p9vq-25gv",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-local-file-inclusion-via-mediapath-parameter-in-bluebubbles-media-handling",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29612",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:24.660",
      "lastModified" : "2026-03-11T00:47:39.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers before enforcing decoded-size budget limits, allowing attackers to trigger large memory allocations. Remote attackers can supply oversized base64 payloads to cause memory pressure and denial of service."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.14 decodifican las entradas de medios respaldadas por base64 en búferes antes de aplicar los límites de presupuesto de tamaño decodificado, lo que permite a los atacantes desencadenar grandes asignaciones de memoria. Los atacantes remotos pueden suministrar cargas útiles base64 de tamaño excesivo para causar presión de memoria y denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.14",
            "matchCriteriaId" : "0F3079A3-9FBD-4E87-821D-5CAF0622C555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/31791233d60495725fa012745dde8d6ee69e9595",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-w2cg-vxx6-5xjg",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-large-base-media-file-decoding",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29613",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-05T22:16:24.850",
      "lastModified" : "2026-03-11T00:43:15.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles (optional plugin) webhook handler in which it authenticates requests based solely on loopback remoteAddress without validating forwarding headers, allowing bypass of configured webhook passwords. When the gateway operates behind a reverse proxy, unauthenticated remote attackers can inject arbitrary BlueBubbles message and reaction events by reaching the proxy endpoint."
      }, {
        "lang" : "es",
        "value" : "Las versiones de OpenClaw anteriores a 2026.2.12 contienen una vulnerabilidad en el gestor de webhooks de BlueBubbles (plugin opcional) en la que autentica las solicitudes basándose únicamente en la remoteAddress de bucle invertido sin validar los encabezados de reenvío, lo que permite eludir las contraseñas de webhook configuradas. Cuando la pasarela opera detrás de un proxy inverso, atacantes remotos no autenticados pueden inyectar eventos arbitrarios de mensajes y reacciones de BlueBubbles al alcanzar el punto final del proxy."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026.2.12",
            "matchCriteriaId" : "BD324C4D-9264-40D1-A630-2D093C66621F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openclaw/openclaw/commit/743f4b28495cdeb0d5bf76f6ebf4af01f6a02e5a",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/commit/f836c385ffc746cb954e8ee409f99d079bfdcd2f",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openclaw/openclaw/security/advisories/GHSA-xc7w-v5x6-cc87",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/openclaw-webhook-authentication-bypass-via-loopback-remoteaddress-trust",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2593",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-05T22:16:25.030",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `_gspb_post_css` post meta value and the `dynamicAttributes` block attribute in all versions up to, and including, 12.8.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Greenshift – bloques de animación y constructor de páginas para WordPress es vulnerable a cross-site scripting almacenado a través del valor de metadatos de publicación '_gspb_post_css' y el atributo de bloque 'dynamicAttributes' en todas las versiones hasta e incluyendo la 12.8.5 debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel de Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/12.8.3/blockrender/element/block.php#L660",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/12.8.3/init.php#L2110",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/12.8.3/init.php#L2138",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/57b7b171-cd25-4bcd-aa75-3ccbfbb1452a?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3606",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-05T22:16:25.390",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etterfilter/ef_output.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Ettercap 0.8.4-Garofalo. Afectada por esta vulnerabilidad es la función add_data_segment del archivo src/ettercap/utils/etterfilter/ef_output.c del componente etterfilter. La manipulación conduce a una lectura fuera de límites. Se requiere acceso local para abordar este ataque. El exploit ha sido revelado al público y puede ser usado. El proyecto fue informado del problema tempranamente a través de un informe de problema pero no ha respondido aún."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ettercap-project:ettercap:0.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813AA945-FA52-4AAE-86B7-6C55B54ABDAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ettercap/ettercap/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Ettercap/ettercap/issues/1297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/oneafter/0202/blob/main/et/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21536",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-05T23:16:18.447",
      "lastModified" : "2026-03-16T15:40:44.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Devices Pricing Program Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del Programa de Precios de Dispositivos de Microsoft"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:devices_pricing_program:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F2AB08-B106-4F38-9F40-78E968C304E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21536",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23651",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-05T23:16:19.673",
      "lastModified" : "2026-03-16T15:40:35.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Expresión regular permisiva en Azure Compute Gallery permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-625"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aci_confidential_containers:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0672AA1-25ED-4836-A487-6DA0FC873C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23651",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26122",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-05T23:16:19.843",
      "lastModified" : "2026-03-16T15:40:23.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de revelación de información de Contenedores Confidenciales de Microsoft ACI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aci_confidential_containers:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0672AA1-25ED-4836-A487-6DA0FC873C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26122",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26124",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-05T23:16:19.990",
      "lastModified" : "2026-03-16T15:39:27.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Elevación de Privilegios de Contenedores Confidenciales de ACI de Microsoft"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-35"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:aci_confidential_containers:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0672AA1-25ED-4836-A487-6DA0FC873C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26124",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26125",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-05T23:16:20.160",
      "lastModified" : "2026-03-16T15:38:45.143",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "secure@microsoft.com",
        "tags" : [ "exclusively-hosted-service" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Payment Orchestrator Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Servicio Orquestador de Pagos Elevación de Privilegios Vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:payment_orchestrator_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925236E5-E4B9-41B6-BADA-AB96DFE62149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26125",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22552",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T00:16:10.347",
      "lastModified" : "2026-05-06T14:44:31.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede conducir a la escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga informados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epower:epower.ie:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F683C7-A626-4ECA-81C6-19D9AD6D5B59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://epower.ie/support/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24912",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T00:16:10.553",
      "lastModified" : "2026-05-06T14:44:06.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent connection displaces the legitimate charging station and receives backend commands intended for that station. This vulnerability may allow unauthorized users to authenticate as other users or enable\na malicious actor to cause a denial-of-service condition by overwhelming the backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación resulta en identificadores de sesión predecibles y permite el secuestro o sombreado de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epower:epower.ie:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F683C7-A626-4ECA-81C6-19D9AD6D5B59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://epower.ie/support/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27770",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T00:16:10.767",
      "lastModified" : "2026-03-09T13:36:08.413",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son de acceso público a través de plataformas de mapeo web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://epower.ie/support/",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-07.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27778",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T00:16:10.960",
      "lastModified" : "2026-05-06T14:42:09.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio suprimiendo o redirigiendo erróneamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epower:epower.ie:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F683C7-A626-4ECA-81C6-19D9AD6D5B59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://epower.ie/support/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-07.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28709",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:11.153",
      "lastModified" : "2026-03-12T18:26:28.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Manipulación no autorizada de recursos debido a comprobaciones de autorización incorrectas. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-5889",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28710",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:11.300",
      "lastModified" : "2026-03-12T18:25:51.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Revelación de información sensible y manipulación debido a autenticación incorrecta. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1390"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-9137",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28711",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:11.450",
      "lastModified" : "2026-03-11T14:01:54.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido a una vulnerabilidad de secuestro de DLL. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-2330",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28712",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:11.593",
      "lastModified" : "2026-03-11T14:00:40.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido a una vulnerabilidad de secuestro de DLL. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-2332",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28713",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:11.750",
      "lastModified" : "2026-03-13T16:37:26.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Credenciales predeterminadas establecidas para el usuario privilegiado local en el Dispositivo Virtual. Los siguientes productos están afectados: Acronis Cyber Protect Cloud Agent (VMware) antes de la compilación 36943, Acronis Cyber Protect 17 (VMware) antes de la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1392"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "c23.12",
            "matchCriteriaId" : "48CA4F1C-287B-4557-8974-B00A924543AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-4168",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28714",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:11.900",
      "lastModified" : "2026-03-13T16:39:21.643",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Transmisión innecesaria de material criptográfico sensible. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-5383",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28715",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:12.047",
      "lastModified" : "2026-03-12T18:24:07.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Revelación de información sensible debido a comprobaciones de autorización incorrectas. Los siguientes productos se ven afectados: Acronis Cyber Protect 17 (Linux, Windows) antes de la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-5910",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28716",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:12.190",
      "lastModified" : "2026-03-12T15:44:54.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Revelación de información y manipulación debido a comprobaciones de autorización incorrectas. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-3687",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28717",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:12.363",
      "lastModified" : "2026-03-11T14:01:32.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido a permisos de directorio incorrectos. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8363",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28718",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:12.553",
      "lastModified" : "2026-03-12T15:37:14.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Denegación de servicio debido a insuficiente validación de entrada en el registro de autenticación. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-779"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8377",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28719",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:12.727",
      "lastModified" : "2026-03-13T16:39:05.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Manipulación no autorizada de recursos debido a comprobaciones de autorización incorrectas. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8378",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28720",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:12.910",
      "lastModified" : "2026-03-13T16:38:39.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Modificación no autorizada de la configuración debido a comprobaciones de autorización insuficientes. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) antes de la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8379",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28721",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.053",
      "lastModified" : "2026-03-11T14:01:42.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido al manejo inadecuado de enlaces simbólicos. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8445",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28722",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.200",
      "lastModified" : "2026-03-11T14:01:48.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido al manejo inadecuado de enlaces simbólicos. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8481",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28723",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.340",
      "lastModified" : "2026-03-13T16:38:26.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Eliminación no autorizada de informe debido a control de acceso insuficiente. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8486",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28724",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.487",
      "lastModified" : "2026-03-13T16:37:52.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Acceso no autorizado a datos debido a validación insuficiente del control de acceso. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8493",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28725",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.627",
      "lastModified" : "2026-03-13T16:38:17.687",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Revelación de información sensible debido a la configuración incorrecta de un navegador sin interfaz gráfica. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8695",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28726",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.783",
      "lastModified" : "2026-03-13T16:38:04.100",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
      }, {
        "lang" : "es",
        "value" : "Revelación de información sensible debido a un control de acceso inadecuado. Los siguientes productos están afectados: Acronis Cyber Protect 17 (Linux, Windows) anterior a la compilación 41186."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-8401",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28727",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2026-03-06T00:16:13.923",
      "lastModified" : "2026-04-02T18:16:27.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902."
      }, {
        "lang" : "es",
        "value" : "Escalada de privilegios local debido a permisos inseguros de socket Unix. Los siguientes productos están afectados: Acronis Cyber Protect 17 (macOS) anterior a la compilación 41186, Acronis Cyber Protect Cloud Agent (macOS) anterior a la compilación 41124."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "c25.10",
            "matchCriteriaId" : "FE833FD9-CB6E-45A1-889C-AF6EDB5B3BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0.41186",
            "matchCriteriaId" : "52FF13FE-B050-4333-B0E3-F7EE4AA98520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-9408",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2589",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-06T00:16:14.070",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automated Settings Backup stored in a publicly accessible file. This makes it possible for unauthenticated attackers to extract sensitive data including the configured OpenAI, Claude, Google Maps, Gemini, DeepSeek, and Cloudflare Turnstile API keys."
      }, {
        "lang" : "es",
        "value" : "El plugin Greenshift – bloques de animación y constructor de páginas para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta, e incluyendo, la 12.8.3 a través de la copia de seguridad de configuración automatizada almacenada en un archivo de acceso público. Esto hace posible que atacantes no autenticados extraigan datos sensibles, incluyendo las claves API configuradas de OpenAI, Claude, Google Maps, Gemini, DeepSeek y Cloudflare Turnstile."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/3465111/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3610",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-06T01:15:53.913",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown functionality of the file /mailinspector/mliUserValidation.php of the component URL Handler. The manipulation of the argument error_description results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used. Upgrading to version 5.4.0 can resolve this issue. You should upgrade the affected component. The vendor was contacted early and responded very professional: \"We have already implemented the fix and made a hotfix available to affected customers, ensuring mitigation while the official release 5.4.0 has not yet been published. This allows customers to address the issue immediately, outside the regular release cycle.\""
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en HSC Ciberseguridad Mailinspector hasta la versión 5.3.2-3. Afectada por este problema es alguna funcionalidad desconocida del archivo /mailinspector/mliUserValidation.PHP del componente Gestor de URL. La manipulación del argumento error_description resulta en cross-site scripting. El ataque puede ser realizado desde remoto. El exploit ha sido hecho público y podría ser usado. Actualizar a la versión 5.4.0 puede resolver este problema. Debería actualizar el componente afectado. El proveedor fue contactado temprano y respondió muy profesional: 'Ya hemos implementado la corrección y hemos puesto a disposición un hotfix para los clientes afectados, asegurando la mitigación mientras la versión oficial 5.4.0 aún no ha sido publicada. Esto permite a los clientes abordar el problema de inmediato, fuera del ciclo de lanzamiento regular.'"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/1KI2SIDcVm5U3Yzo5tNT5YOwREQWe_5BJaWe-ctRmLoI/edit?usp=sharing",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349219",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349219",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.748710",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3612",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-06T01:15:54.163",
      "lastModified" : "2026-03-10T18:29:54.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmware_url causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Wavlink WL-NU516U1 V240425. Esto afecta a la función sub_405AF4 del archivo /cgi-bin/adm.cgi del componente OTA Online Upgrade. Esta manipulación del argumento firmware_url causa inyección de comandos. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:m16u1_v240425:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44120A31-7BB4-4C48-834B-2C183BC77535"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wlz1112/WAVLINK-NU516-V240425/blob/main/firmware_url.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.754668",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3613",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-06T02:15:51.793",
      "lastModified" : "2026-03-10T18:30:01.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Wavlink WL-NU516U1 V240425. Esta vulnerabilidad afecta a la función sub_401A0C del archivo /cgi-bin/login.cgi. Dicha manipulación del argumento ipaddr conduce a un desbordamiento de búfer basado en pila. Es posible lanzar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:m16u1_v240425:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44120A31-7BB4-4C48-834B-2C183BC77535"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Wlz1112/WAVLINK-NU516-V240425/blob/main/ipaddr_Stack%20Buffer%20Overflow.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349221",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.755341",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3616",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-06T03:15:52.220",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unknown function of the file /modules/customers/edit.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named f0e991870e9d33701cca3a1d0fd4eec135af01a6. It is suggested to install a patch to address this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en el sistema DefaultFuction Jeson Customer Relationship Management 1.0.0. Afectada es una función desconocida del archivo /modules/customers/edit.PHP. Realizar una manipulación del argumento ID resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit es ahora público y puede ser usado. El parche se llama f0e991870e9d33701cca3a1d0fd4eec135af01a6. Se sugiere instalar un parche para abordar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/commit/f0e991870e9d33701cca3a1d0fd4eec135af01a6",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/issues/1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/issues/1#issue-3972001812",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/DefaultFuction/Jeson-Customer-Relationship-Management-System/issues/1#issuecomment-3982939567",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349234",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349234",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765096",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25962",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:07.620",
      "lastModified" : "2026-03-12T17:23:52.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload a zip file to provide an assignment configuration; students can upload a zip file for an assignment submission and indicate its contents should be extracted. This issue has been patched in version 2.9.4."
      }, {
        "lang" : "es",
        "value" : "MarkUs es una aplicación web para la entrega y calificación de tareas de estudiantes. Antes de la versión 2.9.4, MarkUs actualmente extrae archivos zip sin límites de tamaño o de número de entradas. Por ejemplo, los instructores pueden subir un archivo zip para proporcionar una configuración de tarea; los estudiantes pueden subir un archivo zip para la entrega de una tarea e indicar que su contenido debe ser extraído. Este problema ha sido parcheado en la versión 2.9.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markusproject:markus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.4",
            "matchCriteriaId" : "68B46CED-C806-4F2A-B1C6-727EE540E7A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MarkUsProject/Markus/releases/tag/v2.9.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/security/advisories/GHSA-x8xv-j7fc-65x5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27807",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:07.810",
      "lastModified" : "2026-03-12T17:22:20.530",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows course instructors to upload YAML files to create/update various entities (e.g., assignment settings). These YAML files are parsed with aliases enabled. This issue has been patched in version 2.9.4."
      }, {
        "lang" : "es",
        "value" : "MarkUs es una aplicación web para la entrega y calificación de tareas de estudiantes. Antes de la versión 2.9.4, MarkUs permite a los instructores del curso cargar archivos YAML para crear/actualizar varias entidades (por ejemplo, configuraciones de tareas). Estos archivos YAML se analizan con alias habilitados. Este problema ha sido parcheado en la versión 2.9.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markusproject:markus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.4",
            "matchCriteriaId" : "68B46CED-C806-4F2A-B1C6-727EE540E7A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MarkUsProject/Markus/releases/tag/v2.9.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/MarkUsProject/Markus/security/advisories/GHSA-m9rx-85mx-q9h6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28497",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:07.990",
      "lastModified" : "2026-03-16T15:37:17.303",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine (_Val) allows an unauthenticated remote attacker to bypass Content-Length restrictions and perform HTTP Request Smuggling. This can lead to unauthorized access, security filter bypass, and potential cache poisoning. The impact is critical for servers using persistent connections (Keep-Alive). This issue has been patched in version 2.03."
      }, {
        "lang" : "es",
        "value" : "TinyWeb es un servidor web (HTTP, HTTPS) escrito en Delphi para Win32. Antes de la versión 2.03, una vulnerabilidad de desbordamiento de entero en la rutina de conversión de cadena a entero (_Val) permite a un atacante remoto no autenticado eludir las restricciones de Content-Length y realizar HTTP Request Smuggling. Esto puede conducir a acceso no autorizado, elusión de filtros de seguridad y potencial envenenamiento de caché. El impacto es crítico para servidores que utilizan conexiones persistentes (Keep-Alive). Este problema ha sido parcheado en la versión 2.03."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:tinyweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.03",
            "matchCriteriaId" : "771E9CA0-5541-4A60-BDFB-AA3D47907BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maximmasiutin/TinyWeb/commit/d2edd0322c3d74beee0a6c0191299b8946695d4e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-rp8j-cx7r-mw9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28501",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:08.177",
      "lastModified" : "2026-03-16T15:06:55.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQL Injection vulnerability exists in AVideo within the objects/videos.json.php and objects/video.php components. The application fails to properly sanitize the catName parameter when it is supplied via a JSON-formatted POST request body. Because JSON input is parsed and merged into $_REQUEST after global security checks are executed, the payload bypasses the existing sanitization mechanisms. This issue has been patched in version 24.0."
      }, {
        "lang" : "es",
        "value" : "WWBN AVideo es una plataforma de video de código abierto. Antes de la versión 24.0, existe una vulnerabilidad de inyección SQL no autenticada en AVideo dentro de los componentes objects/videos.json.php y objects/video.php. La aplicación no logra sanear correctamente el parámetro catName cuando se suministra a través de un cuerpo de solicitud POST con formato JSON. Debido a que la entrada JSON se analiza y se fusiona en $_REQUEST después de que se ejecutan las comprobaciones de seguridad globales, la carga útil omite los mecanismos de saneamiento existentes. Este problema ha sido parcheado en la versión 24.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.0",
            "matchCriteriaId" : "7C8F82C6-8B38-41D1-ADA1-EBE2DF74F083"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/commit/0c10be681c64044618ab94473251bd7c9b114fa1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/releases/tag/24.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-pv87-r9qf-x56p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28502",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:08.370",
      "lastModified" : "2026-03-16T15:03:31.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WWBN AVideo is an open source video platform. Prior to version 24.0, an authenticated Remote Code Execution (RCE) vulnerability was identified in AVideo related to the plugin upload/import functionality. The issue allowed an authenticated administrator to upload a specially crafted ZIP archive containing executable server-side files. Due to insufficient validation of extracted file contents, the archive was extracted directly into a web-accessible plugin directory, allowing arbitrary PHP code execution. This issue has been patched in version 24.0."
      }, {
        "lang" : "es",
        "value" : "WWBN AVideo es una plataforma de video de código abierto. Antes de la versión 24.0, se identificó una vulnerabilidad de ejecución remota de código (RCE) autenticada en AVideo relacionada con la funcionalidad de carga/importación de plugins. El problema permitía a un administrador autenticado subir un archivo ZIP especialmente diseñado que contenía archivos ejecutables del lado del servidor. Debido a la validación insuficiente del contenido de los archivos extraídos, el archivo se extraía directamente en un directorio de plugins accesible por la web, lo que permitía la ejecución arbitraria de código PHP. Este problema ha sido parcheado en la versión 24.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.0",
            "matchCriteriaId" : "7C8F82C6-8B38-41D1-ADA1-EBE2DF74F083"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/commit/b739aeeb9ce34aed9961d2c155d597810f8229db",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/releases/tag/24.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-v8jw-8w5p-23g3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29041",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:08.553",
      "lastModified" : "2026-03-09T20:20:58.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type verification when handling file uploads and does not adequately validate file extensions or enforce safe server-side storage restrictions. As a result, an authenticated low-privileged user can upload a crafted file containing executable code and subsequently execute arbitrary commands on the server. This issue has been patched in version 1.11.34."
      }, {
        "lang" : "es",
        "value" : "Chamilo es un sistema de gestión del aprendizaje. Antes de la versión 1.11.34, Chamilo LMS está afectado por una vulnerabilidad de ejecución remota de código autenticada causada por una validación incorrecta de los archivos subidos. La aplicación se basa únicamente en la verificación del tipo MIME al manejar las subidas de archivos y no valida adecuadamente las extensiones de archivo ni aplica restricciones seguras de almacenamiento en el servidor. Como resultado, un usuario autenticado con bajos privilegios puede subir un archivo manipulado que contiene código ejecutable y posteriormente ejecutar comandos arbitrarios en el servidor. Este problema ha sido parcheado en la versión 1.11.34."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.34",
            "matchCriteriaId" : "BF6714C4-3D58-43BF-A32C-6D436DB93E01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-4pc3-4w2v-vwx8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29046",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:08.740",
      "lastModified" : "2026-03-16T15:00:12.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header values and later maps them into CGI environment variables (HTTP_*). The parser did not strictly reject dangerous control characters in header lines and header values, including CR, LF, and NUL, and did not consistently defend against encoded forms such as %0d, %0a, and %00. This can enable header value confusion across parser boundaries and may create unsafe data in the CGI execution context. This issue has been patched in version 2.04."
      }, {
        "lang" : "es",
        "value" : "TinyWeb es un servidor web (HTTP, HTTPS) escrito en Delphi para Win32. Antes de la versión 2.04, TinyWeb acepta valores de encabezado de solicitud y luego los mapea en variables de entorno CGI (HTTP_*). El analizador no rechazaba estrictamente los caracteres de control peligrosos en las líneas de encabezado y los valores de encabezado, incluyendo CR, LF y NUL, y no se defendía consistentemente contra formas codificadas como %0d, %0a y %00. Esto puede permitir la confusión de valores de encabezado a través de los límites del analizador y puede crear datos inseguros en el contexto de ejecución CGI. Este problema ha sido parcheado en la versión 2.04."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-93"
        }, {
          "lang" : "en",
          "value" : "CWE-114"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ritlabs:tinyweb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.04",
            "matchCriteriaId" : "4B7867E0-22DE-4F76-BBB6-A7C6E1FD4231"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/maximmasiutin/TinyWeb/commit/53aa8b6e5146491d7be57920e3fc50d7a34e4d5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-r3gf-pg2c-m7mc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29093",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T04:16:08.940",
      "lastModified" : "2026-03-16T14:49:52.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WWBN AVideo is an open source video platform. Prior to version 24.0, the official docker-compose.yml publishes the memcached service on host port 11211 (0.0.0.0:11211) with no authentication, while the Dockerfile configures PHP to store all user sessions in that memcached instance. An attacker who can reach port 11211 can read, modify, or flush session data — enabling session hijacking, admin impersonation, and mass session destruction without any application-level authentication. This issue has been patched in version 24.0."
      }, {
        "lang" : "es",
        "value" : "WWBN AVideo es una plataforma de video de código abierto. Antes de la versión 24.0, el docker-compose.yml oficial publica el servicio memcached en el puerto de host 11211 (0.0.0.0:11211) sin autenticación, mientras que el Dockerfile configura PHP para almacenar todas las sesiones de usuario en esa instancia de memcached. Un atacante que puede alcanzar el puerto 11211 puede leer, modificar o vaciar datos de sesión — lo que permite el secuestro de sesión, la suplantación de administrador y la destrucción masiva de sesiones sin ninguna autenticación a nivel de aplicación. Este problema ha sido parcheado en la versión 24.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.0",
            "matchCriteriaId" : "7C8F82C6-8B38-41D1-ADA1-EBE2DF74F083"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/releases/tag/24.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-xxpw-32hf-q8v9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25877",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:28.230",
      "lastModified" : "2026-03-10T14:09:25.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs authorization checks based solely on the project_id parameter when handling chart-related operations (update, delete, etc.). No authorization check is performed against the chart_id itself. This allows an authenticated user who has access to any project to manipulate or access charts belonging to other users/ project. This issue has been patched in version 4.8.1."
      }, {
        "lang" : "es",
        "value" : "Chartbrew es una aplicación web de código abierto que puede conectarse directamente a bases de datos y APIs y usar los datos para crear gráficos. Antes de la versión 4.8.1, la aplicación realiza comprobaciones de autorización basadas únicamente en el parámetro project_id al manejar operaciones relacionadas con gráficos (actualizar, eliminar, etc.). No se realiza ninguna comprobación de autorización contra el propio chart_id. Esto permite a un usuario autenticado que tiene acceso a cualquier proyecto manipular o acceder a gráficos pertenecientes a otros usuarios/proyecto. Este problema ha sido parcheado en la versión 4.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.1",
            "matchCriteriaId" : "55A8DB77-A290-400C-B2C5-7D0C7C82F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fcr-x8x8-mrxc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25887",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:29.690",
      "lastModified" : "2026-03-10T14:07:21.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via the MongoDB dataset Query. This issue has been patched in version 4.8.1."
      }, {
        "lang" : "es",
        "value" : "Chartbrew es una aplicación web de código abierto que puede conectarse directamente a bases de datos y APIs y usar los datos para crear gráficos. Antes de la versión 4.8.1, existe una vulnerabilidad de ejecución remota de código a través de la consulta del conjunto de datos de MongoDB. Este problema ha sido parcheado en la versión 4.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.1",
            "matchCriteriaId" : "55A8DB77-A290-400C-B2C5-7D0C7C82F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-x4r6-prmw-7wvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25888",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:29.903",
      "lastModified" : "2026-03-10T14:05:56.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via a vulnerable API. This issue has been patched in version 4.8.1."
      }, {
        "lang" : "es",
        "value" : "Chartbrew es una aplicación web de código abierto que puede conectarse directamente a bases de datos y API y usar los datos para crear gráficos. Antes de la versión 4.8.1, existe una vulnerabilidad de ejecución remota de código a través de una API vulnerable. Este problema ha sido parcheado en la versión 4.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.1",
            "matchCriteriaId" : "55A8DB77-A290-400C-B2C5-7D0C7C82F7BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-875w-45c2-gxq8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27005",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:30.367",
      "lastModified" : "2026-03-10T14:04:01.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to Chartbrew (MySQL, PostgreSQL). This allows reading, modifying, or deleting data in those databases depending on the database user's privileges. This issue has been patched in version 4.8.3."
      }, {
        "lang" : "es",
        "value" : "Chartbrew es una aplicación web de código abierto que puede conectarse directamente a bases de datos y APIs y usar los datos para crear gráficos. Antes de la versión 4.8.3, un atacante no autenticado puede inyectar SQL arbitrario en consultas ejecutadas contra bases de datos conectadas a Chartbrew (MySQL, PostgreSQL). Esto permite leer, modificar o eliminar datos en esas bases de datos dependiendo de los privilegios del usuario de la base de datos. Este problema ha sido parcheado en la versión 4.8.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.3",
            "matchCriteriaId" : "1D77919D-8EA3-4E73-A89B-D9B83475C9BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-w5rh-v333-qq6c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27603",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:30.967",
      "lastModified" : "2026-03-10T14:02:36.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the chart filter endpoint POST /project/:project_id/chart/:chart_id/filter is missing both verifyToken and checkPermissions middleware, allowing unauthenticated users to access chart data from any team/project. This issue has been patched in version 4.8.4."
      }, {
        "lang" : "es",
        "value" : "Chartbrew es una aplicación web de código abierto que puede conectarse directamente a bases de datos y API y usar los datos para crear gráficos. Antes de la versión 4.8.4, el endpoint de filtro de gráficos POST /project/:project_id/chart/:chart_id/filter carece de los middleware verifyToken y checkPermissions, permitiendo a usuarios no autenticados acceder a datos de gráficos de cualquier equipo/proyecto. Este problema ha sido parcheado en la versión 4.8.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.4",
            "matchCriteriaId" : "C3C24A0D-9049-4B99-930F-20EE11FFE27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fhr-5vvc-p455",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27605",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:31.243",
      "lastModified" : "2026-03-10T14:01:09.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the application allows uploading files (project logos) without validating the file type or content. It trusts the extension provided by the user. These files are saved to the uploads/ directory and served statically. An attacker can upload an HTML file containing malicious JavaScript. Since authentication tokens are likely stored in localStorage (as they are returned in the API body), this XSS can lead to account takeover. This issue has been patched in version 4.8.4."
      }, {
        "lang" : "es",
        "value" : "Chartbrew es una aplicación web de código abierto que puede conectarse directamente a bases de datos y APIs y usar los datos para crear gráficos. Antes de la versión 4.8.4, la aplicación permite subir archivos (logotipos de proyectos) sin validar el tipo o el contenido del archivo. Confía en la extensión proporcionada por el usuario. Estos archivos se guardan en el directorio uploads/ y se sirven de forma estática. Un atacante puede subir un archivo HTML que contenga JavaScript malicioso. Dado que los tokens de autenticación probablemente se almacenan en localStorage (ya que se devuelven en el cuerpo de la API), este XSS puede llevar a la toma de control de la cuenta. Este problema ha sido parcheado en la versión 4.8.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.4",
            "matchCriteriaId" : "C3C24A0D-9049-4B99-930F-20EE11FFE27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-jf6m-hm53-c364",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28428",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:31.607",
      "lastModified" : "2026-04-20T12:57:06.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talishar's game endpoint validation logic allows any unauthenticated attacker to perform authenticated game actions — including sending chat messages and submitting game inputs — by supplying an empty authKey parameter (authKey=). The server-side validation uses a loose comparison that accepts an empty string as a valid credential, while correctly rejecting non-empty but incorrect keys. This asymmetry means the authentication mechanism can be completely bypassed without knowing any valid token. This issue has been patched in commit a9c218e."
      }, {
        "lang" : "es",
        "value" : "Talishar es un proyecto de Flesh and Blood creado por fans. Antes del commit a9c218e, una vulnerabilidad de omisión de autenticación en la lógica de validación del endpoint de juego de Talishar permite a cualquier atacante no autenticado realizar acciones de juego autenticadas — incluyendo el envío de mensajes de chat y la introducción de entradas de juego — al proporcionar un parámetro authKey vacío (authKey=). La validación del lado del servidor utiliza una comparación laxa que acepta una cadena vacía como credencial válida, mientras que rechaza correctamente las claves no vacías pero incorrectas. Esta asimetría significa que el mecanismo de autenticación puede ser completamente omitido sin conocer ningún token válido. Este problema ha sido parcheado en el commit a9c218e."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talishar:talishar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-02-22",
            "matchCriteriaId" : "EB6EC428-F449-46D5-B308-45979347E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Talishar/Talishar/commit/a9c218efa37756c9e7eed056fbff6ee03f79aefc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Talishar/Talishar/security/advisories/GHSA-2659-p579-wv83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28429",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:31.890",
      "lastModified" : "2026-04-20T12:54:48.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871, a Path Traversal vulnerability was identified in the gameName parameter. While the application's primary entry points implement input validation, the ParseGamestate.php component can be accessed directly as a standalone script. In this scenario, the absence of internal sanitization allows for directory traversal sequences (e.g., ../) to be processed, potentially leading to unauthorized file access. This issue has been patched in commit 6be3871."
      }, {
        "lang" : "es",
        "value" : "Talishar es un proyecto de Flesh and Blood creado por fans. Antes del commit 6be3871, una vulnerabilidad de salto de ruta fue identificada en el parámetro gameName. Aunque los puntos de entrada principales de la aplicación implementan validación de entrada, el componente ParseGamestate.PHP puede ser accedido directamente como un script independiente. En este escenario, la ausencia de saneamiento interno permite que secuencias de salto de directorio (p. ej., ../) sean procesadas, lo que podría llevar a un acceso no autorizado a archivos. Este problema ha sido parcheado en el commit 6be3871."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talishar:talishar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-02-22",
            "matchCriteriaId" : "EB6EC428-F449-46D5-B308-45979347E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Talishar/Talishar/commit/6be3871a14c192d1fb8146cdbc76f29f27c1cf48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Talishar/Talishar/security/advisories/GHSA-f386-xhcw-jrx8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28507",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:32.073",
      "lastModified" : "2026-03-16T14:43:24.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4."
      }, {
        "lang" : "es",
        "value" : "Idno es una plataforma de publicación social. Antes de la versión 1.6.4, existe una vulnerabilidad de ejecución remota de código a través de la escritura encadenada de archivos de importación y el salto de ruta de plantilla. Este problema ha sido parcheado en la versión 1.6.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:withknown:known:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "03C6A2FD-591E-4396-B7DF-AFE37782951B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/idno/idno/releases/tag/1.6.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/idno/idno/security/advisories/GHSA-37j7-56xc-c468",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28508",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:35.233",
      "lastModified" : "2026-03-16T14:03:38.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with the absence of a login requirement on the endpoint itself, this allows an attacker to force the server to make arbitrary outbound HTTP requests to any host, including internal network addresses and cloud instance metadata services, and retrieve the response content. This issue has been patched in version 1.6.4."
      }, {
        "lang" : "es",
        "value" : "Idno es una plataforma de publicación social. Antes de la versión 1.6.4, un error lógico en el flujo de autenticación de la API provoca que la protección CSRF en el endpoint del servicio de expansión de URL sea trivialmente eludida por cualquier atacante remoto no autenticado. Combinado con la ausencia de un requisito de inicio de sesión en el propio endpoint, esto permite a un atacante forzar al servidor a realizar solicitudes HTTP salientes arbitrarias a cualquier host, incluyendo direcciones de red internas y servicios de metadatos de instancias en la nube, y recuperar el contenido de la respuesta. Este problema ha sido parcheado en la versión 1.6.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:withknown:known:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "03C6A2FD-591E-4396-B7DF-AFE37782951B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/idno/idno/releases/tag/1.6.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/idno/idno/security/advisories/GHSA-fcrh-fqxh-6fx6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28509",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:35.590",
      "lastModified" : "2026-03-16T13:35:12.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7."
      }, {
        "lang" : "es",
        "value" : "LangBot es una plataforma global de bots de mensajería instantánea (IM) diseñada para LLMs. Antes de la versión 4.8.7, la interfaz de usuario web de LangBot renderiza HTML sin procesar suministrado por el usuario utilizando rehypeRaw, lo que puede llevar a una vulnerabilidad de cross-site scripting (XSS). Este problema ha sido parcheado en la versión 4.8.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langbot:langbot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.7",
            "matchCriteriaId" : "DB4F4942-F13E-40BD-8610-7E1244817691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langbot-app/LangBot/commit/614621ab7b84fe50da3c6137705cde5a99429866",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/langbot-app/LangBot/security/advisories/GHSA-w8gq-g4pc-xh3h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28675",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:35.900",
      "lastModified" : "2026-03-18T13:04:29.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings to clients. Additionally, login token material was exposed in UI/rendered responses and token rotation output. This issue has been patched in version 1.6.3-alpha."
      }, {
        "lang" : "es",
        "value" : "OpenSift es una herramienta de estudio de IA que tamiza grandes conjuntos de datos utilizando búsqueda semántica e IA generativa. Antes de la versión 1.6.3-alpha, algunos puntos finales devolvían cadenas de excepción en bruto a los clientes. Además, el material del token de inicio de sesión quedó expuesto en las respuestas de la interfaz de usuario/renderizadas y en la salida de rotación de tokens. Este problema ha sido parcheado en la versión 1.6.3-alpha."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "D1037E2F-1527-4C09-8D8D-78E56E6DDC78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSift/OpenSift/commit/1126e0a503876056a68a434e19f64158a5a4840b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/commit/de99b9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/pull/67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/releases/tag/v1.6.3-alpha",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/security/advisories/GHSA-667g-rvcj-w976",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28676",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:36.270",
      "lastModified" : "2026-03-18T13:02:04.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, multiple storage helpers used path construction patterns that did not uniformly enforce base-directory containment. This created path-injection risk in file read/write/delete flows if malicious path-like values were introduced. This issue has been patched in version 1.6.3-alpha."
      }, {
        "lang" : "es",
        "value" : "OpenSift es una herramienta de estudio de IA que tamiza grandes conjuntos de datos utilizando búsqueda semántica e IA generativa. Antes de la versión 1.6.3-alpha, múltiples asistentes de almacenamiento utilizaban patrones de construcción de rutas que no aplicaban uniformemente la contención del directorio base. Esto creaba riesgo de inyección de rutas en los flujos de lectura/escritura/eliminación de archivos si se introducían valores maliciosos similares a rutas. Este problema ha sido parcheado en la versión 1.6.3-alpha."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "D1037E2F-1527-4C09-8D8D-78E56E6DDC78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSift/OpenSift/commit/1126e0a503876056a68a434e19f64158a5a4840b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/commit/de99b9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/pull/67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/releases/tag/v1.6.3-alpha",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/security/advisories/GHSA-ww4m-c7hv-2rqv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28677",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:36.610",
      "lastModified" : "2026-03-18T12:59:04.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local host checks existed, missing restrictions for credentialed URLs, non-standard ports, and cross-host redirects left SSRF-class abuse paths in non-localhost deployments. This issue has been patched in version 1.6.3-alpha."
      }, {
        "lang" : "es",
        "value" : "OpenSift es una herramienta de estudio de IA que filtra grandes conjuntos de datos utilizando búsqueda semántica e IA generativa. Antes de la versión 1.6.3-alpha, el pipeline de ingesta de URL aceptaba URL remotas controladas por el usuario con restricciones de destino incompletas. Aunque existían comprobaciones de host privado/local, la falta de restricciones para URL con credenciales, puertos no estándar y redirecciones entre hosts dejaban rutas de abuso de clase SSRF en despliegues que no eran localhost. Este problema ha sido parcheado en la versión 1.6.3-alpha."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "D1037E2F-1527-4C09-8D8D-78E56E6DDC78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSift/OpenSift/commit/1126e0a503876056a68a434e19f64158a5a4840b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/commit/de99b9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/pull/67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/releases/tag/v1.6.3-alpha",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenSift/OpenSift/security/advisories/GHSA-5jfc-p787-2mf9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28679",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:36.977",
      "lastModified" : "2026-03-10T19:54:04.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. Prior to version 1.21.0, when a user requests a download, the application does not verify whether the requested file is located within the media source directory, which can result in sensitive system files being downloadable as well. This issue has been patched in version 1.21.0."
      }, {
        "lang" : "es",
        "value" : "Home-Gallery.org es una galería web de código abierto autoalojada para explorar fotos y videos personales. Antes de la versión 1.21.0, cuando un usuario solicita una descarga, la aplicación no verifica si el archivo solicitado se encuentra dentro del directorio de origen de medios, lo que puede resultar en que archivos sensibles del sistema también sean descargables. Este problema ha sido parcheado en la versión 1.21.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:home-gallery:homegallery:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.21.0",
            "matchCriteriaId" : "BF833E3A-4AA0-42A2-82D3-A3DB202EF43B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xemle/home-gallery/releases/tag/v1.21.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xemle/home-gallery/security/advisories/GHSA-xj65-hcj5-h6j3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28680",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:37.343",
      "lastModified" : "2026-03-10T19:53:22.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghostfolio is an open source wealth management software. Prior to version 2.245.0, an attacker can exploit the manual asset import feature to perform a full-read SSRF, allowing them to exfiltrate sensitive cloud metadata (IMDS) or probe internal network services. This issue has been patched in version 2.245.0."
      }, {
        "lang" : "es",
        "value" : "Ghostfolio es un software de gestión de patrimonio de código abierto. Antes de la versión 2.245.0, un atacante puede explotar la función de importación manual de activos para realizar un SSRF de lectura completa, lo que les permite exfiltrar metadatos sensibles de la nube (IMDS) o sondear servicios de red internos. Este problema ha sido parcheado en la versión 2.245.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostfol:ghostfolio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.245.0",
            "matchCriteriaId" : "F4607553-B018-447B-8D8F-D1FBD94E3A8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ghostfolio/ghostfolio/releases/tag/2.245.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ghostfolio/ghostfolio/security/advisories/GHSA-hhv6-c34h-pwgh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28681",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:37.710",
      "lastModified" : "2026-04-21T14:45:02.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 to before version 4.5.1, an attacker can manipulate the HTTP Host header on a password reset or account creation request. The confirmation link in the resulting email can then point to an attacker-controlled domain. Opening the link in the email is sufficient to pass the token to the attacker, who can then use it on the real IRRD instance to take over the account. A compromised account can then be used to modify RPSL objects maintained by the account's mntners and perform other account actions. If the user had two-factor authentication configured, which is required for users with override access, an attacker is not able to log in, even after successfully resetting the password. This issue has been patched in versions 4.4.5 and 4.5.1."
      }, {
        "lang" : "es",
        "value" : "Demonio de Internet Routing Registry versión 4 es un servidor de base de datos IRR, que procesa objetos IRR en formato RPSL. Desde la versión 4.4.0 hasta antes de la versión 4.4.5 y desde la versión 4.5.0 hasta antes de la versión 4.5.1, un atacante puede manipular el encabezado HTTP Host en una solicitud de restablecimiento de contraseña o creación de cuenta. El enlace de confirmación en el correo electrónico resultante puede entonces apuntar a un dominio controlado por el atacante. Abrir el enlace en el correo electrónico es suficiente para pasar el token al atacante, quien puede entonces usarlo en la instancia real de IRRD para tomar control de la cuenta. Una cuenta comprometida puede entonces ser utilizada para modificar objetos RPSL mantenidos por los mntners de la cuenta y realizar otras acciones de la cuenta. Si el usuario tenía la autenticación de dos factores configurada, lo cual es requerido para usuarios con acceso de anulación, un atacante no puede iniciar sesión, incluso después de restablecer la contraseña con éxito. Este problema ha sido parcheado en las versiones 4.4.5 y 4.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        }, {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_routing_registry_daemon_project:internet_routing_registry_daemon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "574BCDBF-F12E-409C-B62A-5EB3A0451BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internet_routing_registry_daemon_project:internet_routing_registry_daemon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "D3CAA62B-54C2-4D17-84A3-33366F007E0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/irrdnet/irrd/commit/8408e0f1b9f47eb2f2e712d6153e32194df05fbb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/irrdnet/irrd/commit/cf62df4a49d3891e80b2879d9b324d1af050000c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/irrdnet/irrd/security/advisories/GHSA-22m3-c7vp-49fj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://irrd.readthedocs.io/en/stable/releases/4.4.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://irrd.readthedocs.io/en/stable/releases/4.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28682",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:38.130",
      "lastModified" : "2026-03-09T18:50:41.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the upload status SSE implementation on /uploadStatus publishes global upload state to any authenticated listener and includes file_id values that are not scoped to the requesting user. This issue has been patched in version 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Gokapi es un servidor de intercambio de archivos autoalojado con expiración automática y soporte de cifrado. Antes de la versión 2.2.3, la implementación SSE del estado de carga en /uploadStatus publica el estado de carga global a cualquier oyente autenticado e incluye valores de file_id que no están acotados al usuario solicitante. Este problema ha sido parcheado en la versión 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forceu:gokapi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "8645BF69-6E20-4571-ABA4-A9C590D032C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Forceu/Gokapi/releases/tag/v2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Forceu/Gokapi/security/advisories/GHSA-c36c-7pc2-f2ph",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28683",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:38.443",
      "lastModified" : "2026-03-09T18:52:48.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads SVG and creates a hotlink for it, they can achieve stored XSS. This issue has been patched in version 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Gokapi es un servidor de intercambio de archivos autoalojado con expiración automática y soporte de cifrado. Antes de la versión 2.2.3, si un usuario autenticado malicioso sube un SVG y crea un enlace directo para él, puede lograr XSS almacenado. Este problema ha sido parcheado en la versión 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forceu:gokapi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "8645BF69-6E20-4571-ABA4-A9C590D032C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Forceu/Gokapi/releases/tag/v2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Forceu/Gokapi/security/advisories/GHSA-3c22-5j5m-4jq7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28685",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:38.770",
      "lastModified" : "2026-03-10T19:52:21.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kimai is a web-based multi-user time-tracking application. Prior to version 2.51.0, \"GET /api/invoices/{id}\" only checks the role-based view_invoice permission but does not verify the requesting user has access to the invoice's customer. Any user with ROLE_TEAMLEAD (which grants view_invoice) can read all invoices in the system, including those belonging to customers assigned to other teams. This issue has been patched in version 2.51.0."
      }, {
        "lang" : "es",
        "value" : "Kimai es una aplicación de seguimiento de tiempo multiusuario basada en web. Antes de la versión 2.51.0, 'GET /API/invoices/{id}' solo verifica el permiso view_invoice basado en roles, pero no verifica que el usuario solicitante tenga acceso al cliente de la factura. Cualquier usuario con ROLE_TEAMLEAD (que otorga view_invoice) puede leer todas las facturas en el sistema, incluyendo aquellas que pertenecen a clientes asignados a otros equipos. Este problema ha sido parcheado en la versión 2.51.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kimai:kimai:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.51.0",
            "matchCriteriaId" : "7EDBE56C-4861-486D-85FA-234F4CAA4437"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kimai/kimai/commit/a0601c8cb28fed1cca19051a8272425069ab758f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kimai/kimai/releases/tag/2.51.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kimai/kimai/security/advisories/GHSA-v33r-r6h2-8wr7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28785",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:39.693",
      "lastModified" : "2026-03-10T19:51:37.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghostfolio is an open source wealth management software. Prior to version 2.244.0, by bypassing symbol validation, an attacker can execute arbitrary SQL commands via the getHistorical() method, potentially allowing them to read, modify, or delete sensitive financial data for all users in the database. This issue has been patched in version 2.244.0."
      }, {
        "lang" : "es",
        "value" : "Ghostfolio es un software de gestión de patrimonio de código abierto. Antes de la versión 2.244.0, al eludir la validación de símbolos, un atacante puede ejecutar comandos SQL arbitrarios a través del método getHistorical(), lo que podría permitirle leer, modificar o eliminar datos financieros sensibles para todos los usuarios en la base de datos. Este problema ha sido parcheado en la versión 2.244.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostfol:ghostfolio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.244.0",
            "matchCriteriaId" : "B056AE0B-6D16-416F-A9A0-095BDF52880E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ghostfolio/ghostfolio/releases/tag/2.244.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/ghostfolio/ghostfolio/security/advisories/GHSA-m5cc-7jw5-34xp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28787",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:39.980",
      "lastModified" : "2026-03-10T19:51:16.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneUptime is a solution for monitoring and managing online services. In version 10.0.11 and prior, the WebAuthn authentication implementation does not store the challenge on the server side. Instead, the challenge is returned to the client and accepted back from the client request body during verification. This violates the WebAuthn specification (W3C Web Authentication Level 2, §13.4.3) and allows an attacker who has obtained a valid WebAuthn assertion (e.g., via XSS, MitM, or log exposure) to replay it indefinitely, completely bypassing the second-factor authentication. No known patches are available."
      }, {
        "lang" : "es",
        "value" : "OneUptime es una solución para monitorear y gestionar servicios en línea. En la versión 10.0.11 y anteriores, la implementación de autenticación WebAuthn no almacena el desafío en el lado del servidor. En su lugar, el desafío se devuelve al cliente y se acepta de nuevo desde el cuerpo de la solicitud del cliente durante la verificación. Esto viola la especificación WebAuthn (W3C Web Authentication Level 2, §13.4.3) y permite a un atacante que ha obtenido una aserción WebAuthn válida (por ejemplo, a través de XSS, MitM o exposición de registros) reproducirla indefinidamente, eludiendo completamente la autenticación de segundo factor. No hay parches conocidos disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hackerbay:oneuptime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.11",
            "matchCriteriaId" : "01B6B6BB-F995-4484-9B9B-D1B690822055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-gjjc-pcwp-c74m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28794",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:40.297",
      "lastModified" : "2026-03-10T19:48:05.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.6, a prototype pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthenticated, remote attackers to inject arbitrary properties into the global Object.prototype. Because this pollution persists for the lifetime of the Node.js process and affects all objects, it can lead to severe security breaches, including authentication bypass, denial of service, and potentially Remote Code Execution. This issue has been patched in version 1.13.6."
      }, {
        "lang" : "es",
        "value" : "oRPC es una herramienta que ayuda a construir APIs que son de tipo seguro de extremo a extremo y se adhieren a los estándares OpenAPI. Antes de la versión 1.13.6, existe una vulnerabilidad de contaminación de prototipos en el deserializador JSON RPC del paquete @orpc/client. La vulnerabilidad permite a atacantes remotos no autenticados inyectar propiedades arbitrarias en el Object.prototype global. Debido a que esta contaminación persiste durante la vida útil del proceso Node.js y afecta a todos los objetos, puede conducir a graves brechas de seguridad, incluyendo omisión de autenticación, denegación de servicio y potencialmente ejecución remota de código. Este problema ha sido parcheado en la versión 1.13.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orpc:orpc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.6",
            "matchCriteriaId" : "D29E8AD1-8425-4A68-BD81-0830EF0205E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/middleapi/orpc/commit/1dba06fc6f938c2486de303c2fa096bc1c8418b5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/middleapi/orpc/security/advisories/GHSA-m272-9rp6-32mc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29060",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:40.620",
      "lastModified" : "2026-03-09T18:52:32.457",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a registered user without privileges to create or modify file requests is able to create a short-lived API key that has the permission to do so. The user must be registered with Gokapi. If there are no users with access to the admin/upload menu, there is no impact. This issue has been patched in version 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Gokapi es un servidor de intercambio de archivos autoalojado con soporte para expiración automática y cifrado. Antes de la versión 2.2.3, un usuario registrado sin privilegios para crear o modificar solicitudes de archivos puede crear una clave API de corta duración que tiene permiso para hacerlo. El usuario debe estar registrado en Gokapi. Si no hay usuarios con acceso al menú de administración/carga, no hay impacto. Este problema ha sido parcheado en la versión 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forceu:gokapi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "8645BF69-6E20-4571-ABA4-A9C590D032C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Forceu/Gokapi/releases/tag/v2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Forceu/Gokapi/security/advisories/GHSA-m2hx-wjxc-9fp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29061",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:40.903",
      "lastModified" : "2026-03-09T18:50:07.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a privilege escalation vulnerability in the user rank demotion logic allows a demoted user's existing API keys to retain ApiPermManageFileRequests and ApiPermManageLogs permissions, enabling continued access to upload-request management and log viewing endpoints after the user has been stripped of all privileges. This issue has been patched in version 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Gokapi es un servidor de intercambio de archivos autoalojado con expiración automática y soporte de cifrado. Antes de la versión 2.2.3, una vulnerabilidad de escalada de privilegios en la lógica de degradación de rango de usuario permite que las claves API existentes de un usuario degradado retengan los permisos ApiPermManageFileRequests y ApiPermManageLogs, lo que permite el acceso continuo a los puntos finales de gestión de solicitudes de carga y visualización de registros después de que al usuario se le hayan retirado todos los privilegios. Este problema ha sido parcheado en la versión 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forceu:gokapi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "8645BF69-6E20-4571-ABA4-A9C590D032C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Forceu/Gokapi/releases/tag/v2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Forceu/Gokapi/security/advisories/GHSA-q658-hfpg-35qc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29084",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T05:16:41.180",
      "lastModified" : "2026-03-09T18:53:50.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts credential-bearing requests without CSRF protection mechanisms tied to the browser session context. The handler parses form values directly and creates a session on successful credential validation. This issue has been patched in version 2.2.3."
      }, {
        "lang" : "es",
        "value" : "Gokapi es un servidor de intercambio de archivos autoalojado con expiración automática y soporte de cifrado. Antes de la versión 2.2.3, el flujo de inicio de sesión acepta solicitudes que contienen credenciales sin mecanismos de protección CSRF vinculados al contexto de la sesión del navegador. El gestor analiza los valores del formulario directamente y crea una sesión tras la validación exitosa de las credenciales. Este problema ha sido parcheado en la versión 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forceu:gokapi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "8645BF69-6E20-4571-ABA4-A9C590D032C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Forceu/Gokapi/releases/tag/v2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Forceu/Gokapi/security/advisories/GHSA-hcff-qv74-7hr4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1128",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-03-06T06:15:57.750",
      "lastModified" : "2026-04-15T14:42:29.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could allow attackers to make a logged in admin remove them via a CSRF attack"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress WP eCommerce hasta la versión 3.15.1 no cuenta con una comprobación CSRF al eliminar cupones, lo que podría permitir a los atacantes forzar a un administrador con sesión iniciada a eliminarlos mediante un ataque CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/35010d36-f985-4121-b7ee-c97edf724a7f/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2446",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-03-06T06:15:57.880",
      "lastModified" : "2026-04-15T14:42:29.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PowerPack for LearnDash WordPress plugin before 1.3.0 does not have authorization and CRSF checks in an AJAX action, allowing unauthenticated users to update arbitrary WordPress options (such as default_role etc) and create arbitrary admin users"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress PowerPack para LearnDash anterior a la versión 1.3.0 no tiene comprobaciones de autorización y CRSF en una acción AJAX, lo que permite a usuarios no autenticados actualizar opciones arbitrarias de WordPress (como default_role, etc.) y crear usuarios administradores arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/cbc95cea-e5d4-4874-add6-c8c728b683b7/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28438",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:15:58.770",
      "lastModified" : "2026-03-10T19:47:34.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements (ALTER TABLE). So, in the application code, if the table name is provided by an untrusted upstream, it expose vulnerability to SQL injection when target schema change. This issue has been patched in version 0.3.34."
      }, {
        "lang" : "es",
        "value" : "CocoIndex es un framework de transformación de datos para IA. Antes de la versión 0.3.34, el conector de destino de Doris no verificaba el nombre de tabla configurado antes de crear algunas sentencias SQL (ALTER TABLE). Así, en el código de la aplicación, si el nombre de la tabla es proporcionado por una fuente no confiable, expone una vulnerabilidad a la inyección SQL cuando el esquema de destino cambia. Este problema ha sido parcheado en la versión 0.3.34."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cocoindex:cocoindex:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.34",
            "matchCriteriaId" : "5CD7ADBE-280C-4727-95C5-A7FA9CB8326B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cocoindex-io/cocoindex/commit/ba2fc4a89e22d35572c64bd2990737c7913b0729",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cocoindex-io/cocoindex/security/advisories/GHSA-59g6-v3vg-f7wc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28795",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:00.293",
      "lastModified" : "2026-03-10T19:45:25.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze, and visualize data through natural language conversations. Prior to version 0.2.2, the save_report tool in openchatbi/tool/save_report.py suffers from a critical path traversal vulnerability due to insufficient input sanitization of the file_format parameter. This issue has been patched in version 0.2.2."
      }, {
        "lang" : "es",
        "value" : "OpenChatBI es una herramienta de BI inteligente basada en chat, impulsada por grandes modelos de lenguaje, diseñada para ayudar a los usuarios a consultar, analizar y visualizar datos a través de conversaciones en lenguaje natural. Antes de la versión 0.2.2, la herramienta save_report en openchatbi/tool/save_report.py sufre de una crítica vulnerabilidad de salto de ruta debido a una sanitización insuficiente de la entrada del parámetro file_format. Este problema ha sido parcheado en la versión 0.2.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zhongyu09:openchatbi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.2",
            "matchCriteriaId" : "DC740845-F197-49A6-9759-A538EEAECFFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhongyu09/openchatbi/commit/372a7e861da5159c3106d64d6f6edf8284db8c75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zhongyu09/openchatbi/issues/10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/zhongyu09/openchatbi/pull/12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/zhongyu09/openchatbi/security/advisories/GHSA-vmwq-8g8c-jm79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28799",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:00.527",
      "lastModified" : "2026-03-10T19:44:11.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework (evsub.c) that is triggered during presence unsubscription (SUBSCRIBE with Expires=0). This issue has been patched in version 2.17."
      }, {
        "lang" : "es",
        "value" : "PJSIP es una librería de comunicación multimedia gratuita y de código abierto escrita en C. Antes de la versión 2.17, existe una vulnerabilidad de uso después de liberación de heap en el framework de suscripción de eventos de PJSIP (evsub.c) que se activa durante la anulación de suscripción de presencia (SUBSCRIBE con Expires=0). Este problema ha sido parcheado en la versión 2.17."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "117AFEC4-36E1-424F-B2A3-6EC94FBBDF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/e06ff6c64741cc1675fd3296615910f532f6b1a1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-8fj4-fv9f-hjpc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28800",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:00.700",
      "lastModified" : "2026-03-10T19:42:54.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives access to any user with the permission to send message in said channel access to do anything on their computer. This includes keyboard and mouse inputs and full file access. This issue has been patched in version 1.1.0."
      }, {
        "lang" : "es",
        "value" : "Natro Macro es un macro de código abierto para Bee Swarm Simulator escrito en AutoHotkey. Antes de la versión 1.1.0, cualquier persona que tuviera Discord Remote Control configurado en un canal no privado otorgaba acceso a cualquier usuario con permiso para enviar mensajes en dicho canal para hacer cualquier cosa en su ordenador. Esto incluye entradas de teclado y ratón y acceso completo a los archivos. Este problema ha sido parcheado en la versión 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natroteam:natro_macro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "D82B08C5-1B84-4F2F-82F7-32C5DF3DC40D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NatroTeam/NatroMacro/security/advisories/GHSA-ph9r-2qjm-ghvg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28801",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:00.883",
      "lastModified" : "2026-03-10T19:41:21.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, any ahk code contained inside of a pattern or path file is executed by the macro. Since users commonly share path/pattern files, an attacker could share a file containing malicious code, which is then executed by the program. This code can operate in silence alongside the pattern, running in the background to do whatever the attacker pleases. This issue has been patched in version 1.1.0."
      }, {
        "lang" : "es",
        "value" : "Natro Macro es un macro de código abierto para Bee Swarm Simulator escrito en AutoHotkey. Antes de la versión 1.1.0, cualquier código ahk contenido dentro de un archivo de patrón o ruta es ejecutado por el macro. Dado que los usuarios suelen compartir archivos de ruta/patrón, un atacante podría compartir un archivo que contiene código malicioso, el cual es luego ejecutado por el programa. Este código puede operar en silencio junto con el patrón, ejecutándose en segundo plano para hacer lo que el atacante desee. Este problema ha sido parcheado en la versión 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:natroteam:natro_macro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "D82B08C5-1B84-4F2F-82F7-32C5DF3DC40D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NatroTeam/NatroMacro/security/advisories/GHSA-c5gm-vfvf-pwhx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28802",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:01.053",
      "lastModified" : "2026-03-09T21:20:56.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty signature was passing the signature verification step without any changes to the application code when a failure was expected.. This issue has been patched in version 1.6.7."
      }, {
        "lang" : "es",
        "value" : "Authlib es una librería de Python que construye servidores OAuth y OpenID Connect. Desde la versión 1.6.5 hasta antes de la versión 1.6.7, pruebas anteriores que implicaban pasar un JWT malicioso que contenía alg: none y una firma vacía estaban pasando el paso de verificación de firma sin ningún cambio en el código de la aplicación cuando se esperaba un fallo. Este problema ha sido parcheado en la versión 1.6.7."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:authlib:authlib:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.5",
            "versionEndExcluding" : "1.6.7",
            "matchCriteriaId" : "1DBAF459-BB6F-4AF1-935B-D9A8D40C643A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/authlib/authlib/commit/a61c2acb807496e67f32051b5f1b1d5ccf8f0a75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/authlib/authlib/commit/b87c32ed07b8ae7f805873e1c9cafd1016761df7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/authlib/authlib/security/advisories/GHSA-7wc2-qxgw-g8gg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28804",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:01.220",
      "lastModified" : "2026-03-10T19:39:37.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5."
      }, {
        "lang" : "es",
        "value" : "pypdf es una librería PDF de Python puro, gratuita y de código abierto. Antes de la versión 6.7.5, un atacante que utiliza esta vulnerabilidad puede crear un PDF que provoca tiempos de ejecución prolongados. Esto requiere acceder a un flujo que utiliza el filtro /ASCIIHexDecode. Este problema ha sido parcheado en la versión 6.7.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.5",
            "matchCriteriaId" : "83CAEAE3-BC5F-4A03-824F-D6B80B1A36A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/py-pdf/pypdf/commit/648c627d2657447dfb1773412af05a0a5103b98f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/pull/3666",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/releases/tag/6.7.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/py-pdf/pypdf/security/advisories/GHSA-9m86-7pmv-2852",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29038",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:01.393",
      "lastModified" : "2026-03-10T19:38:06.313",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, there is a reflected cross-site scripting (XSS) vulnerability identified in the /rss/tag/ endpoint of changedetection.io. The tag_uuid path parameter is reflected directly in the HTTP response body without HTML escaping. Since Flask returns text/html by default for plain string responses, the browser parses and executes injected JavaScript. This issue has been patched in version 0.54.4."
      }, {
        "lang" : "es",
        "value" : "changedetection.io es una herramienta gratuita de código abierto para la detección de cambios en páginas web. Antes de la versión 0.54.4, existe una vulnerabilidad de cross-site scripting (XSS) reflejado identificada en el endpoint /rss/tag/ de changedetection.io. El parámetro de ruta tag_uuid se refleja directamente en el cuerpo de la respuesta HTTP sin escape HTML. Dado que Flask devuelve text/html por defecto para respuestas de cadena de texto plano, el navegador analiza y ejecuta JavaScript inyectado. Este problema ha sido parcheado en la versión 0.54.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.54.4",
            "matchCriteriaId" : "B4C1D55D-C25D-433D-98EA-A9C3336210DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/commit/ec7d56f85d1e9690fca7cb4711c1fb20dffec780",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-8whx-v8qq-pq64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29039",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:01.573",
      "lastModified" : "2026-03-10T19:37:32.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io application allows users to specify XPath expressions as content filters via the include_filters field. These XPath expressions are processed using the elementpath library which implements XPath 3.0/3.1 specification. XPath 3.0 includes the unparsed-text() function which can read arbitrary files from the filesystem. The application does not validate or sanitize XPath expressions to block dangerous functions, allowing an attacker to read any file accessible to the application process. This issue has been patched in version 0.54.4."
      }, {
        "lang" : "es",
        "value" : "changedetection.io es una herramienta gratuita de código abierto para la detección de cambios en páginas web. Antes de la versión 0.54.4, la aplicación changedetection.io permite a los usuarios especificar expresiones XPath como filtros de contenido a través del campo include_filters. Estas expresiones XPath se procesan utilizando la librería elementpath que implementa la especificación XPath 3.0/3.1. XPath 3.0 incluye la función unparsed-text() que puede leer archivos arbitrarios del sistema de archivos. La aplicación no valida ni sanea las expresiones XPath para bloquear funciones peligrosas, permitiendo a un atacante leer cualquier archivo accesible al proceso de la aplicación. Este problema ha sido parcheado en la versión 0.54.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.54.4",
            "matchCriteriaId" : "B4C1D55D-C25D-433D-98EA-A9C3336210DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/commit/417d57e5749441e4be9acc4010369bded805d66f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-6fmw-82m7-jq6p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29042",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:01.743",
      "lastModified" : "2026-03-10T19:32:49.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.15.20, the Nuclio Shell Runtime component contains a command injection vulnerability in how it processes user-supplied arguments. When a function is invoked via HTTP, the runtime reads the X-Nuclio-Arguments header and directly incorporates its value into shell commands without any validation or sanitization. This issue has been patched in version 1.15.20."
      }, {
        "lang" : "es",
        "value" : "Nuclio es un 'Serverless' framework para eventos en tiempo real y procesamiento de datos. Antes de la versión 1.15.20, el componente Nuclio Shell Runtime contiene una vulnerabilidad de inyección de comandos en la forma en que procesa los argumentos proporcionados por el usuario. Cuando se invoca una función a través de HTTP, el runtime lee el encabezado X-Nuclio-Arguments e incorpora directamente su valor en comandos de shell sin ninguna validación o saneamiento. Este problema ha sido parcheado en la versión 1.15.20."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-75"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iguazio:nuclio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15.20",
            "matchCriteriaId" : "CA51227C-DF77-4ABD-AE30-642111BC7A15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nuclio/nuclio/commit/5352d7e16cf92f4350a2f8d806c4b80b626b5c5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nuclio/nuclio/pull/4030",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nuclio/nuclio/releases/tag/1.15.20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/nuclio/nuclio/security/advisories/GHSA-95fj-3w7g-4r27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29048",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:01.920",
      "lastModified" : "2026-03-09T21:23:43.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of version 1.18.0. Due to inconsistent output encoding at several points within the software, malicious scripts could be injected and executed in the context of the user's browser. This issue has been patched in version 1.18.1."
      }, {
        "lang" : "es",
        "value" : "HumHub es una Red Social Empresarial de Código Abierto. En la versión 1.18.0, se identificó una vulnerabilidad de cross-site scripting en el componente Button de la versión 1.18.0. Debido a una codificación de salida inconsistente en varios puntos dentro del software, se podrían inyectar y ejecutar scripts maliciosos en el contexto del navegador del usuario. Este problema ha sido parcheado en la versión 1.18.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:humhub:humhub:1.18.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "074A6C7E-FBD1-4735-95CE-9C4972DB64B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/humhub/humhub/commit/bd06ab4c75f6c65295ee3e1ce3643437e8f9d10a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/humhub/humhub/pull/8039",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/humhub/humhub/releases/tag/v1.18.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/humhub/humhub/security/advisories/GHSA-qxjh-478x-23gm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29049",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:02.093",
      "lastModified" : "2026-03-10T19:28:57.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "melange allows users to build apk packages using declarative pipelines. In version 0.40.5 and prior, melange update-cache downloads URIs from build configs via io.Copy without any size limit or HTTP client timeout (pkg/renovate/cache/cache.go). An attacker-controlled URI in a melange config can cause unbounded disk writes, exhausting disk on the build runne. There is no known patch publicly available."
      }, {
        "lang" : "es",
        "value" : "melange permite a los usuarios construir paquetes apk utilizando pipelines declarativos. En la versión 0.40.5 y anteriores, melange update-cache descarga URIs de configuraciones de compilación a través de io.Copy sin ningún límite de tamaño o tiempo de espera del cliente HTTP (pkg/renovate/cache/cache.go). Una URI controlada por un atacante en una configuración de melange puede causar escrituras de disco ilimitadas, agotando el disco en el ejecutor de compilación. No hay ningún parche conocido disponible públicamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainguard:melange:*:*:*:*:*:go:*:*",
            "versionEndIncluding" : "0.40.5",
            "matchCriteriaId" : "03E019F3-C40D-4A30-9A0C-8B4CC7D2FF8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chainguard-dev/melange/security/advisories/GHSA-7rp8-r62p-q6wc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29058",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:02.267",
      "lastModified" : "2026-03-10T19:14:24.553",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, data exfiltration (e.g., configuration secrets, internal keys, credentials), and service disruption. This issue has been patched in version 7.0."
      }, {
        "lang" : "es",
        "value" : "AVideo es un software de plataforma para compartir videos. Antes de la versión 7.0, un atacante no autenticado puede ejecutar comandos arbitrarios del sistema operativo en el servidor inyectando sustitución de comandos de shell en el parámetro GET base64Url. Esto puede llevar a un compromiso total del servidor, exfiltración de datos (por ejemplo, secretos de configuración, claves internas, credenciales) e interrupción del servicio. Este problema ha sido parcheado en la versión 7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo-encoder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "E3524E39-DF7C-4A58-9A7C-E7932948818C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-9j26-99jh-v26q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29065",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:02.437",
      "lastModified" : "2026-03-10T20:00:57.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4."
      }, {
        "lang" : "es",
        "value" : "changedetection.io es una herramienta gratuita de código abierto para la detección de cambios en páginas web. Antes de la versión 0.54.4, una vulnerabilidad Zip Slip en la funcionalidad de restauración de copias de seguridad permite la sobrescritura arbitraria de archivos mediante salto de ruta en archivos ZIP subidos. Este problema ha sido parcheado en la versión 0.54.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.54.4",
            "matchCriteriaId" : "B4C1D55D-C25D-433D-98EA-A9C3336210DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/commit/1d7d812eb0faab37042246e2fbce04f29bb1b3aa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-25g8-2mcf-fcx9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29068",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T07:16:02.607",
      "lastModified" : "2026-03-10T19:11:53.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17."
      }, {
        "lang" : "es",
        "value" : "PJSIP es una librería de comunicación multimedia de código abierto y gratuita escrita en C. Antes de la versión 2.17, existe una vulnerabilidad de desbordamiento de búfer de pila cuando pjmedia-codec analiza una carga útil RTP que contiene más tramas de las que pueden contener las tramas proporcionadas por el llamador. Este problema ha sido parcheado en la versión 2.17."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17",
            "matchCriteriaId" : "117AFEC4-36E1-424F-B2A3-6EC94FBBDF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/6c9024511bf5307ff72efde1f90c9a2a226d8967",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-pqww-jrxr-457f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29059",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T08:16:26.437",
      "lastModified" : "2026-04-14T17:48:25.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path traversal vulnerability exists in Windmill's get_log_file endpoint \"(/api/w/{workspace}/jobs_u/get_log_file/{filename})\". The filename parameter is concatenated into a file path without sanitization, allowing an attacker to read arbitrary files on the server using ../ sequences. This issue has been patched in version 1.603.3."
      }, {
        "lang" : "es",
        "value" : "Windmill es una plataforma para desarrolladores de código abierto para código interno: APIs, trabajos en segundo plano, flujos de trabajo e interfaces de usuario. Antes de la versión 1.603.3, existe una vulnerabilidad de salto de ruta sin autenticación en el endpoint get_log_file de Windmill '(/api/w/{workspace}/jobs_u/get_log_file/{filename})'. El parámetro filename se concatena en una ruta de archivo sin saneamiento, permitiendo a un atacante leer archivos arbitrarios en el servidor usando secuencias ../. Este problema ha sido parcheado en la versión 1.603.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:windmill:windmill:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.603.3",
            "matchCriteriaId" : "57A7E9DC-B8E8-428E-82F9-A942484F5906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/windmill-labs/windmill/releases/tag/v1.603.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/windmill-labs/windmill/security/advisories/GHSA-24fr-44f8-fqwg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Chocapikk/Windfall",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29062",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T08:16:26.603",
      "lastModified" : "2026-03-10T19:05:19.067",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jackson-core contains core low-level incremental (\"streaming\") parser and generator abstractions used by Jackson Data Processor. From version 3.0.0 to before version 3.1.0, the UTF8DataInputJsonParser, which is used when parsing from a java.io.DataInput source, bypasses the maxNestingDepth constraint (default: 500) defined in StreamReadConstraints. A similar issue was found in ReaderBasedJsonParser. This allows a user to supply a JSON document with excessive nesting, which can cause a StackOverflowError when the structure is processed, leading to a Denial of Service (DoS). This issue has been patched in version 3.1.0."
      }, {
        "lang" : "es",
        "value" : "jackson-core contiene abstracciones de analizador y generador incrementales ('streaming') de bajo nivel, fundamentales, utilizadas por Jackson Data Processor. Desde la versión 3.0.0 hasta antes de la versión 3.1.0, el UTF8DataInputJsonParser, que se utiliza al analizar desde una fuente java.io.DataInput, omite la restricción maxNestingDepth (predeterminado: 500) definida en StreamReadConstraints. Se encontró un problema similar en ReaderBasedJsonParser. Esto permite a un usuario proporcionar un documento JSON con anidamiento excesivo, lo que puede causar un StackOverflowError cuando se procesa la estructura, llevando a una Denegación de Servicio (DoS). Este problema ha sido parcheado en la versión 3.1.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "AA6DD668-601D-4399-88DE-4D0F34EA9206"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FasterXML/jackson-core/commit/8b25fd67f20583e75fb09564ce1eaab06cd5a902",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-core/pull/1554",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-6v53-7c9g-w56r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29073",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T08:16:26.763",
      "lastModified" : "2026-03-10T19:04:03.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Prior to version 3.6.0, the /api/query/sql lets a user run sql directly, but it only checks basic auth, not admin rights, any logged-in user, even readers, can run any sql query on the database. This issue has been patched in version 3.6.0."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Antes de la versión 3.6.0, la API /api/query/sql permite a un usuario ejecutar SQL directamente, pero solo verifica la autenticación básica, no los derechos de administrador; cualquier usuario autenticado, incluso los lectores, puede ejecutar cualquier consulta SQL en la base de datos. Este problema ha sido parcheado en la versión 3.6.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.9",
            "matchCriteriaId" : "B3E43B15-5B6B-4A0C-8940-D9291E75ACF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-jqwg-75qf-vmf9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29074",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T08:16:26.920",
      "lastModified" : "2026-03-10T19:02:54.257",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML with custom entities, without guards against entity expansion or recursion. This can result in a small XML file (811 bytes) stalling the application and even crashing the Node.js process with JavaScript heap out of memory. This issue has been patched in versions 2.8.1, 3.3.3, and 4.0.1."
      }, {
        "lang" : "es",
        "value" : "SVGO, abreviatura de SVG Optimizer, es una librería de Node.js y una aplicación de línea de comandos para optimizar archivos SVG. Desde la versión 2.1.0 hasta antes de la versión 2.8.1, desde la versión 3.0.0 hasta antes de la versión 3.3.3, y antes de la versión 4.0.1, SVGO acepta XML con entidades personalizadas, sin protecciones contra la expansión o recursión de entidades. Esto puede resultar en que un archivo XML pequeño (811 bytes) bloquee la aplicación e incluso colapse el proceso de Node.js con agotamiento de memoria del heap de JavaScript. Este problema ha sido corregido en las versiones 2.8.1, 3.3.3 y 4.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svgo:svgo:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "9D99C9CE-B129-4A28-81C1-D9D05B9D76A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svgo:svgo:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "5883275C-B31D-48E7-91F3-5D21C9D52FFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svgo:svgo:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "7553DDA9-8F92-4A46-844E-3DF65F3E2847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29183",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T08:16:27.090",
      "lastModified" : "2026-03-10T19:02:31.160",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Prior to version 3.5.9, an unauthenticated reflected XSS vulnerability exists in the dynamic icon API endpoint \"GET /api/icon/getDynamicIcon\" when type=8, attacker-controlled content is embedded into SVG output without escaping. Because the endpoint is unauthenticated and returns image/svg+xml, a crafted URL can inject executable SVG/HTML event handlers (for example onerror) and run JavaScript in the SiYuan web origin. This can be chained to perform authenticated API actions and exfiltrate sensitive data when a logged-in user opens the malicious link. This issue has been patched in version 3.5.9."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Antes de la versión 3.5.9, existe una vulnerabilidad XSS reflejada no autenticada en el endpoint de la API de icono dinámico 'GET /api/icon/getDynamicIcon' cuando type=8, el contenido controlado por el atacante se incrusta en la salida SVG sin escapar. Debido a que el endpoint no está autenticado y devuelve image/svg+xml, una URL manipulada puede inyectar manejadores de eventos SVG/HTML ejecutables (por ejemplo, onerror) y ejecutar JavaScript en el origen web de SiYuan. Esto puede encadenarse para realizar acciones de API autenticadas y exfiltrar datos sensibles cuando un usuario autenticado abre el enlace malicioso. Este problema ha sido parcheado en la versión 3.5.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.9",
            "matchCriteriaId" : "B3DC4A6C-514B-4B80-AA6D-5C410717D2EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6865-qjcf-286f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2330",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-03-06T08:16:27.253",
      "lastModified" : "2026-03-09T13:35:34.633",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authentication. An unauthenticated attacker could place a manipulated parameter file that becomes active after a reboot, allowing modification of critical device settings, including network configuration and application parameters."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede acceder a áreas restringidas del sistema de archivos en el dispositivo a través de la interfaz REST de CROWN debido a una aplicación incompleta de la lista blanca. Ciertos directorios destinados a pruebas internas no estaban cubiertos por la lista blanca y son accesibles sin autenticación. Un atacante no autenticado podría colocar un archivo de parámetros manipulado que se activa después de un reinicio, permitiendo la modificación de configuraciones críticas del dispositivo, incluyendo la configuración de red y los parámetros de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.json",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.pdf",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/psirt",
        "source" : "psirt@sick.de"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2331",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2026-03-06T08:16:27.450",
      "lastModified" : "2026-03-09T13:35:34.633",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede realizar operaciones de lectura y escritura no autenticadas en áreas sensibles del sistema de archivos a través del acceso a archivos de AppEngine sobre HTTP debido a restricciones de acceso inadecuadas. Un directorio crítico del sistema de archivos fue expuesto involuntariamente a través de la función de acceso a archivos basada en HTTP, permitiendo el acceso sin autenticación. Esto incluye archivos de parámetros del dispositivo, permitiendo a un atacante leer y modificar la configuración de la aplicación, incluyendo contraseñas definidas por el cliente. Además, la exposición del directorio de la aplicación personalizada puede permitir la ejecución de código Lua arbitrario dentro del entorno aislado de AppEngine."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@sick.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.first.org/cvss/calculator/3.1",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.json",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.pdf",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
        "source" : "psirt@sick.de"
      }, {
        "url" : "https://www.sick.com/psirt",
        "source" : "psirt@sick.de"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2830",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-06T08:16:27.607",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin WP All Import – Drag &amp; Drop Import para CSV, XML, Excel &amp; Google Sheets para WordPress es vulnerable a cross-site scripting reflejado a través del parámetro 'filepath' en todas las versiones hasta la 4.0.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-all-import/trunk/controllers/admin/import.php#L185",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-all-import/trunk/libraries/XmlImportTemplate.php#L53",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-all-import/trunk/libraries/XmlImportTemplateCodeGenerator.php#L283",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3474757/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/afc85535-962d-479d-8580-9d02f7412930?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23925",
      "sourceIdentifier" : "security@zabbix.com",
      "published" : "2026-03-06T09:15:56.100",
      "lastModified" : "2026-03-09T13:35:34.633",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions."
      }, {
        "lang" : "es",
        "value" : "Un usuario autenticado de Zabbix (rol de usuario) con permisos de escritura de plantillas/hosts puede crear objetos a través de la API configuration.import. Esto puede llevar a una pérdida de confidencialidad al crear hosts no autorizados. Tenga en cuenta que el rol de usuario normalmente no es suficiente para crear y editar plantillas/hosts, incluso con permisos de escritura."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security@zabbix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:H/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zabbix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.zabbix.com/browse/ZBX-27567",
        "source" : "security@zabbix.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3589",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-03-06T10:16:22.497",
      "lastModified" : "2026-04-15T14:42:29.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress WooCommerce desde las versiones 5.4.0 hasta la 10.5.2 no gestiona correctamente las solicitudes por lotes, lo que podría permitir a usuarios no autenticados realizar una llamada de administrador autenticado a puntos finales REST que no sean de tienda/WC, y crear usuarios administradores arbitrarios a través de un ataque CSRF, por ejemplo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.woocommerce.com/2026/03/02/store-api-vulnerability-patched-in-woocommerce-5-4/",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/53ded097-274d-4850-82ee-620bf02f7553/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1468",
      "sourceIdentifier" : "cvd@cert.pl",
      "published" : "2026-03-06T11:16:08.613",
      "lastModified" : "2026-04-27T19:22:08.623",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. An attacker can craft special website, which when visited by the victim, will automatically send a POST request with victim's privileges.\nThis software does not implement any protection against this type of attack. All forms available in this software are potentially vulnerable.\n\nThe vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable."
      }, {
        "lang" : "es",
        "value" : "QuickCMS es vulnerable a la falsificación de petición en sitios cruzados en múltiples puntos finales. Un atacante puede crear un sitio web especial que, al ser visitado por la víctima, enviará automáticamente una petición POST con los privilegios de la víctima.\nEste software no implementa ninguna protección contra este tipo de ataque. Todos los formularios disponibles en este software son potencialmente vulnerables.\n\nEl proveedor fue notificado con antelación sobre esta vulnerabilidad, pero no respondió con los detalles de la vulnerabilidad o el rango de versiones vulnerables. Solo la versión 6.8 fue probada y confirmada como vulnerable; otras versiones no fueron probadas y también podrían ser vulnerables."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cvd@cert.pl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cvd@cert.pl",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.pl/posts/2026/03/CVE-2026-1468",
        "source" : "cvd@cert.pl"
      }, {
        "url" : "https://opensolution.org/cms-system-quick-cms.html",
        "source" : "cvd@cert.pl"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28080",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-06T12:15:54.890",
      "lastModified" : "2026-04-28T19:37:26.883",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Rank Math Rank Math SEO PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO PRO: from n/a through 3.0.95."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización faltante en Rank Math Rank Math SEO PRO permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Rank Math SEO PRO: desde n/a hasta 3.0.95."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/wordpress/plugin/seo-by-rank-math-pro/vulnerability/wordpress-rank-math-seo-pro-plugin-3-0-95-broken-access-control-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28106",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2026-03-06T12:15:55.063",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20."
      }, {
        "lang" : "es",
        "value" : "Redirección de URL a sitio no confiable ('Redirección abierta') vulnerabilidad en Kings Plugins B2BKing Premium permite Phishing. Este problema afecta a B2BKing Premium: desde n/a antes de 5.4.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/wordpress/plugin/b2bking/vulnerability/wordpress-b2bking-premium-plugin-5-3-80-open-redirection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1799",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-06T15:16:09.687",
      "lastModified" : "2026-03-06T15:16:09.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate has been determined not to be a valid vulnerability. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26051",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T15:16:09.973",
      "lastModified" : "2026-05-05T18:59:55.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales de WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a la escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga informados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvm:mobiliti_e-mobi.hu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4271D7A-DDE7-42F8-8E56-9DE19FC792D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://mobiliti.hu/emobilitas/ugyfeltamogatas/ugyfelszolgalat",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2752",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-03-06T15:16:10.987",
      "lastModified" : "2026-03-10T18:18:49.663",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and third-party library references (e.g., System.Data.SQLite), which may assist attackers in mapping the application's internal structure."
      }, {
        "lang" : "es",
        "value" : "Navtor NavBox permite la revelación de información a través del endpoint /api/ais-data. Un atacante remoto y no autenticado puede enviar solicitudes manipuladas para desencadenar una excepción no controlada, lo que provoca que el servidor devuelva trazas de pila .NET detalladas. Estos mensajes de error exponen nombres de clases internas, llamadas a métodos y referencias a librerías de terceros (p. ej., System.Data.SQLite), lo que puede ayudar a los atacantes a mapear la estructura interna de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cydome.io/vulnerability-advisory-cve-2026-2752-in-navtor-navbox-version-4-12-0-3",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      }, {
        "url" : "https://www.navtor.com/navtor-vendor-statement",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2753",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-03-06T15:16:11.157",
      "lastModified" : "2026-03-10T18:18:49.827",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize user-supplied path input. Unauthenticated remote attackers can exploit this issue by submitting requests containing absolute filesystem paths. Successful exploitation allows the attacker to retrieve arbitrary files from the underlying filesystem, limited only by the privileges of the service process. This can lead to the exposure of sensitive configuration files and system information."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de salto de ruta absoluto en Navtor NavBox. La aplicación expone un servicio HTTP que no logra sanear correctamente la entrada de ruta proporcionada por el usuario. Atacantes remotos no autenticados pueden explotar este problema al enviar solicitudes que contienen rutas absolutas del sistema de archivos. La explotación exitosa permite al atacante recuperar archivos arbitrarios del sistema de archivos subyacente, limitado únicamente por los privilegios del proceso del servicio. Esto puede llevar a la exposición de archivos de configuración sensibles e información del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cydome.io/vulnerability-advisory-cve-2026-2753-in-navtor-navbox-version-4-12-0-3",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      }, {
        "url" : "https://www.navtor.com/navtor-vendor-statement",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2754",
      "sourceIdentifier" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
      "published" : "2026-03-06T15:16:11.320",
      "lastModified" : "2026-03-10T18:18:49.983",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to the device can execute HTTP GET requests to TCP port 8080 to retrieve internal network parameters including ECDIS & OT Information, device identifiers, and service status logs."
      }, {
        "lang" : "es",
        "value" : "Navtor NavBox expone datos de configuración y operativos sensibles debido a la falta de autenticación en los puntos finales de la API HTTP. Un atacante remoto no autenticado con acceso de red al dispositivo puede ejecutar solicitudes GET HTTP al puerto TCP 8080 para recuperar parámetros de red internos, incluyendo información ECDIS y OT, identificadores de dispositivo y registros de estado del servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://cydome.io/vulnerability-advisory-cve-2026-2754-in-navtor-navbox-version-4-12-0-3",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      }, {
        "url" : "https://www.navtor.com/navtor-vendor-statement",
        "source" : "56a186b1-7f5e-4314-ba38-38d5499fccfd"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20748",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:09.707",
      "lastModified" : "2026-05-06T14:39:05.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent connection displaces the legitimate charging station and receives backend commands intended for that station. This vulnerability may allow unauthorized users to authenticate as other users or enable a malicious actor to cause a denial-of-service condition by overwhelming the backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación resulta en identificadores de sesión predecibles y permite el secuestro de sesión o sombreado, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:everon:api.everon.io:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12D0566-5C09-46EF-B14D-02BD70D7F80F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20882",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:09.913",
      "lastModified" : "2026-05-05T19:01:48.840",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La interfaz de programación de aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio suprimiendo o redirigiendo erróneamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvm:mobiliti_e-mobi.hu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A00306-0686-450C-B664-43615C81F236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://mobiliti.hu/emobilitas/ugyfeltamogatas/ugyfelszolgalat",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24696",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:10.193",
      "lastModified" : "2026-05-06T14:34:58.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Programación de Aplicaciones WebSocket carece de restricciones sobre el número de solicitudes de autenticación. Esta ausencia de limitación de velocidad puede permitir a un atacante realizar ataques de denegación de servicio suprimiendo o redirigiendo erróneamente la telemetría legítima del cargador, o realizar ataques de fuerza bruta para obtener acceso no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:everon:api.everon.io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E385335-1A56-452A-85A8-5D3DCA79EF3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26017",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T16:16:10.397",
      "lastModified" : "2026-03-09T20:31:14.997",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2."
      }, {
        "lang" : "es",
        "value" : "CoreDNS es un servidor DNS que encadena plugins. Antes de la versión 1.14.2, una vulnerabilidad lógica en CoreDNS permite que los controles de acceso DNS sean eludidos debido al orden de ejecución predeterminado de los plugins. Plugins de seguridad como acl son evaluados antes del plugin rewrite, lo que resulta en una falla de Tiempo de Verificación Tiempo de Uso (TOCTOU). Este problema ha sido parcheado en la versión 1.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coredns.io:coredns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.2",
            "matchCriteriaId" : "B72A7A10-A05D-47A2-93A8-076E4C944D23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coredns/coredns/releases/tag/v1.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/coredns/coredns/security/advisories/GHSA-c9v3-4pv7-87pr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26018",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T16:16:10.557",
      "lastModified" : "2026-03-09T20:32:49.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash the DNS server by sending specially crafted DNS queries. The vulnerability stems from the use of a predictable pseudo-random number generator (PRNG) for generating a secret query name, combined with a fatal error handler that terminates the entire process. This issue has been patched in version 1.14.2."
      }, {
        "lang" : "es",
        "value" : "CoreDNS es un servidor DNS que encadena plugins. Antes de la versión 1.14.2, existe una vulnerabilidad de denegación de servicio en el plugin de detección de bucles de CoreDNS que permite a un atacante colapsar el servidor DNS al enviar consultas DNS especialmente diseñadas. La vulnerabilidad se deriva del uso de un generador de números pseudoaleatorios (PRNG) predecible para generar un nombre de consulta secreto, combinado con un gestor de errores fatal que finaliza el proceso completo. Este problema ha sido parcheado en la versión 1.14.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-337"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coredns.io:coredns:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.2",
            "matchCriteriaId" : "B72A7A10-A05D-47A2-93A8-076E4C944D23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coredns/coredns/releases/tag/v1.14.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/coredns/coredns/security/advisories/GHSA-h75p-j8xm-m278",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26288",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:10.723",
      "lastModified" : "2026-05-06T14:33:58.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend."
      }, {
        "lang" : "es",
        "value" : "Los puntos finales WebSocket carecen de mecanismos de autenticación adecuados, lo que permite a los atacantes realizar suplantación de estación no autorizada y manipular datos enviados al backend. Un atacante no autenticado puede conectarse al punto final WebSocket de OCPP utilizando un identificador de estación de carga conocido o descubierto, luego emitir o recibir comandos OCPP como un cargador legítimo. Dado que no se requiere autenticación, esto puede llevar a la escalada de privilegios, control no autorizado de la infraestructura de carga y corrupción de los datos de la red de carga reportados al backend."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:everon:api.everon.io:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12D0566-5C09-46EF-B14D-02BD70D7F80F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-08.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27027",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:10.940",
      "lastModified" : "2026-03-10T18:18:43.977",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son de acceso público a través de plataformas de mapeo web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-08.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27123",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T16:16:11.163",
      "lastModified" : "2026-03-06T16:16:11.163",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Reason: This candidate was issued in error."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27764",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:11.267",
      "lastModified" : "2026-05-05T19:01:03.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent connection displaces the legitimate charging station and receives backend commands intended for that station. This vulnerability may allow unauthorized users to authenticate as other users or enable a malicious actor to cause a denial-of-service condition by overwhelming the backend with valid session requests."
      }, {
        "lang" : "es",
        "value" : "El backend de WebSocket utiliza identificadores de estaciones de carga para asociar sesiones de forma única, pero permite que múltiples puntos finales se conecten utilizando el mismo identificador de sesión. Esta implementación resulta en identificadores de sesión predecibles y permite el secuestro o la suplantación de sesión, donde la conexión más reciente desplaza a la estación de carga legítima y recibe comandos del backend destinados a esa estación. Esta vulnerabilidad puede permitir a usuarios no autorizados autenticarse como otros usuarios o permitir a un actor malicioso causar una condición de denegación de servicio al sobrecargar el backend con solicitudes de sesión válidas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mvm:mobiliti_e-mobi.hu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A00306-0686-450C-B664-43615C81F236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-06.json",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://mobiliti.hu/emobilitas/ugyfeltamogatas/ugyfelszolgalat",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27777",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2026-03-06T16:16:11.497",
      "lastModified" : "2026-03-12T16:16:10.617",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Charging station authentication identifiers are publicly accessible via web-based mapping platforms."
      }, {
        "lang" : "es",
        "value" : "Los identificadores de autenticación de las estaciones de carga son accesibles públicamente a través de plataformas de mapeo basadas en la web."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-062-06.json",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://mobiliti.hu/emobilitas/ugyfeltamogatas/ugyfelszolgalat",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06",
        "source" : "ics-cert@hq.dhs.gov"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29064",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T17:16:34.003",
      "lastModified" : "2026-03-11T00:28:49.547",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zarf is an Airgap Native Packager Manager for Kubernetes. From version 0.54.0 to before version 0.73.1, a path traversal vulnerability in archive extraction allows a specifically crafted Zarf package to create symlinks pointing outside the destination directory, enabling arbitrary file read or write on the system processing the package. This issue has been patched in version 0.73.1."
      }, {
        "lang" : "es",
        "value" : "Zarf es un gestor de paquetes nativo Airgap para Kubernetes. Desde la versión 0.54.0 hasta antes de la versión 0.73.1, una vulnerabilidad de salto de ruta en la extracción de archivos permite que un paquete Zarf específicamente diseñado cree enlaces simbólicos apuntando fuera del directorio de destino, lo que permite la lectura o escritura arbitraria de archivos en el sistema que procesa el paquete. Este problema ha sido parcheado en la versión 0.73.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:zarf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.54.0",
            "versionEndExcluding" : "0.73.1",
            "matchCriteriaId" : "52E336CB-084F-475A-A9D2-146BC4C01887"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zarf-dev/zarf/releases/tag/v0.73.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/zarf-dev/zarf/security/advisories/GHSA-hcm4-6hpj-vghm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29075",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T17:16:34.167",
      "lastModified" : "2026-03-11T00:21:12.510",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd."
      }, {
        "lang" : "es",
        "value" : "Mesa es una librería Python de código abierto para modelado basado en agentes, simulando sistemas complejos y explorando comportamientos emergentes. En la versión 3.5.0 y anteriores, la extracción de código no confiable en el flujo de trabajo benchmarks.yml puede llevar a la ejecución de código en un ejecutor privilegiado. Este problema ha sido parcheado a través del commit c35b8cd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mesa_project:mesa:*:*:*:*:*:python:*:*",
            "versionEndIncluding" : "3.5.0",
            "matchCriteriaId" : "FDC8696B-D702-4572-88EB-AA96A9CD65E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29082",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T17:16:34.347",
      "lastModified" : "2026-03-10T21:00:33.473",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kestra is an event-driven orchestration platform. In versions from 1.1.10 and prior, Kestra’s execution-file preview renders user-supplied Markdown (.md) with markdown-it instantiated as html:true and injects the resulting HTML with Vue’s v-html without sanitisation. At time of publication, there are no publicly available patches."
      }, {
        "lang" : "es",
        "value" : "Kestra es una plataforma de orquestación basada en eventos. En versiones desde la 1.1.10 y anteriores, la vista previa de archivos de ejecución de Kestra renderiza Markdown (.md) proporcionado por el usuario con markdown-it instanciado como html:true e inyecta el HTML resultante con el v-html de Vue sin sanitización. En el momento de la publicación, no hay parches disponibles públicamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kestra:kestra:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.10",
            "matchCriteriaId" : "994D68C7-7BA6-4004-ABB4-061D0F4B308D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kestra-io/kestra/releases/tag/v1.0.30",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/kestra-io/kestra/security/advisories/GHSA-r36c-83hm-pc8j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kestra-io/kestra/security/advisories/GHSA-r36c-83hm-pc8j",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29783",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T17:16:35.487",
      "lastModified" : "2026-03-09T13:35:34.633",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection through repository files, MCP server responses, or user instructions) can exploit bash parameter transformation operators to execute hidden commands, bypassing the safety assessment that classifies commands as \"read-only.\" This has been patched in version 0.0.423. \n\nThe vulnerability stems from how the CLI's shell safety assessment evaluates commands before execution. The safety layer parses and classifies shell commands as either read-only (safe) or write-capable (requires user approval). However, several bash parameter expansion features can embed executable code within arguments to otherwise read-only commands, causing them to appear safe while actually performing arbitrary operations.\n\nThe specific dangerous patterns are ${var@P}, ${var=value} / ${var:=value}, ${!var}, and nested $(cmd) or <(cmd) inside ${...} expansions. An attacker who can influence command text sent to the shell tool - for example, through prompt injection via malicious repository content (README files, code comments, issue bodies), compromised or malicious MCP server responses, or crafted user instructions containing obfuscated commands - could achieve arbitrary code execution on the user's workstation. This is possible even in permission modes that require user approval for write operations, since the commands can appear to use only read-only utilities to ultimately trigger write operations. Successful exploitation could lead to data exfiltration, file modification, or further system compromise."
      }, {
        "lang" : "es",
        "value" : "La herramienta de shell en las versiones de GitHub Copilot CLI anteriores e incluyendo la 0.0.422 puede permitir la ejecución de código arbitrario a través de patrones de expansión de parámetros de bash manipulados. Un atacante que puede influir en los comandos ejecutados por el agente (por ejemplo, a través de inyección de prompt mediante archivos de repositorio, respuestas del servidor MCP o instrucciones del usuario) puede explotar los operadores de transformación de parámetros de bash para ejecutar comandos ocultos, eludiendo la evaluación de seguridad que clasifica los comandos como 'solo lectura'. Esto ha sido parcheado en la versión 0.0.423.\n\nLa vulnerabilidad se deriva de cómo la evaluación de seguridad de shell de la CLI evalúa los comandos antes de la ejecución. La capa de seguridad analiza y clasifica los comandos de shell como de solo lectura (seguros) o con capacidad de escritura (requiere aprobación del usuario). Sin embargo, varias características de expansión de parámetros de bash pueden incrustar código ejecutable dentro de argumentos de comandos que de otro modo serían de solo lectura, haciendo que parezcan seguros mientras que en realidad realizan operaciones arbitrarias.\n\nLos patrones peligrosos específicos son ${var@P}, ${var=value} / ${var:=value}, ${!var}, y $(cmd) o &lt;(cmd) anidados dentro de expansiones ${...}. Un atacante que puede influir en el texto de comando enviado a la herramienta de shell - por ejemplo, a través de inyección de prompt mediante contenido de repositorio malicioso (archivos README, comentarios de código, cuerpos de incidencias), respuestas de servidor MCP comprometidas o maliciosas, o instrucciones de usuario manipuladas que contengan comandos ofuscados - podría lograr ejecución de código arbitrario en la estación de trabajo del usuario. Esto es posible incluso en modos de permiso que requieren la aprobación del usuario para operaciones de escritura, ya que los comandos pueden parecer usar solo utilidades de solo lectura para finalmente desencadenar operaciones de escritura. La explotación exitosa podría conducir a la exfiltración de datos, modificación de archivos o un compromiso adicional del sistema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/copilot-cli/releases/tag/v0.0.423",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/github/copilot-cli/security/advisories/GHSA-g8r9-g2v8-jv6f",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28514",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:19.103",
      "lastModified" : "2026-03-18T16:10:07.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.8.6, 7.9.8, 7.10.7, 7.11.4, 7.12.4, 7.13.3, and 8.0.0, a critical authentication bypass vulnerability exists in Rocket.Chat's account service used in the ddp-streamer micro service that allows an attacker to log in to the service as any user with a password set, using any arbitrary password. The vulnerability stems from a missing await keyword when calling an asynchronous password validation function, causing a Promise object (which is always truthy) to be evaluated instead of the actual boolean validation result. This may lead to account takeover of any user whose username is known or guessable. This issue has been patched in versions 7.8.6, 7.9.8, 7.10.7, 7.11.4, 7.12.4, 7.13.3, and 8.0.0."
      }, {
        "lang" : "es",
        "value" : "Rocket.Chat es una plataforma de comunicaciones de código abierto, segura y totalmente personalizable. Antes de las versiones 7.8.6, 7.9.8, 7.10.7, 7.11.4, 7.12.4, 7.13.3 y 8.0.0, existe una vulnerabilidad crítica de omisión de autenticación en el servicio de cuentas de Rocket.Chat utilizado en el microservicio ddp-streamer que permite a un atacante iniciar sesión en el servicio como cualquier usuario con una contraseña establecida, utilizando cualquier contraseña arbitraria. La vulnerabilidad se deriva de la ausencia de la palabra clave await al llamar a una función asíncrona de validación de contraseña, lo que provoca que se evalúe un objeto Promise (que siempre es truthy) en lugar del resultado de validación booleano real. Esto puede llevar a la toma de control de la cuenta de cualquier usuario cuyo nombre de usuario sea conocido o adivinable. Este problema ha sido parcheado en las versiones 7.8.6, 7.9.8, 7.10.7, 7.11.4, 7.12.4, 7.13.3 y 8.0.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.8.6",
            "matchCriteriaId" : "FDF1710B-451A-45DE-92B2-5EB0DB847964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.8",
            "matchCriteriaId" : "624B69A1-3489-4BC3-9A47-AC5AC4743CE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.7",
            "matchCriteriaId" : "3A1AA90D-199C-4AA9-96CA-3CFD7E043572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.4",
            "matchCriteriaId" : "5A10B0BA-17CC-4AFF-A2F4-20E5252EB0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.12.0",
            "versionEndExcluding" : "7.12.4",
            "matchCriteriaId" : "B33BA4A7-71F3-42EE-A29B-936AA166CA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.13.0",
            "versionEndExcluding" : "7.13.3",
            "matchCriteriaId" : "50874BCF-361F-416D-9A32-E6C43E12E218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "92CEECD0-CC4A-4798-9139-F14FEE8608FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCB3AD1-0707-49FB-B837-811D87494991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6204C2-7FFC-4D41-A623-D19A47469A0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9076FE-EDA5-49E8-BB23-2B3FF17F70F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "140941C3-08BF-4920-AA63-ED00DE58AF66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.0.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAE103A-461A-4379-B322-577711AA0EC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RocketChat/Rocket.Chat/commit/7d89aae0b1bd08e82b02ceab4c180b430e2c6f07",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RocketChat/Rocket.Chat/pull/37143",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-w6vw-mrgv-69vf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29087",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:19.757",
      "lastModified" : "2026-04-14T17:36:58.930",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@hono/node-server allows running the Hono application on Node.js. Prior to version 1.19.10, when using @hono/node-server's static file serving together with route-based middleware protections (e.g. protecting /admin/*), inconsistent URL decoding can allow protected static resources to be accessed without authorization. In particular, paths containing encoded slashes (%2F) may be evaluated differently by routing/middleware matching versus static file path resolution, enabling a bypass where middleware does not run but the static file is still served. This issue has been patched in version 1.19.10."
      }, {
        "lang" : "es",
        "value" : "@hono/node-server permite ejecutar la aplicación Hono en Node.js. Antes de la versión 1.19.10, al usar el servicio de archivos estáticos de @hono/node-server junto con protecciones de middleware basadas en rutas (por ejemplo, protegiendo /admin/*), una decodificación de URL inconsistente puede permitir que los recursos estáticos protegidos sean accedidos sin autorización. En particular, las rutas que contienen barras codificadas (%2F) pueden ser evaluadas de manera diferente por la coincidencia de enrutamiento/middleware frente a la resolución de rutas de archivos estáticos, lo que permite una omisión donde el middleware no se ejecuta pero el archivo estático aún es servido. Este problema ha sido parcheado en la versión 1.19.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hono:node-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.10",
            "matchCriteriaId" : "8D3962AC-2C38-4050-BDD6-A695D5B1F50F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/honojs/node-server/commit/455015be1697dd89974a68b70350ea7b2d126d2e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/honojs/node-server/security/advisories/GHSA-wc8c-qw6v-h7f6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29089",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:19.967",
      "lastModified" : "2026-03-18T18:50:46.093",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension. From version 2.23.0 to 2.25.1, PostgreSQL uses the search_path setting to locate unqualified database objects (tables, functions, operators). If the search_path includes user-writable schemas a malicious user can create functions in that schema that shadow builtin postgres functions and will be called instead of the postgres functions leading to arbitrary code execution during extension upgrade. This issue has been patched in version 2.25.2."
      }, {
        "lang" : "es",
        "value" : "TimescaleDB es una base de datos de series temporales para análisis en tiempo real de alto rendimiento empaquetada como una extensión de Postgres. Desde la versión 2.23.0 hasta la 2.25.1, PostgreSQL utiliza la configuración search_path para localizar objetos de base de datos no calificados (tablas, funciones, operadores). Si el search_path incluye esquemas escribibles por el usuario, un usuario malintencionado puede crear funciones en ese esquema que ocultan funciones integradas de postgres y serán llamadas en lugar de las funciones de postgres, lo que lleva a la ejecución de código arbitrario durante la actualización de la extensión. Este problema ha sido parcheado en la versión 2.25.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timescale:timescaledb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.23.0",
            "versionEndExcluding" : "2.25.2",
            "matchCriteriaId" : "70D5A15A-A908-4113-B8BA-AC0A17166F76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/timescale/timescaledb/commit/9a8f7f8bdeb99e6abae0786ffe526791a8628ce3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/pull/9331",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/releases/tag/2.25.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/security/advisories/GHSA-vgp2-jj5c-828m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29091",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:20.257",
      "lastModified" : "2026-03-13T19:07:16.483",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code execution (RCE) flaw was discovered in the locutus project, specifically within the call_user_func_array function implementation. The vulnerability allows an attacker to inject arbitrary JavaScript code into the application's runtime environment. This issue stems from an insecure implementation of the call_user_func_array function (and its wrapper call_user_func), which fails to properly validate all components of a callback array before passing them to eval(). This issue has been patched in version 3.0.0."
      }, {
        "lang" : "es",
        "value" : "Locutus trae las stdlibs de otros lenguajes de programación a JavaScript con fines educativos. Antes de la versión 3.0.0, una falla de ejecución remota de código (RCE) fue descubierta en el proyecto locutus, específicamente dentro de la implementación de la función call_user_func_array. La vulnerabilidad permite a un atacante inyectar código JavaScript arbitrario en el entorno de ejecución de la aplicación. Este problema se deriva de una implementación insegura de la función call_user_func_array (y su envoltorio call_user_func), que no valida correctamente todos los componentes de un array de callback antes de pasarlos a eval(). Este problema ha sido parcheado en la versión 3.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:locutus:locutus:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "202D3F00-F947-4F25-A0AF-EBB9FEBB7ECC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/locutusjs/locutus/commit/977a1fb169441e35996a1d2465b512322de500ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/locutusjs/locutus/security/advisories/GHSA-fp25-p6mj-qqg6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/locutusjs/locutus/security/advisories/GHSA-fp25-p6mj-qqg6",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29110",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:20.453",
      "lastModified" : "2026-03-13T18:58:03.633",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.0, in non-debug mode Cryptomator might leak cleartext paths into the log file. This can reveal meta information about the files stored inside a vault at a time, where the actual vault is closed. Not every cleartext path is logged. Only if a filesystem request fails for some reason (e.g. damaged encrypted file, not existing file), a log message is created. This issue has been patched in version 1.19.0."
      }, {
        "lang" : "es",
        "value" : "Cryptomator cifra los datos que se almacenan en infraestructura en la nube. Antes de la versión 1.19.0, en modo no depuración, Cryptomator podría filtrar rutas en texto claro en el archivo de registro. Esto puede revelar metadatos sobre los archivos almacenados dentro de una bóveda, incluso cuando la bóveda real está cerrada. No todas las rutas en texto claro se registran. Solo si una solicitud del sistema de archivos falla por alguna razón (p. ej., archivo cifrado dañado, archivo inexistente), se genera un mensaje de registro. Este problema ha sido parcheado en la versión 1.19.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cryptomator:cryptomator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "09E2423D-951D-4A0F-9291-C2F075533707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cryptomator/cryptomator/security/advisories/GHSA-j83j-mwhc-rcgw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29178",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:20.650",
      "lastModified" : "2026-04-28T21:11:07.100",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federation in Rust. Prior to version 0.19.16, the GET /api/v4/image/{filename} endpoint is vulnerable to unauthenticated SSRF through parameter injection in the file_type query parameter. An attacker can inject arbitrary query parameters into the internal request to pict-rs, including the proxy parameter which causes pict-rs to fetch arbitrary URLs. This issue has been patched in version 0.19.16."
      }, {
        "lang" : "es",
        "value" : "Lemmy, un agregador de enlaces y foro para el fediverso, es vulnerable a la falsificación de petición del lado del servidor a través de una dependencia de activitypub_federation, un framework para la federación de ActivityPub en Rust. Antes de la versión 0.19.16, el endpoint GET /API/v4/image/{filename} es vulnerable a SSRF no autenticado a través de la inyección de parámetros en el parámetro de consulta file_type. Un atacante puede inyectar parámetros de consulta arbitrarios en la petición interna a pict-rs, incluyendo el parámetro proxy que hace que pict-rs obtenga URLs arbitrarias. Este problema ha sido parcheado en la versión 0.19.16."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LemmyNet/lemmy/commit/f47a03f56d1797bceab5f34b6f624c91cecd5871",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/LemmyNet/lemmy/security/advisories/GHSA-jvxv-2jjp-jxc3",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/LemmyNet/lemmy/security/advisories/GHSA-jvxv-2jjp-jxc3",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30831",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:21.817",
      "lastModified" : "2026-03-13T18:52:27.577",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0, authentication vulnerabilities exist in Rocket.Chat's enterprise DDP Streamer service. The Account.login method exposed through the DDP Streamer does not enforce Two-Factor Authentication (2FA) or validate user account status (deactivated users can still login), despite these checks being mandatory in the standard Meteor login flow. This issue has been patched in versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0."
      }, {
        "lang" : "es",
        "value" : "Rocket.Chat es una plataforma de comunicaciones de código abierto, segura y totalmente personalizable. Antes de las versiones 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1 y 8.2.0, existen vulnerabilidades de autenticación en el servicio DDP Streamer empresarial de Rocket.Chat. El método Account.login expuesto a través del DDP Streamer no aplica la autenticación de dos factores (2FA) ni valida el estado de la cuenta de usuario (los usuarios desactivados aún pueden iniciar sesión), a pesar de que estas comprobaciones son obligatorias en el flujo de inicio de sesión estándar de Meteor. Este problema ha sido parcheado en las versiones 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1 y 8.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-304"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.10.8",
            "matchCriteriaId" : "2B46CE2E-8C7D-4F11-B0CF-C73A3718A56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.5",
            "matchCriteriaId" : "7AF8C2C1-73C3-4FB7-889A-5A6FD8E6C6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.12.0",
            "versionEndExcluding" : "7.12.5",
            "matchCriteriaId" : "A7339A16-6F5B-47D2-8D6C-289E4E7DB99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.13.0",
            "versionEndExcluding" : "7.13.4",
            "matchCriteriaId" : "87EB1237-813C-4834-89ED-52A66F3E157D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "F1615F6F-6774-4B2F-AA6C-ABD2397284B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "E5C728C6-E42D-4842-8466-2ABC6151B8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.2.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "158A7899-8BF4-4BAB-ABC1-28A294BA1F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7393A14-F640-449F-8D2E-B0E5D0734A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CDF8CA-080D-4E50-8758-06085FF2A95C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-7qr6-q62g-hm63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30833",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T18:16:22.013",
      "lastModified" : "2026-03-13T18:46:27.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0, a NoSQL injection vulnerability exists in Rocket.Chat's account service used in the ddp-streamer micro service that allows unauthenticated attackers to manipulate MongoDB queries during authentication. The vulnerability is located in the username-based login flow where user-supplied input is directly embedded into a MongoDB query selector without validation. An attacker can inject MongoDB operator expressions (e.g., { $regex: '.*' }) in place of a username string, causing the database query to match unintended user records. This issue has been patched in versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0."
      }, {
        "lang" : "es",
        "value" : "Rocket.Chat es una plataforma de comunicaciones de código abierto, segura y totalmente personalizable. Antes de las versiones 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1 y 8.2.0, existe una vulnerabilidad de inyección NoSQL en el servicio de cuentas de Rocket.Chat utilizado en el microservicio ddp-streamer que permite a atacantes no autenticados manipular consultas de MongoDB durante la autenticación. La vulnerabilidad se encuentra en el flujo de inicio de sesión basado en nombre de usuario, donde la entrada proporcionada por el usuario se incrusta directamente en un selector de consulta de MongoDB sin validación. Un atacante puede inyectar expresiones de operador de MongoDB (por ejemplo, { $regex: '.*' }) en lugar de una cadena de nombre de usuario, lo que hace que la consulta de la base de datos coincida con registros de usuario no deseados. Este problema ha sido parcheado en las versiones 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1 y 8.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.10.8",
            "matchCriteriaId" : "2B46CE2E-8C7D-4F11-B0CF-C73A3718A56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.5",
            "matchCriteriaId" : "7AF8C2C1-73C3-4FB7-889A-5A6FD8E6C6C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.12.0",
            "versionEndExcluding" : "7.12.5",
            "matchCriteriaId" : "A7339A16-6F5B-47D2-8D6C-289E4E7DB99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.13.0",
            "versionEndExcluding" : "7.13.4",
            "matchCriteriaId" : "87EB1237-813C-4834-89ED-52A66F3E157D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "F1615F6F-6774-4B2F-AA6C-ABD2397284B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "E5C728C6-E42D-4842-8466-2ABC6151B8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.2.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "158A7899-8BF4-4BAB-ABC1-28A294BA1F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7393A14-F640-449F-8D2E-B0E5D0734A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:8.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "57CDF8CA-080D-4E50-8758-06085FF2A95C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-hgq6-9jg2-wf3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3419",
      "sourceIdentifier" : "ce714d77-add3-4f53-aff5-83d477b104bb",
      "published" : "2026-03-06T18:16:22.213",
      "lastModified" : "2026-03-18T19:11:46.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fastify incorrectly accepts malformed `Content-Type` headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1(https://httpwg.org/specs/rfc9110.html#field.content-type). For example, a request sent with Content-Type: application/json garbage passes validation and is processed normally, rather than being rejected with 415 Unsupported Media Type.\n\nWhen regex-based content-type parsers are in use (a documented Fastify feature), the malformed value is matched against registered parsers using the full string including the trailing garbage. This means a request with an invalid content-type may be routed to and processed by a parser it should never have reached.\n\nImpact:\nAn attacker can send requests with RFC-invalid Content-Type headers that bypass validity checks, reach content-type parser matching, and be processed by the server. Requests that should be rejected at the validation stage are instead handled as if the content-type were valid.\n\nWorkarounds:\nDeploy a WAF rule to protect against this\n\nFix:\n\nThe fix is available starting with v5.8.1."
      }, {
        "lang" : "es",
        "value" : "Fastify acepta incorrectamente encabezados `Content-Type` malformados que contienen caracteres adicionales después del token de subtipo, en violación de la RFC 9110 §8.3.1(https://httpwg.org/specs/rfc9110.html#field.content-type). Por ejemplo, una solicitud enviada con Content-Type: application/json garbage pasa la validación y se procesa normalmente, en lugar de ser rechazada con 415 Unsupported Media Type.\n\nCuando se utilizan analizadores de tipo de contenido basados en expresiones regulares (regex) (una característica documentada de Fastify), el valor malformado se compara con los analizadores registrados utilizando la cadena completa, incluidos los caracteres adicionales. Esto significa que una solicitud con un tipo de contenido no válido puede ser enrutada y procesada por un analizador al que nunca debería haber llegado.\n\nImpacto:\nUn atacante puede enviar solicitudes con encabezados Content-Type no válidos según la RFC que eluden las comprobaciones de validez, llegan a la coincidencia del analizador de tipo de contenido y son procesadas por el servidor. Las solicitudes que deberían ser rechazadas en la etapa de validación son, en cambio, manejadas como si el tipo de contenido fuera válido.\n\nSoluciones provisionales:\nImplementar una regla de WAF para protegerse contra esto\n\nSolución:\n\nLa solución está disponible a partir de la v5.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-185"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:fastify:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.7.2",
            "versionEndExcluding" : "5.8.1",
            "matchCriteriaId" : "9CAD5359-5175-4ED4-934C-F40C1C0C2EE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cna.openjsf.org/security-advisories.html",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-573f-x89g-hqp9",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify/commit/67f6c9b32cb3623d3c9470cc17ed830dd2f083d7",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://httpwg.org/specs/rfc9110.html#field.content-type",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3419",
        "source" : "ce714d77-add3-4f53-aff5-83d477b104bb",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29063",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T19:16:21.557",
      "lastModified" : "2026-04-17T21:32:18.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."
      }, {
        "lang" : "es",
        "value" : "Immutable.js proporciona muchas estructuras de datos inmutables persistentes. Antes de las versiones 3.8.3, 4.3.7 y 5.1.5, la contaminación de prototipos es posible en immutable a través de las APIs mergeDeep(), mergeDeepWith(), merge(), Map.toJS() y Map.toObject(). Este problema ha sido parcheado en las versiones 3.8.3, 4.3.7 y 5.1.5."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.8.3",
            "matchCriteriaId" : "22FDF10C-08DC-4178-9F7C-D580C292885A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.3.7",
            "matchCriteriaId" : "A0F2EC71-7029-4F13-B383-6018587EE882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "17E6FB8C-0F81-4EA4-B197-C08AB22253C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3653",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-06T19:16:23.777",
      "lastModified" : "2026-03-06T19:16:23.777",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30843",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T20:16:16.860",
      "lastModified" : "2026-03-11T15:49:35.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 have a critical Insecure Direct Object Reference (IDOR) issue which could allow unauthorized users to modify custom fields across boards through its custom fields update endpoints, potentially leading to unauthorized data manipulation. The PUT /api/boards/:boardId/custom-fields/:customFieldId endpoint in Wekan validates that the authenticated user has access to the specified boardId, but the subsequent database update uses only the custom field's _id as a filter without confirming the field actually belongs to that board. This means an attacker who owns any board can modify custom fields on any other board by supplying a foreign custom field ID, and the same flaw exists in the POST, PUT, and DELETE endpoints for dropdown items under custom fields. The required custom field IDs can be obtained by exporting a board (which only needs read access), since the exported JSON includes the IDs of all board components. The authorization check is performed against the wrong resource, allowing cross-board custom field manipulation. This issue has been fixed in version 8.34."
      }, {
        "lang" : "es",
        "value" : "Wekan es una herramienta kanban de código abierto construida con Meteor. Las versiones 8.32 y 8.33 tienen un problema crítico de Referencia Directa a Objeto Insegura (IDOR) que podría permitir a usuarios no autorizados modificar campos personalizados entre tableros a través de sus puntos finales de actualización de campos personalizados, lo que podría llevar a la manipulación no autorizada de datos. El punto final PUT /api/boards/:boardId/custom-fields/:customFieldId en Wekan valida que el usuario autenticado tiene acceso al boardId especificado, pero la subsiguiente actualización de la base de datos utiliza solo el _id del campo personalizado como filtro sin confirmar que el campo realmente pertenece a ese tablero. Esto significa que un atacante que posee cualquier tablero puede modificar campos personalizados en cualquier otro tablero al proporcionar un ID de campo personalizado externo, y la misma falla existe en los puntos finales POST, PUT y DELETE para elementos desplegables bajo campos personalizados. Los ID de campo personalizados requeridos se pueden obtener exportando un tablero (lo que solo necesita acceso de lectura), ya que el JSON exportado incluye los ID de todos los componentes del tablero. La verificación de autorización se realiza contra el recurso incorrecto, permitiendo la manipulación de campos personalizados entre tableros. Este problema ha sido solucionado en la versión 8.34."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:8.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FD24D6-7487-4971-B679-E8CB7EF29A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:8.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B3EEBA-2A0C-4A5A-B07A-13219B4E03D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/73eb98c57afd3d72377a1f7160a52450ab0eeb8b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2026-044_Wekan/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30844",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T20:16:17.030",
      "lastModified" : "2026-03-11T14:56:52.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery (SSRF) via attachment URL loading. During board import in Wekan, attachment URLs from user-supplied JSON data are fetched directly by the server without any URL validation or filtering, affecting both the Wekan and Trello import flows. The parseActivities() and parseActions() methods extract user-controlled attachment URLs, which are then passed directly to Attachments.load() for download with no sanitization. This Server-Side Request Forgery (SSRF) vulnerability allows any authenticated user to make the server issue arbitrary HTTP requests, potentially accessing internal network services such as cloud instance metadata endpoints (exposing IAM credentials), internal databases, and admin panels that are otherwise unreachable from outside the network. This issue has been fixed in version 8.34."
      }, {
        "lang" : "es",
        "value" : "Wekan es una herramienta kanban de código abierto construida con Meteor. Las versiones 8.32 y 8.33 son vulnerables a la falsificación de petición del lado del servidor (SSRF) a través de la carga de URL de adjuntos. Durante la importación de tableros en Wekan, las URL de adjuntos de datos JSON proporcionados por el usuario son obtenidas directamente por el servidor sin ninguna validación o filtrado de URL, afectando tanto a los flujos de importación de Wekan como de Trello. Los métodos parseActivities() y parseActions() extraen URL de adjuntos controladas por el usuario, las cuales son luego pasadas directamente a Attachments.load() para su descarga sin sanitización. Esta vulnerabilidad de falsificación de petición del lado del servidor (SSRF) permite a cualquier usuario autenticado hacer que el servidor emita peticiones HTTP arbitrarias, potencialmente accediendo a servicios de red internos como puntos finales de metadatos de instancias en la nube (exponiendo credenciales IAM), bases de datos internas y paneles de administración que de otro modo serían inalcanzables desde fuera de la red. Este problema ha sido solucionado en la versión 8.34."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:8.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49FD24D6-7487-4971-B679-E8CB7EF29A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:8.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B3EEBA-2A0C-4A5A-B07A-13219B4E03D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/62216e36c15f55d4ef6cb97313db3aa54fc77fe0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2026-045_Wekan/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30845",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T20:16:17.190",
      "lastModified" : "2026-03-11T14:36:50.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the board composite publication in Wekan publishes all integration data for a board without any field filtering, exposing sensitive fields including webhook URLs and authentication tokens to any subscriber. Since board publications are accessible to all board members regardless of their role (including read-only and comment-only users), and even to unauthenticated DDP clients for public boards, any user who can access a board can retrieve its webhook credentials. This token leak allows attackers to make unauthenticated requests to the exposed webhooks, potentially triggering unauthorized actions in connected external services. This issue has been fixed in version 8.34."
      }, {
        "lang" : "es",
        "value" : "Wekan es una herramienta kanban de código abierto construida con Meteor. En las versiones 8.31.0 a la 8.33, la publicación compuesta del tablero en Wekan publica todos los datos de integración de un tablero sin ningún filtrado de campos, exponiendo campos sensibles, incluyendo URLs de webhook y tokens de autenticación, a cualquier suscriptor. Dado que las publicaciones del tablero son accesibles a todos los miembros del tablero independientemente de su rol (incluyendo usuarios de solo lectura y solo comentarios), e incluso a clientes DDP no autenticados para tableros públicos, cualquier usuario que pueda acceder a un tablero puede recuperar sus credenciales de webhook. Esta fuga de tokens permite a los atacantes realizar solicitudes no autenticadas a los webhooks expuestos, lo que podría desencadenar acciones no autorizadas en servicios externos conectados. Este problema ha sido solucionado en la versión 8.34."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.31",
            "versionEndExcluding" : "8.33",
            "matchCriteriaId" : "82F22D3F-FA6B-485B-94AE-266CD62CC379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/8c00adc6b865653bd717a946dd646eb54ac78c9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2026-036_Wekan/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30846",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T20:16:17.357",
      "lastModified" : "2026-03-11T14:24:30.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the globalwebhooks publication exposes all global webhook integrations—including sensitive url and token fields—without performing any authentication check on the server side. Although the subscription is normally invoked from the admin settings page, the server-side publication has no access control, meaning any DDP client, including unauthenticated ones, can subscribe and receive the data. This allows an unauthenticated attacker to retrieve global webhook URLs and authentication tokens, potentially enabling unauthorized use of those webhooks and access to connected external services. This issue has been fixed in version 8.34."
      }, {
        "lang" : "es",
        "value" : "Wekan es una herramienta kanban de código abierto construida con Meteor. En las versiones 8.31.0 a 8.33, la publicación globalwebhooks expone todas las integraciones de webhook globales —incluyendo campos sensibles de URL y token— sin realizar ninguna comprobación de autenticación en el lado del servidor. Aunque la suscripción se invoca normalmente desde la página de configuración de administrador, la publicación del lado del servidor no tiene control de acceso, lo que significa que cualquier cliente DDP, incluidos los no autenticados, puede suscribirse y recibir los datos. Esto permite a un atacante no autenticado recuperar URLs de webhook globales y tokens de autenticación, lo que podría permitir el uso no autorizado de esos webhooks y el acceso a servicios externos conectados. Este problema ha sido solucionado en la versión 8.34."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.31",
            "versionEndExcluding" : "8.33",
            "matchCriteriaId" : "82F22D3F-FA6B-485B-94AE-266CD62CC379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/1ee9b2e917104f54c035f6426169a28fedecbdb6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2026-037_Wekan/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30847",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T20:16:17.530",
      "lastModified" : "2026-03-11T14:22:57.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the notificationUsers publication in Wekan publishes user documents with no field filtering, causing the ReactiveCache.getUsers() call to return all fields including highly sensitive data such as bcrypt password hashes, active session login tokens, email verification tokens, full email addresses, and any stored OAuth tokens. Unlike Meteor's default auto-publication which strips the services field for security, custom publications return whatever fields the cursor contains, meaning all subscribers receive the complete user documents. Any authenticated user who triggers this publication can harvest credentials and active session tokens for other users, enabling password cracking, session hijacking, and full account takeover. This issue has been fixed in version 8.34."
      }, {
        "lang" : "es",
        "value" : "Wekan es una herramienta kanban de código abierto construida con Meteor. En las versiones 8.31.0 a la 8.33, la publicación notificationUsers en Wekan publica documentos de usuario sin filtrar campos, lo que provoca que la llamada a ReactiveCache.getUsers() devuelva todos los campos, incluyendo datos altamente sensibles como hashes de contraseña bcrypt, tokens de inicio de sesión de sesión activa, tokens de verificación de correo electrónico, direcciones de correo electrónico completas y cualquier token OAuth almacenado. A diferencia de la auto-publicación predeterminada de Meteor, que elimina el campo services por seguridad, las publicaciones personalizadas devuelven todos los campos que contiene el cursor, lo que significa que todos los suscriptores reciben los documentos de usuario completos. Cualquier usuario autenticado que active esta publicación puede recolectar credenciales y tokens de sesión activa de otros usuarios, lo que permite el cracking de contraseñas, el secuestro de sesión y la toma de control total de la cuenta. Este problema ha sido solucionado en la versión 8.34."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.31",
            "versionEndExcluding" : "8.33",
            "matchCriteriaId" : "82F22D3F-FA6B-485B-94AE-266CD62CC379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/commit/1c8667eae8b28739e43569b612ffdb2693c6b1ce",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v8.34",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2026-035_Wekan/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29182",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:15.137",
      "lastModified" : "2026-03-10T19:53:34.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.4 and 9.4.1-alpha.3, Parse Server's readOnlyMasterKey option allows access with master-level read privileges but is documented to deny all write operations. However, some endpoints incorrectly accept the readOnlyMasterKey for mutating operations. This allows a caller who only holds the readOnlyMasterKey to create, modify, and delete Cloud Hooks and to start Cloud Jobs, which can be used for data exfiltration. Any Parse Server deployment that uses the readOnlyMasterKey option is affected. Note than an attacker needs to know the readOnlyMasterKey to exploit this vulnerability. This issue has been patched in versions 8.6.4 and 9.4.1-alpha.3."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.4 y 9.4.1-alpha.3, la opción readOnlyMasterKey de Parse Server permite el acceso con privilegios de lectura a nivel maestro, pero está documentada para denegar todas las operaciones de escritura. Sin embargo, algunos endpoints aceptan incorrectamente la readOnlyMasterKey para operaciones de mutación. Esto permite a un llamador que solo posee la readOnlyMasterKey crear, modificar y eliminar Cloud Hooks e iniciar Cloud Jobs, lo que puede ser utilizado para la exfiltración de datos. Cualquier despliegue de Parse Server que utilice la opción readOnlyMasterKey se ve afectado. Tenga en cuenta que un atacante necesita conocer la readOnlyMasterKey para explotar esta vulnerabilidad. Este problema ha sido parcheado en las versiones 8.6.4 y 9.4.1-alpha.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.4",
            "matchCriteriaId" : "41A471BF-7EE9-4E57-B9F6-1BDB37D27275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.4.0",
            "matchCriteriaId" : "9FF0ADC7-6AA6-44F7-8CA9-E0A2F1C1D63A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.4.1:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC1C695A-70C0-45C8-867F-4541537F370B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.4.1:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2B1E392B-A41C-460C-8811-AA0473393870"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/8.6.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Patch" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/9.4.1-alpha.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Patch" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-vc89-5g3r-cmhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29788",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:15.293",
      "lastModified" : "2026-03-11T14:00:44.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been patched in version 30."
      }, {
        "lang" : "es",
        "value" : "TSPortal es la plataforma interna de la Fundación WikiTide utilizada por el equipo de Confianza y Seguridad para gestionar informes, investigaciones, apelaciones y el trabajo de transparencia. Antes de la versión 30, la conversión de cadenas vacías a nulo permitía disfrazar informes de DPA como informes genuinos de autoeliminación. Este problema ha sido parcheado en la versión 30."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "HIGH",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-283"
        }, {
          "lang" : "en",
          "value" : "CWE-1287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikitide:tsportal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "30",
            "matchCriteriaId" : "35701831-64E1-402F-8314-4D171569C7BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miraheze/TSPortal/security/advisories/GHSA-gfhq-7499-f3f2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://issue-tracker.miraheze.org/T15053",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29789",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:15.460",
      "lastModified" : "2026-03-13T18:42:39.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workflow site-creation actions allows an authenticated attacker with workflow write access in one project to create/manage sites on servers belonging to other projects by supplying a foreign server_id. This issue has been patched in version 3.20.3."
      }, {
        "lang" : "es",
        "value" : "Vito es una aplicación web autoalojada que ayuda a gestionar servidores y a desplegar aplicaciones PHP en servidores de producción. Antes de la versión 3.20.3, una comprobación de autorización faltante en las acciones de creación de sitios del flujo de trabajo permite a un atacante autenticado con acceso de escritura al flujo de trabajo en un proyecto crear/gestionar sitios en servidores pertenecientes a otros proyectos al proporcionar un server_id externo. Este problema ha sido parcheado en la versión 3.20.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vitodeploy:vito:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.20.3",
            "matchCriteriaId" : "2BD3E3C5-B254-47BE-821C-86BFD04A0285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitodeploy/vito/commit/0fdcfe5f0b93da644a0456e0e4544763828e3326",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vitodeploy/vito/pull/1036",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vitodeploy/vito/releases/tag/3.20.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/vitodeploy/vito/security/advisories/GHSA-3m6w-8qh4-qr76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29790",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:15.630",
      "lastModified" : "2026-03-13T18:31:00.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safe_extract() function used when extracting tarball archives. The function uses os.path.commonprefix() to validate that extracted files remain within the intended destination directory. However, commonprefix() compares paths character-by-character rather than by path components, allowing a malicious tarball to write files to sibling directories with matching name prefixes. This issue has been patched in versions 1.34.2 and 1.37.3."
      }, {
        "lang" : "es",
        "value" : "dbt-common son las utilidades comunes compartidas que utilizan las implementaciones de dbt-core y adaptadores. Antes de las versiones 1.34.2 y 1.37.3, una vulnerabilidad de salto de ruta existe en la función safe_extract() de dbt-common utilizada al extraer archivos tarball. La función usa os.path.commonprefix() para validar que los archivos extraídos permanezcan dentro del directorio de destino previsto. Sin embargo, commonprefix() compara rutas carácter por carácter en lugar de por componentes de ruta, permitiendo que un tarball malicioso escriba archivos en directorios hermanos con prefijos de nombre coincidentes. Este problema ha sido parcheado en las versiones 1.34.2 y 1.37.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getdbt:dbt-common:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.34.2",
            "matchCriteriaId" : "91D5F6A6-AA8F-4F03-B786-EF7209FC3AA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getdbt:dbt-common:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.35.0",
            "versionEndExcluding" : "1.37.3",
            "matchCriteriaId" : "552E0425-7675-4ACC-8F4C-AC56646A119D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dbt-labs/dbt-common/commit/e547954a48bac9394ef6eb98432e429dce9a7709",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dbt-labs/dbt-common/security/advisories/GHSA-w75w-9qv4-j5xj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pypa/pip/pull/13777",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29791",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:15.787",
      "lastModified" : "2026-03-18T19:03:44.357",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0."
      }, {
        "lang" : "es",
        "value" : "Agentgateway es un plano de datos de código abierto para la conectividad de IA agéntica dentro o a través de cualquier framework o entorno de agente. Antes de la versión 0.12.0, al convertir solicitudes de herramientas/llamadas MCP a solicitudes OpenAPI, los valores de ruta de entrada, consulta y encabezado no se desinfectan. Este problema ha sido parcheado en la versión 0.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:agentgateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.12.0",
            "matchCriteriaId" : "C039D59A-DC0B-4CFA-B237-1C313AB26082"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/agentgateway/agentgateway/security/advisories/GHSA-v2x6-wwfw-r2rq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29795",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:15.950",
      "lastModified" : "2026-03-18T18:46:06.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::from_str does not validate that the input length is within the declared maximum (MAX). Calling StringM::<N>::from_str(s) where s is longer than N bytes succeeds and returns an Ok value instead of Err(Error::LengthExceedsMax), producing a StringM that violates its length invariant. This affects any code that constructs StringM values from string input using FromStr (including str::parse), and relies on the type's maximum length constraint being enforced. An oversized StringM could propagate through serialization, validation, or other logic that assumes the invariant holds. This issue has been patched in version 25.0.1."
      }, {
        "lang" : "es",
        "value" : "stellar-xdr es una librería y CLI que contiene tipos y funcionalidades para trabajar con Stellar XDR. Antes de la versión 25.0.1, StringM::from_str no valida que la longitud de entrada esté dentro del máximo declarado (MAX). Llamar a StringM::::from_str(s) donde s es más largo que N bytes tiene éxito y devuelve un valor Ok en lugar de Err(Error::LengthExceedsMax), produciendo un StringM que viola su invariante de longitud. Esto afecta a cualquier código que construye valores StringM a partir de una entrada de cadena usando FromStr (incluyendo str::parse), y que depende de que se aplique la restricción de longitud máxima del tipo. Un StringM sobredimensionado podría propagarse a través de la serialización, la validación u otra lógica que asume que el invariante se mantiene. Este problema ha sido parcheado en la versión 25.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellar:stellar-xdr:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "25.0.1",
            "matchCriteriaId" : "7DF08E48-746E-4AAE-B4F6-E9E8DE28E1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stellar/rs-stellar-xdr/commit/1f840013c3e2fca0321fb844b048afa01d10dda6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-stellar-xdr/issues/499",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/stellar/rs-stellar-xdr/pull/500",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/stellar/rs-stellar-xdr/security/advisories/GHSA-x57h-xx53-v53w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30223",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:16.113",
      "lastModified" : "2026-03-12T16:05:52.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either \"authJwtPubKeyPath\" (local RSA public key) or \"authJwtHmacSecret\" (HMAC secret), the configured audience value (authJwtAud) is not enforced during token parsing. As a result, validly signed JWT tokens with an incorrect aud claim are accepted for authentication. This allows authentication using tokens intended for a different audience/service. This issue has been patched in version 3000.11.1."
      }, {
        "lang" : "es",
        "value" : "OliveTin da acceso a comandos shell predefinidos desde una interfaz web. Antes de la versión 3000.11.1, cuando la autenticación JWT está configurada usando 'authJwtPubKeyPath' (clave pública RSA local) o 'authJwtHmacSecret' (secreto HMAC), el valor de audiencia configurado (authJwtAud) no se aplica durante el análisis del token. Como resultado, los tokens JWT firmados válidamente con una declaración 'aud' incorrecta son aceptados para la autenticación. Esto permite la autenticación usando tokens destinados a una audiencia/servicio diferente. Este problema ha sido parcheado en la versión 3000.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3000.11.1",
            "matchCriteriaId" : "36F31F34-F899-413C-9A07-C14E32C66807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/e97d8ecbd8d6ba468c418ca496fcd18f78131233",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-g962-2j28-3cg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30224",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:16.280",
      "lastModified" : "2026-03-12T15:57:33.710",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, OliveTin does not revoke server-side sessions when a user logs out. Although the browser cookie is cleared, the corresponding session remains valid in server storage until expiry (default ≈ 1 year). An attacker with a previously stolen or captured session cookie can continue authenticating after logout, resulting in a post-logout authentication bypass. This is a session management flaw that violates expected logout semantics. This issue has been patched in version 3000.11.1."
      }, {
        "lang" : "es",
        "value" : "OliveTin da acceso a comandos shell predefinidos desde una interfaz web. Antes de la versión 3000.11.1, OliveTin no revoca las sesiones del lado del servidor cuando un usuario cierra sesión. Aunque la cookie del navegador se borra, la sesión correspondiente permanece válida en el almacenamiento del servidor hasta su caducidad (por defecto ? 1 año). Un atacante con una cookie de sesión previamente robada o capturada puede continuar autenticándose después de cerrar sesión, lo que resulta en una omisión de autenticación posterior al cierre de sesión. Esto es una falla de gestión de sesiones que viola la semántica esperada del cierre de sesión. Este problema ha sido parcheado en la versión 3000.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        }, {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3000.11.1",
            "matchCriteriaId" : "36F31F34-F899-413C-9A07-C14E32C66807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/d6a0abc3755d43107be1939567c52953bcbec3d5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-gq2m-77hf-vwgh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30225",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:16.443",
      "lastModified" : "2026-03-12T15:46:39.533",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run. RestartAction constructs a new internal connect.Request without preserving the original caller’s authentication headers or cookies. When this synthetic request is passed to StartAction, the authentication resolver falls back to the guest user. If the guest account has broader permissions than the authenticated caller, this results in privilege escalation and unauthorized command execution. This vulnerability allows a low‑privileged authenticated user to bypass ACL restrictions and execute arbitrary configured shell actions. This issue has been patched in version 3000.11.1."
      }, {
        "lang" : "es",
        "value" : "OliveTin da acceso a comandos shell predefinidos desde una interfaz web. Antes de la versión 3000.11.1, una vulnerabilidad de confusión de contexto de autenticación en RestartAction permite a un usuario autenticado con bajos privilegios ejecutar acciones que no tiene permitido ejecutar. RestartAction construye una nueva connect.Request interna sin preservar los encabezados de autenticación o las cookies del llamador original. Cuando esta solicitud sintética se pasa a StartAction, el resolvedor de autenticación recurre al usuario invitado. Si la cuenta de invitado tiene permisos más amplios que el llamador autenticado, esto resulta en escalada de privilegios y ejecución de comandos no autorizada. Esta vulnerabilidad permite a un usuario autenticado con bajos privilegios eludir las restricciones de ACL y ejecutar acciones shell configuradas arbitrarias. Este problema ha sido parcheado en la versión 3000.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        }, {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3000.11.1",
            "matchCriteriaId" : "36F31F34-F899-413C-9A07-C14E32C66807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/cb46a597b2465235839ed58cf034b5e7b70ef911",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-p443-p7w5-2f7f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30227",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:16.607",
      "lastModified" : "2026-03-12T15:34:59.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MimeKit is a C# library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension (MIME), as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \\r\\n into the SMTP envelope address local-part (when the local-part is a quoted-string). This is non-compliant with RFC 5321 and can result in SMTP command injection (e.g., injecting additional RCPT TO / DATA / RSET commands) and/or mail header injection, depending on how the application uses MailKit/MimeKit to construct and send messages. The issue becomes exploitable when the attacker can influence a MailboxAddress (MAIL FROM / RCPT TO) value that is later serialized to an SMTP session. RFC 5321 explicitly defines the SMTP mailbox local-part grammar and does not permit CR (13) or LF (10) inside Quoted-string (qtextSMTP and quoted-pairSMTP ranges exclude control characters). SMTP commands are terminated by <CRLF>, making CRLF injection in command arguments particularly dangerous. This issue has been patched in version 4.15.1."
      }, {
        "lang" : "es",
        "value" : "MimeKit es una librería C# que puede ser utilizada para la creación y el análisis de mensajes utilizando la Extensión de Correo de Internet Multipropósito (MIME), tal como lo definen numerosas especificaciones del IETF. Antes de la versión 4.15.1, una vulnerabilidad de inyección CRLF en MimeKit permite a un atacante incrustar \\r\\n en la parte local de la dirección del sobre SMTP (cuando la parte local es una cadena entre comillas). Esto no cumple con la RFC 5321 y puede resultar en inyección de comandos SMTP (por ejemplo, inyectando comandos RCPT a / DATA / RSET adicionales) y/o inyección de encabezados de correo, dependiendo de cómo la aplicación utilice MailKit/MimeKit para construir y enviar mensajes. El problema se vuelve explotable cuando el atacante puede influir en un valor de MailboxAddress (MAIL FROM / RCPT TO) que luego se serializa a una sesión SMTP. La RFC 5321 define explícitamente la gramática de la parte local del buzón SMTP y no permite CR (13) o LF (10) dentro de Quoted-string (los rangos qtextSMTP y quoted-pairSMTP excluyen caracteres de control). Los comandos SMTP son terminados por , haciendo que la inyección CRLF en los argumentos de los comandos sea particularmente peligrosa. Este problema ha sido parcheado en la versión 4.15.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jstedfast:mimekit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.15.1",
            "matchCriteriaId" : "23724BF5-DA1C-4F23-BB68-30B4A6C6231B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jstedfast/MimeKit/security/advisories/GHSA-g7hc-96xr-gvvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30228",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:16.767",
      "lastModified" : "2026-03-11T12:33:58.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.5 and 9.5.0-alpha.3, the readOnlyMasterKey can be used to create and delete files via the Files API (POST /files/:filename, DELETE /files/:filename). This bypasses the read-only restriction which violates the access scope of the readOnlyMasterKey. Any Parse Server deployment that uses readOnlyMasterKey and exposes the Files API is affected. An attacker with access to the readOnlyMasterKey can upload arbitrary files or delete existing files. This issue has been patched in versions 8.6.5 and 9.5.0-alpha.3."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.5 y 9.5.0-alpha.3, la readOnlyMasterKey puede ser utilizada para crear y eliminar archivos a través de la API de Archivos (POST /files/:filename, DELETE /files/:filename). Esto elude la restricción de solo lectura, lo cual viola el alcance de acceso de la readOnlyMasterKey. Cualquier despliegue de Parse Server que utilice readOnlyMasterKey y exponga la API de Archivos se ve afectado. Un atacante con acceso a la readOnlyMasterKey puede cargar archivos arbitrarios o eliminar archivos existentes. Este problema ha sido parcheado en las versiones 8.6.5 y 9.5.0-alpha.3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.5",
            "matchCriteriaId" : "B9E4B220-BFC3-4DB0-A16B-9EE52442DB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.4.1",
            "matchCriteriaId" : "F228114F-93AA-4DCC-80D4-39D31F671F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/8.6.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Product" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/9.5.0-alpha.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Product" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-xfh7-phr7-gr2x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30229",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:16.920",
      "lastModified" : "2026-03-11T12:37:47.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.6 and 9.5.0-alpha.4, the readOnlyMasterKey can call POST /loginAs to obtain a valid session token for any user. This allows a read-only credential to impersonate arbitrary users with full read and write access to their data. Any Parse Server deployment that uses readOnlyMasterKey is affected. This issue has been patched in versions 8.6.6 and 9.5.0-alpha.4."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.6 y 9.5.0-alpha.4, la readOnlyMasterKey puede llamar a POST /loginAs para obtener un token de sesión válido para cualquier usuario. Esto permite a una credencial de solo lectura suplantar a usuarios arbitrarios con acceso completo de lectura y escritura a sus datos. Cualquier despliegue de Parse Server que utilice readOnlyMasterKey se ve afectado. Este problema ha sido parcheado en las versiones 8.6.6 y 9.5.0-alpha.4."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.6",
            "matchCriteriaId" : "7C6BD5DA-ABE7-4B84-8056-BEF926C67E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.4.1",
            "matchCriteriaId" : "F228114F-93AA-4DCC-80D4-39D31F671F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/8.6.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Product" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/9.5.0-alpha.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Product" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-79wj-8rqv-jvp5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30230",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:17.077",
      "lastModified" : "2026-04-09T20:20:02.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password for password‑protected files. It checks ownership/admin for private files but skips password verification, allowing thumbnail access without the password. This issue has been patched in version 1.7.2."
      }, {
        "lang" : "es",
        "value" : "Flare es una plataforma para compartir archivos autoalojable, basada en Next.js, que se integra con herramientas de captura de pantalla. Antes de la versión 1.7.2, el endpoint de miniaturas no valida la contraseña para los archivos protegidos con contraseña. Verifica la propiedad/administración para archivos privados, pero omite la verificación de la contraseña, permitiendo el acceso a las miniaturas sin la contraseña. Este problema ha sido parcheado en la versión 1.7.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flintsh:flare:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "4166EF32-3722-49DA-8764-A48E4CE75863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlintSH/Flare/security/advisories/GHSA-3x7v-x3r6-mjh7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30231",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:17.223",
      "lastModified" : "2026-04-09T20:21:57.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the raw and direct file routes only block unauthenticated users from accessing private files. Any authenticated, non‑owner user who knows the file URL can retrieve the content, which is inconsistent with stricter checks used by other endpoints. This issue has been patched in version 1.7.2."
      }, {
        "lang" : "es",
        "value" : "Flare es una plataforma para compartir archivos autoalojable, basada en Next.js, que se integra con herramientas de captura de pantalla. Antes de la versión 1.7.2, las rutas de archivo sin procesar y directas solo bloqueaban el acceso de usuarios no autenticados a archivos privados. Cualquier usuario autenticado no propietario que conozca la URL del archivo puede recuperar el contenido, lo cual es inconsistente con las comprobaciones más estrictas utilizadas por otros puntos finales. Este problema ha sido parcheado en la versión 1.7.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flintsh:flare:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "4166EF32-3722-49DA-8764-A48E4CE75863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlintSH/Flare/security/advisories/GHSA-gwqr-xf5c-5569",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30233",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:17.370",
      "lastModified" : "2026-03-12T15:19:08.037",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution (exec) may be correctly denied, the backend does not enforce IsAllowedView() when constructing dashboard and action binding responses. As a result, restricted users can retrieve action titles, IDs, icons, and argument metadata. This issue has been patched in version 3000.11.1."
      }, {
        "lang" : "es",
        "value" : "OliveTin permite el acceso a comandos shell predefinidos desde una interfaz web. Antes de la versión 3000.11.1, una falla de autorización en OliveTin permite a usuarios autenticados con permiso view: false enumerar enlaces de acción y metadatos a través de los puntos finales del panel de control y la API. Aunque la ejecución (exec) puede ser denegada correctamente, el backend no aplica IsAllowedView() al construir las respuestas del panel de control y los enlaces de acción. Como resultado, los usuarios restringidos pueden recuperar títulos de acción, IDs, iconos y metadatos de argumentos. Este problema ha sido parcheado en la versión 3000.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3000.11.1",
            "matchCriteriaId" : "36F31F34-F899-413C-9A07-C14E32C66807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OliveTin/OliveTin/commit/d7962710e7c46f6bdda4188b5b0cdbde4be665a0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-jf73-858c-54pg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30835",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T21:16:17.560",
      "lastModified" : "2026-03-11T13:08:11.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.7 and 9.5.0-alpha.6,  malformed $regex query parameter (e.g. [abc) causes the database to return a structured error object that is passed unsanitized through the API response. This leaks database internals such as error messages, error codes, code names, cluster timestamps, and topology details. The vulnerability is exploitable by any client that can send query requests, depending on the deployment's permission configuration. This issue has been patched in versions 8.6.7 and 9.5.0-alpha.6."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.7 y 9.5.0-alpha.6, un parámetro de consulta $regex malformado (por ejemplo, [abc) hace que la base de datos devuelva un objeto de error estructurado que se pasa sin sanitizar a través de la respuesta de la API. Esto filtra detalles internos de la base de datos como mensajes de error, códigos de error, nombres de código, marcas de tiempo del clúster y detalles de topología. La vulnerabilidad es explotable por cualquier cliente que pueda enviar solicitudes de consulta, dependiendo de la configuración de permisos del despliegue. Este problema ha sido parcheado en las versiones 8.6.7 y 9.5.0-alpha.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.7",
            "matchCriteriaId" : "C1B5B68A-68F8-443A-B4F7-FB4DB1CB3954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.0",
            "matchCriteriaId" : "77A07A2F-C8ED-4D78-A9C0-66AB42F69F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D67029D-C1BD-4D46-A84F-C52B4D364268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B10930D-B416-4D9A-BA26-F0AD22BFAE28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/8.6.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/9.5.0-alpha.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-9cp7-3q5w-j92g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25679",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2026-03-06T22:16:00.720",
      "lastModified" : "2026-04-21T14:43:03.800",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs."
      }, {
        "lang" : "es",
        "value" : "url.Parse validó insuficientemente el componente de host/autoridad y aceptó algunas URL inválidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.25.8",
            "matchCriteriaId" : "2D293CC0-B163-4E62-B985-52FB6ECA64C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40FE3CB-0D03-462B-8A19-4DF1920ABE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/752180",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://go.dev/issue/77578",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
        "source" : "security@golang.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2026-4601",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27137",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2026-03-06T22:16:00.850",
      "lastModified" : "2026-04-21T14:40:31.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered."
      }, {
        "lang" : "es",
        "value" : "Al verificar una cadena de certificados que contiene un certificado con múltiples restricciones de dirección de correo electrónico que comparten porciones locales comunes pero porciones de dominio diferentes, estas restricciones no se aplicarán correctamente, y solo la última restricción será considerada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40FE3CB-0D03-462B-8A19-4DF1920ABE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/752182",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://go.dev/issue/77952",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
        "source" : "security@golang.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2026-4599",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27138",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2026-03-06T22:16:00.963",
      "lastModified" : "2026-04-21T14:39:28.073",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS."
      }, {
        "lang" : "es",
        "value" : "La verificación de certificados puede entrar en pánico cuando un certificado en la cadena tiene un nombre DNS vacío y otro certificado en la cadena tiene restricciones de nombre excluidas. Esto puede bloquear programas que están verificando directamente cadenas de certificados X.509, o aquellos que usan TLS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40FE3CB-0D03-462B-8A19-4DF1920ABE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/752183",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://go.dev/issue/77953",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
        "source" : "security@golang.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2026-4600",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27139",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2026-03-06T22:16:01.070",
      "lastModified" : "2026-04-21T14:32:36.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root."
      }, {
        "lang" : "es",
        "value" : "En plataformas Unix, al listar el contenido de un directorio usando File.ReadDir o File.Readdir, el FileInfo devuelto podría hacer referencia a un archivo fuera de la Raíz en la que se abrió el Archivo. El impacto de este escape se limita a la lectura de metadatos proporcionados por lstat desde ubicaciones arbitrarias en el sistema de archivos sin permitir la lectura o escritura de archivos fuera de la raíz."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.25.8",
            "matchCriteriaId" : "2D293CC0-B163-4E62-B985-52FB6ECA64C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40FE3CB-0D03-462B-8A19-4DF1920ABE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/749480",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://go.dev/issue/77827",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
        "source" : "security@golang.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2026-4602",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27142",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2026-03-06T22:16:01.177",
      "lastModified" : "2026-04-21T14:30:01.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value \"refresh\". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow \"url=\" by setting htmlmetacontenturlescape=0."
      }, {
        "lang" : "es",
        "value" : "Acciones que insertan URLs en el atributo content de las etiquetas meta HTML no se escapan. Esto puede permitir XSS si la etiqueta meta también tiene un atributo http-equiv con el valor 'refresh'. Se ha añadido una nueva configuración GODEBUG, htmlmetacontenturlescape, que se puede usar para deshabilitar el escape de URLs en acciones en el atributo content de las etiquetas meta que siguen a 'url=' al establecer htmlmetacontenturlescape=0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.25.8",
            "matchCriteriaId" : "2D293CC0-B163-4E62-B985-52FB6ECA64C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40FE3CB-0D03-462B-8A19-4DF1920ABE82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/752081",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://go.dev/issue/77954",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
        "source" : "security@golang.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2026-4603",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30237",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T22:16:01.283",
      "lastModified" : "2026-03-11T13:33:49.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there is a reflected XSS vulnerability in the GroupOffice installer, endpoint install/license.php. The POST field license is rendered without escaping inside a <textarea>, allowing a </textarea><script>...</script> breakout.. This issue has been patched in versions 6.8.155, 25.0.88, and 26.0.10."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta empresarial de gestión de relaciones con los clientes y groupware. Antes de las versiones 6.8.155, 25.0.88 y 26.0.10, existe una vulnerabilidad XSS reflejada en el instalador de GroupOffice, endpoint install/license.php. El campo POST license se representa sin escapar dentro de un , lo que permite una fuga . Este problema se ha corregido en las versiones 6.8.155, 25.0.88 y 26.0.10."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.155",
            "matchCriteriaId" : "415D8E7D-4453-4E5A-A217-075E542202CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.88",
            "matchCriteriaId" : "E2B89827-16A4-41F5-8D9A-5F88E49B716F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.2.1",
            "versionEndExcluding" : "26.0.10",
            "matchCriteriaId" : "E8AD3E6F-A69E-4CE5-9580-386D5EC22E51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-hchr-32xh-x5rx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30238",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T22:16:01.437",
      "lastModified" : "2026-03-11T13:32:48.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there is a reflected XSS vulnerability in GroupOffice on the external/index flow. The f parameter (Base64 JSON) is decoded and then injected into an inline JavaScript block without strict escaping, allowing </script><script>...</script> injection and arbitrary JavaScript execution in the victim's browser. This issue has been patched in versions 6.8.155, 25.0.88, and 26.0.10."
      }, {
        "lang" : "es",
        "value" : "Group-Office es una herramienta empresarial de gestión de relaciones con los clientes y groupware. Antes de las versiones 6.8.155, 25.0.88 y 26.0.10, existe una vulnerabilidad XSS reflejada en GroupOffice en el flujo externo/índice. El parámetro f (Base64 JSON) se decodifica y luego se inyecta en un bloque JavaScript en línea sin un escape estricto, lo que permite la inyección  y la ejecución arbitraria de JavaScript en el navegador de la víctima. Este problema se ha corregido en las versiones 6.8.155, 25.0.88 y 26.0.10."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.155",
            "matchCriteriaId" : "415D8E7D-4453-4E5A-A217-075E542202CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.1",
            "versionEndExcluding" : "25.0.88",
            "matchCriteriaId" : "E2B89827-16A4-41F5-8D9A-5F88E49B716F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.2.1",
            "versionEndExcluding" : "26.0.10",
            "matchCriteriaId" : "E8AD3E6F-A69E-4CE5-9580-386D5EC22E51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-7p2f-c33m-rv5v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30241",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T22:16:01.587",
      "lastModified" : "2026-03-12T15:16:45.377",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercurius is a GraphQL adapter for Fastify. Prior to version 16.8.0, Mercurius fails to enforce the configured queryDepth limit on GraphQL subscription queries received over WebSocket connections. The depth check is correctly applied to HTTP queries and mutations, but subscription queries are parsed and executed without invoking the depth validation. This allows a remote client to submit arbitrarily deeply nested subscription queries over WebSocket, bypassing the intended depth restriction. On schemas with recursive types, this can lead to denial of service through exponential data resolution on each subscription event. This issue has been patched in version 16.8.0."
      }, {
        "lang" : "es",
        "value" : "Mercurius es un adaptador GraphQL para Fastify. Antes de la versión 16.8.0, Mercurius no aplica el límite de queryDepth configurado en las consultas de suscripción GraphQL recibidas a través de conexiones WebSocket. La verificación de profundidad se aplica correctamente a las consultas y mutaciones HTTP, pero las consultas de suscripción se analizan y ejecutan sin invocar la validación de profundidad. Esto permite a un cliente remoto enviar consultas de suscripción anidadas arbitrariamente profundas a través de WebSocket, eludiendo la restricción de profundidad prevista. En esquemas con tipos recursivos, esto puede llevar a una denegación de servicio a través de la resolución exponencial de datos en cada evento de suscripción. Este problema ha sido parcheado en la versión 16.8.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurius_project:mercurius:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "16.8.0",
            "matchCriteriaId" : "D17316EB-4DF9-485E-87DC-C84C68FAC0AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mercurius-js/mercurius/commit/5b56f60f4b0d60780b0ff499a479bd830bdd6986",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mercurius-js/mercurius/security/advisories/GHSA-m4h2-mjfm-mp55",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30242",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T22:16:01.740",
      "lastModified" : "2026-03-10T16:17:24.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plane is an an open-source project management tool. Prior to version 1.2.3, the webhook URL validation in plane/app/serializers/webhook.py only checks ip.is_loopback, allowing attackers with workspace ADMIN role to create webhooks pointing to private/internal network addresses (10.x.x.x, 172.16.x.x, 192.168.x.x, 169.254.169.254, etc.). When webhook events fire, the server makes requests to these internal addresses and stores the response — enabling SSRF with full response read-back. This issue has been patched in version 1.2.3."
      }, {
        "lang" : "es",
        "value" : "Plane es una herramienta de gestión de proyectos de código abierto. Antes de la versión 1.2.3, la validación de URL de webhook en plane/app/serializers/webhook.py solo verifica ip.is_loopback, permitiendo a atacantes con rol de ADMINISTRADOR de espacio de trabajo crear webhooks que apunten a direcciones de red privadas/internas (10.x.x.x, 172.16.x.x, 192.168.x.x, 169.254.169.254, etc.). Cuando se activan los eventos de webhook, el servidor realiza solicitudes a estas direcciones internas y almacena la respuesta — lo que permite SSRF con lectura completa de la respuesta. Este problema ha sido parcheado en la versión 1.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plane:plane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "4CF078AB-797F-419E-AACD-6D74F60E2B60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/makeplane/plane/releases/tag/v1.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/makeplane/plane/security/advisories/GHSA-fpx8-73gf-7x73",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30244",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-06T22:16:01.900",
      "lastModified" : "2026-03-10T16:23:32.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plane is an an open-source project management tool. Prior to version 1.2.2, unauthenticated attackers can enumerate workspace members and extract sensitive information including email addresses, user roles, and internal identifiers. The vulnerability stems from Django REST Framework permission classes being incorrectly configured to allow anonymous access to protected endpoints. This issue has been patched in version 1.2.2."
      }, {
        "lang" : "es",
        "value" : "Plane es una herramienta de gestión de proyectos de código abierto. Antes de la versión 1.2.2, atacantes no autenticados pueden enumerar a los miembros del espacio de trabajo y extraer información sensible, incluyendo direcciones de correo electrónico, roles de usuario e identificadores internos. La vulnerabilidad se debe a que las clases de permisos de Django REST Framework estaban configuradas incorrectamente para permitir el acceso anónimo a puntos finales protegidos. Este problema ha sido parcheado en la versión 1.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plane:plane:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "5CFB7634-F7C4-45BE-BCA9-FB73B6287FAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/makeplane/plane/releases/tag/v1.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/makeplane/plane/security/advisories/GHSA-87x4-j8vh-p5qf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3233",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2026-03-06T23:16:07.330",
      "lastModified" : "2026-03-06T23:16:07.330",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1644",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T00:16:13.100",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'update_action' function. This makes it possible for unauthenticated attackers to approve or reject user account registrations via a forged request granted they can trick an administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin WP Frontend Profile para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.3.8, inclusive. Esto se debe a la falta de validación de nonce en la función 'update_action'. Esto hace posible que atacantes no autenticados aprueben o rechacen registros de cuentas de usuario a través de una petición falsificada, siempre que puedan engañar a un administrador para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-front-end-profile/tags/1.3.8/functions/wpfep-functions.php#L987",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-front-end-profile/trunk/functions/wpfep-functions.php#L987",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3466608%40wp-front-end-profile&new=3466608%40wp-front-end-profile&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/74b186fd-5825-4a20-829b-6b8a5ddbe853?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1981",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T00:16:13.280",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the winston_disconnect() function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's API connection settings via the 'winston_disconnect' AJAX action."
      }, {
        "lang" : "es",
        "value" : "El plugin HUMN-1 AI Website Scanner &amp; Human Certification by Winston AI para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función winston_disconnect() en todas las versiones hasta la 0.0.3, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, restablezcan la configuración de conexión de la API del plugin a través de la acción AJAX 'winston_disconnect'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/winston-ai-wp/tags/0.0.3/ajax/Ajax_Admin.php#L193",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/winston-ai-wp/tags/0.0.3/ajax/Ajax_Admin.php#L38",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/winston-ai-wp/trunk/ajax/Ajax_Admin.php#L193",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/winston-ai-wp/trunk/ajax/Ajax_Admin.php#L38",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3468726%40winston-ai-wp&new=3468726%40winston-ai-wp",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b1a82073-ab63-42dd-9bc0-d21f53a5af25?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2371",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T00:16:13.457",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3. This is due to missing authorization and post status validation in the `gspb_el_reusable_load()` AJAX handler. The handler accepts an arbitrary `post_id` parameter and renders the content of any `wp_block` post without checking `current_user_can('read_post', $post_id)` or verifying the post status. Combined with the nonce being exposed to unauthenticated users on any public page using the `[wp_reusable_render]` shortcode with `ajax=\"1\"`, this makes it possible for unauthenticated attackers to retrieve the rendered HTML content of private, draft, or password-protected reusable blocks."
      }, {
        "lang" : "es",
        "value" : "El plugin Greenshift – bloques de animación y constructor de páginas para WordPress es vulnerable a Referencia Directa Insegura a Objeto en todas las versiones hasta la 12.8.3, inclusive. Esto se debe a la falta de autorización y validación del estado de la publicación en el gestor AJAX 'gspb_el_reusable_load()'. El gestor acepta un parámetro 'post_id' arbitrario y renderiza el contenido de cualquier publicación 'wp_block' sin verificar 'current_user_can('read_post', $post_id)' o el estado de la publicación. Combinado con que el nonce se expone a usuarios no autenticados en cualquier página pública que utilice el shortcode '[wp_reusable_render]' con 'ajax=\"1\"', esto hace posible que atacantes no autenticados recuperen el contenido HTML renderizado de bloques reutilizables privados, en borrador o protegidos con contraseña."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/12.7.1/settings.php#L1630",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/12.7.1/settings.php#L1674",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/trunk/settings.php#L1674",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3465111/greenshift-animation-and-page-builder-blocks/trunk/settings.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/52632b50-9755-4ebd-a1a8-587cc633debb?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25070",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-07T01:15:57.427",
      "lastModified" : "2026-03-12T15:11:20.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticated remote attackers to execute arbitrary operating system commands. Attackers can inject malicious commands through the destIp parameter to achieve remote code execution with root privileges on the network switch."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.04.B07 y anteriores del switch de red XikeStor SKS8310-8X contienen una vulnerabilidad de inyección de comandos del sistema operativo en el endpoint /goform/PingTestSet que permite a atacantes remotos no autenticados ejecutar comandos arbitrarios del sistema operativo. Los atacantes pueden inyectar comandos maliciosos a través del parámetro destIp para lograr la ejecución remota de código con privilegios de root en el switch de red."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seekswan:zikestor_sks8310-8x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.b07",
            "matchCriteriaId" : "428F1B0B-87A7-43BB-B927-B9FCCF7DF783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seekswan:zikestor_sks8310-8x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A40072B-67E8-4D29-AC3A-D2BEF0DAF847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://openwrt.org/toh/xikestor/sks8310-8x?s%5B%5D=xikestor&s%5B%5D=sks8310&s%5B%5D=8x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.aliexpress.com/i/3256808697772710.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25071",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-07T01:15:58.083",
      "lastModified" : "2026-03-12T15:00:02.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows unauthenticated remote attackers to download device configuration files. Attackers can access this endpoint without credentials to retrieve sensitive configuration information including VLAN settings and IP addressing details."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.04.B07 y anteriores del switch de red XikeStor SKS8310-8X contienen una vulnerabilidad de autenticación faltante en el endpoint /switch_config.src que permite a atacantes remotos no autenticados descargar archivos de configuración del dispositivo. Los atacantes pueden acceder a este endpoint sin credenciales para recuperar información de configuración sensible, incluyendo la configuración de VLAN y detalles de direccionamiento IP."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seekswan:zikestor_sks8310-8x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.b07",
            "matchCriteriaId" : "428F1B0B-87A7-43BB-B927-B9FCCF7DF783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seekswan:zikestor_sks8310-8x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A40072B-67E8-4D29-AC3A-D2BEF0DAF847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://openwrt.org/toh/xikestor/sks8310-8x?s%5B%5D=xikestor&s%5B%5D=sks8310&s%5B%5D=8x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.aliexpress.com/i/3256808697772710.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25072",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-07T01:15:58.253",
      "lastModified" : "2026-03-12T14:56:31.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated sessions. Attackers can predict session identifiers using insufficiently random cookie values and exploit exposed session parameters in URLs to gain unauthorized access to authenticated user sessions."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.04.B07 y anteriores del switch de red XikeStor SKS8310-8X contienen una vulnerabilidad de identificador de sesión predecible en el endpoint /goform/SetLogin que permite a atacantes remotos secuestrar sesiones autenticadas. Los atacantes pueden predecir identificadores de sesión utilizando valores de cookie insuficientemente aleatorios y explotar parámetros de sesión expuestos en las URL para obtener acceso no autorizado a sesiones de usuario autenticadas."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seekswan:zikestor_sks8310-8x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.b07",
            "matchCriteriaId" : "428F1B0B-87A7-43BB-B927-B9FCCF7DF783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seekswan:zikestor_sks8310-8x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A40072B-67E8-4D29-AC3A-D2BEF0DAF847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://openwrt.org/toh/xikestor/sks8310-8x?s%5B%5D=xikestor&s%5B%5D=sks8310&s%5B%5D=8x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.aliexpress.com/i/3256808697772710.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25073",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-07T01:15:58.413",
      "lastModified" : "2026-03-12T14:55:15.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary script content through the System Name field. Attackers can inject malicious scripts that execute in a victim's browser when the stored value is viewed due to improper output encoding."
      }, {
        "lang" : "es",
        "value" : "Las versiones de firmware 1.04.B07 y anteriores del switch de red XikeStor SKS8310-8X contienen una vulnerabilidad de cross-site scripting almacenado que permite a atacantes autenticados inyectar contenido de script arbitrario a través del campo Nombre del Sistema. Los atacantes pueden inyectar scripts maliciosos que se ejecutan en el navegador de una víctima cuando se visualiza el valor almacenado debido a una codificación de salida incorrecta."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seekswan:zikestor_sks8310-8x_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04.b07",
            "matchCriteriaId" : "428F1B0B-87A7-43BB-B927-B9FCCF7DF783"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seekswan:zikestor_sks8310-8x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A40072B-67E8-4D29-AC3A-D2BEF0DAF847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://openwrt.org/toh/xikestor/sks8310-8x?s%5B%5D=xikestor&s%5B%5D=sks8310&s%5B%5D=8x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.aliexpress.com/i/3256808697772710.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1650",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:11.720",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' function in all versions up to, and including, 1.7.8.1. This makes it possible for unauthenticated attackers to delete arbitrary custom event fields via the 'delete_custom_field' and 'id' parameters."
      }, {
        "lang" : "es",
        "value" : "El plugin MDJM Event Management para WordPress es vulnerable a la modificación no autorizada de datos debido a una comprobación de capacidad faltante en la función 'custom_fields_controller' en todas las versiones hasta la 1.7.8.1, inclusive. Esto hace posible que atacantes no autenticados eliminen campos de evento personalizados arbitrarios a través de los parámetros 'delete_custom_field' e 'id'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mobile-dj-manager/tags/1.7.7/includes/admin/pages/event-fields.php#L100",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mobile-dj-manager/trunk/includes/admin/pages/event-fields.php#L100",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3464190%40mobile-dj-manager&new=3464190%40mobile-dj-manager&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb309336-5b35-45cf-9c58-4bb75d8a5cba?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1902",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:11.893",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Hammas Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apix' parameter in the 'hp-calendar-manage-redirect' shortcode in all versions up to, and including, 1.5.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Hammas Calendar para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'apix' en el shortcode 'hp-calendar-manage-redirect' en todas las versiones hasta la 1.5.11, inclusive, debido a una sanitización insuficiente de la entrada y un escape inadecuado de la salida. Esto permite a atacantes autenticados, con acceso de nivel Colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/hammas-calendar/tags/1.5.11/hp-calendar.php#L37",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/hammas-calendar/tags/1.5.11/src/HpPlugin.php#L54",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3474583%40hammas-calendar&new=3474583%40hammas-calendar&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/03956922-988a-4cb6-bf20-51878a5b1555?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2020",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:12.077",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to the deserialization of untrusted input supplied via the 'included' parameter of the plugin's shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."
      }, {
        "lang" : "es",
        "value" : "El plugin JS Archive List para WordPress es vulnerable a la inyección de objetos PHP en todas las versiones hasta la 6.1.7, inclusive, a través del atributo del shortcode 'included'. Esto se debe a la deserialización de entrada no confiable suministrada a través del parámetro 'included' del shortcode del plugin. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten un objeto PHP. No se conoce ninguna cadena POP presente en el software vulnerable. Si una cadena POP está presente a través de un plugin o tema adicional instalado en el sistema objetivo, podría permitir al atacante eliminar archivos arbitrarios, recuperar datos sensibles o ejecutar código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/jquery-archive-list-widget/tags/6.1.7/classes/class-jq-archive-list-widget.php#L674",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/jquery-archive-list-widget/tags/6.1.7/classes/class-js-archive-list-settings.php#L10",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/jquery-archive-list-widget/trunk/classes/class-jq-archive-list-widget.php#L674",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/jquery-archive-list-widget/trunk/classes/class-js-archive-list-settings.php#L10",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3466978%40jquery-archive-list-widget&new=3466978%40jquery-archive-list-widget&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9b0f6653-471b-4cee-9c92-f24dbe2c2dbd?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2429",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:12.257",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'ce_venue_name' CSV field in the `on_save_changes_venues` function in all versions up to, and including, 1.5.8. This is due to insufficient escaping on the user-supplied CSV data and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via a crafted CSV file upload."
      }, {
        "lang" : "es",
        "value" : "El plugin Community Events para WordPress es vulnerable a inyección SQL a través del campo CSV 'ce_venue_name' en la función 'on_save_changes_venues' en todas las versiones hasta la 1.5.8, inclusive. Esto se debe a un escape insuficiente en los datos CSV proporcionados por el usuario y a la falta de preparación suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, añadan consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer información sensible de la base de datos a través de la carga de un archivo CSV manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/community-events/tags/1.5.7/community-events.php#L743",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/community-events/trunk/community-events.php#L743",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3462021%40community-events&new=3462021%40community-events&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bd184c80-e785-4e9b-961d-9c3378688f91?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2431",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:12.430",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date_from' and 'date_to' parameters in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin CM Custom Reports para WordPress es vulnerable a Cross-Site Scripting Reflejado a través de los parámetros 'date_from' y 'date_to' en todas las versiones hasta la 1.2.7, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutan si logran engañar a un usuario para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cm-custom-reports/tags/1.2.7/backend/reports/RegisteredUsersReport.php#L19",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cm-custom-reports/trunk/backend/reports/RegisteredUsersReport.php#L19",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e9b918e1-9bf7-4f90-9e77-829bc8012cbb?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2488",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:12.600",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg_delete_msg() function in all versions up to, and including, 5.9.8.1. This is due to the function not verifying that the requesting user has permission to delete the targeted message. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary messages belonging to any user by sending a direct request with a valid message ID (mid parameter)."
      }, {
        "lang" : "es",
        "value" : "El plugin ProfileGrid – Perfiles de Usuario, Grupos y Comunidades para WordPress es vulnerable a la eliminación no autorizada de mensajes debido a una falta de verificación de capacidad en la función pg_delete_msg() en todas las versiones hasta la 5.9.8.1, inclusive. Esto se debe a que la función no verifica que el usuario solicitante tenga permiso para eliminar el mensaje objetivo. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, eliminen mensajes arbitrarios pertenecientes a cualquier usuario enviando una solicitud directa con un ID de mensaje válido (parámetro mid)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.7.1/includes/class-profile-magic.php#L372",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.7.1/public/class-profile-magic-public.php#L5913",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/includes/class-profile-magic.php#L372",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L5913",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3464213%40profilegrid-user-profiles-groups-and-communities&new=3464213%40profilegrid-user-profiles-groups-and-communities&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4c611fa0-28ef-4425-8614-fb61e250e625?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2494",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:12.787",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.8.2. This is due to missing nonce validation on the membership request management page (approve and decline actions). This makes it possible for unauthenticated attackers to approve or deny group membership requests via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin ProfileGrid – User Profiles, Groups and Communities para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 5.9.8.2, inclusive. Esto se debe a la falta de validación de nonce en la página de gestión de solicitudes de membresía (acciones de aprobación y rechazo). Esto hace posible que atacantes no autenticados aprueben o denieguen solicitudes de membresía de grupo a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción, como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.7.1/admin/partials/pm-membership-requests.php#L14",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/admin/partials/pm-membership-requests.php#L14",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3472582%40profilegrid-user-profiles-groups-and-communities&new=3472582%40profilegrid-user-profiles-groups-and-communities&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6b8ffdb9-b8c6-428c-a047-8e5286b2c2fb?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2721",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:12.963",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin MailArchiver para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 4.4.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio e instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pierre-Lannoy/wp-mailarchiver/commit/946c1a700bbecc6080a427fd428de800334af824",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/tags/4.4.0/includes/system/class-form.php#L126",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/tags/4.4.0/includes/system/class-form.php#L156",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/tags/4.4.0/includes/system/class-form.php#L55",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/tags/4.4.0/includes/system/class-form.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mailarchiver/trunk/includes/system/class-form.php#L92",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3465101%40mailarchiver&new=3465101%40mailarchiver&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/df2674c9-da77-412c-a812-f1749f54d04b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2722",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:13.147",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.26.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Stock Ticker para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 3.26.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/stock-ticker/tags/3.24.6/classes/class-wpau-stock-ticker-settings.php#L810",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/stock-ticker/trunk/classes/class-wpau-stock-ticker-settings.php#L810",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3474252%40stock-ticker&new=3474252%40stock-ticker&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e97ed28c-b4a2-47ee-8fbe-7c995fa102cb?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3352",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T02:16:13.330",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the `update_wp_memory_constants()` method. This is due to insufficient input validation on the `wp_memory_limit` and `wp_max_memory_limit` settings before writing them to `wp-config.php`. The `sanitize_text_field()` function used for sanitization does not filter single quotes, allowing an attacker to break out of the string context in a PHP `define()` statement. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject and execute arbitrary PHP code on the server by modifying `wp-config.php`, which is loaded on every page request."
      }, {
        "lang" : "es",
        "value" : "El plugin Easy PHP Settings para WordPress es vulnerable a la inyección de código PHP en todas las versiones hasta la 1.0.4, inclusive, a través del método 'update_wp_memory_constants()'. Esto se debe a una validación de entrada insuficiente en las configuraciones 'wp_memory_limit' y 'wp_max_memory_limit' antes de escribirlas en 'wp-config.php'. La función 'sanitize_text_field()' utilizada para la sanitización no filtra las comillas simples, lo que permite a un atacante salir del contexto de la cadena en una declaración PHP 'define()'. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten y ejecuten código PHP arbitrario en el servidor modificando 'wp-config.php', que se carga en cada solicitud de página."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-php-settings/tags/1.0.4/class-easy-php-settings.php#L1800",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-php-settings/tags/1.0.5/class-easy-php-settings.php#L1998",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/easy-php-settings/trunk/class-easy-php-settings.php#L1800",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f9927487-99fb-46d9-a208-f19e0a371267?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30247",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T04:15:54.560",
      "lastModified" : "2026-03-11T19:22:24.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's \"Import document via URL\" feature is vulnerable to Server-Side Request Forgery (SSRF) through HTTP redirects. While the backend implements comprehensive URL validation (blocking private IPs, loopback addresses, reserved hostnames, and cloud metadata endpoints), it fails to validate redirect targets. An attacker can bypass all protections by using a redirect chain, forcing the server to access internal services. Additionally, Docker-specific internal addresses like host.docker.internal are not blocked. This issue has been patched in version 0.2.12."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.2.12, la característica 'Importar documento vía URL' de la aplicación es vulnerable a la falsificación de petición del lado del servidor (SSRF) a través de redirecciones HTTP. Aunque el backend implementa una validación exhaustiva de URL (bloqueando IPs privadas, direcciones de bucle invertido, nombres de host reservados y puntos finales de metadatos en la nube), no logra validar los objetivos de redirección. Un atacante puede eludir todas las protecciones mediante el uso de una cadena de redirección, forzando al servidor a acceder a servicios internos. Además, las direcciones internas específicas de Docker como host.docker.internal no están bloqueadas. Este problema ha sido parcheado en la versión 0.2.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.12",
            "matchCriteriaId" : "7B86D061-D1A8-438E-802E-D5408C339349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-595m-wc8g-6qgc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30820",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T05:16:26.243",
      "lastModified" : "2026-03-11T13:46:22.463",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, Flowise trusts any HTTP client that sets the header x-request-from: internal, allowing an authenticated tenant session to bypass all /api/v1/** authorization checks. With only a browser cookie, a low-privilege tenant can invoke internal administration endpoints (API key management, credential stores, custom function execution, etc.), effectively escalating privilege. This issue has been patched in version 3.0.13."
      }, {
        "lang" : "es",
        "value" : "Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelo de lenguaje grande personalizado. Antes de la versión 3.0.13, Flowise confía en cualquier cliente HTTP que establezca el encabezado x-request-from: internal, permitiendo que una sesión de inquilino autenticada omita todas las comprobaciones de autorización de /api/v1/**. Con solo una cookie de navegador, un inquilino de bajo privilegio puede invocar puntos finales de administración internos (gestión de claves API, almacenes de credenciales, ejecución de funciones personalizadas, etc.), escalando privilegios de manera efectiva. Este problema ha sido parcheado en la versión 3.0.13."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "8C6D6D18-106F-49FE-B523-B5DCAADFB40F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wvhq-wp8g-c7vq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30821",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T05:16:26.907",
      "lastModified" : "2026-03-11T13:45:38.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the /api/v1/attachments/:chatflowId/:chatId endpoint is listed in WHITELIST_URLS, allowing unauthenticated access to the file upload API. While the server validates uploads based on the MIME types defined in chatbotConfig.fullFileUpload.allowedUploadFileTypes, it implicitly trusts the client-provided Content-Type header (file.mimetype) without verifying the file's actual content (magic bytes) or extension (file.originalname). Consequently, an attacker can bypass this restriction by spoofing the Content-Type as a permitted type (e.g., application/pdf) while uploading malicious scripts or arbitrary files. Once uploaded via addArrayFilesToStorage, these files persist in backend storage (S3, GCS, or local disk). This vulnerability serves as a critical entry point that, when chained with other features like static hosting or file retrieval, can lead to Stored XSS, malicious file hosting, or Remote Code Execution (RCE). This issue has been patched in version 3.0.13."
      }, {
        "lang" : "es",
        "value" : "Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelo de lenguaje grande personalizado. Antes de la versión 3.0.13, el endpoint /api/v1/attachments/:chatflowId/:chatId está listado en WHITELIST_URLS, permitiendo acceso no autenticado a la API de carga de archivos. Aunque el servidor valida las cargas basándose en los tipos MIME definidos en chatbotConfig.fullFileUpload.allowedUploadFileTypes, confía implícitamente en el encabezado Content-Type proporcionado por el cliente (file.mimetype) sin verificar el contenido real del archivo (bytes mágicos) o la extensión (file.originalname). En consecuencia, un atacante puede eludir esta restricción falsificando el Content-Type como un tipo permitido (p. ej., application/pdf) mientras carga scripts maliciosos o archivos arbitrarios. Una vez cargados a través de addArrayFilesToStorage, estos archivos persisten en el almacenamiento de backend (S3, GCS o disco local). Esta vulnerabilidad sirve como un punto de entrada crítico que, cuando se encadena con otras características como el alojamiento estático o la recuperación de archivos, puede conducir a XSS Almacenado, alojamiento de archivos maliciosos o Ejecución Remota de Código (RCE). Este problema ha sido parcheado en la versión 3.0.13."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "8C6D6D18-106F-49FE-B523-B5DCAADFB40F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-j8g8-j7fc-43v6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30822",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T05:16:27.483",
      "lastModified" : "2026-03-11T13:40:13.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13."
      }, {
        "lang" : "es",
        "value" : "Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelo de lenguaje grande personalizado. Antes de la versión 3.0.13, los usuarios no autenticados pueden inyectar valores arbitrarios en campos internos de la base de datos al crear clientes potenciales. Este problema ha sido parcheado en la versión 3.0.13."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "8C6D6D18-106F-49FE-B523-B5DCAADFB40F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-mq4r-h2gh-qv7x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27796",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:09.663",
      "lastModified" : "2026-03-10T16:24:21.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Homarr is an open-source dashboard. Prior to version 1.54.0, the integration.all tRPC endpoint in Homarr is exposed as a publicProcedure, allowing unauthenticated users to retrieve a complete list of configured integrations. This metadata includes sensitive information such as internal service URLs, integration names, and service types. This issue has been patched in version 1.54.0."
      }, {
        "lang" : "es",
        "value" : "Homarr es un panel de control de código abierto. Antes de la versión 1.54.0, el endpoint tRPC integration.all en Homarr está expuesto como un publicProcedure, permitiendo a usuarios no autenticados recuperar una lista completa de integraciones configuradas. Estos metadatos incluyen información sensible como URLs de servicios internos, nombres de integración y tipos de servicio. Este problema ha sido parcheado en la versión 1.54.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:homarr:homarr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.54.0",
            "matchCriteriaId" : "CFFCA4B2-8A81-4B17-93E9-0E177DF83401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/homarr-labs/homarr/commit/91fc5a5c747121475a50f2713d571ceb89e95257",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/homarr-labs/homarr/releases/tag/v1.54.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/homarr-labs/homarr/security/advisories/GHSA-m4vc-4prp-cvp7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27797",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:09.843",
      "lastModified" : "2026-03-10T16:24:46.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Homarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive (e.g., reaching loopback/private ranges) from the Homarr host/container network context. This issue has been patched in version 1.54.0."
      }, {
        "lang" : "es",
        "value" : "Homarr es un panel de control de código abierto. Antes de la versión 1.54.0, una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) no autenticada permite a un atacante remoto forzar al servidor Homarr a realizar peticiones HTTP salientes arbitrarias. Esto puede ser utilizado como una primitiva de acceso a la red interna (por ejemplo, alcanzando rangos de loopback/privados) desde el contexto de red del host/contenedor de Homarr. Este problema ha sido parcheado en la versión 1.54.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:homarr:homarr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.54.0",
            "matchCriteriaId" : "CFFCA4B2-8A81-4B17-93E9-0E177DF83401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/homarr-labs/homarr/commit/fce970c70653f200ff1c73081139a77f0379bd91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/homarr-labs/homarr/releases/tag/v1.54.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/homarr-labs/homarr/security/advisories/GHSA-vwqf-2f4m-2cq2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30823",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:10.007",
      "lastModified" : "2026-03-11T13:36:25.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13."
      }, {
        "lang" : "es",
        "value" : "Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelo de lenguaje grande personalizado. Antes de la versión 3.0.13, existe una vulnerabilidad IDOR, que conduce a la toma de control de cuentas y a la elusión de funciones empresariales a través de la configuración de SSO. Este problema ha sido parcheado en la versión 3.0.13."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "8C6D6D18-106F-49FE-B523-B5DCAADFB40F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cwc3-p92j-g7qm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30824",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:10.157",
      "lastModified" : "2026-03-11T13:35:41.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. This issue has been patched in version 3.0.13."
      }, {
        "lang" : "es",
        "value" : "Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelo de lenguaje grande personalizado. Antes de la versión 3.0.13, el router NVIDIA NIM (/API/v1/nvidia-nim/*) está en la lista blanca en el middleware de autenticación global, permitiendo acceso no autenticado a la gestión privilegiada de contenedores y a los puntos finales de generación de tokens. Este problema ha sido parcheado en la versión 3.0.13."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "8C6D6D18-106F-49FE-B523-B5DCAADFB40F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5f53-522j-j454",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30825",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:10.343",
      "lastModified" : "2026-03-11T19:01:34.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hoppscotch is an open source API development ecosystem. Prior to version 2026.2.1, the DELETE /v1/access-tokens/revoke endpoint allows any authenticated user to delete any other user's PAT by providing its ID, with no ownership verification. This issue has been patched in version 2026.2.1."
      }, {
        "lang" : "es",
        "value" : "hoppscotch es un ecosistema de desarrollo de API de código abierto. Antes de la versión 2026.2.1, el endpoint DELETE /v1/access-tokens/revoke permite a cualquier usuario autenticado eliminar el PAT de cualquier otro usuario proporcionando su ID, sin verificación de propiedad. Este problema ha sido parcheado en la versión 2026.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hoppscotch:hoppscotch:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.2.1",
            "matchCriteriaId" : "29991DF9-EBE9-492D-AF0C-B1B71534FC8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hoppscotch/hoppscotch/releases/tag/2026.2.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-7pfq-mwj3-xw9h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30827",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:10.507",
      "lastModified" : "2026-03-11T19:00:50.690",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 and prior to versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0, the default keyGenerator in express-rate-limit applies IPv6 subnet masking (/56 by default) to all addresses that net.isIPv6() returns true for. This includes IPv4-mapped IPv6 addresses (::ffff:x.x.x.x), which Node.js returns as request.ip on dual-stack servers. Because the first 80 bits of all IPv4-mapped addresses are zero, a /56 (or any /32 to /80) subnet mask produces the same network key (::/56) for every IPv4 client. This collapses all IPv4 traffic into a single rate-limit bucket: one client exhausting the limit causes HTTP 429 for all other IPv4 clients. This issue has been patched in versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0."
      }, {
        "lang" : "es",
        "value" : "express-rate-limit es un middleware básico de limitación de tasa para Express. En versiones a partir de la 8.0.0 y anteriores a las versiones 8.0.2, 8.1.1, 8.2.2 y 8.3.0, el keyGenerator predeterminado en express-rate-limit aplica enmascaramiento de subred IPv6 (/56 por defecto) a todas las direcciones para las que net.isIPv6() devuelve verdadero. Esto incluye direcciones IPv6 mapeadas a IPv4 (::ffff:x.x.x.x), que Node.js devuelve como request.ip en servidores de doble pila. Debido a que los primeros 80 bits de todas las direcciones mapeadas a IPv4 son cero, una máscara de subred /56 (o cualquier /32 a /80) produce la misma clave de red (::/56) para cada cliente IPv4. Esto colapsa todo el tráfico IPv4 en un único cubo de limitación de tasa: un cliente que agota el límite causa HTTP 429 para todos los demás clientes IPv4. Este problema ha sido parcheado en las versiones 8.0.2, 8.1.1, 8.2.2 y 8.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:express-rate-limit_project:express-rate-limit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "AE5ED6AB-D445-4E61-86B1-FBC0659382A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:express-rate-limit_project:express-rate-limit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.2",
            "matchCriteriaId" : "F501D9EB-DFE4-496D-8471-61DE755B9E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:express-rate-limit_project:express-rate-limit:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C56713D6-533F-424A-B511-5E63014709D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/express-rate-limit/express-rate-limit/commit/14e53888cdfd1b9798faf5b634c4206409e27fc4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/express-rate-limit/express-rate-limit/security/advisories/GHSA-46wh-pxpv-q5gq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30828",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:10.720",
      "lastModified" : "2026-03-11T18:59:07.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issue has been patched in version 4.6.2."
      }, {
        "lang" : "es",
        "value" : "Wallos es un rastreador de suscripciones personal de código abierto y autoalojable. Antes de la versión 4.6.2, el parámetro url podía ser utilizado para recuperar archivos del sistema local. Este problema ha sido parcheado en la versión 4.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-29"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "0369A77F-C023-4EE5-873B-7466F873A8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ellite/Wallos/commit/e8a513591dbbf885966e2ef55c38622785b9060d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/releases/tag/v4.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/security/advisories/GHSA-p7qj-669r-grvc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30829",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:10.957",
      "lastModified" : "2026-03-11T18:56:04.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to version 3.4.0, an unauthenticated information disclosure vulnerability exists in the GET /api/v1/status-page/:url endpoint. The endpoint does not enforce authentication or verify whether a status page is published before returning full status page details. As a result, unpublished status pages and their associated internal data are accessible to any unauthenticated user via direct API requests. This issue has been patched in version 3.4.0."
      }, {
        "lang" : "es",
        "value" : "Checkmate es una herramienta de código abierto y autoalojada diseñada para rastrear y monitorear el hardware del servidor, el tiempo de actividad, los tiempos de respuesta y los incidentes en tiempo real con hermosas visualizaciones. Antes de la versión 3.4.0, existe una vulnerabilidad de revelación de información no autenticada en el endpoint GET /api/v1/status-page/:url. El endpoint no aplica autenticación ni verifica si una página de estado está publicada antes de devolver los detalles completos de la página de estado. Como resultado, las páginas de estado no publicadas y sus datos internos asociados son accesibles para cualquier usuario no autenticado a través de solicitudes directas a la API. Este problema ha sido parcheado en la versión 3.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluewavelabs:checkmate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "47231DDC-8E2F-4BBA-95DA-C270F8DE9F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-57xf-wg6w-fjrr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30830",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:11.163",
      "lastModified" : "2026-03-11T18:50:35.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Defuddle cleans up HTML pages. Prior to version 0.9.0, the _findContentBySchemaText method in src/defuddle.ts interpolates image src and alt attributes directly into an HTML string without escaping. An attacker can use a \" in the alt attribute to break out of the attribute context and inject event handler. This issue has been patched in version 0.9.0."
      }, {
        "lang" : "es",
        "value" : "Defuddle limpia páginas HTML. Antes de la versión 0.9.0, el método _findContentBySchemaText en src/defuddle.ts interpola los atributos src y alt de las imágenes directamente en una cadena HTML sin escapar. Un atacante puede usar una ' en el atributo alt para salir del contexto del atributo e inyectar un gestor de eventos. Este problema ha sido parcheado en la versión 0.9.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kepano:defuddle:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.9.0",
            "matchCriteriaId" : "5C6B0D6B-FD90-43C8-B413-A323503AA149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kepano/defuddle/commit/f154cb740ee603431b69638273af737a27156df9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kepano/defuddle/security/advisories/GHSA-5mq8-78gm-pjmq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30839",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:11.317",
      "lastModified" : "2026-03-11T18:48:29.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, testwebhooknotifications.php does not validate the target URL against private/reserved IP ranges, enabling full-read SSRF. The server response is returned to the caller. This issue has been patched in version 4.6.2."
      }, {
        "lang" : "es",
        "value" : "Wallos es un rastreador de suscripciones personal de código abierto y autoalojable. Antes de la versión 4.6.2, testwebhooknotifications.php no valida la URL de destino frente a rangos de IP privados/reservados, lo que permite un SSRF de lectura completa. La respuesta del servidor se devuelve al llamador. Este problema ha sido parcheado en la versión 4.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "0369A77F-C023-4EE5-873B-7466F873A8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ellite/Wallos/commit/e8a513591dbbf885966e2ef55c38622785b9060d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/releases/tag/v4.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/security/advisories/GHSA-x4qp-xm2c-vqg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30840",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:11.463",
      "lastModified" : "2026-03-11T18:32:29.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, there is a server-side request forgery vulnerability in notification testers. This issue has been patched in version 4.6.2."
      }, {
        "lang" : "es",
        "value" : "Wallos es un rastreador de suscripciones personal de código abierto y autoalojable. Antes de la versión 4.6.2, existe una vulnerabilidad de falsificación de petición del lado del servidor en los probadores de notificaciones. Este problema ha sido parcheado en la versión 4.6.2."
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "0369A77F-C023-4EE5-873B-7466F873A8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ellite/Wallos/commit/e8a513591dbbf885966e2ef55c38622785b9060d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/releases/tag/v4.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/security/advisories/GHSA-mr2c-prqv-hqm8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30841",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:11.610",
      "lastModified" : "2026-03-11T18:08:36.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, passwordreset.php outputs $_GET[\"token\"] and $_GET[\"email\"] directly into HTML input value attributes using <?= $token ?> and <?= $email ?> without calling htmlspecialchars(). This allows reflected XSS by breaking out of the attribute context. This issue has been patched in version 4.6.2."
      }, {
        "lang" : "es",
        "value" : "Wallos es un rastreador de suscripciones personales de código abierto y autoalojable. Antes de la versión 4.6.2, passwordreset.PHP muestra $_GET['token'] y $_GET['email'] directamente en los atributos de valor de entrada HTML usando  y  sin llamar a htmlspecialchars(). Esto permite XSS reflejado al salir del contexto del atributo. Este problema ha sido parcheado en la versión 4.6.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "0369A77F-C023-4EE5-873B-7466F873A8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ellite/Wallos/commit/e8a513591dbbf885966e2ef55c38622785b9060d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/releases/tag/v4.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/security/advisories/GHSA-75hc-fc26-9797",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30842",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T06:16:11.763",
      "lastModified" : "2026-03-11T18:06:58.190",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, Wallos allows an authenticated user to delete avatar files uploaded by other users. The avatar deletion endpoint does not verify that the requested avatar belongs to the current user. As a result, any authenticated user who knows or can discover another user's uploaded avatar filename can delete that file. This issue has been patched in version 4.6.2."
      }, {
        "lang" : "es",
        "value" : "Wallos es un rastreador de suscripciones personal de código abierto y autoalojable. Antes de la versión 4.6.2, Wallos permite a un usuario autenticado eliminar archivos de avatar subidos por otros usuarios. El endpoint de eliminación de avatares no verifica que el avatar solicitado pertenezca al usuario actual. Como resultado, cualquier usuario autenticado que conozca o pueda descubrir el nombre de archivo del avatar subido de otro usuario puede eliminar ese archivo. Este problema ha sido parcheado en la versión 4.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallosapp:wallos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "0369A77F-C023-4EE5-873B-7466F873A8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ellite/Wallos/commit/e8a513591dbbf885966e2ef55c38622785b9060d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/releases/tag/v4.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ellite/Wallos/security/advisories/GHSA-qw24-3pxr-3j6r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1071",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:08.640",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.13.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El plugin Carta Online para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración de administrador en todas las versiones hasta la 2.13.0, inclusive, debido a la sanitización insuficiente de la entrada y al escape de la salida. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a instalaciones multisitio y a instalaciones donde unfiltered_html ha sido deshabilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/carta-online/tags/2.13.0/carta-online.php#L417",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/carta-online/trunk/carta-online.php#L417",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1e82c950-54dd-4bdf-9c7c-e880c934ddc9?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1073",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:08.837",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in `inc/purchase-btn-options-page.php`. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Purchase Button For Affiliate Link para WordPress es vulnerable a falsificación de petición en sitios cruzados en todas las versiones hasta la 1.0.2, inclusive. Esto se debe a la falta de validación de nonce en el gestor del formulario de la página de ajustes en 'inc/purchase-btn-options-page.php'. Esto hace posible que atacantes no autenticados modifiquen los ajustes del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/purchase-button/tags/1.0.2/inc/purchase-btn-options-page.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/purchase-button/trunk/inc/purchase-btn-options-page.php#L3",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9a223c-6c34-4c64-92b5-d986f9791ebb?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1074",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:09.020",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP App Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app-bar-features' parameter in all versions up to, and including, 1.5. This is due to insufficient input sanitization and output escaping combined with a missing authorization check in the `App_Bar_Settings` class constructor. This makes it possible for unauthenticated attackers to inject arbitrary web scripts into multiple plugin settings that will execute whenever a user accesses the admin settings page."
      }, {
        "lang" : "es",
        "value" : "El plugin WP App Bar para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'app-bar-features' en todas las versiones hasta la 1.5, inclusive. Esto se debe a una sanitización de entrada y un escape de salida insuficientes, combinados con una falta de verificación de autorización en el constructor de la clase 'App_Bar_Settings'. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en múltiples configuraciones del plugin que se ejecutarán cada vez que un usuario acceda a la página de configuración de administración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-app-bar/tags/1.5/includes/class-app-bar-settings.php#L89",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-app-bar/trunk/includes/class-app-bar-settings.php#L89",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9b448712-b989-453f-9acb-5556e01e41a4?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1085",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:09.197",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The True Ranker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.9. This is due to missing nonce validation on the seolocalrank-signout action. This makes it possible for unauthenticated attackers to disconnect the administrator's True Ranker account via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin True Ranker para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 2.2.9, inclusive. Esto se debe a la falta de validación de nonce en la acción seolocalrank-signout. Esto hace posible que atacantes no autenticados desconecten la cuenta de True Ranker del administrador a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/seo-local-rank/tags/2.2.9/admin/class-seolocalrank-admin.php#L768",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/seo-local-rank/trunk/admin/class-seolocalrank-admin.php#L768",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/db27ae52-1362-4acb-9410-49ad041770f6?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1086",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:09.380",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Font Pairing Preview For Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to modify the plugin's font pairing settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Font Pairing Preview For Landing Pages para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.3, inclusive. Esto se debe a la falta de validación de nonce en la funcionalidad de actualización de ajustes. Esto hace posible que atacantes no autenticados modifiquen los ajustes de emparejamiento de fuentes del plugin a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-font-pairing-preview/tags/1.3/wp-font-pairing-settings.php#L12",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-font-pairing-preview/trunk/wp-font-pairing-settings.php#L12",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e57f2f91-3f6f-4452-9525-4c150a037d2f?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1087",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:09.560",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Guardian News Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to modify the plugin's settings, including the Guardian API key, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El plugin Guardian News Feed para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.2, inclusive. Esto se debe a la falta de validación de nonce en la funcionalidad de actualización de ajustes. Esto hace posible que atacantes no autenticados modifiquen los ajustes del plugin, incluyendo la clave API de Guardian, a través de una petición falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/the-guardian-news-feed/tags/1.2/gu-open-platform-settings.php#L72",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/the-guardian-news-feed/trunk/gu-open-platform-settings.php#L72",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e9065f61-d899-44a3-a43a-3eeeeedaa6f1?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1569",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:09.757",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wueen-blocket` shortcode in all versions up to, and including, 0.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Wueen para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'wueen-blocket' del plugin en todas las versiones hasta la 0.2.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador o superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wueen/tags/0.2.0/wueen.php#L150",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/38e5dd9e-c017-4b4c-9064-76a07e30fab5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1574",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:09.933",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MyQtip – easy qTip2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `myqtip` shortcode in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin MyQtip – easy qTip2 para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'myqtip' del plugin en todas las versiones hasta la 2.0.5, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida inadecuado en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/myqtip-easy-qtip2/tags/2.0.5/includes/register_shortcode.php#L11",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5035d412-861a-4a31-b5e5-378fc4962d90?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1805",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:10.117",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DA Media GigList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's damedia_giglist shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin DA Media GigList para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode damedia_giglist del plugin en todas las versiones hasta la 1.9.0, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/damedia-giglist/tags/1.9.0/damedia-giglist.php#L902",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/damedia-giglist/tags/1.9.0/damedia-giglist.php#L908",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/damedia-giglist/trunk/damedia-giglist.php#L902",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/damedia-giglist/trunk/damedia-giglist.php#L908",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4beaa824-d3f1-499e-b4ef-3885f59e42c7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1820",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:10.297",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Editor de Texto Alternativo de la biblioteca de medios para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'bvmalt_sc_div_update_alt_text' del plugin en todas las versiones hasta la 1.0.0, inclusive, debido a una sanitización de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto permite a atacantes autenticados, con acceso de nivel de colaborador y superior, inyectar scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/media-library-alt-text-editor/tags/1.0.0/common/functions.php#L34",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7879aaad-37b2-410d-9b21-029bed47202c?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1823",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:10.477",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Consensus Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's consensus shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Consensus Embed para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'consensus' del plugin en todas las versiones hasta la 1.6, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel 'colaborador' o superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/consensus-embed/tags/1.6/consensus.php#L40",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/consensus-embed/tags/1.6/consensus.php#L43",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/consensus-embed/trunk/consensus.php#L40",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/consensus-embed/trunk/consensus.php#L43",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a20ef41d-7f01-4ef2-aae0-0b254ea78bc5?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1824",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:10.660",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Infomaniak Connect for OpenID plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'endpoint_login' parameter of the infomaniak_connect_generic_auth_url shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Infomaniak Connect for OpenID para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del parámetro 'endpoint_login' del shortcode infomaniak_connect_generic_auth_url en todas las versiones hasta la 1.0.2, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/infomaniak-connect-openid/tags/1.0.2/includes/openid-connect-infomaniak-client-wrapper.php#L236",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/infomaniak-connect-openid/trunk/includes/openid-connect-infomaniak-client-wrapper.php#L236",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c8177f27-19e1-4272-91ee-55d980b7128e?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1825",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:10.843",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Show YouTube video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'syv' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin Show YouTube video para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'syv' del plugin en todas las versiones hasta la 1.1, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/show-youtube-video/tags/1.1/show-youtube-video.php#L29",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/show-youtube-video/tags/1.1/show-youtube-video.php#L79",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d29a3a29-1fb5-41c8-9516-16bd9fc0018d?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2420",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:11.023",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the frontend of the site where the popup is displayed."
      }, {
        "lang" : "es",
        "value" : "El plugin LotekMedia Popup Form para WordPress es vulnerable a cross-site scripting almacenado a través de la configuración del plugin en todas las versiones hasta la 1.0.6, inclusive, debido a una sanitización de entrada insuficiente y un escape de salida deficiente. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda al frontend del sitio donde se muestra la ventana emergente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/ltm-popup-form/tags/1.0.6/ltm-popup-form.php#L80",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/ltm-popup-form/trunk/ltm-popup-form.php#L80",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0f45583e-1438-47af-871c-efd59345c727?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2433",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-07T08:16:11.193",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via postMessage in all versions up to, and including, 5.0.11. This is due to the plugin's admin-shell.js registering a global message event listener without origin validation (missing event.origin check) and directly passing user-controlled URLs to window.open() without URL scheme validation. This makes it possible for unauthenticated attackers to execute arbitrary JavaScript in the context of an authenticated administrator's session by tricking them into visiting a malicious website that sends crafted postMessage payloads to the plugin's admin page."
      }, {
        "lang" : "es",
        "value" : "El plugin RSS Aggregator – RSS Import, News Feeds, Feed to Post y Autoblogging para WordPress es vulnerable a cross-site scripting basado en DOM a través de postMessage en todas las versiones hasta la 5.0.11, inclusive. Esto se debe a que el archivo admin-shell.js del plugin registra un oyente de eventos de mensaje global sin validación de origen (falta la comprobación de event.origin) y pasa directamente URLs controladas por el usuario a window.open() sin validación del esquema de URL. Esto hace posible que atacantes no autenticados ejecuten JavaScript arbitrario en el contexto de la sesión de un administrador autenticado al engañarlos para que visiten un sitio web malicioso que envía cargas útiles postMessage manipuladas a la página de administración del plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/tags/5.0.10/core/js/admin-shell.js#L153",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/tags/5.0.10/core/js/admin-shell.js#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/core/js/admin-shell.js#L153",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/core/js/admin-shell.js#L58",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3473511%40wp-rss-aggregator%2Ftrunk&old=3439393%40wp-rss-aggregator%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/311960e7-c4b4-4638-980f-1e08ffa621ba?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24281",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-07T09:16:07.437",
      "lastModified" : "2026-03-10T18:18:17.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must present a certificate which is trusted by ZKTrustManager which makes the attack vector harder to exploit. Users are recommended to upgrade to version 3.8.6 or 3.9.5, which fixes this issue by introducing a new configuration option to disable reverse DNS lookup in client and quorum protocols."
      }, {
        "lang" : "es",
        "value" : "La verificación de nombre de host en Apache ZooKeeper ZKTrustManager recurre a DNS inverso (PTR) cuando falla la validación IP SAN, permitiendo a los atacantes que controlan o falsifican registros PTR suplantar servidores o clientes de ZooKeeper con un certificado válido para el nombre PTR. Es importante señalar que el atacante debe presentar un certificado que sea de confianza para ZKTrustManager, lo que hace que el vector de ataque sea más difícil de explotar. Se recomienda a los usuarios actualizar a la versión 3.8.6 o 3.9.5, que corrige este problema al introducir una nueva opción de configuración para deshabilitar la búsqueda de DNS inverso en los protocolos de cliente y quórum."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-350"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.6",
            "matchCriteriaId" : "1D3E8670-F4DD-400A-A459-9396353D5E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "69917DB8-268C-4F60-AFAE-51FB24101BFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/088ddsbrzhd5lxzbqf5n24yg0mwh9jt2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/07/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24308",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-07T09:16:07.660",
      "lastModified" : "2026-03-10T18:18:27.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential production systems affected by the issue. Users are recommended to upgrade to version 3.8.6 or 3.9.5 which fixes this issue."
      }, {
        "lang" : "es",
        "value" : "El manejo inadecuado de los valores de configuración en ZKConfig en Apache ZooKeeper 3.8.5 y 3.9.4 en todas las plataformas permite a un atacante exponer información sensible almacenada en la configuración del cliente en el archivo de registro del cliente. Los valores de configuración se exponen en el registro de nivel INFO, lo que hace que los sistemas de producción potenciales se vean afectados por el problema. Se recomienda a los usuarios actualizar a la versión 3.8.6 o 3.9.5, que corrige este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.6",
            "matchCriteriaId" : "1D3E8670-F4DD-400A-A459-9396353D5E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "69917DB8-268C-4F60-AFAE-51FB24101BFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/qng3rtzv2pqkmko4rhv85jfplkyrgqdr",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/07/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2219",
      "sourceIdentifier" : "security@debian.org",
      "published" : "2026-03-07T09:16:07.823",
      "lastModified" : "2026-03-09T15:15:57.870",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU)."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que dpkg-deb (un componente de dpkg, el sistema de gestión de paquetes de Debian) no valida correctamente el final del flujo de datos al descomprimir un archivo .deb comprimido con zstd, lo que puede resultar en denegación de servicio (bucle infinito que consume la CPU)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/1129722",
        "source" : "security@debian.org"
      }, {
        "url" : "https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=6610297a62c0780dd0e80b0e302ef64fdcc9d313",
        "source" : "security@debian.org"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3661",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T14:16:05.990",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Wavlink WL-NU516U1 240425. Esto afecta a la función ota_new_upgrade del archivo /cgi-bin/adm.cgi. Esta manipulación del argumento model causa inyección de comandos. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó con el fabricante con antelación sobre esta divulgación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:m16u1_v240425:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44120A31-7BB4-4C48-834B-2C183BC77535"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/WAVLINK_1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3662",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T14:16:06.357",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mode leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Wavlink WL-NU516U1 240425. Esta vulnerabilidad afecta a la función usb_p910 del archivo /cgi-bin/adm.cgi. Dicha manipulación del argumento Pr_mode conduce a una inyección de comandos. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:m16u1_v240425:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44120A31-7BB4-4C48-834B-2C183BC77535"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/WAVLINK_2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758228",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29067",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:54.890",
      "lastModified" : "2026-03-10T17:58:23.663",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. From version 4.0.0-rc.1 to 4.7.0, a potential vulnerability exists in ZITADEL's password reset mechanism in login V2. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requests to construct the URL for the password reset confirmation link. This link, containing a secret code, is then emailed to the user. This issue has been patched in version 4.7.1."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidades de código abierto. Desde la versión 4.0.0-rc.1 hasta la 4.7.0, existe una potencial vulnerabilidad en el mecanismo de restablecimiento de contraseña de ZITADEL en el inicio de sesión V2. ZITADEL utiliza el encabezado Forwarded o X-Forwarded-Host de las solicitudes entrantes para construir la URL del enlace de confirmación de restablecimiento de contraseña. Este enlace, que contiene un código secreto, se envía luego por correo electrónico al usuario. Este problema ha sido parcheado en la versión 4.7.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.7.1",
            "matchCriteriaId" : "E1B051D6-969F-4B70-BF3F-AFD77FB00251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-pfrf-9r5f-73f5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29184",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:55.080",
      "lastModified" : "2026-04-25T18:01:46.203",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets provided run through task event logs. This issue has been patched in version 3.1.4."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores. Antes de la versión 3.1.4, una plantilla de andamiaje maliciosa puede eludir el mecanismo de redacción de registros para exfiltrar secretos proporcionados que se ejecutan a través de los registros de eventos de tareas. Este problema ha sido parcheado en la versión 3.1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage\\/plugin-scaffolder-backend:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "05E69C9E-4CB6-4108-90BC-5C593044CA29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-8qp7-fhr9-fw53",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29185",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:55.240",
      "lastModified" : "2026-04-25T18:01:51.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals. Prior to version 1.20.1, a vulnerability in the SCM URL parsing used by Backstage integrations allowed path traversal sequences in encoded form to be included in file paths. When these URLs were processed by integration functions that construct API URLs, the traversal segments could redirect requests to unintended SCM provider API endpoints using the configured server-side integration credentials. This issue has been patched in version 1.20.1."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores. Antes de la versión 1.20.1, una vulnerabilidad en el análisis de URL de SCM utilizado por las integraciones de Backstage permitía que secuencias de salto de ruta en formato codificado se incluyeran en las rutas de archivo. Cuando estas URL eran procesadas por funciones de integración que construyen URL de API, los segmentos de salto de ruta podían redirigir solicitudes a puntos finales de API de proveedores de SCM no deseados utilizando las credenciales de integración del lado del servidor configuradas. Este problema ha sido parcheado en la versión 1.20.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage\\/integration:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.20.1",
            "matchCriteriaId" : "D0BBFB24-4280-4D8A-B628-57BFACED3454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-95v5-prp4-5gv5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29186",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:55.400",
      "lastModified" : "2026-03-11T18:00:01.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an mkdocs.yml that causes arbitrary Python code execution, completely bypassing TechDocs' security controls. This issue has been patched in version 1.14.3."
      }, {
        "lang" : "es",
        "value" : "Backstage es un framework abierto para construir portales de desarrolladores. Antes de la versión 1.14.3, esta es una vulnerabilidad de omisión de configuración que permite la ejecución de código arbitrario. El paquete @backstage/plugin-techdocs-node utiliza una lista de permitidos para filtrar claves de configuración peligrosas de MkDocs durante el proceso de compilación de la documentación. Una brecha en esta lista de permitidos permite a los atacantes crear un mkdocs.yml que provoca la ejecución de código Python arbitrario, eludiendo completamente los controles de seguridad de TechDocs. Este problema ha sido parcheado en la versión 1.14.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage_plugin-techdocs-node:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.3",
            "matchCriteriaId" : "320379D5-BAE8-4314-92DF-83E3D2B8A4B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-928r-fm4v-mvrw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29191",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:55.557",
      "lastModified" : "2026-03-10T17:55:39.263",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via XSS in /saml-post Endpoint. This issue has been patched in version 4.12.0."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidades de código abierto. Desde la versión 4.0.0 hasta la 4.11.1, fue descubierta una vulnerabilidad en la interfaz de inicio de sesión V2 de Zitadel que permitía una posible toma de control de cuenta mediante XSS en el endpoint /saml-post. Este problema ha sido parcheado en la versión 4.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.12.0",
            "matchCriteriaId" : "45902C32-E4BA-459E-80C0-19CBDA6CD5F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-pr34-2v5x-6qjq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29192",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:55.710",
      "lastModified" : "2026-03-10T17:54:28.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in version 4.12.0."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidades de código abierto. Desde la versión 4.0.0 hasta la 4.11.1, se descubrió una vulnerabilidad en la interfaz de inicio de sesión V2 de Zitadel que permitía una posible toma de control de cuenta a través de la redirección de URI predeterminada. Este problema ha sido parcheado en la versión 4.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.12.0",
            "matchCriteriaId" : "45902C32-E4BA-459E-80C0-19CBDA6CD5F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-6rx5-m2rc-hmf7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29193",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T15:15:55.867",
      "lastModified" : "2026-03-10T17:52:35.390",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1."
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una plataforma de gestión de identidades de código abierto. Desde la versión 4.0.0 hasta la 4.12.0, una vulnerabilidad en la interfaz de usuario (UI) de inicio de sesión V2 de Zitadel permitía a los usuarios eludir el comportamiento de inicio de sesión y las políticas de seguridad, y autorregistrarse para nuevas cuentas o iniciar sesión con contraseña incluso si las opciones correspondientes estaban deshabilitadas en su organización. Este problema ha sido parcheado en la versión 4.12.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.12.1",
            "matchCriteriaId" : "88347744-32A9-4556-A76B-2EA0C1BD6DBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-25rw-g6ff-fmg8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3663",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T15:15:56.020",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in xlnt-community xlnt up to 1.6.1. This issue affects the function xlnt::detail::compound_document_istreambuf::xsgetn of the file source/detail/cryptography/compound_document.cpp of the component XLSX File Parser. Performing a manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit has been made public and could be used. The patch is named 147. It is recommended to apply a patch to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en xlnt-community xlnt hasta la versión 1.6.1. Este problema afecta a la función xlnt::detail::compound_document_istreambuf::xsgetn del archivo source/detail/cryptography/compound_document.cpp del componente XLSX File Parser. Realizar una manipulación resulta en una lectura fuera de límites. El ataque solo es posible con acceso local. El exploit se ha hecho público y podría ser utilizado. El parche se llama 147. Se recomienda aplicar un parche para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlnt-community:xlnt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "9B381094-639E-4E21-8CB0-60C480F02400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0128/blob/main/xl3/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/issues/139",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/pull/147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349552",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349552",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3664",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T15:15:56.240",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::compound_document::read_directory of the file source/detail/cryptography/compound_document.cpp of the component Encrypted XLSX File Parser. Executing a manipulation can lead to out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called 147. Applying a patch is advised to resolve this issue."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en xlnt-community xlnt hasta 1.6.1. La función xlnt::detail::compound_document::read_directory del archivo source/detail/cryptography/compound_document.cpp del componente Encrypted XLSX File Parser se ve afectada. La ejecución de una manipulación puede llevar a una lectura fuera de límites. El ataque está restringido a la ejecución local. El exploit ha sido divulgado públicamente y puede ser utilizado. Este parche se llama 147. Se aconseja aplicar un parche para resolver este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlnt-community:xlnt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "9B381094-639E-4E21-8CB0-60C480F02400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0128/blob/main/xl5/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/issues/141",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/pull/147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28678",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.010",
      "lastModified" : "2026-03-11T17:35:39.667",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens (JWTs) were stored in HTTP cookies without cryptographic protection of the payload. This issue has been patched via commit d527fba."
      }, {
        "lang" : "es",
        "value" : "DSA Study Hub es una aplicación web educativa interactiva. Antes del commit d527fba, el sistema de autenticación de usuarios en server/routes/auth.js se encontró que era vulnerable a Credenciales Insuficientemente Protegidas. Los tokens de autenticación (JWTs) se almacenaban en cookies HTTP sin protección criptográfica de la carga útil. Este problema ha sido parcheado mediante el commit d527fba."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        }, {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toxicbishop:dsa_study_hub:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2026-02-21",
            "matchCriteriaId" : "A52FD77D-F07C-4B6D-96D8-7D96ED185304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/toxicbishop/DSA-with-tsx/commit/d527fba3b3c15f185b9d1e730322dff9248391e4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/toxicbishop/DSA-with-tsx/security/advisories/GHSA-vmxr-562h-rcgg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29076",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.193",
      "lastModified" : "2026-03-09T21:19:35.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.37.0, cpp-httplib uses std::regex (libstdc++) to parse RFC 5987 encoded filename* values in multipart Content-Disposition headers. The regex engine in libstdc++ implements backtracking via deep recursion, consuming one stack frame per input character. An attacker can send a single HTTP POST request with a crafted filename* parameter that causes uncontrolled stack growth, resulting in a stack overflow (SIGSEGV) that crashes the server process. This issue has been patched in version 0.37.0."
      }, {
        "lang" : "es",
        "value" : "cpp-httplib es una biblioteca HTTP/HTTPS C++11 de un solo archivo, solo de encabezado y multiplataforma. Antes de la versión 0.37.0, cpp-httplib utiliza std::regex (libstdc++) para analizar valores filename* codificados según RFC 5987 en encabezados Content-Disposition multipart. El motor de expresiones regulares en libstdc++ implementa retroceso mediante recursión profunda, consumiendo un marco de pila por cada carácter de entrada. Un atacante puede enviar una única solicitud HTTP POST con un parámetro filename* manipulado que causa un crecimiento descontrolado de la pila, resultando en un desbordamiento de pila (SIGSEGV) que bloquea el proceso del servidor. Este problema ha sido parcheado en la versión 0.37.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        }, {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yhirose:cpp-httplib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.37.0",
            "matchCriteriaId" : "DF662624-3D9C-43DE-BAA8-29A734A27040"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yhirose/cpp-httplib/commit/de296af3eb5b0d5c116470e033db900e4812c5e6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/releases/tag/v0.37.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-qq6v-r583-3h69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29190",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.350",
      "lastModified" : "2026-03-11T16:48:43.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup reader (backup/backends/v3/backend.py). If a malicious backup file is provided to Karapace, an attacker may exploit insufficient path validation to perform arbitrary file read on the system where Karapace is running. The issue affects deployments that use the backup/restore functionality and process backups from untrusted sources. The impact depends on the file system permissions of the Karapace process. This issue has been patched in version 6.0.0."
      }, {
        "lang" : "es",
        "value" : "Karapace es una implementación de código abierto de Kafka REST y Schema Registry. Antes de la versión 6.0.0, existe una vulnerabilidad de salto de ruta en el lector de copias de seguridad (backup/backends/v3/backend.py). Si se proporciona un archivo de copia de seguridad malicioso a Karapace, un atacante puede explotar una validación de ruta insuficiente para realizar una lectura arbitraria de archivos en el sistema donde se ejecuta Karapace. El problema afecta a las implementaciones que utilizan la funcionalidad de copia de seguridad/restauración y procesan copias de seguridad de fuentes no confiables. El impacto depende de los permisos del sistema de archivos del proceso de Karapace. Este problema ha sido parcheado en la versión 6.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aiven:karapace:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "A3BD4407-ABD5-46ED-A6D4-93144DC7AB44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Aiven-Open/karapace/releases/tag/6.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/Aiven-Open/karapace/security/advisories/GHSA-rw4j-p3jg-4fxq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29194",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.507",
      "lastModified" : "2026-03-11T16:46:09.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netmaker makes networks with WireGuard. Prior to version 1.5.0, the Authorize middleware in Netmaker incorrectly validates host JWT tokens. When a route permits host authentication (hostAllowed=true), a valid host token bypasses all subsequent authorization checks without verifying that the host is authorized to access the specific requested resource. Any entity possessing knowledge of object identifiers (node IDs, host IDs) can craft a request with an arbitrary valid host token to access, modify, or delete resources belonging to other hosts. Affected endpoints include node info retrieval, host deletion, MQTT signal transmission, fallback host updates, and failover operations. This issue has been patched in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Netmaker crea redes con WireGuard. Antes de la versión 1.5.0, el middleware Authorize en Netmaker valida incorrectamente los tokens JWT de host. Cuando una ruta permite la autenticación de host (hostAllowed=true), un token de host válido omite todas las comprobaciones de autorización posteriores sin verificar que el host está autorizado para acceder al recurso específico solicitado. Cualquier entidad que posea conocimiento de identificadores de objeto (IDs de nodo, IDs de host) puede elaborar una solicitud con un token de host válido arbitrario para acceder, modificar o eliminar recursos pertenecientes a otros hosts. Los endpoints afectados incluyen la recuperación de información de nodo, la eliminación de host, la transmisión de señal MQTT, las actualizaciones de host de respaldo y las operaciones de conmutación por error. Este problema ha sido parcheado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravitl:netmaker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "2BC0009A-5594-47A8-AB15-257A6742197D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gravitl/netmaker/releases/tag/v1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/gravitl/netmaker/security/advisories/GHSA-hmqr-wjmj-376c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29771",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.657",
      "lastModified" : "2026-03-12T13:58:38.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart intervals. This issue has been patched in version 1.2.0."
      }, {
        "lang" : "es",
        "value" : "Netmaker crea redes con WireGuard. Antes de la versión 1.2.0, el endpoint /API/servidor/shutdown permite la terminación del proceso del servidor Netmaker a través de syscall.SIGINT. Esto permite a cualquier usuario apagar repetidamente el servidor, causando una denegación de servicio cíclica con intervalos de reinicio de aproximadamente 3 segundos. Este problema ha sido parcheado en la versión 1.2.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravitl:netmaker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "0C4A058D-7EB8-4629-A1EF-BC00DA2E7158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gravitl/netmaker/security/advisories/GHSA-rhr9-hgcm-x289",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29778",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.800",
      "lastModified" : "2026-03-11T22:09:15.240",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the edit_package() function implements insufficient sanitization for the pack_folder parameter. The current protection relies on a single-pass string replacement of \"../\", which can be bypassed using crafted recursive traversal sequences. This issue has been patched in version 0.5.0b3.dev97."
      }, {
        "lang" : "es",
        "value" : "pyLoad es un gestor de descargas gratuito y de código abierto escrito en Python. Desde la versión 0.5.0b3.dev13 hasta la 0.5.0b3.dev96, la función edit_package() implementa una sanitización insuficiente para el parámetro pack_folder. La protección actual se basa en un reemplazo de cadena de una sola pasada de '../', que puede ser eludido utilizando secuencias de recorrido recursivo manipuladas. Este problema ha sido parcheado en la versión 0.5.0b3.dev97."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload-ng_project:pyload-ng:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "0.5.0b3.dev13",
            "versionEndExcluding" : "0.5.0b3.dev97",
            "matchCriteriaId" : "530238B6-CD4D-4A83-B290-14E10FF47177"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/security/advisories/GHSA-6px9-j4qr-xfjw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29779",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:54.953",
      "lastModified" : "2026-03-11T22:07:38.207",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig (safe for client use) and workerConfig (server-only, contains sensitive data) from the same module. Due to pages/incidents.tsx importing and using workerConfig directly inside client-side component code, the entire workerConfig object was included in the client-side JavaScript bundle served to all visitors. This issue has been patched via commit 377a596."
      }, {
        "lang" : "es",
        "value" : "UptimeFlare es una solución sin servidor de monitoreo de tiempo de actividad y página de estado, impulsada por Cloudflare Workers. Antes del commit 377a596, el archivo de configuración uptime.config.ts exportaba tanto pageConfig (seguro para uso del cliente) como workerConfig (solo para servidor, contiene datos sensibles) desde el mismo módulo. Debido a que pages/incidents.tsx importaba y usaba workerConfig directamente dentro del código del componente del lado del cliente, el objeto workerConfig completo se incluyó en el paquete JavaScript del lado del cliente servido a todos los visitantes. Este problema ha sido parcheado mediante el commit 377a596."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lyc8503:uptimeflare:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026-03-04",
            "matchCriteriaId" : "3F0BF86D-7167-41AE-A8B1-CC603467A5C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lyc8503/UptimeFlare/commit/377a5963c66ba9a798abebfe8d80378b053435e9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lyc8503/UptimeFlare/issues/198",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/lyc8503/UptimeFlare/security/advisories/GHSA-36q9-v7p3-vj6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29780",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:55.113",
      "lastModified" : "2026-03-11T22:02:41.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursively_extract_attachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted from parsed emails are directly used to construct output file paths without any sanitization, allowing an attacker-controlled filename to escape the target directory. This issue has been patched in version 2.0.1."
      }, {
        "lang" : "es",
        "value" : "eml_parser sirve como un módulo de Python para analizar archivos eml y devolver diversa información encontrada en el correo electrónico, así como información calculada. Antes de la versión 2.0.1, el script de ejemplo oficial examples/recursively_extract_attachments.py contiene una vulnerabilidad de salto de ruta que permite la escritura arbitraria de archivos fuera del directorio de salida previsto. Los nombres de archivo adjuntos extraídos de correos electrónicos analizados se utilizan directamente para construir rutas de archivo de salida sin ninguna sanitización, permitiendo que un nombre de archivo controlado por el atacante escape del directorio de destino. Este problema ha sido parcheado en la versión 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:govcert.lu:eml_parser:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "4B9ABDC4-B6BF-4D8F-9DF1-6B3017C588C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GOVCERT-LU/eml_parser/commit/99af03a09a90aaaaadd0ed2ffb5eea46d1ea2cc9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GOVCERT-LU/eml_parser/issues/88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/GOVCERT-LU/eml_parser/security/advisories/GHSA-389r-rccm-h3h5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29781",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:55.280",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliver C2 server's Protobuf unmarshalling logic due to a systemic lack of nil-pointer validation. By extracting valid implant credentials and omitting nested fields in a signed message, an authenticated actor can trigger an unhandled runtime panic. Because the mTLS, WireGuard, and DNS transport layers lack the panic recovery middleware present in the HTTP transport, this results in a global process termination. While requiring post-authentication access (a captured implant), this flaw effectively acts as an infrastructure \"kill-switch,\" instantly severing all active sessions across the entire fleet and requiring a manual server restart to restore operations. At time of publication, there are no publicly available patches."
      }, {
        "lang" : "es",
        "value" : "Sliver es un framework de comando y control que utiliza una pila de red Wireguard personalizada. En versiones desde la 1.7.3 y anteriores, existe una vulnerabilidad en la lógica de desmarshalling de Protobuf del servidor C2 de Sliver debido a una falta sistémica de validación de punteros nulos. Al extraer credenciales de implante válidas y omitir campos anidados en un mensaje firmado, un actor autenticado puede desencadenar un pánico en tiempo de ejecución no manejado. Debido a que las capas de transporte mTLS, WireGuard y DNS carecen del middleware de recuperación de pánico presente en el transporte HTTP, esto resulta en una terminación global del proceso. Si bien requiere acceso post-autenticación (un implante capturado), este fallo actúa efectivamente como un 'kill-switch' de infraestructura, interrumpiendo instantáneamente todas las sesiones activas en toda la flota y requiriendo un reinicio manual del servidor para restaurar las operaciones. En el momento de la publicación, no hay parches disponibles públicamente."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bishopfox:sliver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.3",
            "matchCriteriaId" : "3F9D34DC-4587-4F54-A769-5B833439B841"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BishopFox/sliver/security/advisories/GHSA-hx52-cv84-jr5v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29784",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:55.430",
      "lastModified" : "2026-03-09T20:06:23.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js content management system. From version 5.101.6 to 6.19.2, incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. This issue has been patched in version 6.19.3."
      }, {
        "lang" : "es",
        "value" : "Ghost es un sistema de gestión de contenido Node.js. Desde la versión 5.101.6 hasta la 6.19.2, las protecciones CSRF incompletas en torno a /session/verify hicieron posible usar OTCs en sesiones de inicio de sesión diferentes de la sesión solicitante. En algunos escenarios, esto podría haber facilitado a los phishers tomar el control de un sitio Ghost. Este problema ha sido parcheado en la versión 6.19.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.101.6",
            "versionEndExcluding" : "6.19.3",
            "matchCriteriaId" : "7C06A46C-5508-4F64-9563-0605A985A9D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29786",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:55.587",
      "lastModified" : "2026-03-11T21:50:01.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This issue has been patched in version 7.5.10."
      }, {
        "lang" : "es",
        "value" : "node-tar es una implementación completa de Tar para Node.js. Antes de la versión 7.5.10, se puede engañar a tar para que cree un enlace duro que apunte fuera del directorio de extracción utilizando un destino de enlace relativo a la unidad, como C:../target.txt, lo que permite la sobrescritura de archivos fuera del directorio de trabajo actual (cwd) durante la extracción normal de tar.x(). Este problema ha sido parcheado en la versión 7.5.10."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isaacs:tar:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.5.10",
            "matchCriteriaId" : "80531DF2-7BEB-4C48-97C6-0890BC635580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29787",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:55.743",
      "lastModified" : "2026-03-11T20:39:21.507",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mcp-memory-service is an open-source memory backend for multi-agent systems. Prior to version 10.21.0, the /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCP_ALLOW_ANONYMOUS_ACCESS=true is set (required for the HTTP server to function without OAuth/API key), this endpoint is accessible without authentication. Combined with the default 0.0.0.0 binding, this exposes sensitive reconnaissance data to the entire network. This issue has been patched in version 10.21.0."
      }, {
        "lang" : "es",
        "value" : "mcp-memory-service es un backend de memoria de código abierto para sistemas multiagente. Antes de la versión 10.21.0, el endpoint /API/health/detailed devuelve información detallada del sistema, incluyendo la versión del SO, la versión de Python, el número de CPU, los totales de memoria, el uso del disco y la ruta completa del sistema de archivos de la base de datos. Cuando se establece MCP_ALLOW_ANONYMOUS_ACCESS=true (requerido para que el servidor HTTP funcione sin OAuth/clave API), este endpoint es accesible sin autenticación. Combinado con el enlace predeterminado 0.0.0.0, esto expone datos sensibles de reconocimiento a toda la red. Este problema ha sido parcheado en la versión 10.21.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doobidoo:mcp-memory-service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.21.0",
            "matchCriteriaId" : "100791F9-95CC-437C-B5FE-02E465917998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/doobidoo/mcp-memory-service/commit/18f4323ca92763196aa2922f691dfbeb6bd84e48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-73hc-m4hx-79pj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30832",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:55.893",
      "lastModified" : "2026-03-11T20:36:30.093",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the server to make HTTP requests to internal/private IP addresses by running repo import with a crafted --lfs-endpoint URL. The initial batch request is blind (the response from a metadata endpoint won't parse as valid LFS JSON), but an attacker hosting a fake LFS server can chain this into full read access to internal services by returning download URLs that point at internal targets. This issue has been patched in version 0.11.4."
      }, {
        "lang" : "es",
        "value" : "Soft Serve es un servidor Git autoalojable para la línea de comandos. Desde la versión 0.6.0 hasta antes de la versión 0.11.4, un usuario SSH autenticado puede forzar al servidor a realizar solicitudes HTTP a direcciones IP internas/privadas ejecutando repo import con una URL --lfs-endpoint manipulada. La solicitud de lote inicial es ciega (la respuesta de un endpoint de metadatos no se analizará como JSON LFS válido), pero un atacante que aloja un servidor LFS falso puede encadenar esto en un acceso de lectura completo a servicios internos devolviendo URLs de descarga que apuntan a objetivos internos. Este problema ha sido parcheado en la versión 0.11.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:charm:soft_serve:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "0.6.0",
            "versionEndExcluding" : "0.11.4",
            "matchCriteriaId" : "CB2C4B8B-F7D7-4EAA-B2DC-29C17894811B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/charmbracelet/soft-serve/commit/3ef660098ab37a7950457da8ecc25b516e37ce4e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/charmbracelet/soft-serve/releases/tag/v0.11.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-3fvx-xrxq-8jvv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30834",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:56.057",
      "lastModified" : "2026-03-11T20:30:51.027",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /download endpoint allows any user with API access to induce the PinchTab server to make requests to arbitrary URLs, including internal network services and local system files, and exfiltrate the full response content. This issue has been patched in version 0.7.7."
      }, {
        "lang" : "es",
        "value" : "PinchTab es un servidor HTTP independiente que otorga a los agentes de IA control directo sobre un navegador Chrome. Antes de la versión 0.7.7, una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en el endpoint /download permite a cualquier usuario con acceso a la API inducir al servidor PinchTab a realizar peticiones a URLs arbitrarias, incluyendo servicios de red internos y archivos del sistema local, y exfiltrar el contenido completo de la respuesta. Este problema ha sido parcheado en la versión 0.7.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinchtab:pinchtab:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.7",
            "matchCriteriaId" : "DB42832A-CF83-4457-89C8-A8CD2AEEE885"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pinchtab/pinchtab/security/advisories/GHSA-rw8p-c6hf-q3pg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30838",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T16:15:56.250",
      "lastModified" : "2026-03-11T20:24:06.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "league/commonmark is a PHP Markdown parser. Prior to version 2.8.1, the DisallowedRawHtml extension can be bypassed by inserting a newline, tab, or other ASCII whitespace character between a disallowed HTML tag name and the closing >. For example, <script\\n> would pass through unfiltered and be rendered as a valid HTML tag by browsers. This is a cross-site scripting (XSS) vector for any application that relies on this extension to sanitize untrusted user input. All applications using the DisallowedRawHtml extension to process untrusted markdown are affected. Applications that use a dedicated HTML sanitizer (such as HTML Purifier) on the rendered output are not affected. This issue has been patched in version 2.8.1."
      }, {
        "lang" : "es",
        "value" : "league/commonmark es un analizador de Markdown de PHP. Antes de la versión 2.8.1, la extensión DisallowedRawHtml puede ser eludida insertando un salto de línea, una tabulación u otro carácter de espacio en blanco ASCII entre el nombre de una etiqueta HTML no permitida y el signo de cierre &gt;. Por ejemplo,  pasaría sin filtrar y sería renderizado como una etiqueta HTML válida por los navegadores. Esto es un vector de cross-site scripting (XSS) para cualquier aplicación que dependa de esta extensión para sanear la entrada de usuario no confiable. Todas las aplicaciones que utilizan la extensión DisallowedRawHtml para procesar markdown no confiable están afectadas. Las aplicaciones que utilizan un saneador de HTML dedicado (como HTML Purifier) en la salida renderizada no están afectadas. Este problema ha sido parcheado en la versión 2.8.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thephpleague:commonmark:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.1",
            "matchCriteriaId" : "EDAFDAD9-8D5C-4F37-8FE2-83179A2DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thephpleague/commonmark/security/advisories/GHSA-4v6x-c7xx-hw9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3665",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T16:15:56.583",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsx_consumer::read_office_document of the file source/detail/serialization/xlsx_consumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. The attack must be carried out locally. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en xlnt-community xlnt hasta 1.6.1. El elemento afectado es la función xlnt::detail::xlsx_consumer::read_office_document del archivo source/detail/serialization/xlsx_consumer.cpp del componente Analizador de Archivos XLSX. La manipulación conduce a desreferencia de puntero nulo. El ataque debe llevarse a cabo localmente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xlnt-community:xlnt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "9B381094-639E-4E21-8CB0-60C480F02400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oneafter/0128/blob/main/xl4/repro",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xlnt-community/xlnt/issues/140",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349554",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349554",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.764647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3667",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T16:15:56.797",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Freedom Factory dGEN1 up to 20260221. The impacted element is the function FakeAppService of the component org.ethosmobile.ethoslauncher. The manipulation results in improper authorization. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Freedom Factory dGEN1 hasta 20260221. El elemento afectado es la función FakeAppService del componente org.ethosmobile.ethoslauncher. La manipulación resulta en autorización indebida. El ataque debe ser iniciado desde una posición local. El exploit ha sido publicado al público y puede ser usado para ataques. El proveedor fue contactado con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/571902a31a3d543da009554a82f2d00c",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gist.github.com/Lytes/a94219fa1de3f5173555d5a3e8058f01",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349555",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349555",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764699",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3668",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T16:15:57.010",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The attack is considered to have high complexity. The exploitability is reported as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Freedom Factory dGEN1 hasta 20260221. Esto afecta a la función AndroidEthereum del componente org.ethosmobile.webpwaemul. Esta manipulación causa controles de acceso inadecuados. La explotación remota del ataque es posible. Se considera que el ataque tiene alta complejidad. La explotabilidad se informa como difícil. El exploit se ha puesto a disposición del público y podría usarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/5fc292cecdc561f5c010c1f3a8a7bf1d",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349556",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349556",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764702",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29195",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:51.843",
      "lastModified" : "2026-03-12T13:57:57.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler (PUT /api/users/{username}) lacks validation to prevent an admin-role user from assigning the super-admin role during account updates. While the code correctly blocks an admin from assigning the admin role to another user, it does not include an equivalent check for the super-admin role. This issue has been patched in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Netmaker crea redes con WireGuard. Antes de la versión 1.5.0, el gestor de actualización de usuarios (PUT /api/users/{username}) carece de validación para evitar que un usuario con rol de administrador asigne el rol de superadministrador durante las actualizaciones de cuenta. Si bien el código bloquea correctamente que un administrador asigne el rol de administrador a otro usuario, no incluye una verificación equivalente para el rol de superadministrador. Este problema ha sido parcheado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravitl:netmaker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "2BC0009A-5594-47A8-AB15-257A6742197D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gravitl/netmaker/releases/tag/v1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/gravitl/netmaker/security/advisories/GHSA-ch3w-9456-38v3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29196",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:52.017",
      "lastModified" : "2026-03-12T13:44:29.150",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netmaker makes networks with WireGuard. Prior to version 1.5.0, a user assigned the platform-user role can retrieve WireGuard private keys of all wireguard configs in a network by calling GET /api/extclients/{network} or GET /api/nodes/{network}. While the Netmaker UI restricts visibility, the API endpoints return full records, including private keys, without filtering based on the requesting user's ownership. This issue has been patched in version 1.5.0."
      }, {
        "lang" : "es",
        "value" : "Netmaker crea redes con WireGuard. Antes de la versión 1.5.0, un usuario asignado al rol de usuario 'platform-user' puede recuperar las claves privadas de WireGuard de todas las configuraciones de WireGuard en una red al llamar a GET /api/extclients/{network} o GET /api/nodes/{network}. Si bien la interfaz de usuario de Netmaker restringe la visibilidad, los endpoints de la API devuelven registros completos, incluyendo las claves privadas, sin filtrar basándose en la propiedad del usuario solicitante. Este problema ha sido parcheado en la versión 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gravitl:netmaker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "2BC0009A-5594-47A8-AB15-257A6742197D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gravitl/netmaker/releases/tag/v1.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/gravitl/netmaker/security/advisories/GHSA-4hgg-c4rr-6h7f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30848",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:52.190",
      "lastModified" : "2026-03-10T16:56:59.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.8 and 9.5.0-alpha.8, the PagesRouter static file serving route is vulnerable to a path traversal attack that allows unauthenticated reading of files outside the configured pagesPath directory. The boundary check uses a string prefix comparison without enforcing a directory separator boundary. An attacker can use path traversal sequences to access files in sibling directories whose names share the same prefix as the pages directory (e.g. pages-secret starts with pages). This issue has been patched in versions 8.6.8 and 9.5.0-alpha.8."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.8 y 9.5.0-alpha.8, la ruta de servicio de archivos estáticos de PagesRouter es vulnerable a un ataque de salto de ruta que permite la lectura no autenticada de archivos fuera del directorio pagesPath configurado. La verificación de límites utiliza una comparación de prefijo de cadena sin aplicar un límite de separador de directorio. Un atacante puede usar secuencias de salto de ruta para acceder a archivos en directorios hermanos cuyos nombres comparten el mismo prefijo que el directorio pages (por ejemplo, pages-secret comienza con pages). Este problema ha sido parcheado en las versiones 8.6.8 y 9.5.0-alpha.8."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.8",
            "matchCriteriaId" : "7BAC0476-CA4F-42DB-BDA2-365203EDCAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.0",
            "matchCriteriaId" : "77A07A2F-C8ED-4D78-A9C0-66AB42F69F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D67029D-C1BD-4D46-A84F-C52B4D364268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B10930D-B416-4D9A-BA26-F0AD22BFAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "72794836-5CFB-4928-BB22-D7DE813809B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FA2C4C1E-3AE6-48E0-8B59-80554AE85BB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-hm3f-q6rw-m6wh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30850",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:52.367",
      "lastModified" : "2026-03-10T16:55:09.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.9 and 9.5.0-alpha.9, the file metadata endpoint (GET /files/:appId/metadata/:filename) does not enforce beforeFind / afterFind file triggers. When these triggers are used as access-control gates, the metadata endpoint bypasses them entirely, allowing unauthorized access to file metadata. This issue has been patched in versions 8.6.9 and 9.5.0-alpha.9."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.9 y 9.5.0-alpha.9, el endpoint de metadatos de archivos (GET /files/:appId/metadata/:filename) no aplica los triggers de archivo beforeFind / afterFind. Cuando estos triggers se utilizan como puertas de control de acceso, el endpoint de metadatos los omite por completo, permitiendo el acceso no autorizado a los metadatos de los archivos. Este problema ha sido parcheado en las versiones 8.6.9 y 9.5.0-alpha.9."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.9",
            "matchCriteriaId" : "FBF2D6E7-5E50-4066-A1DB-8184C9DF1D11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.0",
            "matchCriteriaId" : "77A07A2F-C8ED-4D78-A9C0-66AB42F69F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:-:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6BBF106F-1BEF-457B-A81D-50F6F503A292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D67029D-C1BD-4D46-A84F-C52B4D364268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B10930D-B416-4D9A-BA26-F0AD22BFAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "72794836-5CFB-4928-BB22-D7DE813809B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FA2C4C1E-3AE6-48E0-8B59-80554AE85BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40C8E499-E5C6-48DD-AE36-B73B2B6ADA67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-hwx8-q9cg-mqmc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30851",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:52.540",
      "lastModified" : "2026-03-11T13:06:25.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. From version 2.10.0 to before version 2.11.2, forward_auth copy_headers does not strip client-supplied headers, allowing identity injection and privilege escalation. This issue has been patched in version 2.11.2."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que utiliza TLS por defecto. Desde la versión 2.10.0 hasta antes de la versión 2.11.2, forward_auth copy_headers no elimina los encabezados proporcionados por el cliente, permitiendo la inyección de identidad y la escalada de privilegios. Este problema ha sido parcheado en la versión 2.11.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndExcluding" : "2.11.2",
            "matchCriteriaId" : "CD3D5EC2-EC73-4F75-841D-E2A30A0410B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/issues/6610",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/pull/6608",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/pull/7545",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-7r4p-vjf4-gxv4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:52.733",
      "lastModified" : "2026-03-11T13:01:46.030",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the vars_regexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When vars_regexp matches against a placeholder like {http.request.header.X-Input}, the header value gets resolved once (expected), then passed through repl.ReplaceAll() again (the bug). This means an attacker can put {env.DATABASE_URL} or {file./etc/passwd} in a request header and the server will evaluate it, leaking environment variables, file contents, and system info. This issue has been patched in version 2.11.2."
      }, {
        "lang" : "es",
        "value" : "Caddy es una plataforma de servidor extensible que usa TLS por defecto. Desde la versión 2.7.5 hasta antes de la versión 2.11.2, el comparador vars_regexp en vars.go:337 expande doblemente la entrada controlada por el usuario a través del reemplazador de Caddy. Cuando vars_regexp coincide con un marcador de posición como {http.request.header.X-Input}, el valor del encabezado se resuelve una vez (esperado), y luego se pasa por repl.ReplaceAll() de nuevo (el error). Esto significa que un atacante puede colocar {env.DATABASE_URL} o {file./etc /passwd} en un encabezado de solicitud y el servidor lo evaluará, filtrando variables de entorno, contenido de archivos e información del sistema. Este problema ha sido parcheado en la versión 2.11.2."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.5",
            "versionEndExcluding" : "2.11.2",
            "matchCriteriaId" : "A3772146-497E-4F88-B309-90C277081DE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/caddyserver/caddy/pull/5408",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/releases/tag/v2.11.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/caddyserver/caddy/security/advisories/GHSA-m2w3-8f23-hxxf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30854",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:52.910",
      "lastModified" : "2026-03-10T16:52:21.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.3.1-alpha.3 to before version 9.5.0-alpha.10, when graphQLPublicIntrospection is disabled, __type queries nested inside inline fragments (e.g. ... on Query { __type(name:\"User\") { name } }) bypass the introspection control, allowing unauthenticated users to perform type reconnaissance. __schema introspection is not affected. This issue has been patched in version 9.5.0-alpha.10."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Desde la versión 9.3.1-alpha.3 hasta antes de la versión 9.5.0-alpha.10, cuando graphQLPublicIntrospection está deshabilitado, las consultas __type anidadas dentro de fragmentos en línea (por ejemplo, ... on Query { __type(name:'User') { name } }) eluden el control de introspección, permitiendo a usuarios no autenticados realizar reconocimiento de tipos. La introspección de __schema no se ve afectada. Este problema ha sido parcheado en la versión 9.5.0-alpha.10."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.5.0",
            "matchCriteriaId" : "A7EEB7CA-DB11-4D0C-891E-B70B85FF44B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.3.1:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C73893F8-315F-4FE3-9ADB-DD2965797C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.3.1:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3316761A-EDF2-4798-9282-B4D6DB774134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D67029D-C1BD-4D46-A84F-C52B4D364268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B10930D-B416-4D9A-BA26-F0AD22BFAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "72794836-5CFB-4928-BB22-D7DE813809B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FA2C4C1E-3AE6-48E0-8B59-80554AE85BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40C8E499-E5C6-48DD-AE36-B73B2B6ADA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E92B2675-5D49-404B-BEC1-7037D6C1ACD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-q5q9-2rhp-33qw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30855",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.053",
      "lastModified" : "2026-03-09T17:33:08.627",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account registration is open to the public, this vulnerability allows any unauthenticated attacker to register an account and subsequently exploit the system. This enables cross-tenant account takeover and destruction, making the impact critical. This issue has been patched in version 0.3.2."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.3.2, una omisión de autorización en los endpoints de gestión de inquilinos de la aplicación WeKnora permite a cualquier usuario autenticado leer, modificar o eliminar cualquier inquilino por ID. Dado que el registro de cuentas está abierto al público, esta vulnerabilidad permite a cualquier atacante no autenticado registrar una cuenta y posteriormente explotar el sistema. Esto permite la toma de control y destrucción de cuentas entre inquilinos, haciendo que el impacto sea crítico. Este problema ha sido parcheado en la versión 0.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.2",
            "matchCriteriaId" : "E8CD2EAE-93F9-4249-9ED6-1896DA088B96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-ccj6-79j6-cq5q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30856",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.210",
      "lastModified" : "2026-04-13T14:43:36.147",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0,  a vulnerability involving tool name collision and indirect prompt injection allows a malicious remote MCP server to hijack tool execution. By exploiting an ambiguous naming convention in the MCP client (mcp_{service}_{tool}), an attacker can register a malicious tool that overwrites a legitimate one (e.g., tavily_extract). This enables the attacker to redirect LLM execution flow, exfiltrate system prompts, context, and potentially execute other tools with the user's privileges. This issue has been patched in version 0.3.0."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.3.0, una vulnerabilidad que implica colisión de nombres de herramientas e inyección indirecta de prompts permite a un servidor MCP remoto malicioso secuestrar la ejecución de herramientas. Al explotar una convención de nombres ambigua en el cliente MCP (mcp_{service}_{tool}), un atacante puede registrar una herramienta maliciosa que sobrescribe una legítima (por ejemplo, tavily_extract). Esto permite al atacante redirigir el flujo de ejecución del LLM, exfiltrar prompts del sistema, contexto y potencialmente ejecutar otras herramientas con los privilegios del usuario. Este problema ha sido parcheado en la versión 0.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "7F3180E7-F262-4100-96C2-4AB5730E75FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-67q9-58vj-32qx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30857",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.370",
      "lastModified" : "2026-03-09T17:34:19.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a cross-tenant authorization bypass in the knowledge base copy endpoint allows any authenticated user to clone (duplicate) another tenant’s knowledge base into their own tenant by knowing/guessing the source knowledge base ID. This enables bulk data exfiltration (document/FAQ content) across tenants. This issue has been patched in version 0.3.0."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.3.0, una omisión de autorización entre inquilinos en el endpoint de copia de la base de conocimiento permite a cualquier usuario autenticado clonar (duplicar) la base de conocimiento de otro inquilino en su propio inquilino conociendo/adivinando el ID de la base de conocimiento de origen. Esto permite la exfiltración masiva de datos (contenido de documentos/preguntas frecuentes) entre inquilinos. Este problema ha sido parcheado en la versión 0.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "7F3180E7-F262-4100-96C2-4AB5730E75FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-8rf9-c59g-f82f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30858",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.523",
      "lastModified" : "2026-03-09T17:34:39.527",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a DNS rebinding vulnerability in the web_fetch tool allows an unauthenticated attacker to bypass URL validation and access internal resources on the server, including private IP addresses (e.g., 127.0.0.1, 192.168.x.x). By crafting a malicious domain that resolves to a public IP during validation and subsequently resolves to a private IP during execution, an attacker can access sensitive local services and potentially exfiltrate data. This issue has been patched in version 0.3.0."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.3.0, una vulnerabilidad de reencuadernación de DNS en la herramienta web_fetch permite a un atacante no autenticado eludir la validación de URL y acceder a recursos internos en el servidor, incluyendo direcciones IP privadas (p. ej., 127.0.0.1, 192.168.x.x). Al crear un dominio malicioso que se resuelve a una IP pública durante la validación y posteriormente se resuelve a una IP privada durante la ejecución, un atacante puede acceder a servicios locales sensibles y potencialmente exfiltrar datos. Este problema ha sido parcheado en la versión 0.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "7F3180E7-F262-4100-96C2-4AB5730E75FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-h6gw-8f77-mmmp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30859",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.673",
      "lastModified" : "2026-03-09T17:35:20.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.2.12, una vulnerabilidad de control de acceso roto en la herramienta de consulta de la base de datos permite a cualquier inquilino autenticado leer datos sensibles pertenecientes a otros inquilinos, incluyendo claves de API, configuraciones de modelos y mensajes privados. La aplicación no logra aplicar el aislamiento de inquilinos en tablas críticas (modelos, mensajes, embeddings), lo que permite el acceso no autorizado a datos entre inquilinos con privilegios de autenticación a nivel de usuario. Este problema ha sido parcheado en la versión 0.2.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.12",
            "matchCriteriaId" : "7B86D061-D1A8-438E-802E-D5408C339349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-2f4c-vrjq-rcgv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30860",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.823",
      "lastModified" : "2026-03-09T17:35:41.243",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within PostgreSQL array expressions and row expressions, allowing attackers to bypass SQL injection protections. By smuggling dangerous PostgreSQL functions inside these expressions and chaining them with large object operations and library loading capabilities, an unauthenticated attacker can achieve arbitrary code execution on the database server with database user privileges. This issue has been patched in version 0.2.12."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Antes de la versión 0.2.12, existe una vulnerabilidad de ejecución remota de código (RCE) en la funcionalidad de consulta de base de datos de la aplicación. El sistema de validación no logra inspeccionar recursivamente los nodos hijos dentro de expresiones de array y expresiones de fila de PostgreSQL, permitiendo a los atacantes eludir las protecciones de inyección SQL. Al introducir funciones peligrosas de PostgreSQL dentro de estas expresiones y encadenándolas con operaciones de objetos grandes y capacidades de carga de bibliotecas, un atacante no autenticado puede lograr ejecución de código arbitrario en el servidor de base de datos con privilegios de usuario de base de datos. Este problema ha sido parcheado en la versión 0.2.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.12",
            "matchCriteriaId" : "7B86D061-D1A8-438E-802E-D5408C339349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-8w32-6mrw-q5wv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30861",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:53.980",
      "lastModified" : "2026-03-09T17:35:56.647",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation. The application allows unrestricted user registration, meaning any attacker can create an account and exploit the command injection flaw. Despite implementing a whitelist for allowed commands (npx, uvx) and blacklists for dangerous arguments and environment variables, the validation can be bypassed using the -p flag with npx node. This allows any attacker to execute arbitrary commands with the application's privileges, leading to complete system compromise. This issue has been patched in version 0.2.10."
      }, {
        "lang" : "es",
        "value" : "WeKnora es un framework impulsado por LLM diseñado para la comprensión profunda de documentos y la recuperación semántica. Desde la versión 0.2.5 hasta antes de la versión 0.2.10, existe una vulnerabilidad de ejecución remota de código (RCE) no autenticada en la validación de la configuración stdio de MCP. La aplicación permite el registro de usuarios sin restricciones, lo que significa que cualquier atacante puede crear una cuenta y explotar la falla de inyección de comandos. A pesar de implementar una lista blanca para comandos permitidos (npx, uvx) y listas negras para argumentos peligrosos y variables de entorno, la validación puede ser eludida usando la bandera -p con npx node. Esto permite a cualquier atacante ejecutar comandos arbitrarios con los privilegios de la aplicación, lo que lleva a un compromiso completo del sistema. Este problema ha sido parcheado en la versión 0.2.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.5",
            "versionEndExcluding" : "0.2.10",
            "matchCriteriaId" : "13FE8D37-06C9-4406-AE17-C35A7C66CC0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Tencent/WeKnora/security/advisories/GHSA-r55h-3rwj-hcmg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30863",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-07T17:15:54.137",
      "lastModified" : "2026-03-10T16:50:58.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.10 and 9.5.0-alpha.11, the Google, Apple, and Facebook authentication adapters use JWT verification to validate identity tokens. When the adapter's audience configuration option is not set (clientId for Google/Apple, appIds for Facebook), JWT verification silently skips audience claim validation. This allows an attacker to use a validly signed JWT issued for a different application to authenticate as any user on the target Parse Server. This issue has been patched in versions 8.6.10 and 9.5.0-alpha.11."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de las versiones 8.6.10 y 9.5.0-alpha.11, los adaptadores de autenticación de Google, Apple y Facebook utilizan la verificación JWT para validar tokens de identidad. Cuando la opción de configuración de audiencia del adaptador no está establecida (clientId para Google/Apple, appIds para Facebook), la verificación JWT omite silenciosamente la validación de la declaración de audiencia. Esto permite a un atacante utilizar un JWT válidamente firmado emitido para una aplicación diferente para autenticarse como cualquier usuario en el Parse Server objetivo. Este problema ha sido parcheado en las versiones 8.6.10 y 9.5.0-alpha.11."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.10",
            "matchCriteriaId" : "8AB7EA1E-148D-4A8B-AAF4-06FB708291B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.0",
            "matchCriteriaId" : "77A07A2F-C8ED-4D78-A9C0-66AB42F69F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "18465CD3-DB00-4A7C-99D9-8B841829EEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D67029D-C1BD-4D46-A84F-C52B4D364268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B10930D-B416-4D9A-BA26-F0AD22BFAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "72794836-5CFB-4928-BB22-D7DE813809B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FA2C4C1E-3AE6-48E0-8B59-80554AE85BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40C8E499-E5C6-48DD-AE36-B73B2B6ADA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E92B2675-5D49-404B-BEC1-7037D6C1ACD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-x6fw-778m-wr9v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2671",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T18:16:05.873",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the local network. The attack's complexity is rated as high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en el Mendi Neurofeedback Headset V4. Afectada por esta vulnerabilidad está una funcionalidad desconocida del componente Gestor de Bluetooth de Baja Energía. Realizar una manipulación resulta en la transmisión en texto claro de información sensible. El ataque solo puede realizarse desde la red local. La complejidad del ataque se califica como alta. La explotación parece ser difícil. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.2,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        }, {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "references" : [ {
        "url" : "https://ab3j.radio/mendi.pdf",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349702",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349702",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.766457",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3669",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T19:15:48.800",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en Freedom Factory dGEN1 hasta 20260221. Esto afecta a la función AlarmService del componente com.dgen.alarm. Dicha manipulación conduce a una autorización indebida. El ataque debe realizarse localmente. El exploit ha sido divulgado públicamente y puede usarse. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/2bd9cb3faf89b114754f00292beabb38",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349557",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349557",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764703",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3670",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T19:15:49.850",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Freedom Factory dGEN1 up to 20260221. Affected is an unknown function of the component com.dgen.alarm. Performing a manipulation results in improper authorization. The attack requires a local approach. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Freedom Factory dGEN1 hasta 20260221. Afectada es una función desconocida del componente com.dgen.alarm. Realizar una manipulación resulta en autorización indebida. El ataque requiere un enfoque local. El exploit ahora es público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/0accda73c896ea137db832dc4d81345c",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349558",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349558",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764704",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3671",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T22:15:49.927",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function TokenBalanceContentProvider of the component org.ethereumphone.walletmanager.testing123. Executing a manipulation can lead to improper authorization. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en Freedom Factory dGEN1 hasta 20260221. Afectada por esta vulnerabilidad está la función TokenBalanceContentProvider del componente org.ethereumphone.walletmanager.testing123. Ejecutar una manipulación puede llevar a una autorización indebida. El ataque requiere acceso local. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/0a270c1d6e65a7312147b5d128dd34b6",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349559",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349559",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764705",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3672",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T22:15:50.147",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in JeecgBoot up to 3.9.1. Affected is the function isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en JeecgBoot hasta 3.9.1. Afectada es la función isExistSqlInjectKeyword del archivo /jeecg-boot/sys/API/getDictItems. Dicha manipulación conduce a inyección SQL. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349569",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349569",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765093",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.yuque.com/la12138/pa2fpb/ab1i8wyeeg1zzgq5?singleDoc",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3674",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T22:15:50.350",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function FakeAppProvider of the component org.ethosmobile.ethoslauncher. Performing a manipulation results in improper authorization. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Freedom Factory dGEN1 hasta 20260221. Afectada por esta vulnerabilidad es la función FakeAppProvider del componente org.ethosmobile.ethoslauncher. Realizar una manipulación resulta en autorización indebida. El ataque debe ser iniciado desde una posición local. El exploit ha sido hecho público y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/571902a31a3d543da009554a82f2d00c",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349570",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349570",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764700",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3675",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T22:15:50.563",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Freedom Factory dGEN1 up to 20260221. Affected by this issue is the function FakeAppReceiver of the component org.ethosmobile.ethoslauncher. Executing a manipulation can lead to improper authorization. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Freedom Factory dGEN1 hasta 20260221. Afectada por este problema es la función FakeAppReceiver del componente org.ethosmobile.ethoslauncher. Ejecutar una manipulación puede llevar a una autorización indebida. El ataque necesita ser lanzado localmente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Lytes/1078d9e16897ed95ad24143952adfba6",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349571",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349571",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.764701",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3677",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T22:15:50.770",
      "lastModified" : "2026-03-09T16:16:11.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Tenda FH451 1.0.0.9. Esto afecta la función fromSetCfm del archivo /goform/setcfm. La manipulación del argumento funcname/funcpara1 resulta en desbordamiento de búfer basado en pila. El ataque puede ser realizado desde remoto. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh451_firmware:1.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7521568-7BCD-43F8-9F20-440DF3919D5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh451:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A8BF83-E42A-4D6B-A52D-146FE1AEE2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/FH451/vul_61/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349579",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349579",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765329",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3678",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T23:15:46.520",
      "lastModified" : "2026-03-09T16:16:21.987",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434 of the file /goform/AdvSetWan. This manipulation of the argument wanmode/PPPOEPassword causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad se determinó en Tenda FH451 1.0.0.9. Afecta a la función sub_3C434 del archivo /goform/AdvSetWan. Esta manipulación del argumento wanmode/PPPOEPassword causa desbordamiento de búfer basado en pila. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh451_firmware:1.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7521568-7BCD-43F8-9F20-440DF3919D5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh451:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A8BF83-E42A-4D6B-A52D-146FE1AEE2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/FH451/vul_62/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349580",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349580",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765330",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3679",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T23:15:47.643",
      "lastModified" : "2026-03-09T16:16:36.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument mit_linktype/PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda FH451 1.0.0.9. Afectada por esta vulnerabilidad es la función formQuickIndex del archivo /goform/QuickIndex. Tal manipulación del argumento mit_linktype/PPPOEPassword conduce a un desbordamiento de búfer basado en pila. Es posible lanzar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f451_firmware:1.0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF540694-4F94-4B64-AD7C-27CC9E2EC734"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f451:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35ABD8C6-9D5E-45A3-983B-73ACCF9A74F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/FH451/vul_63/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349581",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349581",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3680",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T23:15:47.850",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in RyuzakiShinji biome-mcp-server up to 1.0.0. Affected by this issue is some unknown functionality of the file biome-mcp-server.ts. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The patch is named 335e1727147efeef011f1ff8b05dd751d8a660be. Applying a patch is the recommended action to fix this issue."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en RyuzakiShinji biome-mcp-server hasta 1.0.0. Afectada por este problema es alguna funcionalidad desconocida del archivo biome-mcp-server.ts. Realizar una manipulación resulta en inyección de comandos. El ataque puede ser iniciado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques. El parche se llama 335e1727147efeef011f1ff8b05dd751d8a660be. Aplicar un parche es la acción recomendada para solucionar este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RyuzakiShinji/biome-mcp-server/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/RyuzakiShinji/biome-mcp-server/pull/1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/RyuzakiShinji/biome-mcp-server/pull/1/changes/335e1727147efeef011f1ff8b05dd751d8a660be",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/user-attachments/files/25466715/biome-mcp-server_security_advisory.pdf",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349582",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349582",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765399",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3681",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-07T23:15:48.063",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in welovemedia FFmate up to 2.0.15. This affects the function fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en welovemedia FFmate hasta la versión 2.0.15. Esto afecta a la función fireWebhook del archivo /internal/service/webhook/webhook.go. La ejecución de una manipulación puede conducir a una falsificación de petición del lado del servidor. El ataque puede lanzarse de forma remota. El exploit se ha puesto a disposición del público y podría utilizarse para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/ffmate/vulnerability-1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349583",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349583",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765558",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3682",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T00:16:13.780",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. This vulnerability affects the function Execute of the file /internal/service/ffmpeg/ffmpeg.go. The manipulation leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en welovemedia FFmate hasta 2.0.15. Esta vulnerabilidad afecta a la función Execute del archivo /internal/service/ffmpeg/ffmpeg.go. La manipulación conduce a la inyección de argumentos. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/ffmate/vulnerability-3",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349584",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349584",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765587",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3683",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T00:16:14.027",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en bufanyun HotGo hasta la versión 2.0. Este problema afecta a la función ImageTransferStorage del archivo /server/internal/logic/common/upload.go del componente Endpoint. La manipulación resulta en falsificación de petición del lado del servidor. El ataque puede ser lanzado remotamente. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/hotgo/vulnerability-1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349585",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349585",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765588",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30909",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-03-08T01:15:49.387",
      "lastModified" : "2026-03-18T13:02:17.657",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows.\n\nbin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersized output buffer.\n\nEncountering this issue is unlikely as the message length would need to be very large.\n\nFor bin2hex() the bin_len would have to be > SIZE_MAX / 2 For encrypt() the msg_len would need to be > SIZE_MAX - 16U For aes256gcm_encrypt_afternm() the msg_len would need to be > SIZE_MAX - 16U For seal() the enc_len would need to be > SIZE_MAX - 64U"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crypt::NaCl::Sodium hasta la 2.002 para Perl tienen posibles desbordamientos de enteros.\n\nLas funciones bin2hex, encrypt, aes256gcm_encrypt_afternm y seal no verifican que el tamaño de salida sea menor que SIZE_MAX, lo que podría llevar a un desbordamiento circular de enteros causando un búfer de salida de tamaño insuficiente.\n\nEs poco probable encontrar este problema, ya que la longitud del mensaje tendría que ser muy grande.\n\nPara bin2hex() la longitud bin_len tendría que ser &gt; SIZE_MAX / 2\nPara encrypt() la longitud msg_len tendría que ser &gt; SIZE_MAX - 16U\nPara aes256gcm_encrypt_afternm() la longitud msg_len tendría que ser &gt; SIZE_MAX - 16U\nPara seal() la longitud enc_len tendría que ser &gt; SIZE_MAX - 64U"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timlegge:crypt\\:\\:nacl\\:\\:sodium:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "2.003",
            "matchCriteriaId" : "B9E218A1-A8B3-4F9A-9B57-8B3290097292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cpan-authors/crypt-nacl-sodium/pull/24.patch",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.002/source/Sodium.xs#L2116",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.002/source/Sodium.xs#L2310",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.002/source/Sodium.xs#L3304",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.002/source/Sodium.xs#L942",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.003/source/Changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3693",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T01:15:49.530",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Shy2593666979 AgentChat up to 2.3.0. This issue affects the function get_user_info/update_user_info of the file /src/backend/agentchat/api/v1/user.py of the component User Endpoint. This manipulation of the argument user_id causes improper control of resource identifiers. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Shy2593666979 AgentChat hasta la versión 2.3.0. Este problema afecta a la función get_user_info/update_user_info del archivo /src/backend/agentchat/api/v1/user.py del componente User Endpoint. Esta manipulación del argumento user_id causa un control inadecuado de los identificadores de recursos. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-99"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/agent-chat/vulnerability-1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/CC-T-454455/Vulnerabilities/tree/master/agent-chat/vulnerability-2",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349640",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349640",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765589",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765590",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3695",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T01:15:49.740",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester Modern Image Gallery App 1.0. Afecta a una función desconocida del archivo /delete.php. Dicha manipulación del argumento filename conduce a salto de ruta. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remyandrade:modern_image_gallery_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "017F5B8E-C165-4C65-B0B9-F9A8B02E17E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218#-detailed-proof-of-concept-poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3696",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T01:15:49.943",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Totolink N300RH 6..1c.1353_B20190305. El elemento afectado es la función setWiFiWpsConfig del archivo /cgi-bin/cstecgi.cgi del componente Gestor CGI. Realizar una manipulación resulta en inyección de comandos del sistema operativo. El ataque puede ser iniciado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:n300rh_firmware:6.1c.1353_b20190305:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53CB74DE-93CC-4E74-860E-233303AF77ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:n300rh:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28EE5BE0-2048-42F8-BA04-0765D82F36BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JXBbozaihuang/vuln-research/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765681",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.totolink.net/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30910",
      "sourceIdentifier" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "published" : "2026-03-08T02:16:00.620",
      "lastModified" : "2026-03-10T18:18:51.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows.\n\nCombined aead encryption, combined signature creation, and bin2hex functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersized output buffer. This can cause a crash in bin2hex and encryption algorithms other than aes256gcm. For aes256gcm encryption and signatures, an undersized buffer could lead to buffer overflow.\n\nEncountering this issue is unlikely as the message length would need to be very large.\n\nFor bin2hex the input size would have to be > SIZE_MAX / 2 For aegis encryption the input size would need to be > SIZE_MAX - 32U For other encryption the input size would need to be > SIZE_MAX - 16U For signatures the input size would need to be > SIZE_MAX - 64U"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Crypt::Sodium::XS hasta la 0.001000 para Perl tienen posibles desbordamientos de enteros.\n\nEl cifrado AEAD combinado, la creación de firmas combinada y las funciones bin2hex no verifican que el tamaño de salida sea menor que SIZE_MAX, lo que podría llevar a un 'integer wraparound' causando un búfer de salida de tamaño insuficiente. Esto puede causar un fallo en bin2hex y en algoritmos de cifrado distintos de aes256gcm. Para el cifrado aes256gcm y las firmas, un búfer de tamaño insuficiente podría llevar a un desbordamiento de búfer.\n\nEs poco probable encontrar este problema, ya que la longitud del mensaje tendría que ser muy grande.\n\nPara bin2hex, el tamaño de entrada tendría que ser &gt; SIZE_MAX / 2\nPara el cifrado aegis, el tamaño de entrada tendría que ser &gt; SIZE_MAX - 32U\nPara otros cifrados, el tamaño de entrada tendría que ser &gt; SIZE_MAX - 16U\nPara las firmas, el tamaño de entrada tendría que ser &gt; SIZE_MAX - 64U"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iamb:crypt\\:\\:sodium\\:\\:xs:*:*:*:*:*:perl:*:*",
            "versionEndIncluding" : "0.001001",
            "matchCriteriaId" : "36F9F8AC-0EDB-4FA5-9E11-1F85AC15D3E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://metacpan.org/release/IAMB/Crypt-Sodium-XS-0.001001/changes",
        "source" : "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3697",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T02:16:00.760",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Planet ICG-2510 1.0_20250811. The impacted element is the function sub_40C8E4 of the file /usr/sbin/httpd of the component Language Package Configuration Handler. Executing a manipulation of the argument Language can lead to stack-based buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Planet ICG-2510 1.0_20250811. El elemento afectado es la función sub_40C8E4 del archivo /usr/sbin/httpd del componente Gestor de Configuración de Paquetes de Idioma. La ejecución de una manipulación del argumento Language puede conducir a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glkfc/IoT-Vulnerability/blob/main/PLANET/ICG-2510/vulnerability_report1.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349643",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349643",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765682",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3698",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T02:16:00.980",
      "lastModified" : "2026-03-10T15:21:52.560",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. This affects the function strcpy of the file /goform/NTP. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en UTT HiPER 810G hasta 1.7.7-171114. Esto afecta la función strcpy del archivo /goform/NTP. La manipulación conduce a desbordamiento de búfer. El ataque puede ser iniciado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3699",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T03:16:04.017",
      "lastModified" : "2026-03-10T15:21:15.350",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-171114. This impacts the function strcpy of the file /goform/formRemoteControl. The manipulation results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en UTT HiPER 810G hasta 1.7.7-171114. Esto afecta a la función strcpy del archivo /goform/formRemoteControl. La manipulación resulta en desbordamiento de búfer. El ataque puede lanzarse remotamente. El exploit ha sido publicado y puede utilizarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3700",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T03:16:05.177",
      "lastModified" : "2026-03-10T15:11:17.353",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigDnsFilterGlobal. This manipulation causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UTT HiPER 810G hasta 1.7.7-171114. Afectada es la función strcpy del archivo /goform/formConfigDnsFilterGlobal. Esta manipulación causa desbordamiento de búfer. Es posible la explotación remota del ataque. El exploit ha sido puesto a disposición del público y podría ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/7wkajk/CVE-VUL/blob/main/1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3704",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T04:15:59.543",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2025-10959. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Wavlink NU516U1 251208. Esta vulnerabilidad afecta la función sub_405B2C del archivo /cgi-bin/firewall.cgi del componente Incomplete Fix CVE-2025-10959. La manipulación conduce a inyección de comandos. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado al público y puede ser usado. Se recomienda actualizar el componente afectado. El proveedor fue contactado tempranamente, respondió de una manera muy profesional y rápidamente lanzó una versión corregida del producto afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:251208:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA85ED2-474A-40C1-A0B7-10F9B78FCCB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.wavlink.com/firmware/RD/WINSTAR_NU516U1-WO-A-2026-02-27-2fcf6ae-mt7628-squashfs-sysupgrade.bin",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/wavlink_DMZ.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/wavlink_DMZ.md#exp",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759233",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3701",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:28.517",
      "lastModified" : "2026-03-10T18:55:17.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en H3C Magic B1 hasta 100R004. Afectada por esta vulnerabilidad es la función Edit_BasicSSID_5G del archivo /goform/aspForm. Tal manipulación del argumento param conduce a desbordamiento de búfer. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "100r004",
            "matchCriteriaId" : "8BFC22D7-26C6-4A17-93D6-F11D69401EFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:h3c:magic_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A510E4-C2F3-463A-A56F-93A666625B41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saltedfisholdxu/vul/blob/main/Magic%20B1/6_b1-report.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3702",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:28.837",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en SourceCodester Loan Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /index.php. Realizar una manipulación del argumento page resulta en cross site scripting. El ataque es posible de ser llevado a cabo remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:loan_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7902576E-876D-4BE4-8EF6-28B7403B130D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Loan-Management-System/XSS-Index-page.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765785",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3703",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:29.080",
      "lastModified" : "2026-03-10T18:55:10.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Wavlink NU516U1 251208. Esto afecta a la función sub_401A10 del archivo /cgi-bin/login.cgi. La ejecución de una manipulación del argumento ipaddr puede conducir a una escritura fuera de límites. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Se recomienda actualizar el componente afectado. Se contactó al proveedor con antelación, respondió de manera muy profesional y rápidamente lanzó una versión corregida del producto afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-nu516u1_firmware:251208:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA85ED2-474A-40C1-A0B7-10F9B78FCCB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C697E865-5984-4974-8A11-43CC6940ABFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.wavlink.com/firmware/RD/WINSTAR_NU516U1-WO-A-2026-02-27-2fcf6ae-mt7628-squashfs-sysupgrade.bin",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/ipaddr.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/ipaddr.md#exp-exploit--poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.759226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3705",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:29.313",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the argument flightno results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en code-projects Simple Flight Ticket Booking System 1.0. Este problema afecta a algún procesamiento desconocido del archivo /Adminsearch.PHP. La manipulación del argumento flightno resulta en inyección SQL. Es posible lanzar el ataque remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Owen-YuanW/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767262",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3706",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:31.847",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is considered difficult. The actual existence of this vulnerability is currently in question. Patch name: fdec3c90a15447bd538641d85e5a3e3ac981011d. To fix this issue, it is recommended to deploy a patch. The project maintainer explains: \"Signature Malleability is not exploitable in SSH protocol. (...) [A] PoC doesn't exist for SSH implementation, but rather it's against the internal API.\""
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en mkj Dropbear hasta 2025.89. La función unpackneg del archivo src/curve25519.c del componente S Range Check se ve afectada. Esta manipulación provoca una verificación incorrecta de la firma criptográfica. El ataque puede iniciarse de forma remota. Se considera que el ataque tiene una complejidad alta. La explotabilidad se considera difícil. El exploit ha sido divulgado públicamente y puede ser utilizado. Nombre del parche: fdec3c90a15447bd538641d85e5a3e3ac981011d. Para solucionar este problema, se recomienda desplegar un parche."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "UNREPORTED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mkj/dropbear/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/mkj/dropbear/commit/fdec3c90a15447bd538641d85e5a3e3ac981011d",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/mkj/dropbear/issues/406",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/mkj/dropbear/pull/407",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/str4d/ed25519-java/issues/82#issue-727629226",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349652",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349652",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765933",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/mkj/dropbear/issues/406",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3707",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:32.193",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in MrNanko webp4j up to 1.3.x. The affected element is the function DecodeGifFromMemory of the file src/main/c/gif_decoder.c. Such manipulation of the argument canvas_height leads to integer overflow. Local access is required to approach this attack. The exploit is publicly available and might be used. The name of the patch is 89771b201c66d15d29e4cc016d8aae82b6a5fbe1. It is advisable to implement a patch to correct this issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en MrNanko webp4j hasta 1.3.x. El elemento afectado es la función DecodeGifFromMemory del archivo src/main/c/gif_decoder.c. Dicha manipulación del argumento canvas_height conduce a desbordamiento de entero. Se requiere acceso local para realizar este ataque. El exploit está disponible públicamente y podría ser utilizado. El nombre del parche es 89771b201c66d15d29e4cc016d8aae82b6a5fbe1. Es aconsejable implementar un parche para corregir este problema."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-189"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MrNanko/webp4j/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/MrNanko/webp4j/commit/89771b201c66d15d29e4cc016d8aae82b6a5fbe1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/MrNanko/webp4j/issues/6",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/MrNanko/webp4j/issues/6#issuecomment-3941945014",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/Sp1d3rL1/Webp4j-Heap-Buffer-Overflow/blob/main/README.EN.md",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349653",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349653",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765972",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3708",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T05:16:32.440",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an unknown function of the file /login.php. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en code-projects Simple Flight Ticket Booking System 1.0. El elemento afectado es una función desconocida del archivo /login.PHP. Realizar una manipulación del argumento Username resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido publicado y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Owen-YuanW/CVE/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766138",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767290",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768181",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3709",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T06:16:10.797",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /register.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en code-projects Simple Flight Ticket Booking System 1.0. Esto afecta a una función desconocida del archivo /register.php. La ejecución de una manipulación del argumento Username puede conducir a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Owen-YuanW/CVE/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766142",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767883",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3710",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T06:16:11.053",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en code-projects Simple Flight Ticket Booking System 1.0. Esto afecta una función desconocida del archivo /Adminadd.php. La manipulación del argumento flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp conduce a inyección SQL. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Owen-YuanW/CVE/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349656",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349656",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767263",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3711",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T06:16:11.260",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp results in sql injection. The attack can be executed remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en code-projects Simple Flight Ticket Booking System 1.0. Afecta a una función desconocida del archivo /Adminupdate.php. La manipulación del argumento flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp resulta en inyección SQL. El ataque puede ejecutarse de forma remota. El exploit ahora es público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Owen-YuanW/CVE/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349657",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766309",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3713",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T06:16:11.460",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en pnggroup libpng hasta 1.6.55. Afectada por esta vulnerabilidad es la función do_pnm2png del archivo contrib/pngminus/pnm2png.c del componente pnm2png. Esta manipulación del argumento width/height causa desbordamiento de búfer basado en montículo. El ataque está restringido a la ejecución local. El exploit ha sido publicado y puede ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de problema pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/biniamf/pocs/tree/main/pnm2png",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/pnggroup/libpng/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/pnggroup/libpng/issues/794",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349658",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349658",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.761996",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3714",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T07:16:13.293",
      "lastModified" : "2026-03-09T18:37:31.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en OpenCart 4.0.2.3. Afectada por este problema es la función Save del archivo admin/controller/design/template.PHP del componente Incomplete Fix CVE-2024-36694. Dicha manipulación conduce a una neutralización incorrecta de elementos especiales utilizados en un motor de plantillas. El ataque puede ser realizado de forma remota. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-791"
        }, {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencart:opencart:4.0.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD96665F-1AB5-44A9-80A4-CFB60B5916CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1_ZCvICLKo8AOovDkKFHwsBxh-ciwbElS/view?usp=drive_link",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765176",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3715",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T07:16:13.543",
      "lastModified" : "2026-03-10T18:55:03.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Wavlink WL-WN579X3-C 231124. Esto afecta la función sub_40139C del archivo /cgi-bin/firewall.cgi. Realizar una manipulación del argumento del_flag resulta en un desbordamiento de búfer basado en pila. Es posible iniciar el ataque de forma remota. El exploit se ha hecho público y podría ser usado. Actualizar a la versión 20260226 puede mitigar este problema. Debería actualizar el componente afectado. Se contactó al proveedor con antelación, respondió de manera muy profesional y lanzó rápidamente una versión corregida del producto afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579x3-c_firmware:231124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7671CD24-8B40-4B35-B1DC-0B863E707F28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579x3-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824705E8-A90D-4055-A3A1-9FAAD0458D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.wavlink.com/firmware/RD/WN579X3C_WAVLINK_V20260226_WO_cb3003b2.bin",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/WL-WN579X3-C/vul_17/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765325",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3716",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T08:15:59.470",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 20260226 is able to resolve this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en Wavlink WL-WN579X3-C 231124. Esta vulnerabilidad afecta la función sub_401AD4 del archivo /cgi-bin/adm.cgi. La ejecución de una manipulación del argumento Hostname puede llevar a cross site scripting. Es posible lanzar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Actualizar a la versión 20260226 puede resolver este problema. El componente afectado debe ser actualizado. El proveedor se contactó tempranamente, respondió de manera muy profesional y rápidamente lanzó una versión corregida del producto afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:wavlink:wl-wn579x3-c_firmware:231124:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7671CD24-8B40-4B35-B1DC-0B863E707F28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:wavlink:wl-wn579x3-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "824705E8-A90D-4055-A3A1-9FAAD0458D75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dl.wavlink.com/firmware/RD/WN579X3C_WAVLINK_V20260226_WO_cb3003b2.bin",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/WL-WN579X3-C/vul_18/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3719",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T08:15:59.710",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This issue affects some unknown processing of the file /System/Cms/downLoad. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Este problema afecta a algún procesamiento desconocido del archivo /System/Cms/downLoad. La manipulación del argumento path conduce a un salto de ruta. El ataque puede iniciarse remotamente. El exploit está disponible públicamente y podría ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luoye197-prog/cve-ziguang-filereadnew",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349662",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349662",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.765787",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3720",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T08:15:59.943",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in 1024-lab/lab1024 SmartAdmin up to 3.29. Impacted is an unknown function of the file smart-admin-web-javascript/src/views/business/oa/notice/components/notice-form-drawer.vue of the component Notice Module. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en 1024-lab/lab1024 SmartAdmin hasta la versión 3.29. Se ve afectada una función desconocida del archivo smart-admin-web-javascript/src/views/business/oa/notice/components/notice-form-drawer.vue del componente Módulo de Avisos. La manipulación resulta en cross-site scripting. El ataque puede lanzarse remotamente. El exploit ha sido publicado al público y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lab1024:smartadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.29",
            "matchCriteriaId" : "155AADC4-CFDA-4FF3-A384-DB9020EF695E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765890",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/SmartAdmin-Stored-Cross-Site-Scripting-XSS-in-Notice-module-310ea92a3c41806ebcf0e5f82bf222da",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3721",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T08:16:00.227",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in 1024-lab/lab1024 SmartAdmin up to 3.29. The affected element is an unknown function of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/helpdoc/domain/form/HelpDocAddForm.java of the component Help Documentation Module. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en 1024-lab/lab1024 SmartAdmin hasta la versión 3.29. El elemento afectado es una función desconocida del archivo sa-base/src/main/java/net/lab1024/sa/base/module/support/helpdoc/domain/form/HelpDocAddForm.java del componente Módulo de Documentación de Ayuda. Esta manipulación causa cross site scripting. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lab1024:smartadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.29",
            "matchCriteriaId" : "155AADC4-CFDA-4FF3-A384-DB9020EF695E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349664",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349664",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.765929",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/SmartAdmin-Stored-Cross-Site-Scripting-XSS-in-HelpDoc-module-310ea92a3c418050852dc554e2b5b49b",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3723",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T09:16:17.950",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /Admindelete.php. The manipulation of the argument flightno results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en code-projects Simple Flight Ticket Booking System 1.0. Esto afecta a una función desconocida del archivo /Admindelete.PHP. La manipulación del argumento flightno resulta en inyección SQL. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Owen-YuanW/CVE/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766311",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3724",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T09:16:18.163",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. This impacts an unknown function of the file /checkin.php. This manipulation of the argument patient_id causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en SourceCodester Patients Waiting Area Queue Management System 1.0. Esto afecta una función desconocida del archivo /checkin.php. Esta manipulación del argumento patient_id causa una autorización indebida. Es posible iniciar el ataque de forma remota. El exploit se ha hecho público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hiranerakkot/Patients-Waiting-Area-Queue-Management-System/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766389",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3725",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T09:16:18.397",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in 1024-lab/lab1024 SmartAdmin up to 3.29. Affected by this issue is the function freemarkerResolverContent of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/mail/MailService.java of the component FreeMarker Template Handler. Executing a manipulation of the argument template_content can lead to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en 1024-lab/lab1024 SmartAdmin hasta la versión 3.29. Afectada por este problema es la función freemarkerResolverContent del archivo sa-base/src/main/java/net/lab1024/sa/base/module/support/mail/MailService.java del componente Gestor de Plantillas FreeMarker. La ejecución de una manipulación del argumento template_content puede llevar a una neutralización inadecuada de elementos especiales utilizados en un motor de plantillas. El ataque puede ser lanzado de forma remota. El exploit ha sido publicado y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-791"
        }, {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lab1024:smartadmin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.29",
            "matchCriteriaId" : "155AADC4-CFDA-4FF3-A384-DB9020EF695E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766459",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/SmartAdmin-Server-Side-Template-Injection-SSTI-in-Email-Template-Rendering-310ea92a3c418087ac63ec8e5a061b62",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3726",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T09:16:18.687",
      "lastModified" : "2026-03-09T15:24:58.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Tenda F453 1.0.0.3. Esto afecta la función fromwebExcptypemanFilter del archivo /goform/webExcptypemanFilter. La manipulación del argumento page conduce a un desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_85/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766931",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3727",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T10:15:50.650",
      "lastModified" : "2026-03-09T15:24:42.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mit_linktype/PPPOEPassword results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en Tenda F453 1.0.0.3. Esta vulnerabilidad afecta la función sub_3C6C0 del archivo /goform/QuickIndex. La manipulación del argumento mit_linktype/PPPOEPassword resulta en desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_96/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349705",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349705",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766932",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3728",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T10:15:51.000",
      "lastModified" : "2026-03-09T15:24:28.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en Tenda F453 1.0.0.3/1.If. Este problema afecta la función fromSetCfm del archivo /goform/setcfm. Esta manipulación del argumento funcname/funcpara1 causa desbordamiento de búfer basado en pila. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_97/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349706",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349706",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766933",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3729",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T11:15:49.863",
      "lastModified" : "2026-03-09T15:24:21.043",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda F453 1.0.0.3/3.As. Afectada es la función fromPptpUserAdd del archivo /goform/PPTPDClient. Dicha manipulación del argumento username/opttype conduce a un desbordamiento de búfer basado en pila. El ataque puede ser ejecutado de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_98/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349707",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349707",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766934",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3730",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T11:15:50.087",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Performing a manipulation of the argument amen_id/rmtype_id results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en itsourcecode Free Hotel Reservation System 1.0. El elemento afectado es una función desconocida del archivo /hotel/admin/mod_amenities/index.php?view=edit. Realizar una manipulación del argumento amen_id/rmtype_id resulta en inyección SQL. El ataque es posible de realizar de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:itsourcecode:free_hotel_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80639649-9AEF-4A22-834B-5ADF36081074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anon387tdug/anon387/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yihaofuweng/cve/issues/62",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349708",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349708",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767010",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3731",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T11:15:50.307",
      "lastModified" : "2026-03-12T19:02:31.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. The attack may be performed from remote. Upgrading to version 0.11.4 and 0.12.0 is sufficient to resolve this issue. This patch is called 855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60. You should upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en libssh hasta la versión 0.11.3. El elemento afectado es la función sftp_extensions_get_name/sftp_extensions_get_data del archivo src/sftp.c del componente Gestor de Nombres de Extensión SFTP. La ejecución de una manipulación del argumento idx puede llevar a una lectura fuera de límites. El ataque puede realizarse de forma remota. La actualización a las versiones 0.11.4 y 0.12.0 es suficiente para resolver este problema. Este parche se denomina 855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60. Debe actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.11.3",
            "matchCriteriaId" : "2366D711-FD0B-4A04-92BA-DE6DA0ED1BCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/libssh/libssh-mirror/-/commit/855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349709",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349709",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767120",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.libssh.org/files/0.12/libssh-0.12.0.tar.xz",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3732",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T11:15:50.523",
      "lastModified" : "2026-03-09T15:19:10.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Tenda F453 1.0.0.3. Esto afecta la función strcpy del archivo /goform/exeCommand. La manipulación del argumento cmdinput conduce a desbordamiento de búfer basado en pila. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_99/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349710",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349710",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3733",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T11:15:50.720",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in xuxueli xxl-job up to 3.3.2. This impacts an unknown function of the file source-code/src/main/java/com/xxl/job/admin/controller/JobInfoController.java. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The exploit is now public and may be used. The project maintainer closed the issue report with the following statement: \"Access token security verification is required.\" (translated from Chinese)"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en xuxueli xxl-job hasta la versión 3.3.2. Esto afecta a una función desconocida del archivo source-code/src/main/java/com/xxl/job/admin/controller/JobInfoController.java. La manipulación provoca una falsificación de petición del lado del servidor. Es posible lanzar el ataque de forma remota. El exploit es ahora público y puede ser utilizado. El mantenedor del proyecto cerró el informe del problema con la siguiente declaración: 'Se requiere verificación de seguridad del token de acceso.' (traducido del chino)"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xuxueli/xxl-job/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/xuxueli/xxl-job/issues/3924",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/xuxueli/xxl-job/issues/3924#issue-3987941359",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349711",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349711",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.767226",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3734",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T13:16:00.823",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the component Endpoint. This manipulation of the argument manager_id causes improper authorization. The attack can be initiated remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Client Database Management System 1.0. Afecta a una función desconocida del archivo /fetch_manager_details.php del componente Endpoint. Esta manipulación del argumento manager_id causa una autorización indebida. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80DE6-C79F-452F-9523-4EC1F9777DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Adarshh-A/f25452a4fe736babd39b9a1b800e98d0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349712",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349712",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3735",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T13:16:01.057",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file SearchResultOneway.php. Such manipulation of the argument from leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en code-projects Simple Flight Ticket Booking System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo SearchResultOneway.php. Tal manipulación del argumento from lleva a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/6Justdododo6/CVE/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349713",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349713",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767396",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3736",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T13:16:01.277",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unknown functionality of the file SearchResultRoundtrip.php. Performing a manipulation of the argument from results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Simple Flight Ticket Booking System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo SearchResultRoundtrip.php. Realizar una manipulación del argumento from resulta en inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/6Justdododo6/CVE/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768093",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3737",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T14:15:54.503",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file add_user.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en SourceCodester Pet Grooming Management Software 1.0. Esto afecta una parte desconocida del archivo add_user.php del componente Gestor de Creación de Usuarios. La ejecución de una manipulación puede llevar a una autorización indebida. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88D324D-B780-4D8D-BE43-829227D2808F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767320",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3738",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T14:15:54.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en SourceCodester Pet Grooming Management Software 1.0. Esta vulnerabilidad afecta código desconocido del componente Financial Report Page. La manipulación conduce a una autorización impropia. La explotación remota del ataque es posible. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88D324D-B780-4D8D-BE43-829227D2808F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767321",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3739",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T14:15:54.963",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the component ThreadAccess. The manipulation results in improper authentication. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.3.0 is capable of addressing this issue. The patch is identified as d7729f4b885449f6dee3faf8b5f2a05769fb3d6e. The affected component should be upgraded."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en suitenumerique messages 0.2.0. Este problema afecta la función ThreadAccessSerializer del archivo src/backend/core/API/serializers.py del componente ThreadAccess. La manipulación resulta en autenticación impropia. El ataque puede ser ejecutado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques. La actualización a la versión 0.3.0 es capaz de abordar este problema. El parche es identificado como d7729f4b885449f6dee3faf8b5f2a05769fb3d6e. El componente afectado debería ser actualizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/suitenumerique/messages/",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/suitenumerique/messages/commit/d7729f4b885449f6dee3faf8b5f2a05769fb3d6e",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/suitenumerique/messages/pull/557",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/suitenumerique/messages/releases/tag/v0.3.0",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/suitenumerique/messages/security/advisories/GHSA-7476-6crq-4cw9",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.349717",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?id.349717",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?submit.767329",
        "source" : "cna@vuldb.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3740",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T15:15:48.360",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the argument admin_search_student causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode University Management System 1.0. Afecta a una función desconocida del archivo /admin_search_student.PHP. Esta manipulación del argumento admin_search_student causa inyección SQL. El ataque puede ser llevado a cabo remotamente. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DaMaTou00/project/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767341",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3741",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T15:15:48.580",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D_friendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en YiFang CMS 2.0.5. El elemento afectado es la función update del archivo app/db/admin/D_friendLink.PHP. Dicha manipulación del argumento linkName conduce a cross site scripting. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado públicamente y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yifangcms:yifang:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10E4AEE-971F-4D0A-885E-04F0CBD07B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZZCTD/CVE/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349719",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349719",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3742",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T15:15:48.783",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePage.php. Performing a manipulation of the argument Title results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en YiFang CMS 2.0.5. El elemento impactado es la función update del archivo app/db/admin/D_singlePage.php. Realizar una manipulación del argumento Title resulta en cross site scripting. Es posible iniciar el ataque de forma remota. El exploit es ahora público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yifangcms:yifang:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10E4AEE-971F-4D0A-885E-04F0CBD07B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZZCTD/CVE/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349720",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349720",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767847",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3743",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T15:15:48.987",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en YiFang CMS 2.0.5. Esto afecta a la función update del archivo app/db/admin/D_singlePageGroup.php. La ejecución de una manipulación del argumento Name puede llevar a cross-site scripting. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yifangcms:yifang:2.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10E4AEE-971F-4D0A-885E-04F0CBD07B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZZCTD/CVE/issues/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3744",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T15:15:49.190",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en code-projects Student Web Portal 1.0. Esto impacta la función valreg_passwdation del archivo signup.PHP. La manipulación del argumento reg_passwd lleva a inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:student_web_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75927186-D2AC-42B4-9633-43D8D0582B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/CH0ico/CVE_choco_2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CH0ico/CVE_choco_2/blob/main/report.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349722",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349722",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767852",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3745",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T16:16:01.377",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Student Web Portal 1.0. Afectada es una función desconocida del archivo profile.php. La manipulación del argumento User resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:student_web_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75927186-D2AC-42B4-9633-43D8D0582B6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/CH0ico/CVE_choco_4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CH0ico/CVE_choco_4/blob/main/report.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349723",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349723",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767854",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3746",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T16:16:01.600",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en SourceCodester Simple Responsive Tourism Website 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /tourism/classes/Login.PHP?f=login del componente Login. Esta manipulación del argumento Username causa inyección SQL. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_responsive_tourism_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3930D5-8A1D-4675-BA33-98CFAFC5FF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CH0ico/CVE_choco_7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CH0ico/CVE_choco_7/blob/main/report.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349724",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349724",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767882",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3747",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T16:16:01.810",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en itsourcecode University Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /add_result.php. Tal manipulación del argumento subject lleva a inyección SQL. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1873454331sss/CVE/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349725",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349725",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767947",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3748",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T16:16:02.020",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.4.5.1 is able to mitigate this issue. The patch is named 975e39e4dd527596987559f56c5f9f973f64eff7. Upgrading the affected component is recommended."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Bytedesk hasta 1.3.9. Esto afecta la función uploadFile del archivo source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java del componente SVG File Gestor. Realizar una manipulación resulta en una carga irrestricta. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser usado para ataques. Actualizar a la versión 1.4.5.1 puede mitigar este problema. El parche se llama 975e39e4dd527596987559f56c5f9f973f64eff7. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytedesk:bytedesk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.5.1",
            "matchCriteriaId" : "2EA3D7F3-872D-4D87-B7B0-8122193D3296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Bytedesk/bytedesk/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/18",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/18#issue-3993448721",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/18#issuecomment-3976672973",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349726",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.349726",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768028",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3749",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T16:16:02.260",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.4.5.1 is able to resolve this issue. This patch is called 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Bytedesk hasta la versión 1.3.9. Esta vulnerabilidad afecta a la función handleFileUpload del archivo source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java del componente Gestor de Archivos SVG. La ejecución de una manipulación puede llevar a una subida sin restricciones. El ataque puede ejecutarse de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques. Actualizar a la versión 1.4.5.1 es capaz de resolver este problema. Este parche se denomina 975e39e4dd527596987559f56c5f9f973f64eff7. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytedesk:bytedesk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.5.1",
            "matchCriteriaId" : "2EA3D7F3-872D-4D87-B7B0-8122193D3296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Bytedesk/bytedesk/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/19#issue-3993480676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/19#issuecomment-3976672845",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349727",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349727",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768030",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3750",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T17:16:08.467",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the component Storage Management Module. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en ContiNew Admin hasta la versión 4.2.0. Este problema afecta la función URI.create del archivo continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java del componente Módulo de Gestión de Almacenamiento. La manipulación conduce a falsificación de petición del lado del servidor. El ataque es posible de ser llevado a cabo de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:continew:continew_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.0",
            "matchCriteriaId" : "C0881842-BCC3-43A3-8522-9CEBCE2F1CFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768033",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.notion.so/ContiNew-Admin-Server-Side-Request-Forgery-SSRF-vulnerability-in-storage-management-module-313ea92a3c4180b897f5e6352906bf1f",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3751",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T17:16:08.727",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from remote. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en SourceCodester Employee Task Management System 1.0. Afectada es una función desconocida del archivo /daily-attendance-report.php del componente Gestor de Parámetros GET. La manipulación del argumento Date resulta en inyección SQL. El ataque puede ser realizado desde remoto. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:employee_task_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8451593-5BFE-47AE-90ED-3F288A20D516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Employee-Task-Management-System/SQLi-DailyAttendanceReport-date.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768034",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3752",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T17:16:08.933",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.php of the component GET Parameter Handler. This manipulation of the argument Date causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Employee Task Management System hasta la versión 1.0. El elemento afectado es una función desconocida del archivo /daily-task-report.PHP del componente Gestor de Parámetros GET. Esta manipulación del argumento Date causa inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:employee_task_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8451593-5BFE-47AE-90ED-3F288A20D516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Employee-Task-Management-System/SQLi-DailyTaskReport-date.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349730",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349730",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768035",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3753",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T17:16:09.140",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /add_sales_print.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Sales and Inventory System hasta 1.0. El elemento afectado es una función desconocida del archivo /add_sales_print.php. Dicha manipulación del argumento sid conduce a inyección SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-AddSalesPrint-sid.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349731",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349731",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768037",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3754",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T18:15:49.340",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Sales and Inventory System 1.0. Esto afecta una función desconocida del archivo /add_stock.php. Realizar una manipulación del argumento cost resulta en inyección SQL. El ataque puede iniciarse remotamente. El exploit se ha hecho público y podría utilizarse."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-AddStock-cost.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349732",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349732",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768038",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3755",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T18:15:49.553",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /check_customer_details.php of the component POST Handler. Executing a manipulation of the argument stock_name1 can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en SourceCodester Sales and Inventory System 1.0. Esto afecta una función desconocida del archivo /check_customer_details.php del componente POST Gestor. La ejecución de una manipulación del argumento stock_name1 puede conducir a una inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-CheckCustomerDetails-stockname1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768039",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3756",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T18:15:49.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in SourceCodester Sales and Inventory System up to 1.0. Affected is an unknown function of the file /check_item_details.php. The manipulation of the argument stock_name1 leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en SourceCodester Sales and Inventory System hasta 1.0. Afectada es una función desconocida del archivo /check_item_details.php. La manipulación del argumento stock_name1 lleva a inyección SQL. El ataque puede ser iniciado remotamente. El exploit está disponible públicamente y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-CheckItemDetails-stockname1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768042",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3757",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:00.500",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en projectworlds Online Art Gallery Shop 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /?pass=1. La manipulación del argumento fnm resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:online_art_gallery_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7806E4A2-FCD7-4624-83AC-2F2FE63E4752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hmKunlun/projectworldcve/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768057",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3758",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:00.753",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en projectworlds Online Art Gallery Shop 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /admin/adminHome.php. Esta manipulación del argumento Info causa inyección SQL. La explotación remota del ataque es posible. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:online_art_gallery_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7806E4A2-FCD7-4624-83AC-2F2FE63E4752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hmKunlun/projectworldcve/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349736",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349736",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768058",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768958",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3759",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:00.963",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en projectworlds Online Art Gallery Shop 1.0. Esto afecta una parte desconocida del archivo /admin/adminHome.php. Tal manipulación del argumento reach_nm conduce a inyección SQL. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado públicamente y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectworlds:online_art_gallery_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7806E4A2-FCD7-4624-83AC-2F2FE63E4752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hmKunlun/projectworldcve/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768059",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3760",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:01.177",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en itsourcecode University Management System 1.0. Esta vulnerabilidad afecta código desconocido del archivo /view_result.PHP. Realizar una manipulación del argumento seme resulta en inyección SQL. El ataque es posible de ser llevado a cabo remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Rsansan/security-monitor/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768095",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3761",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:01.387",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /superadmin_user_delete.php of the component Endpoint. Executing a manipulation of the argument user_id can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en SourceCodester Sistema de Gestión de Base de Datos de Cliente 1.0. Este problema afecta a algún procesamiento desconocido del archivo /superadmin_user_delete.php del componente Endpoint. La ejecución de una manipulación del argumento user_id puede llevar a una autorización indebida. El ataque puede realizarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80DE6-C79F-452F-9523-4EC1F9777DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Adarshh-A/dd8884d768d9dde9072fe5efce453824",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768120",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3762",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:01.593",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1. Impacted is an unknown function of the file /superadmin_delete_manager.php of the component Endpoint. The manipulation of the argument manager_id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Client Database Management System 1.0/3.1. Se ve afectada una función desconocida del archivo /superadmin_delete_manager.php del componente Endpoint. La manipulación del argumento manager_id conduce a una autorización indebida. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80DE6-C79F-452F-9523-4EC1F9777DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Adarshh-A/1aae387a3cf4ea05c871ddafc64d0348",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768122",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3763",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T19:16:01.803",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en code-projects Simple Flight Ticket Booking System 1.0. El elemento afectado es una función desconocida del archivo showhistory.php. La manipulación resulta en cross site scripting. Es posible lanzar el ataque remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carmelo:simple_flight_ticket_booking_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E7323-4A14-434D-854F-285B380A16D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code-projects.org/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/shenxianyuguitian/simple-flight-booking-XSS",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768182",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3764",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T20:15:49.423",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Client Database Management System 1.0. The impacted element is an unknown function of the file /superadmin_user_update.php. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en SourceCodester Client Database Management System 1.0. El elemento afectado es una función desconocida del archivo /superadmin_user_update.php. Esta manipulación causa autorización indebida. El ataque puede iniciarse remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE80DE6-C79F-452F-9523-4EC1F9777DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Adarshh-A/77dedc295e377e0492d15071e9bb2498",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768195",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3765",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T20:15:49.640",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en itsourcecode University Management System 1.0. Esto afecta a una función desconocida del archivo /att_single_view.php. Dicha manipulación del argumento dt conduce a una inyección SQL. El ataque puede ser lanzado remotamente. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:university_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ABF764-A0DC-4B5A-83AE-90926CEB0601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mfcluvlife12345-eng/xianyu/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768247",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3766",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T20:15:49.837",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en SourceCodester Web-based Pharmacy Product Management System 1.0. Esto afecta una función desconocida del archivo edit-profile.PHP. Realizar una manipulación del argumento fullname resulta en cross site scripting. El ataque puede ser iniciado remotamente. El exploit ha sido liberado al público y puede ser usado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:senior-walter:web-based_pharmacy_product_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2DA030-DE10-4DA9-86D7-3E3E9A22DABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Denilxavier/6b21cb788f7f545179286f6c44989448",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768251",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3767",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T21:15:51.047",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacher_id can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en itsourcecode sanitize or validate this input 1.0. Afecta a una función desconocida del archivo /admin/teacher-attendance.php. La ejecución de una manipulación del argumento teacher_id puede conducir a inyección SQL. El ataque puede ser lanzado de forma remota. El exploit ha sido puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:college_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871FC21F-85AD-4AB5-85AE-D46438D84CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3768",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T21:15:51.267",
      "lastModified" : "2026-03-09T15:17:08.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Tenda F453 1.0.0.3. Afectada por esta vulnerabilidad es la función formWrlExtraSet del archivo /goform/WrlExtraSet. La manipulación del argumento GO conduce a un desbordamiento de búfer basado en pila. La explotación remota del ataque es posible. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_69/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3769",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T21:15:51.470",
      "lastModified" : "2026-03-09T15:25:24.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /goform/WrlclientSet. The manipulation of the argument GO results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Tenda F453 1.0.0.3. Afectada por este problema es la función WrlclientSet del archivo /goform/WrlclientSet. La manipulación del argumento GO resulta en desbordamiento de búfer basado en pila. El ataque puede ser ejecutado remotamente. El exploit ahora es público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CB876C-7D99-4A12-91E3-FE153293C3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C42B3-1621-4323-BAA4-4B71C33F7C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Litengzheng/vul_db/blob/main/F453/vul_72/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3770",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T21:15:51.673",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Computer Laboratory Management System 1.0. Esto afecta a una parte desconocida. Esta manipulación causa falsificación de petición en sitios cruzados. El ataque puede llevarse a cabo de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:computer_laboratory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1D4E41-0B2D-4D1E-9AA9-CB4366C91AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/richardaugustine/618db4846b5ea60344721c716ef31b4e",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768839",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3771",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T22:15:48.810",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester/janobe Resort Reservation System 1.0. Esta vulnerabilidad afecta a código desconocido del archivo /accomodation.php. Tal manipulación del argumento q lleva a inyección SQL. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:resort_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C54C3DC0-8798-48BF-833E-BEFDEEDC369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768925",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3785",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T23:15:50.207",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en EasyCMS hasta la versión 1.6. El elemento afectado es una función desconocida del archivo /RbacnodeAction.class.php del componente Gestor de Parámetros de Solicitud. La manipulación del argumento _order conduce a inyección SQL. El ataque puede iniciarse de forma remota. El exploit está disponible públicamente y podría ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easycms:easycms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "018DA419-A976-4312-82A2-4176CC22E454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ueh1013/VULN/issues/19",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349752",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349752",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766140",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3786",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T23:15:50.477",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en EasyCMS hasta la versión 1.6. El elemento afectado es una función desconocida del archivo /RbacuserAction.class.php del componente Gestor de Parámetros de Solicitud. La manipulación del argumento _order resulta en inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easycms:easycms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "018DA419-A976-4312-82A2-4176CC22E454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ueh1013/VULN/issues/20",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349753",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349753",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766141",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3787",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-08T23:15:50.690",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation causes uncontrolled search path. The attack requires local access. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UltraVNC 1.6.4.0 en Windows. Esto afecta a una función desconocida en la biblioteca cryptbase.dll del componente Servicio de Windows. Esta manipulación causa una ruta de búsqueda incontrolada. El ataque requiere acceso local. Se necesita un alto grado de complejidad para el ataque. La explotabilidad se reporta como difícil. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        }, {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uvnc:ultravnc:1.6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392D4178-C47E-4DBA-8F5E-52E64FC60B54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/14ixv_1i4D2VrZWyl4RKsvFcN1AMF_qNx/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349754",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349754",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.767257",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3788",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T00:16:01.247",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java of the component SpringAIOpenrouterRestController. Such manipulation of the argument apiUrl leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.4.5.4 will fix this issue. The name of the patch is 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Bytedesk hasta la versión 1.3.9. Esto afecta a la función getModels del archivo source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java del componente SpringAIOpenrouterRestController. Dicha manipulación del argumento apiUrl conduce a una falsificación de petición del lado del servidor. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. La actualización a la versión 1.4.5.4 solucionará este problema. El nombre del parche es 975e39e4dd527596987559f56c5f9f973f64eff7. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytedesk:bytedesk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.5.4",
            "matchCriteriaId" : "171E70D5-44F7-4CC4-8732-E335C1D8F3CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Bytedesk/bytedesk/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/20",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/20#issue-3993526693",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/20#issuecomment-3976672715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349755",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349755",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768043",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3789",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T00:16:01.493",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Bytedesk up to 1.3.9. Affected is the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/gitee/SpringAIGiteeRestService.java of the component SpringAIGiteeRestController. Performing a manipulation of the argument apiUrl results in server-side request forgery. Remote exploitation of the attack is possible. The exploit is now public and may be used. Upgrading to version 1.4.5.4 is able to address this issue. The patch is named 975e39e4dd527596987559f56c5f9f973f64eff7. Upgrading the affected component is advised."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Bytedesk hasta 1.3.9. Afectada es la función getModels del archivo source-code/src/main/java/com/bytedesk/ai/springai/providers/gitee/SpringAIGiteeRestService.java del componente SpringAIGiteeRestController. Realizar una manipulación del argumento apiUrl resulta en falsificación de petición del lado del servidor. Explotación remota del ataque es posible. El exploit es ahora público y puede ser usado. Actualizar a la versión 1.4.5.4 puede solucionar este problema. El parche se llama 975e39e4dd527596987559f56c5f9f973f64eff7. Se aconseja actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytedesk:bytedesk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.5.4",
            "matchCriteriaId" : "171E70D5-44F7-4CC4-8732-E335C1D8F3CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Bytedesk/bytedesk/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/21",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/21#issue-3993531226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/issues/21#issuecomment-3976672522",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349756",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349756",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768044",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3790",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T00:16:01.723",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file check_supplier_details.php of the component POST Parameter Handler. Executing a manipulation of the argument stock_name1 can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una falla en SourceCodester Sales and Inventory System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo check_supplier_details.php del componente Gestor de Parámetros POST. La ejecución de una manipulación del argumento stock_name1 puede conducir a inyección SQL. El ataque puede ejecutarse remotamente. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-CheckSupplierDetails-stockname1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349757",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349757",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768045",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3791",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T01:15:47.383",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php of the component Search. The manipulation of the argument searchtxt leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester Sales and Inventory System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo dashboard.php del componente Search. La manipulación del argumento searchtxt conduce a inyección SQL. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido revelado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-Dashboard-searchtxt.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349758",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349758",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768046",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3792",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T02:15:47.413",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Sales and Inventory System 1.0. Esto afecta una parte desconocida del archivo purchase_invoice.php del componente Gestor de Parámetros GET. La manipulación del argumento purchaseid resulta en inyección SQL. El ataque puede ser realizado desde remoto. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-PurchaseInvoice-purchaseid.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349759",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349759",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768047",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3793",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T03:15:49.070",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file sales_invoice1.php of the component GET Parameter Handler. This manipulation of the argument sellid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Se determinó una vulnerabilidad en SourceCodester Sales and Inventory System 1.0. Esta vulnerabilidad afecta código desconocido del archivo sales_invoice1.php del componente Gestor de Parámetros GET. Esta manipulación del argumento sellid causa inyección SQL. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A75B7A5-65D7-4AF9-BDE8-EBD496A4942B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-SalesInvoice1-sellid.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349760",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349760",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768048",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3794",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T03:15:49.293",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en doramart DoraCMS 3.0.x. Este problema afecta algún procesamiento desconocido del archivo /api/v1/mail/send del componente API de correo electrónico. Dicha manipulación lleva a autenticación impropia. Es posible lanzar el ataque remotamente. El exploit está disponible públicamente y podría ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:html-js:doracms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAF375D-41BD-47FB-8D2B-EAB9573863BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349761",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349761",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768239",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3795",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T03:15:49.490",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in doramart DoraCMS 3.0.x. Impacted is the function createFileBypath of the file /DoraCMS/server/app/router/api/v1.js. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una falla de seguridad en doramart DoraCMS 3.0.x. Afectada es la función createFileBypath del archivo /DoraCMS/servidor/app/router/API/v1.js. Realizar una manipulación resulta en salto de ruta. El ataque puede iniciarse de forma remota. El exploit ha sido publicado al público y puede ser utilizado para ataques. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:html-js:doracms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAF375D-41BD-47FB-8D2B-EAB9573863BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.349762",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349762",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768241",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3630",
      "sourceIdentifier" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
      "published" : "2026-03-09T04:15:58.373",
      "lastModified" : "2026-03-10T18:48:52.193",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability."
      }, {
        "lang" : "es",
        "value" : "Delta Electronics COMMGR2 tiene vulnerabilidad de desbordamiento de búfer basado en pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:commgr2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "4BC8FE30-5861-4F92-9275-E754227B7279"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00005_COMMGR%202%20Multiple%20Vulnerabilities%20(CVE-2026-3630,%20CVE-2026-3631).pdf",
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3631",
      "sourceIdentifier" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
      "published" : "2026-03-09T04:15:58.630",
      "lastModified" : "2026-03-10T18:48:42.673",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics COMMGR2 has \n\nBuffer Over-read DoS vulnerability."
      }, {
        "lang" : "es",
        "value" : "Delta Electronics COMMGR2 tiene una vulnerabilidad de DoS por desbordamiento de lectura de búfer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:commgr2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "4BC8FE30-5861-4F92-9275-E754227B7279"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00005_COMMGR%202%20Multiple%20Vulnerabilities%20(CVE-2026-3630,%20CVE-2026-3631).pdf",
        "source" : "759f5e80-c8e1-4224-bead-956d7b33c98b",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3796",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T04:15:58.877",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en Qi-ANXIN QAX Virus Removal hasta el 22-10-2025. El elemento afectado es la función ZwTerminateProcess en la biblioteca QKSecureIO_Imp.sys del componente Mini Filter Driver. La ejecución de una manipulación puede llevar a controles de acceso impropios. El ataque está restringido a ejecución local. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques. Se contactó al proveedor temprano sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qianxin:qax_internet_control_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2025-10-22",
            "matchCriteriaId" : "834F79BA-0B89-4467-9C7A-402D7F3A7E9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cwjchoi01/FocusKiller",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cwjchoi01/FocusKiller/tree/main/FocusKiller",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349763",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349763",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.758991",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3797",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T04:16:00.843",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLS_REST_File.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado una vulnerabilidad de seguridad en el Sistema de Videovigilancia Tiandy ?????? 7.17.0. El elemento afectado es la función uploadFile del archivo /src/com/tiandy/easy7/core/rest/CLS_REST_File.java. La manipulación del argumento fileName conduce a una carga sin restricciones. El ataque puede ser iniciado de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tiandy:video_surveillance_system_firmware:7.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD9BF06-B89D-45AB-9179-61F7BEC15195"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tiandy:video_surveillance_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE62AE8-145D-4149-A943-4465C22840F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.feishu.cn/docx/P3Bgdl9BHocn66xCMpCcgCD7nhe?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349764",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766386",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3798",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T04:16:02.397",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component Request Path Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Comfast CF-AC100 2.6.0.8. Esto afecta la función sub_44AC14 del archivo /cgi-bin/mbox-config?method=SET&amp;section=ping_config del componente Gestor de Ruta de Solicitud. La manipulación resulta en inyección de comandos. El ataque puede ser lanzado remotamente. El exploit ahora es público y puede ser usado. El proveedor fue contactado tempranamente sobre esta divulgación pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:comfast:cf-ac100_firmware:2.6.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF1DCF-90D2-449C-AA42-DD3096A4B19E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:comfast:cf-ac100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20F3F0A-26BE-4FFC-AF30-D1578AE2FA6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhao118/cve/blob/main/ComFast%20CF-AC100-V2.6.0.8_1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349765",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349765",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.766443",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3799",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T04:16:04.720",
      "lastModified" : "2026-03-09T16:14:24.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda i3 1.0.0.6(2204). Esto afecta a la función formSetCfm del archivo /goform/setcfm. Esta manipulación del argumento funcpara1 causa desbordamiento de búfer basado en pila. La explotación remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:i3_firmware:1.0.0.6\\(2204\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DC8153-3B2F-4369-B01A-DF0C4804AFA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D0C1A4-AA5F-426A-B82C-00D1CEFE20FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setcfm-funcpara1-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349766",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768976",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3800",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T04:16:05.770",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester/janobe Resort Reservation System 1.0. Afectada es la función doInsert del archivo /controller.PHP?action=add. Dicha manipulación del argumento image lleva a una carga sin restricciones. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado al público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:resort_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C54C3DC0-8798-48BF-833E-BEFDEEDC369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---Unrestricted-Upload.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349767",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768998",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3801",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T04:16:08.643",
      "lastModified" : "2026-03-09T16:14:42.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing a manipulation of the argument ping1/ping2 results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tenda i3 1.0.0.6(2204). Afectada por esta vulnerabilidad es la función formSetAutoPing del archivo /goform/setAutoPing. Realizar una manipulación del argumento ping1/ping2 resulta en desbordamiento de búfer basado en pila. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:i3_firmware:1.0.0.6\\(2204\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DC8153-3B2F-4369-B01A-DF0C4804AFA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D0C1A4-AA5F-426A-B82C-00D1CEFE20FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping1-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping2-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768982",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3822",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-03-09T04:16:10.173",
      "lastModified" : "2026-03-11T07:16:51.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to verify the server-side TLS/SSL certificate. This flaw allows an unauthenticated remote attackers to exploit the vulnerability to perform a Man-in-the-Middle (MITM) attack to read and tamper with network packets."
      }, {
        "lang" : "es",
        "value" : "La aplicación Taipower, desarrollada por Taipower, tiene una vulnerabilidad de Validación de Certificado Inadecuada. Al establecer una conexión HTTPS con el servidor, la aplicación no verifica el certificado TLS/SSL del lado del servidor. Este fallo permite a atacantes remotos no autenticados explotar la vulnerabilidad para realizar un ataque man-in-the-middle (MitM) para leer y manipular paquetes de red."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taipower:taipower_app:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.4",
            "matchCriteriaId" : "43FD5F03-9BE1-4275-9305-CE345B69D08D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10751-23871-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10750-3735f-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3802",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T05:15:48.403",
      "lastModified" : "2026-03-09T15:09:44.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en Tenda i3 1.0.0.6(2204). Afectada por este problema es la función formexeCommand del archivo /goform/exeCommand. La ejecución de una manipulación del argumento cmdinput puede llevar a desbordamiento de búfer basado en pila. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:i3_firmware:1.0.0.6\\(2204\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DC8153-3B2F-4369-B01A-DF0C4804AFA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D0C1A4-AA5F-426A-B82C-00D1CEFE20FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formexeCommand-cmdinput-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768983",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30896",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-09T06:16:08.420",
      "lastModified" : "2026-03-10T18:47:17.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is directed to place some malicious DLL to the same directory and execute the affected installer, then arbitrary code may be executed with the administrative privilege."
      }, {
        "lang" : "es",
        "value" : "El instalador para las versiones 1.0.1 y anteriores de Qsee Cliente carga de forma insegura las Bibliotecas de Enlace Dinámico (DLLs). Cuando se le indica a un usuario que coloque alguna DLL maliciosa en el mismo directorio y ejecute el instalador afectado, entonces se puede ejecutar código arbitrario con el privilegio administrativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "ACTIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:q-see:qsee_client:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "E52EFB4E-DEBC-4771-A6AF-7D187786341B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN11676807/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.q-see.com/pages/download",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3803",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T06:16:08.723",
      "lastModified" : "2026-03-09T15:09:33.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue identificada en Tenda i3 1.0.0.6(2204). Esto afecta la función formWifiMacFilterGet del archivo /goform/WifiMacFilterGet. La manipulación del argumento index conduce a un desbordamiento de búfer basado en pila. Es posible iniciar el ataque de forma remota. El exploit está disponible públicamente y podría ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:i3_firmware:1.0.0.6\\(2204\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DC8153-3B2F-4369-B01A-DF0C4804AFA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D0C1A4-AA5F-426A-B82C-00D1CEFE20FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formWifiMacFilterGet-index-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3804",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T06:16:09.070",
      "lastModified" : "2026-03-09T15:09:03.447",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet. The manipulation of the argument index results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Una falla de seguridad ha sido descubierta en Tenda i3 1.0.0.6(2204). Esta vulnerabilidad afecta la función formWifiMacFilterSet del archivo /goform/WifiMacFilterSet. La manipulación del argumento index resulta en desbordamiento de búfer basado en pila. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:i3_firmware:1.0.0.6\\(2204\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70DC8153-3B2F-4369-B01A-DF0C4804AFA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:i3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D0C1A4-AA5F-426A-B82C-00D1CEFE20FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formWifiMacFilterSet-index-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349771",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3806",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T06:16:09.300",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en SourceCodester/janobe Resort Reservation System 1.0. Este problema afecta un procesamiento desconocido del archivo /room_rates.php. Esta manipulación del argumento q causa inyección SQL. El ataque puede iniciarse de forma remota. El exploit se ha puesto a disposición del público y podría usarse para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:resort_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C54C3DC0-8798-48BF-833E-BEFDEEDC369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Resort-Reservation-System---SQLi2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349772",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.768999",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3807",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T07:16:04.147",
      "lastModified" : "2026-03-09T16:20:08.637",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such manipulation of the argument mit_ssid/mit_ssid_index leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en Tenda FH1202 1.2.0.14(408). Afectada es la función formWrlsafeset del archivo /goform/AdvSetWrlsafeset. Tal manipulación del argumento mit_ssid/mit_ssid_index conduce a un desbordamiento de búfer basado en pila. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14\\(408\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FD9D0A-39F4-4AD8-AEE0-71C9E77D2799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A632A11-60A0-457C-A039-BED32F83BD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-fh1202-advsetwrlsafeset-mit-ssid-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349773",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3823",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2026-03-09T07:16:04.420",
      "lastModified" : "2026-03-10T18:46:53.270",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "El switch de la serie EHG2408 desarrollado por Atop Technologies tiene una vulnerabilidad de desbordamiento de búfer basado en pila, que permite a atacantes remotos no autenticados controlar el flujo de ejecución del programa y ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackbeartechhive:atop_ehg2408_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.36",
            "matchCriteriaId" : "FB256890-2AD0-46F0-A879-08128FDFCF48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackbeartechhive:atop_ehg2408:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C223C72-8175-4F32-9187-E8AC76BA7FF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackbeartechhive:atop_ehg2408-2sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.36",
            "matchCriteriaId" : "58E6FEFD-A296-44A3-96F7-8905F3F9CEA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackbeartechhive:atop_ehg2408-2sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3D99FF-BBEF-4673-B36E-5BF3C679592B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/en/cp-139-10753-e091e-2.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-10752-5a4d9-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3808",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T08:16:01.030",
      "lastModified" : "2026-03-09T15:30:33.183",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Performing a manipulation of the argument webSiteId results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue detectada en Tenda FH1202 1.2.0.14(408). El elemento afectado es la función formWebTypeLibrary del archivo /goform/webtypelibrary. Realizar una manipulación del argumento webSiteId resulta en un desbordamiento de búfer basado en pila. El ataque puede ser iniciado remotamente. El exploit es ahora público y puede ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14\\(408\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FD9D0A-39F4-4AD8-AEE0-71C9E77D2799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A632A11-60A0-457C-A039-BED32F83BD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-fh1202-webtypelibrary-websiteid-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349774",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349774",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769023",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3809",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T08:16:01.263",
      "lastModified" : "2026-03-09T15:30:24.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tenda FH1202 1.2.0.14(408). El elemento afectado es la función fromNatStaticSetting del archivo /goform/NatSaticSetting. La ejecución de una manipulación del argumento page puede conducir a un desbordamiento de búfer basado en pila. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14\\(408\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FD9D0A-39F4-4AD8-AEE0-71C9E77D2799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A632A11-60A0-457C-A039-BED32F83BD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-fh1202-natsaticsetting-page-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349775",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769039",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3810",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T08:16:01.480",
      "lastModified" : "2026-03-09T15:26:46.373",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en Tenda FH1202 1.2.0.14(408). Esto afecta la función fromDhcpListClient del archivo /goform/DhcpListClient. La manipulación del argumento page conduce a un desbordamiento de búfer basado en pila. La explotación remota del ataque es posible. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14\\(408\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FD9D0A-39F4-4AD8-AEE0-71C9E77D2799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A632A11-60A0-457C-A039-BED32F83BD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-fh1202-dhcplistclient-page-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349776",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349776",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769040",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24015",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-09T09:16:02.757",
      "lastModified" : "2026-03-10T18:56:56.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Apache IoTDB.\n\nThis issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7.\n\nUsers are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Apache IoTDB.\n\nEste problema afecta a Apache IoTDB: desde la 1.0.0 anterior a la 1.3.7, desde la 2.0.0 anterior a la 2.0.7.\n\nSe recomienda a los usuarios actualizar a la versión 1.3.7 o 2.0.7, que soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.7",
            "matchCriteriaId" : "3C675206-3D0A-4C1F-B355-DA87C0409DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "40FC7BFC-A8E1-4109-A0FB-2002CDC205A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/j769ywdqm46zl3oz5lbffsldklg0ow7p",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/09/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24713",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-09T09:16:02.933",
      "lastModified" : "2026-03-10T18:57:14.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in Apache IoTDB.\n\nThis issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7.\n\nUsers are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de validación de entrada indebida en Apache IoTDB.\n\nEste problema afecta a Apache IoTDB: desde 1.0.0 hasta antes de 1.3.7, desde 2.0.0 hasta antes de 2.0.7.\n\nSe recomienda a los usuarios actualizar a la versión 1.3.7 o 2.0.7, lo que corrige el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.7",
            "matchCriteriaId" : "3C675206-3D0A-4C1F-B355-DA87C0409DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "40FC7BFC-A8E1-4109-A0FB-2002CDC205A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/vopgv6y2ccw403b0zv7rvojjrh7x1j5p",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/09/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3811",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T09:16:03.190",
      "lastModified" : "2026-03-09T15:26:21.790",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Tenda FH1202 1.2.0.14(408). Esto afecta la función fromP2pListFilter del archivo /goform/P2pListFilter. La manipulación del argumento page resulta en un desbordamiento de búfer basado en pila. El ataque puede ser ejecutado de forma remota. El exploit ha sido hecho público y podría ser usado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14\\(408\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FD9D0A-39F4-4AD8-AEE0-71C9E77D2799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A632A11-60A0-457C-A039-BED32F83BD52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-fh1202-p2plistfilter-page-buffer-overflow",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349777",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769041",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenda.com.cn/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3812",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T09:16:03.400",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue determinada en itsourcecode Payroll Management System 1.0. Afectada es una función desconocida del archivo /manage_employee_allowances.PHP. Esta manipulación del argumento ID causa cross site scripting. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angeljudesuarez:payroll_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FC2EF9-5A2B-4173-8F3B-34B209DA6A10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ltranquility/cve_submit/issues/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://itsourcecode.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769103",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3813",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T10:16:03.110",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the file src/main/java/bp/wf/httphandler/WF_CCForm.java. Such manipulation leads to injection. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad en opencc JFlow hasta 5badc00db382d7cb82dad231e6a866b18e0addfe. Afectada por esta vulnerabilidad es la función Calculate del archivo src/main/java/bp/wf/httphandler/WF_CCForm.java. Dicha manipulación conduce a inyección. El ataque puede ser realizado desde remoto. El exploit está disponible públicamente y podría ser utilizado. Este producto utiliza un sistema de lanzamiento continuo para entrega continua, y como tal, la información de la versión para las versiones afectadas o actualizadas no se divulga. El proyecto fue informado del problema tempranamente a través de un informe de problema, pero aún no ha respondido."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-707"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencc:jflow:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644C3D65-4DAE-42FB-BD95-D7A69A9B2BF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/opencc/JFlow/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitee.com/opencc/JFlow/issues/IE8R2F",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349779",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349779",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769112",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3814",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T10:16:03.387",
      "lastModified" : "2026-03-10T14:28:37.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-1711. Affected by this issue is the function strcpy of the file /goform/getOneApConfTempEntry. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad de seguridad en UTT HiPER 810G hasta la versión 1.7.7-1711. Afectada por este problema es la función strcpy del archivo /goform/getOneApConfTempEntry. Realizar una manipulación resulta en desbordamiento de búfer. Es posible iniciar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/whoami648/cve/blob/main/vul/9.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349780",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349780",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25604",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-09T11:16:06.077",
      "lastModified" : "2026-03-10T18:58:48.887",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. \nThis allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances.\n\nYou should upgrade to 9.22.0 version of provider if you use AWS Auth Manager."
      }, {
        "lang" : "es",
        "value" : "En el gestor de AWS Auth, el origen de la autenticación SAML se ha utilizado tal como lo proporcionó el cliente y no se ha verificado contra la URL real de la instancia.\nEsto permitió obtener acceso a diferentes instancias con controles de acceso potencialmente diferentes al reutilizar la respuesta SAML de otras instancias.\n\nDebería actualizarse a la versión 9.22.0 del proveedor si utiliza el gestor de AWS Auth."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow_providers_amazon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "9.22.0",
            "matchCriteriaId" : "9A3CFD46-11DF-4D34-B4AB-030546AD6920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/61368",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/spwwrsmwxod7fpttcd7n7zs46j839l77",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/09/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3815",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T11:16:06.230",
      "lastModified" : "2026-03-10T14:27:08.747",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/formApMail. Executing a manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una debilidad en UTT HiPER 810G hasta la versión 1.7.7-1711. Esto afecta a la función strcpy del archivo /goform/formApMail. La ejecución de una manipulación puede conducir a un desbordamiento de búfer. Es posible lanzar el ataque remotamente. El exploit se ha puesto a disposición del público y podría ser utilizado para ataques."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:utt:810g_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.7-171114",
            "matchCriteriaId" : "EACA25AC-9976-4066-A6C6-6C2CA6D37BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:utt:810g:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C6B1A13-F7CD-422E-A90E-8020D076FC4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/whoami648/cve/blob/main/vul/10.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349781",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349781",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769164",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3816",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T11:16:06.450",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.56.0 is able to resolve this issue. The identifier of the patch is e8f1e5131535b8fd80a7b1b3085d676295fdcd41. Upgrading the affected component is recommended."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad ha sido detectada en OWASP DefectDojo hasta 2.55.4. Esta vulnerabilidad afecta a la función input_zip.read del archivo parser.py del componente SonarQubeParser/MSDefenderParser. La manipulación conduce a denegación de servicio. El ataque puede ser iniciado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. La actualización a la versión 2.56.0 es capaz de resolver este problema. El identificador del parche es e8f1e5131535b8fd80a7b1b3085d676295fdcd41. Se recomienda actualizar el componente afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:defectdojo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.56.0",
            "matchCriteriaId" : "A9AD8118-6C57-4214-8B1D-8D476F682FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DefectDojo/django-DefectDojo/commit/e8f1e5131535b8fd80a7b1b3085d676295fdcd41",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DefectDojo/django-DefectDojo/pull/14408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.56.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/henrrrychau/cve-bug-bounty/blob/main/dfdj_zip_bomb_dos_oom/dfdj_zip_bomb_dos_oom.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/henrrrychau/cve-bug-bounty/blob/main/dfdj_zip_bomb_dos_oom/dfdj_zip_bomb_dos_oom.md#supporting-materialreferences",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349782",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349782",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769524",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3817",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T12:16:11.917",
      "lastModified" : "2026-03-09T15:03:01.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. This issue affects some unknown processing of the file /patient-search.php. The manipulation results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en SourceCodester Patients Waiting Area Queue Management System 1.0. Este problema afecta un procesamiento desconocido del archivo /patient-search.php. La manipulación resulta en una autorización indebida. El ataque puede ser lanzado remotamente. El exploit es ahora público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        }, {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/HxH404/c4c8e7ce7fe5cde98aca176fba9d7207",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349783",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349783",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769535",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3818",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T12:16:12.393",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebService/GetDBData.jsp. This manipulation of the argument strTBName causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en Tiandy Easy7 CMS Windows 7.17.0. Afecta a una función desconocida del archivo /Easy7/apps/WebService/GetDBData.jsp. Esta manipulación del argumento strTBName provoca inyección SQL. El ataque puede iniciarse remotamente. El exploit ha sido publicado y puede ser utilizado. Se contactó con el proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiandy:easy7_cms:7.17.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "087107E9-8C5B-42EF-BC42-D6608CE70041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.feishu.cn/docx/RvTMdXwUqowtxNxt9BFcD3TOn3f?from=from_copylink",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349784",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349784",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769536",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21736",
      "sourceIdentifier" : "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "published" : "2026-03-09T13:15:56.120",
      "lastModified" : "2026-03-10T18:46:06.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory.\n\nThis is caused by improper handling of the memory protections for the user-mode wrapped memory resource."
      }, {
        "lang" : "es",
        "value" : "Software instalado y ejecutado como un usuario no privilegiado puede realizar llamadas al sistema de GPU impropias para obtener permiso de escritura a memoria de modo de usuario encapsulada de solo lectura.\n\nEsto es causado por el manejo impropio de las protecciones de memoria para el recurso de memoria encapsulada de modo de usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "367425dc-4d06-4041-9650-c2dc6aaa27ce",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imaginationtech:ddk:25.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27FDCFEF-64B2-4CE6-A22A-B87A827E288F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imaginationtech:ddk:25.1:rtm2:*:*:*:*:*:*",
            "matchCriteriaId" : "3421036F-348E-4FC2-9D25-E45C3463B23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
        "source" : "367425dc-4d06-4041-9650-c2dc6aaa27ce",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2261",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2026-03-09T13:15:57.093",
      "lastModified" : "2026-03-17T15:54:31.733",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives.\n\nOnce a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes before it is able to exec the helper.  At this point, blocklistd still records adverse events but is unable to block new addresses or unblock addresses whose database entries have expired.\n\nOnce a second, much higher number of leaked sockets is reached, blocklistd becomes unable to receive new adverse event reports.\n\nAn attacker may take advantage of this by triggering a large number of adverse events from sacrificial IP addresses to effectively disable blocklistd before launching an attack.\n\nEven in the absence of attacks or probes by would-be attackers, adverse events will occur regularly in the course of normal operations, and blocklistd will gradually run out file descriptors and become ineffective.\n\nThe accumulation of open sockets may have knock-on effects on other parts of the system, resulting in a general slowdown until blocklistd is restarted."
      }, {
        "lang" : "es",
        "value" : "Debido a un error de programación, blocklistd filtra un descriptor de socket por cada informe de evento adverso que recibe.\n\nUna vez que se alcanza un cierto número de sockets filtrados, blocklistd ya no puede ejecutar el script auxiliar: se bifurca un proceso hijo, pero este hijo desreferencia un puntero nulo y falla antes de poder ejecutar el auxiliar. En este punto, blocklistd todavía registra eventos adversos pero no puede bloquear nuevas direcciones o desbloquear direcciones cuyas entradas en la base de datos han caducado.\n\nUna vez que se alcanza un segundo número, mucho mayor, de sockets filtrados, blocklistd ya no puede recibir nuevos informes de eventos adversos.\n\nUn atacante puede aprovechar esto al desencadenar un gran número de eventos adversos desde direcciones IP de sacrificio para deshabilitar eficazmente blocklistd antes de lanzar un ataque.\n\nIncluso en ausencia de ataques o sondeos por parte de posibles atacantes, los eventos adversos ocurrirán regularmente en el curso de las operaciones normales, y blocklistd se quedará gradualmente sin descriptores de archivo y se volverá ineficaz.\n\nLa acumulación de sockets abiertos puede tener efectos en cadena en otras partes del sistema, lo que resultará en una ralentización general hasta que se reinicie blocklistd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secteam@freebsd.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "368CFE5D-C5C2-42AF-AAF4-28DFE1A59C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4AAA57-70A7-4717-ACF2-A253E757FF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "E24ABFA6-4D12-4DE5-832B-438502C7D188"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.freebsd.org/advisories/FreeBSD-SA-26:03.blocklistd.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3038",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2026-03-09T13:15:57.227",
      "lastModified" : "2026-03-17T15:55:14.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The rtsock_msg_buffer() function serializes routing information into a buffer.  As a part of this, it copies sockaddr structures into a sockaddr_storage structure on the stack.  It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's possible for a malicious userspace program to craft a request which triggers a 127-byte overflow.\n\n In practice, this overflow immediately overwrites the canary for the rtsock_msg_buffer() stack frame, resulting in a panic once the function returns.\n\nThe bug allows an unprivileged user to crash the kernel by triggering a stack buffer overflow in rtsock_msg_buffer().  In particular, the overflow will corrupt a stack canary value that is verified when the function returns; this mitigates the impact of the stack overflow by triggering a kernel panic.\n\nOther kernel bugs may exist which allow userspace to find the canary value and thus defeat the mitigation, at which point local privilege escalation may be possible."
      }, {
        "lang" : "es",
        "value" : "La función rtsock_msg_buffer() serializa información de enrutamiento en un búfer. Como parte de esto, copia estructuras sockaddr en una estructura sockaddr_storage en la pila. Asume que el campo de longitud de la sockaddr de origen ya había sido validado, pero este no es necesariamente el caso, y es posible que un programa malicioso en el espacio de usuario elabore una solicitud que desencadene un desbordamiento de 127 bytes.\n\nEn la práctica, este desbordamiento sobrescribe inmediatamente el canario del marco de pila de rtsock_msg_buffer(), lo que resulta en un pánico una vez que la función regresa.\n\nEl error permite a un usuario sin privilegios bloquear el kernel al desencadenar un desbordamiento de búfer de pila en rtsock_msg_buffer(). En particular, el desbordamiento corromperá un valor de canario de pila que se verifica cuando la función regresa; esto mitiga el impacto del desbordamiento de pila al desencadenar un pánico del kernel.\n\nOtros errores del kernel pueden existir que permitan al espacio de usuario encontrar el valor del canario y así anular la mitigación, momento en el que la escalada de privilegios local puede ser posible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secteam@freebsd.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "947F561E-AD65-43B9-94C1-3109A3D35248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1987F1-1E08-4B28-8D16-D25A091D99ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC1E8A0-0402-45F1-938D-FEFDCFC3E747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "D94457D6-738F-4ABB-BD46-F2B621531FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "8C38CB56-B80C-4D1B-9267-16E8F985B170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "13DF1E38-5E8D-42FF-A4C5-092300864F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "83A86F81-0965-4600-835A-496756137998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "987E31A4-7E21-471E-A3EA-4E53FFDB3DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBFE8B3-DC7C-4394-B062-C40E201EC059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.5:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "563C1D65-625D-43FC-A7A0-75B1E2163C40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC7C54E-58AF-4ADE-84AF-0EF0F325E20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D22B8C-36CF-4800-9673-0B0240558BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "242FA2A8-5D7D-4617-A411-2651FF3A3E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "40573F60-F3B7-4AEC-846A-B08E5B7D9D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB832CE-0A98-44A2-8BAC-CD38A64279B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "9A785F8E-C218-41AE-8D57-BF06DDAEF7CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "C3909FDD-B2A2-45B6-A40B-1D303A717F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "720597A2-F181-46E1-8A0D-097E17ADC4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.3:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8A75D0-148A-427A-9783-45477EABED21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:14.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0342A715-E211-4AF6-97ED-32EB9EBB947D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "368CFE5D-C5C2-42AF-AAF4-28DFE1A59C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4AAA57-70A7-4717-ACF2-A253E757FF2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "E24ABFA6-4D12-4DE5-832B-438502C7D188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:15.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C9869C-494B-4628-9AA3-4AA5B989C377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.freebsd.org/advisories/FreeBSD-SA-26:05.route.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3819",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2026-03-09T13:15:57.350",
      "lastModified" : "2026-04-29T01:00:01.613",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component Reservation Management Module. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Resort Reservation System 1.0. El elemento afectado es una función desconocida del archivo /?page=manage_reservation del componente Módulo de Gestión de Reservas. Dicha manipulación del argumento ID conduce a cross-site scripting. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:resort_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C54C3DC0-8798-48BF-833E-BEFDEEDC369F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-reservation-management-sourcecodester-resort-reservation-894ee77d7312",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.349785",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.349785",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.769578",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2919",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2026-03-09T14:16:10.017",
      "lastModified" : "2026-05-06T18:33:11.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for iOS 148.2."
      }, {
        "lang" : "es",
        "value" : "Scripts maliciosos podrían mostrar contenido web controlado por el atacante bajo dominios falsificados en Focus para iOS al detener una navegación _self a un puerto inválido y al activar una redirección de iframe, haciendo que la interfaz de usuario (UI) muestre un dominio de confianza sin interacción del usuario. Esta vulnerabilidad afecta a Focus para iOS &lt; 148.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "148.2",
            "matchCriteriaId" : "31A081FE-E7DD-43C5-BC23-8354580AE2B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1975842",
        "source" : "security@mozilla.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2026-18/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3089",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2026-03-09T14:16:10.143",
      "lastModified" : "2026-04-09T21:01:46.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file. In versions prior to 26.3.0, improper validation of the user-controlled x-actual-file-id header means that traversal segments (../) can escape the intended directory and write files outside userFiles.This issue affects prior versions of Actual Sync Server 26.3.0."
      }, {
        "lang" : "es",
        "value" : "Actual Sync Server permite a usuarios autenticados subir archivos a través de POST /sync/upload-user-file. En versiones anteriores a la 26.3.0, una validación incorrecta del encabezado x-actual-file-id controlado por el usuario significa que los segmentos de recorrido (../) pueden escapar del directorio previsto y escribir archivos fuera de userFiles. Este problema afecta a versiones anteriores de Actual Sync Server 26.3.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "help@fluidattacks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "help@fluidattacks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actualbudget:actual:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "26.3.0",
            "matchCriteriaId" : "A7399ED0-2E66-4A0C-8463-A2647306D5FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/fugue",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/actualbudget/actual",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/actualbudget/actual/pull/7067",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/fugue",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25866",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-09T16:16:18.970",
      "lastModified" : "2026-05-06T14:23:35.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable earlier in the search order, resulting in arbitrary code execution in the context of the affected user."
      }, {
        "lang" : "es",
        "value" : "Las versiones de MobaXterm anteriores a la 26.1 contienen una vulnerabilidad de elemento de ruta de búsqueda descontrolada. La aplicación llama a WinExec para ejecutar Notepad++ sin una ruta de ejecutable completamente calificada al abrir archivos remotos. Un atacante puede explotar el comportamiento de la ruta de búsqueda al colocar un ejecutable malicioso antes en el orden de búsqueda, lo que resulta en ejecución de código arbitrario en el contexto del usuario afectado."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobatek:mobaxterm:*:*:*:*:home:*:*:*",
            "versionEndExcluding" : "26.1",
            "matchCriteriaId" : "BADFA52B-4659-4447-8B67-B21BD019FB2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mobaxterm.mobatek.net/download-home-edition.html",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/mobaxterm-notepad-unquoted-service-path",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3588",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2026-03-09T16:16:21.343",
      "lastModified" : "2026-05-06T14:22:34.300",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en IKEA Dirigera v2.866.4 permite a un atacante exfiltrar claves privadas enviando una petición manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ikea:dirigera_firmware:2.866.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F7A5B83-2510-4DED-B1F0-E902F89B1E4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ikea:dirigera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF51C155-288A-4E35-9911-1D3604AF2A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-3588",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29023",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-09T18:16:22.727",
      "lastModified" : "2026-05-01T15:23:27.150",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instance using the victim’s configured upstream provider API credentials, resulting in unauthorized API usage and potential disclosure of proxied request and response data. This vulnerability's general exploitability has been mitigated with the introduction of commit 023cc95."
      }, {
        "lang" : "es",
        "value" : "Keygraph Shannon contiene una clave API codificada de forma rígida en su configuración de router que, cuando el componente del router está habilitado y expuesto, permite a los atacantes de red autenticarse utilizando la clave estática públicamente conocida. Un atacante capaz de alcanzar el puerto del router puede redirigir solicitudes a través de la instancia de Shannon utilizando las credenciales de API del proveedor ascendente configurado de la víctima, lo que resulta en un uso no autorizado de la API y la posible divulgación de datos de solicitudes y respuestas redirigidas. La explotabilidad general de esta vulnerabilidad ha sido mitigada con la introducción del commit 023cc95."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KeygraphHQ/shannon/issues/186",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/KeygraphHQ/shannon/pull/224",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://github.com/KeygraphHQ/shannon/pull/224/changes/023cc953db742602964b7826105278d15c28a420",
        "source" : "disclosure@vulncheck.com"
      }, {
        "url" : "https://www.vulncheck.com/advisories/keygraph-shannon-hard-coded-router-api-key",
        "source" : "disclosure@vulncheck.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2026-03-09T19:16:07.303",
      "lastModified" : "2026-03-13T19:40:00.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and potential remote administrative access."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso incorrecto existe en Tenda W15E V02.03.01.26_cn. Un atacante no autenticado puede acceder al endpoint /cgi-bin/DownloadCfg/RouterCfm.jpg para descargar el archivo de configuración que contiene credenciales de administrador en texto plano, lo que lleva a la revelación de información sensible y a un posible acceso administrativo remoto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:02.03.01.26_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A1E025-80B4-4B4E-A9B2-CF0EF5AEBE64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jhx-ui/CVE-Reports/blob/main/README.md#vulnerability-report-tenda-router-sensitive-information-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3638",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2026-03-09T19:16:08.720",
      "lastModified" : "2026-03-30T19:32:08.327",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en los puntos finales de la API de restauración de usuarios y roles en Devolutions Server 2025.3.11.0 y versiones anteriores permite a un usuario autenticado con bajos privilegios restaurar usuarios y roles eliminados mediante solicitudes de API manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@devolutions.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2025.3.12.0",
            "matchCriteriaId" : "7774C6E3-1E70-46A6-B3B6-B7407FA107D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2026-0007",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0846",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2026-03-09T20:16:05.703",
      "lastModified" : "2026-04-17T20:57:00.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by providing absolute paths or traversal paths. This vulnerability can be exploited locally or remotely, particularly in scenarios where the function is used in web APIs or other interfaces that accept user-supplied input."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función `filestring()` del módulo `nltk.util` en la versión 3.9.2 de nltk permite la lectura arbitraria de archivos debido a una validación inadecuada de las rutas de entrada. La función abre directamente archivos especificados por la entrada del usuario sin sanitización, lo que permite a los atacantes acceder a archivos sensibles del sistema al proporcionar rutas absolutas o rutas de recorrido. Esta vulnerabilidad puede ser explotada local o remotamente, particularmente en escenarios donde la función se utiliza en APIs web u otras interfaces que aceptan entrada proporcionada por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nltk:nltk:3.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87184DC-E0E4-4AA6-8D6D-9F78FA4DDEE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://huntr.com/bounties/007b84f8-418e-4300-99d0-bf504c2f97eb",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.com/bounties/007b84f8-418e-4300-99d0-bf504c2f97eb",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25041",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-09T20:16:07.147",
      "lastModified" : "2026-03-13T19:23:55.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-controlled configuration values (database name, host, password, etc.) without proper sanitization. The password and other connection parameters are directly interpolated into a shell command. This affects packages/server/src/integrations/postgres.ts."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. En 3.23.22 y anteriores, la integración de PostgreSQL construye comandos de shell utilizando valores de configuración controlados por el usuario (nombre de la base de datos, host, contraseña, etc.) sin una sanitización adecuada. La contraseña y otros parámetros de conexión se interpolan directamente en un comando de shell. Esto afecta a packages/server/src/integrations/postgres.ts."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.23.22",
            "matchCriteriaId" : "12003F5A-AC57-4F27-9081-35A2D3E7ECA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/blob/f34d545602a7c94427bae63312a5ee9bf2aa6c85/packages/server/src/integrations/postgres.ts#L529-L531",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/commit/9fdbff32fb9e69650ba899a799e13f80d9b09e93",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-726g-59wr-cj4c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25045",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-09T21:16:15.173",
      "lastModified" : "2026-03-13T19:21:13.780",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. This issue is a combination of Vertical Privilege Escalation and IDOR (Insecure Direct Object Reference) due to missing server-side RBAC checks in the /api/global/users endpoints. A Creator-level user, who should have no permissions to manage users or organizational roles, can instead promote an App Viewer to Tenant Admin, demote a Tenant Admin to App Viewer, or modify the Owner’s account details and all orders (e.g., change name). This is because the API accepts these actions without validating the requesting role, a Creator can replay Owner-only requests using their own session tokens. This leads to full tenant compromise."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. Este problema es una combinación de escalada de privilegios vertical e IDOR (Referencia Directa Insegura a Objeto) debido a la falta de comprobaciones RBAC del lado del servidor en los endpoints /api/global/users. Un usuario de nivel Creador, que no debería tener permisos para gestionar usuarios o roles organizacionales, puede, en cambio, ascender un Visor de Aplicaciones a Administrador de Inquilinos, degradar un Administrador de Inquilinos a Visor de Aplicaciones, o modificar los detalles de la cuenta del Propietario y todos los pedidos (p. ej., cambiar el nombre). Esto se debe a que la API acepta estas acciones sin validar el rol solicitante, un Creador puede reproducir solicitudes solo para Propietarios utilizando sus propios tokens de sesión. Esto conduce a un compromiso total del inquilino."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.32.3",
            "matchCriteriaId" : "6BB5C248-EB41-43B0-B60D-CBE80AB4B85B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-2g39-332f-68p9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25737",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-09T21:16:15.340",
      "lastModified" : "2026-03-13T19:16:21.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists even though file extension restrictions are configured. The restriction is enforced only at the UI level. An attacker can bypass these restrictions and upload malicious files."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. En la versión 3.24.0 y anteriores, existe una vulnerabilidad de carga arbitraria de archivos a pesar de que las restricciones de extensión de archivo están configuradas. La restricción se aplica solo a nivel de interfaz de usuario. Un atacante puede eludir estas restricciones y cargar archivos maliciosos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.24.0",
            "matchCriteriaId" : "81D6E4C0-FDC0-425D-93BF-8BD9545F8B76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-2hfr-343j-863r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-25960",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-09T21:16:15.537",
      "lastModified" : "2026-03-18T18:36:10.323",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_from_url_async method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. The SSRF fix uses urllib3.util.parse_url() to validate and extract the hostname from user-provided URLs. However, load_from_url_async uses aiohttp for making the actual HTTP requests, and aiohttp internally uses the yarl library for URL parsing. This vulnerability in 0.17.0."
      }, {
        "lang" : "es",
        "value" : "vLLM es un motor de inferencia y servicio para modelos de lenguaje grandes (LLMs). La corrección de protección contra SSRF para CVE-2026-24779 añadida en 0.15.1 puede ser eludida en el método load_from_url_async debido a un comportamiento inconsistente de análisis de URL entre la capa de validación y el cliente HTTP real. La corrección de SSRF utiliza urllib3.util.parse_url() para validar y extraer el nombre de host de las URL proporcionadas por el usuario. Sin embargo, load_from_url_async utiliza aiohttp para realizar las solicitudes HTTP reales, y aiohttp utiliza internamente la biblioteca yarl para el análisis de URL. Esta vulnerabilidad en 0.17.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.15.1",
            "versionEndExcluding" : "0.17.0",
            "matchCriteriaId" : "5A72A44F-F5E3-44C0-AB4B-A0B5B6797EFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vllm-project/vllm/commit/6f3b2047abd4a748e3db4a68543f8221358002c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/pull/34743",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/vllm-project/vllm/security/advisories/GHSA-v359-jj2v-j536",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30240",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-09T21:16:18.843",
      "lastModified" : "2026-03-13T17:46:41.427",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.31.5 and earlier, a path traversal vulnerability in the PWA (Progressive Web App) ZIP processing endpoint (POST /api/pwa/process-zip) allows an authenticated user with builder privileges to read arbitrary files from the server filesystem, including /proc/1/environ which contains all environment variables — JWT secrets, database credentials, encryption keys, and API tokens. The server reads attacker-specified files via unsanitized path.join() with user-controlled input from icons.json inside the uploaded ZIP, then uploads the file contents to the object store (MinIO/S3) where they can be retrieved through signed URLs. This results in complete platform compromise as all cryptographic secrets and service credentials are exfiltrated in a single request."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. En 3.31.5 y versiones anteriores, una vulnerabilidad de salto de ruta en el endpoint de procesamiento de ZIP de PWA (Progressive Web App) (POST /api/pwa/process-zip) permite a un usuario autenticado con privilegios de constructor leer archivos arbitrarios del sistema de archivos del servidor, incluido /proc/1/environ que contiene todas las variables de entorno — secretos JWT, credenciales de base de datos, claves de cifrado y tokens de API. El servidor lee archivos especificados por el atacante a través de path.join() no saneado con entrada controlada por el usuario desde icons.json dentro del ZIP subido, luego sube el contenido del archivo al almacén de objetos (MinIO/S3) donde pueden ser recuperados a través de URLs firmadas. Esto resulta en un compromiso completo de la plataforma ya que todos los secretos criptográficos y las credenciales de servicio son exfiltrados en una sola solicitud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.31.5",
            "matchCriteriaId" : "085377C0-B471-44F3-B3D5-15E66046E33B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-pqcr-jmfv-c9cp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-pqcr-jmfv-c9cp",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-31816",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-09T21:16:20.733",
      "lastModified" : "2026-03-13T17:33:41.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.31.4 and earlier, the Budibase server's authorized() middleware that protects every server-side API endpoint can be completely bypassed by appending a webhook path pattern to the query string of any request. The isWebhookEndpoint() function uses an unanchored regex that tests against ctx.request.url, which in Koa includes the full URL with query parameters. When the regex matches, the authorized() middleware immediately calls return next(), skipping all authentication, authorization, role checks, and CSRF protection. This means a completely unauthenticated, remote attacker can access any server-side API endpoint by simply appending ?/webhooks/trigger (or any webhook pattern variant) to the URL."
      }, {
        "lang" : "es",
        "value" : "Budibase es una plataforma de bajo código para crear herramientas internas, flujos de trabajo y paneles de administración. En la versión 3.31.4 y anteriores, el middleware authorized() del servidor de Budibase que protege cada endpoint de API del lado del servidor puede ser completamente eludido al añadir un patrón de ruta de webhook a la cadena de consulta de cualquier solicitud. La función isWebhookEndpoint() utiliza una expresión regular no anclada que se prueba contra ctx.request.url, que en Koa incluye la URL completa con parámetros de consulta. Cuando la expresión regular coincide, el middleware authorized() llama inmediatamente a return next(), omitiendo toda autenticación, autorización, comprobaciones de rol y protección CSRF. Esto significa que un atacante remoto y completamente no autenticado puede acceder a cualquier endpoint de API del lado del servidor simplemente añadiendo ?/webhooks/trigger (o cualquier variante de patrón de webhook) a la URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.31.4",
            "matchCriteriaId" : "2D6D88E6-A107-4300-B0E5-C2717900C2A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-gw94-hprh-4wj8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-gw94-hprh-4wj8",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3288",
      "sourceIdentifier" : "jordan@liggitt.net",
      "published" : "2026-03-09T21:16:20.900",
      "lastModified" : "2026-05-06T17:51:14.187",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)"
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de seguridad en ingress-nginx donde la anotación Ingress 'nginx.ingress.kubernetes.io/rewrite-target' puede usarse para inyectar configuración en nginx. Esto puede llevar a la ejecución de código arbitrario en el contexto del controlador ingress-nginx y a la divulgación de Secrets accesibles para el controlador. (Tenga en cuenta que, en la instalación predeterminada, el controlador puede acceder a todos los Secrets de todo el clúster)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "jordan@liggitt.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "jordan@liggitt.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:ingress-nginx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.8",
            "matchCriteriaId" : "17BAE951-4BF9-42C4-A70C-F93F531DB695"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubernetes:ingress-nginx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.14.0",
            "versionEndExcluding" : "1.14.4",
            "matchCriteriaId" : "5CAE6535-78E2-4DD8-AABA-3F49B6B56E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubernetes/kubernetes/issues/137560",
        "source" : "jordan@liggitt.net",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/09/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bvabhishek/CVE-2026-3288-lab",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1776",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2026-03-10T07:38:01.950",
      "lastModified" : "2026-04-17T20:59:47.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in the download_private_file functionality when the application is configured to use the CamaleonCmsAwsUploader backend. Unlike the local uploader implementation, the AWS uploader does not validate file paths with valid_folder_path?, allowing directory traversal sequences to be supplied via the file parameter. As a result, any authenticated user, including low-privileged registered users, can access sensitive files such as /etc/passwd. This issue represents a bypass of the incomplete fix for CVE-2024-46987 and affects deployments using the AWS S3 storage backend."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2.4.5.0 a 2.9.0 de Camaleon CMS, anteriores al commit f54a77e, contienen una vulnerabilidad de salto de ruta en la implementación del cargador de AWS S3 que permite a los usuarios autenticados leer archivos arbitrarios del sistema de archivos del servidor web. El problema ocurre en la funcionalidad download_private_file cuando la aplicación está configurada para usar el backend CamaleonCmsAwsUploader. A diferencia de la implementación del cargador local, el cargador de AWS no valida las rutas de archivo con valid_folder_path?, permitiendo que se suministren secuencias de salto de directorio a través del parámetro file. Como resultado, cualquier usuario autenticado, incluidos los usuarios registrados con pocos privilegios, puede acceder a archivos sensibles como /etc /passwd. Este problema representa una omisión de la corrección incompleta para CVE-2024-46987 y afecta a las implementaciones que utilizan el backend de almacenamiento de AWS S3."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuzitio:camaleon_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.5",
            "versionEndIncluding" : "2.9.0",
            "matchCriteriaId" : "6CD58B4B-A874-4802-A817-72F4C8104C09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://camaleon.website/",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/owen2345/camaleon-cms/commit/f54a77e2a7be601215ea1b396038c589a0cab9af",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/owen2345/camaleon-cms/pull/1127",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.vulncheck.com/advisories/camaleon-cms-aws-uploader-authenticated-path-traversal-arbitrary-file-read",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-26982",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:42:41.580",
      "lastModified" : "2026-03-13T17:28:03.990",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghostty is a cross-platform terminal emulator. Ghostty allows control characters such as 0x03 (Ctrl+C) in pasted and dropped text. These can be used to execute arbitrary commands in some shell environments. This attack requires an attacker to convince the user to copy and paste or drag and drop malicious text. The attack requires user interaction to be triggered, but the dangerous characters are invisible in most GUI environments so it isn't trivially detected, especially if the string contents are complex. Fixed in Ghostty v1.3.0."
      }, {
        "lang" : "es",
        "value" : "Ghostty es un emulador de terminal multiplataforma. Ghostty permite caracteres de control como 0x03 (Ctrl+C) en texto pegado y soltado. Estos pueden usarse para ejecutar comandos arbitrarios en algunos entornos de shell. Este ataque requiere que un atacante convenza al usuario de copiar y pegar o arrastrar y soltar texto malicioso. El ataque requiere interacción del usuario para ser activado, pero los caracteres peligrosos son invisibles en la mayoría de los entornos GUI, por lo que no se detecta trivialmente, especialmente si el contenido de la cadena es complejo. Corregido en Ghostty v1.3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghostty:ghostty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "B9E747EE-2806-4AF9-B401-4B8FDC658298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ghostty-org/ghostty/commit/fe7427ed2a1a02aef85495b384cfb8f11ee5efc9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ghostty-org/ghostty/pull/10746",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ghostty-org/ghostty/security/advisories/GHSA-4jxv-xgrp-5m3r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28431",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:35.600",
      "lastModified" : "2026-03-13T17:18:44.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper input validation. This vulnerability occurs regardless of whether federation is enabled or not. This vulnerability could lead to a significant data breach. This vulnerability is fixed in 2026.3.1."
      }, {
        "lang" : "es",
        "value" : "Misskey es una plataforma de redes sociales de código abierto y federada. Todos los servidores Misskey que ejecutan versiones 8.45.0 y posteriores, pero anteriores a la 2026.3.1, contienen una vulnerabilidad que permite a actores maliciosos acceder a datos a los que normalmente no podrían acceder debido a comprobaciones de permisos insuficientes y a una validación de entrada adecuada. Esta vulnerabilidad ocurre independientemente de si la federación está habilitada o no. Esta vulnerabilidad podría conducir a una violación de datos significativa. Esta vulnerabilidad está corregida en la 2026.3.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 9.2,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "HIGH",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.45.0",
            "versionEndExcluding" : "2026.3.1",
            "matchCriteriaId" : "D8F65EF5-6295-4798-9F91-EA068B68449B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-r33c-qg3g-v9cr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28432",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:35.770",
      "lastModified" : "2026-03-13T17:18:06.580",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled or disabled. This vulnerability is fixed in 2026.3.1."
      }, {
        "lang" : "es",
        "value" : "Misskey es una plataforma de redes sociales de código abierto y federada. Todos los servidores Misskey anteriores a 2026.3.1 contienen una vulnerabilidad que permite eludir la verificación de firmas HTTP. Aunque esta es una vulnerabilidad relacionada con la federación, afecta a todos los servidores independientemente de si la federación está habilitada o deshabilitada. Esta vulnerabilidad está corregida en 2026.3.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2026.3.1",
            "matchCriteriaId" : "5642C9AC-AF91-4ED8-ABEE-9D69A5E0D81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-grwc-c762-gcvp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28433",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:35.907",
      "lastModified" : "2026-03-13T17:17:07.587",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be relatively low, as bad actors would require the ID corresponding to the target file for import. This vulnerability is fixed in 2026.3.1."
      }, {
        "lang" : "es",
        "value" : "Misskey es una plataforma de redes sociales de código abierto y federada. Todos los servidores Misskey que ejecutan versiones 10.93.0 y posteriores, pero anteriores a la 2026.3.1, contienen una vulnerabilidad que permite importar datos de otros usuarios debido a la falta de validación de propiedad. El impacto de esta vulnerabilidad se estima que es relativamente bajo, ya que los actores maliciosos requerirían el ID correspondiente al archivo objetivo para la importación. Esta vulnerabilidad se corrige en la 2026.3.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.93.0",
            "versionEndExcluding" : "2026.3.1",
            "matchCriteriaId" : "E7CA53B2-DB4E-4FA7-B3F9-89E6C040CADA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-g6hj-33h7-6fq8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:39.867",
      "lastModified" : "2026-03-12T15:19:11.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, an integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted image. This vulnerability is fixed in 7.1.2-16."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16, existe una vulnerabilidad de desbordamiento de entero en el decodificador SIXEL. La vulnerabilidad permite a un atacante realizar un acceso fuera de límites a través de una imagen especialmente diseñada. Esta vulnerabilidad está corregida en la versión 7.1.2-16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "E20BE285-7F97-4156-AFD3-80B9CFC8B945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r39q-jr8h-gcq2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:40.040",
      "lastModified" : "2026-03-12T15:18:08.087",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, existe un desbordamiento de búfer de pila en las funciones de análisis del kernel de morfología de ImageMagick. Cadenas de kernel controladas por el usuario que exceden un búfer se copian en búferes de pila de tamaño fijo a través de memcpy sin comprobación de límites, lo que resulta en corrupción de la pila. Esta vulnerabilidad está corregida en las versiones 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-932h-jw47-73jm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28686",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:43.500",
      "lastModified" : "2026-03-12T15:17:14.927",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, A heap-buffer-overflow vulnerability exists in the PCL encode due to an undersized output buffer allocation. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software gratuito y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, existe una vulnerabilidad de desbordamiento de búfer de montón en la codificación PCL debido a una asignación de búfer de salida de tamaño insuficiente. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-467j-76j7-5885",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28687",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:43.660",
      "lastModified" : "2026-03-12T15:09:43.583",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, una vulnerabilidad de uso después de liberación en el heap en el decodificador MSL de ImageMagick permite a un atacante activar el acceso a memoria liberada mediante la creación de un archivo MSL. Esta vulnerabilidad está corregida en las versiones 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fpvf-frm6-625q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28688",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:43.813",
      "lastModified" : "2026-03-12T15:08:20.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write capability has been removed. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, existe una vulnerabilidad de uso después de liberación de heap en el codificador MSL, donde una imagen clonada es destruida dos veces. El codificador MSL no soporta la escritura de MSL, por lo que la capacidad de escritura ha sido eliminada. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxw5-m53x-j38c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28689",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:43.963",
      "lastModified" : "2026-03-12T14:46:19.103",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain=\"path\" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, la autorización de domain='path' se verifica antes de la apertura/uso final del archivo. Un intercambio de symlink entre el tiempo de verificación y el tiempo de uso elude la lectura/escritura denegada por política. Esta vulnerabilidad está corregida en las versiones 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28690",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:44.127",
      "lastModified" : "2026-03-11T17:32:13.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, existe una vulnerabilidad de desbordamiento de búfer de pila en el codificador MNG. Faltan comprobaciones de límites que podrían corromper la pila con datos controlados por el atacante. Esta vulnerabilidad está corregida en las versiones 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7h7q-j33q-hvpf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28691",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:44.280",
      "lastModified" : "2026-03-11T17:40:00.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, existe una vulnerabilidad de desreferencia de puntero no inicializado en el decodificador JBIG debido a una comprobación faltante. Esta vulnerabilidad está corregida en las versiones 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        }, {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wj8w-pjxf-9g4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28692",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:44.430",
      "lastModified" : "2026-03-11T17:42:10.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, el decodificador MAT utiliza aritmética de 32 bits debido a una incorrecta parentización, lo que resulta en una lectura excesiva de la pila. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mrmj-x24c-wwcv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28693",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:43:44.577",
      "lastModified" : "2026-03-11T17:44:47.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, un desbordamiento de entero en el codificador DIB puede resultar en una lectura o escritura fuera de límites. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hffp-q43q-qq76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30883",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:56.543",
      "lastModified" : "2026-03-13T17:10:28.247",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, un perfil de imagen extremadamente grande podría resultar en un desbordamiento de montículo al codificar una imagen PNG. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qmw5-2p58-xvrc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30926",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:56.943",
      "lastModified" : "2026-03-13T17:06:54.933",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Prior to 3.5.10, a privilege escalation vulnerability exists in the publish service of SiYuan Note that allows low-privilege publish accounts (RoleReader) to modify notebook content via the /api/block/appendHeadingChildren API endpoint. The endpoint requires only the model.CheckAuth role, which accepts RoleReader sessions, but it does not enforce stricter checks, such as CheckAdminRole or CheckReadonly. This allows remote authenticated publish users with read-only privileges to append new blocks to existing documents, compromising the integrity of stored notes."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Anteriormente a la 3.5.10, existe una vulnerabilidad de escalada de privilegios en el servicio de publicación de SiYuan Note que permite a las cuentas de publicación de bajo privilegio (RoleReader) modificar el contenido del cuaderno a través del endpoint de la API /api/block/appendHeadingChildren. El endpoint requiere solo el rol model.CheckAuth, que acepta sesiones de RoleReader, pero no aplica comprobaciones más estrictas, como CheckAdminRole o CheckReadonly. Esto permite a los usuarios de publicación remotos autenticados con privilegios de solo lectura añadir nuevos bloques a documentos existentes, comprometiendo la integridad de las notas almacenadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.10",
            "matchCriteriaId" : "0E7B145F-4786-4534-B4D6-A947F4CD06FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f9cq-v43p-v523",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f9cq-v43p-v523",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30929",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:57.127",
      "lastModified" : "2026-03-13T17:02:14.297",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MagnifyImage uses a fixed-size stack buffer. When using a specific image it is possible to overflow this buffer and corrupt the stack. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software gratuito y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, MagnifyImage utiliza un búfer de pila de tamaño fijo. Al usar una imagen específica, es posible desbordar este búfer y corromper la pila. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rqq8-jh93-f4vg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30931",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:57.303",
      "lastModified" : "2026-03-13T16:59:45.720",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, a heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write. This vulnerability is fixed in 7.1.2-16."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16, un desbordamiento de búfer basado en montículo en el codificador UHDR puede ocurrir debido a la truncación de un valor y permitiría una escritura fuera de límites. Esta vulnerabilidad está corregida en 7.1.2-16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "E20BE285-7F97-4156-AFD3-80B9CFC8B945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h95r-c8c7-mrwx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30935",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:57.483",
      "lastModified" : "2026-03-11T17:45:20.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds read can occur. This vulnerability is fixed in 7.1.2-16."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software gratuito y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16, BilateralBlurImage contiene una lectura excesiva del búfer de pila causada por una conversión incorrecta. Al procesar una imagen manipulada con la operación -bilateral-blur, puede ocurrir una lectura fuera de límites. Esta vulnerabilidad está corregida en 7.1.2-16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "E20BE285-7F97-4156-AFD3-80B9CFC8B945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cqw9-w2m7-r2m2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30936",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:57.663",
      "lastModified" : "2026-03-11T17:48:46.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operation an out of bounds write can occur. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, una imagen manipulada podría causar una escritura fuera de límites en el heap dentro del método WaveletDenoiseImage. Al procesar una imagen manipulada con la operación -wavelet-denoise, puede ocurrir una escritura fuera de límites. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5ggv-92r5-cp4p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30937",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:57.840",
      "lastModified" : "2026-03-18T18:18:18.640",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the XWD (X Windows) encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of bounds heap write can occur. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41."
      }, {
        "lang" : "es",
        "value" : "ImageMagick es un software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de las versiones 7.1.2-16 y 6.9.13-41, un desbordamiento de entero sin signo de 32 bits en el codificador XWD (X Windows) puede causar una asignación de búfer de pila de tamaño insuficiente. Al escribir una imagen extremadamente grande, puede ocurrir una escritura de pila fuera de límites. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.13-41",
            "matchCriteriaId" : "EFFB7C48-4211-4215-9C0B-D285B8E09CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.1.2-16",
            "matchCriteriaId" : "865783BD-5A33-4D05-AF99-E6EFE76414D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpg4-j99f-8xcg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-31802",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T07:44:58.020",
      "lastModified" : "2026-03-18T18:13:34.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11."
      }, {
        "lang" : "es",
        "value" : "node-tar es una implementación completa de Tar para Node.js. Antes de la versión 7.5.11, tar (npm) puede ser engañado para crear un enlace simbólico que apunta fuera del directorio de extracción utilizando un destino de enlace simbólico relativo a la unidad, como C:../../../target.txt, lo que permite la sobrescritura de archivos fuera del directorio de trabajo actual (cwd) durante la extracción normal de tar.x(). Esta vulnerabilidad está corregida en la versión 7.5.11."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "HIGH",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isaacs:tar:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.5.11",
            "matchCriteriaId" : "4A3969E5-A58A-41CE-A19A-D20F54EFC554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0489",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:31:05.073",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting (XSS) vulnerability. This issue had a low impact on the confidentiality and integrity of the application with no impact on availability."
      }, {
        "lang" : "es",
        "value" : "Debido a la validación insuficiente de la entrada controlada por el usuario en el parámetro de consulta de las URL. SAP Business One Job Service podría permitir a un atacante no autenticado inyectar una entrada especialmente diseñada que, tras la interacción del usuario, podría resultar en una vulnerabilidad de cross-site scripting (XSS) basada en DOM. Este problema tuvo un bajo impacto en la confidencialidad e integridad de la aplicación, sin impacto en la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3693543",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-0953",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-10T17:31:40.537",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon. This is due to the plugin failing to verify that the email provided in the authentication request matches the email from the validated OAuth token. This makes it possible for unauthenticated attackers to log in as any existing user, including administrators, by supplying a valid OAuth token from their own account along with the victim's email address."
      }, {
        "lang" : "es",
        "value" : "El plugin Tutor LMS Pro para WordPress es vulnerable a una omisión de autenticación en todas las versiones hasta la 3.9.5, inclusive, a través del complemento Social Login. Esto se debe a que el plugin no verifica que el correo electrónico proporcionado en la solicitud de autenticación coincida con el correo electrónico del token OAuth validado. Esto hace posible que atacantes no autenticados inicien sesión como cualquier usuario existente, incluidos los administradores, al proporcionar un token OAuth válido de su propia cuenta junto con la dirección de correo electrónico de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "references" : [ {
        "url" : "https://tutorlms.com/releases/id/393/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/92a120ac-66ae-4678-a87a-e62da885d50b?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1508",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2026-03-10T17:32:18.333",
      "lastModified" : "2026-04-15T14:42:29.303",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Court Reservation  WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete them via a CSRF attack"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Court Reservation anterior a 1.10.9 no tiene una verificación CSRF implementada al eliminar eventos, lo que podría permitir a los atacantes hacer que un administrador con sesión iniciada los elimine a través de un ataque CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fc1d577b-abf9-4c15-a96d-14ebd894debc/",
        "source" : "contact@wpscan.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1919",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-10T17:32:45.850",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to query sensitive data."
      }, {
        "lang" : "es",
        "value" : "El plugin Booking Calendar para Appointments and Service Businesses – Booktics para WordPress es vulnerable al acceso no autorizado de datos debido a una falta de verificación de capacidad en múltiples endpoints de la API REST en todas las versiones hasta la 1.0.16, inclusive. Esto permite a atacantes no autenticados consultar datos sensibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/booktics/tags/1.0.15/core/appointment/controllers/appointment-controller.php#L549",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/booktics/tags/1.0.15/core/customer/controllers/customer-controller.php#L229",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/booktics/tags/1.0.15/core/order/controllers/order-controller.php#L889",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/booktics/tags/1.0.15/core/team-member/controllers/team-member-controller.php#L235",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3477898/booktics",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c88dcf62-4b6c-4ff0-8530-5aefd54bd347?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1920",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-10T17:32:46.630",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'Extension_Controller::update_item_permissions_check' function in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to install addon plugins."
      }, {
        "lang" : "es",
        "value" : "El plugin Booking Calendar para Appointments and Service Businesses – Booktics para WordPress es vulnerable a la modificación no autorizada de datos debido a la falta de una verificación de capacidad en la función 'Extension_Controller::update_item_permissions_check' en todas las versiones hasta la 1.0.16, inclusive. Esto hace posible que atacantes no autenticados instalen plugins adicionales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/booktics/tags/1.0.15/core/extensions/controllers/extension-controller.php#L110",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/3477898/booktics/trunk/core/extensions/controllers/extension-controller.php",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ab051f4a-030a-44aa-8cbf-665c6c6d31a7?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24309",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:35:54.963",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de verificación de autorización en SAP NetWeaver Servidor de aplicaciones para ABAP, un atacante autenticado podría ejecutar un módulo de función ABAP específico para leer, modificar o insertar entradas en la tabla de configuración de la base de datos del sistema ABAP. Este cambio de contenido no autorizado podría provocar una reducción del rendimiento del sistema o interrupciones. La vulnerabilidad tiene bajo impacto en la integridad y disponibilidad de la aplicación, sin efecto en la confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3703856",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24310",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:35:55.180",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de verificación de autorización en el Servidor de aplicaciones SAP NetWeaver para ABAP, un atacante autenticado podría ejecutar un módulo de función ABAP específico y leer información sensible del catálogo de la base de datos del sistema ABAP. Esta vulnerabilidad tiene un bajo impacto en la confidencialidad de la aplicación, sin efecto en la integridad y disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3694383",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24311",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:35:55.360",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability."
      }, {
        "lang" : "es",
        "value" : "La aplicación SAP Customer Checkout presenta ciertas características de diseño que implican el almacenamiento local de datos operativos utilizando mecanismos de protección reversibles. El acceso a estos datos, combinado con la interacción iniciada por el usuario, puede permitir que se produzcan modificaciones sin validación. Dichos cambios podrían afectar el comportamiento del sistema durante el inicio, lo que resultaría en un alto impacto en la confidencialidad e integridad de la aplicación, con un bajo impacto en la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.1,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3708457",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24313",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:35:55.620",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability."
      }, {
        "lang" : "es",
        "value" : "SAP Solution Tools Plug-In (ST-PI) contiene un módulo de función que no realiza las comprobaciones de autorización necesarias para usuarios autenticados, lo que permite la divulgación de información del sistema. Esta vulnerabilidad tiene un bajo impacto en la confidencialidad y no afecta a la integridad ni a la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3707930",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24316",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:35:55.860",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery (SSRF). Successful exploitation could lead to interaction with potentially sensitive internal endpoints, resulting in a low impact on data confidentiality and integrity. There is no impact on availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Servidor de aplicaciones para ABAP proporciona un informe ABAP para fines de prueba, que permite enviar peticiones HTTP a puntos finales internos o externos arbitrarios. El informe es, por lo tanto, vulnerable a Falsificación de petición del lado del servidor (SSRF). La explotación exitosa podría conducir a interacción con puntos finales internos potencialmente sensibles, lo que resulta en un bajo impacto en la confidencialidad e integridad de los datos. No hay impacto en la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3689080",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24317",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:35:56.040",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's context provided GuiXT is enabled. This vulnerability has a low impact on confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "SAP GUI para Windows permite que los archivos DLL se carguen desde directorios arbitrarios dentro de la aplicación. Un atacante no autenticado podría explotar esta vulnerabilidad persuadiendo a una víctima para que coloque un DLL malicioso dentro de uno de estos directorios. El comando malicioso se ejecuta en el contexto del usuario víctima siempre que GuiXT esté habilitado. Esta vulnerabilidad tiene un bajo impacto en la confidencialidad, integridad y disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3699761",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27684",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:38:10.767",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. As a result, an attacker can manipulate the WHERE clause logic and potentially gain unauthorized access to or modify database information. This vulnerability has no impact on integrity and low impact on the confidentiality and availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Feedback Notifications Service contiene una vulnerabilidad de inyección SQL que permite a un atacante autenticado inyectar código SQL arbitrario a través de campos de entrada controlados por el usuario. La aplicación concatena estas entradas directamente en consultas SQL sin una validación o escape adecuados. Como resultado, un atacante puede manipular la lógica de la cláusula WHERE y potencialmente obtener acceso no autorizado o modificar información de la base de datos. Esta vulnerabilidad no tiene impacto en la integridad y bajo impacto en la confidencialidad y disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3697355",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27685",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:38:10.980",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system."
      }, {
        "lang" : "es",
        "value" : "La Administración de SAP NetWeaver Enterprise Portal es vulnerable si un usuario privilegiado carga contenido no confiable o malicioso que, al deserializarse, podría resultar en un alto impacto en la confidencialidad, integridad y disponibilidad del sistema anfitrión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3714585",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27686",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:38:11.147",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request processing and causing denial of service. This results in low impact on integrity and high impact on availability, while confidentiality remains unaffected."
      }, {
        "lang" : "es",
        "value" : "Debido a una falta de comprobación de autorización en SAP Business Warehouse (API de servicio), un atacante autenticado podría realizar acciones no autorizadas a través de un módulo de función RFC afectado. La explotación exitosa podría permitir cambios no autorizados en la configuración y el control, interrumpiendo potencialmente el procesamiento de solicitudes y causando denegación de servicio. Esto resulta en un bajo impacto en la integridad y un alto impacto en la disponibilidad, mientras que la confidencialidad no se ve afectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3703385",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27687",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:38:11.330",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company. This vulnerability has a high impact on confidentiality and does not affect integrity and availability."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de verificación de autorización en SAP S/4HANA HCM Portugal y SAP ERP HCM Portugal, un usuario con privilegios elevados podría acceder a datos sensibles pertenecientes a otra empresa. Esta vulnerabilidad tiene un alto impacto en la confidencialidad y no afecta la integridad y la disponibilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3701020",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27688",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:38:11.497",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially escalate their privileges and read the sensitive data, resulting in a limited impact on the confidentiality of the information stored. However, the integrity and availability of the system are not affected."
      }, {
        "lang" : "es",
        "value" : "Debido a la ausencia de una verificación de autorización en SAP NetWeaver Servidor de aplicaciones para ABAP, un atacante autenticado con privilegios de usuario podría leer Archivos de registro del Analizador de base de datos a través de un módulo de función RFC específico. El atacante con los privilegios necesarios para ejecutar este módulo de función podría potencialmente escalar sus privilegios y leer los datos sensibles, lo que resulta en un impacto limitado en la confidencialidad de la información almacenada. Sin embargo, la integridad y disponibilidad del sistema no se ven afectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3704740",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-27689",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2026-03-10T17:38:11.683",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Undergoing Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de consumo de recursos no controlado (denegación de servicio), un atacante autenticado con privilegios de usuario regular y acceso a la red puede invocar repetidamente un módulo de función habilitado remotamente con un parámetro de control de bucle excesivamente grande. Esto desencadena una ejecución de bucle prolongada que consume recursos excesivos del sistema, lo que podría dejar el sistema no disponible. La explotación exitosa resulta en una condición de denegación de servicio que afecta la disponibilidad, mientras que la confidencialidad y la integridad permanecen inafectadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-606"
        } ]
      } ],
      "references" : [ {
        "url" : "https://me.sap.com/notes/3719502",
        "source" : "cna@sap.com"
      }, {
        "url" : "https://url.sap/sapsecuritypatchday",
        "source" : "cna@sap.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28267",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2026-03-10T17:38:38.227",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos i-????? están configurados con ajustes de permisos de acceso a archivos incorrectos. Los archivos pueden ser creados o sobrescritos en el directorio del sistema o en el directorio de copia de seguridad por un usuario no administrativo."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV30" : [ {
          "source" : "vultures@jpcert.or.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "references" : [ {
        "url" : "https://biz3.optim.co.jp/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN17307628/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://sd.fjsd001.dfcenter.jp.fujitsu.com/portal/ja/kb/articles/windows%E3%81%AE%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%83%8E%E3%83%BC%E3%83%88",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260309_01.pdf",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260309_02.pdf",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.mobi-connect.net/file/ifilter/",
        "source" : "vultures@jpcert.or.jp"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28281",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:38:39.103",
      "lastModified" : "2026-03-13T16:19:38.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InstantCMS is a free and open source content management system. Prior to 2.18.1, InstantCMS does not validate CSRF tokens, which allows attackers grant moderator privileges to users, execute scheduled tasks, move posts to trash, and accept friend requests on behalf of the user. This vulnerability is fixed in 2.18.1."
      }, {
        "lang" : "es",
        "value" : "InstantCMS es un sistema de gestión de contenido gratuito y de código abierto. Antes de la versión 2.18.1, InstantCMS no valida los tokens CSRF, lo que permite a los atacantes otorgar privilegios de moderador a los usuarios, ejecutar tareas programadas, mover publicaciones a la papelera y aceptar solicitudes de amistad en nombre del usuario. Esta vulnerabilidad está corregida en la versión 2.18.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:instantcms:instantcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.18.1",
            "matchCriteriaId" : "941170FC-010F-46A8-9479-0D66316AF116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/instantsoft/icms2/security/advisories/GHSA-pp43-262q-h73m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28512",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:38:50.113",
      "lastModified" : "2026-03-13T16:12:14.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. From 2.0.0 to before 2.4.0, a flaw in callback URL validation allowed crafted redirect_uri values containing URL userinfo (@) to bypass legitimate callback pattern checks. If an attacker can trick a user into opening a malicious authorization link, the authorization code may be redirected to an attacker-controlled host. This vulnerability is fixed in 2.4.0."
      }, {
        "lang" : "es",
        "value" : "Pocket ID es un proveedor OIDC que permite a los usuarios autenticarse con sus passkeys en sus servicios. Desde la versión 2.0.0 hasta antes de la 2.4.0, un fallo en la validación de la URL de callback permitió que valores de redirect_uri manipulados que contenían información de usuario de URL (@) eludieran las comprobaciones legítimas del patrón de callback. Si un atacante puede engañar a un usuario para que abra un enlace de autorización malicioso, el código de autorización podría ser redirigido a un host controlado por el atacante. Esta vulnerabilidad se corrigió en la versión 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pocket-id:pocket_id:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "F0499052-79D0-4301-AB0E-4ABF8299027C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pocket-id/pocket-id/commit/3a339e33191c31b68bf57db907f800d9de5ffbc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pocket-id/pocket-id/security/advisories/GHSA-9h33-g3ww-mqff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-28513",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:38:50.303",
      "lastModified" : "2026-03-13T15:52:56.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse. This vulnerability is fixed in 2.4.0."
      }, {
        "lang" : "es",
        "value" : "Pocket ID es un proveedor OIDC que permite a los usuarios autenticarse con sus passkeys en sus servicios. Antes de la 2.4.0, el endpoint de token OIDC rechaza un código de autorización solo cuando tanto el ID del cliente es incorrecto como el código ha expirado. Esto permite el intercambio de código entre clientes y la reutilización de códigos expirados. Esta vulnerabilidad se ha corregido en la 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pocket-id:pocket_id:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "08E85575-4AB8-455C-837E-57B0052B5C3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pocket-id/pocket-id/security/advisories/GHSA-qh6q-598w-w6m2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pocket-id/pocket-id/security/advisories/GHSA-qh6q-598w-w6m2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-29773",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:39:03.210",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner, without privilege escalation. An attacker with privileged \"AdmissionPolicy\" create permissions (which isn't the default) could make use of 3 deprecated host-callback APIs: kubernetes/ingresses, kubernetes/namespaces, kubernetes/services. The attacker can craft a policy that exercises these deprecated API calls and would allow them read access to Ingresses, Namespaces, and Services resources respectively. \nThis attack is read-only, there is no write capability and no access to Secrets, ConfigMaps, or other resource types beyond these three."
      }, {
        "lang" : "es",
        "value" : "Kubewarden es un motor de políticas para Kubernetes. Los operadores de clúster de Kubewarden pueden otorgar permisos a los usuarios para desplegar AdmissionPolicies y AdmissionPolicyGroups con ámbito de nombre de espacio en sus Namespaces. Una de las promesas de Kubewarden es que los usuarios configurados pueden desplegar políticas con ámbito de nombre de espacio de manera segura, sin escalada de privilegios. Un atacante con permisos privilegiados de creación de 'AdmissionPolicy' (lo cual no es el valor predeterminado) podría hacer uso de 3 API de devolución de llamada de host obsoletas: kubernetes/ingresses, kubernetes/namespaces, kubernetes/services. El atacante puede elaborar una política que utilice estas llamadas a la API obsoletas y les permitiría acceso de lectura a los recursos Ingresses, Namespaces y Services respectivamente.\nEste ataque es de solo lectura, no hay capacidad de escritura y no hay acceso a Secrets, ConfigMaps u otros tipos de recursos más allá de estos tres."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubewarden/kubewarden-controller/commit/4e41b60ae44902d82d94101bac93fb77cae65651",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/kubewarden/kubewarden-controller/pull/1519",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-6r7f-3fwq-hq74",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-2364",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2026-03-10T17:39:29.587",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer."
      }, {
        "lang" : "es",
        "value" : "Si un usuario legítimo confirma una solicitud de autoactualización o inicia una instalación de un Sistema de Desarrollo CODESYS, un atacante local con pocos privilegios puede obtener derechos elevados debido a una vulnerabilidad TOCTOU en el instalador de CODESYS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "references" : [ {
        "url" : "https://certvde.com/de/advisories/VDE-2026-012",
        "source" : "info@cert.vde.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30862",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:14.123",
      "lastModified" : "2026-03-13T15:34:16.830",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget (TableWidgetV2). The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be interpolated into the DOM. By leveraging the \"Invite Users\" feature, an attacker with a regular user account (user@gmail.com) can force a System Administrator to execute a high-privileged API call (/api/v1/admin/env), resulting in a Full Administrative Account Takeover. This vulnerability is fixed in 1.96."
      }, {
        "lang" : "es",
        "value" : "Appsmith es una plataforma para construir paneles de administración, herramientas internas y cuadros de mando. Anterior a la 1.96, existe una vulnerabilidad XSS Almacenado Crítica en el Widget de Tabla (TableWidgetV2). La causa raíz es una falta de saneamiento de HTML en el pipeline de renderizado de componentes de React, permitiendo que atributos maliciosos sean interpolados en el DOM. Aprovechando la característica 'Invitar Usuarios', un atacante con una cuenta de usuario regular (user@gmail.com) puede forzar a un Administrador del Sistema a ejecutar una llamada a la API con altos privilegios (/api/v1/admin/env), resultando en una Toma de Control Completa de la Cuenta Administrativa. Esta vulnerabilidad está corregida en la 1.96."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.96",
            "matchCriteriaId" : "DB36CCD5-B655-45E3-97B3-FC5FC2B79B6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appsmithorg/appsmith/security/advisories/GHSA-5hw4-whxv-6794",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/appsmithorg/appsmith/security/advisories/GHSA-5hw4-whxv-6794",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30869",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:14.380",
      "lastModified" : "2026-03-13T15:33:01.727",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SiYuan is a personal knowledge management system. Prior to 3.5.10, a path traversal vulnerability in the /export endpoint allows an attacker to read arbitrary files from the server filesystem. By exploiting double‑encoded traversal sequences, an attacker can access sensitive files such as conf/conf.json, which contains secrets including the API token, cookie signing key, and workspace access authentication code. Leaking these secrets may enable administrative access to the SiYuan kernel API, and in certain deployment scenarios could potentially be chained into remote code execution (RCE). This vulnerability is fixed in 3.5.10."
      }, {
        "lang" : "es",
        "value" : "SiYuan es un sistema de gestión de conocimiento personal. Antes de la 3.5.10, una vulnerabilidad de salto de ruta en el endpoint /export permite a un atacante leer archivos arbitrarios del sistema de archivos del servidor. Al explotar secuencias de salto doblemente codificadas, un atacante puede acceder a archivos sensibles como conf/conf.json, que contiene secretos, incluyendo el token de la API, la clave de firma de cookies y el código de autenticación de acceso al espacio de trabajo. La filtración de estos secretos puede habilitar el acceso administrativo a la API del kernel de SiYuan, y en ciertos escenarios de despliegue podría potencialmente encadenarse en ejecución remota de código (RCE). Esta vulnerabilidad está corregida en la 3.5.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b3log:siyuan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.10",
            "matchCriteriaId" : "0E7B145F-4786-4534-B4D6-A947F4CD06FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2h2p-mvfx-868w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2h2p-mvfx-868w",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30870",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:14.530",
      "lastModified" : "2026-04-16T14:45:19.723",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerSync Service is the server-side component of the PowerSync sync engine. In version 1.20.0, when using new sync streams with config.edition: 3, certain subquery filters were ignored when determining which data to sync to users. Depending on the sync stream configuration, this could result in authenticated users syncing data that should have been restricted. Only queries that gate synchronization using subqueries without partitioning the result set are affected. This vulnerability is fixed in 1.20.1."
      }, {
        "lang" : "es",
        "value" : "PowerSync Service es el componente del lado del servidor del motor de sincronización PowerSync. En la versión 1.20.0, al usar nuevas transmisiones de sincronización con config.edition: 3, ciertos filtros de subconsulta fueron ignorados al determinar qué datos sincronizar con los usuarios. Dependiendo de la configuración de la transmisión de sincronización, esto podría resultar en que usuarios autenticados sincronicen datos que deberían haber sido restringidos. Solo las consultas que controlan la sincronización usando subconsultas sin particionar el conjunto de resultados se ven afectadas. Esta vulnerabilidad está corregida en la 1.20.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/powersync-ja/powersync-service/security/advisories/GHSA-q6wc-xx4m-92fj",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30885",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:14.730",
      "lastModified" : "2026-03-13T15:20:47.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WWBN AVideo is an open source video platform. Prior to 25.0, the /objects/playlistsFromUser.json.php endpoint returns all playlists for any user without requiring authentication or authorization. An unauthenticated attacker can enumerate user IDs and retrieve playlist information including playlist names, video IDs, and playlist status for any user on the platform. This vulnerability is fixed in 25.0."
      }, {
        "lang" : "es",
        "value" : "WWBN AVideo es una plataforma de video de código abierto. Antes de 25.0, el endpoint /objects/playlistsFromUser.json.php devuelve todas las listas de reproducción para cualquier usuario sin requerir autenticación o autorización. Un atacante no autenticado puede enumerar IDs de usuario y recuperar información de la lista de reproducción, incluyendo nombres de listas de reproducción, IDs de video y el estado de la lista de reproducción para cualquier usuario en la plataforma. Esta vulnerabilidad está corregida en 25.0."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "PROOF_OF_CONCEPT",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.0",
            "matchCriteriaId" : "8F7D4693-9554-407D-89B9-76D0C3B592AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/commit/12adc66913724736937a61130ae2779c299445ca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-6w2r-cfpc-23r5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-6w2r-cfpc-23r5",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30887",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:14.887",
      "lastModified" : "2026-03-12T13:41:22.380",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneUptime is a solution for monitoring and managing online services. Prior to 10.0.18, OneUptime allows project members to run custom Playwright/JavaScript code via Synthetic Monitors to test websites. However, the system executes this untrusted user code inside the insecure Node.js vm module. By leveraging a standard prototype-chain escape (this.constructor.constructor), an attacker can bypass the sandbox, gain access to the underlying Node.js process object, and execute arbitrary system commands (RCE) on the oneuptime-probe container. Furthermore, because the probe holds database/cluster credentials in its environment variables, this directly leads to a complete cluster compromise. This vulnerability is fixed in 10.0.18."
      }, {
        "lang" : "es",
        "value" : "OneUptime es una solución para monitorear y gestionar servicios en línea. Antes de la versión 10.0.18, OneUptime permite a los miembros del proyecto ejecutar código Playwright/JavaScript personalizado a través de Monitores Sintéticos para probar sitios web. Sin embargo, el sistema ejecuta este código de usuario no confiable dentro del módulo vm inseguro de Node.js. Al aprovechar un escape estándar de la cadena de prototipos (this.constructor.constructor), un atacante puede eludir la sandbox, obtener acceso al objeto de proceso subyacente de Node.js y ejecutar comandos de sistema arbitrarios (RCE) en el contenedor oneuptime-probe. Además, debido a que la sonda guarda las credenciales de la base de datos/clúster en sus variables de entorno, esto conduce directamente a un compromiso completo del clúster. Esta vulnerabilidad está corregida en la versión 10.0.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hackerbay:oneuptime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.18",
            "matchCriteriaId" : "CBDE45D3-FDDB-49A9-8065-4A95B2BBDEEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-h343-gg57-2q67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-h343-gg57-2q67",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30913",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:15.210",
      "lastModified" : "2026-04-29T20:49:53.037",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flarum is open-source forum software. When the flarum/nicknames extension is enabled, a registered user can set their nickname to a string that email clients interpret as a hyperlink. The nickname is inserted verbatim into plain-text notification emails, and recipients may be misled into visiting attacker-controlled domains."
      }, {
        "lang" : "es",
        "value" : "Flarum es un software de foro de código abierto. Cuando la extensión flarum/nicknames está habilitada, un usuario registrado puede establecer su apodo a una cadena que los clientes de correo electrónico interpretan como un hipervínculo. El apodo se inserta textualmente en los correos electrónicos de notificación de texto sin formato, y los destinatarios pueden ser engañados para que visiten dominios controlados por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-3c4m-j3g4-hh25",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/flarum/nicknames/commit/4dde99729abdce8f6e2a7437c86e38735fdcca28",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/flarum/nicknames/releases/tag/v1.8.",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-3c4m-j3g4-hh25",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30916",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:15.363",
      "lastModified" : "2026-03-20T20:16:47.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: Further investigation determined that the software behavior described did not falls within the project's threat model. See https://github.com/github/advisory-database/pull/7206 for more information."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30917",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:15.517",
      "lastModified" : "2026-04-16T14:45:19.723",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namespace page. This vulnerability is fixed in 2.1.1."
      }, {
        "lang" : "es",
        "value" : "Bucket es una extensión de MediaWiki para almacenar y recuperar datos estructurados en artículos. Antes de 2.1.1, un XSS almacenado puede insertarse en cualquier campo de tabla de Bucket que tenga un tipo PAGE, el cual se ejecutará cada vez que un usuario vea la página de espacio de nombres de Bucket correspondiente a esa tabla. Esta vulnerabilidad está corregida en 2.1.1."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "LOW",
            "subIntegrityImpact" : "LOW",
            "subAvailabilityImpact" : "LOW",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/weirdgloop/mediawiki-extensions-Bucket/commit/46ec08876ba9064987f20e8f42690854202a73ff",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/weirdgloop/mediawiki-extensions-Bucket/commit/cba9cf9c8751e9f3e6d559f44cadc39b84f7bff6",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/weirdgloop/mediawiki-extensions-Bucket/security/advisories/GHSA-8jrp-37wc-5v7c",
        "source" : "security-advisories@github.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30918",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:15.667",
      "lastModified" : "2026-03-13T14:55:46.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , a reflected XSS occurs when an application receives data from an untrusted source and uses it in its HTTP responses in a way that could lead to vulnerabilities. It is possible to inject malicious JavaScript code into a URL by adding a script in a parameter. This vulnerability was found in the fmDNS module. The parameter that is vulnerable to an XSS attack is log_search_query. This vulnerability is fixed in 6.0.4."
      }, {
        "lang" : "es",
        "value" : "facileManager es una suite modular de aplicaciones web diseñada pensando en el administrador de sistemas. Antes de la versión 6.0.4, se produce un XSS reflejado cuando una aplicación recibe datos de una fuente no confiable y los utiliza en sus respuestas HTTP de una manera que podría generar vulnerabilidades. Es posible inyectar código JavaScript malicioso en una URL añadiendo un script en un parámetro. Esta vulnerabilidad fue encontrada en el módulo fmDNS. El parámetro que es vulnerable a un ataque XSS es log_search_query. Esta vulnerabilidad está corregida en la versión 6.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facilemanager:facilemanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.4",
            "matchCriteriaId" : "ACF32B72-7187-4B8C-B452-67ACBA089B76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facileManager/facileManager/security/advisories/GHSA-284f-mff7-744x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30919",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:15.837",
      "lastModified" : "2026-03-13T14:51:44.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when an application receives data from an untrusted source and includes that data in its subsequent HTTP responses in an unsafe manner. This vulnerability was found in the fmDNS module. This vulnerability is fixed in 6.0.4."
      }, {
        "lang" : "es",
        "value" : "facileManager es una suite modular de aplicaciones web construida pensando en el administrador de sistemas. Antes de 6.0.4, el XSS almacenado (también conocido como XSS persistente o de segundo orden) ocurre cuando una aplicación recibe datos de una fuente no confiable e incluye esos datos en sus respuestas HTTP subsiguientes de manera insegura. Esta vulnerabilidad fue encontrada en el módulo fmDNS. Esta vulnerabilidad está corregida en 6.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facilemanager:facilemanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.4",
            "matchCriteriaId" : "ACF32B72-7187-4B8C-B452-67ACBA089B76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facileManager/facileManager/security/advisories/GHSA-2339-h9qw-q6vf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30920",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:16.000",
      "lastModified" : "2026-03-12T13:43:38.543",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled state and installation_id values and updates Project.gitHubAppInstallationId with isRoot: true without validating that the caller is authorized for the target project. This allows an attacker to overwrite another project's GitHub App installation binding. Related GitHub endpoints also lack effective authorization, so a valid installation ID can be used to enumerate repositories and create CodeRepository records in an arbitrary project. This vulnerability is fixed in 10.0.19."
      }, {
        "lang" : "es",
        "value" : "OneUptime es una solución para monitorear y gestionar servicios en línea. Antes de 10.0.19, la devolución de llamada de la aplicación GitHub de OneUptime confía en valores de estado y installation_id controlados por el atacante y actualiza Project.gitHubAppInstallationId con isRoot: true sin validar que el llamador esté autorizado para el proyecto objetivo. Esto permite a un atacante sobrescribir la vinculación de instalación de la aplicación GitHub de otro proyecto. Los puntos finales de GitHub relacionados también carecen de autorización efectiva, por lo que un ID de instalación válido puede ser utilizado para enumerar repositorios y crear registros de CodeRepository en un proyecto arbitrario. Esta vulnerabilidad se corrige en 10.0.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-639"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hackerbay:oneuptime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19",
            "matchCriteriaId" : "9642D1F1-F28F-4272-A98F-F33919F80F21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-656w-6f6c-m9r6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30921",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:16.160",
      "lastModified" : "2026-03-12T13:44:49.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project users to submit custom Playwright code that is executed on the oneuptime-probe service. In the current implementation, this untrusted code is run inside Node's vm and is given live host Playwright objects such as browser and page. This creates a distinct server-side RCE primitive: the attacker does not need the classic this.constructor.constructor(...) sandbox escape. Instead, the attacker can directly use the injected Playwright browser object to reach browser.browserType().launch(...) and spawn an arbitrary executable on the probe host/container. This vulnerability is fixed in 10.0.20."
      }, {
        "lang" : "es",
        "value" : "OneUptime es una solución para monitorear y gestionar servicios en línea. Antes de la versión 10.0.20, los Monitores Sintéticos de OneUptime permiten a usuarios de proyecto con bajos privilegios enviar código Playwright personalizado que se ejecuta en el servicio oneuptime-probe. En la implementación actual, este código no confiable se ejecuta dentro de la vm de Node y se le otorgan objetos Playwright de host en vivo como navegador y página. Esto crea una primitiva RCE del lado del servidor distinta: el atacante no necesita el clásico escape de sandbox this.constructor.constructor(...). En su lugar, el atacante puede usar directamente el objeto navegador de Playwright inyectado para alcanzar browser.browserType().launch(...) y generar un ejecutable arbitrario en el host/contenedor de la sonda. Esta vulnerabilidad se corrige en la versión 10.0.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hackerbay:oneuptime:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20",
            "matchCriteriaId" : "47A8362E-263D-46E0-8339-83F9AFDC973D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-4j36-39gm-8vq8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30925",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:16.313",
      "lastModified" : "2026-03-11T19:53:57.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.0-alpha.14 and 8.6.11, a malicious client can subscribe to a LiveQuery with a crafted $regex pattern that causes catastrophic backtracking, blocking the Node.js event loop. This makes the entire Parse Server unresponsive, affecting all clients. Any Parse Server deployment with LiveQuery enabled is affected. The attacker only needs the application ID and JavaScript key, both of which are public in client-side apps. This only affects LiveQuery subscription matching, which evaluates regex in JavaScript on the Node.js event loop. Normal REST and GraphQL queries are not affected because their regex is evaluated by the database engine. This vulnerability is fixed in 9.5.0-alpha.14 and 8.6.11."
      }, {
        "lang" : "es",
        "value" : "Parse Server es un backend de código abierto que puede ser desplegado en cualquier infraestructura que pueda ejecutar Node.js. Antes de 9.5.0-alpha.14 y 8.6.11, un cliente malicioso puede suscribirse a una LiveQuery con un patrón $regex manipulado que causa un retroceso catastrófico, bloqueando el bucle de eventos de Node.js. Esto hace que todo el Parse Server no responda, afectando a todos los clientes. Cualquier despliegue de Parse Server con LiveQuery habilitado se ve afectado. El atacante solo necesita el ID de aplicación y la clave de JavaScript, ambos son públicos en las aplicaciones del lado del cliente. Esto solo afecta la coincidencia de suscripción de LiveQuery, que evalúa expresiones regulares en JavaScript en el bucle de eventos de Node.js. Las consultas REST y GraphQL normales no se ven afectadas porque sus expresiones regulares son evaluadas por el motor de la base de datos. Esta vulnerabilidad está corregida en 9.5.0-alpha.14 y 8.6.11."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "PRESENT",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.6.11",
            "matchCriteriaId" : "34762D4D-4428-4142-9C28-3C38B316E35B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.0",
            "matchCriteriaId" : "77A07A2F-C8ED-4D78-A9C0-66AB42F69F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3E9F95CF-EEE1-42FC-904E-321F05E3DE4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "18465CD3-DB00-4A7C-99D9-8B841829EEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "17BBDC30-3BA1-4608-B525-3E4753682FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "384713D3-BD33-4021-AE0B-E752A2CC814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "518F4432-3E3D-4A97-973C-536D68D47928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5C02D6F0-5A3A-45F5-8A74-F75A8CCAE7DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "103C9745-031B-4822-A19C-A61375FBB1AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D67029D-C1BD-4D46-A84F-C52B4D364268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B10930D-B416-4D9A-BA26-F0AD22BFAE28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "72794836-5CFB-4928-BB22-D7DE813809B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FA2C4C1E-3AE6-48E0-8B59-80554AE85BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "40C8E499-E5C6-48DD-AE36-B73B2B6ADA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:9.5.0:alpha9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E92B2675-5D49-404B-BEC1-7037D6C1ACD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/8.6.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/releases/tag/9.5.0-alpha.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-mf3j-86qx-cq5j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-30927",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2026-03-10T17:40:16.520",
      "lastModified" : "2026-03-13T14:45:47.863",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation logic allows any user who can participate in an event to register OTHER users by manipulating the user_uuid GET parameter. The condition uses || (OR), meaning if possibleToParticipate() returns true (event is open for participation), ANY user - not just leaders - can specify a different user_uuid and register/cancel participation for that user. The code then operates on $user->getValue('usr_id') (the target user from user_uuid) rather than the current user. This vulnerability is fixed in 5.0.6."
      }, {
        "lang" : "es",
        "value" : "Admidio es una solución de gestión de usuarios de código abierto. Antes de la 5.0.6, en modules/events/events_function.php, la lógica de participación en eventos permite a cualquier usuario que pueda participar en un evento registrar a OTROS usuarios manipulando el parámetro GET user_uuid. La condición utiliza || (OR), lo que significa que si possibleToParticipate() devuelve verdadero (el evento está abierto para la participación), CUALQUIER usuario - no solo los líderes - puede especificar un user_uuid diferente y registrar/cancelar la participación para ese usuario. El código entonces opera sobre $user-&gt;getValue('usr_id') (el usuario objetivo de user_uuid) en lugar del usuario actual. Esta vulnerabilidad está corregida en la 5.0.6."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.6",
            "matchCriteriaId" : "883414A9-6A14-4B2A-B582-F45E8E60BA91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Admidio/admidio/commit/e47f70cc3cbcdb39635fdbaaef02d19f604b8c3e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Admidio/admidio/issues/1985",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Admidio/admidio/security/advisories/GHSA-7pfv-hr63-h7cw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-3585",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-10T17:40:37.773",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the 'ajax_create_import' function. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information."
      }, {
        "lang" : "es",
        "value" : "El plugin The Events Calendar para WordPress es vulnerable a salto de ruta en todas las versiones hasta la 6.15.17, inclusive, a través de la función ajax_create_import. Esto permite a atacantes autenticados, con acceso de nivel Autor o superior, leer el contenido de archivos arbitrarios en el servidor, que pueden contener información sensible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.15.17/src/Tribe/Aggregator/Tabs/New.php#L466",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://research.cleantalk.org/cve-2026-3585/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/92e404ab-fe2b-45b3-b8ff-672f7888b747?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1261",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2026-03-10T18:18:04.723",
      "lastModified" : "2026-04-22T21:27:27.950",
      "vulnStatus" : "Deferred",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El plugin MetForm Pro para WordPress es vulnerable a cross-site scripting almacenado a través de la función de Cuestionario en todas las versiones hasta la 3.9.6, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/metform-pro/tags/3.9.5/core/features/quiz/loader.php#L121",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/metform-pro/tags/3.9.5/core/features/quiz/loader.php#L69",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/metform-pro/tags/3.9.5/core/features/quiz/loader.php#L85",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wpmet.com/plugin/metform/roadmaps/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e6361ada-f2ba-404e-b9d3-b169da44aa90?source=cve",
        "source" : "security@wordfence.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-1286",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2026-03-10T18:18:04.917",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file."
      }, {
        "lang" : "es",
        "value" : "CWE-502: Existe una vulnerabilidad de deserialización de datos no confiables que podría conducir a la pérdida de confidencialidad, integridad y una posible ejecución remota de código en la estación de trabajo cuando un usuario autenticado como administrador abre un archivo de proyecto malicioso."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-069-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-069-03.pdf",
        "source" : "cybersecurity@se.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-20967",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:05.987",
      "lastModified" : "2026-03-13T17:11:29.083",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en System Center Operations Manager permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0BFD64D6-E8BB-4606-8D4C-EAE586CAD791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_1:*:*:*:*:*:*",
            "matchCriteriaId" : "60D16C06-DC8C-4990-A813-DC8FB599F2BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_1_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "4E460428-07C5-4CC9-A8E1-3B9D1049C945"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_2:*:*:*:*:*:*",
            "matchCriteriaId" : "A06A8B5C-19CB-471E-A6CE-8A409A75D215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_2_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "00FE8943-EB78-4E7B-892D-89633450E1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_3:*:*:*:*:*:*",
            "matchCriteriaId" : "C764DB6F-3551-4F97-9F1F-F558224034BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_3_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CBAAAF-FDD7-4FA7-AB25-AEEE2D7959FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_4:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC811F7-AA65-405D-B25E-1A3DFA221322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_4_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "14BCC26E-10BF-4046-8000-0423161486A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_5:*:*:*:*:*:*",
            "matchCriteriaId" : "AE41DAE4-91BE-4198-9ACB-33481D9B216F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_5_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "596A894F-CDFC-4BB9-B3C0-73E1C8334025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_6:*:*:*:*:*:*",
            "matchCriteriaId" : "AE42550B-80DB-4977-80FF-F1A329DE2663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD632BE-513E-4581-9C8C-3A13DA1ADF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C221E0-42CC-480E-B704-AF27429FA20E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_1_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBC5F8D-F48D-4CAA-830A-181F3019A804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_2:*:*:*:*:*:*",
            "matchCriteriaId" : "82E3989D-24AC-4229-9C61-4F6A7E15C592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_2_hotfix:*:*:*:*:*:*",
            "matchCriteriaId" : "BC796BB3-1BBA-41FB-AA42-1C5643183835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6ED73D7-3055-47FF-8641-A8AA3E3C43E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2025:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0507AA0D-CBD5-400D-B24C-0549778F6029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2025:update_rollup_1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE4BD19-1750-4C5D-B75C-05E9830AA632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20967",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21262",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:06.190",
      "lastModified" : "2026-03-13T19:33:50.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en SQL Server permite a un atacante autorizado elevar privilegios a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2016:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "13.0.6300.2",
            "versionEndExcluding" : "13.0.6480.4",
            "matchCriteriaId" : "0512F204-5C6C-416C-BAE9-37A46C517A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2016:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "13.0.7000.253",
            "versionEndExcluding" : "13.0.7075.5",
            "matchCriteriaId" : "FF21E018-C759-44FA-B1BF-1A97054606E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2017:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "14.0.1000.169",
            "versionEndExcluding" : "14.0.2100.4",
            "matchCriteriaId" : "36B7482B-D75C-4EFD-AD60-251BAD0A9FE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2017:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "14.0.3006.16",
            "versionEndExcluding" : "14.0.3520.4",
            "matchCriteriaId" : "AAE03DE1-E3F6-4450-9B06-695C0BEC4517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "15.0.2000.5",
            "versionEndExcluding" : "15.0.2160.4",
            "matchCriteriaId" : "EB3E749F-531E-4516-A23E-C62FB6564CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "15.0.4003.23",
            "versionEndExcluding" : "15.4460.4",
            "matchCriteriaId" : "06D61310-5AD1-4CFB-9416-EA47CEE5479B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "16.0.1000.6",
            "versionEndExcluding" : "16.0.1170.5",
            "matchCriteriaId" : "930A8DB4-E8DF-4C8B-8D7C-43DDB705D5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "16.0.4003.1",
            "versionEndExcluding" : "16.0.4240.4",
            "matchCriteriaId" : "DA833891-A29B-46C0-8945-693E70C0AA57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "17.0.1000.7",
            "versionEndExcluding" : "17.0.1105.2",
            "matchCriteriaId" : "9498FF0D-E8A3-4430-AE23-EC2BF0631002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
            "versionStartIncluding" : "17.0.4006.2",
            "versionEndExcluding" : "17.0.4020.2",
            "matchCriteriaId" : "EE7E80DA-728A-4BA2-9D72-71577FE83723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21262",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-21791",
      "sourceIdentifier" : "psirt@hcl.com",
      "published" : "2026-03-10T18:18:06.560",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HCL Sametime for Android is impacted by a sensitive information disclosure.  Hostnames information is written in application logs and certain URL"
      }, {
        "lang" : "es",
        "value" : "HCL Sametime para Android se ve afectado por una revelación de información sensible. La información de los nombres de host se escribe en los registros de la aplicación y en ciertas URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@hcl.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@hcl.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129451",
        "source" : "psirt@hcl.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22572",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-03-10T18:18:12.250",
      "lastModified" : "2026-03-16T14:18:11.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.11, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.2 through 7.2.11 may allow  an attacker with knowledge of the admins password to bypass multifactor authentication checks via submitting multiple crafted requests."
      }, {
        "lang" : "es",
        "value" : "Una omisión de autenticación utilizando una vulnerabilidad de ruta o canal alternativo en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.3, FortiAnalyzer 7.4.0 hasta 7.4.7, FortiAnalyzer 7.2.2 hasta 7.2.11, FortiAnalyzer Cloud 7.6.0 hasta 7.6.3, FortiAnalyzer Cloud 7.4.0 hasta 7.4.7, FortiAnalyzer Cloud 7.2.2 hasta 7.2.10, FortiManager 7.6.0 hasta 7.6.3, FortiManager 7.4.0 hasta 7.4.7, FortiManager 7.2.2 hasta 7.2.11, FortiManager Cloud 7.6.0 hasta 7.6.3, FortiManager Cloud 7.4.0 hasta 7.4.7, FortiManager Cloud 7.2.2 hasta 7.2.10 puede permitir a un atacante con conocimiento de la contraseña del administrador omitir las comprobaciones de autenticación multifactor mediante el envío de múltiples solicitudes manipuladas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "7.4.8",
            "matchCriteriaId" : "0105EF79-42B6-4891-993F-CA28F95D1764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "7E7EC074-7835-438D-8501-D7FA6A84F280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "7.4.8",
            "matchCriteriaId" : "F4211463-C85D-4D66-92A8-AFE961FEECAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "0EC7E465-5168-4BB8-89D3-244E6DBF70A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "7.4.8",
            "matchCriteriaId" : "B6B453F7-5AD8-4C18-9218-E8880D8D6D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.4",
            "matchCriteriaId" : "9AD9F018-F775-4676-AA63-454BE5996A5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-090",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22614",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2026-03-10T18:18:12.420",
      "lastModified" : "2026-03-11T13:53:47.157",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host\nmachine could potentially read the sensitive information stored and tamper with the project file. This security issue has been fixed in the latest version of Eaton EasySoft which is available on the Eaton download centre."
      }, {
        "lang" : "es",
        "value" : "El mecanismo de cifrado utilizado en el archivo de proyecto EasySoft de Eaton era inseguro y susceptible a ataques de fuerza bruta, un atacante con acceso a este archivo y la máquina anfitriona local podría potencialmente leer la información sensible almacenada y manipular el archivo de proyecto. Este problema de seguridad ha sido solucionado en la última versión de Eaton EasySoft, que está disponible en el centro de descargas de Eaton."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1023.pdf",
        "source" : "CybersecurityCOE@eaton.com"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22627",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-03-10T18:18:12.570",
      "lastModified" : "2026-04-09T20:54:45.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de copia de búfer sin verificar el tamaño de la entrada ('desbordamiento de búfer clásico') en Fortinet FortiSwitchAXFixed 1.0.0 hasta 1.0.1 puede permitir a un atacante no autenticado dentro de la misma red adyacente ejecutar código o comandos no autorizados en el dispositivo mediante el envío de un paquete LLDP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiswitchaxfixed:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "1DE31518-C416-48C9-9B35-CA73232CDBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-086",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22628",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-03-10T18:18:12.720",
      "lastModified" : "2026-04-09T20:53:56.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiSwitchAXFixed 1.0.0 hasta 1.0.1 puede permitir a un administrador autenticado ejecutar comandos del sistema a través de un archivo de configuración SSH específicamente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiswitchaxfixed:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "1DE31518-C416-48C9-9B35-CA73232CDBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-085",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-22629",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-03-10T18:18:12.880",
      "lastModified" : "2026-03-13T16:04:03.660",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer Cloud 7.4 all versions, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud 7.0 all versions, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4 all versions, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4 all versions, FortiManager Cloud 7.2 all versions, FortiManager Cloud 7.0 all versions, FortiManager Cloud 6.4 all versions may allow an attacker to bypass bruteforce protections via exploitation of race conditions. The latter raises the complexity of practical exploitation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de restricción inadecuada de intentos excesivos de autenticación en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4 todas las versiones, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer 6.4 todas las versiones, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 hasta 7.4.7, FortiAnalyzer Cloud 7.2.1 hasta 7.2.10, FortiAnalyzer Cloud 7.0.1 hasta 7.0.14, FortiAnalyzer Cloud 6.4 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4 todas las versiones, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager 6.4 todas las versiones, FortiManager Cloud 7.6.2 hasta 7.6.3, FortiManager Cloud 7.4.1 hasta 7.4.7, FortiManager Cloud 7.2.1 hasta 7.2.10, FortiManager Cloud 7.0.1 hasta 7.0.14, FortiManager Cloud 6.4 todas las versiones puede permitir a un atacante eludir las protecciones de fuerza bruta mediante la explotación de condiciones de carrera. Esto último aumenta la complejidad de la explotación práctica."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "81DF30CD-E9E1-4FFC-A639-38A29B49D47D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "49CFD5BB-7BB4-42EC-8015-1576CC040590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "A27AF3FB-4648-488C-9980-93ED0C6C3CCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "A4F04807-CD82-4C8B-A04F-0875BE791F0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-079",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23239",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-10T18:18:13.383",
      "lastModified" : "2026-04-02T15:16:25.183",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nespintcp: Fix race condition in espintcp_close()\n\nThis issue was discovered during a code audit.\n\nAfter cancel_work_sync() is called from espintcp_close(),\nespintcp_tx_work() can still be scheduled from paths such as\nthe Delayed ACK handler or ksoftirqd.\nAs a result, the espintcp_tx_work() worker may dereference a\nfreed espintcp ctx or sk.\n\nThe following is a simple race scenario:\n\n           cpu0                             cpu1\n\n  espintcp_close()\n    cancel_work_sync(&ctx->work);\n                                     espintcp_write_space()\n                                       schedule_work(&ctx->work);\n\nTo prevent this race condition, cancel_work_sync() is\nreplaced with disable_work_sync()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nespintcp: Corrección de condición de carrera en espintcp_close()\n\nEste problema fue descubierto durante una auditoría de código.\n\nDespués de que se llama a cancel_work_sync() desde espintcp_close(), espintcp_tx_work() aún puede ser programado desde rutas como el gestor de ACK Retrasado o ksoftirqd.\nComo resultado, el trabajador espintcp_tx_work() puede desreferenciar un ctx o sk de espintcp liberado.\n\nEl siguiente es un escenario de condición de carrera simple:\n\n           cpu0                             cpu1\n\n  espintcp_close()\n    cancel_work_sync(&amp;ctx-&gt;work);\n                                     espintcp_write_space()\n                                       schedule_work(&amp;ctx-&gt;work);\n\nPara prevenir esta condición de carrera, cancel_work_sync() es reemplazado por disable_work_sync()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/022ff7f347588de6e17879a1da6019647b21321b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/664e9df53226b4505a0894817ecad2c610ab11d8",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/e1512c1db9e8794d8d130addd2615ec27231d994",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/f7ad8b1d0e421c524604d5076b73232093490d5c",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23240",
      "sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "published" : "2026-03-10T18:18:13.533",
      "lastModified" : "2026-04-02T15:16:25.907",
      "vulnStatus" : "Awaiting Analysis",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: Fix race condition in tls_sw_cancel_work_tx()\n\nThis issue was discovered during a code audit.\n\nAfter cancel_delayed_work_sync() is called from tls_sk_proto_close(),\ntx_work_handler() can still be scheduled from paths such as the\nDelayed ACK handler or ksoftirqd.\nAs a result, the tx_work_handler() worker may dereference a freed\nTLS object.\n\nThe following is a simple race scenario:\n\n          cpu0                         cpu1\n\ntls_sk_proto_close()\n  tls_sw_cancel_work_tx()\n                                 tls_write_space()\n                                   tls_sw_write_space()\n                                     if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask))\n    set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask);\n    cancel_delayed_work_sync(&ctx->tx_work.work);\n                                     schedule_delayed_work(&tx_ctx->tx_work.work, 0);\n\nTo prevent this race condition, cancel_delayed_work_sync() is\nreplaced with disable_delayed_work_sync()."
      }, {
        "lang" : "es",
        "value" : "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ntls: Corrección de condición de carrera en tls_sw_cancel_work_tx()\n\nEste problema fue descubierto durante una auditoría de código.\n\nDespués de que se llama a cancel_delayed_work_sync() desde tls_sk_proto_close(), tx_work_handler() aún puede ser programado desde rutas como el gestor de ACK Retrasado o ksoftirqd. Como resultado, el trabajador tx_work_handler() puede desreferenciar un objeto TLS liberado.\n\nEl siguiente es un escenario de condición de carrera simple:\n\n          cpu0                         cpu1\n\ntls_sk_proto_close()\n  tls_sw_cancel_work_tx()\n                                 tls_write_space()\n                                   tls_sw_write_space()\n                                     if (!test_and_set_bit(BIT_TX_SCHEDULED, &amp;tx_ctx-&gt;tx_bitmask))\n    set_bit(BIT_TX_SCHEDULED, &amp;ctx-&gt;tx_bitmask);\n    cancel_delayed_work_sync(&amp;ctx-&gt;tx_work.work);\n                                     schedule_delayed_work(&amp;tx_ctx-&gt;tx_work.work, 0);\n\nPara prevenir esta condición de carrera, cancel_delayed_work_sync() es reemplazado por disable_delayed_work_sync()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "references" : [ {
        "url" : "https://git.kernel.org/stable/c/17153f154f80be2b47ebf52840f2d8f724eb2f3b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/7bb09315f93dce6acc54bf59e5a95ba7365c2be4",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/854cd32bc74fe573353095e90958490e4e4d641b",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      }, {
        "url" : "https://git.kernel.org/stable/c/a5de36d6cee74a92c1a21b260bc507e64bc451de",
        "source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23654",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:13.743",
      "lastModified" : "2026-03-13T21:02:19.767",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Dependencia de un componente de terceros vulnerable en el repositorio de GitHub: zero-shot-scfoundation permite a un atacante no autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:zero-shot-scfoundation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.1",
            "matchCriteriaId" : "0774CCE9-ADD0-4E77-B80F-96199E5D8B10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23654",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23656",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:13.900",
      "lastModified" : "2026-03-12T19:15:00.713",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network."
      }, {
        "lang" : "es",
        "value" : "Verificación insuficiente de la autenticidad de los datos en el Instalador de Aplicaciones de Windows permite a un atacante no autorizado realizar suplantación a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_app:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "2.0.964.0",
            "matchCriteriaId" : "6AEA65A6-BF6A-4C20-B8F8-B3A1DB1988AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23656",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23660",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:14.060",
      "lastModified" : "2026-03-18T17:39:18.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en Azure Portal Windows Admin Center permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:azure:*:*",
            "versionEndExcluding" : "2.6.4",
            "matchCriteriaId" : "438C3FDA-B710-4AD1-A1E2-97E7D8E07F3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23660",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23661",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:14.210",
      "lastModified" : "2026-03-12T19:31:06.573",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Transmisión en texto claro de información sensible en Azure IoT Explorer permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_iot_explorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.13",
            "matchCriteriaId" : "BA6401CB-2490-4A38-8F23-363906BAF296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23661",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23662",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:14.373",
      "lastModified" : "2026-03-12T19:32:14.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Falta de autenticación para una función crítica en Azure IoT Explorer permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        }, {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_iot_explorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.13",
            "matchCriteriaId" : "BA6401CB-2490-4A38-8F23-363906BAF296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23662",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23664",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:14.523",
      "lastModified" : "2026-03-12T19:31:49.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network."
      }, {
        "lang" : "es",
        "value" : "Restricción inadecuada de canal de comunicación a puntos finales previstos en Azure IoT Explorer permite a un atacante no autorizado divulgar información a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-923"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_iot_explorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.15.13",
            "matchCriteriaId" : "BA6401CB-2490-4A38-8F23-363906BAF296"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23664",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23665",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:14.690",
      "lastModified" : "2026-03-20T18:33:39.940",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Máquinas Virtuales Azure Linux permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:linux_diagnostic_extension:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "2.1.24",
            "matchCriteriaId" : "C656336E-6D49-42DD-A810-D5BCE75A19E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23665",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23667",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:14.857",
      "lastModified" : "2026-03-12T20:09:13.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en Broadcast DVR permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23667",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23668",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:15.073",
      "lastModified" : "2026-03-12T20:23:17.597",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el Componente de gráficos de Microsoft permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23668",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23669",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:15.357",
      "lastModified" : "2026-03-24T17:16:30.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in RPC Runtime allows an authorized attacker to execute code over a network."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en componentes del Spooler de impresión de Windows permite a un atacante autorizado ejecutar código a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23669",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23671",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:15.683",
      "lastModified" : "2026-03-13T13:47:00.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en el controlador del protocolo RFCOM de Bluetooth de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23671",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23672",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:15.980",
      "lastModified" : "2026-03-13T17:13:24.803",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Windows Formato de Disco Universal Controlador del Sistema de Archivos (UDFS) Elevación de Privilegios vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23672",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23673",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:16.307",
      "lastModified" : "2026-03-13T18:42:20.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en el Sistema de Archivos Resistente (ReFS) de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23673",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23674",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:16.630",
      "lastModified" : "2026-03-13T18:41:00.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network."
      }, {
        "lang" : "es",
        "value" : "Resolución incorrecta de la equivalencia de rutas en Windows MapUrlToZone permite a un atacante no autorizado eludir una característica de seguridad a través de una red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-41"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23674",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-23907",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2026-03-10T18:18:16.960",
      "lastModified" : "2026-03-13T16:45:28.490",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue affects the \nExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.\n\n\nThe ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because \nthe filename that is obtained from \nPDComplexFileSpecification.getFilename() is appended to the extraction path.\n\nUsers who have copied this example into their production code should \nreview it to ensure that the extraction path is acceptable. The example \nhas been changed accordingly, now the initial path and the extraction \npaths are converted into canonical paths and it is verified that \nextraction path contains the initial path. The documentation has also \nbeen adjusted."
      }, {
        "lang" : "es",
        "value" : "Este problema afecta al ejemplo ExtractEmbeddedFiles en Apache PDFBox: desde 2.0.24 hasta 2.0.35, desde 3.0.0 hasta 3.0.6.\n\nEl ejemplo ExtractEmbeddedFiles contiene una vulnerabilidad de salto de ruta (CWE-22) porque el nombre de archivo que se obtiene de PDComplexFileSpecification.getFilename() se añade a la ruta de extracción.\n\nLos usuarios que han copiado este ejemplo en su código de producción deberían revisarlo para asegurarse de que la ruta de extracción es aceptable. El ejemplo ha sido modificado en consecuencia, ahora la ruta inicial y las rutas de extracción se convierten en rutas canónicas y se verifica que la ruta de extracción contiene la ruta inicial. La documentación también ha sido ajustada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.24",
            "versionEndIncluding" : "2.0.35",
            "matchCriteriaId" : "1C68269E-0203-4CC0-A46A-79EE0707D72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "0C8FF3B3-3A97-4F50-BCDE-8EEA175F4C61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JoakimBulow/",
        "source" : "security@apache.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.apache.org/thread/gyfq5tcrxfv7rx0z2yyx4hb3h53ndffw",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2026/03/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24017",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-03-10T18:18:17.400",
      "lastModified" : "2026-03-12T17:10:26.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to bypass the authentication rate-limit via crafted requests. The success of the attack depends on the attacker's resources and the password target complexity."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Control Inadecuado de la Frecuencia de Interacción [CWE-799] en Fortinet FortiWeb 8.0.0 hasta 8.0.2, FortiWeb 7.6.0 hasta 7.6.5, FortiWeb 7.4.0 hasta 7.4.10, FortiWeb 7.2.0 hasta 7.2.11, FortiWeb 7.0.0 hasta 7.0.11 puede permitir a un atacante remoto no autenticado eludir el límite de tasa de autenticación mediante solicitudes manipuladas. El éxito del ataque depende de los recursos del atacante y de la complejidad de la contraseña objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-799"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.12",
            "matchCriteriaId" : "CDE13E2A-CEC3-4FC7-98AD-11CA1EAEC0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.12",
            "matchCriteriaId" : "551127B2-DCE9-403D-8073-ACD717CD0B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.11",
            "matchCriteriaId" : "F43B659D-6EA7-46F5-9778-0FD0FD036AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.6",
            "matchCriteriaId" : "1E5D27F6-0659-4D98-9585-FD84B433CCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "C82F9CC0-7683-4CDE-8370-153400605B55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-082",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24018",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2026-03-10T18:18:17.560",
      "lastModified" : "2026-03-13T19:04:40.047",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguimiento de enlaces simbólicos (Symlink) de UNIX en Fortinet FortiClientLinux 7.4.0 hasta 7.4.4, FortiClientLinux 7.2.2 hasta 7.2.12 puede permitir a un usuario local y no privilegiado escalar sus privilegios a root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "7.2.13",
            "matchCriteriaId" : "C00E2D97-4175-47C4-82F0-BB30DD1B8314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "022517B5-255A-4794-9813-2987CDBDAC43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-083",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24282",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:17.943",
      "lastModified" : "2026-03-13T19:27:14.453",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de límites en el Servicio de Enrutamiento de Mensajes Push permite a un atacante autorizado divulgar información localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24282",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24283",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:18.170",
      "lastModified" : "2026-03-13T19:26:14.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en el Servidor de Archivos de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24283",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24285",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:18.370",
      "lastModified" : "2026-03-13T19:25:11.460",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en Windows Win32K permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "16.0.19822.20000",
            "matchCriteriaId" : "7FD93048-8E0A-4316-BC0E-3182FC19B25D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24285",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24287",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:18.683",
      "lastModified" : "2026-03-13T19:23:33.070",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Control externo del nombre o la ruta de un archivo en el kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24287",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24288",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:18.943",
      "lastModified" : "2026-03-13T19:16:25.093",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en montículo en Windows Mobile Broadband permite a un atacante no autorizado ejecutar código con un ataque físico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24288",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24289",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:19.110",
      "lastModified" : "2026-03-13T19:15:45.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el kernel de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24289",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24290",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:19.457",
      "lastModified" : "2026-03-13T19:14:28.403",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Control de acceso inadecuado en el Sistema de Archivos Proyectado de Windows permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24290",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24291",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:19.733",
      "lastModified" : "2026-03-19T17:16:22.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Asignación incorrecta de permisos para un recurso crítico en la Infraestructura de Accesibilidad de Windows (ATBroker.exe) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "5AA53525-2EE3-4815-9EEB-49572C16AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "CB112C3D-A9C8-41A3-A3DD-ACB42387D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF473A-566D-45FB-868D-03F3907E094A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "5FC02001-58B6-4EE4-9552-003F2412ED0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "E8B076BC-42F9-4972-BE73-3874E694CD3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22631.6783",
            "matchCriteriaId" : "6E98A971-B530-4289-B7B2-8403BD2DAD07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "3381C469-C150-4724-8A53-E11794797D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.7979",
            "matchCriteriaId" : "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "58F3AA3B-9960-48F9-B013-8CF6BA09893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26200.7979",
            "matchCriteriaId" : "F113DAFC-91E5-42C1-A2C3-B9C9286D240B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "30606CC6-21D2-4EAC-B568-DABA2786EC61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.28000.1719",
            "matchCriteriaId" : "62E818F7-1053-4CD2-9CCE-EF84D3FA7861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.8957",
            "matchCriteriaId" : "E31E4CDC-138B-41CF-927A-0528A6F605FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "2DA555D5-4452-4CD0-AB68-BA175C34EC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.4830",
            "matchCriteriaId" : "C037CFF5-1294-4724-A28C-42B72A7F0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.25398.2207",
            "matchCriteriaId" : "4A3C9232-BEAB-4D6B-B465-4C4643098054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.26100.32463",
            "matchCriteriaId" : "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24291",
        "source" : "secure@microsoft.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mdsecactivebreach/RegPwn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mdsec.co.uk/2026/03/rip-regpwn/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2026-24292",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2026-03-10T18:18:20.053",
      "lastModified" : "2026-03-13T19:02:15.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally."
      }, {
        "lang" : "es",
        "value" : "Uso después de liberar en el Servicio de Plataforma de Dispositivos Conectados (Cdpsvc) permite a un atacante autorizado elevar privilegios localmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "B2DCF6CD-BA92-4DB2-855E-DE8158AC6B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.8511",
            "matchCriteriaId" : "40D953EB-E3B1-471A-8400-957984A092EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "35CA4CA1-5EDE-4612-9C17-9AA167F773B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "C18770C8-2B7F-4212-8A4F-1101ABFF4C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.7058",
            "matchCriteriaId" : "DD070C42-5A71-4D20-B9BA-766565DFC99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "17DCF9E0-A09A-48A3-B281-D22EE76B8062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.7058",
            "matchCriteriaId" : "51FF47